visitor@blackhat-terminal:~/archive/12_appendix SECUREONLINERECORDS 48
~/archive/12_appendix/

$ cat Appendix

Cross-linked technique and tool indexes, shared reference material, historical context and limits on performance claims.

4,869 words~22 min read9 technique cards4 tables1 code blocksREFERENCE
┌ TECHNIQUES ┐ ┌ TOOLS ┐ ┌ MANUAL ┐ │ index │──▶│ index │──▶│ shell │ └────────────┘ └─────────┘ └────────┘ everything cross-linked · one keystroke away
APPENDIX :: REFERENCE TABLES, INDEXES & SHELL MANUAL
// APPENDIX (v9.4)

Reading paths, qualitative evidence guides and the shell manual. Dates and definitions are maintained in the dedicated Timeline, Glossary, Bibliography and Changelog pages. Unsupported performance figures from legacy editions have been removed.

READING PATHS :: WHERE TO START
ORIENTATIONNEW

The archive is long. Pick the path that matches why you are here.

If you are…Read in this orderSkip for now
An SEO defending a client or your own siteDetection & Defense → Negative SEO Attacks → Local listing abuse → Case StudiesStarter Kit, Marketplace context
A security researcher or threat analystGootLoader → Advanced Cloaking Infrastructure → Underground Market → Tools DatabaseStarter exercises
A journalist or policy researcherOverview → Case Studies → Legal & Regulatory Enforcement → Statute reference belowCode blocks and tool pricing
Studying detection systems (search quality, trust & safety)Algorithmic Detection → Detection Evasion → Local detection → Detection evidence matrix belowAffiliate niche lists
New to the topic entirelyOverview → Core glossary → Extended glossary below → Starter Kit (read the warnings first)Everything with a code block
GOOGLE ALGORITHM & ENFORCEMENT TIMELINE

The canonical timeline supplies event-level sources and separates policy announcements, enforcement changes and research reports. This appendix no longer duplicates its dates.

Infrastructure changes such as Caffeine affect how a search engine processes the web; they do not demonstrate that a particular manipulation method works. IndexNow is a separate participating-engine change-notification protocol and does not guarantee indexing. Algorithm announcements, individual penalties and consumer-protection rules are different types of evidence and should not be merged into one causal story.

This reference separates search policy, commercial disclosure and computer misuse. It covers the specific rules below; it is not a survey of every jurisdiction. The old table mapped named techniques directly to wire fraud, interception, identity theft, money laundering and several foreign statutes without supporting elements. Those mappings have been withdrawn.

Rule and sourceRelevant threshold or distinctionEvidence to preserve
US Computer Fraud and Abuse Act, 18 USC §1030; DOJ charging policy, May 19, 2022The DOJ policy says a terms-of-service access restriction alone is insufficient for federal criminal charges. It directs prosecutors not to charge qualifying good-faith security research. This is prosecutorial policy, not permission to access another system or immunity from other claims. A label such as “scraping” or “negative SEO” does not establish the statutory offence.The access boundary, credentials and authority, relevant communications, exact actions, and any obtained information or damage. Separate an authorized audit from credential theft or unauthorized code installation.
UK Computer Misuse Act 1990; CPS guidance, updated August 3, 2023 (England and Wales prosecution context)Section 1 requires intent to secure access and knowledge that it is unauthorized. Section 3 addresses unauthorized acts involving intended or reckless impairment. Possession of a general-purpose tool alone is not enough for the section 3A offence. Jurisdiction and the precise authorization boundary matter.Written scope and account permissions, request and change logs, whether access was knowingly outside those permissions, and the alleged impairment. Do not infer intent from a tool name.
US FTC endorsement guidance; FTC explanations of the Endorsement GuidesUnexpected material connections that could affect how consumers evaluate an endorsement need appropriate disclosure. Guides explain application of the FTC Act; they are distinct from the consumer-review rule below. An affiliate link is not automatically deceptive, and a disclosure does not cure a false performance claim.Compensation terms, editorial claims, actual displayed disclosures, placement on different devices and evidence for the endorsement. A footer screenshot alone may not capture the reader’s decision point.
US consumer reviews and testimonials, 16 CFR Part 465; FTC rule Q&A; effective October 21, 2024The rule defines particular fake-review practices and restrictions on incentives conditioned on positive or negative sentiment. It is not a ban on every review incentive. Civil penalties require the applicable knowledge standard; platform removals are a separate process.The request or incentive offered, claimed versus actual reviewer experience, disclosure and the identity of the responsible seller or intermediary. Record what is alleged and what is established.
UK DMCC Act 2024, Schedule 20 paragraph 13; CMA unfair-commercial-practices guidance; provisions effective April 6, 2025Specified fake-review conduct is banned, and publishers have duties to take reasonable and proportionate prevention/removal steps. Paragraph 13 is excluded from the automatic criminal-offence treatment applying to most other banned practices. Civil enforcement and possible separately applicable offences must be distinguished.The trader’s role, publication process, incentive disclosures, moderation records and what reasonable safeguards were used. Do not equate every disputed review with a proved offence.
US commercial email; FTC CAN-SPAM compliance guideCoverage depends on the message’s primary purpose; it is not limited to bulk mail and includes commercial B2B messages. The guide addresses accurate headers and subjects, advertising identification, postal address and an effective opt-out process. Search ranking policy is unrelated to these email requirements.The original message and headers, recipient-facing footer, suppression records and the process used by a contracted sender. An outreach campaign’s small size does not establish exemption.

The DOJ’s 2016 William Stanley sentencing account concerns extortion by a search-engine optimizer. It supports a particular criminal case, not a conclusion that hostile reviews or a search-policy violation automatically satisfy that offence. Likewise, the FTC’s May 2020 LendEDU settlement addresses allegedly deceptive comparison rankings and fake reviews; it is not a Google manual-action record.

For each incident, record the jurisdiction, conduct and time; distinguish a complaint’s allegations, a settlement’s obligations and a court’s findings; then record any search or account action separately. A loss of visibility does not identify a crime, and a civil settlement does not measure a ranking-system effect. The archive supplies research context, not a legal assessment of a reader’s individual situation.

DETECTION EVIDENCE & LIMITATIONS
QUALITATIVE REFERENCE

Earlier editions displayed 27 rows of success, detection and lifespan figures without datasets or denominators. Those figures have been removed. Neither a percentage nor a typical survival window can be inferred from the existence of a technique. Use the evidence below to form a testable diagnosis.

FamilyEvidence to examineLimit of inference
CloakingCompare crawler and visitor responses, redirects and templates.Equivalent dynamic rendering is not automatically abusive; establish deceptive intent and actual response differences.
Link networksExamine ownership, outbound patterns, editorial context and link purpose together.Shared hosting alone is not proof. No universal detection probability or ranking transfer is established.
Purchased clicksCompare analytics/log anomalies with the campaign’s stated activity.Ranks affect clicks, and other ranking changes confound before/after comparisons.
Scaled contentReview originality, sourcing, usefulness and why the pages were produced.Volume or AI authorship alone does not establish abuse; outcomes differ across sites and queries.
Site reputation abuseExamine publishing arrangements, editorial integration and geographic policy treatment.The current policy includes regional distinctions. A host’s size or a third-party byline alone is insufficient.
Expired-domain abuseCompare archived purpose with current content and promotional use.Expiry itself is ordinary domain administration; inherited ranking credit is not guaranteed.
Review manipulationPreserve review histories, incentives and evidence of actual customer experience.Platform policy and specific legal prohibitions differ. Removal and enforcement timing are unmeasured.
SEO poisoningCorrelate search landing pages, redirects, downloaded files and endpoint events.A suspicious rank or title is only an indicator; validate malicious behavior without executing unknown payloads.
Prompt injectionTrace untrusted text through retrieval, model output and tool actions in an isolated fixture.A demonstrated result applies to the tested model, task and defenses; no universal success rate follows.

A quantitative claim needs a defined unit of analysis, sample frame, observation period, denominator, comparison group and uncertainty calculation. A service’s marketing claim, a selected success story or an analyst’s estimate does not satisfy those requirements. See study protocols for proposed designs; they are not completed measurements.

TECHNIQUE INDEX :: EVERY CARD IN THE ARCHIVE
AUTO-GENERATED AT BUILD

Cards and major panels collected from the current source at build time. This navigation index is not an assessment of completeness.

Start Here · 00_start-here/ · 4 entries

Black Hat Oracle · 00b_black-hat-oracle/ · 3 entries

Link Juice Simulator · 00c_link-juice-sim/ · 3 entries

Spintax Machine · 00d_spintax-machine/ · 3 entries

Methodology & Scope · 00a_methodology/ · 6 entries

System Overview · 01_overview/ · 6 entries

Find Anything · 02_find/ · 0 entries

    Black Hat Starter Kit · 03_starter-kit/ · 8 entries

    Search Manipulation · 04_search-manipulation/ · 9 entries

    Private Blog Networks · 04a_private-blog-networks/ · 22 entries

    The 2024 Google API Leak · 04b_google-api-leak/ · 6 entries

    CTR & NavBoost Manipulation · 04c_ctr-navboost/ · 20 entries

    AI-Search / GEO Manipulation · 04d_ai-geo-manipulation/ · 20 entries

    Prompt Injection / Agent Manipulation · 04e_prompt-injection/ · 19 entries

    Affiliate SEO Exploitation · 05_affiliate-seo/ · 14 entries

    Parasite SEO / Site Reputation Abuse · 05a_parasite-seo/ · 20 entries

    Scaled Content Abuse · 05b_scaled-content-abuse/ · 19 entries

    Expired Domain Abuse · 05c_expired-domain-abuse/ · 19 entries

    Local SEO Exploitation · 06_local-seo/ · 10 entries

    Restricted Verticals · 06a_restricted-verticals/ · 5 entries

    Vertical: Illegal Pharma · 06b_vertical-pharma/ · 18 entries

    Vertical: Adult (XXX) · 06c_vertical-adult/ · 18 entries

    Vertical: Alcohol & DTC · 06d_vertical-alcohol/ · 18 entries

    Tools Database · 07_tools-database/ · 2 entries

    Case Studies & Penalties · 08_case-studies/ · 10 entries

    SEO Poisoning / Compromised-Search · 08a_seo-poisoning/ · 16 entries

    Underground Market · 09_underground-market/ · 9 entries

    Detection & Defense · 10_detection-defense/ · 7 entries

    Resources & References · 11_resources/ · 8 entries

    Offline Lab Library · 13_lab-library/ · 6 entries

    Research Studies & Results · 13a_experiments/ · 5 entries

    Case Database · 14_case-database/ · 3 entries

    Historical Timeline · 15_timeline/ · 4 entries

    Glossary · 16_glossary/ · 9 entries

    Bibliography · 17_bibliography/ · 7 entries

    Changelog & Review Status · 18_changelog/ · 7 entries

    TOOL INDEX :: ALPHABETICAL
    AUTO-GENERATED AT BUILDRISK-CODED

    Every catalogue record in the Tools Database, alphabetised. Historical and unresolved records remain identified; qualitative risk is not a probability, and unverified pricing is not presented as an estimate.

    ToolCategoryRiskPricing
    2CaptchaCAPTCHA SOLVINGVARIES by use; no probability measuredCurrent price unverified
    AdspectCLOAKING SERVICEVARIES by use; no probability measuredCurrent price unverified
    AhrefsCOMPETITIVE INTELLIGENCEVARIES by use; no probability measuredCurrent price unverified
    Anthropic Claude APICONTENT GENERATIONVARIES by use; no probability measuredCurrent price unverified
    Anti-CaptchaCAPTCHA SOLVINGVARIES by use; no probability measuredCurrent price unverified
    Article ForgeCONTENT GENERATIONVARIES by use; no probability measuredCurrent price unverified
    BrandWell (formerly Content at Scale)BUYER INTELLIGENCE / CONTENTVARIES by use; no probability measuredCurrent price unverified
    Bright Data (Proxies)PROXY NETWORKVARIES by use; no probability measuredCurrent price unverified
    Browser Automation StudioBROWSER AUTOMATIONVARIES by use; no probability measuredCurrent price unverified
    CloakifyADVANCED CLOAKINGVARIES by use; no probability measuredCurrent price unverified
    CopyscapePLAGIARISM CHECKINGVARIES by use; no probability measuredCurrent price unverified
    CTR BoosterCTR MANIPULATIONHIGH for manipulative use; qualitativeCurrent price unverified
    DeepL APITRANSLATIONVARIES by use; no probability measuredCurrent price unverified
    Easy Blog NetworksPBN HOSTINGVARIES by use; no probability measuredCurrent price unverified
    ExpiredDomains.netDOMAIN ACQUISITIONVARIES by use; no probability measuredDatabase access free; domain costs separate
    Falcon Guard (Local Falcon feature)GMB MONITORINGVARIES by use; no probability measuredCurrent price unverified
    GMB CrushGMB MANAGEMENTVARIES by use; no probability measuredCurrent price unverified
    GSA Search Engine RankerAUTOMATED LINK BUILDINGHIGH for manipulative use; qualitativeCurrent price unverified
    IndexNow ProtocolINDEXINGVARIES by use; no probability measuredNo protocol fee; implementation costs separate
    Jasper AICONTENT GENERATIONVARIES by use; no probability measuredCurrent price unverified
    JustCloakitCLOAKING SERVICEVARIES by use; no probability measuredCurrent price unverified
    Keitaro TrackerTRACKER + CLOAKINGVARIES by use; no probability measuredCurrent price unverified
    KontentMachineCONTENT SPINNINGVARIES by use; no probability measuredCurrent price unverified
    Kraken (Viper Tools)LOCAL SEO / CTRVARIES by use; no probability measuredCurrent price unverified
    Kraken Automation SuiteAUTOMATION SUITEVARIES by use; no probability measuredCurrent price unverified
    LaunchCDNPBN HOSTINGVARIES by use; no probability measuredCurrent price unverified
    MicroworkersCROWDSOURCINGVARIES by use; no probability measuredCurrent price unverified
    Money RobotAUTOMATED LINK BUILDINGHIGH for manipulative use; qualitativeCurrent price unverified
    NoIPfraudIP FILTERINGVARIES by use; no probability measuredCurrent price unverified
    Omega IndexerLINK INDEXINGVARIES by use; no probability measuredCurrent price unverified
    OpenAI APICONTENT GENERATIONVARIES by use; no probability measuredCurrent price unverified
    PlaywrightBROWSER AUTOMATIONVARIES by use; no probability measuredOpen-source; infrastructure costs separate
    QuillBotPARAPHRASINGVARIES by use; no probability measuredObserved €8.33/month equivalent; Premium billed annually; locale-specific, 2026-09-17
    RankerXWEB 2.0 CREATIONHIGH for manipulative use; qualitativeCurrent price unverified
    SapeLINK MARKETPLACEHIGH for manipulative use; qualitativeCurrent price unverified
    ScrapeBoxSCRAPING & LINK BUILDINGVARIES by use; no probability measuredCurrent price unverified
    SeleniumBROWSER AUTOMATIONVARIES by use; no probability measuredOpen-source; infrastructure costs separate
    SemrushCOMPETITIVE INTELLIGENCEVARIES by use; no probability measuredCurrent price unverified
    SEO AutopilotAUTOMATED LINK BUILDINGVARIES by use; no probability measuredCurrent price unverified
    SEO Content Machine (SEO Workspace)AI-ASSISTED GENERATIONVARIES by use; no probability measuredCurrent price unverified
    SEREBotCTR MANIPULATIONVARIES by use; no probability measuredCurrent price unverified
    SerpClixCTR MANIPULATIONHIGH for manipulative use; qualitativePosted Starter $197/month for 6,000 credits; displayed currency symbol, 2026-09-17
    SMS-ActivatePHONE VERIFICATIONVARIES by use; no probability measuredNot applicable — discontinued
    Spin Rewriter AI (formerly Spin Rewriter)CONTENT SPINNINGVARIES by use; no probability measuredCurrent price unverified
    TrafficShieldCLOAKING SERVICEVARIES by use; no probability measuredCurrent price unverified
    WordAiCONTENT SPINNINGVARIES by use; no probability measuredCurrent price unverified
    XRumerFORUM SPAMVARIES by use; no probability measuredCurrent price unverified
    ZennoPoster (ZennoLab)BROWSER AUTOMATIONVARIES by use; no probability measuredCurrent price unverified
    EXTENDED GLOSSARY

    Definitions are maintained in one place: the canonical extended glossary. Core and extended vocabulary share the same review notes and policy sources there.

    MAN BHT :: SHELL MANUAL
    v9.4 INTERFACE
    BHT(1) Black Hat SEO Terminal BHT(1) NAME bht — read-only intelligence archive with a command line SYNOPSIS press / to grep the whole archive (or Ctrl/⌘ + K) press : to open the shell press ? for the command list press [ ] to move to the previous / next section Shift+E / Shift+C expand or collapse every panel on the page COMMANDS ls list the sections with sizes cd 5 · cd tools jump to a section by number or name grep cloaking full-text search theme amber|green switch phosphor colour crt on|off scanlines and vignette boot on|off the BIOS screen on first visit neofetch · uptime · fortune · cowsay · history · clear eggs how many easter eggs you have found FILES search-index.json built from every heading and block on every page tools.json the structured tool database extracted at build time PREFERENCES Theme, CRT and boot choices persist in this browser only (localStorage). The starter exercises write local output files when you run the supplied Python kit. BUGS sudo does not work. It will not start working. SEE ALSO resources(9), defense(8)
              _______
             /       \        Here lies EASTER EGG #3.
            /  R.I.P  \       It ranked #1 for "easter egg" from 2019 to 2024.
           |  EGG #3   |
           |  2019-24  |      Cause of death: March 2024 core update.
           |           |      Survived by eggs #1, #2 and #4, who are still indexed.
       ____|___________|____
    
    EASTER EGG #3: The Deindexed Egg
    HISTORICAL REBUILD NOTES

    The following records earlier implementation claims; use the current changelog for the corrected edition. Legacy counts and features are not current completeness claims.

    v7.3 → v8.0
    v8.0 — SEPTEMBER 2026 :: TERMINAL REBUILD
    • Structure: the single 600 KB page became a multi-file site with one page per section, a file-tree sidebar, per-page table of contents, previous/next navigation and a single-file bundle for one-upload deployment.
    • Search: real full-text search across every page (press /), built from a search index generated at build time.
    • Shell: a command line (:) with navigation, preferences and a handful of easter eggs; keyboard shortcuts throughout.
    • Palette: the rainbow-era inline colours were remapped into a restrained amber CRT palette. Severity words in tables are now colour-coded consistently (green low, amber moderate, red extreme).
    • Tools Database: every tool card is now filterable by risk and category; the cards were parsed into tools.json at build time.
    • Fixed: the 90-day progression chart on the Starter Kit page referenced Chart.js without loading it, so it never rendered. That chart was later withdrawn because its synthetic numbers were presented without an adequate basis.
    • Fixed: several panels had mismatched open/closed states between the header and its content; they are synchronised on load.
    • Added: this appendix — reading paths, algorithm timeline, statute reference, detection-window table, technique and tool indexes, extended glossary, shell manual, and Easter Egg #3 (the original archive numbered eggs #1, #2 and #4).
    • Preserved: every text node, table, code block, ASCII banner, quote and easter egg from v7.3. The build ships with qa/verify-data.py, which checks this against the original file on every run.
    v7.3.0 — NOVEMBER 2025 :: LAST SINGLE-FILE EDITION

    Ten sections, 41 documented tools, Gootloader case study, underground marketplace analysis. The version this rebuild was made from; its historical text is retained in the project’s original source snapshot; current pages contain substantive corrections.

    BLACK HAT SEO TERMINAL v9.4 · built 2026-09-28 · 37 pages · 11 technique chapters · 48 tool records · 231 reference-list entries