Cvgdownthe.xyz ads: what it is and how to remove it
xyz is a bogus page masquerading as a human verification step. It requests that users click the "Allow" button to confirm that they are not robots.
Facts checked October 4, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
Clicked a notification from cvgdownthe.xyz and installed something? A free scan checks programs and browsers in one pass.
Do it yourself · free Remove Cvgdownthe.xyz ads yourself 2 steps, about 6 minutes, no software needed.

Cvgdownthe.xyz: summary
| Name | Cvgdownthe.xyz |
|---|---|
| Type | Push-notification spam site |
| Symptoms | Notification spam from a website |
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | cvgdownthe.xyz |
| Ads shown as | Desktop notifications |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 7 more facts
| Browsers | Chrome, Edge and Firefox |
|---|---|
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 27 January 2023 |
| Distribution | Shady websites, deceptive ads, redirects, freeware installations |
| Damage | Notification ads that lead to scam pages, fake virus alerts and unwanted downloads |
| Detection names | None: nothing is installed on the PC, so Microsoft Defender and other antivirus programs have no file to detect |
| Facts checked | 4 October 2026 |
What Cvgdownthe.xyz is
Cvgdownthe.xyz is a push-notification spam site.
The site at cvgdownthe.xyz asks visitors to click Allow, and the browser then lets it send notifications that pop up in the corner of the Windows desktop, even when the site is closed.
Nothing was installed on the PC. The permission sits in the browser's site settings, and removing it there stops the messages straight away. How sites collect this permission, and how to take it back: push-notification spam explained.
From our report of Jan 2023 · not reviewed since
What Cvgdownthe.xyz is
xyz is a bogus page masquerading as a human verification step.
It requests that users click the "Allow" button to confirm that they are not robots. Many people will be reminded of CAPTCHA. When people click "Allow," they are instead bombarded with annoying pop-up ads.
Fraudsters use social engineering techniques to accomplish this. That is why it is essential to read everything completely and carefully before agreeing to anything. They may also include a picture of a media player and request that you click "Allow" because the browser is allegedly blocking access to the video.
Crooks profit from pay-per-click advertising. Unfortunately, they may employ rogue advertising networks[1] that place advertisements that lead to dangerous websites. If users click on the embedded links, they may be directed to scam pages that attempt to obtain personal information or trick them into downloading PUPs (potentially unwanted programs)[2] or malware.



























What the Cvgdownthe.xyz ads look like
So far Cvgdownthe.xyz is known from 4 write-ups by security sites only, re-checked on 4 October 2026.
That is enough to tell what kind of threat it is and what to remove, and this guide is updated as more details come in.
- Windows showed pop-up messages sent by
cvgdownthe.xyz, even with the browser minimised.
Is Cvgdownthe.xyz dangerous?
Are the cvgdownthe.xyz notifications dangerous?
The notifications are short texts with a link and cannot harm the PC by themselves.
They are made to look like system messages, so the risk is clicking one.
Ignore the content, do not click, and remove the permission from cvgdownthe.xyz; that is the whole fix in most cases. What the linked pages do: notification spam explained.
Inside Cvgdownthe.xyz
Cvgdownthe.xyz needs only one click.
The page at cvgdownthe.xyz shows the browser's own permission prompt next to text that tells you to press Allow for an unrelated reason.
After that, the operators can send notifications for as long as the permission stays, and they sell those slots to the highest bidder. That is why the messages change from day to day. The browser's site settings hold the only switch that matters, as our guide to notification spam explains.
What else these signs can mean
Before you settle on push-notification spam site, compare with these look-alikes:
- Fake alerts (tech support scam, fake antivirus page): When the notifications claim the PC is infected or a subscription expired, they are the delivery route for fake alert pages.
Is Cvgdownthe.xyz dangerous?
It is more of a nuisance than a direct threat to your files, but it is not harmless.
The desktop notifications are sold to anyone who pays, including scammers.
The pages they open can show fake virus alerts with phone numbers, fake updates that install malware, and forms that collect card details. Clicking around inside those pages is how adware turns into a stolen password or a remote access scam.
Warning: Do not call any number an ad shows; how those calls work is described in tech support scams.
From our report of Jan 2023 · not reviewed since
Block notifications from Cvgdownthe.xyz
Because push notifications are subscription-based, they can be turned on and off only manually.
We have a detailed guide for the most popular browsers below:
- Open Google Chrome browser and go to Menu > Settings.
- Locate the Privacy and security section and pick Site Settings > Notifications.
- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
From our report of Jan 2023 · not reviewed since
Clear your browsers
It is strongly advised to clear your browsers after visiting such a website.
Websites can collect data such as your IP address, geolocation, websites you visit, links you click on, and items you buy online using various tracking technologies. All of this is accomplished through the use of cookies and cache.
Legitimate websites employ them to personalize the user experience by displaying relevant results, for example. They can, however, be used to generate revenue by selling them to ad networks and other third parties. This problem has an automatic solution – FortectIntego. This powerful software can halt tracking and delete existing data, as well as repair serious system errors.
From our report of Jan 2023 · not reviewed since
Scan your system for adware
Adware[3] can also cause unwanted browser behavior. xyz can appear without any user input at all.
Continue with this step if you completed the previous steps but still see an increase in commercial content such as pop-ups, banners, and redirects.
Most PUPs are disguised as "useful" tools, making them more difficult to detect for average users. That is why professional security tools such as SpyHunterCombo Cleaner and MalwarebytesMalwarebytes are essential.
Besides, it can prevent such infections by warning users about dangerous files trying to enter the system.
To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:
- Enter Control Panel into Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.

How Cvgdownthe.xyz got into your browser
Where the notifications come from
Every notification shows the sending site in small text, here cvgdownthe.xyz.
The browser lists it under allowed sites because someone clicked Allow on a prompt from it.
Such sites buy visitors from aggressive ad networks on pirated video, file-sharing and adult pages, so the visit itself was probably not your choice either. Revoke the permission and stay away from the site that started the redirect. More: how sites get notification permission.
From our report of Jan 2023 · not reviewed since
Distribution methods
Because they provide no other content besides the deceptive message, push notification spam pages rarely appear in search results.
They are usually hidden on other shady, unregulated pages. Illegal streaming platforms, for example, are riddled with deceptive ads and sneaky redirects.
That is why it is best to only visit pages that you are familiar with. Do not click on random links and advertisements, even if they appear to promote legitimate products and services. Use legitimate streaming services such as Netflix or Hulu. They only charge a small monthly subscription fee and allow users to watch as much content as they want.

Check your browser and PC
- Address:
cvgdownthe.xyz
How to remove Cvgdownthe.xyz
Tools and time
No scan is needed for Cvgdownthe.xyz: cvgdownthe.xyz installed nothing.
You need the browser where the permission was granted, and it helps to check the others too. In this case:
- Chrome
- Edge
- Firefox
Windows itself can also silence a browser's notifications under Settings > System > Notifications, but that only hides them. The real fix is removing the site's permission. How each browser stores it: push-notification spam.
Stopping Cvgdownthe.xyz step by step
- Find
cvgdownthe.xyzin the notification permissions and choose Remove or Block: Stop website notifications and pop-ups. - Clear site data for it so it cannot ask again with saved cookies: Clear the browser cache and cookies On uGetFix.
- Do the same in every browser where notifications appeared.
- If a browser still shows notifications, reset it: Reset a browser and fix a hijacked search engine.
Nothing needs to be uninstalled from Windows for this. How to keep these prompts away for good: our guide to notification spam.
Clean-up for cvgdownthe.xyz
Remove cvgdownthe.xyz from the allowed sites and turn on the browser option that blocks new notification requests or asks quietly: Stop website notifications and pop-ups.
Sites you use and trust, such as web mail, can stay. If the messages continue after the list is clean, an extension may be sending them: Remove a browser extension.
Turning on quiet notification requests in Chrome and Edge, or blocking new requests in Firefox, stops most of these prompts from appearing in the first place.
How to stop Cvgdownthe.xyz notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Check which browser shows them: Chrome and Edge show notifications in the Windows notification area, Firefox labels them with its own name.
Then check every profile in that browser, because each profile has its own permissions. If cvgdownthe.xyz is not in the list, look for a similar name: the sending address can differ from the site you visited.
Step 1: Remove cvgdownthe.xyz from Chrome's notification list
Open More (the three dots) > Settings > Privacy and security > Site settings > Notifications, or paste
chrome://settings/content/notificationsinto the address bar.Under Allowed to send notifications, open the menu next to
cvgdownthe.xyzand choose Remove or Block, and do the same for any other address you do not recognise.Next to Not allowed to send notifications, click Add and enter cvgdownthe.xyz, so the site cannot ask again. The menus are the same in Chrome on Windows 11 and Windows 10, and each Chrome profile keeps its own list.

Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove cvgdownthe.xyz from Edge's notification list
Open Settings and more (the three dots) > Settings > Privacy, search, and services > Site permissions > All permissions > Notifications. Remove
cvgdownthe.xyzfrom the Allowed list, then click Add site next to Not allowed to send notifications and enter it there.Edge is built into both Windows 11 and Windows 10, so check it even if you normally use another browser. If the notifications came with the Edge logo, this is the browser that holds the permission.

Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove cvgdownthe.xyz from Firefox's notification permissions
Open the menu (three lines) > Settings and click Permissions and data in the left list, then Notifications. Select
cvgdownthe.xyz, click Remove Website and confirm with Save Changes.In versions older than Firefox 152 the same list sits under Privacy & Security, behind a Settings button next to Notifications. Firefox shows these notifications only while it is running, on Windows 11 and Windows 10 alike.

Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
Most people who only saw the notifications can skip this step. If a notification or the page it opened made you download or run a file, delete the file and run a full scan, then a Microsoft Defender Offline scan.
In Windows 11 and Windows 10 open Windows Security > Virus & threat protection > Scan options, select Microsoft Defender Antivirus (offline scan) and click Scan now. The PC restarts and the scan takes about 15 minutes, so save your work first.

Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
After removal: keep the ads from coming back
When Cvgdownthe.xyz returns
Cvgdownthe.xyz cannot reinstall itself, because nothing was installed.
A return of messages from cvgdownthe.xyz means a browser still holds the permission.
Open the notification settings in each browser and profile and remove the site again. If you clicked a notification and downloaded something in the meantime, delete the file and run a Microsoft Defender offline scan: Run a Microsoft Defender Offline scan. Then block new requests. Our guide to notification spam lists the settings for each browser.
Did you follow an ad?
Most of the desktop notifications shown by Cvgdownthe.xyz are harmless to look at.
What matters is what you did next.
If you installed something, uninstall it and scan. If you entered a password or card number, change the password and call your bank. If you phoned a number from a warning or let someone connect to the PC, disconnect from the internet, remove the remote access program they used and follow What to do after paying a scammer. Fake support calls are explained in how tech support scams work.
Prevention
Treat every notification prompt as a question about notifications only.
If cvgdownthe.xyz or any other page says that Allow proves you are human, starts a video or unlocks a download, it is lying.
Click Block or close the tab. Better still, turn off new notification requests in each browser, and avoid sites that open new tabs whenever you click; they are where the redirects to such pages start. Settings for each browser: how to take back notification permission.
Questions about Cvgdownthe.xyz
How do I stop notifications from cvgdownthe.xyz?
Remove its permission in the browser. The bottom line of each notification names the browser, so open that browser's notification settings and look under Allowed. Remove cvgdownthe.xyz and any other site you do not recognise.
In Chrome and Edge this is under the site settings for notifications; in Firefox it is under Settings, Permissions and data, Notifications. Do this in every browser profile, because each one keeps its own list.
Restart the browser and wait a few minutes. If a message still arrives, read its bottom line again: the sending address can differ from the site you remember, and that is the entry still left in the list.
I clicked a notification from cvgdownthe.xyz. What should I do?
If you only opened the page and closed it, nothing else is needed besides removing the permission from cvgdownthe.xyz. If the page asked for card details, a phone number or a password and you entered them, act on that: call the bank to block the card, or change the password from another device.
If it offered a download, delete the file unopened, or uninstall it from Installed apps if you ran it, then run a full scan. If you called a number shown on the page, follow the steps for callers in this guide. Finally, remove the permission so that no more messages arrive.
What is Cvgdownthe.xyz?
Cvgdownthe.xyz is a push-notification spam site, a kind of adware. It earns money by showing desktop notifications, and each view, click or redirect pays whoever runs it. It is not something people usually choose; it arrives through a free download, a fake button or a misleading prompt.
Cvgdownthe.xyz does not encrypt files or take control of Windows, but its ads are sold to anyone, including scam operators, so they can lead to fake virus warnings and unwanted downloads. The steps in this guide remove it from Windows and from each browser.
Why does cvgdownthe.xyz keep showing up?
There are two possible reasons. If it appears as desktop notifications, a browser on this PC was given permission to receive them from cvgdownthe.xyz, usually through a misleading prompt. That permission stays until you remove it in the browser's site settings.
If it appears as tabs or redirects, an ad on a site you visit is opening it, or an extension or program on the PC is. Test a private window: if cvgdownthe.xyz never appears there, an extension is the likely cause. The plan above covers each case.
Do I have to change settings in every browser?
Only in the browsers that allowed cvgdownthe.xyz, but checking all of them takes a minute and is worth it. We saw the notifications in Chrome, Edge and Firefox. Chrome and Edge keep their notification lists under site settings, and Firefox under Privacy & Security > Permissions.
Remove cvgdownthe.xyz and any other unfamiliar site from each list, then turn off new notification requests if you do not need them. Remember that every browser profile has its own list, so a second profile can keep the messages coming after you clean the first.
Are the pop-ups I see really from Cvgdownthe.xyz?
Compare them with the details in the table above. Cvgdownthe.xyz produces desktop notifications, and the clearest sign of it is notifications from cvgdownthe.xyz. Other adware looks similar, so check the name of the sending site at the bottom of a notification, the address in the tab that opened, or the newest entries on the extensions page.
If those match, this guide fits. If you see a different name, the same kind of steps apply, but remove the item you actually find rather than guessing.
Is it safe to click Block or Allow on a notification prompt?
Clicking Block is safe; it only tells the browser not to show notifications from that site. Clicking Allow is not dangerous to your files either, but it gives the site a channel to your desktop that spam sites abuse at once.
The prompt itself is part of the browser, so you can trust its buttons. What you cannot trust is the text on the page around it. If a page explains why you must click Allow, choose Block or close the tab.
Can I turn off the pop-ups in Windows settings instead?
You can hide them, but that is not the fix. In Windows 11, Settings > System > Notifications lets you switch off notifications for a whole browser, which silences the spam together with every useful notification from that browser.
The site keeps its permission and can still send messages when you switch them back on. It is better to remove the specific site in the browser's own notification settings and block new requests. That stops the messages at the source and leaves the rest of your notifications working.
My scan found nothing, but the ads continue. Why?
Because the source may not be a file a scanner looks for. Browser notifications are a permission stored in the browser, and many adware extensions are not flagged because they come from an official store.
Some ad-supported programs are only reported if you enable detection of potentially unwanted apps. So a clean scan does not mean the job is done. Check each browser's notification permissions and extension list by hand, and turn on Potentially unwanted app blocking in Windows Security before scanning again.
Will Fortect remove Cvgdownthe.xyz?
No program removes Cvgdownthe.xyz itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Helpnetsecurity: How does a rogue ad network function? (read October 4, 2026)
- Howtogeek: PUPs Explained: What is a "Potentially Unwanted Program"? (read October 4, 2026)
- Malwarebytes: Adware (read October 4, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 4, 2026)
- FTC: How to recognize, remove and avoid malware (read October 4, 2026)