Is Moon: Shop online with Bitcoin safe?
Moon is low risk. When you use Moon signed in, the extension sends account details, including email, display name, and Cognito user-sub, to Mixpanel at api.mixpanel.com. Later analytics events attach to that identified profile.
Who publishes itMoon Technologies, Inc. - no other listings under this identity
Moon Technologies, Inc. - no other listings under this identity
What this publisher told the store about itself, and the other listings that told it the same thing.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Findings
Account profile data is sent to Mixpanel analytics.
When you use Moon signed in, the extension sends account details, including email, display name, and Cognito user-sub, to Mixpanel at api.mixpanel.com.
Later analytics events attach to that identified profile.
What actually happens
The user performs an action while signed in to Moon.
The extension sends the logged-in account email, name, and Cognito user-sub to Mixpanel analytics.
Captured request
Fields in the request
- Extension storage account datauser@example.com (illustrative)
Stored sign-in profile data can identify the Moon account being used.
- Tab contextactive shopping tab (illustrative)
Tab-related analytics context can connect extension activity to browsing state.
Observation
Dynamic analysis confirmed the Mixpanel path that resolves the signed-in account profile, identifies the Cognito user-sub, and sets profile fields before posting to api.mixpanel.com.