On iOS and iPadOS, that's usually a junk pop-up, a sketchy page, or a hosed ad network.
It's also possible for a VPN client add-on or an ad-blocking app to cause problems, so check if you have one of those installed.
Also disable pop-ups. Settings > Safari > Block Pop-ups enabled
On iOS and iPadOS, push notifications are associated with specific apps, so those aren't arising from a web site. From an app, though?
And there are folks that will send bogus messages, and bogus texts.
To flush out any existing dreck in Safari, force-exit Safari, and then clear out all saved web site data. That's located under the Settings > Safari > Advanced setting.
Might want to check your home page and your search engine setting, but that's probably not been changed here.
Anti-malware on iOS and iPadOS can't rummage around outside its own sandbox without breaking security and violating the iOS and iPadOS app store rules, though it wouldn't surprise to find some of these tools are using the iOS VPN interface to sniff network traffic.