Redditに書いてある
Chrome extension malware?
https://www.reddit.com/r/nordvpn/comments/1gpin5a/chrome_extension_malware/
Received a response form the Nord team. Once you're connected to a proxy server, the app checks the connectivity status by pinging one of the high uptime domains. This helps to ensure that connection is live on each server change.