This has been around for a few years.
The simplest technique is through "Redirect Notices" from Google or other similar sites.
So for example, links such as the below are added to an obsolete Web 2.0 or to a blogspot or to a Youtube description or as a blog post in a shitty PBN.
Code:
maps.google.com.tw/url?sa=t&url=https://www.example.com images.google.co.id/url?sa=t&url=https://www.example.com images.google.com/url?sa=t&url=https://www.example.com images.google.at/url?sa=t&url=https://www.example.com maps.google.at/url?sa=t&url=https://www.example.com images.google.cz/url?sa=t&url=https://www.example.com maps.google.co.th/url?sa=t&url=https://www.example.com maps.google.com.ua/url?sa=t&url=https://www.example.com maps.google.com.tr/url?sa=t&url=https://www.example.com maps.google.com.mx/url?sa=t&url=https://www.example.com images.google.dk/url?sa=t&url=https://www.example.com maps.google.dk/url?sa=t&url=https://www.example.com maps.google.hu/url?sa=t&url=https://www.example.com maps.google.fi/url?sa=t&url=https://www.example.com
How to check?
1.Check the domain in Moz
2. Goto "Inbound Links" section
3. If you see a lot of "Redirect Notices" or links from sites like maps.google or plus.google or something - the DA has been manipulated.
4. Run like hell from such providers.