Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Someone is proxy-mirroring my website, can I do anything?

news.ycombinator.com

Post reply on HN
Print view View original

231–240 of 310 posts

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#231

Post by michaelmior »

c22 wrote: post #229
krater23 wrote: post #215

Earlier quoted context omitted.

Show me one website that today really works without javascript.

I've been surfing without javascript since 2015. Most websites continue to work fine without it (though some aesthetic breakage is pretty standard). About 25% of sites become unusable, usually due to some poorly implemented cookie consent popup. I don't feel like I'm missing out on anything by simply refusing to patronize these sites. I will selectively turn JS on in some specific cases where dynamic content is requi…

> Most websites continue to work fine without it

> About 25% of sites become unusable

These two statements seem pretty contradictory. 75% feels like a low threshold for "most."

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#232

Post by justsomehnguy »

tofuahdude wrote: post #205
justsomehnguy wrote: post #171

Earlier quoted context omitted.

Residential proxy botnet.

Why do they bother doing this domain proxy stuff in the first place?

High quality content with a good standing in Google => unique and quality impressions => more revenue from the ads they insert in the content.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#234

Post by NullPrefix »

santah wrote: post #71

Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…

>4) I blocked all of them

Don't block them. Show dicks instead

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#237

Post by watusername »

someweirdperson wrote: post #190

If they are serving all files, that should work for systems that check if you are the owner by asking to serve a file as a response to a challenge. The copy is using ZeroSSL. This seems to use a similar mechanism like letsencrypt to verify certs. Maybe, you could get their certificate by serving the response to their challenge from your server. Not idea how to proceed from there. Or activating the google webmaster to…

That's actually a good idea. Apparently it's possible to revoke the certificates via the ACME API, even when you are using another ACME account: https://letsencrypt.org/docs/revoking/#using-a-different-aut...

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#238

Post by matt_heimer »

stanislavb wrote: post #15
politelemon wrote: post #12

Add a link rel="canonical" to your pages as well, it should give engines a hint that your domain is the legit one. https://webmasters.stackexchange.com/questions/56326/canonic... I noticed that the other domain is hotlinking your images. So you can disable image hotlinking, by only allowing certain domains as the referers. If you block hotlinked images then the other domain will not look as good. Remember to do it fo…

I think they are replacing all mentions of saashub.com with their domain. Also, I'm not using statically.io, that's something they are prepending in front of all images. Automatically.

Sometimes the replacement is done with simple pattern matching. Try different forms of encoding you domain to see if you can get through their replacement.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#239

Post by Firmwarrior »

mkoryak wrote: post #146
smaudet wrote: post #139

Earlier quoted context omitted.

Is the primary motivator to do this? I'm curious if they are stealing anything else, e.g. are they selling ads/tracking, do they replace order forms with their own...

because I asked them to stop doing it, and they didn't. Technically they were stealing my bandwidth. Also to teach them an important lesson about the internet.

haha, they're just lucky you didn't introduce them to Goatse

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#240

Post by DoctorOW »

sublinear wrote: post #170
DoctorOW wrote: post #45

Earlier quoted context omitted.

In my search for this I found @document isn't super supported [0] I suggested something like: a[href*= "sukuns.us.to"] { display:none; } Then use SRI to enforce that CSS. [0]: https://caniuse.com/mdn-css_at-rules_document

I know this is just a game that never ends, but if they're already rewriting the HTTP requests what's stopping them from rewriting the page contents in the response? SRI is for the situation where a CDN has been poisoned, not this.

It might not explicitly be what SRI is meant for but it'll narrow the proxy's options to:

A. Blank page

B. Let the find and replace update the CSS. Generate new hashes in the HTML.

C. Find someone new to pick on.

B is time and potentially computationally expensive, so it makes C a better option.

Post reply on HN