crystaldiskmark[.]pro

This domain, crystaldiskmark.pro, is under investigation for brand impersonation targeting users of the legitimate disk benchmark utility CrystalDiskMark. Analysis indicates the site is designed to harvest credentials or distribute malicious payloads under the guise of a trusted software tool. The domain remains active as of the latest verification. Infrastructure analysis reveals the domain was registered on March 06, 2026, through Spaceship, Inc., and currently resolves to the IP address 172.67.139.169. It appears on one security blocklist, while VirusTotal reports 0 detections out of 95 vendors, suggesting low initial visibility. The SSL certificate is issued by Let's Encrypt, a common choice for both legitimate and malicious sites. The page title mimics the official CrystalDiskMark site, reading 'CrystalDiskMark – Free Disk Benchmark for Windows | SSD, HDD, NVMe,' further supporting the impersonation hypothesis. Current risk assessment places this domain in an active but unconfirmed state, with limited external validation. Users are advised to block the domain at the network level and monitor for connections to 172.67.139.169. System administrators should verify any downloads from this domain against known hashes of the legitimate CrystalDiskMark software. End users should be alerted to the impersonation attempt, particularly those in IT or benchmarking roles. Further analysis is required to determine the exact payload or credential harvesting mechanism employed.