On August 19, 2019 Dr.WEB announced their discovery that hackers cloned NordVPN's website which offered an app download infected with a virus.
Here are the screenshots Dr.WEB provided. Notice the URLs in the address bars.
The fake site encourages you to download a file containing the Win32.Bolik.2
virus.
NordVPN's CyberSec feature helps by blocking malicious sites like this which is another reason we like NordVPN so much.