1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Black hat seo proxy attack on my website?

Discussion in 'Black Hat SEO' started by saionara, Feb 18, 2017.

Tags:
  1. saionara

    saionara Newbie

    Joined:
    Feb 18, 2017
    Messages:
    6
    Likes Received:
    0
    Gender:
    Male
    Hey I have a problem with my site. Someone is making duplicates of my site (live duplicates, they fetch my content and renders in theirs but they remove all javascript and change my site name strings to theirs) so it's like a proxy of my site.
    But those sites are stealing my google rankings, when I type a keyword I can see my site is not on google but theirs is (ranked high) so it's like it's my search result but the link got replaced to their site.
    I've blocked the sites already but I think it's too late. How can I get my positions back, or replace their site with mine on google? Also, can I block such things in the future?
    My site is 123filmy(dot)** example proxy site is xxx (already blocked)
    Just type in google site:123filmy(dot)** , the titles are changed there to cheaptramadolovernight(dot)net: Najlepsze... instead of 123filmy(dot)**: Najlepsze...
    The links are not changed there but when I type in google for example my post name the result is linked to their site
    tl;dr
    someone made some live proxy sites of my site fetching my content and rendering it on theirs and their sites show up on google instead of mine and they show on the same position where mine were (but mine is not in google now)
     
  2. Buli

    Buli Newbie

    Joined:
    Jan 2, 2017
    Messages:
    7
    Likes Received:
    0
    This is weird.
     
  3. unbhguy

    unbhguy Registered Member

    Joined:
    Feb 9, 2017
    Messages:
    77
    Likes Received:
    6
    you are using wordpress?
     
  4. blasterweb

    blasterweb Regular Member

    Joined:
    Dec 18, 2014
    Messages:
    302
    Likes Received:
    81
    Occupation:
    Student
    Location:
    Europe
    Make sure your content is indexed first. You can use Google's Fetch as Google tool.
     
    • Thanks Thanks x 1
  5. Buli

    Buli Newbie

    Joined:
    Jan 2, 2017
    Messages:
    7
    Likes Received:
    0
    Content was indexed about 2 months ago, those sites were indexed about 1,5 weeks ago, and like 4 days ago they all outranked me, dropped my organic traffic to almost 300 from 10k. No wordpress, my script. I don't think I can block scraping my site (he's using most propably PHP to fetch my html source code of page -> replace my sitename to his -> remove javascript. But how can I prevent it to outrank me and remove me from search results?
     
  6. kickthat

    kickthat Jr. VIP Jr. VIP

    Joined:
    Sep 18, 2014
    Messages:
    470
    Likes Received:
    591
    Gender:
    Male
    Location:
    UK
    Sure your site has not been compromised and is redirecting search engine user agents to the other domain?
     
  7. Buli

    Buli Newbie

    Joined:
    Jan 2, 2017
    Messages:
    7
    Likes Received:
    0
    I'm 99% sure. Even when I disable my apache server, or mysqld or nginx their's doesn't work (same cloudflare error). But maybe somehow it's compromised, don't really know how I could check that, script is propably not compromised because even if I go to an image on my site through their domain it works too. So even theirsite/randomshit.html works if i have randomshit.html on mine server. Maybe apache or nginx is compromised?
    Also, when I check site:mysite and check for last 24 hours I can see some content indexed (but only 3 pages) and when I do for a week I can see my content and the ones from other domains... for ex. archergames... I think they are proxy sites just fetching everything from my site with same get parameters as when you visit theirs, or something like that. I don't think I can block this in any other way than manually blocking IP's.
     
    Last edited: Feb 20, 2017
  8. cooper1210

    cooper1210 Regular Member

    Joined:
    Aug 7, 2016
    Messages:
    230
    Likes Received:
    60
    Gender:
    Male
    Check your httpd or nginx access logs, you will see details of all traffic requests there with IP addresses and user agents. That should flag something up. Once you find the offending server, you could block the IP (and user agent)
     
  9. bartosimpsonio

    bartosimpsonio Jr. VIP Jr. VIP Premium Member

    Joined:
    Mar 21, 2013
    Messages:
    12,748
    Likes Received:
    11,411
    Occupation:
    COINZ
    Location:
    BUYAH
    Home Page:
    Are you replying on behalf of saionara?
     
  10. Buli

    Buli Newbie

    Joined:
    Jan 2, 2017
    Messages:
    7
    Likes Received:
    0
    Yeah I couldn't check that (I have nginx as reverse proxy no logging) but I did with php checking the header X_FORWARDED_FOR where was IP of this site. I blocked nearly 1k IP's from like 10 domains, but I decided to do other thing - redirect their domains to my domain again (keeping the url structure) which was hard cause I have to do redirect to even another domain and from this another domain to my main domain (when I do redirect with PHP to main it gets changed as I said mysite name gets changed to theirs somehow). So now people come in to my server but I can see it's much lower amount of users, and I can see it's them because their user agent is Googlebot 2.1 (somehow those proxy sites were faking user agent). I just want to get my positions back, to remove all other domains from search results and replacing them again with mine.

    Yes, he's the other webmaster
     
  11. bartosimpsonio

    bartosimpsonio Jr. VIP Jr. VIP Premium Member

    Joined:
    Mar 21, 2013
    Messages:
    12,748
    Likes Received:
    11,411
    Occupation:
    COINZ
    Location:
    BUYAH
    Home Page:
    I see.

    The product on my sig is designed for this sort of precise detection of the source. It can tell between the real googlebot and fake ones. So if this is a critical system, you might wanna have a look.