> Instead, a site located at the link https://gaibacoupontec.com > was displayed with a message indicating that there was an urgent > Firefox update required. Have you checked the user's Firefox profile for any unusual extensions? That would be my first suspicion.