Chrome Web StoreCaution required
Suspicious in code review
Our reviewer found behaviour consistent with malware, but not enough to confirm it. Treat this extension as untrusted until it has been re-reviewed.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
What our analysis found
Cristiano Ronaldo Manchester United 2003–2009 Wallpaper, used by 2,000 people, is rated caution by Extension Auditor. Our code review reported 1 finding (1 medium), led by remote code loading. It comes from a trusted publisher and was last updated in June 2025.
Key findings
- Medium
Remote Code Loading
The extension fetches a JSON payload from [domain withheld] whose `html` field is set verbatim as innerHTML on the new-tab page. Although script tags inserted via innerHTML are inert, inline event handlers (onclick, onload, onerror, etc.) embedded in the server-controlled HTML execute JavaScript in the extension's privileged new-tab context. This design allows the publisher to silently deliver phishing UI, ad injections, or JavaScript payloads to all users after CWS publication without triggering a review, which is exactly the capability pattern used in deferred-malicious new-tab campaigns.
Analyst notes
The extension is a legitimate replacement with declared permissions that match the bundled manifest exactly, and the publisher holds a Google trusted-publisher badge. However,:54 fetches arbitrary HTML from [domain withheld] and injects it directly via innerHTML into the extension's new tab page, allowing the publisher to push arbitrary UI content — including inline event handlers that execute JavaScript in the extension's context — to all users at any time without a Chrome Web Store review. The host_permissions declaration covers the destination, and third-party risk scores are low, but this pattern is the structural prerequisite for deferred-malicious behaviour and it contradicts the CWS review model.
Cristiano Ronaldo Manchester United 2003–2009 Wallpaper Chrome extension security report
ID: gbpfkknnnkdboafbmdjmhfpndlplfcee
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://gameograf.com/
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- Address
- 1337 N San Joaquin St Stockton, CA 95202 US
- Website
- Visit
Screenshots & videos
Install growth
- 1 medium
The file, code excerpt and explanation behind each finding are part of the full report. No conclusion has been withheld — only the evidence. The verdict above already reflects everything found here.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
About this extension
Cristiano Ronaldo Manchester United 2003–2009 Wallpaper – Relive the early glory days in HD every time you open a new tab.
Read the publisher’s full description
Rising Star, Premier League Era, Legendary Goals, Old Trafford Icon Extension Features HD Wallpaper Collection: Enjoy 5 high-quality wallpapers capturing Cristiano Ronaldo during his first spell at Manchester United (2003–2009). From iconic goals to passionate celebrations, a new image appears with every tab. Popular Site Shortcuts: Instant access to top sites like YouTube, Netflix, Amazon, ChatGPT, and more. Custom Website Shortcut: Add your own frequently used website for fast navigation. Search Bar: Search straight from the new tab with your browser’s default search engine. Clock & Date Display: Modern time and date widget for daily convenience. Extra Options: Easily explore more extensions, privacy policy, uninstall help, and send feedback. Popup notification About Us Gameograf.com creates exclusive new tab extensions and themes for Chrome. Our website offers a variety of new tab extensions featuring anime-manga, singers, cars-motorcycles, sports teams, athletes, celebrities, and K-pop. Website: https://gameograf.com Contact Us: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Feedback: https://gameograf.com/feedback/ Email: info@gameograf.com Google Chrome Affiliate Program Disclosure This extension, when installed, opens the gameograf.com website in your new tab to provide information about the downloaded extension. It is designed to enhance user experience, offer access to similar extensions, and help users create their own. The extension may contain links to specific services or products per policy. All redirects are designed for user benefit and require consent before any action is taken.
User reviews
Extension files
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
1 medium-severity finding in this extension’s code
Every finding is verified by a security analyst. Unlock the code evidence, indicators and version history.
Code Diff
Compare extension code between any two versions.
0 changed files detected
No comparable text files found between these versions.
Gain full insight into all external connections.
Upgrade for full visibility.
Related extensions
More from https://gameograf.com/
- Anime Cursor - Custom Cursor for Chrome™ - All in One Anime Cursors40,000 users
- Sukuna X Gojo Jujutsu Kaisen Gameograf20,000 users
- Cristiano Ronaldo Live Wallpaper20,000 users
- Gameograf ONE New Tab: Live Wallpapers20,000 users
- Hello Kitty Live Wallpaper10,000 users
Popular in Just for Fun
- Return YouTube Dislike5,000,000 users
- Stylish - Custom themes for any website2,000,000 users
- FrankerFaceZ1,000,000 users
- Shimeji Browser Extension1,000,000 users
- My Doodle1,000,000 users