Andlook.buzz ads (scam) - Free Guide

What is Andlook.buzz ads?

Andlook.buzz asks to enable push notifications by using phishing messages

Andlook.buzz is a fake website created by threat actors to scam users

One day, you may start seeing Andlook.buzz ads on your desktop computer even if you're not using your browser and regardless of which website you're visiting. While this might make you think your computer has a virus, that's usually not the case with these types of ads.

If you are noticing Andlook.buzz ads, it means that you have given this website permission to send push notifications- even if that may sound unexpected. Push notifications have an independent element (API)^[1] that runs on the system level as long as the browser is open. This allows a malicious website to trigger messages, including any type of links and misleading information, without prior warning.

If you've ever allowed push notifications on a website only to be plagued by endless ads afterward, then you're not alone. Many people don't remember agreeing with them because they were deceived by phishing techniques. The Andlook.buzz ads wouldn't appear until later if the users pressed the “Allow” button, so most of them forgot about what happened altogether. Below we explain how to get rid of these pesky pop-ups once and for all.

How fake messages help scammers reach their goals

It is clear that users would not accept push notifications from malicious websites on purpose. The criminals behind this scam are aware of that, so they devised a plan to help them reach their goals – they create fake websites like Andlook.buzz, which are designed to trick people into thinking that pressing the “Allow” button is the right thing to do.

To achieve this, they use multiple social engineering methods. For example, they might say that the video can't be played because the browser won't allow it or that they need to confirm their age or humanity before continuing.

Since most people have encountered similar requests in other contexts, they usually assume these are legitimate. Here are a few examples of message you might expect to receive after entering a push notification scam site:

• Click Allow to start downloading
• If you are 18+, click Allow
• Click Allow to confirm that you are not a robot
• Press “Allow” to watch the video
• Click “Allow” to win the prize and get it in our shop!

Andlook.buzz shows misleading messages that meant to lure users into clicking the "Allow" button

These messages are virtually identical to many others of this kind, e.g., Onesoftwareupdater.com or Yourcommonblog.com. The main foal of crooks is to mislead users into believing that pressing the “Allow” button is just a routine procedure they have already done many times.

Even if you click the “Block” button, you are likely to be redirected to the same or another website, where you would be asked to do the same thing. Accepting these would result in a larger amount of spam you would receive whenever you open your browser. Besides, these pop-ups can include links to malware-laden or phishing websites, so be careful and make sure you don't interact with them.

Watch out: adware could be causing redirects to suspicious websites

While many users are redirected to phishing websites through other sources, it's not the only way it happens. Adware, a type of PUP (potentially unwanted application), is also responsible for exposing users to various ads and redirects to questionable sites. What's even worse is that adware can be spread via freeware bundles^[2] or similar dubious methods, leaving some users completely unaware they have it running on their system.

In order to protect your device, we recommend that you scan it with powerful anti-malware software, such as Malwarebytes or SpyHunter 5Combo Cleaner. Please ensure that the app is running with the latest definitions by updating it. Once all adware and malware are removed, we advise using FortectIntego to clean browsers from cookies^[3] and other trackers, as well as fixing damage caused by the infection if such has occurred.

Remove Andlook.buzz ads

If you find push notifications to be an annoyance, you're not alone. Many people also have difficulty removing push notification spam as they fail to understand that the root of the problem lies within their own acceptance of these notifications from the site in question. The fix is simple: access your browser settings and block the related website, as follows:

Google Chrome (desktop)

1. Open the Google Chrome browser and go to Menu > Settings.
2. Scroll down and click on Advanced.
3. Locate the Privacy and security section and pick Site Settings > Notifications.
4. Look at the Allow section and look for a suspicious URL.
5. Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.

Google Chrome (Android)

1. Open Google Chrome and tap on Settings (three vertical dots).
2. Select Notifications.
3. Scroll down to the Sites section.
4. Locate the unwanted URL and toggle the button to the left (Off setting).

Mozilla Firefox

1. Open Mozilla Firefox and go to Menu > Options.
2. Click on Privacy & Security section.
3. Under Permissions, you should be able to see Notifications. Click the Settings button next to it.
4. In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
5. Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.

MS Edge (Chromium)

1. Open Microsoft Edge, and go to Settings.
2. Select Site permissions.
3. Go to Notifications on the right.
4. Under Allow, you will find the unwanted entry.
5. Click on More actions and select Block.

Safari

1. Click on Safari > Preferences…
2. Go to the Websites tab and, under General, select Notifications.
3. Select the web address in question, click the drop-down menu and select Deny.

Internet Explorer

1. Open Internet Explorer, and click on the Gear icon at the top-right of the window.
2. Select Internet options and go to the Privacy tab.
3. In the Pop-up Blocker section, click on Settings.
4. Locate the web address in question under Allowed sites and pick Remove.