What Gridinsoft observed on Alienhosting.tech
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260825050021-54e033c3
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Website
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The independent first-party review supports retaining the Suspicious Website category because the public paid-service flow has material merchant and payment-transparency gaps and an unexplained older portal and application history. No specific malware file, payload, URL, or hash was identified; the category describes current website and transaction risk rather than a reproduced malware payload.
Analyst findings
Review 8 documented observations View evidence
A fresh supported Gridinsoft rescan completed successfully and retained the Suspicious Website category. Its current first-party positive-signal list was empty, and it did not identify a specific malicious URL, file, payload, exploit, credential receiver, or hash.
- Analyst observation The supported rescan completed successfully for alienhosting.tech at 2026-08-25T04:45:50Z.
- Analyst observation Suspicious Website
- Analyst observation The current positive-signal list was empty and no exact harmful object was named.
A browser-capable request followed the root to the same-origin billing portal. Reviewed home, store, product configuration, announcements, network status, downloads, and login pages stayed on the expected site except for the published Terms of Service link to Typeform, and no automatic download or unrelated redirect was observed.
-
Final URL
https://alienhosting.tech/billing/ -
HTTP status
200 - Analyst observation No automatic download, credential impersonation flow, or unrelated redirect was observed in the reviewed public navigation.
The public store advertised recurring Alien Hosting packages, Alien Hosting and Alien Portal combinations, configurable extra connections, and a NordVPN section. The public pages did not explain the Alien Portal service provenance or the meaning of the separate No X variants.
- Analyst observation Alien Hosting and Alien Portal combination plans were offered from $23.00 USD monthly.
- Analyst observation The configuration page exposed an EXTRA CONNECTIONS option and required a desired login username.
- Analyst observation The reviewed catalog included parallel No X variants without a public explanation of that distinction.
The public resolved network-status history displayed eight incidents. Entries dated from 2024 through 2026 referred to VOD, Series, channels, Firestick use, an Alien Stream app, and a server hosting TV.APK, while the current alienhosting.tech registration began on 2026-07-16. This shows an older service history carried onto the new domain but does not establish that the referenced application was malicious.
- Analyst observation The public status page displayed eight resolved incidents.
- Analyst observation Visible entries referenced VOD, Series, channels, Firestick, Alien Stream, and TV.APK.
- Analyst observation The current alienhosting.tech registration date was 2026-07-16, later than multiple displayed incident dates from 2024.
The current public downloads page displayed no downloadable items. No current APK, executable, archive, file hash, or sample was available in the reviewed public scope.
- Analyst observation The page displayed No Downloads to Display.
- Analyst observation No current public APK, executable, archive, file hash, or malware sample was identified.
The site's Terms of Service link opened a one-question Typeform rather than a site-native policy page. The visible text prohibited refunds for missing or incorrect payment notes on Cash App and Zelle, retained unresolved domain and doman.com placeholders, identified the operator only as domain, and stated a 2019 update date despite the 2026 domain registration.
- Analyst observation The visible policy stated no refunds for wrong invoice numbers or an empty note or memo in Cash App and Zelle payments.
- Analyst observation The policy retained the literal placeholders domain and doman.com and did not identify the actual merchant entity.
- Analyst observation The policy stated that its last update was posted on 08/01/2019.
The public Contact Us route redirected to the account login page. The reviewed public store, footer, policy, and contact path did not provide a named merchant entity, physical business address, or direct public support email.
-
Final URL
https://alienhosting.tech/billing/index.php/login - Analyst observation The public Contact Us route required account login.
- Analyst observation No named merchant entity, physical business address, or direct public support email was displayed in the reviewed public scope.
The appealed apex host, which is also the registrable parent domain, resolved through Cloudflare. The www host pointed to the apex, and current certificate records covered alienhosting.tech and www.alienhosting.tech.
- DNS fact alienhosting.tech A 172.66.40.96 and 172.66.43.160
- DNS fact www.alienhosting.tech CNAME alienhosting.tech
- Certificate fact Current public certificate records covered alienhosting.tech and www.alienhosting.tech.
Scope and limitations
- No purchase, payment, account registration, or authenticated customer action was completed during this review.
- No current public downloadable application was available, so the historical TV.APK reference could not be obtained or analyzed as an exact file.
- Automated HTTP clients received a Cloudflare challenge while a browser-capable session reached the public pages; the verdict therefore relies on the browser-visible public flow and the recorded supported rescan.
- The result applies to the apex and www hosts and the public pages, redirects, forms, DNS, TLS, downloads, and status history reviewed at the recorded time.
Help protect others by sharing this page on social media! The more people who know about alienhosting.tech, the fewer chances they have to deceive someone else. Help others evaluate alienhosting.tech by sharing this page on social media!