ScanMalware.com

Security Scan Report: cyberghostvpn.com

Redirected to: https://www.cyberghostvpn.com/

Site favicon
Submitted: Feb 28, 2026, 4:25:16 PMCompleted: Feb 28, 2026, 4:26:58 PMpubliccompleted
Loading additional data...

Summary

This website contacted 15 IPs in 1 country across 16 domains to perform 86 HTTP transactions. The main domain is cyberghostvpn.com and was registered NaN years ago.

Submitted URL: https://cyberghostvpn.com

Effective URL: https://www.cyberghostvpn.com/Redirected

The Cisco Umbrella rank of the primary domain is #84,254 of the top 1 million websites

AI Security Verdict

Confirmed Scam

Confidence: 95%

9
Risk Score

The site is confirmed malicious due to multiple primary domain Indicators of Compromise; avoid and report it.

Risk Factors
Primary domain matches malicious Indicators of Compromise (anonymous web proxy)
Multiple IoC matches on the same primary domain
Brand name appears on a domain flagged as suspicious
Low Cisco Umbrella ranking for a brand‑named domain
Domain age information unavailable

Details

Page Title

Fast, Secure, & Private VPN Service | CyberGhost VPN

Scan Type

public

Language

🇺🇸

English

(80% confidence)

Category

technology software

(65%)

Domain Information

The domain 'cyberghostvpn.com' uses the commercial generic top-level domain (.com) while skipping any subdomain. The second-level label 'cyberghostvpn' is 13 characters long containing two vowels alongside 11 consonants. Tokenizing the label suggests 3 words: cyber, ghost, vpn. The median word length lands at 5 characters. No strong language cues emerged from the frequency lists.

Screenshot

Security scan screenshot of https://cyberghostvpn.com

Page Load Overview

3.45s
Total Load Time
96
HTTP Requests
17
Domains
1.8 MB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

Language Code:en
Detection Confidence:80%
Script Type:Latin
HTML Lang Attribute:en
Text Length:68,952 chars
Detector Agreement:100%

Website Classification

Primary Category

technology software65% confidence
Type: spa
Method: ml+structural

All Detected Categories

technology software
65%
corporate
35%
finance banking
34%
government public service
32%
adult content
31%

Detected Features

Products
Schema.org

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
12151.101.2.137United States
AS15169
635.241.3.184Kansas City, Missouri, United States
AS396982Google LLC
6172.66.132.12United States
AS13335Cloudflare, Inc.
6142.251.127.97United States
AS13335
6104.17.25.14United States
AS13335Cloudflare, Inc.
6104.16.80.73United States
AS13335Cloudflare, Inc.
6172.66.132.11United States
AS13335Cloudflare, Inc.
6172.217.20.138United StatesUnknown
6142.251.141.67United StatesUnknown
634.120.238.166Kansas City, Missouri, United States
AS396982Google LLC
9615--

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1D6744A7282B005BE625343996BE47B0C73A18043FB6685C8F76FC654BFC9DB32835A56

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

3072:Ol2rSvKsfju8seXdus9X6Kk/0hTYIFh0UOm:Ol2rSvKsfjuyk0hTYGOm

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:347357:j2AibZBiIByPAEIQC5A5CoYQWwmMJUMQjRCBHAABMgASBGBSQwIIEyhFEEUKwZEAOLDiOaBi4B7BxFoAVGL6GgGAIAYkQhQM

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:00fbd3f3fbff7f3f
Perceptual Hash:ad7c1373036e2a2d
Difference Hash:493636263608cee1
Wavelet Hash:00d38393f3ff033c
Color Hash:#c5878f

Other Hashes

Crop Resistant:493636263608cee1,0183730b0b718301,0b69889125670307,2594bc83a4d8d8a5

Scan History

Scan history not available

Unable to load historical scan data