Our 2026 security analysis checked 11 signals for candy.ai — including SSL, WHOIS history, and threat databases. View the full risk breakdown in the report above to see how it scored.

We checked candy.ai against multiple threat databases, financial-regulator warning lists, and community reports. The full breakdown — including the verdict, flagged signals, and our recommendation — is available in the report on this page.

What is the risk score for candy.ai?

The risk score for candy.ai is calculated from 11 independent security signals — SSL validity, domain age, WHOIS data, threat-intel databases, and community reports. The score and per-signal breakdown are shown in the report above.

Does candy.ai have a valid SSL certificate?

Yes — candy.ai presents a valid SSL certificate issued by Google Trust Services. The certificate's issuer, validity window, and chain details are in the report above.

candy.ai is registered through GoDaddy.com, LLC. WHOIS history, name servers, and full ownership signals are listed in the report above.

When was candy.ai registered?

candy.ai was registered on 2017-12-16. The full WHOIS record — including registrar, name servers, and registrant country — is in the report above.

Is candy.ai Safe or a Scam?

Live Analysis

Checked 1 day ago

candy.ai

Low Risk

candy.ai appears to be relatively safe based on our AI analysis. Multiple trust signals have been verified including SSL certificates, domain registration history, and content quality indicators.

Signals Detected

SSL Certificate

Valid

3.8

/ 100 Risk

Domain Age

Analysis Depth

standard

Report Domain

Risk Breakdown

Valid SSL certificate detected. Issued by Google Trust Services. Expires 8/24/2026.

An SSL certificate encrypts data between your browser and the website. A valid certificate means the connection is secure.

Domain has been registered for 8+ year(s).

Older domains are generally more trustworthy. Scam operations rarely maintain domains for extended periods.

Website is online and responding.

The website was reachable during our scan. An online status alone does not indicate safety.

Content quality — metadata score 92/100, 2/3 legal pages present.

This website has proper metadata and the essential legal pages (terms, privacy, contact).

Detected category: ecommerce (low risk).

This website was classified as 'ecommerce'. The category risk level reflects how frequently this type of website is associated with online fraud.

No community reports filed against this domain.

Our community has not submitted any fraud reports for this domain.

Analysis depth: standard — matched to this site's category.

All core checks (SSL, WHOIS, DNS, content, technology, threat intelligence) ran. Depth is calibrated to the site's category — lower-risk categories use a lighter fraud-analysis pass than crypto/trading/payment sites. This does NOT mean any step was skipped.

Safety Signals

Status

Online

Safe

SSL Security

Google Trust Services

Safe

Domain Age

8 years

Safe

Registrar

GoDaddy.com, LLC

Info

Country

Info

Content

92/100

Safe

Threat Databases

Clear

Safe

FCA Warning Blacklist Threats Index URLhaus Phishing Patterns Ai Analysis

Regulators

12 checked

Safe

Reviews

3.8/5 (425)

Warning

AI Analysis

Candy.ai is a platform offering AI-powered virtual companions, including AI girlfriends, boyfriends, and anime characters. Users can create personalized companions by customizing appearance, personality, and voice, and can interact via chat, voice, image, and video. The service is operated by EverAI Limited, based in Malta, and offers subscription plans and a free trial.

The website clearly describes its service as an AI companion platform, offering customization and various interaction methods. It provides detailed privacy and terms of service documents, names the operating company (EverAI Limited) with a Maltese address, and offers multiple contact points including a help center and social media. The content does not contain any red flags such as guaranteed returns, withdrawal fees, or aggressive urgency tactics. The site also explicitly states it is legitimate and safe, adhering to GDPR and using discreet billing, which aligns with responsible operation.

• Standard online safety practices apply, including reviewing terms of service and privacy policy before signing up for any subscription.

WHOIS Information

Registrar

GoDaddy.com, LLC

Registration Date

December 16, 2017

Expiration Date

January 6, 2027

Country

Domain Age

8 years and 6 months

Registrant (domain owner)

Name

candy.ai

Scam websites often use recently registered domains. A domain registered just days or weeks ago that claims to be an established business is a common red flag.

SSL Certificate

DV validated Free auto-certificate Wildcard

Issued by

Google Trust Services

Validation level

Domain only

Certificate lifespan

90 days (issued May 26, 2026)

Covers

2 domains

Public key

ECDSA (secp256r1) 256-bit

Connection

TLSv1.3 (256-bit)

TLS_AES_256_GCM_SHA384

A free, automatically-issued certificate only proves control of the domain — it does not vet the company behind it. Common for legitimate sites, but also trivial for scammers to obtain, so treat HTTPS alone as the bare minimum, not proof of trust.