Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Ask HN: Someone is proxy-mirroring my website, can I do anything?

news.ycombinator.com

Post reply on HN
Print view View original

201–210 of 310 posts

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#201

Post by nomel »

heelix wrote: post #191
swsieber wrote: post #184

Earlier quoted context omitted.

I think you missed the point - if people show up at $PROXY expect nice stuff but see junk, then they won't move over to $REAL and instead blame $REAL. E.g. you'd like some way to redirect people from $PROXY site to $REAL site, and disgusting content on $PROXY won't do that - it'll reflect poorly on $REAL

If you can identify the crawler - you can provide 'dynamic' content for that specific user context.

It's a proxy, so there's no "crawler". It's just an agent relaying to the user. Passing something to this proxy agent just passes it directly to the user.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#203

Post by tofuahdude »

nuccy wrote: post #166
michaelmior wrote: post #164

Earlier quoted context omitted.

As the OP mentioned, JS is stripped and URLs are being written, so I doubt either of those approaches will work.

Making js essential is not that hard, right? Just "display: none" on the root element, which is removed by js :) More sophisticated options can been found in other comments.

Tail wagging the dog is never a good answer.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#205

Post by tofuahdude »

justsomehnguy wrote: post #171
santah wrote: post #150

Earlier quoted context omitted.

No cloud providers as far as I'm aware. They were all from the same 4-5 ASN networks, all based in Russia.

Residential proxy botnet.

Why do they bother doing this domain proxy stuff in the first place?

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#206

Post by adventured »

santah wrote: post #150
WirelessGigabit wrote: post #106

Earlier quoted context omitted.

They literally proxy your website? I thought they'd cache it... that makes more sense now in your statement that you hit their website with a specially formatted url. Since they pass that through to you you can filter on that. Also: since you say 4k-5k IPs... any of them from cloud providers? And specific location?

No cloud providers as far as I'm aware. They were all from the same 4-5 ASN networks, all based in Russia.

If you happen to use Cloudflare.... Cloudflare -> Firewall rules -> Russia JS Challenge (or block)

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#207

Post by hedora »

LinuxBender wrote: post #144

I tried to look up their site then realized I block "us.to" locally. Since you have their site linked in this thread they are likely seeing the HN thread as a referrer in their access logs and reading this. I expect this to turn into an ongoing battle as a result, but maybe this could be a fun learning exercise for everyone here. The current IP 45.86.61.166 is likely a compromised host [1] which tells me you are deal…

Lol:

> How to delete the test file from your PC

> We understand (from the many emails we receive) that it might be difficult for you to delete the test file from your PC. After all, your scanner believes it is a virus infected file and does not allow you to access it anymore. At this point we must refer to our standard answer concerning support for the test file. We are sorry to tell you that EICAR cannot and will not provide AV scanner specific support. The best source to get such information from is the vendor of the tool which you purchased.

> Please contact the support people of your vendor. They have the required expertise to help you in the usage of the tool. Needless to say that you should have read the user’s manual first before contacting them.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#208

Post by zhengyi13 »

hedora wrote: post #189
bvinc wrote: post #142

Earlier quoted context omitted.

Might I suggest a spin on this: instead of blocking the IPs, consider serving up different content to those IPs. You could make a page that shames their domain name for stealing content. You could make a redirect page that redirects people to your website. Or you could make a page with absolutely disgusting content. I think it would discourage them from playing the cat and mouse game with you and fixing it by getting…

One possibility: Serve different content, but only if the user agent is a search engine scraper. Wait a bit to poison their search rankings, then block them.

... be careful with this.

Assuming you've monetized your content with ads, depending on your ads provider, this may have deleterious effects on your account with that provider, as they may then assume you're trying to game ads revenue.

Re: Ask HN: Someone is proxy-mirroring my website, can I do anything?

#209

Post by kelnos »

michaelmior wrote: post #176
nuccy wrote: post #166

Earlier quoted context omitted.

Making js essential is not that hard, right? Just "display: none" on the root element, which is removed by js :) More sophisticated options can been found in other comments.

Forcing all users of your website to use JavaScript to get around a scammer is pretty heavy-handed.

Presumably OP would only have to do this for a limited time, until the scammer gives up and moves on to an easier target. It's not the best, but I don't think it's as bad as you say.
Post reply on HN