Top Risks

• THREAT FEED: extension ID independently confirmed malicious by TPCI chrome-mal-ids — Jett Valorant Gameograf [adware] + malext.io malicious_extension_sentry (+2.5, capped).
• Privacy policy URL returns SSL error — policy effectively unavailable; treated as unfetched (+10 privacy).
• manifest_source is html_fallback: no CRX inspected, permissions and code surface unknown.
• 15 months since last update places extension in 12-24 month stale band (+6 maintenance).
• Developer name field is blank — reduced accountability signal.

Evidence

• privacy_policy_fetch_failed api SSL error fetching https://gameograf.com/privacy-policy/; policy treated as unavailable → privacy pillar +10.
• manifest_html_fallback store manifest_source=html_fallback; no CRX scanned, js_files_scanned=0, permissions unknown.
• stale_extension store Last updated June 2025; months_since_update=15 → maintenance band 12-24mo, score +6.
• verified_publisher store Verified publisher badge present; -2.0 reputation discount applied (capped at -1 due to stale >12mo per 0c).
• no_developer_name store developer_name is empty string; +1.0 reputation penalty.
• domain_age_ok api gameograf.com first cert 2021-02-03, age_days=2050, cert_count=265 — established domain, no age penalty.
• no_threat_intel_hits api bad_host_hits, monetization_hits, affiliate_hits all empty; no network threat signals.
• no_cve_findings crx cve_findings_raw empty; cve_pillar=0.
• threat_feed_membership api Extension ID listed by TPCI chrome-mal-ids — Jett Valorant Gameograf [adware] + malext.io malicious_extension_sentry; score 4.00 -> 6.50 (+2.5 cap 2.5).

Pillar Scores

Bookkeeping