Top Risks

• NewTab override monetizes every new tab; uninstall+install URL hijack signals traffic-monetization shell.
• No CSP on MV3 extension with innerHTML sinks in popup.js and calendar.js raises DOM-XSS exposure.
• No developer name listed; publisher identity weakly established despite verified publisher badge.
• Fan-content/wallpaper shell pattern (+1.5 Webstore) for K-pop group — typical low-effort traffic vehicle.
• Install/uninstall URL hijack pattern with UTM tracking indicates monetization-oriented lifecycle management.

Evidence

• newtab_override manifest chrome_url_overrides.newtab set to newtab.html — replaces every new tab with extension page.
• uninstall_url_hijack crx setUninstallURL points to gameograf.com with UTM params — traffic monetization on uninstall.
• install_url_hijack crx onInstalled opens gameograf.com with UTM install params — lifecycle tracking.
• csp_absent manifest content_security_policy is null; no CSP defined despite innerHTML sinks in JS files.
• dom_xss_sinks crx Two innerHTML assignments from variables in popup.js and calendar.js without sanitization.
• no_developer_name store developer_name is empty string; identity relies solely on email support@gameograf.com.
• verified_publisher store Extension carries verified publisher badge; domain resolves and is not throwaway.
• fan_content_shell store K-pop fan wallpaper with NewTab override and 1,000 installs matches low-effort traffic shell pattern.

Permissions Breakdown

• search medium Allows reading/manipulating search provider; elevated for NewTab category.
• host_permissions: https://api.gameograf.com/* low Scoped to developer's own API domain only.
• chrome_url_overrides.newtab medium Replaces new tab page — core monetization/tracking surface for wallpaper shells.

Pillar Scores

Operator Siblings (15)

Other extensions sharing this developer's compound fingerprint:

• kgdahhodabbdnkkphjpneoiadhdphhna
• dihbfoicmibapnfojehonedckdjhegbe
• gfgopigkkjcinmgoancipefafljdfghd
• cdmooeifaodbcailnibfpnmbighehpkj
• pjbnoadhjobchdjkfhpehlbigakbjfii
• iobnmhnecelingbpdadgpmalbdagjbnb
• jpmpdfcaaelghoomjgdebmoekdfkhabp
• ohpdpicjlgbpihginhijhkfdcgfbffgf
• cifonlmfhnimmghojdepepjdgbbminel
• dbomdodikcfpocimcpegpbnlmankljcb
• dmdfahkplmikmlboodadelolcmbjgmff
• ckodcbbdgmpjidpfcipfobfagemmfapi
• kbolkhdnpodncbepmdejjijgkdpedgcj
• gfbhidjkgiaopiekkefehamhcmigdcna
• ekmpmfdhakdjaaifkfgpbcagdhlbamki

Bookkeeping