Hello,
Today I noticed suspicious redirections on non https URLs when using Norton VPN Germany location, I switched the VPN to Switzerland and Google detected my session as suspicious, the VPN Switzerland IP is 185.9.18[.]136 and the hostname is jh135[.]perfectdeals[.]xyz (I added the the []), such hostname seems pretty suspicious, you can see reports of spyware linked to that IP on https://twitter.com/dragan_security/status/1460686061760360451 does that IP/hostname legit server used by Norton VPN?
As a user, we will not know just what servers Norton uses for their VPN service. We have seen reported here that they rent server space from Amazon and other companies. So Norton has not been hacked.
Any redirects you are seeing would have to come from a website you are viewing. Possibly malicious ads on that site.