What is bzib.nelreports.net and deff.nelreports.net in relation to Microsoft Edge?

Anonymous
2023-11-11T06:49:29+00:00

I am a Microsoft Edge user and I have recently noticed that my browser is attempting to connect to bzib.nelreports.net and deff.nelreports.net. My security software, Bitdefender, has flagged these connection attempts due to an expired certificate.

I would like to understand why these connections are being made and whether this is expected behavior for Microsoft Edge. If it is, could you please provide some context as to what bzib.nelreports.net and deff.nelreports.net is used for? If it’s not expected behavior, could anyone advise on the steps I should take to address this issue?

Microsoft Edge | Other | Windows 10

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
Anonymous
2023-11-15T14:00:28+00:00

Note: This issue was fixed on 15 Nov 2023 by updating the site's certificates.

Explanation:

Several certificates used on subdomains of this domain expired last week. Certificate expiration has no impact on security or the end user. Basically, the browser will not be able to submit network error logging reports until the certificate is fixed. Network error logging is an HTML5 feature that helps site owners discover network connectivity issues.

Your security software simply announces "Hey, this certificate is bad", a fact that the browser already determined for itself and responds to by not connecting to the server in question.

Security software provides a redundant warning; the browser will not use connections with expired or invalid certificates.

Subdomain names are random strings of characters with no particular meaning.

The appropriate team has been informed of the certificate expiration and corrected the issue.

Was this answer helpful?

20+ people found this answer helpful.
0 comments No comments
Answer accepted by question author
Anonymous
2023-11-16T18:25:14+00:00

This issue was fixed on 11/16 by updating the certificates.

Was this answer helpful?

10+ people found this answer helpful.
0 comments No comments

108 additional answers

Sort by: Oldest
  1. Anonymous
    2023-11-15T13:58:56+00:00

    This is what GPT-4 has on the issue, as of mid 11/15/2023:

    The mysterious connection attempts to deff.nelreports.net and bzib.nelreports.net by Microsoft Edge that have been flagged by Bitdefender involve a few intriguing elements:

    1. Nature of the Domains: These domains are associated with Microsoft Network Error Logging, which sends requests to check the status of network connections from users' browsers. When the browser sends this information back, Bitdefender checks the certificate status and halts the transmission if the certificate is expired or invalid​​​​.
    2. Microsoft's Ownership and Certificate Expiry: Microsoft owns these domains. The SSL certificates for these domains recently expired. Despite the certificate expiry, there is no indication of malware or harm to devices from these connections. The alert from Bitdefender is triggered by its Online Threat Prevention module, which activates whenever a website without an SSL certificate is accessed, or when a secure website has an invalid security certificate, as in this case​​.
    3. Response and Resolutions: Discussions on Microsoft forums indicate that the issue has been widely reported. The domain extensionwebstorebase.edgesv.net is obsolete, leading Microsoft to allow its certificate to expire. However, Edge, for unknown reasons, continues to call to this domain in relation to certain extensions. The Edge Team is reportedly working on an update to resolve this issue, although there is no estimated time of arrival for this update​​.

    While this information sheds light on the nature of the domains and the reason behind the expired certificates, a definitive statement from Microsoft regarding the resolution of this issue or a timeline for the same was not found in the available sources. It's possible that the situation is still being addressed, and users might have to wait for an official update from Microsoft for a complete resolution.

    Was this answer helpful?

    3 people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2023-11-15T14:49:23+00:00

    Info from Bitdefender:

    Suspicious connection block notifications are saying:

    “msedge.exe attempted to establish a connection relying on an expired certificate to bzib.nelreports.net. We blocked the connection to keep your data safe since websites must renew their certificates with a certification authority to stay current, and outdated security certificates represent a risk.”

    And

    “msedge.exe attempted to establish a connection relying on an expired certificate to deff.nelreports.net. We blocked the connection to keep your data safe since websites must renew their certificates with a certification authority to stay current, and outdated security certificates represent a risk.”

    If you’ve been receiving notifications from Bitdefender regarding bzib.nelreports.net and deff.nelreports.net in relation to Microsoft Edge, fret not!

    Bitdefender’s Online Threat Prevention module triggers these alerts when attempts are made to access a websites that have expired SSL certificates. SSL certificates encrypt data exchanged between a user’s browser and a website, ensuring a secure and private connection by validating the website’s identity and safeguarding sensitive information. When certificates expire, it might pose a potential risk.

    The notifications you’re seeing are a proactive measure by Bitdefender to block connections to websites that lack a valid SSL certificate. Typically, these alerts might pop up when visiting websites with numerous advertisements or certain analytics companies whose certificates have expired.

    Checking Certificate Status

    To reassure yourself about the legitimacy of these notifications, you can check the SSL certificate status of websites through platforms like https://www.sslshopper.com/. This can provide you with additional information about the security status of the mentioned websites.

    Seeking Further Assistance

    We’re aware that concerns have been raised by several users regarding this certificate issue on Microsoft forums. It’s likely that Microsoft is already working on a solution, and we anticipate a fix to be released in due course. You can track the ongoing discussion and progress on this matter through this link: https://answers.microsoft.com/en-us/microsoftedge/forum/all/what-is-bzibnelreportsnet-and-deffnelreportsnet-in/747c0517-f9d5-4ab6-b11f-cce0defd5f50

    In the meantime, if you require further assistance or information specific to Microsoft Edge, you can contact the Microsoft Support Team directly via this link: https://support.microsoft.com/contactus/

    Remember, these notifications are a proactive measure by Bitdefender to ensure your online safety. Your data security is a priority, and these alerts aim to prevent potential risks associated with expired SSL certificates.

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2023-11-15T16:00:08+00:00

    Bitdefender a une page d'aide expliquant la situation qui réfère ici.

    Notifications connexion suspecte bloquée récurrentes bzib.nelreports.net | deff.nelreports.net (bitdefender.fr)

    "Si vous avez reçu des notifications de Bitdefender concernant bzib.nelreports.net et deff.nelreports.net en relation avec Microsoft Edge, ne vous inquiétez pas. Ces alertes sont destinées à assurer votre sécurité en ligne et n'indiquent aucune menace de malware pour votre appareil."

    Microsoft avez-vous une solution? que dois-je désactivé ou peut être meme désinstallé?

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments No comments