ytmp3 pop-ups and notifications: why they start, and how to remove them in your browser

Why ytmp3 pop-ups appear

Two problems share the name. One is the windows and tabs that open on a converter page, usually when you click Convert or Download. The other is the messages that turn up later carrying a ytmp3 address, with no converter open. That second kind is not a virus on your machine: it is almost always a browser permission granted on that device, and you can take it back in a minute.

Malwarebytes set out the mechanism in a 2019 explainer on browser push notifications: once a site holds the permission, its messages "can be displayed outside the browser window", in some cases without the browser being open, and each one shows the domain it came from. BleepingComputer reported in 2018 that the messages advertise "unwanted extensions, fake downloads, adult sites, and giveaway scams", and that removing the subscription stops them.

Advertising-funded sites have a reason to want that permission: it is advertising space that survives the visit. TorrentFreak reported in 2023 that ytmp3.nu was operated by CreativeCode Ltd of Anguilla, that the brand had "more than 40 million monthly visits", and that it was monetised through advertising.

Vendors have named the brand, and the dates matter. MalwareTips' guide to YTMP3 pop-up ads said in February 2023 that the brand "tries to trick you into subscribing to its push notifications", and its ytmp3.cc guide from November 2022 says subscribers then see spam pop-ups with the browser closed. PCrisk's ytmp3.cc guide, updated in April 2022, says that site "uses ad networks that display dubious/untrustworthy advertisements", and its ytmp3.sh guide files that one under "Push notifications ads, Unwanted ads, Pop-up ads".

Now the honest part. Every guide we verified that names a specific ytmp3 address dates from 2022 or 2023, and the 2025 and 2026 material naming the brand comes from firms selling something. Surfshark, which sells security software, wrote in 2025 that the so-called ytmp3.cc virus "isn't even a virus in the traditional sense".

What we saw on 16 September 2026

We asked seven ytmp3 addresses for their home page with a desktop Chrome user agent, and read the first HTML response.

Read the last column narrowly. "None" means the served HTML held no reference to the OneSignal library, the PushManager API, Notification.requestPermission or a service-worker registration, and the ytmp3.ch row shows that is not the same as no push. Nor can we say the last two rows were sending anything that day: ytmp3.net's service-worker files answered 404, and ytmp3.ch's code did not say whether push was switched on.

Three of the seven served no page of their own, so the HTML we read belonged to convertytmp3.org, ytmp3.gl and mp3cow.com. On that date ytmp3.cc and convertytmp3.org answered from one A record, 88.80.22.66, which is a DNS observation and nothing more. None of it covers what an advertising layer loads after a visitor clicks Convert, which is where the write-ups above place the behaviour. Per-address notes sit on our checked list of ytmp3 sites, including ytmp3.cc and ytmp3.nu.

Stop the notifications: Chrome on Windows and Mac

The desktop list is where stale permissions hide, so start there.

1. Open Chrome's menu, then Settings, then Privacy and security, then Site Settings, then Notifications, the path Chrome's notifications help page gives.
2. Work through the list of sites allowed to send notifications. Remove any ytmp3 entry, and any address you do not use.
3. Back in Site Settings, open Pop-ups and redirects. Chrome's help pages describe finding the site under Allowed to send pop-ups and use redirects and blocking it.

Chrome may have done part of this for you: its notifications page says that "Chrome may remove notification permission from sites that you haven't visited in a while", a change Google announced in October 2025. Chrome's security team reported in August 2026 that it had cut Android notifications by "over 7 billion a day in Q1 alone".

If pop-ups continue once the list is clean, Chrome's page on unwanted ads and pop-ups treats "Pop-up ads and new tabs that won't go away" as a sign of software on the device, and sends you to reset Chrome's settings.

Chrome on Android

On a phone these messages land in the tray with everything else, so they feel like an app sent them.

1. Pull the notification down and look for the one-tap unsubscribe control on Android that Help Net Security reported in August 2026.
2. From settings instead: Chrome's menu, then Settings, then Site settings, then Notifications.
3. For one site while you are on it, Chrome's Android help page describes tapping Page info to the left of the address bar, then Permissions, then turning Notifications off.
4. Pop-ups sit under Permissions too: open Pop-ups and redirects and turn it off.

Closing the tab does not help. The permission is stored against the site, so it outlives the visit.

Safari on iPhone, iPad and Mac

1. On iPhone and iPad, as Apple's page on blocking pop-ups in Safari puts it: "Open Settings, tap Apps, then tap Safari. Turn Block Pop-ups on or off."
2. On a Mac, open the Apple menu, then System Settings, then Notifications, then Application Notifications. Click the website and turn Allow Notifications off, as Apple's Safari guide to website notifications describes.
3. To stop every site asking again on a Mac: Safari, Settings, the Websites tab, Notifications, then deselect "Allow websites to ask for permission to send notifications".

We are not giving you an iPhone step list for revoking a site's notification permission: we could not open an Apple page documenting one, and we would rather leave a gap than invent a menu. Apple does caution that pop-ups on a Mac that will not go away can mean adware or other unwanted software was installed by accident.

Firefox

On 16 September 2026 Mozilla's own articles on push notifications and the pop-up blocker returned a bot challenge instead of their text, so we will not link them or copy a menu path out of a page we could not read.

Two guides we did read carry illustrated Firefox steps: MalwareTips' guide to spam push notification ads, from January 2023, and the Malwarebytes write-up linked above. Neither mentions ytmp3, and we cite them for the steps alone.

Edge and Samsung Internet

1. In Edge, open the site's permissions. Microsoft documents the path: under Permissions for this site, then Notifications, choose Block.
2. You do not have to switch the pop-up blocker on. Microsoft says it is turned on by default.

Microsoft is blunt about the limits: the blocker "does not prevent a pop-up from opening if you select a button or link on a web page", and "Website advertisements cannot be blocked by the Edge pop-up blocker". That is the converter case exactly, where the window follows a Download button.

On a Galaxy phone the notification arrives through whichever browser holds the permission. Samsung's regional support page for Hong Kong describes opening Settings, then Notifications, tapping the browser the notification came from, then switching the site off under Sites. It warns that menus vary by model.

What this site never asks for

A converter does not need a notification permission, an account, an app, or a second window. If a download page asks you to allow notifications before handing over a file, that request is about advertising, and the answer is no.

This site does not ask. No notification prompt, no adverts, no account, no app. Paste one link, choose MP3 at 192 to 320 kbps or MP4 up to 1080p, and get one file. Playlists are not supported. The list of checked ytmp3 addresses covers the rest of the family, including ytmp3.fi, and our privacy page sets out what we keep. When you are ready, open the converter.