Top Risks

• NewTab override + uninstall/install URL hijack both point to gameograf.com — monetization shell pattern.
• Privacy policy admits data collection and third-party sharing but is NOT scoped to this extension → privacy pillar 10.0.
• install_url and uninstall_url shared by 3 other extensions under same install/uninstall cluster (game-portal shell).
• Extension contacts 9 external hosts (YouTube, Instagram, Netflix, Reddit, X, ChatGPT, etc.) far beyond stated wallpaper function.
• 16 months since last update; no developer name supplied; verified-publisher discount capped by stale > 18mo approaching.

Evidence

• install_url_hijack manifest onInstalled opens gameograf.com with UTM params — classic game-portal shell monetization pattern.
• uninstall_url_hijack manifest Uninstall redirects to gameograf.com — 3rd-party URL hijack; +3.0 webstore per rubric.
• newtab_override manifest chrome_url_overrides.newtab = newtab.html replaces every new tab for wallpaper/search monetization.
• privacy_policy_scope_fail api Policy fetched; scope_extension=false, data_collection=true, third_party_sharing=true → D clause +10.0.
• operator_cluster_install_url api install_url shared with 3 sibling extensions under gameograf.com cluster.
• js_external_hosts_broad crx 9 external hosts including chatgpt.com, netflix.com, instagram.com — far exceeds wallpaper function scope.
• maintenance_stale store 16 months since update; approaching 18mo cap-trigger for verified-publisher discount reduction.
• no_developer_name store developer_name is empty string; reduces accountability despite verified_publisher=true.

Permissions Breakdown

• search medium Allows querying browser search; combined with newtab override enables search monetization.
• chrome_url_overrides.newtab medium Replaces every new tab; primary delivery vector for ad/affiliate monetization in shell extensions.

Pillar Scores

Operator Siblings (1)

Other extensions sharing this developer's compound fingerprint:

• iebhemakjpjaafbomeoiplflmaofdjph

Bookkeeping