Is Moon: Shop online with Bitcoin safe?
Moon is medium risk. When you use Moon signed in, the extension sends account details, including email, display name, and Cognito user-sub, to Mixpanel at api.mixpanel.com. Later analytics events attach to that identified profile.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Account profile data is sent to Mixpanel analytics.
When you use Moon signed in, the extension sends account details, including email, display name, and Cognito user-sub, to Mixpanel at api.mixpanel.com.
Later analytics events attach to that identified profile.
The user performs an action while signed in to Moon.
The extension sends the logged-in account email, name, and Cognito user-sub to Mixpanel analytics.
| Field | Value | Why it matters | |
|---|---|---|---|
Extension storage account data | user@example.com (illustrative) | Stored sign-in profile data can identify the Moon account being used. | |
Tab context | active shopping tab (illustrative) | Tab-related analytics context can connect extension activity to browsing state. |
Dynamic analysis confirmed the Mixpanel path that resolves the signed-in account profile, identifies the Cognito user-sub, and sets profile fields before posting to api.mixpanel.com.