>If AdNauseam doesn't look like outright fraud in the logs (which they don't if it's all distinct IPs and browsers)

You think ad networks don't have logs more sophisticated than default nginx/apache logs? XHRs are trivially detectable by headers alone.