When I forget to sign in to YouTube, I see the same pattern, shitty ads that are clearly only allowed because otherwise YouTube wouldn't have sufficient ad inventory to meet their internal KPIs.
The reality is, of course, that Google and its ilk doesn't give a single rat's ass about people falling from scams or getting infected by malware. Scams and malware pays better than "ethical" ads (to the degree that such a thing exists). It's a travesty that there are apparently no laws against their behavior.
Google disabled the Adblock, Facebook let the ad run on their site, and Microsoft hosted the malicious site on their cloud provider. Shoutout to Microsoft for taking the site down within the hour after I reported it- more than I can say for any of the blatantly illegal or scam ads I’ve seen on YouTube. but still, 3 big tech companies that could have definitely stopped this is they really wanted to.