I've had problems with malicious ads redirecting me lately. I began to suspect that my phone was infected, but it turns out that this is now a common occurrence:
https://www.wired.com/story/pop-up-mobile-ads-surge-as-sites...
I don't know why the ad platforms even allow custom JavaScript...