What is bzib.nelreports.net and deff.nelreports.net in relation to Microsoft Edge?

It would appear that someone finally fixed the certs, you can go to those sites now without Bitdefender trying to block it. No more notifications.

*.nelreports.net is a Microsoft domain. Several certificates used on the subdomains of this domain expired last week.

There is no security impact or end-user-impact of the certificate expiration -- Basically, the browser will be unable to submit Network Error Logging reports until the certificate is corrected. Network Error Logging is a HTML5 feature to allow site owners to discover network connectivity problems.

Your security software is just announcing "Hey, this certificate is bad", a fact that the browser already was determining on its own, and to which it responds by not connecting to the server in question. The security software provides a redundant warning -- the browser will not use connections with expired or invalid certificates.

The subdomain names are random strings of characters with no particular meaning.

The relevant team has been notified about the certificate expiration and will correct the issue.

Thanks Eric Lawrence (ericlaw)!

This is what GPT-4 has on the issue, as of mid 11/15/2023:

The mysterious connection attempts to deff.nelreports.net and bzib.nelreports.net by Microsoft Edge that have been flagged by Bitdefender involve a few intriguing elements:

1. Nature of the Domains: These domains are associated with Microsoft Network Error Logging, which sends requests to check the status of network connections from users' browsers. When the browser sends this information back, Bitdefender checks the certificate status and halts the transmission if the certificate is expired or invalid​​​​.
2. Microsoft's Ownership and Certificate Expiry: Microsoft owns these domains. The SSL certificates for these domains recently expired. Despite the certificate expiry, there is no indication of malware or harm to devices from these connections. The alert from Bitdefender is triggered by its Online Threat Prevention module, which activates whenever a website without an SSL certificate is accessed, or when a secure website has an invalid security certificate, as in this case​​.
3. Response and Resolutions: Discussions on Microsoft forums indicate that the issue has been widely reported. The domain extensionwebstorebase.edgesv.net is obsolete, leading Microsoft to allow its certificate to expire. However, Edge, for unknown reasons, continues to call to this domain in relation to certain extensions. The Edge Team is reportedly working on an update to resolve this issue, although there is no estimated time of arrival for this update​​.

While this information sheds light on the nature of the domains and the reason behind the expired certificates, a definitive statement from Microsoft regarding the resolution of this issue or a timeline for the same was not found in the available sources. It's possible that the situation is still being addressed, and users might have to wait for an official update from Microsoft for a complete resolution.