Help: My site is mirrored by another domain

nickfoxx · May 8, 2020

My site is mirrored on the following domain http://vickmotesta.ml
The domain on which the mirror copy is used Cloudflare and I can't reach the original IP address.
I have no idea what they use to do this.
I tried everything to deal with the problem, but to no avail.
My site is on WordPress.
How to stop this.

Kamikazee · May 8, 2020

Stop spamming here with your site link. Admins take care of this guy.

freenulled · May 8, 2020

This is Domain Info Contact to [email protected] & [email protected]:

Domain name:
VICKMOTESTA.ML

Organisation:
Mali Dili B.V.
Point ML administrator
P.O. Box 11774
1001 GT Amsterdam
Netherlands
Phone: +31 20 5315725
Fax: +31 20 5315721
E-mail: abuse: [email protected], copyright infringement: [email protected]

Domain Nameservers:
ETTA.NS.CLOUDFLARE.COM
THEO.NS.CLOUDFLARE.COM

nickfoxx · May 8, 2020

Kamikazee said:
Stop spamming here with your site link. Admins take care of this guy.

This is no spam. This is my problem.

nickfoxx · May 8, 2020

freenulled said:
This is Domain Info Contact to [email protected] & [email protected]:

Domain name:
VICKMOTESTA.ML

Organisation:
Mali Dili B.V.
Point ML administrator
P.O. Box 11774
1001 GT Amsterdam
Netherlands
Phone: +31 20 5315725
Fax: +31 20 5315721
E-mail: abuse: [email protected], copyright infringement: [email protected]

Domain Nameservers:
ETTA.NS.CLOUDFLARE.COM
THEO.NS.CLOUDFLARE.COM

I sent emails to both emails, but there was no response. There is no action to stop this. The domain continues to function.

TassieNZ · May 8, 2020

nickfoxx said:
I sent emails to both emails, but there was no response. There is no action to stop this. The domain continues to function.

It will take TIME to get a response.

nickfoxx · May 8, 2020

TassieNZ said:
It will take TIME to get a response.

I wrote to them two weeks ago

TassieNZ · May 8, 2020

nickfoxx said:
I wrote to them two weeks ago

If this is legitimate, I would send a reminder.

If not legitimate, I could take both sites down, just for practice!

elmocando · May 8, 2020

nickfoxx said:
My site https://news-bulgaria.info is mirrored on the following domain http://vickmotesta.ml
The domain on which the mirror copy is used Cloudflare and I can't reach the original IP address.
I have no idea what they use to do this.
I tried everything to deal with the problem, but to no avail.
My site is on WordPress.
How to stop this.

How did you find the mirrored site? It's scary. Please let me know the process of searching my sites mirrored one.

nickfoxx · May 8, 2020

TassieNZ said:
If this is legitimate, I would send a reminder.

If not legitimate, I could take both sites down, just for practice!

So why both? I just want the one /vickmotesta.ml/, who mirrors my site to stop working.

nickfoxx · May 8, 2020

elmocando said:
How did you find the mirrored site? It's scary. Please let me know the process of searching my sites mirrored one.

Google Adsense informed me that the ads were showing on another site and showed me who it was.

nickfoxx · May 8, 2020

TassieNZ said:
If this is legitimate, I would send a reminder.
If not legitimate, I could take both sites down, just for practice!

My site is legitimate site.
This is a web media in Bulgaria and everything in it is in Bulgarian.
There can be no legitimate site from the domain zone ML / Mali / such as the mirror vickmotesta.com.

TassieNZ · May 8, 2020

nickfoxx said:
Google Adsense informed me that the ads were showing on another site and showed me who it was.

Hmmm! Your answers to this thread make me think you are legitimate. Send a reminder e-mail to [email protected] & [email protected] and I'll take an in depth look tomorrow.

TassieNZ

madroots · May 8, 2020

hm is there a way to search a log and figure out what IP is scraping your page? This SHOULD be possible to detect. for example, make a honeypot and discover this info. Then just use wordfence or other firewall to block it, and keep an eye on any new IP's.

Another solution would be to warn your users that you are under attack and they should verify they use safe version of the website, using some external element an attacker could not copycat. You need to figure out this one, but I have seen it around many times and it is a good way of protecting your users.

Permanent solution would be perhaps finding out his hosting provider and contact them. They will be more then willing to take care of that asshole. But this might require someone good at information gathering as this could be easily self-hosted server behind proxy.

You might contact cloudflare too.

Do not bother to contact freenom, they dont give a crap and lol, they will probably take his domain anyway and load it up with their ads. They always do that if the domain is receiving good amount of traffic.
So another option would be just wait for freenom to do their shitty routine.

nickfoxx · May 9, 2020

TassieNZ said:
Hmmm! Your answers to this thread make me think you are legitimate. Send a reminder e-mail to [email protected] & [email protected] and I'll take an in depth look tomorrow.

TassieNZ

I sent letters again to the two e-mails, signed with a digital signature. I hope they answer, but I can't believe it. Something does not inspire confidence in this registrant.

TassieNZ · May 9, 2020

nickfoxx said:
I sent letters again to the two e-mails, signed with a digital signature. I hope they answer, but I can't believe it. Something does not inspire confidence in this registrant.

As mentioned above by @madroots try e-mailing CloudFlare as well.

nickfoxx · May 9, 2020

TassieNZ said:
As mentioned above by @madroots try e-mailing CloudFlare as well.

I have already written and talked to them.
Apart from sending me the info about the registrant, they did nothing else.

livetester · May 9, 2020

nickfoxx said:
My site is mirrored on the following domain http://vickmotesta.ml
The domain on which the mirror copy is used Cloudflare and I can't reach the original IP address.
I have no idea what they use to do this.
I tried everything to deal with the problem, but to no avail.
My site is on WordPress.
How to stop this.

Hey I see http://vickmotesta.ml/ is running a proxy server of your main domain. you can block the proxy server

nickfoxx · May 9, 2020

livetester said:
Hey I see http://vickmotesta.ml/ is running a proxy server of your main domain. you can block the proxy server

Yes, it uses cloudflare. I tried everything, but it doesn't help.
I'm not very up to date with these things.

dannyl · May 9, 2020

Not my code, but adding this to your .htaccess file should do the trick

Code:

# block proxy servers from site access
# https://perishablepress.com/press/2008/04/20/how-to-block-proxy-servers-via-htaccess/

RewriteEngine on
RewriteCond %{HTTP:VIA}                 !^$ [OR]
RewriteCond %{HTTP:FORWARDED}           !^$ [OR]
RewriteCond %{HTTP:USERAGENT_VIA}       !^$ [OR]
RewriteCond %{HTTP:X_FORWARDED_FOR}     !^$ [OR]
RewriteCond %{HTTP:PROXY_CONNECTION}    !^$ [OR]
RewriteCond %{HTTP:XPROXY_CONNECTION}   !^$ [OR]
RewriteCond %{HTTP:HTTP_PC_REMOTE_ADDR} !^$ [OR]
RewriteCond %{HTTP:HTTP_CLIENT_IP}      !^$
RewriteRule ^(.*)$ - [F]

And for other steps, check https://www.ingeniumweb.com/blog/po...ervers-to-make-your-website-more-secure/3798/

Help: My site is mirrored by another domain

Welcome to Original Babiato! All Resource are Free and No downloading Limit.. Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here!Support Our Work By Donating Click here!

Join Our Official Telegram Channel For updates Bypass All the resource restrictions/Password/Key? Read here! Read Before submitting Resource Read here!

Support Our Work By Donating Click here!

New member

New member

Well-known member

New member

New member

Premium Uploader and Sometimes Hacker!

New member

Premium Uploader and Sometimes Hacker!

Active member

New member

New member

New member

Premium Uploader and Sometimes Hacker!

Active member

New member

Premium Uploader and Sometimes Hacker!

New member

Member

New member

Member

Similar threads

Forum statistics

Share this page

Welcome to Original Babiato! All Resource are Free and No downloading Limit..
Join Our Official Telegram Channel For updates
Bypass All the resource restrictions/Password/Key? Read here!
Read Before submitting Resource Read here!
Support Our Work By Donating Click here!

Join Our Official Telegram Channel For updates
Bypass All the resource restrictions/Password/Key? Read here!
Read Before submitting Resource Read here!