I was going to add an entry in Hosts file to make it easy to connect with a server. But when I opened the C:WindowsSystem32driversetchosts , I saw an entry for (changed the real ip to xx below):
xx.xxx.xxx.xxx geoip.pango-paas.co
While searching for this URL on google and some other places I found were domain lists (not sure if they were for could be probably for blacklists but not sure) , the IP in the hosts file isn’t the one in the DNS entry of that domain. Not really sure why its there and how it got there, found one Italian forum which says could related to VPN (I use Bitdefender VPN and OpenVPN Connect) but still not sure why it would add such entry.
Just want to find how it got there and if it is something malicious need to take actions appropriately
