nochmals besten Dank für die Info!
bei dem 2.Link erhielt ich jetzt die Info:
"Severity:	Potentially Suspicious
Reason:	Detected procedure that is commonly used in suspicious 
activity.
Details:	Too low entropy detected in string [['{"pubcode":"", "referrer":"", 
"pref":"", "site":"", "url":"", "custom":"", "xtz":, "uuid":"", "slmci']] of length 104 
which may point to obfuscation or shellcode."
hmmmh?!