A brand new competitor domain ranked #1 in 24 hours with zero backlinks. Are they abusing the Indexing API and CTR bots?

Hi everyone,

I’m currently dealing with a very frustrating situation in a highly competitive, somewhat spammy Korean search niche (link directories/aggregators, main keyword: "여기여" - Yeogiyeo).

I recently launched a new site and did everything by the book (proper Wix setup, verified in Search Console, structured data/JSON-LD, etc.). As expected for a brand new domain, it’s currently sitting in the Google Sandbox and hasn't been indexed yet.

However, a competitor launched their site (여기여주소모아.com / EMD) at the exact same time (June 3rd), and by June 4th, they were already fully indexed and ranking #1 for the main highly-searched keyword.

Here is the breakdown of the competitor's profile:

• Domain Age: 1 day before hitting #1.
• Backlinks: 0 (Nothing shows up on Ahrefs or other tools).
• Domain History: Clean, no dropped/expired domain history.
• On-page SEO: They are using Wix just like me. Their source code is actually very basic, but they did use exact match keywords in a natural-sounding meta title and description.

My site [My Domain Hidden] is technically much better optimized with proper Schema markup, but I am completely ghosted by the SERPs right now.

Based on my research, I strongly suspect they are using a combination of hardcore black-hat tactics to bypass the sandbox and manipulate the algorithm:

1. Google Indexing API Abuse: Using Python/Node.js scripts to spoof "Job Posting" or "Broadcast Event" schemas to force Googlebot to index their pages instantly via the Indexing API.
2. Hidden 301 Redirects: Funneling link juice from high-authority expired domains they already own via 301 redirects to this new domain (which hasn't been picked up by backlink checkers yet).
3. CTR Manipulation / Traffic Bots: Firing massive amounts of fake mobile proxy traffic to search the exact keyword, click only their EMD, and stay on the page to fake user signals (dwell time) and trick Google’s RankBrain.

My questions for the community:

1. Has anyone seen this specific combination of tactics working this fast recently?
2. How long does it usually take for Google's spam update to catch onto this Indexing API abuse + CTR manipulation and de-index the site?
3. Since I am doing White Hat / standard SEO, what is the best way to survive this and outrank them once the dust settles? Should I just wait out the sandbox, or do I need to completely change my approach in this specific niche?

Any insights or similar experiences would be greatly appreciated!

main keyword: "여기여" - Yeogiye: This keyword gets at least 700,000 to 1 million views per month. Please just translate the sentence.

Just to add, this ranking only shows up when searching with a Korean IP address.

korean SERPs can be weird, especially in spam-heavy keywords. ranking in 24 hours doesn't automatically mean ctr bots or indexing api abuse. could be an aged asset behind the scenes, redirects, entity signals, or simply an EMD hitting the right intent. too early to tell after only a few days.

Oh, that keyword has over 1 million monthly searches in Korea.

Some of the blogs I build rank after starting link building or even with a few tier 1s. It's not a miracle here. Especially those foreign nichesâsuper easy to rank.

Most likely it’s not “clean SEO.” This kind of fast ranking usually comes from Indexing API abuse + hidden 301/PBN links + CTR manipulation.
It can work very fast in spam-heavy niches, but it’s rarely stable. Google usually catches up and either devalues the signals or resets the rankings over time.
If you’re doing white-hat, the only real move is consistency: get indexed properly, build real topical relevance, and don’t chase the same shortcuts — they’re usually short-lived.