Is Mystique safe?

Question

Is Mystique safe?

Accepted Answer

Mystique is medium risk. Code analysis and behavioral verification show that when you submit a search in Mystique, the extension redirects the browser to webresult.info/search.php before the selected search provider. The redirect URL includes the typed search term, the extension ID, and stored install time and cohort values when present. Automated dynamic analysis did not type into the extension search box, so no live request body or response was recorded. Code analysis and behavioral verification show that when you open Mystique features or submit a search from its new-tab page, the extension builds a request to mloeri.com/track/evt.php. The request carries the feature name, value, extension ID, and, in the background path, stored install time and cohort values. The page-script request enables browser credentials, so cookies for mloeri.com are included if they exist. Automated dynamic analysis did not trigger this user-action path, so no live request body or response was recorded.

Is Mystique safe?

Findings