Touch VPN / northghost.com activity

tbRMD

When I enable BitDefender VPN I see activity to northghost.com attributed to Touch VPN on my monitoring systems. I have policies to block all anonymizer services by default (and exceptions for those I approve).

Has anyone else seen this? I see 2 requests per minute whenever my laptop is on.

Screenshot of current IPs below in case that helps in reviewing your own logs.

Bitdefender tech support said that they don't have any relationship with TouchVPN/Northghost but the traffic I see says otherwise. When I stopped Bitdefender VPN the traffic went to 0.

Perhaps someone knows what VPN service is in use behind BitDefender?

I think it used to be Hotspot Shield?

fig.1 : 2 requests per minute

fig 2: Related IPs

fig 3: Traffic goes to 0 after Bitdefender VPN terminated

Screenshots are from Cisco Umbrella - access attempts are from North America.

Alexandru_BD

Hello @tbRMD and welcome to the Community!

You are correct, the VPN service is provided by Hotspot Shield / Aura.

Touch VPN is also developed by Aura, thus both are under the same umbrella. Essentially, it's the same VPN service.

Cheers.