shop.rewe-static.de

[Leonsbane]

Hello,

i noticed that the website, or rather the domain hosting static content,

Quote

hxxp://shop.rewe-static.de

has been classified as EMD since 08-02-2019 in the hpHosts list.

I was wondering why this is the case. I could not find any news regarding this (I thought, if this site is distributing malware it would be in the news, since it is a relatively big supermarket chain in Germany), and no request for classifying this as EMD in this forum.

Is it possible to know the reason / reevaluate the case?

Thanks in advance!

[Dashke]

Hi Leonshbane,

The block has been put because of this file -

shop.rewe-static.de/rewe-de/assets/890ebb9c/webcomponents/PdfButton.component

 

[Leonsbane]

2 hours ago, Dashke said:

Hi Leonshbane,

The block has been put because of this file -

shop.rewe-static.de/rewe-de/assets/890ebb9c/webcomponents/PdfButton.component

 

Hi Dashke,

thank you for your reply.

I was able to find a threat analysis of the file you mentioned. Listing it as suspicious.

This answers my question.

[Dashke]

Glad to hear that!

[mr_quok]

Hey Dashke and Leonsbane!

Would it be possible to share the information about the reasons why this file has been listed as malicious ? 

Where can i find the threat analysis you mentioned ?

Thanks in advance!