A few weeks ago as we were analyzing the loading of our client website, we noticed that it was connecting to a domain called “bam.nr-data.net”. We didn't know what this meant, and feared that the website was infected with malware. Off the bat, we figured that the website was connecting with this domain for malicious reasons.
Upon further research, you can also find this domain in waterfall charts, and the headers of web pages.
After doing some research, we were able to identify what bam.nr-data.net is. The good news is that you shouldn't be worried.
The Bam.nr-data.net Is part of the New Relic monitoring system. From the URL, you can figure out why your website is connecting to it.
BAM= Browser application monitoring (agent)
NR= New Relic
Data is transmitted from your website to New Relic via this domain.
New Relic Is a very powerful monitoring platform for your server and website. It allows you to easily diagnose performance issues by collecting diverse data from your website loading.
New Relic comes with several enterprise level hosts such as Cloudways and Pantheon.
While the depth of the data depends on the New Relic Plan that you are using, this tool can Monitor everything from page speed loading times, to user geography, to how long the visitor actually spends on your page.
For example, all of our websites are hosted on Cloudways which includes complimentary New Relic monitoring.
This is part of the standard process of collecting the data from your website and offloading it to the New Relic servers.
Once the page loads, New Relic downloads yet another script that processes the data and sends it back to new relic via the bam.nr-data.net domain. This is why you may see a notice that says “connecting to bam.nr-data.net” when loading your page. It is simply a part of the standard data collection process for this tool.
If you would like to learn more about this domain and how it actually works, take a look at this article here: https://discuss.newrelic.com/t/understanding-bam-nr-data-net-data-transmission-its-endpoints/58535
You may have seen reports online (or experienced it yourself) stating that bam.nr-data.net is malicious.
You may be asking yourself, “Is bam.nr-data.net malware?” -- and, if you think back to the beginning of this article, that's exactly the question that we had.
For example, this is happened in multiple cases with our Malwarebytes virus monitoring system, as well as built-in browser protection systems.
The short answer is that "no it is not malware".
The long answer is that it may be identified as malware because it collects information from browser visitors. However, this information cannot be personally identifiable, and as long as you disclose this in your website policies, you're good to go.
Every once in awhile the bam.nr-data.net domain gets blacklisted on some security service. Typically, all you need to do is report this to the New rRlic team, and they will work with the company that has blacklisted their domain to get it off that list.
For further reading on why this domain may be falsely identified as malware, read this article here: https://discuss.newrelic.com/t/why-is-bam-nr-data-net-blacklisted-as-a-threat/85802/3
We hope that this article helped you understand what the bam.nr-data.net domain is, and what it's doing on your website. Sometimes, this software is installed automatically when purchasing web hosting, so you may not even be aware that you can access the advanced features that New Relic has to offer. the good news is that no, this domain is not malware and it's actually helping you make your website better through data.
As always, if you have any questions or comments leave them in the section below.