Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Why is firefox trying to connect to vr46.dxnt.net ?

  • 5 replies
  • 1 has this problem
  • 4 views
  • Last reply by FredMcD

more options

Since October 22nd, my antivirus (Bitdefender) blocked several attemps from Firefox.exe to connect to vr46.dxnet.net.

Could somebody explain why Firefox is attempting to connect to that address ?

The dxnet.net domain seems to be registered with godaddy and according to the details in the whois database actually belong to godaddy itself ?

Registrant Name: Registration Private Registrant Organization: Domains By Proxy, LLC Registrant Street: DomainsByProxy.com Registrant Street: 2155 E Warner Rd Registrant City: Tempe Registrant State/Province: Arizona Registrant Postal Code: 85284 Registrant Country: US Registrant Phone: +1.4806242599 Registrant Phone Ext: Registrant Fax: +1.4806242598 Registrant Fax Ext: Registrant Email: dxnt.net@domainsbyproxy.com

Could somebody shed some light as to what is that address used for by Firefox ?

Version of Firefox: 93.0 (Windows)

Thank you

Since October 22nd, my antivirus (Bitdefender) blocked several attemps from Firefox.exe to connect to vr46.dxnet.net. Could somebody explain why Firefox is attempting to connect to that address ? The dxnet.net domain seems to be registered with godaddy and according to the details in the whois database actually belong to godaddy itself ? Registrant Name: Registration Private Registrant Organization: Domains By Proxy, LLC Registrant Street: DomainsByProxy.com Registrant Street: 2155 E Warner Rd Registrant City: Tempe Registrant State/Province: Arizona Registrant Postal Code: 85284 Registrant Country: US Registrant Phone: +1.4806242599 Registrant Phone Ext: Registrant Fax: +1.4806242598 Registrant Fax Ext: Registrant Email: dxnt.net@domainsbyproxy.com Could somebody shed some light as to what is that address used for by Firefox ? Version of Firefox: 93.0 (Windows) Thank you
Attached screenshots

All Replies (5)

more options

Hmm, haven't heard of it. Domains by Proxy is a service owned by GoDaddy to register customer domains anonymously. So far, we don't have any hints about who the true owner is or where they are in the world.

A "dig" lookup indicates that v46.dxnt.com is an alias for HDRedirect-LB7-5a03e1c2772e1c9c.elb.us-east-1.amazonaws.com which also doesn't sound familiar. Apparently a lot of domains are also aliases for this hostname: https://securitytrails.com/list/cname/hdredirect-lb7-5a03e1c2772e1c9c.elb.us-east-1.amazonaws.com

Let's look at it a different way:

Does the alert appear at browser startup, or while browsing? Visiting any particular sites, or randomly?

Have you installed any new add-ons in the past week?

more options

Start Firefox using Troubleshoot(Safe) Mode {web link}

A small dialog should appear. Click Start In Troubleshoot(Safe) Mode (not Refresh). Is the problem still there?

more options

Thx for your replies.

I do not have any Extensions or Plugins installed other than what comes by default with Firefox installation (it's actually a fairly fresh install, I got this new computer a few weeks ago and did a fresh Windows 11 install.

The only plugins I have in firefox are:

- OpenH264 Video Codec provided by Cisco Systems, Inc.
- Widevine Content Decryption Module provided by Google Inc.

And I believe they came with the Firefox install as I did not install them myself.

I will try to run in Troubleshoot/Safe mode, but so far in 2 weeks, the notification in my antivirus only appeared 3 times: October 22nd, October 24th and today October 29th. So it's not like it's frequent and I have no idea what I have to do to reproduce it.

The alert appears randomly I would say. I did not notice it appearing while I started the browser or even when was actively browsing. The last time I saw it appear, I had firefox open, but I was not actively using it (the windows was in the background and I was reading my emails in Thunderbird - I did not click or open any links in my emails if that's the next question you were about to ask :) ).

more options

Hmm, maybe it is something triggered by an ad in a page. Most commercial websites have a lot of ads...

more options

Go to the Mozilla Add-ons Web Page {web Link} (There’s a lot of good stuff here) and search for a good ad blocker.