satellitestress[.]st

satellitestress.st was registered on 2026-03-06 and is currently active. The site presents the page title “SATELLITESTRESS - #1 Free IP Stresser & Booter 2025”, indicating a claimed service for DDoS stress testing. Infrastructure analysis shows the domain resolves to 216.146.31.1, an address located in Japan and assigned to ASN 207731 (DIAMWALL, LDA). The hosting provider advertises HSTS and HTTP/2 support, and the TLS certificate is issued by Google Trust Services under the WE1 trust anchor, suggesting a legitimate certificate chain but not confirming benign intent.

DNS configuration uses the authoritative nameservers chip.diamwall.com and runah.diamwall.com, both tied to the same provider. Registration details list StanCo and Istanco as registrars, without further public contact information. HTTP inspection returned a 307 temporary redirect status, which may be used to funnel victims to additional payloads or obfuscate the final landing page. Threat intelligence flags the domain on a single blocklist, specifically PhishDestroy, and VirusTotal reports 17 of 91 security vendors labeling the host as malicious, reinforcing the high‑risk assessment.

Defenders should block network connections to 216.146.31.1, add the domain to proxy and DNS filtering rules, and monitor for any outbound traffic that may attempt to reach the site. Continued observation of the registrant’s WHOIS records and DNS changes is recommended, as further infrastructure modifications could precede new campaigns. The current evidence does not reveal the exact phishing payload or target brand, so additional sandboxing of any downloaded artifacts from the URL is advisable. Until more detailed content analysis is performed, the domain should be treated as a high‑confidence phishing vector.