Pop-under ads may lead to phishing pages that steal login credentials for email, banking, or social media. Always use a dedicated device or a virtual machine for testing unknown sites.