Comment by Panos

The screenshots above redirect to a search engine. (My IP had already been used for clicks and I could not generate the ad clicks for the screenshots)

If you want to see the scheme in action go to the new domains set up by the scammer:

http://www.kidsbeanbags1.com/index2.php

http://www.kingsizemattress1.com/index2.php

http://www.neckpillow1.com/index2.php

http://www.pillowtopmattress1.com/index2.php

http://www.pillowcovers1.com/index2.php

http://www.tempurpillow1.com/index2.php

http://www.contourpillow1.com/index2.php

If you want to observe the full click behavior: Chrome->Tools->DeveloperTools->Network

Let me know what you see. Curious to see if the scammer changed the behavior.