Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

My website is being stolen in real time and I don't know what to do

news.ycombinator.com

Post reply on HN
Print view View original

41–50 of 111 posts

Re: My website is being stolen in real time and I don't know what to do

#42

Post by LanceH »

pilom wrote: post #7

You found out the right first step yourself: Block the source IP address. Sure it will turn into a game of whack-a-mole with them changing their IP but eventually, their customers will get fed up with their downtime. Second idea: Javascript redirect all of your pages to your own subdomain. Again, its just a step in an arms race, but this would be a little too hard/expensive to take to court. You can win an arms race…

The more subtle response is to feed them bad data until they can't trust you.

Re: My website is being stolen in real time and I don't know what to do

#44

Post by whitehat2k9 »

joeyjones wrote: post #2

Sample log excerpt: 162.222.227.123 - - [14/Feb/2014:18:18:48 +0000] "GET / HTTP/1.1" 200 23271 "-" "-" "162.222.227.123" 162.222.227.123 - - [14/Feb/2014:18:37:51 +0000] "GET /chain/42 HTTP/1.1" 200 76170 "-" "-" "162.222.227.123" 162.222.227.123 - - [14/Feb/2014:17:40:58 +0000] "GET /block/0e67dcf5f6797840a98061af7581138f2347feb168d78f7138d4268c6f854748 HTTP/1.1" 200 15719 "-" "-" "162.222.227.123" 162.222.227.123…

Since the faker's requests don't have a User-Agent, you could block all requests lacking a valid User-Agent HTTP header.

Re: My website is being stolen in real time and I don't know what to do

#46

Post by BlakePetersen »

beauzero wrote: post #13

Instead of blocking source IP. Detect and send "unwanted information".

I agree, this may be a more effective approach than trying to block the IP and the whole whack-a-mole issue.

Essentially, they trust the data you're providing and are trying to make a buck off that info. But if they lose that trust because they don't know whether the data is legit or not, you win!

I would also try to mask the fact that the data is not accurate, if they immediately see everything as simply zeroed out, it would be a huge red flag you're on to them. If you provide them ALMOST correct data, it would be harder for them to determine what's going on and their users will see realize the disparity and (hopefully) get burned and never come back.

Essentially, the trick is to destroy the site's credibility so there's no financial benefit to continue to steal from you.

Good Luck!

Re: My website is being stolen in real time and I don't know what to do

#47

Post by jw2013 »

putting following on your website and thus "notifying" 4coin users is such a clover move!!! I am just wondering what 4coin's next move may be.

"2014-02-14 A site has been found that is stealing the content in real-time: 4co.in. If you are viewing this from 4co.in please go to http://goo.gl/w1f6Sq to view the correct site. I am not responsible for any malicious content or malware on 4co.in."

Re: My website is being stolen in real time and I don't know what to do

#49

Post by codegeek »

Lot of good suggestions already. I am not sure if you are interested in contacting the perpetrator directly and asking them to stop this but I did a little research for you.

looking up the whois info, it says that the registrant's email was bgrf@ymail.com

When I put this email in google, I came across another spammy site called baklinks.blogspot.com. This site asks you to swap back links. At the bottom of the blog post, I found the name of the person "Naveen K R"

I then looked up google with "Naveen K R + bgrf". I was able to find a site he (probably) runs called www.zokali.com

More googling combos, I finally found his linkedin profile and his name "Naveen K Ramanand"

https://www.linkedin.com/in/krnaveen.

May be you can contact this guy directly. Seems like he is the one doing this or at least he knows who.

Post reply on HN