Stop rogue redirects to/from rembrandium.com

What is rembrandium[.]com?

The Internet is full of rogue websites and rembrandium[.]com is one of them. It shares many similarities with lesindingretne.info, dredrewlaha.info, getmedia.me and others. Designed to cause redirects to unreliable and possibly malicious content, it also present users with likewise dangerous content.

Most visitors to rembrandium[.]com access it unintentionally. They are redirected from other untrustworthy sites (precisely, via intrusive ads) or have rembrandium[.]com force-opened by PUAs (potentially unwanted applications). It should be noted that these applications do not require express user permission to be installed onto their devices.

The rembrandium[.]com site is promoted by invasive advertisements redirecting users to it. However it is also spread by PUAs forcefully opening new browser tabs/windows and redirecting users to it. This website's actions are determined by visitor's geolocation, which it learns by checking their IP (Internet Protocol) address.

Afterwards, rembrandium[.]com either redirects users elsewhere or begins force-feeding them dubious content. Regardless, of its course of action - it must be known that visiting this site is a huge safety hazard for systems as well as user privacy and identity.

Said website also employs browser notifications, which if allowed - deliver intrusive ad campaigns. These adverts cause undesirable redirects and can even execute scripts designed to autonomously download/install PUAs. As previously mentioned, these rogue applications can cause redirects, however they also use various tools to enable third party graphical content.

Therefore, the intrusive ads they deliver can overlay original site content, consequently worsening the browsing experience. PUAs are notorious for their data-tracking capabilities. They gather information on users' browsing and search engine history. It must be known that this info also contains personal details.

As unwanted applications pass the data they gather to third parties (possibly even cyber criminals), it puts users' privacy and even identity at risk. All PUAs should be removed immediately, to ensure device and personal safety.

Threat Summary:

Name	rembrandium.com pop-up
Threat Type	Push notifications ads, Unwanted ads, Pop-up ads
Serving IP Address	104.24.125.213
Observed Domains	1.rembrandium[.]com, 12.rembrandium[.]com, 28.rembrandium[.]com, 33.rembrandium[.]com, 38.rembrandium[.]com, 46.rembrandium[.]com, 64.rembrandium[.]com, 72.rembrandium[.]com, 74.rembrandium[.]com, 82.rembrandium[.]com
Symptoms	Seeing advertisements not originating from the sites you are browsing. Intrusive pop-up ads. Decreased Internet browsing speed.
Distribution Methods	Deceptive pop-up ads, potentially unwanted applications (adware)
Damage	Decreased computer performance, browser tracking - privacy issues, possible additional malware infections.
Malware Removal (Windows)	To eliminate possible malware infections, scan your computer with legitimate antivirus software. Our security researchers recommend using Combo Cleaner. ▼ Download Combo Cleaner To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Often unwanted application developers market them as "useful" and "advantageous". Additionally, they are designed to appear highly functional and completely harmless. However, it must be stressed that PUAs serve no other purpose but to generate revenue for their designers.

They have no genuine value to users. Instead of any promised features, they generate redirects, deliver intrusive advertisement campaigns and track data.

How did adware install on my computer?

PUAs can invade computers through rogue installs executed by intrusive advertisements. Undesired applications are often bundled together with regular software and are installed onto their devices by users themselves. An opt-out for these additional, malicious apps is frequently possible.

However, such options are often hidden within "Custom/Advanced" settings. These applications can appear utterly legitimate and arouse no suspicion. In summary, user carelessness when browsing and installing/downloading software is the cause of probable PUA infiltrations.

How to avoid installation of potentially unwanted applications?

It is highly recommended to use only official and verified sources for all software downloads (ideally, via direct download links). Third party downloaders should not be used, as programs downloaded from such are more likely to come pre-packed with PUAs. It is advised to study terms, possible options and use "Custom/Advanced" settings when installing software.

Also, users should opt-out from installing supplementary applications/features and decline downloading such from elsewhere. If tempted to allow additional apps/features into one's device, it is strongly recommended to do at least the base amount of research to verify whether the offer is indeed genuine.

Prudent browsing habits are also encouraged. Users should avoid suspicious sites and refrain from clicking various ads. The latter must be stressed, as intrusive adverts are often designed to appear absolutely innocuous. However, a telltale sign of their true nature can be the websites they redirect to (for example, pornographic, adult-dating, gambling and many others).

Should users encounter such ads/redirects, they are strongly recommended to check their systems and remove any dubious applications and browser extensions/plug-ins. If your computer is already infected with rogue applications, we recommend running a scan with Combo Cleaner Antivirus for Windows to automatically eliminate them.

Appearance of rembrandium[.]com website (GIF):

Instant automatic malware removal: Manual threat removal might be a lengthy and complicated process that requires advanced IT skills. Combo Cleaner is a professional automatic malware removal tool that is recommended to get rid of malware. Download it by clicking the button below:
▼ DOWNLOAD Combo Cleaner By downloading any software listed on this website you agree to our Privacy Policy and Terms of Use. To use full-featured product, you have to purchase a license for Combo Cleaner. 7 days free trial available. Combo Cleaner is owned and operated by Rcs Lt, the parent company of PCRisk.com read more.

Quick menu:

• What is rembrandium.com pop-up?
• STEP 1. Remove spam notifications from Google Chrome
• STEP 2. Remove spam notifications from Google Chrome (Android)
• STEP 3. Remove spam notifications from Mozilla Firefox
• STEP 4. Remove spam notifications from Microsoft Edge
• STEP 5. Remove spam notifications from Safari (macOS)

Disable unwanted browser notifications:

Video showing how to disable web browser notifications:

Remove spam notifications from Google Chrome:

Click the Menu button (three dots) on the right upper corner of the screen and select "Settings". In the opened window select "Privacy and security", then click on "Site Settings" and choose "Notifications".

In the "Allowed to send notifications" list search for websites that you want to stop receiving notifications from. Click on the three dots icon near the website URL and click "Block" or "Remove" (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Google Chrome (Android):

Tap the Menu button (three dots) on the right upper corner of the screen and select "Settings". Scroll down, tap on "Site settings" and then "Notifications".

In the opened window, locate all suspicious URLs and tap on them one-by-one. Once the pop-up shows up, select either "Block" or "Remove" (if you tap "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Mozilla Firefox:

Click the Menu button (three bars) on the right upper corner of the screen. Select "Settings" and click on "Privacy & Security" in the toolbar on the left hand side of the screen. Scroll down to the "Permissions" section and click the "Settings" button next to "Notifications".

In the opened window, locate all suspicious URLs and block them using the drop-down menu or either remove them by clicking "Remove Website" at the bottom of the window (if you click "Remove Website" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Microsoft Edge:

Click the menu button (three dots) on the right upper corner of the Edge window and select "Settings". Click on "Cookies and site permissions" in the toolbar on the left hand side of the screen and select "Notifications".

Click three dots on the right hand side of each suspicious URL under "Allow" section and click "Block" or "Remove" (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again).

Remove spam notifications from Safari (macOS):

Click "Safari" button on the left upper corner of the screen and select "Preferences...". Select the "Websites" tab and then select "Notifications" section on the left pane.

Check for suspicious URLs and apply the "Deny" option using the drop-down menu or either remove them by clicking "Remove" at the bottom of the window (if you click "Remove" and visit the malicious site once more, it will ask to enable notifications again)

How to avoid browser notification spam?

Internet users should be very skeptical when being asked to allow notifications. While this is a useful feature that allows you to receive timely news from websites you like, deceptive marketers frequently abuse it.

Only allow notifications from websites that you fully trust. For added security - use an anti-malware application with a real-time web browsing monitor to block shady websites that tries to trick you into allowing spam notifications. We recommend using Combo Cleaner Antivirus for Windows.

▼ Show Discussion