I have a user that has also been getting this for a few days. Turns out its Iheart.com. She uses the website to play music instead of an I Heart Radio app and in the page source there are references to that site several times. She first reported this yesterday, 2/14/2019.
The pop-up hits her desktop but doesn't register anything in the logs.