Android Pay api

[Jayip54]

I am seeing blocks on my Armor for androidpay-users-pa.googleapis.com. has anyone else see it block the api? Is this safe? Thanks

Jay

[Christian_R · Accepted solution]

Hello Armor Community, 

Thanks for bringing this up. This was a false positive detected by our team and should be corrected. If you're still experiencing the blocks, please power cycle your router. 

Regards,

Christian 

[Mdelliott1009]

Just started seeing this as well, this morning around 01:00AM EST. Blocked 6 attempts stating malware. 3 were from my phone which I wasn't using at the time and 3 were from "Compal information streaming de" so a Chinese made streaming device based on my quick Google search on it.

Any help or ideas would be appreciated!

[PCOOP]

I'm seeing the same and coming up empty. It's only attempting to connect from one of two pixel phones in my household. I'm assuming it is related to a specific app, but would be great if someone can confirm what it is and if it is indeed malicious.

[ederosa]

I received more than 20 attempts to access "https://androidpay-users-pa.googleapis.com/"  AFTER I had been on TikTok.  The app was closed, no browsers open at the time.  The attempts were made from 2am-5am Eastern Std time.  

[DanCoutu]

I'm seeing the same messages starting overnight.

It is unclear whether this is a valid alert for a real problem or an error in the malware detection logic being used by Netgear.

If someone from Netgear could please investigate and comment that would be appreciated.

[Jayip54]

I agree. It seems they updated something last night that triggered this. All I can find online is that it is the Google Pay api but cannot tell if something had been hijacked.

[FrankCR3]

I have the same issue since 9 p.m. last night on 3 of my Samsung phones. I have received 83 hits. Really want to figure thus thing out.

[Christian_R · Accepted solution]

Hello Armor Community, 

Thanks for bringing this up. This was a false positive detected by our team and should be corrected. If you're still experiencing the blocks, please power cycle your router. 

Regards,

Christian 

[Jayip54]

Thanks

[ering210]

Interestingly I dont use Armor on my Orbibut I just installed a Bitdefender BOX and loaded BitDefender on my wife's phone. It too alerted to this API last night. Are you 100% sure it is a false positive?