Hacked-Source Injection Report: october-2026.

18 live-site surface checks run

The quietest class: legitimate sites compromised to host links into the victim — real, aged domains carrying spam, far harder to classify than churn-farm inventory. A surface check reads the loud version only; this class is what continuous profile review exists for.

Honest scope note: no outside scan can see the quiet version forming. The signed-in check plus human review of marginal links is the instrument for this class — clear spam sinks automatically, and anything not clearly spam gets a human read before any verdict lands.

Run the free surface check

Method & limits

Scope: this ledger is the retail edge (seosink.com's own protection surface) plus every free check run. Estate-wide attack telemetry merges into these reports in a later release — the numbers here are exact for what they measure, and they are a floor, not a ceiling.

Detail that would teach the attacking farm what we can see — fingerprints, source IPs, target properties — is aggregated or held back 30 days. Counts are always exact.