[lacker]

This does seem like exactly the sort of thing that would trigger false positives. The product is fundamentally a list of a bunch of text found in malware, so any sort of malware detector that's based on the textual content seems likely to give a false positive.

[hifromwork]

*in phishing, not in malware. Adguard domains are unlikely to be found in malware.