Wordpress, Proxy Hack, Sucuri Can Help?

momowriter · Jan 19, 2019

hi guys,

I really need the help of the gurus of this site in the section of hackers,
I currently run a wordpress site that has been attacked with a Proxy Hack,

whereby the hacker just use a domain but with my site's contents!? WTF?!
whenever I update my site their site updates too!

They don't have to do anything and the worse part is they manage to cover my ads with their ads!?
I have used plugins like wordfence and sucuri (not their premium) to scan my site for malware and it came up empty, it's like they installed a bug on my site that updates with my content but with their domain over it,

I'm pleading with the gurus here for a solution to prevent such things to happen,
any service or suggestion will do! Cloudflare!?

I'm seriously considering trying to use Sucuri plugin's premium service and see if it solves the problem....
any suggestion will help!

jazzc · Jan 20, 2019

Rebuild your site from scratch on a new host (don't copy the files, only the content).
Pay someone who really knows what they're doing to sanitize your existing installation.

nirose · Jan 20, 2019

Proxy hack? never heard of it. They are "probably" scraping off of your RSS feed and automatically posting. You need to try to isolate easy ways to do this then check if you're really hacked.

Try posting a dummy post, see if it gets posted. then delete it, see if that gets deleted as well. If they don't, they "probably" don't have access your database.
Try changing your RSS content behaviour. (shorten character length and such and see if it gets picked up on the other site)
Try looking at your cPpanel analog and awstats to see if there's strange activity from specific IP or bot.
Also try changing the cloudflare security level to high, should beat some framework scraping.

Try changing your access passwords, cPanel, FTP, MySQL database if above fails.

These are all probable scenarios, just try to be sure if you're server is compromised before you nuke the site

momowriter · Jan 20, 2019

Thanks Nirose!
Yep I tried that, I tried deleting and reposting posts,
and their site updates according to my site! I'm not using cloudflare's service yet,

but if it helps, I'll gladly use their service! I checked and my site was installed CLEAN!
I found some articles online this is called "scrapping bots" where they'll scrape your site.... DANG!

nirose · Jan 21, 2019

Sorry, this isn't going to be easy. there are so many ways this could be done. scraping is the easiest but since they are responding to your deletion, they could either be using HTML scraper or have a backdoor to your db and files.

You need to find someone knowledgeable about this with time

i hope you changed the login credentials

Emmanuel A · Jan 21, 2019

Bro, hope u ain't using any nullified or unknown plugin. Try to disable your plugins and check what will happen. Else you should change the website template also. Am sure that way those guys are able to clone whatever update you are doing on your website.

My Suggestion is simply to use the default WordPress theme and disable all plugins, then test what will happen

momowriter · Jan 21, 2019

Thanks Emmanuel A didn't thought of using the default theme before!

I will do it now!

Emmanuel A · Jan 21, 2019

momowriter said:
Thanks Emmanuel A didn't thought of using the default theme before!

I will do it now!

Don't forget to disable your plugins. Just to know what the outcome will be

https://fiverr.com/ethan_webdesign if u need to outsource the project.

momowriter · Jan 21, 2019

hi gurus,

its seems it's not the themes or on site problem, the hacker's scraped site is still showing my site....
dang, maybe I need a bot blocker or scanner,

anyone know any plugin that forces the user to prove they're human before each post? or even before visiting the site?

Thanks

Emmanuel A · Jan 21, 2019

momowriter said:
hi gurus,

its seems it's not the themes or on site problem, the hacker's scraped site is still showing my site....
dang, maybe I need a bot blocker or scanner,

anyone know any plugin that forces the user to prove they're human before each post? or even before visiting the site?

Thanks

can you provide link to your site and that of the hacker

momowriter · Jan 21, 2019

it's ok Emmanuel A, solved it using CDN with "hotlink" protection,
if anything shows up will give you guys an update!

Thanks Everyone!

Triton91 · Jan 21, 2019

Seems like a bot is scraping your content. You should install wp all in one security and start by blocking bad bots and stuff.

Edit: link: https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/

momowriter · Jan 22, 2019

will try your solution triton91!

anyone know what CDN or shield service kissanime.ru is using? they have this gate loading before each page loads!?

momowriter · Jan 22, 2019

@Triton91 whoever you are, you're a life saver! I will Kiss you if I see you in person!
it works!

Triton91 · Jan 22, 2019

momowriter said:
@Triton91 whoever you are, you're a life saver! I will Kiss you if I see you in person!
it works!

No problem mate.

Happy you got it fixxed

Wordpress, Proxy Hack, Sucuri Can Help?

momowriter

Regular Member

jazzc

Elite Member

nirose

Elite Member

momowriter

Regular Member

nirose

Elite Member

Emmanuel A

Junior Member

momowriter

Regular Member

Emmanuel A

Junior Member

momowriter

Regular Member

Emmanuel A

Junior Member

momowriter

Regular Member

Triton91

Regular Member

momowriter

Regular Member

momowriter

Regular Member

Triton91

Regular Member

Main Menu

Marketplace

Making Money

BlackHat World