Here came the new version of the tech support scam ads, following the previous one. The advertiser is from the US according to the Google’s “My Ad Centre”, but I’m sure he is no stranger to me, he is actually the same French guy, Merovingian.
Imagine if one day you suddenly saw a swarming bee colony in your backyard, how many queens do you think they have? Maybe the answer is “two”—they are one old queen, the other newly raised young queen, and the workers preparing to split. You are just witnessing a normal proliferation process of a bee colony, and no sane person would think you coincidentally got two separate bee hives all at once.
Putting aside his identity, the landing page has got a major update. Compared to the conventional one, it looks similar visually but sounds different auditorily. It’s so different that it makes funny noise in broken Japanese, delivered by the nervously shaking, robotic female voice in a 30 second loop.
Transcript:
“重要なセキュリティメッセージ。あなたのコンピュータはしまい込まれました。あなたのIPアドレスがあなたの知識なしで使われました。コンピュータのジョウフウを開けるために、すぐにウィンドウをサポートと交信してください。シャットダウンをしないでください。そして、そうすることがデータ損失と個人情報セトウに導くかもしれないあなたのコンピュータを再起動しないでください。コンピュータロックはデータ損失を防止する狙いです”
It translates;
“Importente sekurity messssage. Your cumputur has been stored up deep inside. Your IP address has been used while it dose’nt kneed your knowledge. Make your window communicate with the suppourt immediately to open your computer’s inforemaetion. Do not try a shutdown of your compooter, and then, as doing so may lead to data loss and personal informaytion thieves don’t reboot your conputer. The compeutor lock is the preventative scheme of data loss.”
Don’t contact any of these phone numbers in the image:
(0101) 20293-70266
(0101) 20293-70322
(0101) 22725-71912
(0101) 21743-77857
The webpage tries to turn full screen mode on and disrupt the OS task switcher while making ear breaking noise. You better not open it, but FYI, this is the landing page URL:
https://parapentors.com/?gad_source=2
Here I got another one.
This is also from the US, according to Google’s “My Ad Centre”. It says “Sponsored: Organic Spice Shop” and it’s linked to the website https://eapokityew.com (Warning: This website may show you the fake Microsoft tech support page, and is potentially unsafe. Visiting it is not recommended)
.
It looks an innocent normal spice shop so far (at 4:51 am on Apr 2 2025), but if you look closer, you’ll notice something is off with the content. For example, here is the contact info.
Contact Us
3-chōme-*-** Kamisugi, Aoba Ward, Sendai, Miyagi 980-0011, Japan+812239855**
***anicspiceshop@gmail.com
The physical address is located at a non-business residence in Japan. The phone number belongs to a seemingly irrelevant ramen place nearby.
As it looks like a shopping website, you can put “Cinnamon / 520JPY” in the shopping cart. But you’ll never know what quantity of cinnamon spice you are going to pay 520 JPY for.
There is a clickable “Checkout” button on the menu and you can even proceed the checkout. But of course, when you filled out the purchase details, you’ll never see their grayed out “payment methods” options turning on.
I can’t wait for the day when this website start working. Or, did it already? My browser has eaten their unhealthy cookies.
Subsequently, I keep getting other YouTube ads from the same US scammer. He likes to put up genital-ish abstract drawings in his ad thumbnails, like these;
celsorporeion.com
celsorporeion.com
celsorporeion.com
celsorporeion.com
fuppetoup.com
wickerweavingschool.com
origamiartschool.com
fishworkx.com
parapentors.com
fashionsketchingpro.com
celsorporeion.com
glass-artstudio.com
baygreennaturals.com
flightlevel36.com
musical-knights.com
proloopchtowsh.com
green-harvest.site
celsorporeion.com
dareeldoinceech.com
caricaturedrawingacademy.com
hotta-farm.com
flostamirex.com
yepreaccurviy.com
solivanto.com
ulferonix.com
patchworkacademy.com
public-speakingmastery.com
utionsonssip.com
heattercer.com
harriblexstra.com
swerepleallo.org
celsorporeion.com
celsorporeion.com
bobscruneld.com
badesocatings.com
Each domain name shown above the ad image is where the landing page is built on, which is also not recommended browsing but just FYI if you are interested in these worthless auto-generated trash websites.
Their root page appears an innocent normal website again, but once if you add some URL parameter like “http://******.com/?gad_source=1”, it reveals their true intention, showing the intimidating tech support scam page, like others before. 
Do NOT call any of these numbers in the image above;
(0101) 20293-70192
(0101) 22725-71850
(0101) 22725-71911
(0101) 21926-27523
(0101) 22726-71846
(0101) 21926-27515
(0101) 21926-27513
(0101) 21926-27517
(0101) 21926-27488
(0101) 21926-27485
(0101) 22725-71856
(0101) 21926-27452
(0101) 22725-71861
(0101) 22725-71868
(0101) 22725-71881
(0101) 22725-71931
(0101) 22725-71893
(0101) 22725-71899
(0101) 21743-77850
(0101) 21743-77863
(0101) 21743-77864
(0101) 21743-77869
(0101) 21743-77816
(0101) 21743-77841
(0101) 20328-36231
(0101) 63150-53512
(0101) 20328-36091
(0101) 20328-36049
(0101) 20328-36208
(0101) 23923-58777
(0101) 23923-58900
(0101) 23923-58205