GET /d/consent/prod/main.js HTTP/1.1
Host: s1.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: application/javascript
last-modified: Thu, 10 Apr 2025 06:37:55 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=604800
content-encoding: gzip
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 498904
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582db0f6a56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /v1/https://sb.nordcdn.com/m/190508c8d54d38db/original/nordlayer-default-svg.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/svg+xml
cf-ray: 95c582de6fec5688-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 10897
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:44 GMT
last-modified: Wed, 09 Jul 2025 01:57:23 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 365d682e9b4889986ad44f252accf6b0.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: BXhXJGhACfh8eqpfVtjlv53TYioPjCqk8Q13A_NaCk3jpkpB2sXGzA==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 2d806e1a-1b47-0125-6ff0-b95eed972075
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /v1/https://sb.nordcdn.com/m/506e8101f8e7d946/original/nordpass-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/svg+xml
cf-ray: 95c582de6ffb5688-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 88068
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:44 GMT
last-modified: Mon, 07 Jul 2025 12:36:34 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 5ffe5df2b6c8f15be82e79251546b54a.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: HzeLlWfMr1MFd_Hogd96dP9a7BAqdid6aUyJNsQgk7251UfTYdkemQ==
x-amz-cf-pop: HEL50-C2
x-api-correlation-id: a8e561e6-b611-a110-0cdd-7d506cbefa01
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /v1/https://sb.nordcdn.com/m/35124688a977d7be/original/nordprotect-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/svg+xml
cf-ray: 95c582de78095688-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 169580
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:44 GMT
last-modified: Mon, 07 Jul 2025 01:57:15 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 a22ad523898ca1a66b4560cbe5984662.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: a40i3YHSBqT7Jy0GahT2YSAU3ZpUG2HW8hieITBHqQJ41kqwWbRAmQ==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 2b15d2ee-82e9-55e0-1d3e-2c26f2c45dfd
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /v1/https://sb.nordcdn.com/m/658d7868b0eb19bd/original/saily-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/svg+xml
cf-ray: 95c582de880f5688-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 89620
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:44 GMT
last-modified: Mon, 07 Jul 2025 01:57:15 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
vary: accept-encoding
via: 1.1 39e03a84352b80cf7e2b59c41f27a026.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: LV2avHmzbaM8sTpDokIqe3Fsaenyk9CfV_a235hDUSMgYvH3gpxadA==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: a2727c84-48f3-4e9d-9807-543f91e9e858
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /aff_c?aff_id=2495&offer_id=312&url_id=1638&aff_sub=101290684&aff_sub2=12814527&aff_sub3=fcbeb852deb05c3c126ef3f0390a68f4d7ecbeef4d0a16aab&aff_sub4={zoneid}&clickid=be3b939b5c8711f080f802240a82b820 HTTP/1.1
Host: go.nordvpn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 302 Found
Server: nginx
Date: Wed, 09 Jul 2025 05:44:42 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 349
Connection: keep-alive
Cache-Control: no-cache, no-store, must-revalidate
Expires: Sat, 26 Jul 1997 05:00:00 GMT
Location: https://visit.nordvpn.com/?offer_id=312&aff_id=2495&aff_transaction_id=10217768d10a328b1f8b476f44e243&source=&params[ho_asub1]=101290684&url_id=5
P3p: CP="NOI CUR OUR NOR INT"
Pragma: no-cache
Set-Cookie: aff_ran_url_312=1638; expires=Thu, 10 Jul 2025 05:44:42 GMT; path=/; SameSite=None; Secure
enc_aff_session_312=ENC03720198c79d237567ed82d62a9ac6792bab843a41195b0266661f5e29ece4caacb3bdb1931ac8f7b535859a0ecd46e766cd1e2b1a1c53d3608a19d12c6738ad9bc7adab5f4c4bbb426de476e9da50cb2ab14434922b8306ce6766d203b23d3757dc7bddf46fb711085534ac80ec41ccec3e1c6ddc1a73081c5c5a0e873840b37b68434c37939d60fad5868c8af14afc4b4acf20557627c47acd44915b3e226b0ed9a086e55e452ed9913a0a63184f6fb7414c972a68998ddef8fd5b0fcce464132d01eeaa; expires=Fri, 09 Jul 2027 05:44:42 GMT; path=/; SameSite=None; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMzQuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgWDY0OyBSdjoxMzQuMCkgR2Vja28vMjAxMDAxMDEgRmlyZWZveC8xMzQuMCIsImFjY2VwdF9sYW5ndWFnZSI6ImVuLVVTLGVuO3E9MC41IiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; expires=Fri, 02 Jun 2028 16:24:42 GMT; path=/; SameSite=None; Secure
Tracking_id: 10217768d10a328b1f8b476f44e243
Access-Control-Allow-Origin: *
X-Request-Id: 2b0addd80027addf9a75bc9e1432a0a9
Access-Control-Allow-Headers: Tune-SDK-Version
Accept-Ch: Sec-Ch-Dpr, Dpr, Sec-Ch-Ua-Model

GET /de?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495 HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 301 Moved Permanently
date: Wed, 09 Jul 2025 05:44:42 GMT
content-length: 0
location: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582d32e8b56bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /static/Footer.astro_astro_type_script_index_0_lang.Dg9_n5y6.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582daeea90b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582daeea90b59", cfExtPri

GET /?offer_id=312&aff_id=2495&aff_transaction_id=10217768d10a328b1f8b476f44e243&source=&params[ho_asub1]=101290684&url_id=5 HTTP/1.1
Host: visit.nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 302 Found
date: Wed, 09 Jul 2025 05:44:42 GMT
content-length: 0
location: https://nordvpn.com/de?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
cache-control: no-store, no-cache, must-revalidate
expires: Sat, 26 Jul 1997 05:00:00 GMT
pragma: no-cache
strict-transport-security: max-age=31536000; includeSubDomains; preload
cf-cache-status: DYNAMIC
set-cookie: aff_id=2495; Domain=nordvpn.com; Max-Age=2592000
aff_transaction_id=10217768d10a328b1f8b476f44e243; Domain=nordvpn.com; Max-Age=2592000
nordvpn_aff_id=2495; Domain=nordvpn.com; Max-Age=2592000
nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; Domain=nordvpn.com; Max-Age=2592000
__cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; path=/; expires=Wed, 09-Jul-25 06:14:42 GMT; domain=.nordvpn.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 95c582d24dd356bf-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /static/Typography.astro_astro_type_script_index_0_lang.B2Ga2cXP.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582dace920b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582dace920b59", cfExtPri

GET /favicon.png HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97; at=a; nv_tri=TC_043211247029172783_1752039884129; nv_trs=1752039884130_1752039884130_1_0; consent=ignored%2CES
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/png
content-length: 396
cf-ray: 95c582e09a6b0b59-OSL
cf-cache-status: REVALIDATED
accept-ranges: bytes
etag: "686cb66a-259"
last-modified: Tue, 08 Jul 2025 06:10:50 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=601
priority: u=6,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /static/Script.astro_astro_type_script_index_0_lang.DG2EQSfT.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582daeea80b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582daeea80b59", cfExtPri

GET /apple-touch-icon-180x180.png HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97; at=a; nv_tri=TC_043211247029172783_1752039884129; nv_trs=1752039884130_1752039884130_1_0; consent=ignored%2CES
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/png
content-length: 1270
cf-ray: 95c582e09a6a0b59-OSL
cf-cache-status: REVALIDATED
accept-ranges: bytes
etag: "686cb652-acb"
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
cf-bgj: imgq:85,h2pri
cf-polished: origSize=2763
priority: u=6,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /static/StatusBar.B4Agl376.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97; at=a; nv_tri=TC_043211247029172783_1752039884129; nv_trs=1752039884130_1752039884130_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582dfa9c00b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582dfa9c00b59", cfExtPri

GET /d/nordvpn/prod/index.js?cu=https://d.nordvpn.com/1/cc&p=nordvpn&cv=nordvpn-main@0.204.1&sni=1 HTTP/1.1
Host: s1.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: application/javascript
last-modified: Tue, 01 Jul 2025 10:25:16 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=604800
content-encoding: gzip
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 84854
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582db0f5c56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /static/Tracy.astro_astro_type_script_index_0_lang.B9I_KrPf.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582dabe8d0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582dabe8d0b59", cfExtPri

GET /static/TrackersRuntimeScript.astro_astro_type_script_index_0_lang.DS8oiYkm.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582daeeaa0b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582daeeaa0b59", cfExtPri

GET /v1/https://sb.nordcdn.com/m/7c93bd95ab5d2212/original/nordlocker-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/svg+xml
cf-ray: 95c582de7ffe5688-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 165786
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:44 GMT
last-modified: Mon, 07 Jul 2025 01:57:14 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 a015763506a36624e56a8a469e3484c4.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: 5go7v3EWYSGHFQaKoj1DhMvfB_oqAXLhvagCeKz9CAUnycM0s24t4w==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 3cb7f020-f446-c822-a162-69c7988bc943
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /v1/https://sb.nordcdn.com/m/29ca06dc6b8e11d8/original/nordstellar-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/svg+xml
cf-ray: 95c582de78035688-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 14213
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:44 GMT
last-modified: Mon, 07 Jul 2025 01:57:15 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 ad3ce7688f48f2bfb8279b49c6c4711e.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: NSvJ8mC8OXmM_z6OJZQy7a8mmGdWIIh1it8iN538QlVR8VyoeMfL4A==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: f492732d-d4ba-3d9c-9764-cc8a5b1666b1
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /d/consent/prod/main.css HTTP/1.1
Host: s1.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: text/css
last-modified: Thu, 10 Apr 2025 06:37:55 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=604800
content-encoding: gzip
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 498905
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582db0f6956c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /static/CookieConsent.astro_astro_type_script_index_0_lang.t-GNs4OI.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582dabe880b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582dabe880b59", cfExtPri

GET /v1/fr_auto/https://sb.nordcdn.com/transform/cd73f31f-6c0c-4715-9a98-55bb40aa68c3/hero-phone-mockup-country-protected-xl-de?X-Nord-Credential=T4PcHqfACi8Naxvulzf4IE8XT4oypRTi0blOOGwbK2A8L4fcPw52k3qkvbkYH&X-Nord-Signature=4xqwWgj0KujVUDvIMrBvrWc4PgSUt9r2%2BTczvxDSobM%3D HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/avif
content-length: 50232
cf-ray: 95c582db0f6156c9-OSL
cf-cache-status: EXPIRED
accept-ranges: bytes
access-control-allow-origin: *
cache-control: public, max-age=900, s-maxage=15552000
content-disposition: inline; filename="hero-phone-mockup-country-protected-xl-de.avif"; filename*=UTF-8''hero-phone-mockup-country-protected-xl-de.avif
last-modified: Wed, 09 Jul 2025 05:44:44 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: L0782hiX_g9nilWxicH5Lm7qUlojzUvoABnVHmxhxdmwcQlXoHTX0g==
x-amz-cf-pop: OSL50-P1
x-api-correlation-id: f20a7ddb-8b56-69cf-3089-e10855f70d7d
x-cache: Hit from cloudfront
x-content-type-options: nosniff
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /v1/https://sb.nordcdn.com/m/6745795335b6ede4/original/nordlayer-symbol.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/svg+xml
cf-ray: 95c582de6ff45688-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 4822
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:44 GMT
last-modified: Tue, 08 Jul 2025 22:01:33 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 2a2ba6f088b375d3f94873d8314f8f58.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: -i7-tlQg8rPuS1RReZ_26zmPB1deTxJpfy1X3NPbZtZmgEV5n3PtQw==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 6e3a6c79-916f-e977-77e5-6da5f1814646
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /static/client.WZp4gl1N.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97; at=a; nv_tri=TC_043211247029172783_1752039884129; nv_trs=1752039884130_1752039884130_1_0; consent=ignored%2CES
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582dfa9c60b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582dfa9c60b59", cfExtPri

GET /d/consent/prod/init.js?pre=gdpr HTTP/1.1
Host: s1.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: application/javascript
last-modified: Thu, 10 Apr 2025 06:37:55 GMT
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=604800
content-encoding: gzip
x-frame-options: SAMEORIGIN
cf-cache-status: HIT
age: 261403
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582db0f5e56c9-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET /static/index.Dnu4zlg3.css HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/css
cf-ray: 95c582dace960b59-OSL
cf-cache-status: HIT
age: 351622
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"685b9a57-2496"
expires: Sun, 11 Jan 2026 05:44:43 GMT
last-modified: Wed, 25 Jun 2025 06:42:31 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=2,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /gtag/js?id=G-LEXMJ1N516 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 09 Jul 2025 05:44:44 GMT
expires: Wed, 09 Jul 2025 05:44:44 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
content-security-policy-report-only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascgcycc:1077:0
cross-origin-opener-policy-report-only: same-origin; report-to=ascgcycc:1077:0
report-to: {"group":"ascgcycc:1077:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascgcycc:1077:0"}],}
server: Google Tag Manager
content-length: 144677
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET /static/index.B2MUrA1p.css HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/css
cf-ray: 95c582dace940b59-OSL
cf-cache-status: HIT
age: 84545
cache-control: public, max-age=16070400
content-encoding: br
etag: W/"686cb652-23cef"
expires: Sun, 11 Jan 2026 05:44:43 GMT
last-modified: Tue, 08 Jul 2025 06:10:26 GMT
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
priority: u=2,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /v1/fr_auto/https://sb.nordcdn.com/transform/2324f0c4-7ac2-44a0-9fab-d70a807d3db4/phone-auto-connection-servers-protected-md-de-2x-png?X-Nord-Credential=T4PcHqfACi8Naxvulzf4IE8XT4oypRTi0blOOGwbK2A8L4fcPw52k3qkvbkYH&X-Nord-Signature=fnIJblOQQ4zY%2Fk1iP%2BgEtJVhygdHROvAtB7pHlpkD%2BM%3D HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/avif
content-length: 21090
cf-ray: 95c582de981d5688-OSL
cf-cache-status: HIT
accept-ranges: bytes
access-control-allow-origin: *
age: 16
cache-control: public, max-age=900, s-maxage=15552000
content-disposition: inline; filename="phone-auto-connection-servers-protected-md-de-2x-png.avif"; filename*=UTF-8''phone-auto-connection-servers-protected-md-de-2x-png.avif
last-modified: Wed, 09 Jul 2025 04:38:26 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 e6c9a537bd3796ea580cf02a62b7c246.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: kqb6A1eWLFhCNqTNfTVEbHSA3Is4SQoZVWc1s7A1vEYH4qRmxXLzMA==
x-amz-cf-pop: HEL50-C2
x-api-correlation-id: e983fc43-f907-e1cb-1061-2fd2916899dc
x-cache: Hit from cloudfront
x-content-type-options: nosniff
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /v1/https://sb.nordcdn.com/m/5dd86f435e9b1aea/original/nordvpn-symbolBlue.svg HTTP/1.1
Host: ic.nordcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:44 GMT
content-type: image/svg+xml
cf-ray: 95c582de6ff15688-OSL
cf-cache-status: HIT
access-control-allow-origin: *
age: 169508
cache-control: public, max-age=172800
content-disposition: inline
expires: Fri, 11 Jul 2025 05:44:44 GMT
last-modified: Sat, 05 Jul 2025 14:31:52 GMT
strict-transport-security: max-age=15552000; includeSubDomains; preload
via: 1.1 b78539d5f13f3162976a6abc8783d3de.cloudfront.net (CloudFront)
cross-origin-resource-policy: cross-origin
permissions-policy: camera=(), geolocation=(), microphone=()
referrer-policy: strict-origin-when-cross-origin
x-amz-cf-id: bAZ1mhNPgmDZyj_I0ZBQ27K2ThSTtSohos_sfLNbFa4zUnNc6dGdhQ==
x-amz-cf-pop: ARN53-P2
x-api-correlation-id: 369c217b-62d5-f0e7-5e18-0b540adf48bb
x-cache: Hit from cloudfront
x-content-type-options: nosniff
x-transformations-applied: false
priority: u=4,i=?0
vary: Accept-Encoding
server: cloudflare
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495 HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 200 OK
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html
cf-ray: 95c582d3d9f20b59-OSL
cf-cache-status: MISS
cache-control: max-age=14400, private
content-encoding: br
last-modified: Tue, 08 Jul 2025 15:52:49 GMT
link: <https://nordvpn.com/de/>; rel="canonical"
strict-transport-security: max-age=31536000; includeSubDomains; preload
vary: Accept-Encoding
content-security-policy: default-src 'self' https://debug.nordvpn.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://s1.nordcdn.com https://googleads.g.doubleclick.net https://nordvpn-com-blog.disqus.com https://challenges.cloudflare.com https://websdk.appsflyer.com; script-src-elem 'self' 'unsafe-inline' https://challenges.cloudflare.com https://www.googletagmanager.com https://s1.nordcdn.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://cdn.smooch.io https://nordvpn-dev.disqus.com https://c.disquscdn.com https://connect.facebook.net https://nordvpn-com-blog.disqus.com https://websdk.appsflyer.com https://nordvpn.com; style-src 'self' 'unsafe-inline' https://labs.nordvpn.com https://s1.nordcdn.com https://sb.nordcdn.com https://cdn.smooch.io https://www.gstatic.com https://c.disquscdn.com; img-src 'self' data: https: https://ic.nordcdn.com https://sb.nordcdn.com; connect-src 'self' data: https://d.nordvpn.com https://web-api.nordvpn.com https://cm.nordvpn.com https://file-checker.nordvpn.com https://www.google.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.webloader.smooch.io https://*.config.smooch.io https://links.services.disqus.com https://stats.g.doubleclick.net https://sb.nordcdn.com https://ic.nordcdn.com https://pagead2.googlesyndication.com https://ad.doubleclick.net https://debug.nordvpn.com https://www.googletagmanager.com https://link-checker.nordvpn.com https://dnsleak-api.nordvpn.com https://*.dnsleak.nordvpn.com https://www.bing.com https://banner.appsflyer.com https://creatives-cdn.appsflyer.com https://partner-acer.nordsec.com https://www.google-analytics.com https://nordvpn.zendesk.com; form-action 'self' https://webto.salesforce.com https://web-api.nordvpn.com; font-src 'self' data: https://cdn.smooch.io https://sb.nordcdn.com https://fonts.gstatic.com https://cdn.appsflyer.com; media-src 'self' https://*.nordcdn.com data:; object-src 'none'; frame-ancestors 'self' https://nordvpn.com https://nordvpn.com:443; frame-src 'self' nordvpn: nordvpn-sl: nordvpn-app: https://disqus.com https://www.youtube.com https://www.googletagmanager.com https://*.doubleclick.net https://challenges.cloudflare.com https://visit.nordvpn.com https://go.nordvpn.net https://openspeedtest.com https://dev.oathstudio.com https://nordvpncards2023.oathstudio.com https://www.thinglink.com; block-all-mixed-content; upgrade-insecure-requests; report-uri https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d; report-to csp-endpoint;
permissions-policy: geolocation=(), microphone=(), camera=(), payment=(), usb=(), bluetooth=(), autoplay=(self "https://www.youtube.com" "https://sb.nordcdn.com" "https://challenges.cloudflare.com"), fullscreen=(self "https://www.youtube.com" "https://sb.nordcdn.com" "https://challenges.cloudflare.com")
referrer-policy: strict-origin-when-cross-origin
report-to: : {"group":"csp-endpoint","max_age":10886400,"endpoints":[{"url":"https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d"}]}
reporting-endpoints: csp-endpoint="https://debug.nordvpn.com/api/41/security/?sentry_key=9765ee91544348309ca8564e59eba16d"
set-cookie: experiment_local=TQODu.0; expires=Tue, 07 Oct 2025 05:44:43 GMT; path=/; domain=nordvpn.com
locale=de; expires=Thu, 09 Jul 2026 05:44:43 GMT; path=/; domain=nordvpn.com
nc=1752074647375; expires=Fri, 09 Jul 2027 05:44:43 GMT; path=/; domain=nordvpn.com
nci=30; expires=Fri, 09 Jul 2027 05:44:43 GMT; path=/; domain=nordvpn.com
bs=97; expires=Fri, 08 Aug 2025 05:44:43 GMT; path=/; domain=nordvpn.com
x-content-type-options: : nosniff
priority: u=1,i=?0
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfExtPri

GET /static/Base.astro_astro_type_script_index_0_lang.DWl4PLVy.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582dace970b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582dace970b59", cfExtPri

GET /static/Section.astro_astro_type_script_index_0_lang.BkvF3_eb.js HTTP/1.1
Host: nordvpn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://nordvpn.com/de/?utm_medium=affiliate&utm_term=&utm_content=101290684&utm_campaign=off312&utm_source=aff2495
DNT: 1
Connection: keep-alive
Cookie: aff_id=2495; aff_transaction_id=10217768d10a328b1f8b476f44e243; nordvpn_aff_id=2495; nordvpn_aff_transaction_id=10217768d10a328b1f8b476f44e243; __cf_bm=AwG58VpAxA8yXKnxk1bYNz4Bo9o9bUC7ll8.W9lFuIQ-1752039882-1.0.1.1-osODUEAbb0P57OoEHvzQtSdVWjLpRMCbNINbJh70dmBEGdj1zZIkb7y7JJsPMo7FAGC8nBECAgmnMWpedTVN1Fc4ps40AhgHrRvtOm02JvZdZzuONBZbi9pZTmBigYY.; experiment_local=TQODu.0; locale=de; nc=1752074647375; nci=30; bs=97
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

HTTP/3 403 Forbidden
date: Wed, 09 Jul 2025 05:44:43 GMT
content-type: text/html; charset=UTF-8
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cf-mitigated: challenge
critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-origin
origin-agent-cluster: ?1
permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
priority: u=3,i=?0
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 95c582daeea60b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
server-timing: chlray;desc="95c582daeea60b59", cfExtPri