If you ran into pull-lls-q26.douyincdn.com and wondered whether it's safe, the short answer is yes — but it's important to understand what you're actually looking at. This isn't a shopping site, a social media platform, or any kind of business you'd interact with directly. It's a content delivery network (CDN) server, part of the infrastructure behind Douyin (the Chinese version of TikTok). The parent domain, douyincdn.com, is owned by ByteDance, one of the largest tech companies in the world. The 400 Bad Request error you see when visiting the URL is expected — this server is meant to be accessed by apps and devices, not by people typing into a browser. There's no hidden checkout form, no login page, and no data collection happening here. For a CDN node, the security setup is solid: a valid SSL certificate, no blacklist entries, and a clean reputation. The lack of contact info, privacy policy, or Wayback Machine history is completely normal for infrastructure of this kind. So while you shouldn't treat pull-lls-q26.douyincdn.com like a typical website, you also don't need to worry about it being a scam or a phishing trap. It's just a server doing its job.
In plain English
This isn't a website you visit or buy from. It's a server that belongs to ByteDance's CDN network, likely used to deliver video or image content for Douyin. The 400 error you see is normal — it's not meant to be browsed directly. Everything points to legitimate infrastructure, not a scam.
Where the score comes from
The connection is encrypted with a modern TLS setup from a trusted issuer, and Google's threat database reports nothing suspicious. For a CDN endpoint this is exactly what you'd expect.
The subdomain itself doesn't show up in WHOIS, but that's normal for infrastructure like this. The parent domain (douyincdn.com) is well-known and owned by ByteDance, the company behind Douyin. The real owner is clear enough.
No blacklists, no history of abuse, and the lack of a Wayback snapshot is unremarkable for a content delivery node that isn't meant to be browsed. The clean record is exactly what you want from a server you're just connecting to.
There's no contact info or about page, but that's not a flaw for a CDN server. It's not a business you're meant to interact with; it's a technical endpoint serving files. The lack of a visible front door is normal here.
Privacy policies and terms of service don't apply to a bare CDN server that returns a 400 error. No legal documents are expected for this kind of infrastructure.
Multiple IP addresses on a major Chinese backbone network, fast load time, and a valid SSL certificate. The absence of DNSSEC and email records is standard for a static content delivery host. The server configuration is appropriate for its role.
What we checked
Run this site? Show your score.
Add a trust badge so visitors can see your live score for themselves.
Get your badge →