Black hat seo proxy attack on my website?

saionara said:

Hey I have a problem with my site. Someone is making duplicates of my site (live duplicates, they fetch my content and renders in theirs but they remove all javascript and change my site name strings to theirs) so it's like a proxy of my site.
But those sites are stealing my google rankings, when I type a keyword I can see my site is not on google but theirs is (ranked high) so it's like it's my search result but the link got replaced to their site.
I've blocked the sites already but I think it's too late. How can I get my positions back, or replace their site with mine on google? Also, can I block such things in the future?
My site is 123filmy(dot)pl example proxy site is xxx (already blocked)
Just type in google site:123filmy(dot)pl , the titles are changed there to cheaptramadolovernight(dot)net: Najlepsze... instead of 123filmy(dot)pl: Najlepsze...
The links are not changed there but when I type in google for example my post name the result is linked to their site
tl;dr
someone made some live proxy sites of my site fetching my content and rendering it on theirs and their sites show up on google instead of mine and they show on the same position where mine were (but mine is not in google now)

Click to expand...

kickthat said:

Sure your site has not been compromised and is redirecting search engine user agents to the other domain?

Click to expand...

Buli said:

I'm 99% sure. Even when I disable my apache server, or mysqld or nginx their's doesn't work (same cloudflare error). But maybe somehow it's compromised, don't really know how I could check that, script is propably not compromised because even if I go to an image on my site through their domain it works too. So even theirsite/randomshit.html works if i have randomshit.html on mine server. Maybe apache or nginx is compromised?
Also, when I check site:mysite and check for last 24 hours I can see some content indexed (but only 3 pages) and when I do for a week I can see my content and the ones from other domains... for ex. archergames

Click to expand...

Buli said:

Content was indexed about 2 months ago, those sites were indexed about 1,5 weeks ago, and like 4 days ago they all outranked me, dropped my organic traffic to almost 300 from 10k. No wordpress, my script. I don't think I can block scraping my site (he's using most propably PHP to fetch my html source code of page -> replace my sitename to his -> remove javascript. But how can I prevent it to outrank me and remove me from search results?

Click to expand...

cooper1210 said:

Check your httpd or nginx access logs, you will see details of all traffic requests there with IP addresses and user agents. That should flag something up. Once you find the offending server, you could block the IP (and user agent)

Click to expand...

bartosimpsonio said:

Are you replying on behalf of saionara?

Click to expand...

Buli said:

Yeah I couldn't check that (I have nginx as reverse proxy no logging) but I did with php checking the header X_FORWARDED_FOR where was IP of this site. I blocked nearly 1k IP's from like 10 domains, but I decided to do other thing - redirect their domains to my domain again (keeping the url structure) which was hard cause I have to do redirect to even another domain and from this another domain to my main domain (when I do redirect with PHP to main it gets changed as I said mysite name gets changed to theirs somehow). So now people come in to my server but I can see it's much lower amount of users, and I can see it's them because their user agent is Googlebot 2.1 (somehow those proxy sites were faking user agent). I just want to get my positions back, to remove all other domains from search results and replacing them again with mine.


Yes, he's the other webmaster

Click to expand...