I started to recently get a popup from salsurvey[.]com, it looks somewhat phishey.
It says it is about your satisfaction with your isp but if you look it is an ‘independent survey’.
It asks you to answer a few questions to receive a reward (worth up to $70! lol)
The rewards include some wonderful things like ‘male enhancement’ pills, super vitamins, breast/skincare creams, etc. I just close it when it comes up but if you do a web search you will find reports of people saying it asks for credit card info to pay shipping and handling which sounds to me like they are phishing.
The same popup has happened to people on many different ISPs, they get that info based on your IP. I’m not sure what prompted it to start popping up as none of my apps report as having malicious code in Avast of Malwarebytes or odd permission in other privacy advisors.
I’m not sure what you at Avast can do but it seems like something the WebShield should block.