Suspicious connection blocked notification for msedge.exe to blogs.plitch.com.

Sometimes when I launch game on steam, (in my case oblivion remaster) I get notification on bitdefendeer that "Suspicious connection blocked"

"msedge.exe attempted to establish a connection relying on an expired certificate to blogs.plitch.com."

Is that false positive or something malicious?

Find more posts tagged with

Comments

Kermit Jagger

I have the same exact situation occurring when launching Oblivion Remastered. It just began yesterday. This post is the only thing I can find when searching.

MasterBrot84

Hello,

edit: I've originally thought a vortex extention was causing it but the issue still keeps coming up

I have the same issue, exactly when launching the game. Bitdefender Central tells me it's an expired certificate but what I'd rather like to know is why it's trying to establish the connection to a random gaming website in the first place.

Would be very nice if anyone had info on this.

Alexandru_BD

Hello,

If it's not a browser extension that's redirecting to that page in the background, I suspect there's a redirect when actually launching the game, to some kind of sub-domain url used for tracking, functionality, or things like that. Sometimes, such sub-domains are using certificates with a different name than the domain used by the main website/platform and this may trigger a mismatch detection, however in this case, judging by the information displayed in the notification, it has to do with an expired certificate for that sub-domain/url.
Nothing much you can do here, because in the event the certificate is expired, the detection is legitimate and the owner of that sub-domain/url should normally renew it. I assume this should happen sooner rather than later, and detection will no longer be triggered then.

Obviously, there's no guarantee that the respective certificate will be renewed, or when it will happen, so the workaround (although not recommended) in this case would be to disable the Encrypted web scan feature which can be found under the Online Threat Prevention module in Bitdefender:

Like the description says, this feature checks the safety of encrypted web pages.

I hope this helps.

Regards

Rb5stg

I really need help please my stuck on android mode A DB TV cyber cap and I need to verify my accounts. This don’t make no sense please help me.

AryaNoct

At first I thought maybe it's some mod for Oblivion, but I just launched Elder Scrolls online, and it also comes up.

MasterBrot84

Did you by any chance participate in their 1.2 Beta for the next patch for Oblivion Remastered?

I've come across an Idea thanks to our Admin Alexandru_BD and a discussion I had on steam.

I'm not well versed on these specific topics so it could be something completely else still…

ESO runs an anti-cheat in the background right? I looked up plitch blog and apparently they are selling some form of singleplayer cheat program. (No, I have not interacted with them nor used any of their products and neither have I clicked on any ads for it) Now I know Oblivion Remastered is not actively running an anti-cheat in the background, but Zenimax states in their EULA that they allow themselfs to implement tools for detecting cheats and unfair behavior whenever they see fit.

Since both games are from Bethesda and Zenimax could it be that, maybe, the devs left some form of this tool, or perhaps parts of (and I'm sorry if I use the wrong expression here) a library extention for said tool that actively tries to look for cheats from this particular provider inside of that 1.2 Beta by accident?

It didn't happen on ANY other game or application for me and you stating that it's now happening on ESO seems kinda weird. After completely deinstalling the game, the files in the documents folder and then reinstalling the current public version, the problem was gone for me.

AryaNoct

No, I don't think I participated in 1.2 beta.

This is really weird, especially since its not just one game. Either its microsoft fault with their game assist or something with zenimax. Keep me in touch if anything.

AryaNoct

hello again, somewhat of a fix; going to settings > apps > installed apps and uninstall game assist. Though apparently game assist can reinstall it self when Microsoft edge updates.

The biggest issue here is - why does Microsoft official app tries to connect you to a hacking website with no certificate.

sthdev

I get exact same notification when launching Assassin's Creed Odyssey from Steam (through Ubisoft Connect). Started happening few days ago.

Perhaps its related to one of the decent Windows updates?

AryaNoct

Oh, so it's not just those two games.

Sadly as I said, game assist reinstalls it self, so I have to check installed apps often to delete it.

Have no idea why microsoft does it, maybe faulty ai?