Cvgdownthe.xyz ads: what it is and how to remove it

xyz is a bogus page masquerading as a human verification step. It requests that users click the "Allow" button to confirm that they are not robots.

Facts checked October 4, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

Clicked a notification from cvgdownthe.xyz and installed something? A free scan checks programs and browsers in one pass.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove Cvgdownthe.xyz ads yourself 2 steps, about 6 minutes, no software needed.

Google ChromeMicrosoft EdgeMozilla Firefox

Screenshot of Cvgdownthe.xyz: cvgdownthe xyz
Cvgdownthe.xyz as our 2023 report showed it.

Cvgdownthe.xyz: summary

NameCvgdownthe.xyz
TypePush-notification spam site
SymptomsNotification spam from a website
Evidence4 write-ups by security sites; details still limited
Domainscvgdownthe.xyz
Ads shown asDesktop notifications
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 7 more facts
BrowsersChrome, Edge and Firefox
Installed on the PCNothing; a browser notification permission only
First seen27 January 2023
DistributionShady websites, deceptive ads, redirects, freeware installations
DamageNotification ads that lead to scam pages, fake virus alerts and unwanted downloads
Detection namesNone: nothing is installed on the PC, so Microsoft Defender and other antivirus programs have no file to detect
Facts checked4 October 2026

What Cvgdownthe.xyz is

Cvgdownthe.xyz is a push-notification spam site.

The site at cvgdownthe.xyz asks visitors to click Allow, and the browser then lets it send notifications that pop up in the corner of the Windows desktop, even when the site is closed.

Nothing was installed on the PC. The permission sits in the browser's site settings, and removing it there stops the messages straight away. How sites collect this permission, and how to take it back: push-notification spam explained.

From our report of Jan 2023 · not reviewed since

What Cvgdownthe.xyz is

xyz is a bogus page masquerading as a human verification step.

It requests that users click the "Allow" button to confirm that they are not robots. Many people will be reminded of CAPTCHA. When people click "Allow," they are instead bombarded with annoying pop-up ads.

Fraudsters use social engineering techniques to accomplish this. That is why it is essential to read everything completely and carefully before agreeing to anything. They may also include a picture of a media player and request that you click "Allow" because the browser is allegedly blocking access to the video.

Crooks profit from pay-per-click advertising. Unfortunately, they may employ rogue advertising networks[1] that place advertisements that lead to dangerous websites. If users click on the embedded links, they may be directed to scam pages that attempt to obtain personal information or trick them into downloading PUPs (potentially unwanted programs)[2] or malware.

Cvgdownthe.xyz: stop notifications in chrome 1
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications in chrome 2
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications from chrome on android
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications in firefox 1
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications in firefox 2
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications safari
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications on edge 2
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop site notificatins chromium edge
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from windows 1
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from windows 2
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from windows 7 xp
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from mac 1
Cvgdownthe.xyz in our 2023 report.
Screenshot of Cvgdownthe.xyz: cvgdownthe xyz
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: cvgdownthe xyz ads
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications in chrome 1
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications in chrome 2
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications from chrome on android
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications in firefox 1
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications in firefox 2
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications safari
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop notifications on edge 2
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: stop site notificatins chromium edge
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from windows 1
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from windows 2
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from windows 7 xp
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from mac 1
Cvgdownthe.xyz in our 2023 report.
Cvgdownthe.xyz: uninstall from mac 2
Cvgdownthe.xyz in our 2023 report.

What the Cvgdownthe.xyz ads look like

So far Cvgdownthe.xyz is known from 4 write-ups by security sites only, re-checked on 4 October 2026.

That is enough to tell what kind of threat it is and what to remove, and this guide is updated as more details come in.

  • Windows showed pop-up messages sent by cvgdownthe.xyz, even with the browser minimised.

Is Cvgdownthe.xyz dangerous?

Are the cvgdownthe.xyz notifications dangerous?

The notifications are short texts with a link and cannot harm the PC by themselves.

They are made to look like system messages, so the risk is clicking one.

Ignore the content, do not click, and remove the permission from cvgdownthe.xyz; that is the whole fix in most cases. What the linked pages do: notification spam explained.

Inside Cvgdownthe.xyz

Cvgdownthe.xyz needs only one click.

The page at cvgdownthe.xyz shows the browser's own permission prompt next to text that tells you to press Allow for an unrelated reason.

After that, the operators can send notifications for as long as the permission stays, and they sell those slots to the highest bidder. That is why the messages change from day to day. The browser's site settings hold the only switch that matters, as our guide to notification spam explains.

What else these signs can mean

Before you settle on push-notification spam site, compare with these look-alikes:

  • Fake alerts (tech support scam, fake antivirus page): When the notifications claim the PC is infected or a subscription expired, they are the delivery route for fake alert pages.

Is Cvgdownthe.xyz dangerous?

It is more of a nuisance than a direct threat to your files, but it is not harmless.

The desktop notifications are sold to anyone who pays, including scammers.

The pages they open can show fake virus alerts with phone numbers, fake updates that install malware, and forms that collect card details. Clicking around inside those pages is how adware turns into a stolen password or a remote access scam.

Warning: Do not call any number an ad shows; how those calls work is described in tech support scams.

From our report of Jan 2023 · not reviewed since

Block notifications from Cvgdownthe.xyz

Because push notifications are subscription-based, they can be turned on and off only manually.

We have a detailed guide for the most popular browsers below:

  • Open Google Chrome browser and go to Menu > Settings.
  • Locate the Privacy and security section and pick Site Settings > Notifications.
  • Look at the Allow section and look for a suspicious URL.
  • Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.

From our report of Jan 2023 · not reviewed since

Clear your browsers

It is strongly advised to clear your browsers after visiting such a website.

Websites can collect data such as your IP address, geolocation, websites you visit, links you click on, and items you buy online using various tracking technologies. All of this is accomplished through the use of cookies and cache.

Legitimate websites employ them to personalize the user experience by displaying relevant results, for example. They can, however, be used to generate revenue by selling them to ad networks and other third parties. This problem has an automatic solution – FortectIntego. This powerful software can halt tracking and delete existing data, as well as repair serious system errors.

From our report of Jan 2023 · not reviewed since

Scan your system for adware

Adware[3] can also cause unwanted browser behavior. xyz can appear without any user input at all.

Continue with this step if you completed the previous steps but still see an increase in commercial content such as pop-ups, banners, and redirects.

Most PUPs are disguised as "useful" tools, making them more difficult to detect for average users. That is why professional security tools such as SpyHunterCombo Cleaner and MalwarebytesMalwarebytes are essential.

Besides, it can prevent such infections by warning users about dangerous files trying to enter the system.

To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:

  • Enter Control Panel into Windows search box and hit Enter or click on the search result.
  • Under Programs, select Uninstall a program.
  • From the list, find the entry of the suspicious program.
  • Right-click on the application and select Uninstall.
  • If User Account Control shows up, click Yes.
  • Wait till uninstallation process is complete and click OK.
Cvgdownthe.xyz: uninstall from mac 2
Cvgdownthe.xyz in our 2023 report.

How Cvgdownthe.xyz got into your browser

Where the notifications come from

Every notification shows the sending site in small text, here cvgdownthe.xyz.

The browser lists it under allowed sites because someone clicked Allow on a prompt from it.

Such sites buy visitors from aggressive ad networks on pirated video, file-sharing and adult pages, so the visit itself was probably not your choice either. Revoke the permission and stay away from the site that started the redirect. More: how sites get notification permission.

From our report of Jan 2023 · not reviewed since

Distribution methods

Because they provide no other content besides the deceptive message, push notification spam pages rarely appear in search results.

They are usually hidden on other shady, unregulated pages. Illegal streaming platforms, for example, are riddled with deceptive ads and sneaky redirects.

That is why it is best to only visit pages that you are familiar with. Do not click on random links and advertisements, even if they appear to promote legitimate products and services. Use legitimate streaming services such as Netflix or Hulu. They only charge a small monthly subscription fee and allow users to watch as much content as they want.

Cvgdownthe.xyz: cvgdownthe xyz ads
Cvgdownthe.xyz in our 2023 report.

Check your browser and PC

  • Address: cvgdownthe.xyz

How to remove Cvgdownthe.xyz

Tools and time

No scan is needed for Cvgdownthe.xyz: cvgdownthe.xyz installed nothing.

You need the browser where the permission was granted, and it helps to check the others too. In this case:

  • Chrome
  • Edge
  • Firefox

Windows itself can also silence a browser's notifications under Settings > System > Notifications, but that only hides them. The real fix is removing the site's permission. How each browser stores it: push-notification spam.

Stopping Cvgdownthe.xyz step by step

Nothing needs to be uninstalled from Windows for this. How to keep these prompts away for good: our guide to notification spam.

Clean-up for cvgdownthe.xyz

Remove cvgdownthe.xyz from the allowed sites and turn on the browser option that blocks new notification requests or asks quietly: Stop website notifications and pop-ups.

Sites you use and trust, such as web mail, can stay. If the messages continue after the list is clean, an extension may be sending them: Remove a browser extension.

Turning on quiet notification requests in Chrome and Edge, or blocking new requests in Firefox, stops most of these prompts from appearing in the first place.

How to stop Cvgdownthe.xyz notifications

Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.

Nothing has to be uninstalled for the notifications themselves.

Which browser shows the ads?

Check which browser shows them: Chrome and Edge show notifications in the Windows notification area, Firefox labels them with its own name.

Then check every profile in that browser, because each profile has its own permissions. If cvgdownthe.xyz is not in the list, look for a similar name: the sending address can differ from the site you visited.

  1. Step 1: Remove cvgdownthe.xyz from Chrome's notification list

    Open More (the three dots) > Settings > Privacy and security > Site settings > Notifications, or paste chrome://settings/content/notifications into the address bar.

    Under Allowed to send notifications, open the menu next to cvgdownthe.xyz and choose Remove or Block, and do the same for any other address you do not recognise.

    Next to Not allowed to send notifications, click Add and enter cvgdownthe.xyz, so the site cannot ask again. The menus are the same in Chrome on Windows 11 and Windows 10, and each Chrome profile keeps its own list.

    Chrome Settings, Notifications page with the allowed and not allowed site lists
    Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications.

    Full procedure with screenshots: Stop website notifications and pop-ups

Then, whichever browser you use

  1. Step 2: Scan the PC if you downloaded anything from the ads

    Most people who only saw the notifications can skip this step. If a notification or the page it opened made you download or run a file, delete the file and run a full scan, then a Microsoft Defender Offline scan.

    In Windows 11 and Windows 10 open Windows Security > Virus & threat protection > Scan options, select Microsoft Defender Antivirus (offline scan) and click Scan now. The PC restarts and the scan takes about 15 minutes, so save your work first.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

After removal: keep the ads from coming back

When Cvgdownthe.xyz returns

Cvgdownthe.xyz cannot reinstall itself, because nothing was installed.

A return of messages from cvgdownthe.xyz means a browser still holds the permission.

Open the notification settings in each browser and profile and remove the site again. If you clicked a notification and downloaded something in the meantime, delete the file and run a Microsoft Defender offline scan: Run a Microsoft Defender Offline scan. Then block new requests. Our guide to notification spam lists the settings for each browser.

Did you follow an ad?

Most of the desktop notifications shown by Cvgdownthe.xyz are harmless to look at.

What matters is what you did next.

If you installed something, uninstall it and scan. If you entered a password or card number, change the password and call your bank. If you phoned a number from a warning or let someone connect to the PC, disconnect from the internet, remove the remote access program they used and follow What to do after paying a scammer. Fake support calls are explained in how tech support scams work.

Prevention

Treat every notification prompt as a question about notifications only.

If cvgdownthe.xyz or any other page says that Allow proves you are human, starts a video or unlocks a download, it is lying.

Click Block or close the tab. Better still, turn off new notification requests in each browser, and avoid sites that open new tabs whenever you click; they are where the redirects to such pages start. Settings for each browser: how to take back notification permission.

Questions about Cvgdownthe.xyz

How do I stop notifications from cvgdownthe.xyz?

Remove its permission in the browser. The bottom line of each notification names the browser, so open that browser's notification settings and look under Allowed. Remove cvgdownthe.xyz and any other site you do not recognise.

In Chrome and Edge this is under the site settings for notifications; in Firefox it is under Settings, Permissions and data, Notifications. Do this in every browser profile, because each one keeps its own list.

Restart the browser and wait a few minutes. If a message still arrives, read its bottom line again: the sending address can differ from the site you remember, and that is the entry still left in the list.

I clicked a notification from cvgdownthe.xyz. What should I do?

If you only opened the page and closed it, nothing else is needed besides removing the permission from cvgdownthe.xyz. If the page asked for card details, a phone number or a password and you entered them, act on that: call the bank to block the card, or change the password from another device.

If it offered a download, delete the file unopened, or uninstall it from Installed apps if you ran it, then run a full scan. If you called a number shown on the page, follow the steps for callers in this guide. Finally, remove the permission so that no more messages arrive.

What is Cvgdownthe.xyz?

Cvgdownthe.xyz is a push-notification spam site, a kind of adware. It earns money by showing desktop notifications, and each view, click or redirect pays whoever runs it. It is not something people usually choose; it arrives through a free download, a fake button or a misleading prompt.

Cvgdownthe.xyz does not encrypt files or take control of Windows, but its ads are sold to anyone, including scam operators, so they can lead to fake virus warnings and unwanted downloads. The steps in this guide remove it from Windows and from each browser.

Why does cvgdownthe.xyz keep showing up?

There are two possible reasons. If it appears as desktop notifications, a browser on this PC was given permission to receive them from cvgdownthe.xyz, usually through a misleading prompt. That permission stays until you remove it in the browser's site settings.

If it appears as tabs or redirects, an ad on a site you visit is opening it, or an extension or program on the PC is. Test a private window: if cvgdownthe.xyz never appears there, an extension is the likely cause. The plan above covers each case.

Do I have to change settings in every browser?

Only in the browsers that allowed cvgdownthe.xyz, but checking all of them takes a minute and is worth it. We saw the notifications in Chrome, Edge and Firefox. Chrome and Edge keep their notification lists under site settings, and Firefox under Privacy & Security > Permissions.

Remove cvgdownthe.xyz and any other unfamiliar site from each list, then turn off new notification requests if you do not need them. Remember that every browser profile has its own list, so a second profile can keep the messages coming after you clean the first.

Are the pop-ups I see really from Cvgdownthe.xyz?

Compare them with the details in the table above. Cvgdownthe.xyz produces desktop notifications, and the clearest sign of it is notifications from cvgdownthe.xyz. Other adware looks similar, so check the name of the sending site at the bottom of a notification, the address in the tab that opened, or the newest entries on the extensions page.

If those match, this guide fits. If you see a different name, the same kind of steps apply, but remove the item you actually find rather than guessing.

Is it safe to click Block or Allow on a notification prompt?

Clicking Block is safe; it only tells the browser not to show notifications from that site. Clicking Allow is not dangerous to your files either, but it gives the site a channel to your desktop that spam sites abuse at once.

The prompt itself is part of the browser, so you can trust its buttons. What you cannot trust is the text on the page around it. If a page explains why you must click Allow, choose Block or close the tab.

Can I turn off the pop-ups in Windows settings instead?

You can hide them, but that is not the fix. In Windows 11, Settings > System > Notifications lets you switch off notifications for a whole browser, which silences the spam together with every useful notification from that browser.

The site keeps its permission and can still send messages when you switch them back on. It is better to remove the specific site in the browser's own notification settings and block new requests. That stops the messages at the source and leaves the rest of your notifications working.

My scan found nothing, but the ads continue. Why?

Because the source may not be a file a scanner looks for. Browser notifications are a permission stored in the browser, and many adware extensions are not flagged because they come from an official store.

Some ad-supported programs are only reported if you enable detection of potentially unwanted apps. So a clean scan does not mean the job is done. Check each browser's notification permissions and extension list by hand, and turn on Potentially unwanted app blocking in Windows Security before scanning again.

Will Fortect remove Cvgdownthe.xyz?

No program removes Cvgdownthe.xyz itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.

What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.

If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.

Sources

  1. Helpnetsecurity: How does a rogue ad network function? (read October 4, 2026)
  2. Howtogeek: PUPs Explained: What is a "Potentially Unwanted Program"? (read October 4, 2026)
  3. Malwarebytes: Adware (read October 4, 2026)
  4. Google Chrome Help: Use notifications to get alerts (no longer online) (read October 4, 2026)
  5. FTC: How to recognize, remove and avoid malware (read October 4, 2026)

More removal guides

Remove Immediate Action Required

Immediate Action Required is a fake notification that might pop-up out of nowhere and prompt users to download useless bogus software Immediate Action Required is a scam that users mightAdwareMedium riskUgnius Kiguolis ·

Remove ReceiverHelper Mac virus

ReceiverHelper virus is a high threat to your personal safety and Mac security ReceiverHelper is a harmful application targeting Mac devices, classified under the Adload malware family. It is notoriousAdwareMedium riskJake Doevan ·

Remove Casalemedia

Casalemedia is a legal advertising service but is sometimes abused by crooks to gain personal income Casalemedia is a legitimate advertising service that provides assistance in monetizing on online contentAdwareMedium riskJake Doevan ·

Remove D1ue3yi0hkdsdl.cloudfront.net ads

D1ue3yi0hkdsdl.cloudfront.net ads is the content related to scam campaigns and fake errors or warnings D1ue3yi0hkdsdl.cloudfront.net is the program that causes notifications and advertisements that may appear unexpectedly, preventing you fromAdwareMedium riskJulie Splinters ·

Questions and experiences: Cvgdownthe.xyz ads

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,442 members already hereReading, writing, commenting and voting. 0 verified · 167 joined this year