I may have misunderstood the question, feel free to clarify if that's the case.
It was me who misasked the question. I understand your answer, but I just didn't ask properly.
I want to understand the situation from the point of view of an ad buyer: a vendor of a product that isn't an outright scam, but is of somewhat questionable value: no rebilling involved and no high chargeback risk. But also the general public will not explicitly search for it, it appeals only to a fringe.
Such a vendor might have run a test campaign on doubleclick and adbrite. Doubleclick yielded very bad conversion rate (which is bad). Adbrite yielded good conversion rate, but used not-really-legitimate means of ad serving: malware, DNS redirection, etc. (which is also bad, but short term good). (Network names used as a historical example, I have no current knowledge.)
My presumption about the screenshot in the original post: Zerohedge tried to serve a generic doubleclick ad. They don't bother with any targeting on their own, bud doubleclick may have meant to target. Adware intercepted it and served an ad from another network. Zerohedge and doubleclick have seen it as somebody using adblock or similar.
How difficult would be to organize such a campaign? Is anyone offering it, maybe not openly, but after a longer discussion and some sort of background check?
I see trafficholder as a sort of middle point between legitimate and illegitimate ad serving. They need at least token participation from the site owner. Am I right? Zerohedge would never use hidden, random redirects.
I'm assuming that a site like zerohedge is beyond reproach and would never knowingly trick their readers to install adware. Am I right?