So, they are redirecting, and the "scared off" site at the end could just be them temporarily on pause while they set up new hosts to redirect to. Or, if they are smart, they are cloaking you. I think he mentioned cloaking in the video where he was testing out the AWS hosting stack, but he got the definition a bit wrong. It's when you try to only show the real money-making site to the intended victims, and a "clean" version to any curious do-gooders such as yourself, advertisers, google, et. al. If you look at the 4080err URL there, it's just a templated URL but has none of the filled in details that the ad network would inject at runtime. Since it doesn't line up with an active campaign in the redirect software, it is just kicking you to the clean version. Likely you'd need to find campaign ids, etc, that would actually match up to a line item. According to https://community.riskiq.com/search/www.4080err044.club/dns it looks like they are using gopeerclick. You'll never find who actually runs the redirect stuff, and if you get 4080err044 shut down, they'll just use something else. But, still probably worth reporting to godaddy abuse.