209.68.47.132

[mogmem]

Greetings,

Ref. 209.68.47.132. Being blocked by Malwarebytes as Riskware.

I am site admin for the above IP, domain www.steema.com. One of our customers, a customer of Malwarebytes, has reported that Malwarebytes is flagging 209.68.47.132 as being "Riskware". I have downloaded your sofwtare and tried with the same result. I see no indication from the log what element at our website may be causing the problem. We are a Software component company with more than 20 years of 'active' for this domain.

log:

===========

-Log Details-
Protection Event Date: 8/29/21
Protection Event Time: 12:25 PM
Log File: 1c447a2e-08ab-11ec-9656-001e4ff152b5.json

-Software Information-
Version: 4.4.5.130
Components Version: 1.0.1434
Update Package Version: 1.0.44459
License: Premium

-System Information-
OS: Windows 10 (Build 19043.1165)
CPU: x64
File System: NTFS
User: System

-Blocked Website Details-
Malicious Website: 1, C:\Users\xxxxxx\AppData\Local\Programs\Opera\78.0.4093.147\opera.exe, Blocked, -1, -1, 0.0.0, ,

-Website Data-
Category: RiskWare
Domain: steema.com
IP Address: 209.68.47.132
Port: 443
Type: Outbound
File: C:\Users\xxxxxx\AppData\Local\Programs\Opera\78.0.4093.147\opera.exe

(end)

===========

Please help us to resolve the problem by indicating where you find an issue or please remove us from "RiskWare" listing. We've checked with other tools and they don't flag our web, neither does Google (https://transparencyreport.google.com/safe-browsing/search).

With thanks,

Marc

[Dashke]

Hi, mogmem,

Can you please remove this file first -

http://steema.com/uploads/images/files/69150388029.pdf

?

[mogmem]

Hello Stefan,

Thanks for the detail. We've removed the file and will check/block processes for other files at that location.

Regards,

Marc