Ask HN: Someone is proxy-mirroring my website, can I do anything?

Post by [deleted] » Mon, Dec 12, 2022, 2:04 PM UTC

rexreed wrote: post #77

santah wrote: post #71

Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…

For 2) you mean you loaded it from the adversary's proxy site, just to clarify?

Post by egberts1 » Mon, Dec 12, 2022, 2:11 PM UTC

mkoryak wrote: post #41

musabg wrote: post #27

1. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…

I like how you think. These are all great ideas! Reminds me of a time some real estate website hotlinked a ton of images from my website. After I asked them to stop and they ignored me I added an nginx rewrite rule to send them a bunch of pictures of houses that were on fire. For some reason they stopped using my website as their image host after that.

Post by [deleted] » Mon, Dec 12, 2022, 2:14 PM UTC

GTP wrote: post #60

spiffytech wrote: post #58

Earlier quoted context omitted.

> 5. Instead of banning them, return fake content (fake titles and fake images etc) if proxy is detected OR the ip is flagged. > 6. Don't ban the flagged ip's. She/He's gonna find another one. Make them angry and their user's angry so they give up on you. There's a popular blog that no longer gets linked on HN. The author didn't like the discussions HN had around his writing, so any visitors with HN as the referer ar…

Out of curiosity, which blog are you talking about?

Post by ChrisMarshallNY » Mon, Dec 12, 2022, 2:15 PM UTC

DoctorOW wrote: post #45

musabg wrote: post #27

1. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…

In my search for this I found @document isn't super supported [0] I suggested something like: a[href*= "sukuns.us.to"] { display:none; } Then use SRI to enforce that CSS. [0]: https://caniuse.com/mdn-css_at-rules_document

    body[href*= ""] {
        background-image: url("http://goatse..."); 
    }

Post by nigma1337 » Mon, Dec 12, 2022, 2:18 PM UTC

sagarpatil wrote: post #68

What’s the motivation for someone to proxy mirror a site? Does copied content even rank in Google? How are they driving the traffic to it?