Ask HN: Someone is proxy-mirroring my website, can I do anything?

Post by ElijahLynn » Mon, Dec 12, 2022, 8:08 PM UTC

reincoder wrote: post #230

marklit wrote: post #225

Earlier quoted context omitted.

As soon as you have a few of their IPs, look them up on ipinfo.io/1.2.3.4 and you'll find they probably belong to a handful of hosting firms. You can get each firm's entire IP list on that page and add all of those CIDRs to your block list. Saves you needing to make 30K web requests. In most countries in the western world, there are 3-4 major ISPs and this is where 99% of your legit traffic comes from. Regular people…

The site seems to be hosted on OVH cloud. OP should report this to them. https://www.ovh.com/abuse/ Found the hosting information from here: https://host.io/us.to

Post by klyrs » Mon, Dec 12, 2022, 8:18 PM UTC

nuccy wrote: post #166

michaelmior wrote: post #164

Earlier quoted context omitted.

As the OP mentioned, JS is stripped and URLs are being written, so I doubt either of those approaches will work.

Making js essential is not that hard, right? Just "display: none" on the root element, which is removed by js :) More sophisticated options can been found in other comments.

Post by sprior » Mon, Dec 12, 2022, 8:49 PM UTC

bvinc wrote: post #142

santah wrote: post #71

Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…

Might I suggest a spin on this: instead of blocking the IPs, consider serving up different content to those IPs. You could make a page that shames their domain name for stealing content. You could make a redirect page that redirects people to your website. Or you could make a page with absolutely disgusting content. I think it would discourage them from playing the cat and mouse game with you and fixing it by getting…

Post by [deleted] » Mon, Dec 12, 2022, 8:54 PM UTC

musabg wrote: post #27

1. Create fake url endpoint. And go to that endpoint in the adversary's website, when your server gets request, flag the ip. Do this nonstop with a script. 2. Create fake html elements and put unique strings inside. And you can search that string in search engines for finding similar fake sites on different domains. 3. Create fake html element and put all request details in encrypted format. Visit adversary's website…

Post by walrus01 » Mon, Dec 12, 2022, 8:59 PM UTC

sprior wrote: post #245

bvinc wrote: post #142

Earlier quoted context omitted.

Might I suggest a spin on this: instead of blocking the IPs, consider serving up different content to those IPs. You could make a page that shames their domain name for stealing content. You could make a redirect page that redirects people to your website. Or you could make a page with absolutely disgusting content. I think it would discourage them from playing the cat and mouse game with you and fixing it by getting…

"Or you could make a page with absolutely disgusting content." You've never heard of Rule 34, have you...