Strange suspicious connection blocked

So today, I was just watching Youtube on google chrome when I suddenly got a suspicious connection blocked notification from bitdefender. It said that msedge[.]exe tried to cdn[.]statically[.]io. This is very strange because I never even had edge open. I did a full system scan with bitdefender and it didn't find anything suspicious. I also used process explorer and autoruns and saw no suspicious processes. Does anyone know what is going on? Am I safe?

Find more posts tagged with

Comments

Gjoksi

Hello.

The same thing happened to me few minutes ago, while watching a YouTube video on Chrome.

This is the notification i got:

Just wondering, do you have uBlock Origin installed on Chrome, Edge and/or Firefox?

I use Chrome with uBlock Origin Lite installed.

And i guess the issue is related with one of the filter lists that uBlock Origin uses to block ads, trackers, etc.

Regards.

Ryan0615

Hello, I have ublock origin lite installed on chrome and I have ublock origin on microsoft edge. Did your bitdefender warning say that edge tried to connect to something or chrome? For me, it was edge which was strange because I never use microsoft edge. Chrome is my main browser so I'm not sure why microsoft edge was trying to connect to something. Also, why does your bitdefender look slightly different from mine? Just curious. But yeah, this activity is quite strange.

Gjoksi

Hello again.

I took a screenshot of the notification in my Bitdefender Central account, not my Bitdefender program, that's why there's a difference between your and my screenshot.

My Bitdefender program said that CHROME tried to connect to that page.

My final guess is that one of the filter lists that uBlock Origin uses, tried to perform an update, but the connection was blocked due to a revoked certificate of the filter's website.

Anyway, you don't need to worry, you are safe, no need to panic, it's just a certificate issue.

You could check out this article:

https://www.bitdefender.com/consumer/support/answer/2471/

Regards.

Ryan0615

Hi again. So I did some research and cdn[.]statically[.]io is actually a CDN that is used by Ublock Origin (not too sure about the lite version). I think you're right about the filter update thing. I believe it could be that ublock orgin tried updating itself and had to access cdn[.]statically[.]io in order to complete it. I don't think I need to disable the suspicious connection blocked notifications as I only got it once. I'm not sure why bitdefender blocks it but it seems to be a false positive as cdn[.]statically[.]io is a legitimate free CDN. Thanks!

Ryan0615

Hello, I know that it's been some time since this was posted but do you think that I should submit this as a false positive to bitdefender? I copy and pasted the link into virustotal and it said that it was safe.