Is this a DDoS attack? What's wrong with my website?

  • Thread starter Thread starter Deleted member 977120
  • Start date Start date
D

Deleted member 977120

Guest
Well, yesterday, I changed hosting and chose Abelo for my tube site. Something really weird started appearing in my Analytics. I started getting traffic for pages that are not on my domain.

6555.jpg


I checked the hostname for these pages, and they are from another .net domain. When I accessed that, I landed on my tube site. When I clicked on any of the videos, I got to pages on my own domain.
What the hell is going on? All of my other websites on other hosts are doing just fine.
 
Seems like your site has been hacked. Do you have a backup of it from before you moved it?
 
Seems like your site has been hacked. Do you have a backup of it from before you moved it?
Yes, I do have a backup. What should I do now?

How is this affecting me in a bad way and also, what profit are they gaining?
 
I'm beginning to understand a bit... trying to google the matter.
What do you guys think I should do? How is this harming me, or profiting the other party?

Do I even have control over it? I don't know if I should just leave it off as it is.
You can stop people from iframing your website, just Google something like: stop websites from iframing
 
Thanks a lot for the help, guys.

You can stop people from iframing your website, just Google something like: stop websites from iframing

I added the headers and I think it got fixed. I'm not receiving those in my Analytics anymore. The other website is still showing a clone... I don't know what it means, but I think this is enough so far.
 
is it possible that you have bought an expired domain? which might have had backlinks to those pages that dont exist anymore.. so now crawlers follow them and end up in a 404?
 
is it possible that you have bought an expired domain? which might have had backlinks to those pages that dont exist anymore.. so now crawlers follow them and end up in a 404?

I honestly don't know what's going on anymore. I refined the security headers, made sure my HTTP is redirecting, checked through https://securityheaders.com and everything looks A+. Still, the other domain is iframing me. I swear to my fking god this is because of @AbeloHost . I had my domain at Hostgator and everything was looking pretty good. When I moved the domain (I didn't even have an SSL certificate). It was forced on me somehow, I couldn't access my domain unless I install it. And this shit started happening.
 
Last edited by a moderator:
add this to the header.php considering its wordpress
add before </head>
<meta http-equiv="X-Frame-Options" content="deny">
this tag will make any modern browser deny showing the iframe on that guys website
i would not worry much about this problem anyway
 
add this to the header.php considering its wordpress
add before </head>
<meta http-equiv="X-Frame-Options" content="deny">
this tag will make any modern browser deny showing the iframe on that guys website
i would not worry much about this problem anyway

apparently meta tag has been outdated so you have to set correct headers
https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Frame-Options

I have it enabled, the SAMEORIGIN one. I added most of security headers, kept tweaking left and right and nothing is really working.
I have those enabled: X-Frame-Options, Strict-Transport-Security, and Content-Security-Policy.

It's just really annoying and messing up my analytics.
 
Back
Top