Microsoft Edge is making Suspicious Connection?

Anonymous
2023-11-02T09:18:58+00:00

is Microsoft is making suspicious connection to this URL deff.nelreports.net/api/report?

Also let us know which data is being sent to this URL & When?

Windows for home | Windows 10 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments
Answer accepted by question author
Anonymous
2023-11-15T15:40:03+00:00

*.nelreports.net is a Microsoft domain. Several certificates used on the subdomains of this domain expired last week.

There is no security impact or end-user-impact of the certificate expiration -- Basically, the browser will be unable to submit Network Error Logging reports until the certificate is corrected. Network Error Logging is a HTML5 feature to allow site owners to discover network connectivity problems. https://developer.mozilla.org/en-US/docs/Web/HTTP/Network\_Error\_Logging

Your security software is just announcing "Hey, this certificate is bad", a fact that the browser already was determining on its own, and to which it responds by not connecting to the server in question. The security software provides a redundant warning -- the browser will not use connections with expired or invalid certificates.

The subdomain names are random strings of characters with no particular meaning.

The relevant team has been notified about the certificate expiration and will correct the issue.

Was this answer helpful?

8 people found this answer helpful.
0 comments

51 additional answers

Sort by: Newest
Most helpful Newest Oldest
  1. Anonymous
    2023-11-14T12:54:26+00:00

    It is not false positive! The site does not have a valid certificate, so it could be redirected to a hacker site.

    Most probably it is not redirected anywhere, only the certificate is invalid as expired, but anyhow it should not be reported as false positive, the cert must be fixed.

    NO! If "deff.nelreports.net" and/or "bzib.nelreports.net" is/are malicious, "fixing" the certificate is completely WRONG. It should be inspected and deleted if necessary. That's a job for Microsoft.

    I have to trust Bitdefender's certificate check and refusal on the ground of invalidity.

    I have never seen either "deff.nelreports.net" or "bzib.nelreports.net" on this or any of my other computers so I presume it is malicious. I cannot determine whether Bitdefender's warning messages arise from access attempts by that website to the Edge software on this computer or a call from Edge to that website. I presume the former but do not know how to prevent its future success and damage if it obtains a valid certificate.

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments
  2. Anonymous
    2023-11-14T10:43:00+00:00

    It is not false positive! The site does not have a valid certificate, so it could be redirected to a hacker site.

    Most probably it is not redirected anywhere, only the certificate is invalid as expired, but anyhow it should not be reported as false positive, the cert must be fixed.

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments
  3. Anonymous
    2023-11-13T18:13:32+00:00

    Facing same issue

    Was this answer helpful?

    0 comments
  4. Anonymous
    2023-11-13T13:20:46+00:00

    Here's Bitdefender's answer!!

    Hello,

    The reason you are getting this notification is because a Windows service is trying to access that domain.

    The domain is owned by Microsoft and it's SSL certificate has just recently expired.

    You can check this on any SSL checker website online.

    You can set an exception in the Bitdefender interface for the domain in order for Bitdefender to stop blocking it.

    For further information, please contact Microsoft.

    Thank you!

    Best regards,

    Doru O.
    Technical Support Engineer

    YouTube: https://www.youtube.com/c/Bitdefender
    Community: https://community.bitdefender.com/en/
    Support Center: https://www.bitdefender.com/consumer/support/

    Was this answer helpful?

    4 people found this answer helpful.
    0 comments