Lots of great ideas here.
A slight variation or emphasis on some: Specifically aim to advertise your own site on the other one. While you can anyway.
Free advertising to their (should be your) audience, in return for what they're doing...
Seems fair!
Ask HN: Someone is proxy-mirroring my website, can I do anything?
91–100 of 310 posts
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#92Add the worst content imaginable to the page, but don't make it visible by default. If the site strips JS, then use CSS to only show the terrible content when it's shown on that domain. You can use css to check the current domain based on e.g. links.
Extra points if you can cause legal trouble for whoever runs the site. If you're hosting rather large files, then you can also hide content by default that will never be loaded on your site, but will load on the other site. Add a large file to your site, then reference that file a few thousand times with query params to ensure cache busting, and then make the browser load it all using CSS when it detects that it runs on the other site.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#931. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…
Why return big files when you can return small files at excruciatingly slow speeds? modems are hot again!
that's probably the best advice. Instead of denying the proxy, just make it shitty to use for the end-user.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#94there are infinite mitigations and it will always boil down to how much they want to do this vs how much you want to prevent them. in the end they could render in a remote controlled browser and use cdn or aws ip adresses en mass, i would consider highjacking their users in subtle ways like replacing pictures or text with obscenities or legal disclaimers. unfortunately their motivation is ad selling to other dodgy co…
Maybe op only needs to do enough to undermine their website, rather than drive them away.
it’s possible the combination of blocked image hotlinks, watermarking the domain inside the images, and CSS trickery that messes up the page on the proxy (along with whatever other steps that can be thought of to make it look wrong or erroneous on the proxied site) could get op bumped to #1 on search on enough links that it no longer matters.
Given the other site isn’t generating original content it’s unlikely to ever get its google juice back.
On a side note - does Google have an option for this? I’m sure they must have encountered this before and it helps the quality of their results too to block obviously fudged content.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#95My networking knowledge isn't great, so apologies if this is wrong. But if it's not wrong, it could help.
FIND THE IP FOR THE DOMAIN
PS > ping sukuns.us.to
Pinging sukuns.us.to [45.86.61.166] with 32 bytes of data:
Reply from 45.86.61.166: bytes=32 time=319ms TTL=39
...
https://dnschecker.org/ip-whois-lookup.php?query=45.86.61.166
And that WHOIS lookup gives an abuse email address:
"Abuse contact for '45.86.60.0 - 45.86.61.255' is 'abuse@dedipath.com'"
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#96Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#97Redirect via meta tag
won't survive a grep
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#981. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…
I really like #9, this seems like a simple way to make your site unusable except via the methods you desire.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#99No post body was provided.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#100well... the only reasonable thing to do is to find a hosting that accepts monero as a payment, rent a baremetal server with ipmi acces, cript the hardisk with lusk and veracrypt, scan 0.0.0.0/0 for unpached dns servers and start ddossing the mirror site