home

download.cyberghostvpn.com

CyberGhost S.R.L.

Domain Information

The domain download.cyberghostvpn.com registered by CyberGhost S.R.L. was initially registered in August of 2007 through INTERNETWORX LTD. & CO. KG. The hosted servers are located in New York City, New York within the United States which resides on the Amazon Technologies Inc. network. The domain uses the Amazon Cloudfront CDN service which utilizes a number of proxy IP Addresses (see below).
Registrar:
INTERNETWORX LTD. & CO. KG

Server location:
New York, United States (US)

Create date:
Monday, August 13, 2007

Expires date:
Saturday, August 13, 2016

Updated date:
Friday, August 14, 2015

ASN:
AS16509 AMAZON-02 - Amazon.com, Inc.

Root domain:
cyberghostvpn.com

Whois:
3 cyberghostvpn.com records

The domain download.cyberghostvpn.com has been seen to resolve to the following 47 IP addresses.

104.20.26.8
May 18, 2016

104.20.27.8
May 18, 2016

198.41.249.232
January 30, 2016

162.159.240.233
January 30, 2016

54.230.195.62
server-54-230-195-62.iad53.r.cloudfront.net
November 13, 2015

54.230.194.161
server-54-230-194-161.iad53.r.cloudfront.net
November 13, 2015

54.230.194.146
server-54-230-194-146.iad53.r.cloudfront.net
November 13, 2015

54.230.193.249
server-54-230-193-249.iad53.r.cloudfront.net
November 13, 2015

54.230.192.149
server-54-230-192-149.iad53.r.cloudfront.net
November 13, 2015

54.192.195.161
server-54-192-195-161.iad53.r.cloudfront.net
November 13, 2015

54.192.193.70
server-54-192-193-70.iad53.r.cloudfront.net
November 13, 2015

54.239.152.188
server-54-239-152-188.iad53.r.cloudfront.net
November 13, 2015

104.25.67.10
November 13, 2015

104.25.66.10
November 13, 2015

141.101.127.130
September 4, 2014

108.162.200.131
September 4, 2014

54.230.49.98
server-54-230-49-98.jfk5.r.cloudfront.net
July 7, 2014

54.230.51.164
server-54-230-51-164.jfk5.r.cloudfront.net
July 7, 2014

54.230.51.244
server-54-230-51-244.jfk5.r.cloudfront.net
July 7, 2014

54.230.49.188
server-54-230-49-188.jfk5.r.cloudfront.net
July 7, 2014

54.230.51.87
server-54-230-51-87.jfk5.r.cloudfront.net
July 7, 2014

54.230.49.136
server-54-230-49-136.jfk5.r.cloudfront.net
July 7, 2014

54.230.51.2
server-54-230-51-2.jfk5.r.cloudfront.net
July 7, 2014

54.230.52.222
server-54-230-52-222.jfk6.r.cloudfront.net
May 31, 2014

54.230.52.79
server-54-230-52-79.jfk6.r.cloudfront.net
May 31, 2014

54.230.53.252
server-54-230-53-252.jfk6.r.cloudfront.net
May 31, 2014

54.240.190.30
server-54-240-190-30.jfk6.r.cloudfront.net
May 31, 2014

54.230.54.218
server-54-230-54-218.jfk6.r.cloudfront.net
May 31, 2014

54.230.53.73
server-54-230-53-73.jfk6.r.cloudfront.net
May 31, 2014

54.230.53.38
server-54-230-53-38.jfk6.r.cloudfront.net
May 31, 2014

 
Showing 30 of 47 IP Addresses

File downloads found at URLs served by download.cyberghostvpn.com.

0 / 68
https://download.cyberghostvpn.com/windows/.../CG_5.5.1.342961.exe  (e5fc65b61d177b41bc41a49f36cbe568)

0 / 68
http://download.cyberghostvpn.com/.../CG_5.5.1.3.exe  (f7d86b00746b3e47e2fcd212b33d5dfd)

0 / 68
http://download.cyberghostvpn.com/.../CyberGhost_6.0.0.1823_2.exe  (9798238c7f3983688fa6b6797795605f)

0 / 68
http://download.cyberghostvpn.com/.../CG_5.0.15.14.exe  (2486e7f29dc1b6320145d4ceb757958b)

0 / 68
http://download.cyberghostvpn.com/.../CG_5.5.0.2_7.exe  (db61d36a8002c4c00a59f30a998fb181)

0 / 68
https://download.cyberghostvpn.com/windows/.../CG_6.0.142962.exe  (c02a24fa6a420542ec6e4f904ae032ea)

0 / 68
http://download.cyberghostvpn.com/windows/.../CG_5.5.1.3softoniccom.exe  (0144fc687f304bf475f6b62b249f5051)

0 / 68
http://download.cyberghostvpn.com/.../CG_5.0.14.7.exe  (e926bcae112566d727e0fcc967083bdd)

0 / 68
http://download.cyberghostvpn.com/.../CyberGhost_6.0.0.1381.exe  (7a9cae8831892bd99297477463653e48)

1 / 68      (Adware)
http://download.cyberghostvpn.com/.../CG_5.0.13.17.exe  (11f82e6faa01c1542a9b19459ad0355a)

0 / 68
https://download.cyberghostvpn.com/.../CG_5.0.15.14_72.exe  (23e0e8626bc45339daaf1f44a18c54a6)

0 / 68
https://download.cyberghostvpn.com/.../CG_5.5.1.3.exe  (7c38c40cc4d145fa1b5831c23decae80)

The following 26 files have been seen to comunicate with download.cyberghostvpn.com in live environments.

TCP » 54.230.53.73:443
online-guardian-v2.0.9.exe

TCP » 54.230.51.87:80
uvconverter.exe

TCP » 54.230.192.149:443
online-guardian-v2.0.9.exe

TCP » 54.230.53.73:443
online-guardian-v2.0.9.exe

TCP » 54.230.51.87:80
uvconverter.exe

TCP » 54.230.51.164:80
UCBrowser.exe (UC Browser by UCWeb)

TCP » 54.230.51.87:80
gibay.exe (Glary Utilities by Glarysoft)

TCP » 54.230.51.87:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.230.192.149:443
online-guardian-v2.0.9.exe

TCP » 54.230.51.87:80
xderaent.exe (Glary Utilities by Glarysoft)

TCP » 54.230.51.87:80
uvconverter.exe (Copyright (C) 2016)

TCP » 54.230.53.73:443
apptrailers.exe

TCP » 205.251.251.124:80
nsp5eba.tmp

TCP » 54.230.50.23:80
WajamInternetEnhancer.exe (Wajam Internet Enhancer by Wajam Internet Technologies)

TCP » 54.230.51.164:80
aroqis.exe (Glary Utilities by Glarysoft)

TCP » 54.230.51.87:80
PureLeads.Service.exe (Sendori.Service by sendori)

TCP » 54.230.51.87:80
uvconverter.exe (TODO: <Product name> by TODO: <Company name>)

TCP » 54.230.51.87:80
teqoent.exe (Glary Utilities by Glarysoft)

TCP » 54.230.51.87:80
xreudeph.exe (Glary Utilities by Glarysoft)

TCP » 54.230.51.87:80
xcervoly.exe (Glary Utilities by Glarysoft)

 
Latest 20 of 32 files

URL:
http://download.cyberghostvpn.com/

Network:
Amazon Cloudfront

SSL certificate subject:
CN=ssl339074.cloudflaressl.com, OU=PositiveSSL Multi-Domain, OU=Domain Control Validated

SSL certificate issuer:
CN=COMODO RSA Domain Validation Secure Server CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Web server:
cloudflare-nginx

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.