Ok.message.tf – malicious website that attempts to scam you into providing your credit card details

Ok.message.tf is a malicious website that users might encounter on Google Chrome, Mozilla Firefox, MS Edge, Safari, or another web browser. The site incorporates a variety of scams – attempts to make users subscribe to intrusive browser notifications, shows visitors fake giveaways, and attempts to make them submit their credit card details. As evident, the website should not be interacted with, resulting in monetary losses, malware infections, or personal data theft.
While some users might visit Ok.message.tf accidentally, frequent redirects and an increased amount of advertisements might indicate that the system is infected with adware or another malicious program. These ad-supported apps typically get installed behind users' backs when they download freeware from third-party websites.
| Name | Ok.message.tf |
|---|---|
| Type | Push notification virus, scam, ads, redirects |
| IP address | 104.27.177.123 |
| Distribution | Website authors use various tricks to make users enable notifications. In particular, the injection of popups begins after the “Allow” button is pressed |
| Symptoms | Users start seeing popups on their desktops at any time when the machine is turned on |
| Dangers | Clicking on links that are embedded within the notification prompt, exploring the sites these links bring to or downloading files can be particularly dangerous – users can get infected with malware, suffer from financial losses or privacy issues |
| Elimination | To prevent the site from displaying notifications to you, access the site permission section via your web browser settings – you can find more details below |
| Further steps | Redirects and ads might indicate adware infection, so you should check your system with anti-malware, clean your browsers, and attempt to fix virus damage with a repair tool FortectIntego |
Ok.message.tf is one of the thousands of websites created each day in an attempt to scam users in various ways – other examples include Shopgirlmtl.com, Gdimmunical.club, Yishowever.club, and many others. This particular site immediately shows a fake message that asks users to enable notifications. Upon entry, they see an image which includes a robot and a man, with the following text:
Click “Allow” to confirm that you are not a robot!
This method is chosen because it is extremely effective – most of the internet users had to deal with the robot checks before, as websites employ protection measures in order to prevent unsolicited DDoS attacks (when a website or service is spammed with never-ending traffic, overwhelming and crashing it in the process). This social engineering trick is just one of many that the developers of malicious websites use to make users click the “Allow” button and enable notifications to be shown.
Unfortunately, those who fall for the trick will soon see intrusive Ok.message.tf popups that show up directly on their screens, regardless if Google Chrome or another web browser is in operation or not. These notifications would often include various scam messages, such as get-rich-quick schemes, tech support scams, and much more. Thus, it is important to remove Ok.message.tf activity before it manages to cause some serious damage.
If you clicked on the promoted links or downloaded files, you must check your machine for malware with powerful security programs, such as SpyHunterCombo Cleaner or MalwarebytesMalwarebytes. If any malicious programs were found, experts[1] also recommend using FortectIntego or a similar repair tool to fix virus damage and then clean the web browsers accordingly.

If you did not click on any links, Ok.message.tf removal can be performed by simply preventing the site from sending you notifications. You can achieve that by accessing your web browser's settings section – check the details below.
Those who will stay on the Ok.message.tf long or click on random places within the page will fake further redirects. For example, during our tests, we were redirected to well-known scam schemes:
If you follow up with these survey scams, you will be asked to answer a few simple questions that have no wrong answers. The goal of the scam creators is to make visitors believe that the survey is legitimate and extremely easy to complete. Once done, users will be presented with fake Facebook comments, claiming that iPhone, or another gift, was actually received after the survey was completed.
Finally, users will be asked to choose a prize and then directed to a payment page, which claims that users only need to pay $1 in order to participate in the giveaway. In reality, malicious actors leak credit card details that might later be used for further malicious purposes, such as identity fraud. Besides, users who fall for all these Ok.message.tf virus scams might also be subscribed to suspicious service, and credit cards would be charged automatically until the service is canceled.
In other words, stay away from Ok.message.tf phishing scams and its push notifications, as you could be the next victim of fraud.
Avoid online fraud schemes by being attentive
Without a doubt, the internet is a much safer place in comparison to what it was 20 years ago. Industry giants such as Microsoft or Google are always trying to improve the security of the worldwide web by implementing fraud prevention mechanisms. Unfortunately, due to the large volume of fraudulent websites, containing all scam websites, is not quite possible. Due to this, thousands of users fall for scams and end up losing millions of dollars yearly.
Thus, you should always rely on your own experiences and security tips when dealing with suspicious online content. There are several different techniques that crooks implement. Some of the most common ones are:
- Fake Flash Player updates are the leading cause of malware infections among Mac users.[2] The plugin is so embedded within users' minds that they instantaneously associate it with something legitimate. All crooks have to do in to scam users create a lookalike site and name the executable as Flash_update.exe, or something similar. Users then download and install malware on their machines without suspecting anything.
- Push notifications. This legitimate web browser feature has been long adopted by cybercriminals in order to deliver malicious links to users' desktops. To make it successful, scammers trick users into pressing the “Allow” button and, since many are unaware where these notifications are coming from, they often struggle with their elimination.
- Freeware bundles. It is not a secret that almost every third-party website bundles software.[3] Hence, to avoid potentially unwanted programs, users should always pick Advanced/Custom settings instead of Recommended/Quick ones, decline all the deals or offers on the way, and remove ticks from checkboxes.

Get rid of Ok.message.tf notifications and check your system for infections
To make one thing clear: if you have noticed the so-called Ok.message.tf virus showing you notifications, it does not mean that your computer is actually infected with something malicious. Since the link delivery is performed via the web browser, the intrusive popups can be explained by permission (that you granted after being tricked into doing so) to deliver notifications instead of an actual infection. The biggest problem is that most users are unaware of how to remove the annoying Ok.message.tf ads for good.
Luckily, Ok.message.tf removal can be performed very easily, as all you have to do is block the website from sending you notifications. Here is how to do it on all major browsers:
Google Chrome
- Click Menu > Settings > Advanced
- Go to Site Settings > Notifications
- Check the Allow section and find the unwanted URL
- Pick More Actions and select Block
Mozilla Firefox:
- Go to Menu > Options
- Select Privacy & Security > Notifications > Settings
- Find the unwanted address and pick Block from the drop-down menu
- Save Changes
MS Edge (Chromium)
- Go to Menu > Settings
- Select Site permissions
- Pick Notifications
- Find the website address, and click More actions
- Pick Block.
Even if your notifications and ad problem is gone after this, you should still perform system checks in order to ensure that no malware or other PUPs are present on it. You can either perform a full system scan with anti-malware for a quick solution or look for unwanted apps manually – we provide the instructions below.
Uninstall from Windows
Uninstall from Windows 10/8:
- Type Control Panel into the Windows search box and open the result.
- Under Programs, select Uninstall a program.

Uninstall from Windows 7/XP:
- Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.

Remove the unwanted program:
- In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
- If User Account Control appears, click Yes to confirm, then complete the removal.

Delete from macOS
Remove the unwanted application:
- From the menu bar, select Go > Applications.
- In the Applications folder, look for any suspicious entries, then drag them to Trash (or right-click and pick Move to Trash).

Delete leftover files and folders:
- Select Go > Go to Folder.
- Enter /Library/Application Support and remove any suspicious folders related to the unwanted program.
- Repeat the same check in the /Library/LaunchAgents and /Library/LaunchDaemons folders, deleting any suspicious entries.

- Finally, empty the Trash to permanently remove the leftovers.
Reset Internet Explorer
Remove dangerous add-ons:
- Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
- Pick Manage Add-ons.
- You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.

Change your homepage if it was altered:
- Open IE and click on the Gear icon.
- Select Internet Options.
- In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
- Click Apply and then select OK.

Delete temporary files:
- Press on the Gear icon and select Internet Options.
- Under Browsing history, click Delete...
- Select relevant fields and press Delete.

Reset Internet Explorer:
- Click on Gear icon > Internet options and select Advanced tab.
- Select Reset.
- In the new window, check Delete personal settings and select Reset.

Remove from Microsoft Edge
Delete unwanted extensions from MS Edge:
- Select Menu (three horizontal dots at the top-right of the browser window) and pick Extensions.
- From the list, pick the extension and click on the Gear icon.
- Click Remove.

Clear cookies and other browser data:
- Click on the Menu (three horizontal dots at the top-right of the browser window) and select Settings > Privacy, search, and services..
- Under Clear browsing data, pick Choose what to clear.
- Select Cookies and other site data and Cached images and files. (apart from passwords, although you might want to include Media licenses as well, if applicable) and click on Clear.

Restore new tab and homepage settings:
- Click the menu icon and choose Settings.
- Then find On startup section.
- Click Remove next to any suspicious startup page.
Reset MS Edge if the above steps did not work:
- Press on Ctrl + Shift + Esc to open Task Manager.
- Click on More details arrow at the bottom of the window.
- Select Details tab.
- Now scroll down and locate every entry with Microsoft Edge name in it. Right-click on each of them and select End Task to stop MS Edge from running.

Instructions for Chromium-based Edge
Delete extensions from MS Edge (Chromium):
- Open Edge and click select Settings > Extensions.
- Delete unwanted extensions by clicking Remove.

Clear cache and site data:
- Click on Menu and go to Settings.
- Select Privacy, search and services.
- Under Clear browsing data, pick Choose what to clear.
- Under Time range, pick All time.
- Select Clear now.

Reset Chromium-based MS Edge:
- Click on Menu and select Settings.
- On the left side, pick Reset settings.
- Select Restore settings to their default values.
- Confirm with Reset.
- This will disable extensions and reset startup pages but will not delete bookmarks, saved passwords, or browsing history.

Remove from Mozilla Firefox (FF)
Remove dangerous extensions:
- Open Mozilla Firefox browser and click on the Menu (three horizontal lines at the top-right of the window).
- Select Add-ons.
- In here, select the unwanted extension and click Remove.

Reset the homepage:
- Click three horizontal lines at the top right corner to open the menu.
- Choose Settings.
- Under Home, set your preferred homepage and new tab settings.
Clear cookies and site data:
- Click Menu and pick Settings.
- Go to Privacy & Security section.
- Scroll down to locate Cookies and Site Data.
- Click on Clear Data...
- Select Cookies and Site Data and Temporary cached files and pages, then click Clear.

Reset Mozilla Firefox
If clearing the browser as explained above did not help, reset Mozilla Firefox:
- Open Mozilla Firefox browser and click the Menu.
- Go to Help and then choose Troubleshooting Information.

- Under Give Firefox a tune up section, click on Refresh Firefox...
- Once the pop-up shows up, confirm the action by pressing on Refresh Firefox.

Remove from Google Chrome
Delete malicious extensions from Google Chrome:
- Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
- In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.

Clear cache and web data from Chrome:
- Click on Menu and pick Settings.
- Under Privacy and security, select Clear browsing data.
- Select Browsing history, Cookies and other site data, as well as Cached images and files.
- Click Clear data.

Change your homepage:
- Click menu and choose Settings.
- Look for a suspicious site in the On startup section.
- Click on Open a specific or set of pages and click on three dots to find the Remove option.
Reset Google Chrome:
If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:
- Click on Menu and select Settings.
- In the Settings, scroll down and click Advanced.
- Scroll down and locate Reset and clean up section.
- Now click Restore settings to their original defaults.
- Confirm with Reset settings.

Delete from Safari
Remove dangerous extensions:
- Open Safari, click Safari in the menu at the top-left of the screen, and select Preferences.
- Go to the Extensions tab, look for any suspicious entries, and click Uninstall to remove them.

Clear history and website data:
- Click Safari in the menu and pick Clear History.
- Set Clear to all history and confirm with Clear History.

Reset Safari:
- Click Safari in the menu and select Preferences > Advanced.
- Enable Show Develop menu in menu bar.
- From the menu bar, click Develop and select Empty Caches.

Did this guide help?
Be the first to comment