Registered via NameCheap on May 26, 2026 - Whois datinggconnect.com
Popup is being fraudulently advertised on, and is designed to impersonate PornHub whilst redirecting users to https://evnora.nflnevvs.monster/landers/01_ph_mp/index.php?bcid=d9hpt901p96s73907og0&utm_camp=c2fdf3d6ee8049369546b076f921c5d5&lp_key=17849ac39f84fcdb0a332368f4d15a74b961913717
Registered via NameCheap on Cinco de Mayo, 2026 - Whois nflnevvs.monster
The scam number they use at the time of writing is (844) 531-0878, carried by All8Series and actively blocking VoIP calls