Reading time 7
Who is Behind NordVPN?
NordVPN routes all users’ internet traffic through a remote server run by the service, thereby hiding their IP address and encrypting all incoming and outgoing data.
NordVPN also provides three dedicated TOR servers for those who want to combine the anonymity of the TOR network with the VPN. The nice thing about this feature is that you don’t have to be using the dedicated TOR browser. NordVPN takes care of all the configuration and routing for you. Once you connect to one of the service’s Onion over VPN servers, you are on the TOR network.
There are also Double VPN and Anti-DDoS servers for those inclined to use them. Double VPN is supposed to give you extra anonymity by routing your traffic through two VPN servers such as the U.S. and Canada, or Taiwan and Hong Kong. Anti DDoS, meanwhile, is supposed to provide a more stable connection with “an advanced stability checking system.”
Who is NORDVPN
Their publicly listed address is 50th Street, Global Plaza Tower: 19th Floor, Suite H, Panama [1]
This address is used by some shell companies. [2][3][4][5]
The official Company name is Tefincom S.A – D.B.A. NordVPN Texincom S.A. [13] [14] [35]
Owns ztomy.com as a domain name [14]
The phone number of record is 649-889-3645 [14]
Phone # 649-889-3645 relates to 13308 Redfish Ln Ste 101 Stafford TX & 325 Delaware Ave, Suite 300 Buffalo, NY 14202 [14] & 603 Discovery Dr. West Chicago, IL, 60185, US [14] Company name of Nordvpd [14]
Phone # 649-889-3645 also relates to 50Th Street, Global Plaza Tower 19Th Floor, Suite H, Panama City, Panama [15] company name Nordvpn Madrid Range [15]
Phone # 649-889-3645 relates to Via Espana, Delta Bank Building, 6Th Floor, Suite 604D [15]
Tefincom S.A relates to Tefinkom & Co S.a, 50Th Street, Global Plaza Tower, 19Th Floor, Suite H, 00000 Panama, Panama [16]
Tefincom S.A also relates to Box 1342, 172 27 Sundbyberg, Sweden [16]
So, now we can be established that Tefincom is not the real company behind NordVPN., it is just a shell
When you make a payment to NordVPN, your money apparently goes to a CloudVPN Inc.[6] This is weird, since NordVPN claims to be subject to Panama laws and CloudVPN is based out of the USA. [7][8]
It gets better, check CloudVPN Inc’s public records, and check out their 2017 original report under the history menu. [9] Listed as the president/director is Darius Bereika. [10] Darius Bereika is also the CEO of tesonet. [11]
You read that correctly, the person who is the president of the company who manages NordVPN payments is the same person who’s the CEO of Tesonet. If that doesn’t bother you, keep in mind that Tesonet runs a data-harvesting service. [12]
Domain Names are registered under the POC of Sandra Gina Esparon [17][27][28]
NORDVPN Employee name ENGEL, MICHAEL L [19]
NORDVPN Officers [20]
Directors / Officers
CARLOS ALBERTO WEAND ORTIZ, subscriber
EVALINE SOPHIE JOUBERT, director / secretary
FERNANDO ENRIQUE MONTERO DE GRACIA, subscriber
GINA SANDRA ESPARON, director/president
TERESA BREWSTER, director/treasurer
TEFINCOM S.A. [21]
Engomi Business Centre, Floor, 1 28 Oktovriou
Egkomi Nicosias, 2414 Cyprus
+357-22275230
GINA SANDRA ESPARON‘s other companies [22][29][30][31][32]
IP Range = 87.239.254.0 – 87.239.254.255 [18]
Tesonet operates NordVPN can be easily verified [23]
Tesonet operates NordVPN and has strict business relations with ProtonVPN [23]
Tesonet also signs the ProtonVPN Android application certificate. [23]
Tesonet core business includes data mining according to their website [23]
13308 Redfish Ln Ste 101, Stafford, TX 77477, United States relates to Nexeon Technologies, Inc. [24] [25]
325 Delaware Ave, Suite 300 Buffalo, NY 14202 relates to Nexeon Technologies, Inc. [26]
603 Discovery Dr. West Chicago, IL, 60185 relates to Nexeon Technologies, Inc. [26]
649-889-3645 belongs to NORDVPN [27] [28]
CloudVPN is not a payment processor in the transaction phase, but the beneficiary of the payment [23]
CloudVPN signs the application(s) of NordVPN (therefore it has full access to Google Play Store keys of NordVPN) [23]
Tesonet signs the application(s) of ProtonVPN (therefore it has full access to Google Play Store keys of ProtonVPN) [23]
The CEO of Tesonet, CloudVPN and ProtonVPN is the same person [23]
CloudVPN introduced itself to PayPal as the webserver owner of NordVPN [23]
NordVPN, ProtonVPN, ProtonMail, Linked to Tesonet CEO Darius Bereika [33]
CloudVPN is registered in the US [34]
=========================
Company at 50th Street, Global Plaza Tower: 19th Floor, Suite H, Panama, has 21 other companies listed for that address, which means that this is likely a shell front, rent by the hour office space, or a mailbox
[A] Inri Association Ltd
[B] Cambra La Duke & Co
[C] Felmina Alliance, LTD – Phil Burrell; John Moton Jr.; Helen Smith; Thomas Marrin Bickham; Darlene Mensinger; James Kirk; Terrence B. Scott, Sr.
[D] TradeMUX
[E] Free Private Cities Inc.
[F] Finstrum
[G] Beka Youguetchoua
[H] Amarico SA
[I] Sensoft S.a.
[J] Tertek Trading S.A.
[K] PJ Capital Group S.A.
[L] Cascado AG
[M] Maflik Group S.A.
[N] Exim Group Ventures LTD S.A.
[O] Cayo Flow Capital
[P] Cascado AG
[P] Geoland foundation
[P] Euro-Amex Exchange, Inc.
[P] Danler Partners Corp.
[P] Greenely’s Business Management S.A.
[Q] Offshore Companies House
[O] = https://www.moneysmart.gov.au/
==============================
Information about the building at 50th Street, Global Plaza Tower: 19th Floor, Suite H, Panama
With all that being said, NordVPN certainly does a great job of obscuring who they are, where they are located and where the money goes. I haven’t found anything that can confirm or deny the CIA connection. But according to NordVPN themselves, they go through major efforts to hide details about themselves so they can better protect your data.
I have an earlier post about a review of NordVPN – A Review of NordVPN
*** This post is an investigation into who NordVPN is owned by, as some people claim it is owned by the CIA. All research was for this post was done in early 2019, so some of the information may have changed since that time. Not all of this research is mine, some has been compiled from several other sources ***
