Does anyone know why s.phmryp.com is showing up on the malware list adguard-malware-shavar? It appears to be used by pandora.com

[aaronccooke]

I was trying to find the source of the malware reports seen below and after running Wireshark I was able to narrow is down to the Pandora window I have up in Firefox.

Here is the Wireshark results...Is this really a malware site (and Pandora is infected) or is this a false positive? I'm fine with blocking it but I don't want the false positives for malware on my dashboard.

[ghost]

Please report possible false positives using the instruction here.

[aaronccooke]

Perfect, thanks.

…

On Mon, May 22, 2023 at 1:16 AM Justin ***@***.***> wrote: Please report possible false positives using the instruction here <https://adguard.com/kb/general/browsing-security/#false-positive-responses> . — Reply to this email directly, view it on GitHub <#5824 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AIUXXNGWQE3GGJYRAAOHX4DXHMAC3ANCNFSM6AAAAAAYCXY7HQ> . You are receiving this because you authored the thread.Message ID: ***@***.*** com>

[hjmuller]

I noticed this URL also coming up as "malware" in my instance of Adguard. I reported it via email to the Adguard team. I haven't received a response yet, and the URL continues to be flagged as "malware."