The fake ad used a nearly identical domain to Soneium’s official site to bypass Google’s security measures.