Is AliMedia safe?

Question

Is AliMedia safe?

Accepted Answer

AliMedia is medium risk. AliMedia transmits your AliExpress page URLs, the date you installed the extension, and a persistent random identifier to two external servers — api.alibill.net (owned by the extension developer) and extension-monitor.toriox.dev — each time you download product media. A separate diagnostic pathway additionally sends your current page URL, install date, update date, and extension version to extension-monitor.toriox.dev using a hardcoded API key. Dynamic analysis captured live POST requests confirming this behavior. When you click a product link on AliExpress, AliMedia intercepts the click in its content script and opens a background tab (active:false) pointing to purpleshades.xyz — an affiliate cost-per-action network. Your persistent unique ID is embedded in the redirect URL as a tracking parameter. The final destination is the AliExpress product page, but now tagged with affiliate referral tokens that credit the extension developer for any purchases you make. Dynamic analysis confirmed the redirect chain and captured the affiliate token written to storage.

Is AliMedia | AliExpress image/video download safe?

Findings