What is bzib.nelreports.net and deff.nelreports.net in relation to Microsoft Edge?

Anonymous
2023-11-11T06:49:29+00:00

I am a Microsoft Edge user and I have recently noticed that my browser is attempting to connect to bzib.nelreports.net and deff.nelreports.net. My security software, Bitdefender, has flagged these connection attempts due to an expired certificate.

I would like to understand why these connections are being made and whether this is expected behavior for Microsoft Edge. If it is, could you please provide some context as to what bzib.nelreports.net and deff.nelreports.net is used for? If it’s not expected behavior, could anyone advise on the steps I should take to address this issue?

Microsoft Edge | Other | Windows 10

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-11-15T14:00:28+00:00

Note: This issue was fixed on 15 Nov 2023 by updating the site's certificates.

Explanation:

Several certificates used on subdomains of this domain expired last week. Certificate expiration has no impact on security or the end user. Basically, the browser will not be able to submit network error logging reports until the certificate is fixed. Network error logging is an HTML5 feature that helps site owners discover network connectivity issues.

Your security software simply announces "Hey, this certificate is bad", a fact that the browser already determined for itself and responds to by not connecting to the server in question.

Security software provides a redundant warning; the browser will not use connections with expired or invalid certificates.

Subdomain names are random strings of characters with no particular meaning.

The appropriate team has been informed of the certificate expiration and corrected the issue.

Was this answer helpful?

20+ people found this answer helpful.
0 comments
Answer accepted by question author
Anonymous
2023-11-16T18:25:14+00:00

This issue was fixed on 11/16 by updating the certificates.

Was this answer helpful?

10+ people found this answer helpful.
0 comments

108 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2023-11-13T15:00:24+00:00

    Hello James:

    Regarding antivirus activity blocking bzib.nelreports.net;

    The domain bzib.nelreports.net is associated with an Azure app, domain and server, all owned by Microsoft. According to Bing Chat, "It seems that some users have reported similar issues where their antivirus software, such as BitDefender, has blocked connections to this domain due to an untrusted or expired certificate.

    Microsoft has reportedly acknowledged this issue and stated that it’s related to a defunct server, and the certificate for it won’t be renewed."

    Not only has the certificate recently expired, on Nov 10 I believe, but the domain and app (which seems to be a behind your back ad redirect service) is being reported as a potential malware/virus source by VirusTotal and other anti-malware services & AV apps, mostly because of the expired certificate. What a good way to cause preventable and needless worry for your users Microsoft!

    Microsoft is aware of this issue. Apparently, MS doesn't have the corporate energy or minimal motivation needed to find and unplug what's probably some old Pentium server stuffed in a utility closet somewhere that's running an outdated Azure app. But noooo, it's easier and cheaper for MS to knowingly cause concern and inconvenience for thousands of their users. /s

    Resolving this is solely Microsoft's responsibility and Bitdefender will keep blocking the address when using Edge, unless you grant an exception for the address. I would allow Bitdefender, Kaspersky & other AVs to continue blocking the addresses until Microsoft takes the simple steps needed to fix this.

    Was this answer helpful?

    30+ people found this answer helpful.
    0 comments
  2. Anonymous
    2023-11-13T14:11:07+00:00

    I am also getting such notification about "bzib.nelreports.net" and "deff.nelreports.net".

    However, I found a solution to stop it, but it is not very helpful for Edge users. It may effective to only those who do not use edge.

    Here it is:

    1. Settings> Cookies and site permissions> Cookies and data stored> Manage and delete cookies and site data>Allow sites to save and read cookie data (recommended): off

    Click/tap on the three dots right of the profile picture of edge. Then go to settings, from left select Cookies and site permissions, from right panel, click/tap Manage and delete cookies and site data (below Cookies and data stored). The turn off the active button of Allow sites to save and read cookie data (recommended).

    1. Settings>System and performance>

    Startup boost: off

    Continue running background extensions and apps when Microsoft Edge is closed: off

    Like step 1, from the left select System and performance and from the right turn off Startup boost and then turn off Continue running background extensions and apps when Microsoft Edge is closed.

    Click/tap on the three dots (right of the profile picture) and select Close Microsoft Edge from the bottom.

    Again, it may cause problems to those service that require Edge running in background and it is not for Edge users, because it will cause sign in issues in edge.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  3. Anonymous
    2023-11-13T13:13:01+00:00

    This whole fiasco with Microsoft not being able to keep their certificates in order to support their "flagship" browser is just one more reason to switch to a browser that doesn't track everything you do, like Brave or Firefox.

    Was this answer helpful?

    7 people found this answer helpful.
    0 comments