candlestream.xyz
Category: Entertainment
To use full-featured product, you have to purchase a license for Combo Cleaner. Limited seven days free trial available. Combo Cleaner is owned and operated by RCS LT, the parent company of PCRisk.com.
Quttera Web Malware Removal is a paid subscription service. Pricing, plans, and trial availability are set by Quttera. Quttera is operated by Quttera Ltd, an independent third-party company unrelated to RCS LT. PCrisk.com may earn a referral commission when users sign up through this link.
Description of candlestream.xyz
candlestream.xyz appears to be an online streaming or media-browsing website. The visible interface references sections such as movies, TV, anime, and search, and the homepage design suggests a personalized entertainment portal. The page metadata, however, references a well-known music video on a major video platform rather than matching the apparent site branding, which may indicate reused or misleading metadata.
Based on the domain name and on-page elements, the site may be intended to aggregate or present video-related content rather than represent an established media company. The domain is very new and not ranked in major traffic listings provided here, and no clear operator identity is visible in the scan data. The use of third-party media assets and external script references suggests a lightweight, dynamically assembled site rather than a long-established branded streaming service.
Safety Assessment for candlestream.xyz
The scan results show mixed but cautionary signals. At the time of this scan, 4 out of 91 security engines flagged the domain, and the malware scan marked the site as suspicious while identifying several flagged page paths and one flagged external script reference. In addition, one blacklist-style provider listed the domain with a generic suspicious classification, although major content-malice databases shown here did not report the site as phishing or malware at the time of the scan.
Context also matters here: the domain is only 135 days old, has no reported traffic ranking in the provided data, and the screenshot shows a pop-up styled as a download prompt layered over the page. That kind of prompt can sometimes be associated with misleading advertising or unwanted downloads, especially when combined with suspicious script findings. The page title and description also do not align well with the visible site branding, which may be another trust concern.
Based on these findings, this website may pose potential risks to visitors.
Technical Description
The domain uses a valid SSL certificate issued by a mainstream certificate authority and is hosted behind Cloudflare infrastructure, with the server IP resolving to a Cloudflare address in Canada. Nameservers also point to Cloudflare, which suggests the site is using a reverse-proxy/CDN setup. DNSSEC appears to be unsigned at the time of this scan.
From a security perspective, the main concerns are not the TLS setup but the application-layer signals: multiple suspicious detections from security engines, flagged internal paths, and a flagged external JavaScript resource loaded from another domain. The site also presents a browser challenge script path and a download-style pop-up in the screenshot, which may complicate analysis and could increase user risk if interacted with.
Share your experience with this website. Was it safe? Did you encounter any issues?