What is bzib.nelreports.net and deff.nelreports.net in relation to Microsoft Edge?

Bitdefender a une page d'aide expliquant la situation qui réfère ici.

Notifications connexion suspecte bloquée récurrentes bzib.nelreports.net | deff.nelreports.net (bitdefender.fr)

"Si vous avez reçu des notifications de Bitdefender concernant bzib.nelreports.net et deff.nelreports.net en relation avec Microsoft Edge, ne vous inquiétez pas. Ces alertes sont destinées à assurer votre sécurité en ligne et n'indiquent aucune menace de malware pour votre appareil."

Microsoft avez-vous une solution? que dois-je désactivé ou peut être meme désinstallé?

Info from Bitdefender:

Suspicious connection block notifications are saying:

“msedge.exe attempted to establish a connection relying on an expired certificate to bzib.nelreports.net. We blocked the connection to keep your data safe since websites must renew their certificates with a certification authority to stay current, and outdated security certificates represent a risk.”

And

“msedge.exe attempted to establish a connection relying on an expired certificate to deff.nelreports.net. We blocked the connection to keep your data safe since websites must renew their certificates with a certification authority to stay current, and outdated security certificates represent a risk.”

Bitdefender’s Online Threat Prevention module triggers these alerts when attempts are made to access a websites that have expired SSL certificates. SSL certificates encrypt data exchanged between a user’s browser and a website, ensuring a secure and private connection by validating the website’s identity and safeguarding sensitive information. When certificates expire, it might pose a potential risk.

The notifications you’re seeing are a proactive measure by Bitdefender to block connections to websites that lack a valid SSL certificate. Typically, these alerts might pop up when visiting websites with numerous advertisements or certain analytics companies whose certificates have expired.

Checking Certificate Status

To reassure yourself about the legitimacy of these notifications, you can check the SSL certificate status of websites through platforms like https://www.sslshopper.com/. This can provide you with additional information about the security status of the mentioned websites.

Seeking Further Assistance

We’re aware that concerns have been raised by several users regarding this certificate issue on Microsoft forums. It’s likely that Microsoft is already working on a solution, and we anticipate a fix to be released in due course. You can track the ongoing discussion and progress on this matter through this link: https://answers.microsoft.com/en-us/microsoftedge/forum/all/what-is-bzibnelreportsnet-and-deffnelreportsnet-in/747c0517-f9d5-4ab6-b11f-cce0defd5f50

In the meantime, if you require further assistance or information specific to Microsoft Edge, you can contact the Microsoft Support Team directly via this link: https://support.microsoft.com/contactus/

Remember, these notifications are a proactive measure by Bitdefender to ensure your online safety. Your data security is a priority, and these alerts aim to prevent potential risks associated with expired SSL certificates.

This is what GPT-4 has on the issue, as of mid 11/15/2023:

The mysterious connection attempts to deff.nelreports.net and bzib.nelreports.net by Microsoft Edge that have been flagged by Bitdefender involve a few intriguing elements:

1. Nature of the Domains: These domains are associated with Microsoft Network Error Logging, which sends requests to check the status of network connections from users' browsers. When the browser sends this information back, Bitdefender checks the certificate status and halts the transmission if the certificate is expired or invalid​​​​.
2. Microsoft's Ownership and Certificate Expiry: Microsoft owns these domains. The SSL certificates for these domains recently expired. Despite the certificate expiry, there is no indication of malware or harm to devices from these connections. The alert from Bitdefender is triggered by its Online Threat Prevention module, which activates whenever a website without an SSL certificate is accessed, or when a secure website has an invalid security certificate, as in this case​​.
3. Response and Resolutions: Discussions on Microsoft forums indicate that the issue has been widely reported. The domain extensionwebstorebase.edgesv.net is obsolete, leading Microsoft to allow its certificate to expire. However, Edge, for unknown reasons, continues to call to this domain in relation to certain extensions. The Edge Team is reportedly working on an update to resolve this issue, although there is no estimated time of arrival for this update​​.

While this information sheds light on the nature of the domains and the reason behind the expired certificates, a definitive statement from Microsoft regarding the resolution of this issue or a timeline for the same was not found in the available sources. It's possible that the situation is still being addressed, and users might have to wait for an official update from Microsoft for a complete resolution.