My guess is that they ran it on smaller sites only and targeted those. In my case, it was a "entertainment news"-site that pulled in about 3-5k visitors/day bac

My guess is that they ran it on smaller sites only and targeted those. In my case, it was a "entertainment news"-site that pulled in about 3-5k visitors/day back then - enough to get a lot of victims seeing your ad but not enough that they'd have a direct line to Google or have their own IT people.