Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Anime Sorceress Girl Live Wallpaper - New Tab Theme [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Part of a 15-sibling extension cluster operated by gameograf.com
• NewTab override with uninstall and install URL hijack to developer site
• innerHMTL DOM-XSS sinks without CSP present in extension
• Contacts 12 external hosts including OpenAI and Google services from a wallpaper extension

Evidence

• operator_cluster api 15 sibling extensions sharing identical fingerprint, install/uninstall URLs, and host set
• uninstall_url_hijack manifest chrome.runtime.setUninstallURL() redirects to gameograf.com with UTM tracking params
• install_url_hijack manifest onInstalled opens gameograf.com with UTM tracking params
• dom_sink_innerhtml_userctrl crx 2 innerHTML sinks in popup.js and calendar.js with no CSP present
• newtab_override manifest Overrides newtab.html, controlling user browsing start page
• verified_publisher store Verified publisher badge but no developer name listed
• privacy_policy_adequate api Scoped policy with data collection, retention, and third-party sharing disclosed
• js_external_hosts crx 12 external hosts including Google services, OpenAI, and developer domains
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Anime Sorceress Girl Live Wallpaper - New Tab Theme [adware] + malext.io malicious_extension_sentry; score 5.39 -> 7.89 (+2.5 cap 2.5).

Permissions Breakdown

• search low Search setting override is low risk compared to broad host access.
• host_permissions: [https://api.gameograf.com/*] low Scoped to single developer-controlled API domain, not broad host access.
• chrome_url_overrides.newtab medium Overrides new tab page, allowing control of user browsing start experience.

Pillar Scores

Operator Siblings (15)

Other extensions sharing this developer's compound fingerprint:

• fdjpcjggpgdmdikmhoagohakklihimbo
• ammndifopdgpjcpmpbdenfcafipnejlj
• ojhigfemmjpjnmhidflhdlcahgdiiija
• ieocbmlfbinpcffofcjmpbjokkfghodc
• faaegcmakhlmoheamicddkfcmmjoljnd
• amfeinhgbpnnjihjiomibeodnainnjkd
• ceoamfmlgefiljnligpdkdindckojbim
• hlacaekdajdgiiofjplpofbgebgjbnco
• lcoeefcacppckhidgmkdlnbeajkmeick
• kngkldhmcncemclgjgbbogplfeoppkll
• gfcbimjpmoeofbmnjedjfkemdinagkmp
• heakmhbelclpalglpiceoocofnkcjefb
• gbeldgdcloiceglhpdnkhbafeoddjehm
• epjpkhahnajkdjjfkeadcgfmfjfgdohf
• fjmlhfejlohohljeioedcliggbfkihdf

Bookkeeping