Hmm. If you're on Android: - plug your phone into your PC - open chrome://devices on your PC - open a new tab on your phone - find the tab you just opened

Hmm. If you're on Android: - plug your phone into your PC - open chrome://devices on your PC - open a new tab on your phone - find the tab you just opened on the PC side and hit 'inspect' (or 'inspect fallback' if there's a version mismatch alert) - ensure 'preserve log' is checked in the network tab - if you want you can paste the URL on the PC side s/PC/Mac/ as applicable Now you can go digging: once you've located the first evil request, select it and the Initiator tab should tell you what loaded it. Nobody else can repro, so the root cause may be interesting.