Cinnamoroll Live Wallpapers

Version 2.0 View in Chrome Web Store

Last scanned: 1 day ago | force re-scan

Extension Details

Developer: https://haberikra.com/

Rating: 1.0 ★ (1 rating)

Users: 574

Context-Aware Verdict

HIGH

Risk Level

Trust Factors: This extension has several concerning trust indicators. With only 574 users and a poor 1.0 rating from just one review, it lacks community validation. The developer website (haberikra.com) appears unrelated to the Cinnamoroll brand, suggesting potential trademark infringement. The extension claims to provide live wallpapers but requests search permissions and network access, which seems inconsistent with its stated purpose.

Concerns: The primary concern is the mismatch between functionality and permissions. A wallpaper extension should not need search permissions or network access to external APIs. The host permission to api.gameograf.com is particularly suspicious as this domain appears unrelated to wallpaper functionality. The low user count combined with poor ratings suggests either the extension is new and untested, or users have had negative experiences. The developer's association with haberikra.com rather than official Sanrio channels raises authenticity questions.

Recommendations: Given the high risk profile, avoid installing this extension. If you must use it, run it in a completely separate Chrome profile to isolate potential security risks. Consider looking for official Sanrio wallpaper extensions or well-reviewed alternatives with transparent developers. The combination of suspicious permissions, poor ratings, and questionable developer authenticity makes this extension unsuitable for general use.

Security Analysis

MEDIUM

Overall Risk

Based on 1 total findings, ranked without considering overall context, including 1 high-risk and 0 medium-risk findings.

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

Security Analysis Details

Required Permissions:

Host Permissions:

https://api.gameograf.com/*

Embedded URLs (14 total):

https://fonts.googleapis.com	https://fonts.gstatic.com
https://fonts.googleapis.com/css2?family=Poppins:ital	https://fonts.googleapis.com/css2?family=Material+Symbols+Outlined:opsz
https://clients2.google.com/service/update2/crx	https://api.gameograf.com/
https://chrome.google.com/webstore/detail/	https://gameograf.com/top-100/
https://haberikra.com/privacy-policy	https://api.gameograf.com/popup/message.json
https://haberikra.com/?utm_source=install&utm_medium=link&utm_campaign=bg&utm_content=install	https://haberikra.com/?utm_source=gameograf&utm_medium=link&utm_campaign=bg&utm_content=uninstall
https://api.gameograf.com/js/shortcuts.json	https://www.google.com/s2/favicons?domain=

Raw Manifest

{
  "name": "__MSG_appName__",
  "icons": {
    "16": "img/128.png",
    "48": "img/128.png",
    "128": "img/128.png"
  },
  "author": "Gameograf",
  "version": "2.0",
  "background": {
    "service_worker": "js/bg.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "search"
  ],
  "default_locale": "en",
  "host_permissions": [
    "https://api.gameograf.com/*"
  ],
  "manifest_version": 3,
  "chrome_url_overrides": {
    "newtab": "newtab.html"
  }
}