tehyc[.]cn

Analysis indicates that the domain tehyc.cn was registered on 21 February 2026 and is currently offline. The domain resolves to IP address 137.220.157.25, which belongs to AS4907 BGPNET PTE. LTD. located in Hong Kong. SSL inspection shows the site used a LiteSSL RSA CA 2025 certificate, a free‑issued certificate commonly seen in malicious deployments.

The HTTP response presents a page title “TikTok Shop”, which does not correspond to the advertised target brand. Threat intelligence flags the domain as a Binance impersonation used for a crypto‑scam campaign. VirusTotal records show that 18 out of 93 scanning engines flagged the domain as malicious, confirming a consensus of malicious intent. The domain appears on a single security blocklist and has been actively blocked by the PhishDestroy service, indicating that at least one reputable anti‑phishing feed has taken action.

Gridinsoft assigns a trust score of 0 out of 100, reinforcing the low reputation. No additional evidence such as OTX tags, Safe Browsing alerts, or registrar details were provided, leaving the full scope of the supporting infrastructure uncertain. Defenders should add tehyc.cn to internal blocklists, monitor for any DNS or SSL certificate reuse, and enforce strict validation of Binance‑related communications. Continuous re‑evaluation is advised in case the domain becomes active again or new indicators emerge.