vb.org Archive

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vB4 General Discussions (https://vborg.vbsupport.ru/forumdisplay.php?f=251)
-   -   Clone / Pishing my site (https://vborg.vbsupport.ru/showthread.php?t=324977)

gnrx 04-25-2017 02:59 PM

Clone / Pishing my site
 
Hello.
In the last 2 days I view that, 2 other domains/sites are indentical to my vbulletin forum.
This sites, are identical and the users can try to log in this websites and the owners can give the details accounts for login, for this, are pishing.

But if in my forum I post a new post or thread, appears automatically in this pishing websites.

I contact with my server and are search for malware, but don't have any malware (I have a VPH / dedicated server).

Thanks and sorry for my english.

Dave 04-25-2017 04:23 PM

I've seen this before, they simply proxify all requests to your server and imitate the request as a GoogleBot so it's hard to block it.

Add the following to your headinclude template and make sure to modify the second line.
For example if your domain is vbulletin.org, split it in half and change it to "vbull" + "etin.org". This must be done so it's harder for them to replace all instances of your domain with their own.

HTML Code:

<script>
  if(window.location.hostname.indexOf("your" + "site.com") === -1){
      window.location = 'https://www.go' + 'ogle.com';
  }
</script>

What this script does is it checks if the current URL contains the domain you supplied, if not, it will redirect the user to Google.
Essentially this will work against their intentions (injecting ads on the cloned forum) since all users that visit the cloned site of your forum are redirected to Google.

gnrx 04-25-2017 07:06 PM

In the first time, thank you Dave for your explanation of the issue and how solve this.

I made the changes in my headinclude template, and now, perfect, the 2 websites that prosify all requests to my server, now, are redirect to google.

I think...if in the third line, change google for my url, redirect to my site but...I don't know if its good iddea...

Again, thank you very much.


All times are GMT. The time now is 01:12 AM.

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01332 seconds
  • Memory Usage 1,711KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_html_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (3)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 

Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete