In May, I published a deep dive on a Pakistani firm that had just been charged w/ shipping fentanyl analogs to the US and was behind a sprawling empire of scam ghostwriting, app and logo design companies that were spending millions on Google ads to promote their scam businesses.

https://krebsonsecurity.com/2025/05/pakistani-firm-shipped-fentanyl-analogs-scams-to-us/

The story received a decent amount of attention, but it almost immediately dropped off Google search entirely. Searching for the headline brought only links to other sites covering my report. This persisted for almost two weeks and I never got a satisfactory answer from Google about why the story dropped from search.

Just read a story at Ars Technica about how a tech CEO who was trying to quash reporting about his alleged misdeeds used a feature in Google known as Refresh Outdated Content to trick Google into deindexing the unflattering stories about him. The method he reportedly used was working until last month. Makes me wonder how widely known this bug was.

https://arstechnica.com/gadgets/2025/07/google-tool-misused-to-scrub-tech-ceos-shady-past-from-search

https://infosec.exchange/@briankrebs/114512527951494345

Pakistani Firm Shipped Fentanyl Analogs, Scams to US – Krebs on Security

@briankrebs If you have access to an archive of server access logs for the timeframe you should see the requests from googles crawler bot with the wrong case for the URL getting a 404, right? For a public site it might be hard to spot in the deluge of 404s from bots scanning for vulns, but use of this bug should leave a distinct trail, right?

Actually searching the logs for `/[pP][aA][kK].../` the specific article title in mixed case should greatly narrow down the possibilities.

You may have already done this, or not have access to the relevant logs anymore, but I comment anyway on the off-chance this is helpful in some way and not wasting your time. HTH and have a wonderful Friday :-)