How to remove Orkhovdimin.xyz ads

Orkhovdimin.xyz ads can show links to malicious websites

Orkhovdimin.xyz is a fake website you may come across whenever you browse websites of dubious content and click on a booby-trapped link. Alternatively, adware secretly installed on your system could also be the reason why you see phishing^[1] content online, as this software is known to be associated with insecure advertising networks.

Most commonly though, users see this web address whenever they notice suspicious Orkhovdimin.xyz pop-ups showing up on their desktops. While many assume they come due to some kind of infection, it is not the case. For the activity to take place, the following conditions should be met:

• A browser should be running (it doesn't matter if actively used or idling).
• The user should have clicked the “Allow” button within the notification prompt upon entering the site sometime earlier.

Many people don't remember allowing push notifications from the site because phishing techniques are used to convince them to do it – misleading messages are shown, which completely misrepresent what the push notification prompt is for and what it results in. Also, the Orkhovdimin.xyz ads would not show up until sometime later if the “Allow” button is pressed, so many users forget about the ordeal.

Scam operations

It is obvious that users would not accept push notifications from malicious websites intentionally. Crooks behind the scam scheme are well aware of that, so they came up with the scheme that would help them reach their goals – they create fake websites such as Orkhovdimin.xyz, which are designed to trick people into believing that pressing the “Allow” button is a correct step to take.

For that, they employ various social engineering^[2] techniques. For example, they might tell that the video can't be played because the browser doesn't permit it, they need to confirm their age, or they need to confirm they are human. Most people previously encountered these requests under different circumstances, hence they think they are legit.

Here are a few examples you may encounter on a push notification scam site:

• Click Allow to start downloading
• If you are 18+, click Allow
• Click “Allow” to win the prize and get it in our shop!
• Press “Allow” to watch the video
• Click Allow to confirm that you are not a robot

This tactic is used by similar push notification scam websites, including Freecaptcha.top, Captchatest.top, Zcmkdn.com, Updatenotification.xyz, and many others. In fact, all these fake sites often share the same images and messages – they are identical. The best thing to do after encountering one of these messages is to close down the browser immediately.

If you have allowed the website to show push notifications, they can and will appear later and keep returning until you stop it. For that, you have to perform the actions described in the next section.

Removal of malicious push notifications

It is impossible to remove the push notification feature, as it is a legitimate part of any modern web browser and operates as an API (Application Programming Interface). It allows any website to deliver information directly to users' monitors, regardless of which website they are currently browsing or even if they aren't actively using the browser.

While it may seem that Orkhovdimin.xyz ads could be caused by a virus, it is not the case. In order to stop them, all you have to do is access browser settings and block the website's URL as follows:

Google Chrome (desktop)

1. Open the Google Chrome browser and go to Menu > Settings.
2. Scroll down and click on Advanced.
3. Locate the Privacy and security section and pick Site Settings > Notifications.
4. Look at the Allow section and look for a suspicious URL.
5. Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.

Google Chrome (Android)

• Open Google Chrome and tap on Settings (three vertical dots).
• Select Notifications.
• Scroll down to the Sites section.
• Locate the unwanted URL and toggle the button to the left (Off setting).

Mozilla Firefox

1. Open Mozilla Firefox and go to Menu > Options.
2. Click on Privacy & Security section.
3. Under Permissions, you should be able to see Notifications. Click the Settings button next to it.
4. In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
5. Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.

MS Edge (Chromium)

1. Open Microsoft Edge, and go to Settings.
2. Select Site permissions.
3. Go to Notifications on the right.
4. Under Allow, you will find the unwanted entry.
5. Click on More actions and select Block.

Safari

1. Click on Safari > Preferences…
2. Go to the Websites tab and, under General, select Notifications.
3. Select the web address in question, click the drop-down menu and select Deny.

Internet Explorer

1. Open Internet Explorer, and click on the Gear icon at the window's top-right.
2. Select Internet options and go to the Privacy tab.
3. In the Pop-up Blocker section, click on Settings.
4. Locate the web address in question under Allowed sites and pick Remove.

Make adware checks

We recommend checking the system for adware^[3] and other infections. While it is likely that you ended up on Orkhovdimin.xyz after clicking a malicious link somewhere else, it could be that adware is causing this behavior. Since its developers commonly use bundling and similar deceptive distribution techniques, one might not even know about the infection. Therefore, it is better to be safe than sorry.

Scanning the system with SpyHunterCombo Cleaner, MalwarebytesMalwarebytes, or another powerful anti-malware is the easiest way to ensure all the adware and malware is found and eliminated effectively. After the elimination process is finished, we also recommend checking the system with FortectIntego repair and maintenance utility – it can clean browser caches to prevent tracking by third parties and repair virus damage if such has occurred due to the infection.