Itscythera.com ads: what it is and how to remove it
Itscythera.com is a rogue website that will bombard your PC or cell phone with ads if you click the Allow button when visiting it. That would enable its push notifications, and they would appear directly on your desktop or screen even when the browsers are closed.
Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A scan of the PC is a quick way to confirm that nothing installed is behind the itscythera.com redirects.
Do it yourself · free Remove Itscythera.com ads yourself 3 steps, about 9 minutes, no software needed.
Start the steps
Itscythera.com ads: summary
| Distribution | Software bundles, deceptive ads, file-sharing platforms, fake Flash Player updates |
|---|---|
| Damage | Financial losses, identity theft, installation of other PUPs, or even malware |
| name | Itscythera.com |
| type | Adware, redirect virus, PUP |
| IP address | 104.21.75.245 |
| Purpose | To deliver misleading ads of affiliated sites directly to user screens and desktops |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 10 more facts
| Symptoms | Sudden redirects to questionable websites, slower device, slower internet connection, ads in the form of notifications popping up frequently |
|---|---|
| Detection names | No Microsoft detection name is known |
| Name | Itscythera.com |
| Type | Ad redirect domain |
| Evidence | 4 write-ups by security sites; details still limited |
| Domains | itscythera.com |
| Ads shown as | Redirects through ad pages |
| Browsers | Chrome, Edge and Firefox |
| First seen | 10 March 2021 |
| Facts checked | 6 October 2026 |
Is Itscythera.com ads dangerous?
From our report of Mar 2021 · not reviewed since
Itscythera.com – a treacherous site trying to deceive you so it could cause redirects to affiliated sites
Itscythera.com is a rogue website that will bombard your PC or cell phone with ads if you click the Allow button when visiting it.
That would enable its push notifications, and they would appear directly on your desktop or screen even when the browsers are closed. If you're redirected to this page via a deceptive ad, a mistype, or any other reason, please don't subscribe to this shady website's alerts.
The worse thing is that Itscythera.com ads can redirect you to questionable or even malicious websites, where you could be exposed to a lot of hazards. In some cases, such infections can open any affiliated sites on demand without you even clicking any buttons.
If you're redirected to this website while browsing the internet, you might have adware installed on your device. It is classified as a potentially unwanted program. Thus it's not as dangerous as malware.
That doesn't you should have it on any of your devices. This article contains removal and system repair manuals, so keep on reading to get this infection out.
There are thousands of dubious websites like Itscythera.com virus, such as Club-news.xyz virus, Ourcoolspot.com virus, Dbytheseth.fun virus, etc. All of them seek to somehow deceive their visitors into subscribing to push notifications. Various prompts are used to trick visitors into pressing the Allow button, including:
If you ever encounter any similar alerts, close the tab immediately and clean your browsing cache. These sites are built with the sole purpose of advertising affiliated websites, which they can do either through ads in the form of notifications or through sudden redirects.
That's where the dangers lurk. Itscythera.com redirect can happen out of the blue and force you to visit a site with questionable, hazardous, or other mischievous content, such as porn, gambling, tech support scams, malware, other push notification virus sites, and so on.
PUP developers, including the operators of Itscythera pop-up, don't care about their user safety or privacy. Thus, the affiliated sites might try to extract personal information (SSN, credit card details, phone numbers, etc.), draw you into a scam, lure you into gambling, install malware through fake updates, or drive-by downloading, and many other mishaps.
So please, for your own safety, scan your infected devices (phones or computers) with a trustworthy anti-malware tool and remove Itscythera.com. If you don't have a proper security tool, download free apps like or that will protect your every step from now on.
This system diagnostics software will also delete any tracking cookies and take care of other junk files.
- to continue to the site,
- to close the window,
- to show hidden content,
- to continue watching a video,
- to prove that you're not a robot,
- to confirm that you're over 18 years old, etc.
From our report of Mar 2021 · not reviewed since
Block PUPs and malware by enhancing your cybersecurity
Computer infections can cause massive headaches.
There are various kinds of malware built for different purposes. While keyloggers can record your passwords and logins, ransomware can encrypt all files on your devices or networks and ask for a ransom.
The internet is a scary place, so everyone should gear up. First off, you need trustworthy anti-malware software to watch your back at all times. Make a habit of updating its virus signatures and using it at least twice a week. Do the same thing with a proper system tune-up tool to keep all system files and software at bay.
Remember to keep backups of all critical information on at least two separate devices. One of which should be offline storage, like a USB or an HDD/SSD drive. And last but not least, keep all your software, especially the Operating System, updated at all times (except for BETA versions).
From our report of Mar 2021 · not reviewed since
More from our earlier report on Itscythera.com
- You can get rid of any computer infection, no matter how severe, with a trustworthy anti-malware tool
Check your browser and PC
- Address:
itscythera.com
How to remove Itscythera.com ads
How to stop the Itscythera.com redirects
Work in this order and test a few links after each step, so you know which one was the cause.
Step 1: Check the browser's extensions
A browser that keeps landing on
itscythera.comby itself usually has an add-on doing it. Open the extension list (chrome://extensions, edge://extensions, or Extensions and themes in the Firefox menu) and remove anything you do not remember installing.Coupon, PDF, new tab, search and video downloader add-ons are the usual suspects. Do this in every browser on the Windows 11 or Windows 10 PC.
Chrome on Windows 11: More > Extensions > Manage extensions. Full procedure with screenshots: Remove a browser extension
Step 2: Reset the browser if the redirects continue
When
itscythera.comkeeps opening after the extensions are cleaned, reset the browser to its defaults. Chrome: Settings > Reset settings > Restore settings to their original defaults; Edge: Settings > Reset settings; Firefox: Help > More troubleshooting information > Refresh Firefox.A reset keeps bookmarks and saved passwords but clears site permissions, the start page and the search engine.
If every browser still redirects afterwards, the cause is a program in Windows 11 or Windows 10: check Settings > Apps > Installed apps for anything you did not install.
Chrome on Windows 11: Settings > Reset settings. Full procedure with screenshots: Reset a browser and fix a hijacked search engine
Step 3: Scan the PC if you downloaded anything from the ads
Most people who only saw the notifications can skip this step. If a notification or the page it opened made you download or run a file, delete the file and run a full scan, then a Microsoft Defender Offline scan.
In Windows 11 and Windows 10 open Windows Security > Virus & threat protection > Scan options, select Microsoft Defender Antivirus (offline scan) and click Scan now. The PC restarts and the scan takes about 15 minutes, so save your work first.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Instructions for each browser and system
The detailed steps for every browser and system this guide covers. Open the one you use.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.
Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.
Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.
Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.
Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.
Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.
Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.
Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.
Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.
Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.
Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.
Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.
Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.
- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.
Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.
Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.
Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.
Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).
Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.
- Finally, empty the Trash to permanently remove the leftovers.
Uninstall from Android
Uninstall unwanted programs from Android device:
- Go to Settings -> Apps/Applications.
- Expand the full list of the installed apps.
- Scroll through the list and tap on a suspicious application once.
- Tap on it and select Uninstall.
- If the Uninstall option is unavailable, the app may require additional permissions to be revoked first.
- Reboot the device.
Clear storage and cache for Google Chrome or other apps::
- Go to Settings > Apps/Applications.
- Expand the full list of the installed apps.
- Tap on Chrome and select Storage & cache.
- Clear storage and clear cache of the app.
If you are seeing ads on top of other apps but are not sure what is causing it, perform the following steps:
- Go to Apps/Applications.
- Select Special App access.
- Tap on Display over other apps.
- Eliminate apps with these access rights enabled.
Stop browser notifications
Protect your privacy - employ a VPN
There are several ways how to make your online time more private - you can access an incognito tab.
However, there is no secret that even in this mode, you are tracked for advertising purposes. There is a way to add an extra layer of protection and create a completely anonymous web browsing practice with the help of VPN. This software reroutes traffic through different servers, thus leaving your IP address and geolocation in disguise.
Besides, it is based on a strict no-log policy, meaning that no data will be recorded, leaked, and available for both first and third parties. The combination of a secure web browser and VPN will let you browse the Internet without a feeling of being spied or targeted by criminals.
No backups? No problem. Use a data recovery tool
If you wonder how data loss can occur, you should not look any further for answers - human errors, malware attacks, hardware failures, power cuts, natural disasters, or even simple negligence.
In some cases, lost files are extremely important, and many straight out panic when such an unfortunate course of events happen. Due to this, you should always ensure that you prepare proper data backups on a regular basis.
If you were caught by surprise and did not have any backups to restore your files from, not everything is lost. is one of the leading file recovery solutions you can find on the market - it is likely to restore even lost emails or data located on an external device.
From our report of Mar 2021 · not reviewed since
Simple instructions to remove Itscythera.com virus from all system and browsers
Although adware is categorized as a potentially unwanted program, it can act as a gateway to malware.
Thus having Itscythera virus in your device could attract not only other PUPs but Trojans, ransomware, keyloggers, and other more hazardous cyber threats.
That will remove Itscythera.com and any other suspicious or malicious files.
You will have to finish Itscythera.com removal manually as the security tools can't erase its notifications from your browsers. Below this paragraph, you'll find out our simple step-by-step instructions to get rid of them once and for all. Afterward, please don't forget to fix your corrupted system data and clean junk files with a compatible system optimizer.
Questions about Itscythera.com ads
itscythera.com opens when I click links. What causes it?
When every click leads to itscythera.com first, an extension or a script on the page is rewriting the links. If it happens only on one site, that site uses aggressive ads; close it and use another source. If it happens everywhere, open the browser in a private window, where extensions are normally off, and try again.
No redirect in the private window means one of your extensions is responsible: remove the ones you do not know. A redirect in the private window too means the cause is outside the extensions, such as a notification permission, a changed search setting or a program installed on the PC. The removal steps in this guide cover each of those.
Is it safe that my browser was redirected to itscythera.com?
Landing on itscythera.com does not infect the PC by itself. A browser does not run programs from a page without your action. The danger is in the pages that come next:
- some ask you to allow notifications
- some show fake virus warnings
- some offer downloads
- ask for card details
If you only saw those pages and closed them, nothing more is needed than removing whatever caused the redirect. If you allowed notifications, remove that permission.
If you downloaded a file, delete it unopened, or uninstall it if you ran it. If you typed a password or card number on one of the pages, change the password and call your bank.
What is Itscythera.com?
Itscythera.com is an ad redirect domain, a kind of adware. It earns money by showing redirects through ad pages, and each view, click or redirect pays whoever runs it. It is not something people usually choose; it arrives through a free download, a fake button or a misleading prompt.
Itscythera.com does not encrypt files or take control of Windows, but its ads are sold to anyone, including scam operators, so they can lead to fake virus warnings and unwanted downloads. The steps in this guide remove it from Windows and from each browser.
Why does itscythera.com keep showing up?
There are two possible reasons. If it appears as desktop notifications, a browser on this PC was given permission to receive them from itscythera.com, usually through a misleading prompt. That permission stays until you remove it in the browser's site settings.
If it appears as tabs or redirects, an ad on a site you visit is opening it, or an extension or program on the PC is. Test a private window: if itscythera.com never appears there, an extension is the likely cause. The plan above covers each case.
Which browsers does Itscythera.com affect?
In the cases we checked, Itscythera.com showed up in Chrome, Edge and Firefox. That does not rule out others on your PC, since adware installers often target every browser they find, and permissions and extensions sync across computers signed in to the same browser account.
Open each browser you have, go to its extensions page and its notification settings, and remove anything you do not recognise. Profiles count separately: Chrome and Edge can each hold several, and each one needs checking on its own.
Are the pop-ups I see really from Itscythera.com?
Compare them with the details in the table above. Itscythera.com produces redirects through ad pages, and the clearest sign of it is redirects to itscythera.com. Other adware looks similar, so check the name of the sending site at the bottom of a notification, the address in the tab that opened, or the newest entries on the extensions page.
If those match, this guide fits. If you see a different name, the same kind of steps apply, but remove the item you actually find rather than guessing.
Did Itscythera.com collect my data?
Adware typically collects what it needs to choose ads:
- the sites you visit
- search terms
- approximate location
- browser and system details
Extensions with permission to read and change data on all websites can technically see everything on those pages, including forms. That is a privacy problem rather than proof of theft.
If you typed card details or passwords while it was active, changing the most important passwords is a reasonable precaution. Clearing cookies after removal ends the tracking sessions it may have started.
My scan found nothing, but the ads continue. Why?
Because the source may not be a file a scanner looks for. Browser notifications are a permission stored in the browser, and many adware extensions are not flagged because they come from an official store.
Some ad-supported programs are only reported if you enable detection of potentially unwanted apps. So a clean scan does not mean the job is done. Check each browser's notification permissions and extension list by hand, and turn on Potentially unwanted app blocking in Windows Security before scanning again.
I let a "support technician" from an ad connect to my PC. What should I do?
Act quickly but calmly. Disconnect the PC from the internet first, so the connection ends. Uninstall the remote access tool they asked you to install and check Installed apps for anything else added during the call.
Run a Microsoft Defender full scan and offline scan. From another device, change your e-mail and banking passwords and sign out of all sessions.
If you paid by card, bank transfer or gift card, contact your bank or the card issuer immediately, and report the scam to the police. Do not answer if they call back.
Will Fortect remove Itscythera.com?
Fortect scans Windows for malware and unwanted programs and repairs the system files and settings they change, and its free scan shows what it finds on your PC before you decide anything.
For Itscythera.com, follow the plan above as well: the browser steps take back permissions and settings that no scanner treats as a threat, and uninstalling the program that brought it removes the source.
Run Microsoft Defender's full scan and, if anything was found, its offline scan as a second opinion. If the symptoms are gone after the plan and both scans are clean, there is nothing more to do.
Sources
- Uscybersecurity: 8 Different Types of Malware (read October 6, 2026)
- Senzavirus: SenzaVirus (read October 6, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
- FTC: How to recognize, remove and avoid malware (read October 6, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)