Security Warning: High Security Risk
Fortnite Breakpoint Live Wallpaper
ID: kljjoahddjnfockhommhkigdggnaemco
Supported Languages
Extension Info & Metadata
Publisher Contextual Analysis
- Author
- https://gameograf.com/View Profile
- Privacy
- Privacy Policy
- Help
- Help Center
- Country
- US
- MX records exist
- Yes
- Domain exists
- Yes
- Is disposable
- No
- Is role-based
- Yes
- Mailbox exists
- Yes
- Address
- 477 N Miami St Miami, FL 33179 US
- Website
- Visit
Turn your browser into a high-tech battleground with the Fortnite Breakpoint Live Wallpaper extension.
Gear up for action with the Fortnite Breakpoint Live Wallpaper! 💻🔹 Turn your browser into a high-tech battleground with the Fortnite Breakpoint Live Wallpaper extension. Featuring the sleek and tactical Breakpoint, this wallpaper radiates futuristic vibes and an edge of mystery. Enjoy fast, secure, and smooth browsing as Breakpoint takes your new tabs to the next level. 🔹 Features: 🖼️ HD Wallpaper Gallery – 5 handpicked Full HD SpongeBob wallpapers. 🔗 Popular Shortcuts – Quick links to YouTube, Netflix, Amazon, ChatGPT, and more. ➕ Custom Shortcuts – Add your favorite websites in one click. 🔍 Search Bar – Uses your browser's default search engine. 🕒 Clock & Date – Always know the time and date at a glance. 🗒️ Sticky Notes – Add unlimited colorful, draggable sticky notes. 🔔 Notifications – Stay updated on new themes and features. ⚙️ More Tools – Access privacy policy, feedback form, uninstall guide, and more. Step into the future of Fortnite style. Download now and let Breakpoint redefine your browsing experience! 🔹✨ About Us Gameograf.com designs custom Chrome new tab themes, specializing in anime, games, celebrities, sports, and more. Website: https://gameograf.com Contact: https://gameograf.com/contact-us/ Privacy Policy: https://gameograf.com/privacy-policy/ Feedback: https://gameograf.com/feedback/ Email: [email protected] Google Chrome Affiliate Program Disclosure This extension may open gameograf.com in a new tab to provide users with theme-related info and other helpful resources. All redirects comply with Chrome’s affiliate policy and require user action.
The bundled manifest.json contains no `host_permissions` field at all, but the live CWS listing's published manifest declares `host_permissions: ["https://api.gameograf.com/*"]`. This divergence means the extension's actual installed network surface differs from what the submitted ZIP contains — a pattern seen when publishers push a delayed-malicious manifest update after CWS review passes on the clean bundle. There is no corresponding `fetch` or `XMLHttpRequest` to api.gameograf.com in any of the bundled JS files, so the permission has been declared without matching code visible here.
{ "author": "haberikra.com", "manifest_version": 3, "name": "__MSG_appName__", "default_locale": "en", "version": "1.2.1", "chrome_url_overrides": { "newtab": "index.html" }, "background": { "service_worker": "bg.js" }, "permissions": [ "search" ], "icons": { "16": "img/128.png", "48": "img/128.png", "128": "img/128.png" }}On every install, the extension opens a tab to haberikra.com with a UTM campaign tagged `bmwm4+neon` — clearly copied from a different extension (a BMW M4 Neon wallpaper). The CWS listing claims this is a Fortnite extension and the description mentions SpongeBob wallpapers. This template-farming pattern — same bg.js re-skinned across many listings — is common infrastructure for newtab hijacking operations and indicates the publisher is mass-producing extensions from a shared codebase, some of which (13/1351, 1%) are confirmed malicious.
chrome.runtime.onInstalled.addListener(function() { chrome.tabs.create({ url: "https://haberikra.com/?utm_source=extension&utm_medium=link&utm_campaign=bg&utm_content=bmwm4+neon" }); chrome.tabs.create({ url: chrome.runtime.getURL("index.html") });});By severity
Versions scanned
Showing 1 of 1 scanned version with more than one unique finding. Counts are unique findings that include each version.
| Extension Version | Code Review Findings |
|---|---|
| 1.2.1 | 2 |
Files with findings
2 distinct paths — top paths by unique finding count:
- bg.js1
- manifest.json1
URLs
View the external URLs this extension communicates with to understand its network activity and data interactions.
Gain full insight into all external connections.
Upgrade for full visibility.
Gain full insight into all external connections.
Upgrade for full visibility.
Browse and explore files within this extension package
Gain full insight into all external connections.
Upgrade for full visibility.