What is bzib.nelreports.net and deff.nelreports.net in relation to Microsoft Edge?

Anonymous
2023-11-11T06:49:29+00:00

I am a Microsoft Edge user and I have recently noticed that my browser is attempting to connect to bzib.nelreports.net and deff.nelreports.net. My security software, Bitdefender, has flagged these connection attempts due to an expired certificate.

I would like to understand why these connections are being made and whether this is expected behavior for Microsoft Edge. If it is, could you please provide some context as to what bzib.nelreports.net and deff.nelreports.net is used for? If it’s not expected behavior, could anyone advise on the steps I should take to address this issue?

Microsoft Edge | Other | Windows 10

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments
Answer accepted by question author
Anonymous
2023-11-15T14:00:28+00:00

Note: This issue was fixed on 15 Nov 2023 by updating the site's certificates.

Explanation:

Several certificates used on subdomains of this domain expired last week. Certificate expiration has no impact on security or the end user. Basically, the browser will not be able to submit network error logging reports until the certificate is fixed. Network error logging is an HTML5 feature that helps site owners discover network connectivity issues.

Your security software simply announces "Hey, this certificate is bad", a fact that the browser already determined for itself and responds to by not connecting to the server in question.

Security software provides a redundant warning; the browser will not use connections with expired or invalid certificates.

Subdomain names are random strings of characters with no particular meaning.

The appropriate team has been informed of the certificate expiration and corrected the issue.

Was this answer helpful?

20+ people found this answer helpful.
0 comments No comments
Answer accepted by question author
Anonymous
2023-11-16T18:25:14+00:00

This issue was fixed on 11/16 by updating the certificates.

Was this answer helpful?

10+ people found this answer helpful.
0 comments No comments

108 additional answers

Sort by: Most helpful
  1. Anonymous
    2023-11-11T18:46:07+00:00

    Hello,

    You're absolutely right, and Bitdefender is doing its job in alerting us to potentially unsecured connections. It seems like Microsoft might have taken a siesta when they should have been reviewing those certificates. 🤠

    Thanks for the heads-u

    p.

    Was this answer helpful?

    30+ people found this answer helpful.
    0 comments No comments
  2. Anonymous
    2023-11-13T15:00:24+00:00

    Hello James:

    Regarding antivirus activity blocking bzib.nelreports.net;

    The domain bzib.nelreports.net is associated with an Azure app, domain and server, all owned by Microsoft. According to Bing Chat, "It seems that some users have reported similar issues where their antivirus software, such as BitDefender, has blocked connections to this domain due to an untrusted or expired certificate.

    Microsoft has reportedly acknowledged this issue and stated that it’s related to a defunct server, and the certificate for it won’t be renewed."

    Not only has the certificate recently expired, on Nov 10 I believe, but the domain and app (which seems to be a behind your back ad redirect service) is being reported as a potential malware/virus source by VirusTotal and other anti-malware services & AV apps, mostly because of the expired certificate. What a good way to cause preventable and needless worry for your users Microsoft!

    Microsoft is aware of this issue. Apparently, MS doesn't have the corporate energy or minimal motivation needed to find and unplug what's probably some old Pentium server stuffed in a utility closet somewhere that's running an outdated Azure app. But noooo, it's easier and cheaper for MS to knowingly cause concern and inconvenience for thousands of their users. /s

    Resolving this is solely Microsoft's responsibility and Bitdefender will keep blocking the address when using Edge, unless you grant an exception for the address. I would allow Bitdefender, Kaspersky & other AVs to continue blocking the addresses until Microsoft takes the simple steps needed to fix this.

    Was this answer helpful?

    30+ people found this answer helpful.
    0 comments No comments
  3. Anonymous
    2023-11-11T15:49:17+00:00

    bonjour, depuis ce matin j’ai aussi le même problème ! j'ai egalement celui ci :

    Bzib.nelreports.net

    même antivirus aussi ! bon alors je ne vois pas en quoi l’application News a quelque chose à voir avec Edge !??

    Mais j’aimerai bien avoir une réponse à ces message

    cordialement...

    edit1:

    apres avoir creusé voila ce que j'ai pu trouver :

    La résolution DNS de bzib.nelreports.net pointe vers 23.195.105.139 avec un emplacement à Seattle, Washington, États-Unis. L’enregistrement du domaine parent appartient à Microsoft Corporation, enregistré par l’intermédiaire de CSC Corporate Domains, Inc. Le serveur répond avec un certificat SSL issud par Microsoft Corporation à Microsoft Corporation sous le nom commun *.nelreports.net.

    *<removed by Moderator - COC violation> <Bing translation added by Moderator>*Hello, since this morning I also have the same problem! I also have this one:

    Bzib.nelreports.net

    same antivirus too! so I don't see how the News app has anything to do with Edge??

    But I'd love to have a reply to these messages

    Kind regards...

    edit1:

    After digging, here's what I was able to find:

    The DNS resolution of bzib.nelreports.net points to 23.195.105.139 with a location in Seattle, Washington, United States. The parent domain registration is owned by Microsoft Corporation, registered through CSC Corporate Domains, Inc. The server responds with an issud SSL certificate by Microsoft Corporation to Microsoft Corporation under the common name *.nelreports.net.

    Was this answer helpful?

    30+ people found this answer helpful.
    0 comments No comments