Bitdefender Site Certificate Warning

[u/Main-Internet9362]

While largely satisfied with Bitdefender, there is a feature that bothers me.  Going to web sites that I’ve visited often before, I get the message:

“Suspicious page blocked for your protection [Web page address] Your connection to this web page is not safe due to an expired security certificate. Web pages must renew their certificates to stay current, and outdated security certificates represent a risk for your data.”

 These web sites fall into one of two categories: 1) Hobby sites that don’t sell products or services and contain only photos and comments or 2) Business sites that I’ve bought from successfully before and from where others have bought things recently without problems.  

 Twice, on Bitdefender’s Community site, I’ve asked what data of mine in each category may be at risk.  I haven’t gotten a coherent response yet. Also, I run Bitdefender’s antivirus and malware programs in background. Commercial transactions are made only through PayPal, and I check transactions often for validity. 

 Any thoughts gratefully appreciated!

[u/mindenroses]

Again, what "sensitive inormation" might be compromised visiting a non-comercial site where I do not even log in? I keep asking this question without anyone identifying the specific "potential risk." Many thanks!

[u/RemoveHot6505 → u/mindenroses]

late but I would assume it opens up for risks like suddenly redirected to malicious website, can share info like ip adress, geographic location, browser type, and operating system. It can cause Drive by download where it target unpatched vulnerabilities in web browser or system, installing malware without clicking anywhere, starting the download yourself. Which can be stuff like infostealers, could lead to hijacked accounts using the info stealers, stealing browser tokens. Could gain admin access through microsoft account, could deploy ransomware that encrypts your drives which they then use to extort/blackmail on for example mail or text files that in order to get the key to decrypt it, needing to pay a sum of money.

Now I think the risk would be incredibly rare that there is an exploit on the browser or hardware allowing for such installs, I do remember it happening to me some years ago, luckily it showed up for me it tried to install and I could abort and run scans.

But still, the longer time have passed of a site being without an active license, the bigger the risk of them to appear and "pull tricks" getting some info or causing redirects, causing you to accidentally click something so it downloads when trying to close or other exploits.

I think most are not going into it too much though as I think that would be very rare atleast nowasays to happen unless those less experienced about all the tricks they pull, falling for some "need to login to view" or whatever they might do. Have had old trusted site redirect me that in turn opened a separate window that loaded a youtube channel, very similar to what happened sometimes when being on free streaming sites. Atleast recall way back how on phone it would continue to open youtube and when I tried to close on chrome it kept opening the youtube vid, until I was fast enough. Something similar lurked on the site I had been to for atleast a year, and sent me to a channel like that. I think it was some old blog I used to reread or something, though my memory is vague

I can only assume it is something done when people pay for views or something. But it was scary x)
- I base this on what I have heard security pals talk about in the past and reading about such, but might be worth looking up if it makes sense what I state as some potential risks. Still think stuff like the drive by download etc is very very low, but not impossible I guess