ocsp.usertrust.com - who is this?

Discussion in 'ESET Smart Security' started by BGI_YYZ, Nov 28, 2011.

Thread Status:
Not open for further replies.
  1. BGI_YYZ

    BGI_YYZ Registered Member

    Joined:
    Nov 28, 2011
    Posts:
    6
    Location:
    Canada
    For the first time ever upon starting up Windows 7, explorer.exe is attempting to communicate with ocsp.usertrust.com (199.66.201.169). A bit of digging reveals that this address seems to be registered to Comodo - however I don't use the Comodo firewall, but rather Eset's.

    Going to the IP address in a browser triggers a file download which is worrisome. Does anyone have any experience with what this might be? In the meantime, I'm going to temporarily deny it.

    Thanks!
     
    BGI_YYZ, Nov 28, 2011
    #1
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,963
    Location:
    Somethingshire
    Cudni, Nov 28, 2011
    #2
  3. BGI_YYZ

    BGI_YYZ Registered Member

    Joined:
    Nov 28, 2011
    Posts:
    6
    Location:
    Canada
    Perhaps - I did temporarily block it and it seems to have had no ill effects. The thing is that I wasn't firing up a browser, just logging into Windows. Though I guess Explorer and IE share a lot of behind the scenes stuff.

    I'll keep investigating, but thanks for the suggestion.
     
    BGI_YYZ, Nov 28, 2011
    #3
  4. m0unds

    m0unds Guest

    OCSP = open certificate status protocol. it's probing revocation status like cudni said.
     
    m0unds, Nov 28, 2011
    #4
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...