GET nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
104.19.159.190200 OK 1.4 kB URL
nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (1356)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 1.4 kB (1438 bytes)
MD5 53da0c8ee587c060f5fef3f837400fea
SHA1 236b9bb1bda77889c3a25e2b9dc6371352a9e51c
SHA256 82bc0296dcfe141bcc1fc69e68ff4746093cf37b299e24a57f2b886785c80d23
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c58273aca556a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb66a-59e"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST d.nordvpn.com/1/cc
104.19.159.190202 Accepted 0 B IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
POST /1/cc HTTP/1.1
Host: d.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 733
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868166_1_1; consent=ignored%2CES
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/3 202 Accepted
date: Wed, 09 Jul 2025 05:44:28 GMT
content-length: 0
x-request-id: 5811018ceec01aefbc062282893dd20f
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: https://nordvpn.com
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 600
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 95c58278783856a2-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET visit.nordvpn.com/?offer_id=312&aff_id=2495&aff_transaction_id=10217768d10a328b1f8b476f44e243&source=¶ms[ho_asub1]=101290684&url_id=5
104.19.159.190302 Found 348 kB URL
visit.nordvpn.com/?offer_id=312&aff_id=2495&aff_transaction_id=10217768d10a328b1f8b476f44e243&source=¶ms[ho_asub1]=101290684&url_id=5
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 348 kB (347958 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /?offer_id=312&aff_id=2495&aff_transaction_id=10217768d10a328b1f8b476f44e243&source=¶ms[ho_asub1]=101290684&url_id=5 HTTP/1.1
Host: visit.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Wed, 09 Jul 2025 05:44:26 GMT
content-length: 0
location: https://nordvpn.com/de?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
cache-control: no-store, no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
set-cookie: aff_id=2495; Domain=nordvpn.com; Max-Age=2592000
aff_transaction_id=10217768d10a328b1f8b476f44e243; Domain=nordvpn.com; Max-Age=2592000
nordvpn_aff_id=2495; Domain=nordvpn.com; Max-Age=2592000
nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; Domain=nordvpn.com; Max-Age=2592000
__cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; path=/; expires=Wed, 09-Jul-25 06:14:26 GMT; domain=.nordvpn.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95c5826c7c397130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
104.19.159.190200 OK 348 kB URL
nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Resource Info
File type HTML document, Unicode text, UTF-8 text, with very long lines (59525)
First Seen 2025-07-09
Last Seen 2025-07-09
Times Seen 2
Size 348 kB (347958 bytes)
MD5 58e6a434fe834364b31c3c3bd1a0f9a5
SHA1 aae9de015885dae942bfbb562e4ea192d1c9add5
SHA256 e534adf62042392970e9a8b798ee548739c8f2e7220072dbeb41726b4697f398
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495 HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:26 GMT
content-type: text/html
cf-ray: 95c5826d8fab56a2-OSL
cf-cache-status: MISS
cache-control: max-age=14400, private
content-encoding: br
last-modified: Tue, 08 Jul 2025 15:52:49 GMT
link: <https://nordvpn.com/de/>; rel="canonical"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
content-security-policy: default-src 'self' https://debug.nordvpn.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://s1.nordcdn.com https://googleads.g.doubleclick.net https://nordvpn-com-blog.disqus.com https://challenges.cloudflare.com https://websdk.appsflyer.com; script-src-elem 'self' 'unsafe-inline' https://challenges.cloudflare.com https://www.googletagmanager.com https://s1.nordcdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.smooch.io https://nordvpn-dev.disqus.com https://c.disquscdn.com https://connect.facebook.net https://nordvpn-com-blog.disqus.com https://websdk.appsflyer.com https://nordvpn.com; style-src 'self' 'unsafe-inline' https://labs.nordvpn.com https://s1.nordcdn.com https://sb.nordcdn.com https://cdn.smooch.io https://www.gstatic.com https://c.disquscdn.com; img-src 'self' data: https: https://ic.nordcdn.com https://sb.nordcdn.com; connect-src 'self' data: https://d.nordvpn.com https://web-api.nordvpn.com https://cm.nordvpn.com https://file-checker.nordvpn.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.webloader.smooch.io https://*.config.smooch.io https://links.services.disqus.com https://stats.g.doubleclick.net https://sb.nordcdn.com https://ic.nordcdn.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://debug.nordvpn.com https://www.googletagmanager.com https://link-checker.nordvpn.com https://dnsleak-api.nordvpn.com https://*.dnsleak.nordvpn.com https://www.bing.com https://banner.appsflyer.com https://creatives-cdn.appsflyer.com https://partner-acer.nordsec.com https://www.google-analytics.com https://nordvpn.zendesk.com; form-action 'self' https://webto.salesforce.com https://web-api.nordvpn.com; font-src 'self' data: https://cdn.smooch.io https://sb.nordcdn.com https://fonts.gstatic.com https://cdn.appsflyer.com; media-src 'self' https://*.nordcdn.com data:; object-src 'none'; frame-ancestors 'self' https://nordvpn.com https://nordvpn.com:443; frame-src 'self' nordvpn: nordvpn-sl: nordvpn-app: https://disqus.com https://www.youtube.com https://www.googletagmanager.com https://*.doubleclick.net https://challenges.cloudflare.com https://visit.nordvpn.com https://go.nordvpn.net https://openspeedtest.com https://dev.oathstudio.com https://nordvpncards2023.oathstudio.com https://www.thinglink.com; block-all-mixed-content; upgrade-insecure-requests; report-uri https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d; report-to csp-endpoint;
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), usb=(), bluetooth=(), autoplay=(self "https://www.youtube.com" "https://sb.nordcdn.com" "https://challenges.cloudflare.com"), fullscreen=(self "https://www.youtube.com" "https://sb.nordcdn.com" "https://challenges.cloudflare.com")
referrer-policy: strict-origin-when-cross-origin
report-to: : {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d"}]}
reporting-endpoints: csp-endpoint="https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d"
set-cookie: experiment_local=TQODu.1; expires=Tue, 07 Oct 2025 05:44:26 GMT; path=/; domain=nordvpn.com
locale=de; expires=Thu, 09 Jul 2026 05:44:26 GMT; path=/; domain=nordvpn.com
nc=1752074630904; expires=Fri, 09 Jul 2027 05:44:26 GMT; path=/; domain=nordvpn.com
nci=30; expires=Fri, 09 Jul 2027 05:44:26 GMT; path=/; domain=nordvpn.com
bs=95; expires=Fri, 08 Aug 2025 05:44:26 GMT; path=/; domain=nordvpn.com
x-content-type-options: : nosniff
priority: u=1,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Footer.astro_astro_type_script_index_0_lang.Dg9_n5y6.js
104.19.159.190200 OK 647 B URL
nordvpn.com/static/Footer.astro_astro_type_script_index_0_lang.Dg9_n5y6.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (565)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 647 B (647 bytes)
MD5 c71667b8b56ad07b75b3551ee217a1da
SHA1 04304673fa4b9635764dfabe65dde6d271c8f86f
SHA256 c966b615d61baa5c209cfda78a88c88fe553cd787ead1ab330adc5dfa55acf88
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Footer.astro_astro_type_script_index_0_lang.Dg9_n5y6.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c58273aca656a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb66a-287"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/getCookieValue.FmDZvggo.js
104.19.159.190200 OK 516 B URL
nordvpn.com/static/getCookieValue.FmDZvggo.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (463)
First Seen 2025-05-15
Last Seen 2025-07-31
Times Seen 24
Size 516 B (516 bytes)
MD5 766d3768489f62a790a0d9e586e37230
SHA1 27e2fd012ad69f68b6b093c08fb696b334b581cb
SHA256 c365e46dc0038503fc7bb143d36db8bb7124a6758f00ec58af95178c747984a0
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/getCookieValue.FmDZvggo.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582758e1556a2-OSL
cf-cache-status: HIT
age: 510729
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-204"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET s1.nordcdn.com/d/consent/prod/init.js?pre=gdpr
104.16.155.111200 OK 4.5 kB URL
s1.nordcdn.com/d/consent/prod/init.js?pre=gdpr
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (4357)
First Seen 2025-05-11
Last Seen 2025-07-31
Times Seen 29
Size 4.5 kB (4504 bytes)
MD5 752d2f692100d74bfdeca4dcbb98cf8d
SHA1 ab50c4394f4fe226b0792bca7ca0142503af8a01
SHA256 064e164c6202a3d24de31891dad8ae2121442eed6d5ec6781fe2eff499597204
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /d/consent/prod/init.js?pre=gdpr HTTP/1.1
Host: s1.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
last-modified: Thu, 10 Apr 2025 06:37:55 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=604800
content-encoding: gzip
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 261386
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c58273cd0e0b45-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nordvpn.com/static/getSectionInfo.D5UdhNIq.js
104.19.159.190200 OK 653 B URL
nordvpn.com/static/getSectionInfo.D5UdhNIq.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (600)
First Seen 2025-05-15
Last Seen 2025-07-31
Times Seen 23
Size 653 B (653 bytes)
MD5 0a63959527178a3a94853e9a5567db40
SHA1 13451f076076999455b6befde9ad675f4362cdc5
SHA256 5d858500d9414c5a41093f23eda95124f32bbd1d86df7781214f0e5d8ebd7710
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/getSectionInfo.D5UdhNIq.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582758e1456a2-OSL
cf-cache-status: HIT
age: 427584
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-28d"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ic.nordcdn.com/v1/https://sb.nordcdn.com/m/35124688a977d7be/original/nordprotect-symbol.svg
104.16.155.111200 OK 489 B URL
ic.nordcdn.com/v1/https://sb.nordcdn.com/m/35124688a977d7be/original/nordprotect-symbol.svg
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2024-12-24
Last Seen 2025-07-31
Times Seen 21
Size 489 B (489 bytes)
MD5 30348c3b88a8056f5ade653129381148
SHA1 1263811beeaa633b5cdbd3cf9a812c5099b4deee
SHA256 b9c9ce7cb3b007bf7740c40e7b3e0e215ccdc11b540138ff148306361e08eb2f
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/https://sb.nordcdn.com/m/35124688a977d7be/original/nordprotect-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/svg+xml
cf-ray: 95c582772f5d56a2-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 169564
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:28 GMT
last-modified: Mon, 07 Jul 2025 01:57:15 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 a22ad523898ca1a66b4560cbe5984662.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: a40i3YHSBqT7Jy0GahT2YSAU3ZpUG2HW8hieITBHqQJ41kqwWbRAmQ==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 2b15d2ee-82e9-55e0-1d3e-2c26f2c45dfd
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST cm.nordvpn.com/g/collect?v=2&tid=G-LEXMJ1N516>m=45je5771v874252800za200&_p=1752039868338&gcs=G100&gcd=13p3pPp2p7l1&npa=1&dma_cps=-&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891&cid=1619919208.1752039868&ul=en-us&sr=1280x1024&_fplc=0&ir=1&frm=0&pscdl=denied&_eu=EA&sid=1752039868&sct=1&seg=0&dl=https%3A%2F%2Fnordvpn.com%2Fde%2F%3Futm_medium%3Daffiliate%26utm_term%3D%26utm_content%3D101290684%26utm_campaign%3Doff312%26utm_source%3Daff2495&dt=Top%20Online-VPN-Anbieter%20f%C3%BCr%20Geschwindigkeit%202025%20%7C%20NordVPN&_tu=BA&_s=2&tfd=7584
104.19.159.190200 OK 0 B URL
cm.nordvpn.com/g/collect?v=2&tid=G-LEXMJ1N516>m=45je5771v874252800za200&_p=1752039868338&gcs=G100&gcd=13p3pPp2p7l1&npa=1&dma_cps=-&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891&cid=1619919208.1752039868&ul=en-us&sr=1280x1024&_fplc=0&ir=1&frm=0&pscdl=denied&_eu=EA&sid=1752039868&sct=1&seg=0&dl=https%3A%2F%2Fnordvpn.com%2Fde%2F%3Futm_medium%3Daffiliate%26utm_term%3D%26utm_content%3D101290684%26utm_campaign%3Doff312%26utm_source%3Daff2495&dt=Top%20Online-VPN-Anbieter%20f%C3%BCr%20Geschwindigkeit%202025%20%7C%20NordVPN&_tu=BA&_s=2&tfd=7584
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
POST /g/collect?v=2&tid=G-LEXMJ1N516>m=45je5771v874252800za200&_p=1752039868338&gcs=G100&gcd=13p3pPp2p7l1&npa=1&dma_cps=-&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891&cid=1619919208.1752039868&ul=en-us&sr=1280x1024&_fplc=0&ir=1&frm=0&pscdl=denied&_eu=EA&sid=1752039868&sct=1&seg=0&dl=https%3A%2F%2Fnordvpn.com%2Fde%2F%3Futm_medium%3Daffiliate%26utm_term%3D%26utm_content%3D101290684%26utm_campaign%3Doff312%26utm_source%3Daff2495&dt=Top%20Online-VPN-Anbieter%20f%C3%BCr%20Geschwindigkeit%202025%20%7C%20NordVPN&_tu=BA&_s=2&tfd=7584 HTTP/1.1
Host: cm.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 820
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039869271_1_5; consent=ignored%2CES; font-css-en=true; FirstSession=source%3Daff2495%26campaign%3Doff312%26medium%3Daffiliate%26term%3D%26content%3D101290684%26hostname%3Dnordvpn.com%26date%3D20250709%26query%3Dnull; CurrentSession=source%3Daff2495%26campaign%3Doff312%26medium%3Daffiliate%26term%3D%26content%3D101290684%26hostname%3Dnordvpn.com%26date%3D20250709%26query%3Dnull
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:33 GMT
content-length: 0
link: <https://nordvpn.com/>; rel="canonical"
cf-cache-status: DYNAMIC
priority: u=4,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c58299cc0b56a2-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Base.astro_astro_type_script_index_0_lang.DWl4PLVy.js
104.19.159.190200 OK 7.2 kB URL
nordvpn.com/static/Base.astro_astro_type_script_index_0_lang.DWl4PLVy.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (7165)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 7.2 kB (7245 bytes)
MD5 57d322d072864e22b2c918fda723f06e
SHA1 f48e2c05462317b0b79bffec5fa40d1f680d6a8b
SHA256 21ff517e695b71ca1643458ff346660421c8dd81d9c08056d1305b49ec357191
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Base.astro_astro_type_script_index_0_lang.DWl4PLVy.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c58273aca356a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-1c4d"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ic.nordcdn.com/v1/https://sb.nordcdn.com/m/190508c8d54d38db/original/nordlayer-default-svg.svg
104.16.155.111200 OK 5.3 kB URL
ic.nordcdn.com/v1/https://sb.nordcdn.com/m/190508c8d54d38db/original/nordlayer-default-svg.svg
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2025-02-25
Last Seen 2025-07-31
Times Seen 18
Size 5.3 kB (5337 bytes)
MD5 af640f3429a141a01de6b3ba95ee8da6
SHA1 466397783d4d3d4d07e23a080760d533e9af005d
SHA256 e54401b124c1b99cf035eda772c8296b9fc8008513d0757a1a9e7496e837fe8a
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/https://sb.nordcdn.com/m/190508c8d54d38db/original/nordlayer-default-svg.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/svg+xml
cf-ray: 95c582770f4256a2-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 10881
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:28 GMT
last-modified: Wed, 09 Jul 2025 01:57:23 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 365d682e9b4889986ad44f252accf6b0.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: BXhXJGhACfh8eqpfVtjlv53TYioPjCqk8Q13A_NaCk3jpkpB2sXGzA==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 2d806e1a-1b47-0125-6ff0-b95eed972075
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ic.nordcdn.com/v1/https://sb.nordcdn.com/m/5dd86f435e9b1aea/original/nordvpn-symbolBlue.svg
104.16.155.111200 OK 489 B URL
ic.nordcdn.com/v1/https://sb.nordcdn.com/m/5dd86f435e9b1aea/original/nordvpn-symbolBlue.svg
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2025-01-13
Last Seen 2025-07-31
Times Seen 20
Size 489 B (489 bytes)
MD5 12e26ca3d1287ef572fdbace0e995f2b
SHA1 8a0e2e6dec38bb5d250620d3ed61a8cb9f4e0ac9
SHA256 93880800ff162fdddf69e7b200c893ea722c585ed854904c267207d80496ff22
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/https://sb.nordcdn.com/m/5dd86f435e9b1aea/original/nordvpn-symbolBlue.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/svg+xml
cf-ray: 95c582770f4556a2-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 169492
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:28 GMT
last-modified: Sat, 05 Jul 2025 14:31:52 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 b78539d5f13f3162976a6abc8783d3de.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: bAZ1mhNPgmDZyj_I0ZBQ27K2ThSTtSohos_sfLNbFa4zUnNc6dGdhQ==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 369c217b-62d5-f0e7-5e18-0b540adf48bb
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST d.nordvpn.com/1/cc
104.19.159.190202 Accepted 0 B IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
POST /1/cc HTTP/1.1
Host: d.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 743
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/3 202 Accepted
date: Wed, 09 Jul 2025 05:44:28 GMT
content-length: 0
x-request-id: e24f029d69678570611b949e0811b211
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: https://nordvpn.com
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 600
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 95c5827aca0556a2-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Toggle.vloycRWL.js
104.19.159.190200 OK 4.8 kB URL
nordvpn.com/static/Toggle.vloycRWL.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (4774)
First Seen 2025-07-09
Last Seen 2025-07-09
Times Seen 1
Size 4.8 kB (4819 bytes)
MD5 2b486c07bac3aa7b2344ee62a775217e
SHA1 1c022f80c022ef28b1c677061263354ddbc9f601
SHA256 afc5f74c7a63e70447f5ed5406e74b344507eab5424686f1f5b8383b0c8852b3
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Toggle.vloycRWL.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827afa3556a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb66a-12d3"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Tracy.astro_astro_type_script_index_0_lang.B9I_KrPf.js
104.19.159.190200 OK 6.7 kB URL
nordvpn.com/static/Tracy.astro_astro_type_script_index_0_lang.B9I_KrPf.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (3699)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 6.7 kB (6661 bytes)
MD5 76446697ea37c8f35b44cde67ef3d88b
SHA1 0ed8a55af92e651cedc41f2f69d50cce8e736907
SHA256 a0e39d6ab29db72468d345c72bf2eca574177724b15f86a9578e9235cb6ee00b
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Tracy.astro_astro_type_script_index_0_lang.B9I_KrPf.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c58273ac9f56a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-1a05"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/countdown.Cgcjk_tU.js
104.19.159.190200 OK 549 B URL
nordvpn.com/static/countdown.Cgcjk_tU.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (501)
First Seen 2025-05-15
Last Seen 2025-07-11
Times Seen 22
Size 549 B (549 bytes)
MD5 8ed970c8ea0a2e175344ef1ff4722c08
SHA1 b7eff3922c1653a03c3e0cfed92f9753c5040a6b
SHA256 64ac132cd919be7e073c16f59a4f7c0b270e30cfa5d2a4a91e7d0227392a793a
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/countdown.Cgcjk_tU.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582757e0b56a2-OSL
cf-cache-status: HIT
age: 350980
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-225"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/getExperiments.B3A35r5T.js
104.19.159.190200 OK 818 B URL
nordvpn.com/static/getExperiments.B3A35r5T.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (765)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 818 B (818 bytes)
MD5 34ce41c6f137ce37cb1bc8550baa7e3b
SHA1 8233547c978ec6e17ea0c70dc6cf0f2c3bb650b7
SHA256 3358f850e62655009f10c4e1716e6e1fbe0cf060e00a965496923a7562bf8b5d
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/getExperiments.B3A35r5T.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582758e1756a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb66a-332"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/apple-touch-icon-180x180.png
104.19.159.190200 OK 2.8 kB URL
nordvpn.com/apple-touch-icon-180x180.png
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced
First Seen 2025-01-13
Last Seen 2025-07-11
Times Seen 10
Size 2.8 kB (2763 bytes)
MD5 a40033f3fbee8b28f0b5b916c9ca0a67
SHA1 608669bf2f53860b78c0a4b876a3753d9a416f39
SHA256 cad0157bce52671ee39d8bf99f6e7ac6e7615ffdd5f98aad353d19534b569837
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /apple-touch-icon-180x180.png HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868166_1_1; consent=ignored%2CES
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/png
content-length: 2763
cf-ray: 95c5827958ed56a2-OSL
cf-cache-status: MISS
accept-ranges: bytes
etag: "686cb652-acb"
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=6,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/getUserConnectionData.CONs02oP.js
104.19.159.190200 OK 574 B URL
nordvpn.com/static/getUserConnectionData.CONs02oP.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (514)
First Seen 2025-05-15
Last Seen 2025-07-31
Times Seen 24
Size 574 B (574 bytes)
MD5 4adae5524c737701a434204d85eee879
SHA1 ceb9152f415e81b48280c8f8e6d61ed4a0e37ddd
SHA256 6cf1f51162764510ad541eece3e5af5611032b7d02f3d898835542de63225cd9
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/getUserConnectionData.CONs02oP.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/StatusBar.B4Agl376.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827c5b8c56a2-OSL
cf-cache-status: HIT
age: 427537
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-23e"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET go.nordvpn.net/aff_c?aff_id=2495&offer_id=312&url_id=1638&aff_sub=101290684&aff_sub2=12814527&aff_sub3=8d3a8ed36eb05c3c1265a3c12903c8d197040589a7bc028a5&aff_sub4={zoneid}&clickid=a678fb805c8711f0804d01350a18ba74
52.16.200.194302 Found 348 kB URL
go.nordvpn.net/aff_c?aff_id=2495&offer_id=312&url_id=1638&aff_sub=101290684&aff_sub2=12814527&aff_sub3=8d3a8ed36eb05c3c1265a3c12903c8d197040589a7bc028a5&aff_sub4={zoneid}&clickid=a678fb805c8711f0804d01350a18ba74
IP / ASN
52.16.200.194
#16509 AMAZON-02
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 348 kB (347958 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer Amazon
Subject go.nordvpn.net
Fingerprint F2:56:23:1A:17:CD:52:AF:E1:E3:7D:16:18:E0:73:6D:0B:D6:40:37
Validity Wed, 11 Sep 2024 00:00:00 GMT - Thu, 09 Oct 2025 23:59:59 GMT
GET /aff_c?aff_id=2495&offer_id=312&url_id=1638&aff_sub=101290684&aff_sub2=12814527&aff_sub3=8d3a8ed36eb05c3c1265a3c12903c8d197040589a7bc028a5&aff_sub4={zoneid}&clickid=a678fb805c8711f0804d01350a18ba74 HTTP/1.1
Host: go.nordvpn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 302 Found
Server: nginx
Date: Wed, 09 Jul 2025 05:44:26 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 349
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://visit.nordvpn.com/?offer_id=312&aff_id=2495&aff_transaction_id=10217768d10a328b1f8b476f44e243&source=¶ms[ho_asub1]=101290684&url_id=5
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: aff_ran_url_312=1638; expires=Thu, 10 Jul 2025 05:44:26 GMT; path=/; SameSite=None; Secure
enc_aff_session_312=ENC036d5883c402503ee16fb675a470dfe022c3261d23922aa6d228f40f6a77316615ac203d271534a2b2b582ef064bb6110f8c404db950561de733a687af1086715042773bf8307fcb048bf86e52e3e06e61c844e8dbfae76dda74d7e27b80c5a25578578bb198e67eb982390a2bd0c916853891f51b6edb4ba22934dd45d95cbe48c800aeea6f9fca3b81353c020a5dd80a26d6f7798671549dc29ba8e0bea7eff2c0a1b829d47e3582d1529d6ca39afa83bcf819946b8539f869bf50cb1bd320dd133b2d60; expires=Fri, 09 Jul 2027 05:44:26 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMzQuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Fri, 02 Jun 2028 16:24:26 GMT; path=/; SameSite=None; Secure
Tracking_id: 10217768d10a328b1f8b476f44e243
Access-Control-Allow-Origin: *
X-Request-Id: f59922eb7c3889f50c65f3f2528e1886
Access-Control-Allow-Headers: Tune-SDK-Version
Accept-Ch: Sec-Ch-Dpr, Dpr, Sec-Ch-Ua-Model
GET nordvpn.com/de?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
104.19.159.190301 Moved Permanently 348 kB URL
nordvpn.com/de?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 348 kB (347958 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /de?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495 HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
date: Wed, 09 Jul 2025 05:44:26 GMT
content-length: 0
location: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c5826d5cfe7130-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nordvpn.com/static/extractGAExtraParams.CC5kY18g.js
104.19.159.190200 OK 755 B URL
nordvpn.com/static/extractGAExtraParams.CC5kY18g.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (696)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 755 B (755 bytes)
MD5 37237d2c53fd585a2497925b7036da4d
SHA1 1a415e89f18b394a6e36bc8fef24d568bc04aed3
SHA256 10ac05ce8dc44ca1e26e5c2826fdaef2c7152587d2949ba95d5c1373758db29b
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/extractGAExtraParams.CC5kY18g.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582758e0c56a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-2f3"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/store.BMKvgBPi.js
104.19.159.190200 OK 5.0 kB URL
nordvpn.com/static/store.BMKvgBPi.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (4960)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 5.0 kB (5004 bytes)
MD5 abf29d497a06d6603c109bc0569b83cb
SHA1 1ac4ee380aa5319f008d2d9226a01623cbaffc6f
SHA256 eb9f0f9d9b27b10de8d89a655ae739bb71ddb639b21af5ca27b525ad6e32a6a1
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/store.BMKvgBPi.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/client.WZp4gl1N.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827b7acd56a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-138c"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ic.nordcdn.com/v1/https://sb.nordcdn.com/m/506e8101f8e7d946/original/nordpass-symbol.svg
104.16.155.111200 OK 534 B URL
ic.nordcdn.com/v1/https://sb.nordcdn.com/m/506e8101f8e7d946/original/nordpass-symbol.svg
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2025-05-15
Last Seen 2025-07-31
Times Seen 17
Size 534 B (534 bytes)
MD5 38dcd72a321d1f00f4bcc9ed86ef8580
SHA1 82fb94e00505a75753a7c948ceb43fb9869bb8d5
SHA256 456ec8305fbcc27c0b6123b3555d8a3e836fc2f761211e973a566d6d484cec5a
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/https://sb.nordcdn.com/m/506e8101f8e7d946/original/nordpass-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/svg+xml
cf-ray: 95c582771f4a56a2-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 88052
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:28 GMT
last-modified: Mon, 07 Jul 2025 12:36:34 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 5ffe5df2b6c8f15be82e79251546b54a.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: HzeLlWfMr1MFd_Hogd96dP9a7BAqdid6aUyJNsQgk7251UfTYdkemQ==
x-amz-cf-pop: HEL50-C2
x-api-correlation-id: a8e561e6-b611-a110-0cdd-7d506cbefa01
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ic.nordcdn.com/v1/https://sb.nordcdn.com/m/29ca06dc6b8e11d8/original/nordstellar-symbol.svg
104.16.155.111200 OK 489 B URL
ic.nordcdn.com/v1/https://sb.nordcdn.com/m/29ca06dc6b8e11d8/original/nordstellar-symbol.svg
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2025-02-25
Last Seen 2025-07-31
Times Seen 18
Size 489 B (489 bytes)
MD5 0f9ff0c5c4aee257bcfb96e11fe4dd2e
SHA1 605c302477fc8261ba44f491245019a13252a39c
SHA256 24a0d87a2d409f632cc7acfc8fdd0b50d8ae682315207260f6791ba95fd2a540
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/https://sb.nordcdn.com/m/29ca06dc6b8e11d8/original/nordstellar-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/svg+xml
cf-ray: 95c582772f5c56a2-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 14197
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:28 GMT
last-modified: Mon, 07 Jul 2025 01:57:15 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 ad3ce7688f48f2bfb8279b49c6c4711e.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: NSvJ8mC8OXmM_z6OJZQy7a8mmGdWIIh1it8iN538QlVR8VyoeMfL4A==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: f492732d-d4ba-3d9c-9764-cc8a5b1666b1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ic.nordcdn.com/v1/https://sb.nordcdn.com/m/658d7868b0eb19bd/original/saily-symbol.svg
104.16.155.111200 OK 1.4 kB URL
ic.nordcdn.com/v1/https://sb.nordcdn.com/m/658d7868b0eb19bd/original/saily-symbol.svg
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2025-02-25
Last Seen 2025-07-31
Times Seen 18
Size 1.4 kB (1446 bytes)
MD5 616d8bfaf99af945520c6605be1ccd96
SHA1 6ecf32ae8f58d33849b7a03375ed37366688191a
SHA256 a302a48527fb5724b70c4bf0a8b0459d0da766db821b68eacfdbc5f4793f80a1
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/https://sb.nordcdn.com/m/658d7868b0eb19bd/original/saily-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/svg+xml
cf-ray: 95c582772f5f56a2-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 89604
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:28 GMT
last-modified: Mon, 07 Jul 2025 01:57:15 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: accept-encoding
via: 1.1 39e03a84352b80cf7e2b59c41f27a026.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: LV2avHmzbaM8sTpDokIqe3Fsaenyk9CfV_a235hDUSMgYvH3gpxadA==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: a2727c84-48f3-4e9d-9807-543f91e9e858
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST d.nordvpn.com/1/cc
104.19.159.190202 Accepted 0 B IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
POST /1/cc HTTP/1.1
Host: d.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 725
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868416_1_2; consent=ignored%2CES
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/3 202 Accepted
date: Wed, 09 Jul 2025 05:44:28 GMT
content-length: 0
x-request-id: 7c28bb12a35f4708347922d1530aed0a
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: https://nordvpn.com
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 600
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 95c58279b94f56a2-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET s1.nordcdn.com/d/consent/prod/main.js
104.16.155.111200 OK 205 kB URL
s1.nordcdn.com/d/consent/prod/main.js
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (65504)
First Seen 2025-05-11
Last Seen 2025-07-31
Times Seen 29
Size 205 kB (205253 bytes)
MD5 65f5e222b668792a0d1a5f561e01ca64
SHA1 e13145ee40aed763c697804445daac3c69583870
SHA256 22eb1fcfe31281e676c7a87dfb80f0626498855df33991cdff6f112f5b3f1899
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /d/consent/prod/main.js HTTP/1.1
Host: s1.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
last-modified: Thu, 10 Apr 2025 06:37:55 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=604800
content-encoding: gzip
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 498887
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c58273cd090b45-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET nordvpn.com/static/sendEvent.DTgjAu1e.js
104.19.159.190200 OK 1.9 kB URL
nordvpn.com/static/sendEvent.DTgjAu1e.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (1892)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 1.9 kB (1940 bytes)
MD5 0d4dbf77e991baad4f5ee4c1e4543d92
SHA1 49ba804e02ddf351596b751228fbd84a4f73fc00
SHA256 edb0a987e30202e93ac6f3655dab59fc03b350ac60ad792447dc46895d708589
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/sendEvent.DTgjAu1e.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582757e0756a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-794"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST cm.nordvpn.com/g/collect?v=2&tid=G-LEXMJ1N516>m=45je5771v874252800za200&_p=1752039868338&gcs=G100&gcd=13p3pPp2p7l1&npa=1&dma_cps=-&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891&cid=1619919208.1752039868&ul=en-us&sr=1280x1024&_fplc=0&ir=1&frm=0&pscdl=denied&_eu=EA&_s=1&sid=1752039868&sct=1&seg=0&dl=https%3A%2F%2Fnordvpn.com%2Fde%2F%3Futm_medium%3Daffiliate%26utm_term%3D%26utm_content%3D101290684%26utm_campaign%3Doff312%26utm_source%3Daff2495&dt=Top%20Online-VPN-Anbieter%20f%C3%BCr%20Geschwindigkeit%202025%20%7C%20NordVPN&_tu=BA&en=widget_loaded&_fv=1&_nsi=1&_ss=2&_ee=1&ep.consent_ver=v2gdpr&ep.cf_country=NO&ep.experiment=TQODu.1&ep.product=nordvpn&ep.version=nordvpn-main%400.204.1&ep.page_lang=DE&ep.placement=cookie_consent&ep.consent_settings=ES&ep.consent_status=ignored&tfd=2488
104.19.159.190200 OK 0 B URL
cm.nordvpn.com/g/collect?v=2&tid=G-LEXMJ1N516>m=45je5771v874252800za200&_p=1752039868338&gcs=G100&gcd=13p3pPp2p7l1&npa=1&dma_cps=-&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891&cid=1619919208.1752039868&ul=en-us&sr=1280x1024&_fplc=0&ir=1&frm=0&pscdl=denied&_eu=EA&_s=1&sid=1752039868&sct=1&seg=0&dl=https%3A%2F%2Fnordvpn.com%2Fde%2F%3Futm_medium%3Daffiliate%26utm_term%3D%26utm_content%3D101290684%26utm_campaign%3Doff312%26utm_source%3Daff2495&dt=Top%20Online-VPN-Anbieter%20f%C3%BCr%20Geschwindigkeit%202025%20%7C%20NordVPN&_tu=BA&en=widget_loaded&_fv=1&_nsi=1&_ss=2&_ee=1&ep.consent_ver=v2gdpr&ep.cf_country=NO&ep.experiment=TQODu.1&ep.product=nordvpn&ep.version=nordvpn-main%400.204.1&ep.page_lang=DE&ep.placement=cookie_consent&ep.consent_settings=ES&ep.consent_status=ignored&tfd=2488
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
POST /g/collect?v=2&tid=G-LEXMJ1N516>m=45je5771v874252800za200&_p=1752039868338&gcs=G100&gcd=13p3pPp2p7l1&npa=1&dma_cps=-&dma=1&tag_exp=101509157~103116026~103200004~103233427~103351869~103351871~104684208~104684211~104718208~104839054~104839056~104885889~104885891&cid=1619919208.1752039868&ul=en-us&sr=1280x1024&_fplc=0&ir=1&frm=0&pscdl=denied&_eu=EA&_s=1&sid=1752039868&sct=1&seg=0&dl=https%3A%2F%2Fnordvpn.com%2Fde%2F%3Futm_medium%3Daffiliate%26utm_term%3D%26utm_content%3D101290684%26utm_campaign%3Doff312%26utm_source%3Daff2495&dt=Top%20Online-VPN-Anbieter%20f%C3%BCr%20Geschwindigkeit%202025%20%7C%20NordVPN&_tu=BA&en=widget_loaded&_fv=1&_nsi=1&_ss=2&_ee=1&ep.consent_ver=v2gdpr&ep.cf_country=NO&ep.experiment=TQODu.1&ep.product=nordvpn&ep.version=nordvpn-main%400.204.1&ep.page_lang=DE&ep.placement=cookie_consent&ep.consent_settings=ES&ep.consent_status=ignored&tfd=2488 HTTP/1.1
Host: cm.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868416_1_2; consent=ignored%2CES
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-length: 0
link: <https://nordvpn.com/>; rel="canonical"
cf-cache-status: DYNAMIC
priority: u=4,i=?0
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c5827a097f56a2-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST d.nordvpn.com/1/cc
104.19.159.190202 Accepted 0 B IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
POST /1/cc HTTP/1.1
Host: d.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 746
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868561_1_3; consent=ignored%2CES
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/3 202 Accepted
date: Wed, 09 Jul 2025 05:44:28 GMT
content-length: 0
x-request-id: e7c6c56de5ad3a3774c7da75348294ff
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: https://nordvpn.com
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 600
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 95c5827ab9f956a2-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/client.WZp4gl1N.js
104.19.159.190200 OK 1.4 kB URL
nordvpn.com/static/client.WZp4gl1N.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (1365)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 1.4 kB (1410 bytes)
MD5 22b1f7d9aa6448d062510f77de5632f2
SHA1 c2a5a214a1fa80ef13a558ab664f0473155885b7
SHA256 5eaf461508ba35f513347fd420a172e6863c2bc9287104be15ef0748142e50df
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/client.WZp4gl1N.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827afa3656a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-582"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Link.CO5dYxnV.js
104.19.159.190200 OK 3.4 kB URL
nordvpn.com/static/Link.CO5dYxnV.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (3341)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 3.4 kB (3384 bytes)
MD5 cdca5eca1c02decae19b07d330056742
SHA1 c66cf06348d4d4a9e8698257029f5fcd04c80e6d
SHA256 fcd3d1f3a5a98b9022fd770bcd1c2cf97ac4dbe00d921b42a246ad1b65dc0819
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Link.CO5dYxnV.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/StatusBar.B4Agl376.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827c5b9456a2-OSL
cf-cache-status: HIT
age: 82415
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-d38"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/_commonjsHelpers.1rBs7ZY3.js
104.19.159.190200 OK 601 B URL
nordvpn.com/static/_commonjsHelpers.1rBs7ZY3.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (546)
First Seen 2025-05-15
Last Seen 2025-07-31
Times Seen 24
Size 601 B (601 bytes)
MD5 e8d58bbf8ad0f352333e701df8d07e35
SHA1 6b663e3a9f741f8457b66adc7bbd83dfa1186db4
SHA256 021458f26c2cf23944eeebed74f2853d7f8f0c9ab6089bd3eda2b8b2d1c4c3fe
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/_commonjsHelpers.1rBs7ZY3.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/StatusBar.B4Agl376.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827c7bb956a2-OSL
cf-cache-status: HIT
age: 442529
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-259"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Typography.astro_astro_type_script_index_0_lang.B2Ga2cXP.js
104.19.159.190200 OK 4.4 kB URL
nordvpn.com/static/Typography.astro_astro_type_script_index_0_lang.B2Ga2cXP.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (4346)
First Seen 2025-06-02
Last Seen 2025-07-31
Times Seen 20
Size 4.4 kB (4432 bytes)
MD5 016e9185ad84baf333006e8a68e110bb
SHA1 f6a2481757ca9d383b3edc18716d769b2456de2e
SHA256 a6f1c72eed28c4314191c094fe25bb2aff1e19341377ee87fd8359f8962689f7
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Typography.astro_astro_type_script_index_0_lang.B2Ga2cXP.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c58273aca056a2-OSL
cf-cache-status: HIT
age: 341736
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-1150"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/sendTracyEvent.ypwlhgc5.js
104.19.159.190200 OK 1.9 kB URL
nordvpn.com/static/sendTracyEvent.ypwlhgc5.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (1854)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 1.9 kB (1907 bytes)
MD5 813ee889275635b2b9e93094f0045b95
SHA1 c3e7bcf678c35eec0dc20e0ef8d991385c63806e
SHA256 769ba2b932fbb7537bb85f6a30d8726121f27c9af68932ba6ad5a562a069125c
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/sendTracyEvent.ypwlhgc5.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582757e0856a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-773"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
POST d.nordvpn.com/1/cc
104.19.159.190202 Accepted 0 B IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type N/A
First Seen 0001-01-01
Last Seen 2025-08-02
Times Seen 5607156
Size 0 B (0 bytes)
MD5 d41d8cd98f00b204e9800998ecf8427e
SHA1 da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
POST /1/cc HTTP/1.1
Host: d.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 896
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039869271_1_5; consent=ignored%2CES; font-css-en=true; FirstSession=source%3Daff2495%26campaign%3Doff312%26medium%3Daffiliate%26term%3D%26content%3D101290684%26hostname%3Dnordvpn.com%26date%3D20250709%26query%3Dnull; CurrentSession=source%3Daff2495%26campaign%3Doff312%26medium%3Daffiliate%26term%3D%26content%3D101290684%26hostname%3Dnordvpn.com%26date%3D20250709%26query%3Dnull
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/3 202 Accepted
date: Wed, 09 Jul 2025 05:44:29 GMT
content-length: 0
x-request-id: cbd1c7d01ea68020dfedc0978044dd0f
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: https://nordvpn.com
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-max-age: 600
cf-cache-status: DYNAMIC
priority: u=6,i=?0
server: cloudflare
cf-ray: 95c5827f2df556a2-OSL
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ic.nordcdn.com/v1/fr_auto/https://sb.nordcdn.com/transform/bd54000f-87bc-4b56-a187-7e23e4b0c9a5/hero-phone-mockup-country-protected-AI-badge-lg-de?X-Nord-Credential=T4PcHqfACi8Naxvulzf4IE8XT4oypRTi0blOOGwbK2A8L4fcPw52k3qkvbkYH&X-Nord-Signature=7TAMqQtzg3jjhGh%2BL1daaVjC6EeZGTH1Erhanp63OI0%3D
104.16.155.111200 OK 36 kB URL
ic.nordcdn.com/v1/fr_auto/https://sb.nordcdn.com/transform/bd54000f-87bc-4b56-a187-7e23e4b0c9a5/hero-phone-mockup-country-protected-AI-badge-lg-de?X-Nord-Credential=T4PcHqfACi8Naxvulzf4IE8XT4oypRTi0blOOGwbK2A8L4fcPw52k3qkvbkYH&X-Nord-Signature=7TAMqQtzg3jjhGh%2BL1daaVjC6EeZGTH1Erhanp63OI0%3D
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type ISO Media, AVIF Image
First Seen 2025-07-09
Last Seen 2025-07-09
Times Seen 1
Size 36 kB (36302 bytes)
MD5 a66a862f14795ce01719b0a9c12e656e
SHA1 923cd4c2981407b67e6d2a4fc766601eb4bc20b1
SHA256 84dcf98572a2524fbbbce5d8591697d25922828a3ed2faa3fc49bb56a73fe8cc
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/fr_auto/https://sb.nordcdn.com/transform/bd54000f-87bc-4b56-a187-7e23e4b0c9a5/hero-phone-mockup-country-protected-AI-badge-lg-de?X-Nord-Credential=T4PcHqfACi8Naxvulzf4IE8XT4oypRTi0blOOGwbK2A8L4fcPw52k3qkvbkYH&X-Nord-Signature=7TAMqQtzg3jjhGh%2BL1daaVjC6EeZGTH1Erhanp63OI0%3D HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: image/avif
content-length: 36302
cf-ray: 95c58273cd070b45-OSL
cf-cache-status: MISS
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=900, s-maxage=15552000
content-disposition: inline; filename="hero-phone-mockup-country-protected-AI-badge-lg-de.avif"; filename*=UTF-8''hero-phone-mockup-country-protected-AI-badge-lg-de.avif
last-modified: Wed, 09 Jul 2025 05:44:27 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: PqLsjhcjWxv7X1h1IooZGZla8XJcJ4_Nk5OkXGsL-Q50kQ75diSp5g==
x-amz-cf-pop: OSL50-P1
x-api-correlation-id: 9e7ccf05-b659-6cbf-fc64-395b79227978
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET www.googletagmanager.com/gtag/js?id=G-LEXMJ1N516
142.250.178.40200 OK 442 kB URL
www.googletagmanager.com/gtag/js?id=G-LEXMJ1N516
IP / ASN
142.250.178.40
#15169 GOOGLE
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (21597)
First Seen 2025-07-09
Last Seen 2025-07-09
Times Seen 1
Size 442 kB (442111 bytes)
MD5 65ec940f393003e9965f8e654233ca9f
SHA1 dad7c26abb5a06c646c6b4dc8c21031629ff5537
SHA256 7cf75d27526da35cbf89e384b5cd43e5f91ef1cbaea6972558cc44819f95bf52
Certificate Info
Issuer Google Trust Services
Subject *.google-analytics.com
Fingerprint 06:CD:2A:9C:6E:F9:40:51:AA:E0:81:4A:BB:69:6C:BA:FA:AD:AB:4D
Validity Tue, 17 Jun 2025 20:01:48 GMT - Tue, 09 Sep 2025 20:01:47 GMT
GET /gtag/js?id=G-LEXMJ1N516 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 09 Jul 2025 05:44:27 GMT
expires: Wed, 09 Jul 2025 05:44:27 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 144571
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET nordvpn.com/static/throttle.ChPZFoXc.js
104.19.159.190200 OK 470 B URL
nordvpn.com/static/throttle.ChPZFoXc.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (423)
First Seen 2025-05-15
Last Seen 2025-07-31
Times Seen 24
Size 470 B (470 bytes)
MD5 eaa69a1e75c5a7b86b62363bf8ff8f4c
SHA1 4a92d905d5403fba29c7b99833fdc53784d3e9ad
SHA256 df4c1fec7c52df11a61acbd0ddd3a549d84904022e729dedea6ba16b4dede6c3
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/throttle.ChPZFoXc.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Section.astro_astro_type_script_index_0_lang.BkvF3_eb.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582759e2156a2-OSL
cf-cache-status: HIT
age: 354252
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-1d6"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/isFlagAttributeEnabled.CHUNbqNd.js
104.19.159.190200 OK 474 B URL
nordvpn.com/static/isFlagAttributeEnabled.CHUNbqNd.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (413)
First Seen 2025-05-15
Last Seen 2025-07-31
Times Seen 25
Size 474 B (474 bytes)
MD5 c2880e023594ab2c8d07ceb0677a7bf5
SHA1 da7b56b01da5ac0b201c1e6f0177c27091dcb878
SHA256 0166c7a9a05934a6cf1f9540c5db72b72ea4da4edf4dbad2f6767233aaa35f4c
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/isFlagAttributeEnabled.CHUNbqNd.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Section.astro_astro_type_script_index_0_lang.BkvF3_eb.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582759e2056a2-OSL
cf-cache-status: HIT
age: 347954
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-1da"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET ic.nordcdn.com/v1/https://sb.nordcdn.com/m/7c93bd95ab5d2212/original/nordlocker-symbol.svg
104.16.155.111200 OK 534 B URL
ic.nordcdn.com/v1/https://sb.nordcdn.com/m/7c93bd95ab5d2212/original/nordlocker-symbol.svg
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2025-01-19
Last Seen 2025-07-31
Times Seen 20
Size 534 B (534 bytes)
MD5 1ef3ea9459fc204f43d7b90d9d77765a
SHA1 fc8978bd00bd7c057843fe6603856e45a353cf78
SHA256 012b85f5d4ad9e4c104b92d82276fb341e97db250f6bf44a54e6d6469f1b8a5b
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/https://sb.nordcdn.com/m/7c93bd95ab5d2212/original/nordlocker-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/svg+xml
cf-ray: 95c582771f4d56a2-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 165770
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:28 GMT
last-modified: Mon, 07 Jul 2025 01:57:14 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 a015763506a36624e56a8a469e3484c4.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: 5go7v3EWYSGHFQaKoj1DhMvfB_oqAXLhvagCeKz9CAUnycM0s24t4w==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 3cb7f020-f446-c822-a162-69c7988bc943
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/solid.C2pQeiPA.js
104.19.159.190200 OK 13 kB URL
nordvpn.com/static/solid.C2pQeiPA.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (13339)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 13 kB (13383 bytes)
MD5 f5a70ebb02ebf42b2eb5eea70d571c48
SHA1 eb6f19dbb08bd62a08c1d923ccbd457b4555dff9
SHA256 6c90218451ec4f11145a4a3c7a0584c72df43a05439232c35bf59fbcb687e0f6
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/solid.C2pQeiPA.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Toggle.vloycRWL.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827b6ac656a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-3447"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/index.B2MUrA1p.css
104.19.159.190200 OK 147 kB URL
nordvpn.com/static/index.B2MUrA1p.css
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 11
Size 147 kB (146671 bytes)
MD5 719b3d7de379d35c60fb920dc67f5d35
SHA1 9cdd9bd30b3507aa0d13a578895e293b5ffcfc19
SHA256 ede0296b662ad0461c7a96e8c7262d12479eb7fafef0ab438aeec5253665cda3
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/index.B2MUrA1p.css HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: text/css
cf-ray: 95c58273aca156a2-OSL
cf-cache-status: HIT
age: 84529
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-23cef"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=2,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Tooltip._6PWsc5b.js
104.19.159.190200 OK 2.3 kB URL
nordvpn.com/static/Tooltip._6PWsc5b.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (2302)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 2.3 kB (2348 bytes)
MD5 7f6d63a5fbc6cc64c090aef5e2f84ad5
SHA1 07d77a17201dcd5e064bcd4d7a02fc3311a0b5da
SHA256 7563c7e02f6002b163a8d70e8a9ff004f476776e8809ab420c5570d3f0916e15
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Tooltip._6PWsc5b.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/StatusBar.B4Agl376.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827c6bb256a2-OSL
cf-cache-status: HIT
age: 82415
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb66a-92c"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET s1.nordcdn.com/d/nordvpn/prod/index.js?cu=https://d.nordvpn.com/1/cc&p=nordvpn&cv=nordvpn-main@0.204.1&sni=1
104.16.155.111200 OK 20 kB URL
s1.nordcdn.com/d/nordvpn/prod/index.js?cu=https://d.nordvpn.com/1/cc&p=nordvpn&cv=nordvpn-main@0.204.1&sni=1
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (20218)
First Seen 2025-07-04
Last Seen 2025-07-11
Times Seen 15
Size 20 kB (20384 bytes)
MD5 6fa010d204890b2f74f2d57ab5a3acad
SHA1 fe9dc9f5d892540082330ef872492ce1ddfcc08b
SHA256 02b8308a14642b9378f8f7986d71046ba09c5e0f3a2ea714544569d86664a856
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /d/nordvpn/prod/index.js?cu=https://d.nordvpn.com/1/cc&p=nordvpn&cv=nordvpn-main@0.204.1&sni=1 HTTP/1.1
Host: s1.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
last-modified: Tue, 01 Jul 2025 10:25:16 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=604800
content-encoding: gzip
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 84837
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c58273cd040b45-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET s1.nordcdn.com/d/consent/prod/main.css
104.16.155.111200 OK 8.2 kB URL
s1.nordcdn.com/d/consent/prod/main.css
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type ASCII text, with very long lines (8151)
First Seen 2025-05-11
Last Seen 2025-07-31
Times Seen 31
Size 8.2 kB (8152 bytes)
MD5 db88ba1fe773e839c8bc76d804c66017
SHA1 75d02a0513fafaf530e7c3353a2710cf0103bf5a
SHA256 ceff66200713061b3d6a54e2771cf4f84a7f165717b550894f8a04a7403c62cb
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /d/consent/prod/main.css HTTP/1.1
Host: s1.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: text/css
last-modified: Thu, 10 Apr 2025 06:37:55 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=604800
content-encoding: gzip
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 498888
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c58273dd0f0b45-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ic.nordcdn.com/v1/fr_auto/https://sb.nordcdn.com/transform/2324f0c4-7ac2-44a0-9fab-d70a807d3db4/phone-auto-connection-servers-protected-md-de-2x-png?X-Nord-Credential=T4PcHqfACi8Naxvulzf4IE8XT4oypRTi0blOOGwbK2A8L4fcPw52k3qkvbkYH&X-Nord-Signature=fnIJblOQQ4zY%2Fk1iP%2BgEtJVhygdHROvAtB7pHlpkD%2BM%3D
104.16.155.111200 OK 21 kB URL
ic.nordcdn.com/v1/fr_auto/https://sb.nordcdn.com/transform/2324f0c4-7ac2-44a0-9fab-d70a807d3db4/phone-auto-connection-servers-protected-md-de-2x-png?X-Nord-Credential=T4PcHqfACi8Naxvulzf4IE8XT4oypRTi0blOOGwbK2A8L4fcPw52k3qkvbkYH&X-Nord-Signature=fnIJblOQQ4zY%2Fk1iP%2BgEtJVhygdHROvAtB7pHlpkD%2BM%3D
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type ISO Media, AVIF Image
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 11
Size 21 kB (21090 bytes)
MD5 a22032601596fb7e181fc64d5a16ec2d
SHA1 41dc6b0edeff09c25021a9143d1ed1a6d581196b
SHA256 58f4df21c1ea8e706fa9ea40591e15f13e55833c85e71c07921c22d32e4e287b
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/fr_auto/https://sb.nordcdn.com/transform/2324f0c4-7ac2-44a0-9fab-d70a807d3db4/phone-auto-connection-servers-protected-md-de-2x-png?X-Nord-Credential=T4PcHqfACi8Naxvulzf4IE8XT4oypRTi0blOOGwbK2A8L4fcPw52k3qkvbkYH&X-Nord-Signature=fnIJblOQQ4zY%2Fk1iP%2BgEtJVhygdHROvAtB7pHlpkD%2BM%3D HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/avif
content-length: 21090
cf-ray: 95c582772f6056a2-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=900, s-maxage=15552000
content-disposition: inline; filename="phone-auto-connection-servers-protected-md-de-2x-png.avif"; filename*=UTF-8''phone-auto-connection-servers-protected-md-de-2x-png.avif
last-modified: Wed, 09 Jul 2025 04:38:26 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 e6c9a537bd3796ea580cf02a62b7c246.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: kqb6A1eWLFhCNqTNfTVEbHSA3Is4SQoZVWc1s7A1vEYH4qRmxXLzMA==
x-amz-cf-pop: HEL50-C2
x-api-correlation-id: e983fc43-f907-e1cb-1061-2fd2916899dc
x-cache: Hit from cloudfront
x-content-type-options: nosniff
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/constants.BasPOSZ9.js
104.19.159.190200 OK 1.1 kB URL
nordvpn.com/static/constants.BasPOSZ9.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (1046)
First Seen 2025-06-02
Last Seen 2025-07-11
Times Seen 21
Size 1.1 kB (1094 bytes)
MD5 170b89fb9011625d0420982efe140561
SHA1 8b68917584f04d19ff43ca8144431263a31cef04
SHA256 0f6bc1daefde27b8d98c62519d79c501e923a6e9e315cccf4ea1ead2a54b3295
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/constants.BasPOSZ9.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582758e1956a2-OSL
cf-cache-status: HIT
age: 531921
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-446"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/favicon.png
104.19.159.190200 OK 601 B URL
nordvpn.com/favicon.png
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
First Seen 2024-11-28
Last Seen 2025-07-11
Times Seen 23
Size 601 B (601 bytes)
MD5 dfb1396ae677c65ab1e87ac9887a8f08
SHA1 038fdca5195f60c59fa6b92bd037c7e76ecd5fc7
SHA256 ed81053eb4b9f090fa93d5c381f581d684e4a539e9a7ee5680930883939bc1d7
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /favicon.png HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868166_1_1; consent=ignored%2CES
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/png
content-length: 601
cf-ray: 95c5827958f056a2-OSL
cf-cache-status: EXPIRED
accept-ranges: bytes
etag: "686cb652-259"
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=6,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/utils.L6p_jou8.js
104.19.159.190200 OK 874 B URL
nordvpn.com/static/utils.L6p_jou8.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (830)
First Seen 2025-05-15
Last Seen 2025-07-31
Times Seen 24
Size 874 B (874 bytes)
MD5 ee57bcde0265d4a336efa91620ec48eb
SHA1 b19a9eca4676fe922155fbe27bfedda400a2095f
SHA256 a01cf502ef5fd90bcf35e9cb85e8e56a2a65307bac9cc84deb729dce0233c80d
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/utils.L6p_jou8.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/StatusBar.B4Agl376.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827c7bbd56a2-OSL
cf-cache-status: HIT
age: 442529
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-36a"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/index.Dnu4zlg3.css
104.19.159.190200 OK 9.4 kB URL
nordvpn.com/static/index.Dnu4zlg3.css
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type ASCII text, with very long lines (9365)
First Seen 2025-06-02
Last Seen 2025-07-11
Times Seen 23
Size 9.4 kB (9366 bytes)
MD5 4268dee2b7d3589df86e05a5dd664d6b
SHA1 ee38cb07330095cf9283dee2013945e096ef8a47
SHA256 2cd42b3d080e4cd6cac384be40dc3d52e34a581568a44bbeaa5adbab63eed2e3
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/index.Dnu4zlg3.css HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: text/css
cf-ray: 95c58273aca256a2-OSL
cf-cache-status: HIT
age: 351606
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-2496"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=2,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/TrackersRuntimeScript.astro_astro_type_script_index_0_lang.DS8oiYkm.js
104.19.159.190200 OK 2.6 kB URL
nordvpn.com/static/TrackersRuntimeScript.astro_astro_type_script_index_0_lang.DS8oiYkm.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (2405)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 2.6 kB (2646 bytes)
MD5 5be165e32d38be8fd98c32ed28b64baa
SHA1 269aeadd6bd812092be3afb6e619c450ac85aa00
SHA256 88edaa8042b2011ad3194ecc737d12446599746d33bbb7b491c5bbfdeef10823
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/TrackersRuntimeScript.astro_astro_type_script_index_0_lang.DS8oiYkm.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c58273aca756a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-a56"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Text.CwGaC8Mn.js
104.19.159.190200 OK 1.5 kB URL
nordvpn.com/static/Text.CwGaC8Mn.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (1461)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 1.5 kB (1504 bytes)
MD5 89b15661ed847d5578c3666ff15f0258
SHA1 049d92e638349875a98963fcac28b9fab6d8839f
SHA256 60a94c7a6730f8bda2669da8e5eba281fed3701c5154068630adb345907fbb14
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Text.CwGaC8Mn.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/StatusBar.B4Agl376.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827c5b9656a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-5e0"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/buildGAExtraAttributes.C4x7a-ry.js
104.19.159.190200 OK 5.1 kB URL
nordvpn.com/static/buildGAExtraAttributes.C4x7a-ry.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (5057)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 5.1 kB (5118 bytes)
MD5 a4d6d1246346032c1d435890df2e75f1
SHA1 02d01cb70006a6d437c4023368c0d8f3dfeda5e6
SHA256 6682640281fa8118abbe7bdd20ab65dbaaea2a2bfc6d0079f6e2f457bbc731d3
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/buildGAExtraAttributes.C4x7a-ry.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/StatusBar.B4Agl376.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827c6bb556a2-OSL
cf-cache-status: HIT
age: 82415
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb66a-13fe"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/CookieConsent.astro_astro_type_script_index_0_lang.t-GNs4OI.js
104.19.159.190200 OK 2.3 kB URL
nordvpn.com/static/CookieConsent.astro_astro_type_script_index_0_lang.t-GNs4OI.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (2194)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 2.3 kB (2283 bytes)
MD5 e90b8069a6be0e81826f379cfe900da6
SHA1 ffec297cc8eadc6f0d3f6c9ced28f40a2bb4d2d2
SHA256 d25a95993ed126aac6ecab9b3a5852dfdb19785b5bfdaec7f0eb7ce77ca83314
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/CookieConsent.astro_astro_type_script_index_0_lang.t-GNs4OI.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c58273ac9d56a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb66a-8eb"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/Section.astro_astro_type_script_index_0_lang.BkvF3_eb.js
104.19.159.190200 OK 2.0 kB URL
nordvpn.com/static/Section.astro_astro_type_script_index_0_lang.BkvF3_eb.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (1924)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 2.0 kB (2007 bytes)
MD5 9c828e4b2bbaae5a9786227c4283d37f
SHA1 3b78fc22361121bc2be2b94fd49b89ad9de3721d
SHA256 d72bf05de84a138bee7861c578ff4b5525906575f02bdf78b85dde2357361e6a
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/Section.astro_astro_type_script_index_0_lang.BkvF3_eb.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c58273aca456a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-7d7"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/js.cookie.DrsgI3i9.js
104.19.159.190200 OK 1.8 kB URL
nordvpn.com/static/js.cookie.DrsgI3i9.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (1728)
First Seen 2025-06-13
Last Seen 2025-07-31
Times Seen 18
Size 1.8 kB (1776 bytes)
MD5 2fff4b9dd09fc23b034308580490929c
SHA1 68981023c37c973f7991492b17dacc3be5c9e1b8
SHA256 a9ca376911066661272ea82e134c56770ce65fc35fb2cb465cdff317056b0d9a
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/js.cookie.DrsgI3i9.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/TrackersRuntimeScript.astro_astro_type_script_index_0_lang.DS8oiYkm.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039867616_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:27 GMT
content-type: application/javascript
cf-ray: 95c582759e1d56a2-OSL
cf-cache-status: HIT
age: 268997
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-6f0"
expires: Sun, 11 Jan 2026 05:44:27 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET sb.nordcdn.com/m/4a802a49d4592056/original/en-woff2
54.240.174.3200 OK 192 kB URL
sb.nordcdn.com/m/4a802a49d4592056/original/en-woff2
IP / ASN
54.240.174.3
#16509 AMAZON-02
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type ASCII text, with very long lines (65536), with no line terminators
First Seen 2025-02-19
Last Seen 2025-07-31
Times Seen 26
Size 192 kB (192090 bytes)
MD5 70455940a48fa8a5a31d35f2ec4725c2
SHA1 2c90594bdff7658e5a34bd39e7a6b043391e00d5
SHA256 e8b5a4392d9fbfe8ff6f036b321cdd6db4cff8d577f92185e6462b93b92cabc6
Certificate Info
Issuer Amazon
Subject nordsecurity.bynder.com
Fingerprint 41:27:42:47:F4:28:D1:B7:29:FF:27:AC:C8:60:AE:FD:BA:09:B7:18
Validity Tue, 20 May 2025 00:00:00 GMT - Thu, 18 Jun 2026 23:59:59 GMT
GET /m/4a802a49d4592056/original/en-woff2 HTTP/1.1
Host: sb.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
date: Tue, 08 Jul 2025 10:12:42 GMT
x-content-type-options: nosniff
permissions-policy: camera=(), geolocation=(), microphone=()
server: nginx
content-encoding: gzip
cache-control: public, max-age=172800
accept-ranges: bytes
content-disposition: attachment;filename="en-woff2.css"
access-control-allow-origin: *
x-api-correlation-id: e78a9d2a-e96d-0c8c-d64f-52ae715ab07e
cross-origin-resource-policy: cross-origin
strict-transport-security: max-age=63072000; includeSubdomains
referrer-policy: strict-origin-when-cross-origin
x-cache: Hit from cloudfront
via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: H7v0I3KBkvxN3wup8GC3lyqDOnuKuS-M3SGH1jorMVCfJBgHMMU78A==
age: 70306
X-Firefox-Spdy: h2
GET nordvpn.com/static/StatusBar.B4Agl376.js
104.19.159.190200 OK 3.6 kB URL
nordvpn.com/static/StatusBar.B4Agl376.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, Unicode text, UTF-8 text, with very long lines (3558)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 3.6 kB (3608 bytes)
MD5 ead6f5338e4c6ec0a25290832af45d67
SHA1 a841a674b7d9c97151714bd0f1531ddab49799e7
SHA256 168b298dd1a046b55b4a0f857715c6b9fda170a7fb9e0a53fbc596251a3511a5
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/StatusBar.B4Agl376.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES; font-css-en=true
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827b7ad556a2-OSL
cf-cache-status: HIT
age: 82416
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb66a-e18"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET nordvpn.com/static/web.Bb1N--5L.js
104.19.159.190200 OK 11 kB URL
nordvpn.com/static/web.Bb1N--5L.js
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JavaScript source, ASCII text, with very long lines (11209)
First Seen 2025-07-08
Last Seen 2025-07-11
Times Seen 10
Size 11 kB (11251 bytes)
MD5 5a93c670ca463da38c289339a5115a21
SHA1 17461e15d27585c9956627df4b35ea27d1435ee0
SHA256 f0b6b12f2dfadaf7d75e38fcc750ef3ea1825dcc84ae22eb47e9b9f30816ca24
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /static/web.Bb1N--5L.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/static/Toggle.vloycRWL.js
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=gImGIudSIvokUmc7dmaCCZJPgrjbp5j0lLTlyYVoa6o-1752039866-1.0.1.1-dSxKp5B0nLUfzPObKVOJ_.0u.ut8tAvhTg9opFgP3yRW7YuxCW5b0rYo9rsTjpdmB35cC1esCUK19E7KttT7Uc.gy0o.9aKKhKaMURVueTBFvdmx4SaSVWWbllCwyWew; experiment_local=TQODu.1; locale=de; nc=1752074630904; nci=30; bs=95; at=a; nv_tri=TC_9853288788888436_1752039867615; nv_trs=1752039867616_1752039868593_1_4; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: application/javascript
cf-ray: 95c5827b6abc56a2-OSL
cf-cache-status: HIT
age: 5567
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-2bf3"
expires: Sun, 11 Jan 2026 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=3,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri
GET web-api.nordvpn.com/v1/ips/info
104.19.159.190200 OK 242 B URL
web-api.nordvpn.com/v1/ips/info
IP / ASN
104.19.159.190
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type JSON text data
First Seen 2025-07-05
Last Seen 2025-07-11
Times Seen 12
Size 242 B (242 bytes)
MD5 6d241da8e718f47f39155c1e5cde007b
SHA1 6c9352f2aa7acb86bfeda72a46b46f114fc80762
SHA256 05110518c3566bb9a41175cd5e9b5fd502a2e69ba58adabcf7218296654672e2
Certificate Info
Issuer GlobalSign nv-sa
Subject *.nordvpn.com
Fingerprint 85:73:0D:67:A1:8C:85:34:2D:BD:6F:48:CB:A9:D2:75:8D:30:C3:4E
Validity Wed, 25 Sep 2024 14:04:57 GMT - Mon, 27 Oct 2025 14:04:56 GMT
GET /v1/ips/info HTTP/1.1
Host: web-api.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
Origin: https://nordvpn.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:29 GMT
content-type: application/json;charset=utf-8
content-length: 189
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
access-control-allow-origin: https://nordvpn.com
access-control-allow-credentials: true
access-control-allow-methods: GET, PUT, POST, DELETE, PATCH, OPTIONS
access-control-allow-headers: DNT,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization
access-control-expose-headers: *
access-control-max-age: 1728000
cf-cache-status: DYNAMIC
set-cookie: __cf_bm=c0frczs5fAuwhi4mK4mBNKGn3VyLVadAtrU5Q.bhSNo-1752039869-1.0.1.1-6QIidbC.viMeuq3ONmHJw2kaV09CEDv4B4I7AVdDUxGu01KlnyZ5utnDo.V52Mo3rUuQVGpu7UnIuEAtClCL4Mr7uFOAFEcC_PMaH24uh25KgJ265gr2x6esK_syuJgb; path=/; expires=Wed, 09-Jul-25 06:14:29 GMT; domain=.nordvpn.com; HttpOnly; Secure; SameSite=None
__cfruid=ea22fddc0b20e385ce60a39013d82d46d8e7047e-1752039869; path=/; domain=.nordvpn.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95c5827dc9e2b4fd-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET ic.nordcdn.com/v1/https://sb.nordcdn.com/m/6745795335b6ede4/original/nordlayer-symbol.svg
104.16.155.111200 OK 534 B URL
ic.nordcdn.com/v1/https://sb.nordcdn.com/m/6745795335b6ede4/original/nordlayer-symbol.svg
IP / ASN
104.16.155.111
#13335 CLOUDFLARENET
Requested by https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
Resource Info
File type SVG Scalable Vector Graphics image
First Seen 2025-01-16
Last Seen 2025-07-31
Times Seen 20
Size 534 B (534 bytes)
MD5 ec666619cdaa23d03e3dc20044b08ab8
SHA1 dcff9c9070b41521a87dc17d9a27d89bd755e6da
SHA256 77f61360e030dc0fdd490c7786a2d40197585f9851ae416ed0b8c6f704da2fc6
Certificate Info
Issuer Sectigo Limited
Subject *.nordcdn.com
Fingerprint 06:52:0B:73:35:5B:13:B2:9B:99:08:F5:DE:F3:D6:65:22:16:C9:C6
Validity Fri, 21 Mar 2025 00:00:00 GMT - Mon, 20 Apr 2026 23:59:59 GMT
GET /v1/https://sb.nordcdn.com/m/6745795335b6ede4/original/nordlayer-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:28 GMT
content-type: image/svg+xml
cf-ray: 95c582770f4856a2-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 4806
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:28 GMT
last-modified: Tue, 08 Jul 2025 22:01:33 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 2a2ba6f088b375d3f94873d8314f8f58.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: -i7-tlQg8rPuS1RReZ_26zmPB1deTxJpfy1X3NPbZtZmgEV5n3PtQw==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 6e3a6c79-916f-e977-77e5-6da5f1814646
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri