What Gridinsoft observed on alldigitalspace.com
A Gridinsoft threat analyst reviewed the site directly and documented the evidence behind this decision.
GMA-20260828050905-e3474aa6
- Reviewed
- by Gridinsoft Threat Analyst
- Analyst finding
- Suspicious Shop
- Evidence basis
- First-party site analysis External vendor intelligence: Context only — not used for this decision
The deeper independent review supports Suspicious Shop for the current public deployment. No malware or phishing object was reproduced. The narrower commerce-risk classification instead follows from reproducible first-party storefront issues: no verifiable legal operator or reseller relationship is disclosed; a lifetime Office 365 account and broad authenticity claims lack material license-channel and term information; refund and delivery promises conflict across current pages; and the sampled checkout has no available payment method. Exact-domain customer reports and external warnings corroborate risk but did not determine the verdict.
Analyst findings
Review 9 documented observations View evidence
The apex and www alias served the same current WordPress and WooCommerce software-key storefront. Twenty-eight discoverable public URLs and thirty-five same-origin scripts were reviewed across desktop, mobile, crawler, Gridinsoft, and referrer profiles. The reviewed surface did not produce an unrelated final redirect, external form receiver, iframe, automatic executable or archive download, credential imitation, or current malware payload.
-
HTTP status
200 -
Final URL
https://alldigitalspace.com/ -
Redirect destination
https://www.alldigitalspace.com/ converged on https://alldigitalspace.com/ - Analyst observation Twenty-eight discoverable public URLs returned the expected site or same-site cart destination; no reviewed URL ended at an unrelated host.
- Analyst observation Thirty-five same-origin scripts and the reviewed inline navigation code did not expose a malware-delivery command, executable link, or obfuscated harmful redirect.
- Analyst observation The fresh supported Gridinsoft scan returned HTTP 200 for Digital Space and recorded zero current positive behavior signals.
The public catalogue exposed eleven purchasable Microsoft software-key or account products. Adding a representative Office 2021 item created an ordinary same-site cart and checkout with billing and email fields, but the current checkout displayed that no payment methods were available. No payment, order, login, account creation, or form submission was performed.
-
HTTP status
200 -
Final URL
https://alldigitalspace.com/checkout/ - Page element The sampled cart contained Office 2021 Professional Plus License Key For Windows at USD 24.99.
- Page element The current checkout stated that no payment methods were available and instructed the visitor to contact the store for alternate arrangements.
- Analyst observation The login and contact forms posted to same-origin WordPress or WooCommerce handlers; no external credential receiver was observed.
The About, Contact, Privacy, Terms, Refund, Shipping, Copyright, and Acceptable Use pages identify only the trading name Digital Space, one same-domain contact mailbox, and a United States phone and WhatsApp number. The reviewed public pages do not identify a legal entity, registration number, business address, responsible person, jurisdiction, or verifiable Microsoft reseller relationship.
- Page element The visible operator name is Digital Space.
- Page element The public contact number is +1 (478) 396-0167 and the contact mailbox is on alldigitalspace.com.
- Analyst observation No reviewed company or policy page disclosed a legal entity, registration number, business address, responsible person, or governing jurisdiction.
- Analyst observation The Acceptable Use and policy pages contain unresolved placeholder-style contact text while the footer supplies only the same mailbox and phone number.
The store offers an Office 365 Professional Plus account for USD 24.99 as a lifetime activation for five devices with ongoing updates, cloud storage, business email, Teams, and Power Apps. Other pages make unqualified claims that all keys are brand new, unique, genuine, authentic, and valid for life. The reviewed storefront provides no supplier identity, license channel, transfer-right explanation, tenant or subscription term, product-key provenance, issuer-hosted certificate, or official Microsoft directory link supporting those material claims.
- Page element Office 365 Professional Plus Account For Windows & Mac is offered for USD 24.99 with lifetime activation and use on five devices.
- Page element The account description advertises regular updates, OneDrive storage, business email, Microsoft Teams, and Microsoft Power Apps.
- Page element Product pages repeatedly describe the licences as 100% Authentic, brand new, unused, unique, genuine, and lifetime-valid.
- Public artifact URL https://learn.microsoft.com/en-us/microsoft-365/commerce/licenses/subscriptions-and-licenses
- Analyst observation The reviewed site does not disclose the license channel, supplier, transfer rights, Microsoft tenant or subscription term, or issuer-verifiable authorization for the offered accounts and keys.
Current sales representations conflict on material fulfilment and remedy terms. Product pages promise a full refund or replacement and a fourteen-day money-back option, while the Refund Policy says digital sales are final, permits only limited exceptions, and requires contact within seven days. Delivery is variously described as within seconds, five to thirty minutes, thirty minutes to two hours, and immediately after payment.
- Page element Product pages state free replacement or full refund if a key or account does not work and separately advertise a 14-Day Money-Back option.
- Page element The Refund Policy says digital-product sales are final, lists limited exceptions, and requires a request within 7 days.
- Page element Delivery claims range from within seconds to 5-30 minutes, 30 minutes-2 hours, and immediately after payment.
- Analyst observation The current checkout had no available payment method despite the storefront's active purchase, secure-payment, and instant-delivery representations.
The exact-domain Trustpilot record contains both positive and negative transaction reports and currently displays 3.2 out of 5 from twenty-seven reviews. Recent adverse reports specifically dispute the store's current lifetime-activation, replacement, delivery, and support representations. These reports are customer allegations rather than adjudicated facts and were treated only as corroborating shop-risk context.
- Public artifact URL https://www.trustpilot.com/review/alldigitalspace.com
- Analyst observation The exact-domain profile displayed 3.2 out of 5 from 27 reviews, including positive purchase reports and adverse reports.
- Analyst observation Two 2026 reports state that products advertised with lifetime activation later stopped working and dispute replacement or support handling.
- Analyst observation Individual reviews were not treated as proof of a specific transaction or as malware evidence.
Exact-host and parent-domain OSINT covered public search indexes, urlscan, OTX, recent URLhaus, ThreatFox and OpenPhish feeds, malware-sandbox searches, certificate transparency, Common Crawl availability, and web archives. urlscan exposed thirteen namespace records from 2022-2026 without a stored malicious verdict, including historical short-link arrivals and a current keyset.shop redirect into the storefront. OTX returned zero pulses for apex and www. No reviewed public record supplied a current malicious file, payload, hash, phishing receiver, or harmful browser behavior trace.
- Public artifact URL https://urlscan.io/domain/alldigitalspace.com
- Public artifact URL https://otx.alienvault.com/indicator/domain/alldigitalspace.com
- Analyst observation urlscan search returned 13 apex, www, or email-host records from 2022-2026 and did not publish a malicious verdict in the returned metadata.
-
Redirect destination
https://keyset.shop/ currently redirects to https://alldigitalspace.com/ and a 2026 urlscan record captured the same destination. - Analyst observation OTX returned zero pulses and zero URL observations for both alldigitalspace.com and www.alldigitalspace.com.
- Analyst observation No exact-domain match was present in the reviewed recent URLhaus, ThreatFox, or OpenPhish public feeds; unavailable or authorization-only APIs were treated as unverified rather than clean.
- Analyst observation Exact public searches of Hybrid Analysis, ANY.RUN, Triage, Joe Sandbox, URLQuery, URLhaus, and ThreatFox did not expose a current object-level sample for the domain.
Wayback returned 381 digest-collapsed successful HTML records for the domain namespace, including root captures from December 2021 through January 2026. The archive shows continuous software-key commerce, historical short-link arrivals, Office 365 account sales, and earlier lifetime Adobe product offers. The preserved pages support storefront continuity and commerce-risk review but do not show malware execution or a phishing receiver.
- Public artifact URL https://web.archive.org/web/*/https://alldigitalspace.com/
- Analyst observation The reviewed CDX response contained 381 digest-collapsed HTTP 200 HTML rows for the domain namespace.
- Analyst observation Root snapshots were available from 2021-12-08 through 2026-01-21 and consistently presented a software-key storefront.
- Analyst observation Archived product pages included Office 365 account offers and lifetime Adobe application licences; those historical claims were evaluated as shop context, not as evidence of malware.
The apex currently resolves through Cloudflare, www is a same-site alias, the active certificate covers the apex and wildcard namespace, and email uses Cloudflare mail routing. These technical facts establish a stable reachable deployment but do not verify the store's operator identity, software provenance, reseller authority, fulfilment, or refund claims.
- DNS fact Apex A: 104.21.7.162 and 172.67.136.244; nameservers: audrey.ns.cloudflare.com and cartman.ns.cloudflare.com.
- Certificate fact The active certificate covers alldigitalspace.com and *.alldigitalspace.com.
- DNS fact MX routes through Cloudflare mail servers and SPF includes _spf.mx.cloudflare.net.
Scope and limitations
- No purchase, payment, account registration, credential submission, software download, license activation, refund request, or support interaction was performed by Gridinsoft.
- Gridinsoft did not inspect private supplier agreements, invoices, vendor-partner portals, product keys, Microsoft tenant records, order records, payment accounts, customer devices, or private correspondence.
- The absence of a disclosed legal entity or issuer-verifiable authorization does not prove that no entity or commercial relationship exists; the current public storefront does not provide a verifiable source for those claims.
- Trustpilot reviews are user statements rather than findings by Gridinsoft or Trustpilot; positive and negative reports both exist, and individual transactions were not adjudicated.
- Public search, URL-scan, sandbox, threat-intelligence, and archive indexes are incomplete. Authentication-only, unavailable, and unindexed records were treated as unverified rather than clean.
- The verdict is a current commerce-risk assessment. It is not a finding that a specific malware payload, phishing page, illegal product, criminal act, or verified real-world operator identity exists.
- The result applies to alldigitalspace.com, its www alias, and the reviewed public pages at the recorded time; future content and private fulfilment systems were not certified.
