Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Someone is proxy-mirroring my website, can I do anything?

news.ycombinator.com

Post reply on HN
Print view View original

51–60 of 310 posts

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#53

Post by batch12 »

Have you looked at filtering the traffic by ASN? You may be able to identify the provider your adversary likes to use and apply some of the controls musabg suggested to any traffic sourcing from these networks.

I have a website doing this to one of my domains. I have let it slide for now since I get value out of users that use their site too, but I have thought about packing their content with advertisements to turn the tables a bit.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#55

Post by gary_0 »

trinovantes wrote: post #5

They are probably using some public cloud service so simply banning all IPs from cloud ASNs [1] will usually be enough. Downside is you're also banning any users using VPNs [1] https://github.com/brianhama/bad-asn-list

Another resource that can be used to check for abusive client IPs is https://github.com/firehol/firehol

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#57

Post by gildas »

pastacacioepepe wrote: post #56
gildas wrote: post #52

Block all requests having " https://sukuns.us.to " as "Referer" HTTP header.

Requests are proxied so the proxy can rewrite the Referer HTTP header at will, AFAIK.

It looks like they're also downloading images directly from your domain, I see https://www.saashub.com/images/app/service_logos/129/k2q4pxz... for example in my debugger.

Edit: you could maybe add a tag to define a CSP in but I guess they will remove it [1].

[1] https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#58

Post by spiffytech »

musabg wrote: post #27

1. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…

> 5. Instead of banning them, return fake content (fake titles and fake images etc) if proxy is detected OR the ip is flagged.

> 6. Don't ban the flagged ip's. She/He's gonna find another one. Make them angry and their user's angry so they give up on you.

There's a popular blog that no longer gets linked on HN.

The author didn't like the discussions HN had around his writing, so any visitors with HN as the referer are shown goatse, a notorious upsetting image, instead of the blog content.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#60

Post by GTP »

spiffytech wrote: post #58
musabg wrote: post #27

1. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…

> 5. Instead of banning them, return fake content (fake titles and fake images etc) if proxy is detected OR the ip is flagged. > 6. Don't ban the flagged ip's. She/He's gonna find another one. Make them angry and their user's angry so they give up on you. There's a popular blog that no longer gets linked on HN. The author didn't like the discussions HN had around his writing, so any visitors with HN as the referer ar…

Out of curiosity, which blog are you talking about?
Post reply on HN