A variant of this technique was briefly popular for "underground" sites around a decade ago --- someone would setup a site on virtual hosting with an unregistered (or registered, but pointing somewhere else) domain name, then disseminate that name along with the IP of the "hidden" host to those authorised for manual addition to HOSTS files; it was by no means secure, but quite effective at keeping out most of the population who don't know how these things work.