NordVPN Detection Report
The detection engine correctly identified NordVPN as an active VPN session.
Provider Overview
NordVPN is known for its extensive server network and advanced security features like Double VPN and Onion over VPN. It also offers dedicated IP addresses and is effective at unblocking streaming services.
Detection Notes
- Tunnel negotiated using NordLynx/WireGuard endpoints with characteristic handshake intervals.
- Outbound traffic utilised NordVPN DNS resolvers with low cache hit ratios typical for shared exits.
- Packet timing variance matched NordVPN's multi-hop configurations advertised as Double VPN.
