Is Search AliExpress by Image safe?

Medium risk

Search AliExpress by Image redirects clicked AliExpress product links through searchbyimage.link.

When you click an AliExpress item link on AliExpress pages or supported Google result pages, the extension prevents the normal click and opens a searchbyimage.link URL in a new inactive tab. That URL includes the clicked product page as a query parameter, so searchbyimage.link receives the product URL you selected.

Dropshipping Storev0.0.3.0Chrome Web Store
45Risk
Who publishes it

MEDIA 019 - 4 other listings from the same operator, 3 of them carrying a finding

What this publisher told the store about itself, and the other listings that told it the same thing.

Publisher
Dropshipping Store
Declared legal entity
MEDIA 019
Registered address
JNA 1a, Negotin 19300, Serbia, Europe
Registered contact
Ivan Matic
Website
www.dropshipping.store/search-aliexpress-by-image-and-find-similar-products/

Same store account

4 other listings published from this account, 33k+ users between them. 3 of them carry a finding.

Ali Invoice FREE20k+MediumAli Invoice10k+MediumDark Mode for AliExpress & Alibaba2k+MediumGFC Invoice970Low

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Findings

AliExpress product clicks are routed through searchbyimage.link

Clicking an AliExpress product link, Search AliExpress by Image redirects the navigation through searchbyimage.link in an inactive tab, including the clicked product URL and tab context.

Severity
Medium unwanted
Type
Unexpected
CWE
CWE-359
Source
Dynamic sandbox
What actually happens
You did this

clicks an AliExpress product link

The extension did this

redirects the click through searchbyimage.link with the clicked product URL

Captured request
GEThttps://searchbyimage.link/a/
Fields in the request
  • Clicked product URL
    https://www.aliexpress.com/item/1005001234567890.html (illustrative)

    Shows which AliExpress product page you selected.

  • Tab context
    inactive tab opened to searchbyimage.link (illustrative)

    Reflects that the extension opens the remote request in an inactive browser tab.

What it can do

Permissions this extension asks for, as declared in version 0.0.3.0. Asking for a permission is not a finding on its own - it is what the extension can do if it chooses to.

  • Read and change your data on searchbyimage.link

    *://*.searchbyimage.link/*

  • Read and change your data on aliexpress.com

    *://*.aliexpress.com/*

  • Read and change your data on aliexpress.us

    *://*.aliexpress.us/*

  • Read and change your data on aliexpress.ru

    *://*.aliexpress.ru/*

  • Read and change your data on dropshipping.store

    *://*.dropshipping.store/*

  • Add items to the right-click menu

    contextMenus

Where it sends data

Destinations our analysis observed Search AliExpress by Image and Find Similar Products contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.

  • searchbyimage.link

    Search AliExpress by Image and Find Similar Products sends data to searchbyimage.link. No other extension we have analysed sends data here.

Updated 30 September 2026jocnlahnjacckbiffghcopjfbifdjocj