Interesting story from the Register. This shows why we need more #infosec researchers digging into VPNs. I assume that NordVPN isn't actually up to no good, but requiring that they prove it is important.
https://www.theregister.co.uk/2019/04/26/nordvpn_strange_traffic_domains/