crystaldiskinfo[.]cn

The domain crystaldiskinfo.cn is currently active and classified as a high‑risk generic phishing site. DNS resolution points to the IPv4 address 43.134.171.15, which is geolocated to Singapore and associated with Aceville Pte.ltd. The web server responds with an HTTP 301 redirect and is powered by Nginx, delivering content that incorporates Tailwind CSS, jsDelivr assets, and enforces HSTS. The page title returned is "CrystalDiskInfo官网‑CrystalDiskInfo硬盘检测工具最新版下载安装丨CrystalDiskInfo中文网" and the site includes Baidu Analytics tracking. A Let’s Encrypt YR2 certificate secures the connection. Registration records list the registrant as 成都西维数码科技有限公司. Threat intelligence shows the domain appears on three public blocklists and is explicitly blocked by PhishDestroy, MetaMask, and SEAL. Gridinsoft assigns a trust score of 2 out of 100, indicating extreme suspicion. AlienVault OTX references the domain in two separate pulses, and VirusTotal reports that eight of ninety‑one scanned security vendors flag the domain as malicious. While the exact phishing payload or credential‑stealing mechanisms have not been disclosed, the convergence of low trust scoring, multiple blocklist listings, and vendor detections provides strong evidence of malicious intent. Defenders should block network traffic to 43.134.171.15 and the domain name, monitor for any related indicator of compromise, and consider adding the domain to internal blacklists. Ongoing surveillance is recommended to detect any changes in hosting or content that could affect detection efficacy.