Tech support scams are (unfortunately) incredibly common, but this attack stands out for two reasons.

Second, the attackers are cycling between many different sites to host the redirection and scam pages.

Malwarebytes said, “in the span of 24 hours, we collected over 200 different hostnames.”

Screenshot of a web page showing a fake Windows Defender message

Malwarebytes