When looking at the IPVanish logging situation and relating what companies are caught up in this anti-privacy scandal, we need to look for specific company names. IPVanish, its parent company StackPath, and the line of company acquisitions that led to StackPath. IPVanish was owned by a parent company, HighWinds, who also acquired a company who has hosting and routing resources called BandCon. Recently, all of these involved companies were acquired by StackPath.

So we have BandCon = IPVanish = HighWinds = StackPath. When we say any of these names pop up, we know that the VPN service is using StackPath/HighWinds infrastructure and can be wittingly or unwittingly logging all of their users.

When looking at IPs and Domains that are owned by StrongVPN, the name ReliableHosting comes up everywhere. Their customer support even comes from a @reliablehosting.com domain.

Here’s an example:

If we look up IP ranges that are assigned to StrongVPN, A lot of them are directly using StackPath infrastructure:

Exhibit A:

Exhibit B:

Exhibit C:

We can also see that StackPath is one of their primary peers for network connectivity here:

One might think that this link between StrongVPN and StackPath isn’t very strong. But a simple Google search gives you a number of employees that work for StackPath and ReliableHosting, or StackPath and StrongVPN.

Either StrongVPN is owned by StackPath outright, or the companies are so close that they share a significant number of employees. StrongVPN, like IPVanish, claims that they do not log any user information.

After it has been proven that IPVanish logs, we should not trust any StackPath company, any company that shares employees with StackPath, nor any company that is using StackPath infrastructure as it can be knowingly or unknowingly logging their users and violating their privacy.