I have come across cloned news site of mirror.co.uk promoting crypto-currency scams.
They talk about it here: https://www.mirror.co.uk/news/uk-news/warning-fake-mirror-we...
It was from an advert on a legitimate website, but it had redirects/popups that show only on mobile devices.(this seems to affect a lot of even normally very trustworthy websites for some reason)