Ok.message.tf ads: what it is and how to remove it

Ok.message.tf is a malicious website that users might encounter on Google Chrome, Mozilla Firefox, MS Edge, Safari, or another web browser. The site incorporates a variety of scams - attempts to make users subscribe to intrusive browser notifications, shows visitors fake giveaways, and attempts to make them submit their credit card details.

Facts checked October 6, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.

Automatic

Get a free scan and check if your PC is infected.

Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.

A quick scan confirms that the shopgirlmtl.com notifications did not lead to anything being installed.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.

Do it yourself · free Remove Ok.message.tf ads yourself 2 steps, about 6 minutes, no software needed.

Google ChromeMicrosoft EdgeMozilla FirefoxSafari (Mac)

Ok.message.tf: ok message tf push notification virus
Ok.message.tf as our 2020 report showed it.

Ok.message.tf ads: summary

DistributionWebsite authors use various tricks to make users enable notifications. In particular, the injection of popups begins after the "Allow" button is pressed
NameOk.message.tf
TypePush notification virus, scam, ads, redirects
IP address104.27.177.123
SymptomsUsers start seeing popups on their desktops at any time when the machine is turned on
DangersClicking on links that are embedded within the notification prompt, exploring the sites these links bring to or downloading files can be particularly dangerous – users can get infected with malware, suffer from financial losses or privacy issues
Removal

Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged.

Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free.
Show 9 more facts
Detection namesNo Microsoft detection name is known
DamageNot recorded in the old report
Evidence4 write-ups by security sites; details still limited
Domainsshopgirlmtl.com
Ads shown asDesktop notifications
BrowsersChrome, Edge and Firefox
Installed on the PCNothing; a browser notification permission only
First seen28 September 2020
Facts checked6 October 2026

What the Ok.message.tf ads ads look like

notification spam from a website

Click "Allow" to confirm that you are not a robot!

Ok.message.tf: ok message tf push notification virus
The message as our 2020 report captured it.

Is Ok.message.tf ads dangerous?

From our report of Sep 2020 · not reviewed since

Ok.message.tf - malicious website that attempts to scam you into providing your credit card details

Ok.message.tf is a malicious website that users might encounter on Google Chrome, Mozilla Firefox, MS Edge, Safari, or another web browser.

The site incorporates a variety of scams - attempts to make users subscribe to intrusive browser notifications, shows visitors fake giveaways, and attempts to make them submit their credit card details. As evident, the website should not be interacted with, resulting in monetary losses, malware infections, or personal data theft.

While some users might visit Ok.message.tf accidentally, frequent redirects and an increased amount of advertisements might indicate that the system is infected with adware or another malicious program. These ad-supported apps typically get installed behind users' backs when they download freeware from third-party websites.

Ok.message.tf is one of the thousands of websites created each day in an attempt to scam users in various ways - other examples include Shopgirlmtl.com, Gdimmunical.club, Yishowever.club, and many others. This particular site immediately shows a fake message that asks users to enable notifications. Upon entry, they see an image which includes a robot and a man, with the following text:

This method is chosen because it is extremely effective - most of the internet users had to deal with the robot checks before, as websites employ protection measures in order to prevent unsolicited DDoS attacks (when a website or service is spammed with never-ending traffic, overwhelming and crashing it in the process).

This social engineering trick is just one of many that the developers of malicious websites use to make users click the "Allow" button and enable notifications to be shown.

Unfortunately, those who fall for the trick will soon see intrusive Ok.message.tf popups that show up directly on their screens, regardless if Google Chrome or another web browser is in operation or not. These notifications would often include various scam messages, such as get-rich-quick schemes, tech support scams, and much more. Thus, it is important to remove Ok.message.tf activity before it manages to cause some serious damage.

If you clicked on the promoted links or downloaded files, you must check your machine for malware with powerful security programs, such as or .

If you did not click on any links, Ok.message.tf removal can be performed by simply preventing the site from sending you notifications. You can achieve that by accessing your web browser's settings section - check the details below.

Those who will stay on the Ok.message.tf long or click on random places within the page will fake further redirects. For example, during our tests, we were redirected to well-known scam schemes:

If you follow up with these survey scams, you will be asked to answer a few simple questions that have no wrong answers. The goal of the scam creators is to make visitors believe that the survey is legitimate and extremely easy to complete. Once done, users will be presented with fake Facebook comments, claiming that iPhone, or another gift, was actually received after the survey was completed.

Finally, users will be asked to choose a prize and then directed to a payment page, which claims that users only need to pay $1 in order to participate in the giveaway.

In reality, malicious actors leak credit card details that might later be used for further malicious purposes, such as identity fraud. Besides, users who fall for all these Ok.message.tf virus scams might also be subscribed to suspicious service, and credit cards would be charged automatically until the service is canceled.

In other words, stay away from Ok.message.tf phishing scams and its push notifications, as you could be the next victim of fraud.

  • 5-billionth search scam
  • Browser Opinion Survey scam
  • Chrome search contest 2020, and others.
Ok.message.tf: ok message tf scam hoax
The message as our 2020 report captured it.

From our report of Sep 2020 · not reviewed since

Avoid online fraud schemes by being attentive

Without a doubt, the internet is a much safer place in comparison to what it was 20 years ago.

Industry giants such as Microsoft or Google are always trying to improve the security of the worldwide web by implementing fraud prevention mechanisms. Unfortunately, due to the large volume of fraudulent websites, containing all scam websites, is not quite possible. Due to this, thousands of users fall for scams and end up losing millions of dollars yearly.

Thus, you should always rely on your own experiences and security tips when dealing with suspicious online content. There are several different techniques that crooks implement. Some of the most common ones are:

  • Fake Flash Player updates are the leading cause of malware infections among Mac users. The plugin is so embedded within users' minds that they instantaneously associate it with something legitimate. All crooks have to do in to scam users create a lookalike site and name the executable as Flash_update.exe, or something similar. Users then download and install malware on their machines without suspecting anything.
  • Push notifications. This legitimate web browser feature has been long adopted by cybercriminals in order to deliver malicious links to users' desktops. To make it successful, scammers trick users into pressing the "Allow" button and, since many are unaware where these notifications are coming from, they often struggle with their elimination.
  • Freeware bundles. It is not a secret that almost every third-party website bundles software. Hence, to avoid potentially unwanted programs, users should always pick Advanced/Custom settings instead of Recommended/Quick ones, decline all the deals or offers on the way, and remove ticks from checkboxes.
Ok.message.tf: ok message tf adware redirect
The message as our 2020 report captured it.

Check your browser and PC

  • Address: shopgirlmtl.com

How to remove Ok.message.tf ads

How to stop Ok.message.tf notifications

Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.

Nothing has to be uninstalled for the notifications themselves.

Which browser shows the ads?

  1. Step 1: Remove shopgirlmtl.com from Chrome's notification list

    Chrome keeps a list of every site you once allowed to send notifications, and shopgirlmtl.com is on it. Paste chrome://settings/content/notifications into the address bar, find shopgirlmtl.com under Allowed to send notifications, open the three-dot menu next to it and pick Remove.

    Then click Add next to Not allowed to send notifications and type shopgirlmtl.com, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.

    Chrome Settings, Notifications page with the allowed and not allowed site lists
    Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications.

    Full procedure with screenshots: Stop website notifications and pop-ups

Instructions for Google Chrome

Google Chrome
  • Click Menu > Settings > Advanced
  • Go to Site Settings > Notifications
  • Check the Allow section and find the unwanted URL
  • Pick More Actions and select Block
Remove from Google Chrome

If you are unable to remove extensions or are still receiving ads after PUP elimination, you should reset Google Chrome:

Delete malicious extensions from Google Chrome:

  1. Open Google Chrome, click on the Menu (three vertical dots at the top-right corner) and select More tools > Extensions.
  2. In the newly opened window, you will see all the installed extensions. Uninstall all suspicious extensions related to the unwanted program by clicking Remove.Remove extensions from Chrome

Clear cache and web data from Chrome:

  1. Click on Menu and pick Settings.
  2. Under Privacy and security, select Clear browsing data.
  3. Select Browsing history, Cookies and other site data, as well as Cached images and files.
  4. Click Clear data.Clear cache and web data from Chrome

Change your homepage:

  1. Click menu and choose Settings.
  2. Look for a suspicious site in the On startup section.
  3. Click on Open a specific or set of pages and click on three dots to find the Remove option.

Reset Google Chrome:

If the previous methods did not help you, reset Google Chrome to eliminate all the unwanted components:

  1. Click on Menu and select Settings.
  2. In the Settings, scroll down and click Advanced.
  3. Scroll down and locate Reset and clean up section.
  4. Now click Restore settings to their original defaults.
  5. Confirm with Reset settings.Reset Chrome 2

Then, whichever browser you use

  1. Step 2: Scan the PC if you downloaded anything from the ads

    If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.

    In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.

    Windows Security Scan options with Microsoft Defender Antivirus offline scan selected
    Windows 11: Windows Security > Virus & threat protection > Scan options.

    Full procedure with screenshots: Run a Microsoft Defender Offline scan

More removal instructions

For programs installed on the PC and older browsers. Open the one you need.

Get rid of Ok.message.tf notifications and check your system for infections

To make one thing clear: if you have noticed the so-called Ok.message.tf virus showing you notifications, it does not mean that your computer is actually infected with something malicious.

Since the link delivery is performed via the web browser, the intrusive popups can be explained by permission (that you granted after being tricked into doing so) to deliver notifications instead of an actual infection. The biggest problem is that most users are unaware of how to remove the annoying Ok.message.tf ads for good.

Luckily, Ok.message.tf removal can be performed very easily, as all you have to do is block the website from sending you notifications. Here is how to do it on all major browsers:

Uninstall from Windows

You can uninstall programs from Windows after reaching the Control Panel section:

Uninstall from Windows 10/8:

  1. Type Control Panel into the Windows search box and open the result.
  2. Under Programs, select Uninstall a program.Uninstall from Windows 10/8

Uninstall from Windows 7/XP:

  1. Click on Windows Start > Control Panel (Windows XP users should click on Add/Remove Programs).
  2. In Control Panel, select Programs > Uninstall a program.Uninstall from Windows 7/XP

Remove the unwanted program:

  1. In the Programs and Features window, look for any recently installed suspicious entries, select them, and click Uninstall.
  2. If User Account Control appears, click Yes to confirm, then complete the removal.Uninstall the unwanted program from Windows
Reset Internet Explorer

Remove dangerous add-ons:

  1. Open Internet Explorer, click on the Gear icon (IE menu) on the top-right corner of the browser
  2. Pick Manage Add-ons.
  3. You will see a Manage Add-ons window. Here, look for suspicious plugins. Click on these entries and select Disable.Remove add-ons from Internet Explorer

Change your homepage if it was altered:

  1. Open IE and click on the Gear icon.
  2. Select Internet Options.
  3. In the General tab, delete the Home page address and replace it by your preferred one (for example, Google.com).
  4. Click Apply and then select OK.Reset IE homepage

Delete temporary files:

  1. Press on the Gear icon and select Internet Options.
  2. Under Browsing history, click Delete...
  3. Select relevant fields and press Delete.Clear temporary files from Internet Explorer

Reset Internet Explorer:

  1. Click on Gear icon > Internet options and select Advanced tab.
  2. Select Reset.
  3. In the new window, check Delete personal settings and select Reset.Reset Internet Explorer

Do not let government spy on you

The government has many issues in regards to tracking users' data and spying on citizens, so you should take this into consideration and learn more about shady information gathering practices.

Avoid any unwanted government tracking or spying by going totally anonymous on the internet.

You can choose a different location when you go online and access any material you want without particular content restrictions. You can easily enjoy internet connection without any risks of being hacked by using VPN.

Control the information that can be accessed by government any other unwanted party and surf online without being spied on. Even if you are not involved in illegal activities or trust your selection of services, platforms, be suspicious for your own security and take precautionary measures by using the VPN service.

Backup files for the later use, in case of the malware attack

Computer users can suffer from data losses due to cyber infections or their own faulty doings.

Ransomware can encrypt and hold files hostage, while unforeseen power cuts might cause a loss of important documents. If you have proper up-to-date backups, you can easily recover after such an incident and get back to work. It is also equally important to update backups on a regular basis so that the newest information remains intact - you can set this process to be performed automatically.

When you have the previous version of every important document or project you can avoid frustration and breakdowns. It comes in handy when malware strikes out of nowhere. Use for the data restoration process.

Questions about Ok.message.tf ads

How do I stop notifications from shopgirlmtl.com?

Remove its permission in the browser. The bottom line of each notification names the browser, so open that browser's notification settings and look under Allowed. Remove shopgirlmtl.com and any other site you do not recognise.

In Chrome and Edge this is under the site settings for notifications; in Firefox it is under Settings, Permissions and data, Notifications. Do this in every browser profile, because each one keeps its own list.

Restart the browser and wait a few minutes. If a message still arrives, read its bottom line again: the sending address can differ from the site you remember, and that is the entry still left in the list.

The shopgirlmtl.com notification said my PC is infected. Is it true?

No. Notifications from shopgirlmtl.com are adverts written to look like system messages. A website cannot scan your files, so it has no way to know whether your PC is infected; it shows the same warning to everyone who allowed its notifications. Real Windows Security messages name Windows Security in the bottom line, not a browser and a website.

If you want to be sure, open Windows Security from the Start menu and run a quick scan there. Then remove shopgirlmtl.com from the browser's notification settings so the fake warnings stop arriving. Do not call any number or buy anything the notification or its page suggests.

Why does Ok.message.tf show me ads?

Because that is its whole purpose. Ok.message.tf is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.

They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.

Is shopgirlmtl.com safe to visit?

No. The site shopgirlmtl.com exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.

Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.

Which browser is sending the shopgirlmtl.com notifications?

Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from shopgirlmtl.com came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.

If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.

How do I know the ads come from Ok.message.tf?

Look for notifications from shopgirlmtl.com. That is the trace Ok.message.tf leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.

A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.

Will Focus or Do not disturb stop the notifications?

Only for as long as it is on. Do not disturb in Windows 11 holds back notifications from all apps, including browsers, and releases them to the notification centre later. The site still has permission and the messages still arrive.

Use the browser's notification settings to remove the site instead: once its permission is gone, it cannot send anything, whatever Windows is set to. Keep Do not disturb for what it is meant for, such as meetings, presentations and quiet hours.

Did clicking Allow install anything on my PC?

No. Allowing notifications stores a permission in the browser and nothing else. No file is downloaded and no program is added to Windows, which is also why antivirus scans find nothing. The risk comes later, from the notifications themselves: they lead to scam pages, fake updates and phishing forms.

Remove the permission in each browser where you allowed it. If you clicked a notification and downloaded something afterwards, delete that file and run a Microsoft Defender full scan and offline scan.

I clicked on one of the ads. Am I infected?

Probably not. Clicking an ad usually only opens a page, and a page cannot install programs on an up-to-date Windows PC without your help.

You are at risk only if you then downloaded and ran a file, allowed notifications, entered card or login details, or called a phone number shown on the page. Delete any download and run a full and offline scan.

Change passwords you typed, from a clean device. Call your bank if you gave card details. If you called a number or allowed remote access, see the next question.

Will Fortect remove Ok.message.tf?

No program removes Ok.message.tf itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.

What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.

If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.

Sources

  1. 9To5Mac: PSA: There's a new fake Flash Player installer for Macs, and it's nastier than usual (read October 6, 2026)
  2. How-To Geek: Yes, Every Freeware Download Site is Serving Crapware (Here's the Proof) (read October 6, 2026)
  3. Google Chrome Help: Use notifications to get alerts (no longer online) (read October 6, 2026)
  4. FTC: How to recognize, remove and avoid malware (read October 6, 2026)
  5. Microsoft Learn: Microsoft Defender Offline (read October 6, 2026)

More removal guides

Remove Taylor Swift FREE $1000 VISA Gift Card Giveaway scam

No, Taylor Swift is not giving away FREE $1,000 VISA Gift Cards online Celebrity endorsements are being used more and more often in online frauds to trick people; one particularlyVirusesMedium riskUgnius Kiguolis ·

Remove Savethevideo.com

Savethevideo.com - an untrustworthy video converter and YouTube video downloader that uses unsafe advertising networks Savethevideo.com is one of thousands of websites that allows users to convert, view, and downloadVirusesMedium riskAlice Woods ·

Remove Xresolver

Xresolver - a website that provides Xbox players' IPs based on a Gamertag, that might result in third party illegal activities against them Xresolver is a website that uses publiclyVirusesMedium riskOlivia Morelli ·

Remove Thepiratebay.org ads

Thepiratebay.org is a torrent streaming website that has been prohibited in Netherlands, Sweden, and other countries for violations Thepiratebay.org, also dubbed as The Pirate Bay or TPB, is a SwedishVirusesMedium riskJulie Splinters ·

Questions and experiences: Ok.message.tf ads

Still seeing it, or found something we did not cover? Ask here: members and our editors answer. Reading is open; writing needs a free account.

0 comments

…

5,607 members already hereReading, writing, commenting and voting. 0 verified · 332 joined this year