Use bettercap for Arp poisoning and Redoute bis traffic via your system. Sniff the dns traffic and record the domains he is resolving. Set them in bettercap to resolve to the IP of a garporn site.