Shaxon.shop ads: what it is and how to remove it
Shaxon.shop is a bogus website created by crooks who want to monetize user activity. The page tries to convince people that their computer is infected by multiple viruses.
Facts checked October 7, 2026. Removal steps tested on Windows 11 (26H2) and checked against Microsoft's and the browser makers' current documentation. Sections marked as our earlier report are the original text: they describe the threat as it was then and have not been reviewed since. The 2026 status, the removal steps and the questions are current.
Automatic
Get a free scan and check if your PC is infected.
Fortect finds malware, unwanted programs and the Windows damage they leave behind, and repairs it in one pass.
A quick scan confirms that the shaxon.shop notifications did not lead to anything being installed.
Do it yourself · free Remove Shaxon.shop ads yourself 2 steps, about 6 minutes, no software needed.
Shaxon.shop ads: summary
| Distribution | Software bundles, shady websites, deceptive ads |
|---|---|
| NAME | Shaxon.shop |
| TYPE | Push notification spam, adware |
| SYMPTOMS | The site shows a message which claims that the antivirus subscription has expired and needs to be updated; also asks to enable notifications |
| DANGERS | People can get spammed with pop-ups that say their system is infected and install PUPs or malware unknowingly |
| Detection names | No Microsoft detection name is known |
| Removal | Scan the PC with security software to find and remove the malware and anything installed with it. Fortect scans Windows for malware and repairs the system files and settings it damaged. Remove it nowTo use the full-featured product, you have to purchase a license for Fortect. The scan is free. |
Show 11 more facts
| Damage | Not recorded in the old report |
|---|---|
| Name | Shaxon.shop |
| Type | Push-notification spam site |
| Symptoms | Notification spam from a website |
| Evidence | 5 write-ups by security sites; details still limited |
| Domains | shaxon.shop |
| Ads shown as | Desktop notifications |
| Browsers | Chrome, Edge and Firefox |
| Installed on the PC | Nothing; a browser notification permission only |
| First seen | 29 July 2022 |
| Facts checked | 7 October 2026 |
What the Shaxon.shop ads ads look like
Your PC is infected with 5 viruses!
Is Shaxon.shop ads dangerous?
From our report of Jul 2022 · not reviewed since
Shaxon.shop is a fake security alert manufactured by crooks for financial gain
Shaxon.shop is a bogus website created by crooks who want to monetize user activity.
The page tries to convince people that their computer is infected by multiple viruses. It shows a deceptive and intimidating message:
The site can also start spamming users with annoying pop-up ads. Crooks may use rogue advertising networks that place ads leading to dangerous websites.
People can end up on scam pages that try to trick them into providing personal information, downloading PUPs (potentially unwanted programs), and even malware.
From our report of Jul 2022 · not reviewed since
Disable push notifications
Some users report that after an encounter with Shaxon.shop, they have started receiving push notification spam.
You should block the site permissions and you can do that by following our step-by-step guide:
Google Chrome (desktop):
Google Chrome (Android):
MS Edge (Chromium):
- Open Google Chrome browser and go to Menu > Settings.
- Locate the Privacy and security section and pick Site Settings > Notifications.
- Look at the Allow section and look for a suspicious URL.
- Click the three vertical dots next to it and pick Block. This should remove unwanted notifications from Google Chrome.
- Open Google Chrome and tap on Settings (three vertical dots).
- Select Notifications.
- Locate the unwanted URL and toggle the button to the left (Off setting).
- Open Mozilla Firefox and go to Menu > Options.
- Click on Privacy & Security section.
- Under Permissions, you should be able to see Notifications. Click Settings button next to it.
- In the Settings – Notification Permissions window, click on the drop-down menu by the URL in question.
- Select Block and then click on Save Changes. This should remove unwanted notifications from Mozilla Firefox.
- Click on Safari > Preferences...
- Go to Websites tab and, under General, select Notifications.
- Select the web address in question, click the drop-down menu and select Deny.
- Open Microsoft Edge, and click the Settings and more button (three horizontal dots) at the top-right of the window.
- Select Settings and then go to Advanced.
- Under Website permissions, pick Manage permissions and select the URL in question.
- Toggle the switch to the left to turn notifications off on Microsoft Edge.
- Open Microsoft Edge, and go to Settings.
- Select Site permissions.
- Go to Notifications on the right.
- Under Allow, you will find the unwanted entry.
- Click on More actions and select Block.
From our report of Jul 2022 · not reviewed since
Protect your privacy
Almost every website you visit uses cookies to track your browsing activity, like the pages you visit, links you click on, and purchases you make.
Your browsing data might be exposed or sold to advertising networks that use it to target you with ads even more.
It can automatically remove cookies and cache. Besides, this powerful software can fix most system errors, corrupted files, and registry issues which is especially helpful after a virus infection.
From our report of Jul 2022 · not reviewed since
Freeware installations
It is mostly spread on freeware distribution sites.
They include additional programs in the installers and do not disclose it clearly on their pages.
Many people rush through the process and do not notice the bundled software. If you want to keep the risk of PUAs sneaking into your system to a minimum, always choose the "Custom" or "Advanced" installation methods, read the Terms of Use and Privacy Policy to find out how your data will be used, etc. Inspect the file list and uncheck the boxes next to unnecessary programs.
From our report of Jul 2022 · not reviewed since
Scan your machine with anti-malware tools
It should detect most suspicious apps and remove them successfully.
Of course, you can also remove a PUP manually, but it is unknown which particular app could be causing annoying behavior, as crooks disguise them as "handy" tools.
Manual uninstallation can also leave some traces of the program behind which could result in the renewal of the infection.
To fully remove an unwanted app, you need to access Application Support, LaunchAgents, and LaunchDaemons folders and delete relevant files:
- Enter Control Panel into Windows search box and hit Enter or click on the search result.
- Under Programs, select Uninstall a program.
- From the list, find the entry of the suspicious program.
- Right-click on the application and select Uninstall.
- If User Account Control shows up, click Yes.
- Wait till uninstallation process is complete and click OK.
- Click on Windows Start > Control Panel located on the right pane (if you are Windows XP user, click on Add/Remove Programs).
- In Control Panel, select Programs > Uninstall a program.
- Pick the unwanted application by clicking on it once.
- At the top, click Uninstall/Change.
- In the confirmation prompt, pick Yes.
- Click OK once the removal process is finished.
- From the menu bar, select Go > Applications.
- In the Applications folder, look for all related entries.
- Click on the app and drag it to Trash (or right-click and pick Move to Trash)
- Select Go > Go to Folder.
- Enter /Library/Application Support and click Go or press Enter.
- In the Application Support folder, look for any dubious entries and then delete them.
- Now enter /Library/LaunchAgents and /Library/LaunchDaemons folders the same way and terminate all the related .plist files.
From our report of Jul 2022 · not reviewed since
More from our earlier report on Shaxon.shop
- It is made to look like a security alert from Norton, however, they have nothing to do with this fraudulent campaign.
- Your Norton Subscription Has Expired!
- Renew now to keep your pc protected.
- If your PC is unprotected, it is at risk for viruses and other malware.
- The main goal of the site is to generate revenue, so crooks try to redirect users to the official Norton website to earn money from the affiliate program.
- To disable the pop-ups go to your browser settings; scanning your system with anti-malware tools is recommended
- Some ads also look like alerts from Norton, and some may be promoting fake antivirus deals, surveys, giveaways, adult sites, and scams.
How Shaxon.shop ads got into your browser
From our report of Jul 2022 · not reviewed since
Deceptive sites rarely appear in the search results.
Usually, they hide on other shady pages that are unregulated. For example, illegal streaming sites are full of sneaky redirects and misleading ads. They often display fake "Download" and "Play" buttons that can redirect users to scam pages.
It is best to only visit websites that you know and trust. Do not click on random links and ads. Use legitimate streaming services, like Netflix or Hulu - they only require a small monthly subscription fee and users are able to watch as much content as they want.
Check your browser and PC
- Address:
shaxon.shop
How to remove Shaxon.shop ads
How to stop Shaxon.shop notifications
Do this in every browser you use, and in every profile inside it: each keeps its own list of sites allowed to send notifications.
Nothing has to be uninstalled for the notifications themselves.
Which browser shows the ads?
Step 1: Remove shaxon.shop from Chrome's notification list
Chrome keeps a list of every site you once allowed to send notifications, and
shaxon.shopis on it. Pastechrome://settings/content/notificationsinto the address bar, find shaxon.shop under Allowed to send notifications, open the three-dot menu next to it and pick Remove.Then click Add next to Not allowed to send notifications and type shaxon.shop, so the site cannot ask a second time. Repeat it in every Chrome profile you use on Windows 11 or Windows 10, since each profile has its own list.
Chrome on Windows 11: Settings > Privacy and security > Site settings > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove shaxon.shop from Edge's notification list
Open Settings and more (the three dots) > Settings > Privacy, search, and services > Site permissions > All permissions > Notifications. Remove
shaxon.shopfrom the Allowed list, then click Add site next to Not allowed to send notifications and enter it there.Edge is built into both Windows 11 and Windows 10, so check it even if you normally use another browser. If the notifications came with the Edge logo, this is the browser that holds the permission.
Edge on Windows 11: Site permissions > All permissions > Notifications. Full procedure with screenshots: Stop website notifications and pop-ups
Step 1: Remove shaxon.shop from Firefox's notification permissions
Open the menu (three lines) > Settings and click Permissions and data in the left list, then Notifications. Select
shaxon.shop, click Remove Website and confirm with Save Changes.In versions older than Firefox 152 the same list sits under Privacy & Security, behind a Settings button next to Notifications. Firefox shows these notifications only while it is running, on Windows 11 and Windows 10 alike.
Firefox on Windows 11: the Notification Permissions window. Full procedure with screenshots: Stop website notifications and pop-ups
Then, whichever browser you use
Step 2: Scan the PC if you downloaded anything from the ads
If you only saw the notifications and clicked nothing, you can stop before this step. If a notification led you to download or run something, delete that file, then scan Windows.
In Windows Security > Virus & threat protection > Scan options, run a Full scan, then choose Microsoft Defender Antivirus (offline scan) and Scan now. The offline scan restarts the PC and takes about 15 minutes on Windows 11 and Windows 10.
Windows 11: Windows Security > Virus & threat protection > Scan options. Full procedure with screenshots: Run a Microsoft Defender Offline scan
Access your website securely from any location
When you work on the domain, site, blog, or different project that requires constant management, content creation, or coding, you may need to connect to the server and content management service more often. The best solution for creating a tighter network could be a dedicated/fixed IP address.
If you make your IP address static and set to your device, you can connect to the CMS from any location and do not create any additional issues for the server or network manager that needs to monitor connections and activities. VPN software providers like can help you with such settings and offer the option to control the online reputation and manage projects easily from any part of the world.
Recover files after data-affecting malware attacks
While much of the data can be accidentally deleted due to various reasons, malware is one of the main culprits that can cause loss of pictures, documents, videos, and other important files.
More serious malware infections lead to significant data loss when your documents, system files, and images get encrypted. In particular, ransomware is is a type of malware that focuses on such functions, so your files become useless without an ability to access them.
Even though there is little to no possibility to recover after file-locking threats, some applications have features for data recovery in the system. In some cases, can also help to recover at least some portion of your data after data-locking virus infection or general cyber infection.
Questions about Shaxon.shop ads
shaxon.shop keeps sending notifications. Is it a virus?
No. Notifications from shaxon.shop come from a permission stored in the browser, not from a program installed in Windows. Someone clicked Allow on a prompt from that site, usually without realising what it meant, and the site now sends ads through the browser's notification system.
Antivirus scans often find nothing because there is nothing to find on the disk. Removing shaxon.shop from the browser's list of allowed sites stops the messages for good. A scan is still useful if you clicked a notification and downloaded or ran something from the page it opened, because those downloads can be unwanted programs.
Did a notification from shaxon.shop infect my computer?
A notification cannot infect a PC. It is a short text with a link that the browser displays. Clicking it opens a page, and a page cannot install anything unless you agree to a download and run the file.
So the answer depends on what you did after clicking. Looked and closed: you are fine. Downloaded but did not open: delete the file.
Opened a downloaded file: uninstall what it added and scan the PC. Typed card or login details: contact the bank and change the password. In every case, remove shaxon.shop from the browser's allowed notifications so the messages stop.
Why does Shaxon.shop show me ads?
Because that is its whole purpose. Shaxon.shop is a push-notification spam site, and its operators are paid for every ad it displays and every click it gets. In this case the ads take the form of desktop notifications.
They are chosen by ad networks that accept almost any advertiser, which is why so many look like warnings or prizes. The ads are not a sign that your PC is broken or infected with something worse; they are a sign that something on it, or in the browser, has permission to advertise. Removing that permission or program stops them.
Is shaxon.shop safe to visit?
No. The site shaxon.shop exists to push visitors towards ads, and the pages it leads to include fake virus warnings, fake updates, prize scams and notification prompts. Visiting it once does not infect an up-to-date PC, but anything you click or download there is a gamble.
Do not enter personal details, do not allow notifications and do not call phone numbers it shows. If it opens by itself, close the tab and check the browser's extensions and notification permissions. Blocking the single domain helps little, because the operators register new names regularly.
Which browser is sending the shaxon.shop notifications?
Each notification shows the name of the browser and the site in its small print. In the cases we saw, the messages from shaxon.shop came through Chrome, Edge and Firefox. Permissions are stored per browser and per profile, so removing the site in one browser does not affect another.
If you use several Chrome or Edge profiles, check each one. If you sync the browser with an account, remove the permission while signed in, otherwise another computer may still hold it and keep receiving the same messages.
How do I know the ads come from Shaxon.shop?
Look for notifications from shaxon.shop. That is the trace Shaxon.shop leaves, and it shows up as desktop notifications. Ads that appear on every site, including ones that never carried ads before, point to something on your PC or in the browser rather than to the sites themselves.
A quick test is a private window, where extensions are off by default: if the ads disappear there, an extension is responsible. If they appear even with the browser closed, the source is a notification permission or a program in Windows.
Did clicking Allow install anything on my PC?
No. Allowing notifications stores a permission in the browser and nothing else. No file is downloaded and no program is added to Windows, which is also why antivirus scans find nothing. The risk comes later, from the notifications themselves: they lead to scam pages, fake updates and phishing forms.
Remove the permission in each browser where you allowed it. If you clicked a notification and downloaded something afterwards, delete that file and run a Microsoft Defender full scan and offline scan.
An ad showed a phone number and I called it. What now?
The number belongs to scammers, not to Microsoft or an antivirus company. If you only talked, hang up and do not call back. If you let them connect to the PC, disconnect it from the internet, uninstall the remote access program they used, such as AnyDesk, TeamViewer, ScreenConnect or UltraViewer, and run a full and offline scan.
If you paid or gave bank details, call your bank at once on the number printed on your card. Change any passwords you typed while they were connected, and report the call.
I clicked on one of the ads. Am I infected?
Probably not. Clicking an ad usually only opens a page, and a page cannot install programs on an up-to-date Windows PC without your help.
You are at risk only if you then downloaded and ran a file, allowed notifications, entered card or login details, or called a phone number shown on the page. Delete any download and run a full and offline scan.
Change passwords you typed, from a clean device. Call your bank if you gave card details. If you called a number or allowed remote access, see the next question.
Will Fortect remove Shaxon.shop?
No program removes Shaxon.shop itself, because there is nothing on the PC to remove: the notifications come through a permission saved in the browser, and only the browser's settings take it away, as the steps above show.
What Fortect can do is check the rest of Windows. Its free scan looks for malware, unwanted programs and damaged system files, which is useful if you clicked the ads, downloaded something from the pages they opened, or are not sure what else changed on the PC.
If the scan finds nothing and the notifications stopped after you removed the permission, this problem is solved. Use Microsoft Defender as a second opinion whenever you have downloaded files from pages like these.
Sources
- Howtogeek: PUPs Explained: What is a "Potentially Unwanted Program"? (read October 7, 2026)
- Makeuseof: Why Should You Avoid Illegal Streaming Sites? (read October 7, 2026)
- Google Chrome Help: Use notifications to get alerts (no longer online) (read October 7, 2026)
- FTC: How to recognize, remove and avoid malware (read October 7, 2026)
- Microsoft Learn: Microsoft Defender Offline (read October 7, 2026)