Understanding advanced cloaking mechanism

I'm trying to understand what my competitors are doing in the casino niche in a European country. They have a very advanced cloaking mechanism that I'm having trouble understanding.

They put a website up, and after a few hours it's already in first place and receives millions of visitors.

The technique from what I was able to understand is this:
1. Buying an expired domain with lots of links
2. 3 versions of websites connected to this domain, one website they replicate according to the wayback machine and this is what is shown to every user who comes from a desktop and from a foreign country. (I can't even understand why they restore the website that the domain was associated with before)
The second is the website that gamblers go to, access to it is only via mobile and only via the IP of that country (if you use a VPN it doesn't work)
And the third is the cloaking, which is actually what Google only sees.

Now I can't see the cloaking no matter what I tried, rich result tools, all kinds of different techniques, I can't see what they are submitting to Google, what I do see is that they manage to get indexed very quickly, with a 1 page website, something that Google doesn't like that much either and they just bolt straight to the top spots for all the relevant phrases.

In the end, there is a meta title + description with the most relevant and powerful expressions, the html of the sites does not display any such meta data, they are constantly blocked and new sites are uploaded.

Can someone shed some light on this mechanism for me?

thanks!

Hmm, domains with good backlink profiles are really hard to get.
Lots of competition

What you’re describing sounds like heavy pre-landing + conditional delivery rather than classic visible cloaking. Usually it’s UA/IP filtering with fast churn on expired domains letting links do the lifting before burn.

This is aggressive parasite SEO combined with heavy cloaking using user agent, IP, and device filtering. They leverage expired domain authority for fast indexing and rankings, but the setup is short-lived and burns domains quickly once detected.

shayamos said:

And the third is the cloaking, which is actually what Google only sees.

Click to expand...

tell me what do you see in google SERPs about that domain.
what title and description that they want googlebot to index.?