Something in the system is blocking the https address: what exactly, how to solve it?

Question

Microsoft

win 10 x64 home.
err_connection_reset to https://nnm-club.ws (that is, the connection is dropped programmatically)
to nnm-club.ws - everything is fine. browser - any. absolutely. it's not about him. no, not a provider, because booting from xp / * nix does not cause problems. The problem is somewhere in the system itself. all other https work fine. torrents from another tracker are fine. magnet links with nnm also work and download quite well, because the torrent client itself uses nnm-club.info. if you give the torrent client a .torrent with hnm - again, everything is fine, which is logical
the story is this: initially everything was fine, I successfully pulled the software, installed it, win defender swore at crack in the process, added it to exceptions, the system went into reboot after auto-update, after reboot - the domain died in all browsers. in the process of install-cursing-add-reboots I didn’t try to download anything, including at what EXACT moment the problem appeared - I don’t know.
hosts - clean.
there is no mention of nnm in any rule of the native Windows firewall (and it is turned off. was and will be). in windows guard everything is purely on the topic of nnm (and there is nowhere there, only exceptions / deleted / quarantine can be seen. However, everything is also demolished from there, because all the positives are false, cracks and the Windows activator), now it is generally demolished (turned off completely. service disabled by powershell) - not him.
the registry on the nnm search request is also clean
certificates - too.
where it was possible to walk ctrl+f through the Windows logs - walked. I also silently
went through CureIt just in case - it is silent, which is not surprising, there has never been anything on this PC except for a couple of advertising vysers; I
also have little idea how a reboot after a Windows update could turn on one (!) https (!) Domain, even leaving the http domain intact. t.ch, too, the version flies by.
[08/18/2015 02:58:36] Nikita: yes, and this is generally strange, if only because
[08/18/2015 02:58:43] Nikita: if only because... because...
[08/18/2015 2:58 :51] Nikita: the file that Windows cursed was downloading
[08/18/2015 2:58:54 AM] Nikita: via bittorrent
[08/18/2015 2:59:03 AM] Nikita: the .torrent file itself cannot pose a threat -> why would Windows block this domain at all?
so I doubt that the domain died because Windows cursed
[08/18/2015 2:59:46 AM] Nikita: there is no such Malware that would kill ONE nnm domain, lol.
[08/18/2015 02:59:58] Nikita: I would have thought something was wrong, block and rutracker - maybe what kind of malware blocks all torrents except allowed
[08/18/2015 03:00:01] Nikita: but no.
There are no extra processes in the system, I also checked it almost immediately.
all this is very strange, I say hello to redmond and the tenth windows. after all, it's not bittorrent.exe that was detected as a malware, and I sincerely don't understand why the system should block a domain at all.
below - a discussion with a friend, their thoughts on the issue.

[08/19/2015 0:24:10] Nikita: it was still win10 that was blocking something
[08/19/2015 0:24:21] Nikita: and the saddest thing is that I still did not understand where exactly. although it was clear that it was Windows
[08/19/2015 0:24:28] Nikita: when I rebooted in xp and everything was fine
[08/19/2015 0:24:42] Nikita: destroy windows 10 spying with softinka went through - the problem left
[08/19/2015 0:24:47 AM] Nikita: interesting.
[08/19/2015 0:25:06] Nikita: I guess that windows defender, which I also demolished, but sounds crazy
too win defender and other garbage a la onedrive, because I don't need it
[08/19/2015 0:25:51 AM] Nikita: I went through everything I could - the problem was solved. amusing.
[08/19/2015 1:50:20] Nikita: not the fact that the defender of Windows
[08/19/2015 1:50:27] Nikita: but I even shoveled the registry
[08/19/2015 1:50:58] Nikita: not to mention hosts, certificates, firewall rules (ofk, through administration, etc, and not just in this window for housewives) - nothing anywhere.
[08/19/2015 1:51:19 AM] Nikita: I have no other suspicions either. some smartscreen? seems to have been turned off. etc etc etc
[08/19/2015 1:51:35 AM] Nikita: but it's also not clear how win defender could block this particular domain
[08/19/2015 1:52:38 AM] Nikita: ofk, maby, I just didn't find any such such a list
[08/19/2015 1:52:45 AM] Nikita: but I rummaged through everything I could, as for me.
[08/19/2015 1:52:56 AM] Nikita: it would be funny if there is still some kind of such button in the most visible place
[08/19/2015 1:52:59 AM] Nikita: but *** knows, I kind of not a moron.
[08/19/2015 1:53:10 AM] Nikita: I dug everything except the defender wherever I could
[08/19/2015 1:53:43 AM] Nikita: and in the defender, you can’t look at anything except the history of the remote/quarantine/exceptions. and there were no references beyond this PC and a couple of files from the crack
[08/19/2015 1:53:58 AM] Nikita: and yes, there were no notifications that some address was blocked there. generally. nowhere
[08/19/2015 1:55:28 AM] Nikita: the most interesting thing is that there were no notifications
[08/19/2015 1:55:33 AM] Nikita: it was Windows that blocked it.
[08/19/2015 1:55:44 AM] Nikita: destroy windows 10 spying fixed. went through this software and rebooted, then tried it - everything works
[08/19/2015 1:58:03] Nikita: in the dw10spying utilities right now I’ll say that
[08/19/2015 02:00:22] Nikita: cleaning / viewing hosts, open the privacy settings window most visible, on / on uac / win update, deleting metro applications and "explorer opens" this computer "by default", otherwise w10 defaults to opening the user's home folder. downloads, music, etc.
[08/19/2015 2:00:27 AM] Nikita: i.e. there is nothing in the utilities.
[08/19/2015 02:00:58] Nikita: what could at least somehow correct the situation with the block
[08/19/2015 02:01:05] Nikita: it means something from what is in the box above
[19.08. 2015 2:01:14] Nikita: he adds servers to hosts
[08/19/2015 2:01:45 AM] Nikita: I don't think that something cloudy could block a specific link.
[08/19/2015 2:02:53 AM] Nikita: tasks in the scheduler? doesn't look like it either. photo viewer? It doesn’t look like it either, even though he sent some kind of information to ms. here it is new in win10, but the old one is not cut out either, the utility just demolishes the new one and assigns the old one as the default application, which doesn’t fucking send
[08/19/2015 2:03:47 AM] Nikita: keylogger? bullshit, he can't block the domain in any way. xbox, solitaire, onedriver, alarm, mail, calendar, people, phone, builder 3d, media (news, weather, sports etc.) are also garbage. it can't block
[08/19/2015 2:04:57 AM] Nikita: as a result, the defendercon3000 remains, which I still don't understand why he needs to block https://nnm-club.ws, because I already told you, only the browser accesses it and downloads a harmless torrent file. the torrent accesses Nnm-club.info, at least from magnet links, not .ws, I can check with .torrent where
[08/19/2015 2:04:59 AM] Nikita: by the way, I'll check right now.
[08/19/2015 2:05:51 AM] Nikita: all sorts of "Internet searches" that send statistics cannot block either. Ultimately, I don't understand anything. presumably this is still a defender, but damn it, I turned it off temporarily and nothing changed. apparently some kind of service. maby him, maby no
[08/19/2015 02:05:55 AM] Nikita: this will remain a mystery to me
[08/19/2015 02:05:57 AM] Nikita: such things.
[08/19/2015 2:16:06 AM] Nikita: no, with .torrent Also refers to bt.nnm-club.info
[08/19/2015 2:16:15 AM] Nikita: I don’t understand anything at all like then.
[08/19/2015 2:16:36 AM] Nikita: did system3000 track where the .torrent was downloaded from, which contained the "virus"?
[08/19/2015 2:16:49 AM] Nikita: or is it just a bug on the restart after the update. or some other. uh, I don't understand anything.
[08/19/2015 02:16:52] Nikita: but it's interesting fucked up
[08/20/2015 22:32:59] Nikita: but the problem has reappeared. why, I don't know. was not there last night. showed up tonight. Idk
[08/20/2015 10:33:13 PM] Nikita: went through the same software, dw10spying, I mean, - useles.
[08/20/2015 10:33:18 PM] Nikita: then I don’t understand anything at all.
[08/20/2015 11:54:39 ​​PM] Andrey Volodin: To the same domain lol?
[08/20/2015 11:55:26 PM] Nikita: yes
[08/20/2015 11:55:27 PM] Nikita: on the same

according to the results, I repeat that something in the system is blocking https://nnm-club.ws
has already broken my head, but I still don’t understand what it could be. help gentlemen. dozen bug? it doesn’t look like it, because initially everything worked, and after the destroy win10 spying pass, too. and a day later it broke again out of nowhere.
I’ll add right away that the connection is pppoe directly. there are no routers. and it doesn’t matter, given that when you reboot to another OS, everything becomes fine.
third-party firewalls / antiviruses and anything like that are absent. however, the system ones are also cut out.
And yes, of course I googled. Googled a lot. it just makes zero sense. stackoverflow also looked
// I apologize in advance that the question is written not too literary. before that, he wrote in support of the resource itself and pulled the text from there, so as not to rewrite, excluding the entire mat.
/// the comment was deleted - the domain is resolved, of course, only https is blocked

Answer 1

https://nnm-club.ws/
doesn't open for me either. I myself am a KazTransTelecom provider from Kazakhstan from Shymkent. Writes on the Okay website. I go there for the first time. OS Centos 6.
Try to ping and trace to the domain. Maybe something breaks along the way. try to change dns

Answer 2

netstat -a -b -n > C:\temp\netstat.log

Answer 3

netshhttp/?