Top Risks

• Uninstall URL hijack redirects to ovkas.com; install URL hijack opens gameograf.com affiliate UTM link on every install.
• NewTab override + search permission = classic traffic-monetization shell; extension controls every new tab session.
• Privacy policy is Google's own policy (not scoped to this extension) yet data_collection and third_party_sharing are true — admitted data sharing with no extension scope.
• Free-webmail developer (halilseker3455@gmail.com) with no verified publisher badge; no accountability anchor.
• 8 external JS hosts including gameograf.com (affiliate target) plus major platforms (Netflix, YouTube, Instagram) contacted from newtab page.

Evidence

• uninstall_url_hijack crx chrome.runtime.setUninstallURL → https://ovkas.com; +3.0 Webstore monetization shell.
• install_url_hijack crx onInstalled opens https://gameograf.com/?utm_source=ovkas&utm_medium=ovkas — affiliate UTM on every install; +2.0 Webstore.
• newtab_override manifest chrome_url_overrides.newtab = index.html; replaces every new tab; +2.0 Webstore + scored as HIGH permission.
• privacy_policy_generic store Policy is Google's account privacy page; scope_extension=false, data_collection=true, third_party_sharing=true → +10.0 Privacy (v3.5 D).
• free_webmail_dev store halilseker3455@gmail.com, no verified publisher, no business website → Reputation floor ≥7.5.
• js_external_hosts crx 8 distinct external hosts incl. gameograf.com (affiliate), games.ovkas.com, Netflix, YouTube, Instagram, X.com.
• search_permission_newtab manifest search permission + newtab override = search-monetization cluster; no CSP on MV3 (default strict, no extra penalty).
• install_count_low store Only 270 installs; tail-attack surface low but monetization infrastructure fully wired.

Permissions Breakdown

• search medium Allows manipulation of search queries; combined with newtab override raises monetization risk.
• chrome_url_overrides.newtab high Replaces every new tab with extension-controlled page; core mechanism for traffic/ad monetization.

Pillar Scores

Bookkeeping