openyes.info

Does anyone know what "openyes.info" is. Eset Smart Security has blocked 3 or 4 times that I know of.

simrick said:

It appears to be a domain with a lot of redirects, so questionable...and some scanners have detected threats

https://www.virustotal.com/en/domain...o/information/

That's about all I could find when I did a search. I did install CyberGhost about 10 days ago to try it and was thinking that could be it. The only thing is I get the warning from Eset even though CyberGhost isn't running.

I have run Malwarebytes and SuperAntiSpyware and they only found a few tracking cookies. I'm sure it's from a program I installed. I'm just not sure which one. The programs on my list of suspects are CyberGhost, eM Client, Genie9, and IObit Uninstaller. CyberGhost isn't running but the other programs are running in the background. Eset is blocking it and everything seems to be running so I guess its OK. I would like to know what program is doing this and if it's safe or not. If all else fails I could try the hit and miss method by uninstalling one program at a time. If I do it'll take awhile because it's only happened a few time. I tried looking in Eset for a log but can't find anything about blocking openeyes.info.

edit: I just thought of two programs that are running in the background and could be causing it, HP Support Assistant and Steam.

simrick said:

Matbe you can do some investigating with WireShark?
How to Use Wireshark to Capture, Filter and Inspect Packets

Thanks, I'll give it a try. I'm surprised that every search engine I try has very little info about openyes.info. Some don't have any info at all. I'm hoping to find out what program is using openyes.info and if it's safe or not.

I did find out it's trying to connect to the Netherlands. If the message pops up I'll try to get a screen shot.