When I enable BitDefender VPN I see activity to northghost.com attributed to Touch VPN on my monitoring systems. I have policies to block all anonymizer services by default (and exceptions for those I approve).
Has anyone else seen this? I see 2 requests per minute whenever my laptop is on.
Screenshot of current IPs below in case that helps in reviewing your own logs.
Bitdefender tech support said that they don't have any relationship with TouchVPN/Northghost but the traffic I see says otherwise. When I stopped Bitdefender VPN the traffic went to 0.
Perhaps someone knows what VPN service is in use behind BitDefender?
I think it used to be Hotspot Shield?
fig.1 : 2 requests per minute
fig 2: Related IPs
fig 3: Traffic goes to 0 after Bitdefender VPN terminated
Screenshots are from Cisco Umbrella - access attempts are from North America.
