If you've come across tbexpand.alicdn.com.danuoyi.tbcache.com and wondered whether it's legit, you're right to be cautious. This address appears to be a subdomain tied to Alibaba's content delivery infrastructure, but that doesn't automatically make it safe. The most immediate problem is that the SSL certificate is invalid for this specific hostname. When a site's certificate doesn't match, any data you send could be intercepted or tampered with. On top of that, there is no public owner information, no contact details, and no history in the Wayback Machine. The site itself returns a 403 Forbidden page, so you can't even see what it's for. For an infrastructure node, one would still expect a properly configured certificate and basic transparency about who operates it. The lack of both makes this a risky endpoint to trust. If you need to use a service from Alibaba, stick to their main domains like alicdn.com or taobao.com, where the security is properly set up. For now, avoid this URL entirely.
No — tbexpand.alicdn.com.danuoyi.tbcache.com doesn't look safe
In plain English
This site is not what it appears. It looks like it could be part of Alibaba's content delivery network, but the SSL certificate is invalid, which means your connection is not secure. There's no way to tell who runs this specific address, and the site blocks access entirely. I would not interact with it or provide any information.
What you should do now
Don't panic. These steps limit the damage, and the sooner you take them the better.
Don't enter any details
No passwords, card numbers or personal information — even if the site looks professional.
Close the tab
Especially if you got here from an email, text message or social media ad.
Already paid? Call your bank
Contact your bank or card provider right away. They can often stop or reverse a recent payment.
Warn others
Report the site and share this check with anyone who sent you the link.
Where the score comes from
The SSL certificate is invalid for this hostname, meaning any data you send or receive is not encrypted properly. The site is unreachable because of this TLS error, which is a serious red flag for any online service.
WHOIS shows no match for this subdomain, and there is no identifiable owner or company behind this specific address. While it may be part of Alibaba's infrastructure, the lack of clear ownership is concerning for a site that could be used for anything.
The domain is not blacklisted and has a fast page load time, but it has no history in the Wayback Machine and no Trustpilot presence. This is a mostly blank slate with no evidence of problems, but also no proof of trustworthiness.
There is no about page, no contact information, no social media presence, and the site blocks automated checks. For a consumer-facing endpoint, this level of opacity is unacceptable.
No privacy policy, terms of service, or legal pages were found. For a content delivery node this is somewhat expected, but users who stumble here have no way to know their rights or the site's practices.
DNS resolution works and the site loads quickly, but the invalid SSL undermines the whole setup. Missing security headers and lack of DNSSEC add to the sense of a misconfigured or neglected server.
What we checked
Think this verdict is wrong?
Site owners can request a fresh scan. Scores update automatically as signals change.
