Fake web alerts – how to spot and stop them