Several blocked connection notifications of www.mgenyc.com

Scoop_112

So I was just on google and all of a sudden I got like 20+ notifications of this.

"chrome.exe attempted to establish a connection relying on an unmatching security certificate to www.mgenyc . com. We blocked the connection to keep your data safe since the used certificate was issued for a different web address than the targeted one."

When I looked up what the url was all I got was this reddit post. But that seems like it was for a different url? So I don't know why it was first when I searched it.

At the time I was on Nexus Mods installing mods for New Vegas, and on the video games board on 4chan.

I used https://www.sslshopper. com/ and VirusTotal to check the URL and everything seems fine. Anyone know what this could be, where it could come from? Anyone know anything, have any idea? I can't really find anything about the website. Is it a false flag, something malicious? Anyone have this problem before?

Gjoksi

Hello.
You might be a victim of adware, so do the following:

1. Start your PC in Safe Mode, by following these steps:
   https://support.microsoft.com/en-us/windows/start-your-pc-in-safe-mode-in-windows-92c27cff-db89-8644-1ce4-b3e5e56fe234
2. Open the Run command:
   https://www.makeuseof.com/windows-open-run-command-dialog-box/
   and run the below commands one by one:
   temp - delete all the folders/files in the folder
   %temp% - delete all the folders/files in the folder
   prefetch - delete all the folders/files in the folder
3. Restart your PC in General Mode, by following these steps:
   https://www.techwalla.com/articles/how-to-restart-a-computer-in-normal-mode
4. Reset/Refresh your browsers:
   Google Chrome - https://support.google.com/chrome/answer/3296214?hl=en
   Mozilla Firefox - https://support.mozilla.org/en-US/kb/refresh-firefox-reset-add-ons-and-settings
   Microsoft Edge - https://malwaretips.com/blogs/reset-microsoft-edge/
   Opera - https://browsersolution.com/reset-opera-browser
   Vivaldi - https://help.vivaldi.com/desktop/install-update/full-reset-of-vivaldi/
   Brave - https://support.brave.com/hc/en-us/articles/360017903152-How-do-I-reset-Brave-settings-to-default-
5. Run a System Scan with your Bitdefender program.
6. Restart your PC.
7. Scan (and disinfect, if needed) your PC with Bitdefender Rescue Environment:
   https://www.bitdefender.com/consumer/support/answer/29132/
8. Restart your PC.
9. If the steps provided above didn't help, do the following steps:
   Take screenshot(s) of the issue,
   create a log file on your Windows device using Bitdefender Support Tool, by following these steps:
   https://www.bitdefender.com/consumer/support/answer/1733/
   and
   create a log file on your Windows device using BDsysLog, by following these steps:
   https://www.bitdefender.com/consumer/support/answer/1922/
   Next, contact Bitdefender Consumer Support by e-mail:
   https://www.bitdefender.com/consumer/support/help/
   with short description of the issue.
   After that, you will get an automated reply by the Bitdefender Customer Care Team, with your ticket number.
   Now, in reply to that automated reply, you can send the screenshot(s) you already took and the log files you already created in the first step.
   Since you are all done, just wait for the support engineers to investigate your issue and find a solution to fix the issue.
   Remember that the screenshot(s) and the log files will help a lot to the support engineers for better and faster investigation on your issue and finding a solution.
   NOTE: If any of the log file is larger than 25MB, you can upload the log file here:
   https://upload.bitdefender.net/
   After the upload is done, you will get a notification with the file's URL and then you can share the file's URL with the Bitdefender Consumer Support.
   Regards.

Scoop_112

Hello again, I've found out the source of the URL! So looking at Bitdefender central, I saw this!

electrocity.PNG

And the day I got the warning popups, I was on https://www.nexusmods.com/newvegas/mods/37908/

Which is a mod on Nexus Mods. Going back to that webpage right now I get the same warnings. So possibly a false flag. Because I don't get it anywhere else. So I hope this helps anyone that got this same warning! Or if it isn't false, people can find out where it comes from.