301–310 of 310 posts
Earlier quoted context omitted.
Abuse contacts never work. I've never had any success hounding them about malicious sites they host.
actually works very well when it's combined with DMCA takedown request.
Earlier quoted context omitted.
Does anyone not have their referer header supressed or faked?
I strip the referrer generally via https://wiki.mozilla.org/Security/Referrer , unfortunately it breaks a small number of sites very badly, such as web.archive.org and a few others. some of them claiming it was done to combat scraping.
One bad example is relying on the referer only for log-out, everything else works. That site also runs massive js on log-out, as if it really needs to rely on explicit log-out, and not just the user disappearing.
Earlier quoted context omitted.
Why do they bother doing this domain proxy stuff in the first place?
High quality content with a good standing in Google => unique and quality impressions => more revenue from the ads they insert in the content.
More examples here from long long ago.. http://www.ex-parrot.com/~pete/upside-down-ternet.html
Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…
Might I suggest a spin on this: instead of blocking the IPs, consider serving up different content to those IPs. You could make a page that shames their domain name for stealing content. You could make a redirect page that redirects people to your website. Or you could make a page with absolutely disgusting content. I think it would discourage them from playing the cat and mouse game with you and fixing it by getting…
What about a slightly alternative approach, where instead of trying to block the abuser, you try to make it clear to end users what the real website is? E.g. in your logo image, include the real domain name "saashub.com". Have some introduction text on your home page "Here at saashub.com, we compare SaaS products ...." When your images are hotlinked, replace them with text like "This is a fraudulent website, find us…
Not sure if this would help since: > 4) Use absolute URLs everywhere - they are rewriting everything www.saashub.com to their domain name.
Same thing happened to me and my service ( https://next-episode.net ) almost 2 years ago. I wrote a HN post about it as well: https://news.ycombinator.com/item?id=26105890 , but to spare you all the irrelevant details and digging in the comments for updates - here is what worked for me - you can block all their IPs, even though they may have A LOT and can change them on each call: 1) I prepared a fake URL that no leg…
This made me wonder whether something similar was happening to my domain? How would one go about finding out?
If your site had been copied but wasn't indexed by the big search engines, that would presumably limit the options to make money from it?
Earlier quoted context omitted.
Making js essential is not that hard, right? Just "display: none" on the root element, which is removed by js :) More sophisticated options can been found in other comments.
Forcing all users of your website to use JavaScript to get around a scammer is pretty heavy-handed.