The simplest way to get a malicious website in front of a potential victim is to create a Google advertising account, and buy your way to the top of the search results.
Beware fake tech support sites!
https://www.tripwire.com/state-of-security/tech-support-scams-exploit-google-ads-target-users