Nord Vpn

capture taken 6h ago

what the page says

Just a moment...

Online VPN service that encrypts your internet traffic and hides your IP with physical location. Upgrade your privacy and security now.

We value your privacy Our website uses cookies to provide you with a safer and more personalized experience. By accepting, you agree to the use of cookies for ad personalization and analytics. This may involve sharing data with third-party partners. Learn more in our Cookie Policy. Accept Reject Customize Your IP: 80.197.127.162 · Your ISP: TDC NET · Your Status: Unprotected Skip to main content Pricing Features Download VPN Learn For Business opens in a new tab Log In opens in a new tab Support Center opens in a new tab Products Bahasa Indonesia Dansk Deutsch English Español Español…

reachability history

The 5 most recent checks.
When	Status	HTTP	Response	Bytes	Via
7m ago	Responding-403	403	121 ms	5,551	curl
1h ago	Responding-403	403	98 ms	5,551	curl
2h ago	Responding-403	403	109 ms	5,551	curl
4h ago	Responding-403	403	98 ms	5,551	curl
6h ago	Alive	200	383 ms	551,746	chrome-stealth

security headers

Csp

Raw

default-src 'self' https://debug.nordvpn.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://s1.nordcdn.com https://googleads.g.doubleclick.net https://nordvpn-com-blog.disqus.com https://challenges.cloudflare.com https://websdk.appsflyer.com https://*.appsflyersdk.com https://browser.sentry-cdn.com https://cdn.maptiler.com; script-src-elem 'self' 'unsafe-inline' https://challenges.cloudflare.com https://www.googletagmanager.com https://s1.nordcdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://nordvpn-dev.disqus.com https://c.disquscdn.com https://connect.facebook.net https://nordvpn-com-blog.disqus.com https://websdk.appsflyer.com https://*.appsflyersdk.com https://nordvpn.com https://www.youtube.com https://browser.sentry-cdn.com/ https://cdn.maptiler.com; style-src 'self' 'unsafe-inline' https://labs.nordvpn.com https://s1.nordcdn.com https://sb.nordcdn.com https://www.gstatic.com https://c.disquscdn.com; img-src 'self' data: https: https://ic.nordcdn.com https://sb.nordcdn.com; connect-src 'self' data: https://d.nordvpn.com https://dctdp.com https://web-api.nordvpn.com https://cm.nordvpn.com https://file-checker.nordvpn.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://links.services.disqus.com https://stats.g.doubleclick.net https://sb.nordcdn.com https://ic.nordcdn.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://debug.nordvpn.com https://www.googletagmanager.com https://link-checker.nordvpn.com https://dnsleak-api.nordvpn.com https://*.dnsleak.nordvpn.com https://www.bing.com https://banner.appsflyer.com https://creatives-cdn.appsflyer.com https://*.appsflyersdk.com https://partner-acer.nordsec.com https://www.google-analytics.com https://nordvpn.zendesk.com https://browser.sentry-cdn.com https://connect.facebook.net https://scam-checker.nordvpn.com https://api.maptiler.com https://scam-splainer.nordvpn.com; form-action 'self' https://webto.salesforce.com https://web-api.nordvpn.com; font-src 'self' data: https://sb.nordcdn.com https://fonts.gstatic.com https://cdn.appsflyer.com https://*.appsflyersdk.com; media-src 'self' https://*.nordcdn.com data:; object-src https://ic.nordcdn.com; frame-ancestors 'self' https://nordvpn.com https://nordvpn.com:443; frame-src 'self' nordvpn: nordvpn-sl: nordvpn-app: https://disqus.com https://www.youtube.com https://www.googletagmanager.com https://*.doubleclick.net https://challenges.cloudflare.com https://visit.nordvpn.com https://go.nordvpn.net https://openspeedtest.com https://dev.oathstudio.com https://nordvpncards2023.oathstudio.com https://www.thinglink.com https://webto.salesforce.com https://ic.nordcdn.com; block-all-mixed-content; upgrade-insecure-requests; report-uri https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d&sentry_environment=production; report-to csp-endpoint

Directives

Default src: 'self'https://debug.nordvpn.com
Script src: 'self''unsafe-inline'https://www.googletagmanager.comhttps://s1.nordcdn.comhttps://googleads.g.doubleclick.nethttps://nordvpn-com-blog.disqus.comhttps://challenges.cloudflare.comhttps://websdk.appsflyer.comhttps://*.appsflyersdk.comhttps://browser.sentry-cdn.comhttps://cdn.maptiler.com
Script src elem: 'self''unsafe-inline'https://challenges.cloudflare.comhttps://www.googletagmanager.comhttps://s1.nordcdn.comhttps://www.googleadservices.comhttps://googleads.g.doubleclick.nethttps://nordvpn-dev.disqus.comhttps://c.disquscdn.comhttps://connect.facebook.nethttps://nordvpn-com-blog.disqus.comhttps://websdk.appsflyer.comhttps://*.appsflyersdk.comhttps://nordvpn.comhttps://www.youtube.comhttps://browser.sentry-cdn.com/https://cdn.maptiler.com
Style src: 'self''unsafe-inline'https://labs.nordvpn.comhttps://s1.nordcdn.comhttps://sb.nordcdn.comhttps://www.gstatic.comhttps://c.disquscdn.com
Img src: 'self'data:https:https://ic.nordcdn.comhttps://sb.nordcdn.com
Connect src: 'self'data:https://d.nordvpn.comhttps://dctdp.comhttps://web-api.nordvpn.comhttps://cm.nordvpn.comhttps://file-checker.nordvpn.comhttps://www.google.comhttps://www.googleadservices.comhttps://googleads.g.doubleclick.nethttps://links.services.disqus.comhttps://stats.g.doubleclick.nethttps://sb.nordcdn.comhttps://ic.nordcdn.comhttps://pagead2.googlesyndication.comhttps://ad.doubleclick.nethttps://debug.nordvpn.comhttps://www.googletagmanager.comhttps://link-checker.nordvpn.comhttps://dnsleak-api.nordvpn.comhttps://*.dnsleak.nordvpn.comhttps://www.bing.comhttps://banner.appsflyer.comhttps://creatives-cdn.appsflyer.comhttps://*.appsflyersdk.comhttps://partner-acer.nordsec.comhttps://www.google-analytics.comhttps://nordvpn.zendesk.comhttps://browser.sentry-cdn.comhttps://connect.facebook.nethttps://scam-checker.nordvpn.comhttps://api.maptiler.comhttps://scam-splainer.nordvpn.com
Form action: 'self'https://webto.salesforce.comhttps://web-api.nordvpn.com
Font src: 'self'data:https://sb.nordcdn.comhttps://fonts.gstatic.comhttps://cdn.appsflyer.comhttps://*.appsflyersdk.com
Media src: 'self'https://*.nordcdn.comdata:
Object src: https://ic.nordcdn.com
Frame ancestors: 'self'https://nordvpn.comhttps://nordvpn.com:443
Frame src: 'self'nordvpn:nordvpn-sl:nordvpn-app:https://disqus.comhttps://www.youtube.comhttps://www.googletagmanager.comhttps://*.doubleclick.nethttps://challenges.cloudflare.comhttps://visit.nordvpn.comhttps://go.nordvpn.nethttps://openspeedtest.comhttps://dev.oathstudio.comhttps://nordvpncards2023.oathstudio.comhttps://www.thinglink.comhttps://webto.salesforce.comhttps://ic.nordcdn.com
Report uri: https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d&sentry_environment=production
Report to: csp-endpoint

Unsafe inline

yes

Unsafe eval

Hsts

Max age: 31536000
Include subdomains: yes
Preload: yes

X content type options

: nosniff

Referrer policy

strict-origin-when-cross-origin

Permissions policy

Geolocation: (self)
Microphone: ()
Camera: ()
Payment: ()
Usb: ()
Bluetooth: ()
Autoplay: (self "https://www.youtube.com" "https://sb.nordcdn.com" "https://challenges.cloudflare.com")
Fullscreen: (self "https://www.youtube.com" "https://sb.nordcdn.com" "https://challenges.cloudflare.com")

Cross origin

Cookies

Count: 0
Secure: 0
Httponly: 0
Samesite: 0

Score

67

Missing

x_frame_optionscoopcoepcorp

tls certificate

Protocol: TLS 1.3
Cipher: AES_128_GCM
Key exchange group: X25519MLKEM768
Signature algorithm: 2052
Subject: *.nordvpn.com
Issuer: Sectigo Public Server Authentication CA DV R36
San: *.nordvpn.comnordvpn.com
San count: 2
Wildcard: yes
Valid from: 2025-10-01 00:00:00
Valid to: 2026-10-31 23:59:59
Days remaining: 71
Self signed: no
Ct compliance: unknown
Ech: no

technology detected

Server

Raw: cloudflare
Name: cloudflare
Family: cloudflare

Analytics

Name
Google Analytics

Cdn

Cloudflare

Protocol

h2

what blocks us

Detected: no
Confidence: 0
Waited ms: 0
Http code: 200
Via: chrome-stealth

contacts published

Emails[email protected]
Total1

crypto addresses

Total0

forms on the page

Count

1

Kinds

Other: 1

Has login

Has search

Has upload

Forms

Kind
other
Method
get
Action
https://nordvpn.com/
Inputs
2
Types
text
Password
no
File
no

outbound onion links

onion_unique not tracked onion_unique
onion_total not tracked onion_total
clearnet_unique not tracked clearnet_unique 22
internal not tracked internal 66
external not tracked external 40
total not tracked total 245
truncated not tracked truncated

response headers

Header	Value
`alt-svc`	h3=":443"; ma=86400
`cache-control`	max-age=14400, private
`cf-cache-status`	MISS
`cf-ray`	a2e96d872c644d24-CPH
`content-encoding`	br
`content-security-policy`	default-src 'self' https://debug.nordvpn.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://s1.nordcdn.com https://googleads.g.doubleclick.net https://nordvpn-com-blog.disqus.com https://challenges.cloudflare.com https://websdk.appsflyer.com https://.appsflyersdk.com https://browser.sentry-cdn.com https://cdn.maptiler.com; script-src-elem 'self' 'unsafe-inline' https://challenges.cloudflare.com https://www.googletagmanager.com https://s1.nordcdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://nordvpn-dev.disqus.com https://c.disquscdn.com https://connect.facebook.net https://nordvpn-com-blog.disqus.com https://websdk.appsflyer.com https://.appsflyersdk.com https://nordvpn.com https://www.youtube.com https://browser.sentry-cdn.com/ https://cdn.maptiler.com; style-src 'self' 'unsafe-inline' https://labs.nordvpn.com https://s1.nordcdn.com https://sb.nordcdn.com https://www.gstatic.com https://c.disquscdn.com; img-src 'self' data: https: https://ic.nordcdn.com https://sb.nordcdn.com; connect-src 'self' data: https://d.nordvpn.com https://dctdp.com https://web-api.nordvpn.com https://cm.nordvpn.com https://file-checker.nordvpn.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://links.services.disqus.com https://stats.g.doubleclick.net https://sb.nordcdn.com https://ic.nordcdn.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://debug.nordvpn.com https://www.googletagmanager.com https://link-checker.nordvpn.com https://dnsleak-api.nordvpn.com https://.dnsleak.nordvpn.com https://www.bing.com https://banner.appsflyer.com https://creatives-cdn.appsflyer.com https://.appsflyersdk.com https://partner-acer.nordsec.com https://www.google-analytics.com https://nordvpn.zendesk.com https://browser.sentry-cdn.com https://connect.facebook.net https://scam-checker.nordvpn.com https://api.maptiler.com https://scam-splainer.nordvpn.com; form-action 'self' https://webto.salesforce.com https://web-api.nordvpn.com; font-src 'self' data: https://sb.nordcdn.com https://fonts.gstatic.com https://cdn.appsflyer.com https://.appsflyersdk.com; media-src 'self' https://.nordcdn.com data:; object-src https://ic.nordcdn.com; frame-ancestors 'self' https://nordvpn.com https://nordvpn.com:443; frame-src 'self' nordvpn: nordvpn-sl: nordvpn-app: https://disqus.com https://www.youtube.com https://www.googletagmanager.com https://*.doubleclick.net https://challenges.cloudflare.com https://visit.nordvpn.com https://go.nordvpn.net https://openspeedtest.com https://dev.oathstudio.com https://nordvpncards2023.oathstudio.com https://www.thinglink.com https://webto.salesforce.com https://ic.nordcdn.com; block-all-mixed-content; upgrade-insecure-requests; report-uri https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d&sentry_environment=production; report-to csp-endpoint
`content-type`	text/html
`date`	Fri, 21 Aug 2026 11:51:47 GMT
`last-modified`	Thu, 20 Aug 2026 14:10:09 GMT
`link`	<https://nordvpn.com/>; rel="canonical"
`permissions-policy`	geolocation=(self), microphone=(), camera=(), payment=(), usb=(), bluetooth=(), autoplay=(self "https://www.youtube.com" "https://sb.nordcdn.com" "https://challenges.cloudflare.com"), fullscreen=(self "https://www.youtube.com" "https://sb.nordcdn.com" "https://challenges.cloudflare.com")
`referrer-policy`	strict-origin-when-cross-origin
`report-to`	: {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d&sentry_environment=production"}]}
`reporting-endpoints`	csp-endpoint="https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d&sentry_environment=production"
`server`	cloudflare
`strict-transport-security`	max-age=31536000; includeSubDomains; preload
`vary`	Accept-Encoding
`x-content-type-options`	: nosniff