ocsp.usertrust.com - who is this?

Discussion in 'ESET Smart Security' started by BGI_YYZ, Nov 28, 2011.

Thread Status:
Not open for further replies.
  1. BGI_YYZ

    BGI_YYZ Registered Member

    Joined:
    Nov 28, 2011
    Posts:
    6
    Location:
    Canada
    For the first time ever upon starting up Windows 7, explorer.exe is attempting to communicate with ocsp.usertrust.com (199.66.201.169). A bit of digging reveals that this address seems to be registered to Comodo - however I don't use the Comodo firewall, but rather Eset's.

    Going to the IP address in a browser triggers a file download which is worrisome. Does anyone have any experience with what this might be? In the meantime, I'm going to temporarily deny it.

    Thanks!
     
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
  3. BGI_YYZ

    BGI_YYZ Registered Member

    Joined:
    Nov 28, 2011
    Posts:
    6
    Location:
    Canada
    Perhaps - I did temporarily block it and it seems to have had no ill effects. The thing is that I wasn't firing up a browser, just logging into Windows. Though I guess Explorer and IE share a lot of behind the scenes stuff.

    I'll keep investigating, but thanks for the suggestion.
     
  4. m0unds

    m0unds Guest

    OCSP = open certificate status protocol. it's probing revocation status like cudni said.
     
Thread Status:
Not open for further replies.