I think malware is fairly unlikely considering I’m running Firefox with only Ublock Origin and NoScript on Debian on a month old PC.

I forget if I’m using Cloudflare DNS via Firefox’s DNS protection or if I’m letting my router handle it through the reputable VPN’s DNS, but I’d consider them both unlikely sources of that kind of issue.

I’m at a loss.