Malphas

Reformed XRumer enthusiast, cloaker, scraper and general nuisance.

[Malphas @malphas]

@tehseowner Drop &ilrm=zpr&uact=1 and it shows it. But not tried it on a spam domain, might not work the same.

There's also:

https://t.co/E7WwFjzmG6

But it's weird, think it needs Cookies or a referrer now. Doesn't work in incognito.

[Malphas @malphas]

@tehseowner Oh interesting, good find. Will grep my logs.

Might be human raters through UK VPN? Looks like the agencies are hiring currently:

https://t.co/eeKdMzSfnl

[Malphas @malphas]

@claudioatilano @kylantomita @iannuttall For peaking in the blackbox: There's an ENV setting on CC to change the anthropic base URL. Then with some other tweaks you can see all the LLM calls (was seeing if it would work with local models). The system prompt + tools was 8k+ tokens...

[Malphas @malphas]

@shannoncode @elder_plinius +1 one on this. Bury instructions deep to include a subtle but unique string. Then pop it in quotes in search to track how far the LLM worm has spread.

[Malphas @malphas]

@_Oliver_Fish Man, that domain has had so many different exploits/subdomain hijacks in the last 12 months.

[Malphas @malphas]

@GrindstoneSEO If the link ticks all the boxes would you go harder on the anchor text?

[Malphas @malphas]

@GrindstoneSEO I've got a suspicion they are looking for interactions with the page. Similar to when there was a clear pivot to links that got traffic, moved the needle far more.

Need to find the video but one of the Googlers said, no interactions, you'll likely fall out the index etc.

[Malphas @malphas]

@tehseowner If it was blocked for ages, can take a while to unstick.

I'd double check all redirects are in place. www/non-www/http/https. Then force bots to each one. Even the robots.txt lol.

I think there's a GSC robots test tool somewhere which shows history too. Which may be useful.

[Malphas @malphas]

@tehseowner Do they show up in the Discussion & Forum SERP block too?

[Malphas @malphas]

@dejanseo Amazing. Thanks.

Have you tried protoc for the .pb files? I haven't tried a hex editor yet, it may well show more info!

[Malphas @malphas]

@_Oliver_Fish I also picked this out all the RU spam a few weeks back. Ended up turning it into an Nginx proxy snippet so it looks like its on own my domain. I use it on test sites a lot, works great if you append -hero, -logo, name-proifle etc.

[Malphas @malphas]

@Purchases Same CVE as the Vatican a few weeks back 😅

[Malphas @malphas]

@tehseowner @TheDevonWayne Take a look at the old setups for clickjacking. You can float an invisible div/iframe behind the cursor. Google likely denies iframes, but you could get a natural(ish) click to a branded serp.

[Malphas @malphas]

@TheDevonWayne @tehseowner Randomly stumbled upon this today actually. Non-existent brands in casino with 100-500k volume in Ahrefs. Then if you search the brand keyword you only get 3-4 results..

[Malphas @malphas]

@MikeBlazerX Just getting stuck in and muddling your way through until you understand it properly. Bouncing off an LLM when you need more context.

[Malphas @malphas]

@MladenLm @MikeSilagadze @aave USDC. The rate is far lower during an extended downturn. As low as 0.5-1%, but you'll likely want to be deploying that capital back into the markets at that stage anyway.

[Malphas @malphas]

@thetafferboy @LidiaInfanteM Would also love to hear more about it. Bug write ups like this are super rare nowadays!

[Malphas @malphas]

@DeanCruddace @dejanseo @Suzzicks Scrape entire niche of content, parse out to sentences, very light spin/paraphrase, calculate vectors on each. Piece back together by similarity? Pulled that out my arse but gonna test anyway..