New insanity: Adsense acusing me of malware found on a different site

Adsense wants me to fix malware but the domain is not mine!

[SweetPotato]

So what happened:
I go to adsense > problems and get a MUST FIX for malware.
Problem is, the site is not mine.

Rarely I get an alert like twice a year that some new domain is using my adsense code. I can click "not mine" and it goes away.

But this is different. No alert but a straight up must fix policy violation.

The domain is like so:
mydomain.malware-filled-crap.com

So because these guys created a subdomain that matches my domain Google can't tell the difference?

How dumb can they be?
I don't know what to do with this.

[CommandDork]

I get these as a false positive. Adsense support said just wait for it to go away.

You cant even request a review for this violation - but, for me, I think its one of their own ads in their own network triggering the malware download on my site for some users.