Fitbit PornBot - Marie M

Popup - http://Zaxar-Panasenko.linodnk.ru

Registered in the Russian Federation via REGRU-RU on December 18, 2019 - http://Zaxar-Panasenko.linodnk.ru

Associated Fitbit Account - Fitbit - Marie M.'s Profile

Popup will redirect users to fake dating platforms.

POPUP 1

Popup - Find local sex contacts (flingswipe.com)

Registered via NameCheap on March 14, 2019 (updated February 12, 2021) - Whois flingswipe.com

Associated Email Address - [email protected]

Popup will redirect to ForumOfDesires

Registered by Info Media International AG in Zug, Switzerland via Internet Domain Service BS Corp on July 17, 2021 (updated July 19, 2021) - Whois forumofdesires.com

Associated Phone Number - (646) 647-1467

Associated Email Address - [email protected]

POPUP 2

Popup - DirtyTinder (your-best-partner.life)

Registered via NameCheap on August 9, 2021 (updated August 16, 2021) - Whois your-best-partner.life

Popup redirects to https://mylocaldates8.com/l/25/timerv2/1-w2m/global/?c=8a02ae19-9cc9-4fec-999a-73475642a331&a=webl24392&s=23&s1=web&s2=258772&s3=US&s5=36mjKQ5xIKUocyW9zS0qz8mHq4yV26cm1ZsyqQFDZe1uEqfCQzhYgFWkDfTtSasELow6ViE5Uoho0_Nf64ZEheRIjDCE27mc2f2Jv8weHSQfR3pY8dNLHTZbBcuP0kqyON5GaPXkSKRJIzCL0I1c9aTYUfY-XXh2UJxVDfRM0aPQMwbDRraQIuSmJlN-W3s_b5lGf9CcXUS1bxcoQhxBWb4ZCBLJwwlynj4QEXL8xbFy9-SYdFQPp3bLodMhbuRadHL4-s0jvvuBba-PaK8_DYWWCq_JeMJC0nwawca2Mdc1&d=0

Registered via NameCheap on July 31, 2021 - Whois mylocaldates8.com

Users are then registered for WellHello

Associated Email Address - [email protected]

POPUP 3

Popup - https://anmdev.flndiove.com/c/b4f6ec5b2be086f1?s1=123803&s2=1265395&s3=258772&click_id=mlClick-qo54Q7JA&j1=1&j3=1&j8=1

Registered in Hong Kong via 1API GmbH on September 6, 2021 (updated September 7, 2021) - Whois flndiove.com

Popup will redirect users to Desperate BBWs

Registered via NameCheap on September 7, 2018 (updated September 22, 2021) - Whois desperatebbws.com

Users are then redirected to ForumOfDesires

POPUP 4

Popup - It’s better than Tinder! (powerpills.life)

Registered via NameCheap on September 17, 2021 (updated September 22, 2021) - Whois powerpills.life

Popup then redirects users to https://myhookupclub.com/l/25/dirtytinderv2/2-w1m/en/?c=9ed2f220-2f07-40ef-b244-c4e2624aa6ae&a=webl24392&f=23&s1=web&s2=258772&s3=US&s5=36mjKQ5xIKUocyW9zS0qz8mHq4yV26cm1ZsyqQFDZe1uEqfCQzhYgFWkDfTtSasELow6ViE5Uoho0_Nf64ZEheRIjDCE27mc2f2Jv8weHSQfR3pY8dNLHTZbBcuP0kqyON5GaPXkSKRJIzCL0I1c9aTYUfY-XXh2UJxVDfRM0aPQMwbDRraQIuSmJlN-W3s_b5lGf9CcXUS1bxcoQhxBWb4ZCBLJwwlynj4QEXL8xbFy9-SYdFQPp3bLodMhbuRaKNtUL9yEvn9b-wb6-yYdAwKpT5Ur3PaFOGL5aPGF6SQ1&d=0

Registered via NameCheap on July 31, 2021 - Whois myhookupclub.com

Popup is a registration page for Fuckbook.

Registered via Amazon on June 23, 2017 (updated May 19, 2021) - Whois fuckbookdating.net