0
Trust score
DANGEROUS
Heuristics 92·MT 8
Category tags
adult contentnon-consensual imagery#Data Harvester95% MT confidence

These checks passed — but they don't clear the site. A clean antivirus result, valid SSL, and a calm server only mean it isn't hosting malware; they say nothing about whether the business is real. This verdict is based on the site's conduct and content, not a malware detection.

View density

Analysis Summary

Threat Intelligence
0/91
All engines report clean
Domain Age
Registration date unknown
MT Intelligence
Dangerous
Critical likelihood · 95% confidence
DANGEROUS

Critical risk detected

Non-consensual voyeur site hosting hidden-camera footage and creepshots of women without consent, linked to campus predators. Multiple independent checks — antivirus engines, browser safety blocklists, and threat databases — flagged this site. Don't enter personal information, deposit money, or download files.

Website Preview

Screenshot of candidgirls.io
LIVE RENDER
candidgirls.io

Automated page render — captured in a safe sandbox. What an ordinary visitor would see when loading the site.

MT Intelligence

Advanced threat intelligence
MT Security Analyst
Critical scam likelihoodengineMT · Guardiantrust8/100
MT AgentLive web researchVisual inspectionNetwork correlation
0%
Confidence
The domain operates a forum dedicated to user-uploaded 'candid' videos and photos of girls and women in public settings—explicitly marketed as hidden-camera, creepshot, and voyeur content. Reddit users across multiple university communities (UCLA, UNT) have identified the site as a platform where campus predators post albums of unaware women photographed without consent. The site's Terms of Service disclaim responsibility for user-posted content that may violate privacy and publicity rights, effectively enabling the distribution of non-consensual intimate imagery. While the domain is old (registered 2016) and carries no traditional malware or phishing flags, its core function is the aggregation and distribution of involuntary pornography—a serious crime in most jurisdictions. The business registration hides behind a privacy service, and the site operates in a niche alongside similar voyeur platforms.
Full dossier
Analysis complete

Page Content

The site's meta description explicitly advertises 'candid creepshots of teen girls in yoga pants, spandex, volleyball shorts, leggings, tight clothes, cleavage and nice ass in public hidden cam streaming.' The page title is 'Videos of Girls in Public.' No legitimate business contact information, email, phone, or address is provided.

Infrastructure

Valid SSL certificate (Google Trust Services), hosted on IP 172.67.195.201 with zero abuse reports. The domain uses a privacy service (Anonymize LLC, Wyoming) to hide WHOIS details. No malware, phishing, or blocklist detections.

Domain History

Registered September 17, 2016 (approximately 9–10 years old). The site operates a companion forum (forum.candidgirls.io) and competes in a niche with similar voyeur platforms (candidteens.net, candidshiny.com). High traffic ranking (~31k globally) indicates sustained operation and user base.

Web Reputation

Reddit users across multiple university communities have documented the site's use by campus predators uploading non-consensual photos and videos of unaware women. Posts explicitly link the forum to involuntary pornography distribution. Independent review aggregators rate it 'safe' based on technical metrics alone, missing the legal and ethical harm of its core function.

Risk Factors
7
  • Site explicitly hosts and distributes non-consensual intimate imagery—hidden-camera videos and creepshots of women without consent.
  • Multiple Reddit posts from UCLA, UNT, and other campuses identify the forum as a platform used by predators to upload albums of unaware victims.
  • Terms of Service disclaim responsibility for user-posted content that violates privacy and publicity rights, enabling involuntary pornography distribution.
  • Business registration hidden behind a paid WHOIS privacy service; operator identity obscured.
  • Site operates in a niche alongside similar voyeur platforms, suggesting a coordinated ecosystem of non-consensual imagery distribution.
  • High traffic ranking (~31k globally) indicates sustained operation and large user base engaging with non-consensual content.
  • No legitimate business purpose; the site's sole function is aggregation and distribution of voyeur and creepshot content.
Positive Signals
3
  • Domain is old (registered 2016) and has maintained continuous operation.
  • Valid SSL certificate and clean antivirus scan (no malware or phishing detected).
  • Hosting IP has zero abuse reports and clean reputation score.
AI Recommendation
Do not visit or interact with this site. If you have been photographed or filmed without consent and posted on this platform, report it immediately to the National Center for Missing & Exploited Children (NCMEC), your local law enforcement, and the FBI's Internet Crime Complaint Center (IC3). Most jurisdictions have laws against non-consensual intimate imagery; victims have legal recourse.
Scam network detected
3 linked domains correlated

The site operates as part of a coordinated ecosystem of voyeur and creepshot platforms. The companion forum (forum.candidgirls.io) is the primary hub for user-uploaded non-consensual content. Competitor domains (candidteens.net, candidshiny.com) operate in the same niche.

forum.candidgirls.iocandidteens.netcandidshiny.com
Next-gen fraud intelligence
Evidence-backedCross-checked

Web Research Findings

Our live research agent queries scam-report databases, consumer-review sites, news coverage, and general web search for candidgirls.io, then cross-checks business-registration records and look-alike domain patterns. Everything below is pulled from what it actually found.

Business registration
Active · US
Site traces back to an actively registered business.
Clone check
Not a clone
No well-known site's layout or branding detected here.
Typosquat check
No look-alike match
The domain doesn't resemble any well-known brand's spelling.
Web mentions
3 scam reports · 2 positive
Key findings
7 headline facts from open-web research
  • Domain registered September 17, 2016 (approx. 9-10 years old); currently active with valid HTTPS.
  • Operates a forum (forum.candidgirls.io) dedicated to user-uploaded "candid" videos and photos of girls/women in public (yoga pants, leggings, creepshots, hidden cam style).
  • Scamadviser rates it "Very Likely Safe" with average-good trust score but notes owner hides identity via paid WHOIS privacy service.
  • No evidence of malware, phishing, or traditional financial scams; not flagged by blocklists.
  • Reddit users have linked the forum to non-consensual/involuntary photography, with multiple posts identifying it as a site used by campus predators/creeps posting albums of unaware women.
  • Terms of Service disclaim responsibility for user-posted content that may violate privacy/publicity rights and require users to be over 18.
  • High traffic in adult voyeur niche (Semrush global rank ~31k); competitors are similar candid photo/video sites.
Scam reports (3)
Direct quotes from public scam databases, forums, and news.
  • Reddit r/BanFemaleHateSubsopen

    "Forum.candidgirls.io NEEDS to do. Disgusting... INVOLUNTARY PORNOGRAPHY."

  • Reddit r/untopen

    "Looks like it's Candidgirls.io. The little creep has posted over 40 albums of photos."

  • Reddit r/uclaopen

    "The person is posting to a website for photos of "candid girls" under the username gloryyhole"

Positive reviews (2)
Quotes indicating the site is legitimate.
  • Scamadviseropen

    "In summary, It seems that candidgirls.io is legit and safe to use and not a scam website."

  • Scamvoidopen

    "Potentially Safe. The site seems safe according to this report: The site is not detected by any blocklist engine."

Business registration
Status: active · US

Terms of Service reference "Candid Girls Inc."; WHOIS uses privacy service (Anonymize LLC, Wyoming address redacted)

Research summary
Narrative write-up from our AI analyst, grounded on the facts above

Our research found three documented complaints linking the site to non-consensual intimate imagery distribution. Reddit posts from UCLA, UNT, and other campus communities identify forum.candidgirls.io as a platform where predators upload hidden-camera photos and videos of unaware women. One post states: 'The person is posting to a website for photos of "candid girls" under the username gloryyhole' (UCLA campus). Another notes: 'The little creep has posted over 40 albums of photos' (UNT campus). A third post on r/BanFemaleHateSubs describes the forum as hosting 'INVOLUNTARY PORNOGRAPHY.' Independent review aggregators rate the domain 'safe' based on technical scans alone, but this assessment ignores the site's documented use for distributing non-consensual intimate imagery—a serious crime in most jurisdictions.

Antivirus Engines

Clean pass · verified
Clean across 91 engines

We cross-check every URL against our antivirus network of 91 malware and blacklist engines. None of them flagged this URL in the last scan.

0Malicious0Suspicious59Harmless91Engines
Clean
Kaspersky
Clean
Bitdefender
Clean
Microsoft
Not in pass
ESET-NOD32
Not in pass
Avira
Not in pass
Sophos
Clean
Fortinet
Clean
Google Safebrowsing
Clean
Emsisoft
Clean

No engine detections. The URL passed every antivirus and blacklist engine we queried in this scan. Stay vigilant — AV coverage is only one signal among many.

Security Scans

Blacklist Check
Not flagged on major threat lists

Checked against the major public blocklists used by browsers and security tools — no hits.

Contact Verification

We fetched the page and looked for real-world contact details. Legitimate businesses almost always publish an email on their own domain, a phone number, and a postal address. Scam shops usually don't.

What We Found
No clear contact details on the page
Emails on site's domainNone
Phone numbersNone
Postal addressNot listed
Linked social profiles0
Signal Summary
Several contact red flags
  • No contact email found anywhere on the page.
  • No phone number listed on the page.
  • No postal address visible on the page.

Domain & Encryption

Encryption Certificate
StatusValid
ProtocolTLSv1.3
IssuerGoogle Trust Services · WE1
ExpiresAug 31, 2026 (82d)
Self-signedNo
Hosting & Technology
HostingCloudflare, Inc.
Server locationUS
Web servercloudflare
PopularityNot in popularity top list

Redirect Chain

Hops
1
Cross-domain
No
Lookalike
No
Punycode
No
  • 1301http://candidgirls.io/
  • 2200https://candidgirls.io/

Server Reputation

Abuse Intelligence
Confidence score0%
Reports on file0
ISPCloudflare, Inc.
Usage typeContent Delivery Network

Avoid this site

Our automated review flagged enough risk that you should treat this site as unverified.

  • Do not interact with candidgirls.io

    Do not enter credentials, deposit money, download files, or install browser extensions from this site.

  • Verify the business through independent channels

    Check the company's social profiles, registry records, and search for recent news or reviews that are not hosted on the site itself.

  • Never use irreversible payment methods

    Crypto, gift cards, wire transfers, and cash apps offer zero buyer protection. Use a credit card or PayPal if you must pay.

  • Share your experience

    If you have additional context, drop a comment below or post on the MalwareTips forum.

    Open

Reputation Sources

How this domain rates across independent threat-intelligence and blocklist providers.

Google Safe Browsing
Not listedCheck ↗
VirusTotal
Not listedCheck ↗
AbuseIPDB
Not listedCheck ↗

Referenced Domains

Outbound domains this page links to or loads resources from. Each links to its own security scan.

Safety FAQ

Common questions about this site, answered directly from the scan data above — so the answers always reflect the latest verdict on this page.

  • Our automated security review flags candidgirls.io as dangerous. Multiple threat indicators were detected — treat the site as a scam until proven otherwise.
  • No — candidgirls.io scored 25/100 on our trust scale. We detected active threat indicators, so we recommend avoiding the site entirely.
  • Yes. candidgirls.io presents a valid TLSv1.3 certificate issued by Google Trust Services · WE1, expiring in 82 days. Note that SSL only encrypts the connection — it does not guarantee that the site itself is trustworthy.
  • No. All 91 antivirus engines in our malware network report candidgirls.io as clean.
  • No. candidgirls.io is not currently listed on the major browser blocklist feeds that modern browsers use.
  • candidgirls.io resolves to an IP operated by Cloudflare, Inc. in US (usage type: Content Delivery Network). Hosting location alone doesn't make a site good or bad, but unusual geography for a brand's claimed country is one of many signals we weigh.
  • This is a permanent record of the scan run on June 10, 2026. The verdict and evidence above reflect that scan and do not change on their own. If circumstances around candidgirls.io have changed, MalwareTips staff can run a fresh scan, which re-runs every check from scratch and publishes an updated report.

Final Verdict

0
Trust / 100
Final Verdict·candidgirls.io
DANGEROUS

This site hosts and distributes non-consensual intimate imagery—hidden-camera videos and photos of women in public without their knowledge or consent. Multiple Reddit posts document its use by campus predators uploading albums of unaware victims.

Do not visit or interact with this site. If you have been photographed or filmed without consent and posted on this platform, report it immediately to the National Center for Missing & Exploited Children (NCMEC), your local law enforcement, and the FBI's Internet Crime Complaint Center (IC3). Most jurisdictions have laws against non-consensual intimate imagery; victims have legal recourse.

AV engines
91
MT passes
2
Net signals
0
Scan another URL
Security review completemalwaretips.com/url-scan
Recently scanned

Other Dangerous reports

Browse all reports
Community review

User reviews & comments(0)

Share your experience — "Lost $200 on a fake checkout" is more useful than "Scam". Your review helps others avoid traps.

Loading…
Loading comments…
This report is generated automatically by combining threat intelligence, domain signals, and an AI security analyst. It is informational, not legal advice. Always use your own judgement before sharing personal information or money online.