Use them a free CDN? User page from your domain actually downloads content through them but with your ads. (Maybe for the continents which are not your primary market.)
(Less economical if they're not caching anything.)
Ask HN: Someone is proxy-mirroring my website, can I do anything?
271–280 of 310 posts
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#272Does it hurt you in any way? If not - I would just leave it alone. Google can tell a copy from original. I tried to search some arbitrary text from your website - there is no trace of copycat in Google SERP. What striked me, though, is that a copycat website is waaaay faster than your original. If I were in your shoes, I would invest my time and effort into speeding up the site. Unlike hunting some script kiddies, th…
Bing is directing searches for their service to the fake web site, which is then serving up porn after a few seconds delay. I'd say it is hurting them.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#273HN probably won't like this but if they are blocking all JS you can make all content invisible with CSS and use JS to unhide it before page load finishes. Temporarily of course until these guys go away. The nice thing about this is it can be made arbitrarily complex. For example you can make the page actually blank and fetch all the normal, real content with JS after validating the user's browser as much as you like…
I very much would leave the website if I'm opening the site for the first time and it doesn't even render partially, but I recognise people like me are the minority of potential visitors.
Unless you have a tiny target audience that includes people who tend to disable Javascript, this seems like a fine solution. I use JS to hide email from the most basic of scrapers most of my sites and so far it has worked wonders.
However, long term this seems like a solution that will be difficult to maintain. Either the proxy will start stripping CSS as well (s/hidden/visible) or it'll require constantly playing along in a cat-and-mouse game that you don't stand to gain anything in by winning.
I would add random, page-like endpoints that only you know and request them through their proxy (through VPNs/TOR/you name it). Ban the entire /48 (IPv6) or /24 (IPv4) or send them into a tar pit (iptables -A INPUT -p tcp -m tcp -dport 80 -j TARPIT for the IP address you target) to exhaust their resources.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#274My networking knowledge isn't great, so apologies if this is wrong. But if it's not wrong, it could help. FIND THE IP FOR THE DOMAIN PS > ping sukuns.us.to Pinging sukuns.us.to [45.86.61.166] with 32 bytes of data: Reply from 45.86.61.166: bytes=32 time=319ms TTL=39 ... REVERSE DNS TO FIND HOST https://dnschecker.org/ip-whois-lookup.php?query=45.86.61.166 Apparently it's "Dedipath". And that WHOIS lookup gives an abu…
Abuse contacts never work. I've never had any success hounding them about malicious sites they host.
actually works very well when it's combined with DMCA takedown request.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#275Earlier quoted context omitted.
Making js essential is not that hard, right? Just "display: none" on the root element, which is removed by js :) More sophisticated options can been found in other comments.
It's trivial to strip that "display: none" out, too.
Yea if they're already rewriting content to serve ads (likely since they're probably not doing this for altruistic reasons) you're just putting off the inevitable. While blocking or captcha'ing source IPs is also a cat and mouse game it's much more effective for a longer period of time.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#276The following can be done for free without an API key or Shodan account:
1. Grab the list of IPs that you've already identified and feed them through nrich (https://gitlab.com/shodan-public/nrich): "nrich bad-ips.txt"
2. See if all of the offending IPs share a common open port/ service/ provider/ hostname/ etc. Your regular visitors probably connect from IPs that don't have any open ports exposed to the Internet (or just 7547).
3. If the IPs share a fingerprint then you could lazily enrich client IPs using https://internetdb.shodan.io and block them in near real-time. You could also do the IP enrichment before returning content but then you're adding some latency (<40ms) to every page load which isn't ideal.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#277Earlier quoted context omitted.
Forcing all users of your website to use JavaScript to get around a scammer is pretty heavy-handed.
Show me one website that today really works without javascript.
Even JS-heavy websites are moving towards being usable without Javascript with server side rendering.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#278No post body was provided.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#279Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…
Might I suggest a spin on this: instead of blocking the IPs, consider serving up different content to those IPs. You could make a page that shames their domain name for stealing content. You could make a redirect page that redirects people to your website. Or you could make a page with absolutely disgusting content. I think it would discourage them from playing the cat and mouse game with you and fixing it by getting…
I've tried this with zip bombs, but I can't tell how well it worked out.
Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?
#280[deleted]