| It's confusing if you don't use the real URLs. You
| say the sneaker store has the same URL. Is that
| a misprint on your part?
|
| They are the same except one has www in front and the other doesn't.

There's something missing from this story. I can understand
if you want to protect your friend's privacy, but without
checking it out ourselves there's no way to know what's
going on.

If your friend owns his domain then he owns
the whole thing -- acmesupply.net. Someone else can't buy
the subdomain. Usually a subdomain is a folder on the server.
For instance, files.acmesupply.net can be set up to point
to a folder names "files". www is default. Usually if a website
is not set up to respond to just the domain name, the browser
will automatically try adding "www."

All of that is to say that the other link is probably
not to the same domain, even though it may seem so.
To find out you have to right-click the link, copy it,
aste it into Notepad, then extract the real link from
Googles spyware link. For example, I just searched
for Sears and got www.sears.com. That's what Google
tells me the link goes to, but it actually doesn't. The
link is like so:

https://www.google.com/url?q=http://...T39DaWCVrpjHQg

Google is sending my click through their server, along with
a kind of cookie. (You really should switch to duckduckgo.)

If both links are, indeed, to acmesupply.com then why
not visit the sneaker link and see what you find? It may
be that your friend has not paid for legitimate webhosting
but is instead trying to save a few bucks by hosting his
site on a cheap or freebie server that shows ads.

A third possibility is that your browser has been infected
with malware that's injecting ads.