Security Analysis Results

candy.ai

Comprehensive domain security and infrastructure analysis

Live Website Preview

website screenshot of https://candyai.yt/

No Security Risks Detected

This domain appears to be safe and secure

100%
Score

Disclaimer: This assessment is based on automated analysis of publicly available information. Results are for informational purposes only. For critical applications, consult security professionals.

Scan Information

Last checked:July 17, 2025 21:08:51
Scan Complete

Refresh page after 10 minutes
for updated results

Page Information

Target URL
https://candyai.yt/
Page Title
Candy AI – Your AI Companion with Chat, Video
candy.ai faviconSite Favicon
Status
Active

Host Information

Domain
candy.ai
Server
cloudflare
Country
United States
IP Address
104.18.1.164
ASN Information
13335
CLOUDFLARENET

Technologies

Ruby logo
Ruby
Programming languages
Ruby on Rails logo
Ruby on Rails
Web frameworks
Stimulus logo
Stimulus
JavaScript frameworks
Heroku logo
Heroku
PaaS
Alpine.js logo
Alpine.js
JavaScript frameworks
reCAPTCHA logo
reCAPTCHA
Security
+8 more technologies detected

SSL Certificate

HTTPS Enabled
Secure
Certificate Issuer
49m300 Gateway Proxy BISO MITM CA
Valid From
2025-07-17 05:38:45
Valid Until
2025-08-16 05:39:15
Subject Name
candy.ai

Performance Statistics

223
Total Requests
19
Domains
17
IP Addresses
8.24 MB
Transfer Size
Content Size10.61 MB

HTTP Headers

cache-control
no-cache
cf-cache-status
DYNAMIC
cf-ray
960cb8002e7270ee-MRS
cf-team
28bbd1511b000070ee52db4400000001
content-encoding
gzip
content-type
text/html; charset=utf-8
date
Thu, 17 Jul 2025 21:09:09 GMT
link
</assets/application-deff58d40d8478d9709b0f00f136f5ee9a1cf080262c75041a0879aeff35f67c.css>; rel=preload; as=style; nopush,<https://cdn.24metrics.com/lib/index.js>; rel=preload; as=script; nopush
nel
{"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}
referrer-policy
strict-origin-when-cross-origin
report-to
{"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1752786549&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=3IYvRIbgIS%2BNkkqbahMtMLBarxNgGbKwYMDXA2e37mE%3D"}]}
reporting-endpoints
heroku-nel=https://nel.heroku.com/reports?ts=1752786549&sid=e11707d5-02a7-43ef-b45e-2cf4d2036f7d&s=3IYvRIbgIS%2BNkkqbahMtMLBarxNgGbKwYMDXA2e37mE%3D
server
cloudflare
server-timing
cfCacheStatus;desc="DYNAMIC" cfOrigin;dur=148,cfEdge;dur=18 cfReqDur;dur=1115.806
strict-transport-security
max-age=15552000
vary
Accept-Encoding, Origin
via
1.1 vegur
x-content-type-options
nosniff
x-frame-options
SAMEORIGIN
x-permitted-cross-domain-policies
none
x-request-id
59cc065d-b8e3-45d1-81fd-bc96979cf6a8
x-runtime
0.038920
x-xss-protection
0
23 headers detected

Technology Stack Analysis

Ruby

Ruby

Programming languages

Ruby is an open-source object-oriented programming language.

Ruby on Rails

Ruby on Rails

Web frameworks

Ruby on Rails is a server-side web application framework written in Ruby under the MIT License.

Stimulus

Stimulus

JavaScript frameworks

A modest JavaScript framework for the HTML you already have.

Heroku

Heroku

PaaS

Heroku is a cloud platform as a service (PaaS) supporting several programming languages.

Alpine.js

Alpine.js

JavaScript frameworks

No description available

reCAPTCHA

reCAPTCHA

Security

reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.

jQuery CDN

jQuery CDN

CDN

jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.

jQuery

jQuery

JavaScript libraries

jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.

HSTS

HSTS

Security

HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.

Google Tag Manager

Google Tag Manager

Tag managers

Google Tag Manager is a tag management system (TMS) that allows you to quickly and easily update measurement codes and related code fragments collectively known as tags on your website or mobile app.

FirstPromoter

FirstPromoter

Affiliate programs

FirstPromoter is a software platform that helps businesses to create, manage and track their affiliate marketing programs.

Cookie Script

Cookie Script

Cookie compliance

Cookie-Script automatically scans, categorizes and adds description to all cookies found on your website.

Cloudflare Browser Insights

Cloudflare Browser Insights

AnalyticsRUM

Cloudflare Browser Insights is a tool that measures the performance of websites from the perspective of users.

Cloudflare

Cloudflare

CDN

Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.

Website Cookies 4

_fprom_tid

.candy.ai

Value
b3f20f7d-582e-4980-b036-5b4484802b0c
Expires:10/15/2025

_chat_chat_session

candy.ai

HttpOnly Secure Lax
Value
[_chat_chat_session redacted]
Expires:7/31/2025

_fprom_ref

.candy.ai

Value
2cha1
Expires:10/15/2025

CookieScriptConsent

candy.ai

Secure
Value
{"bannershown":1}
Expires:8/16/2025

External Links 6

Discord

discord.com

Analyze
Target URL
https://discord.com/invite/candyai

Affiliate

webforms.pipedrive.com

Analyze
Target URL
https://webforms.pipedrive.com/f/bYSTErXD8pcDoco3iakbUUKFRtWtAjNDJphn0GpYA3B88R2NYvCzVMM2wsNCjtVMkP

Help Center

everai.zendesk.com

Analyze
Target URL
https://everai.zendesk.com/hc/en-us

Untitled Link

rtalabel.org

Analyze
Target URL
https://rtalabel.org/?content=validate&rating=RTA-5042-1996-1400-1577-RTA

Untitled Link

twitter.com

Analyze
Target URL
https://twitter.com/trycandyai

We're hiring

apply.workable.com

Analyze
Target URL
https://apply.workable.com/candyai/

Requested Domains 19

candy.ai

Unknown Type
No category information available

candyai.gg

Unknown Type
No category information available

candyai.yt

Unknown Type
No category information available

cdn.24metrics.com

Unknown Type
No category information available

cdn.candy.ai

Unknown Type
No category information available

cdn.firstpromoter.com

Unknown Type
No category information available

cdn.mxpnl.com

Unknown Type
No category information available

code.jquery.com

Unknown Type
No category information available

consent.cookie-script.com

Unknown Type
No category information available

fonts.googleapis.com

Unknown Type
No category information available

fonts.gstatic.com

Unknown Type
No category information available

geo.cookie-script.com

Unknown Type
No category information available

js-agent.newrelic.com

Unknown Type
No category information available

static.cloudflareinsights.com

Unknown Type
No category information available

t.firstpromoter.com

Unknown Type
No category information available

www.candy.ai

Unknown Type
No category information available

www.candyai.gg

Unknown Type
No category information available

www.gstatic.com

Unknown Type
No category information available

www.recaptcha.net

Unknown Type
No category information available
LinkCheck

© 2025 LinkCheck. Secure domain analysis you can trust.