I investigated the NordVPN ordeal. Here is what I found.
Their address is 50th Street, Global Plaza Tower: 19th Floor, Suite H, Panama [1]
This address is used by shell companies. [2][3][4][5]
So, now we can be establish that Tefincom is not the real company behind NordVPN.
When you make a payment to NordVPN, your money apparently goes to a CloudVPN Inc.[6] This is weird, since NordVPN claims to be subject to Panama laws and CloudVPN is based out of the USA. [7][8]
It gets better, check CloudVPN Inc's public records, and check out their 2017 original report under the history menu. [9] Listed as the president/director is Darius Bereika. [10] Darius Bereika is also the CEO of tesonet. [11]
You read that correctly, the person who is the president of the company who manages NordVPN payments is the same person who's the CEO of Tesonet. If that doesn't bother you, keep in mind that Tesonet runs a data-harvesting service. [12]