Welcome to WebmasterWorld Guest from 188.8.131.52
I am really PO'd and worried right now.
Someone in China is duplicating my page and hundreds of others and spoofing the url like:-
Whats up with this?
I am about to email a bunch of sites he has done this to, but want to make sure this is not some legit thing, I don't understand (newbie)
I tried running a whois on the domain in question and can't get results
[edited by: trillianjedi at 10:09 am (utc) on Jan. 16, 2005]
[edit reason] TOS - no specifics or URL's please [/edit]
It sounds to me like a 302 page-jacking:-
Is this only taking effect in Google, or are you experiencing this in more than one search engine?
If the former, we'll move this thread over to google news, although I think you'll find your answers starting with the thread above.
The url that is in the logs is something like ht tp://***.to/placename . When you click this link it takes you directly to a subsite (small B&B) on our main site. The url in the browser shows the above highjacker.
When I go back to the root domain ht tp://***.to I get a re-direct to a webhosting company. Can anybody steer me in the right direction?
[edited by: trillianjedi at 12:49 pm (utc) on Jan. 16, 2005]
[edit reason] Let's not try to fool the swear filter ;-) [/edit]
The site I am referring to, [domain] seems to be doing this to almost all sites.
Type in any major site name like paypal
and ad [domain] to the end
Or even more interesting
[famous site mirrored as a subdomain of the domain in question]
Someone suggested that, this [domain] was a phishing scam, or maybe just a way for Chinese to get unfiltered interenet access.
But Seeing the Whitehouse page makes me think its not for Chinese free speach.
[edited by: ciml at 7:48 pm (utc) on Jan. 28, 2005]
[edited by: Brett_Tabke at 3:59 am (utc) on Jan. 29, 2005]
[edit reason] As trillianjedi wrote already, no specifics please. [/edit]
They determined that it was 'a proxy server that filters out Flash', so regardless of what domain you enter it'll show as existing on their site.
The site itself mentions the filter, and if you have a Chinese speaking friend, it seems they'll confirm the content of the site.
The end recommendation was to ban the IP.
Interesting to say the very least, all 100+ of our sites are there...everything original and up-to-date, nothing removed, nothing added.
I've e-mailed their contacts however I reckon the only way to resolve it, if you want to stop it, is as CodeJockey says, ban their IP.
However they do have this at the bottom of their index page:
[their domain].com filters the function: You add in the back of existing websites [their domain] is visited, can filter FLASH above ,etc. , benefits your use. If you are a network station owner, do not hope your websites are filtered and visited , can apply to cancel .
Apache users can add their IP block to your .htaccess file like this,
Deny from [IP address]
Anyone else with info?
[edited by: ciml at 1:02 pm (utc) on Jan. 29, 2005]
[edit reason] No specifics please. [/edit]
We can't seem to do anything about it so I took actions in to my own hands.
google.com is shown as HTTP/1.1 404 Object Not Found
google.co.uk is shown as normal as too is .de .it .fr etc
yahoo.com & yahoo.co.uk is shown as HTTP/1.1 404 Object Not Found
Who knows what?
The following worked for me to get all redirect urls removed from Google. Works only for Google as no other search engine has a removal tool to my knowledge.
1). Open account in Google url removal tool
2). Temporarily set your robots metatag to "noindex" on the page that is getting the redirect
3). Enter the Google url removal tool
4). In another browser window, Google search inurl:yourdomain.com to help find redirects to your site.
5). Enter each undesirable redirect url into the Google url removal tool. [Some redirect urls are legit and may bring you good traffic]
6). Change your metatag back to "index"
The removal tool will check for "noindex" in your metatag. This is just to safeguard against competetors removing your urls you intend to be indexed. This works because the Google removal tool checks the metatag of the final destination. So, this is a good way to get redirects that you do not want indexed in Google removed.
This happens about once every couple of months. This is atleast the 5th time in the last two years. All they do is run a proxy service for an ISP in Bejing.
It is always the same chinese crew and Google is well aware of them.
What is new this time is that they are starting to rip pages via the Yahoo and MSN cached pages. So, they don't even visit your site to get your sites code.
I'm within a hairs breath of banning the entire tld .CN entirely.
I wish Google would step in...they could solve this in a minute.
You could occassionaly try to visit copyscape & detect sites who duplicate your site pages.
To prove you existed before them, you can try archive.org.
More suggestions will be welcome since this prob seems to be growing...
(Requesting mod to permit urls posted above since they are helpful- thanks)
"All I did was keep the url the same and edit the pictures just for them and their audience to see."
I do a nice image swap here, using new filenames for original image in original page
and swapping something fun in for original image filename.
Is that what you are doing, or something else?
Suppose they swipe your .html page? Then what?
I'm not about to change filenames for web pages .. that would be a _real_ mess.
Can you fill me in? Thanks - Larry
All major sites are spoofed.
It seems if you are on page one of Google, they probably spoofed your site.
How would you block all IP's from China?
I don't do any business there and don't want to.
I guess the only option is through .htaccess , right?
Anyone know another way?
.htaccess won't seem to work on my site.
the contact and copyright info are the least of your worries if Google, Y! and MSN index both yoursite*[their domain].com and yoursite*com.
Where is Google on this? hellooooo? Anybody home? Do you guys even care anymore? 302 hijackings been going on for months and this. Yahoo fixed them both!
[edited by: ciml at 4:18 pm (utc) on Jan. 29, 2005]
[edit reason] Examplified [/edit]