[sloshnmosh]

Just say No to push notifications!

There is a huge problem with spammy push notifications that trick users into accepting push notifications by using fake media players and fake CAPTHAs that if accepted will push all manner of SPAM on victims devices that say they have multiple viruses that pull up Google play store app to some bogus Cleaner/antivirus apps.

The push notifications are hosted on Cloudfront using AdMaven and AdFly and AppNexxus.

I have been trying to report these criminals for a couple of years now with no luck.

Cloudfront refuses to take down the script that AdMaven uses and AdMaven, AdFly, AppNexxus and Proppelerads all ignore multiple attempts to contact.

[jeroenhd]

If you find these in the wild, your best bet may be to report them to Google's Safe Browsing service (and probably Microsoft's one as well). CloudFront doesn't need to take action if the specific subdomain gets flagged for malicious content. These lists actually have an incentive to block malicious sites, unlike hosters like Cloudfront/AdAnythingReally that want to be involved as little as possible. The more of their domains get reported, the more screwed these hosts are, because at some point their actual business will start to get affected.

You can report malicious websites through Firefox (menu > help) or through this link: https://safebrowsing.google.com/safebrowsing/report_badware/... Microsoft's report page can be found here: https://www.microsoft.com/en-us/wdsi/support/report-unsafe-s...