Website stolen - need help

[Marketing Sapper]

Hi,

one of my websites which I have developed for a long time and which is highly ranked on one of the European markets has been stolen. Hackers somehow broke into my server and copied the whole website (including database) which is now available under a different domain. The only thing that has been changed are affiliate links which now lead to Royal Vegas Casino which belongs to Buffalo Partners. I tried to contact Buffalo Partners on LinkedIn but unfortunately they have not responded yet. Is there any representative of Buffalo Partners here?

Need help

[GPWA Maria]

Hi There,

I will contact the Buffalo team, so they can get in contact with you.

Regards,
Maria

[GPWA Maria]

I have sent you a private message, please get back to me as soon as you can.

Have a good day!

[GlitzyBingo]

I had a similar thing happen to me last year, the issue is now resolved.

You need to file a takedown notice with google - https://www.google.com/webmasters/tools/dmca-dashboard and once successful ask bing to remove the site also.


What I also did while waiting was to go through my website to make sure that I wasn't using scripted server urls such as $_SERVER['HTTP_HOST']; on links, canonical URL etc as I found that the hackers were using clever scripts to make it look like their site was hosting the content and images when it wasn't. If I changed an image on my site, the copied site would change too, very frustrating. I thought I was going mad and wondered if I owned the domain still. Turned out it was a Chinese take over as after reported, the site was removed from google and they turned it into a porn site...

[Marketing Sapper]

To be able to send PMs your post count must be 10 or greater.

Now I should be able to send you a message.
Thank you for a prompt reply.

[GPWA Maria]

To be able to send PMs your post count must be 10 or greater.

Now I should be able to send you a message.
Thank you for a prompt reply.

Sorry, I missed to check the number of posts you had. Could you send me your email and Buffalo Partners affiliate username ( if you have one)? The Buffalo team representative will help you right away.

Via Skype: Maria.florides1 or Email: Maria@gpwa.org

Thank you in advance.

Regards,
Maria

[GPWA Maria]

To be able to send PMs your post count must be 10 or greater.

Now I should be able to send you a message.
Thank you for a prompt reply.

got your message and I replied.

[GPWA Maria]

I had a similar thing happen to me, the weird thing was they purchased an expired domain I used to own and turned it against me.

You need to file a takedown notice with google - https://www.google.com/webmasters/tools/dmca-dashboard and once successful ask bing to remove the site also.


What I did while waiting was to go through my website to make sure that I wasn't using scripted server urls such as $_SERVER['HTTP_HOST']; on links, canonical URL etc as I found that the hackers were using clever scripts to make it look like their site was hosting the content and images when it wasn't. If I changed an image on my site, the copied site would change too, very frustrating. I thought I was going mad and wondered if I owned the domain still. Turned out it was a Chinese take over as after reported, the site was removed from google and they turned it into a porn site...

Hi There,

Thank you for sharing. I sent you a PM as well. If you need to get in touch with the Buffalo team, please reply to my message.

Wishing you all the best!
Regards,
Maria

[GlitzyBingo]

Hi Maria,

Thank you for your message. The issue is resolved for my website, I have edited my post as it perhaps wasn't very clear. I was just giving advise on how someone with a hacked site can resolve the issue

regards,

Rachael

[Marketing Sapper]

So small update on the current situation.
I submitted the other website to DMCA but here is the message I got from them.

Thank you for submitting your takedown notice for a free review.

We have reviewed your case and the infringing URL listed. At this time your case would cost $199 and in order for professional staff to proceed with your takedown request, we will need you to pay for this case using the PayPal or Stripe buttons on the upper right hand side of this case detail view - above. Once payment has been received your case will be immediately processed. Followed by escalation to professional takedown services. Here your case worker will assess your case. Should they need anything further to proceed you will be updated here, in case comments section. You will also be advised by email with a reminder to login and read your updates. No confidential information regarding your takedown notice will be sent by email.

Make certain to add all additional infringing URL's by clicking on the large green "Add Takedown URL's" button on the case view page.

Please see the notice review details below and follow the instructions.
Let us know if you have any questions.

Kind Regards,
Diane



- Case Note: infringing website is hiding behind a Reverse Proxy, Pass-through Security service

Takedown Notice Review Item 14 - Infringing Site RPPP Protected - The infringing website using a Reverse Proxy, Pass-through Security service to reduce, obscure or block access to their website and hosting information. This is common practice for infringing domains or websites that are publishing content without permission. As it provides extra protection against the law.

Our takedown staff are familiar with this particular reverse proxy, pass-through security service. We have had success in the past getting content taken down processing notices through this network ISP. They are USA based service provider and are required under law to process our legitimate legal takedown notices.

While they will process our notice they are not a hosting provider in this situation. They do not control the content of their customer(s) which in this case is the listed infringing domain of your takedown notice.

We must first complete information processing through this reverse proxy, pass-through security service before we are able to completely assess and accurately process a takedown notice on your behalf.

In order to complete this investigation and proceed with processing your takedown notice request, we will need you to pay for this case using the PayPal or Stripe buttons on the upper right hand side of this case detail view - above.


So bascially it means that the other website can be taken down for 200 usd. But what if those hacker create another website under a new domain? So paying this fee to DMCA does not solve my problem because if they copied the whole website they can basically create unlimited new websites.

Buffalo partnersdidn`t reveal information about its affiliate who copied my website hiding behind GDPR. Without help from the lawyers this will not move forward.

Anyway does anyone know how to take down this website without paying 200 usd charge?

[Former Member 14]

So small update on the current situation.
I submitted the other website to DMCA but here is the message I got from them.

It seems like you misinterpret what people have suggested you do...

Submitting a "DMCA" is free, if you do it yourself, and submit this to Google. They even have a form you can fill out:

https://support.google.com/legal/tro.../1114905?hl=en

The above URL should help getting the ball rolling

[universal4]

Don't hold your breath on Buffalo partners helping you get information on anyone who cloned or scraped your site.

First of all, even if they wanted to help you, they can not really just divulge to you the personal details of who it is, as that would be a breach of privacy.

As Dave pointed out, the DMCA filing is free.

Here is a very very old thread on the subject, and although old, might have a few tips in it.
www.gpwa.org/forum/been-copied-how-fight-back-166113.html

I recall we have a more updated thread that was full of tips also, but don't recall when that was, if I or anyone else stumbles across it we should post that as well.

As for the offending site, I would appreciate knowing the offending domain, either publicly or privately. If you do happen to post it, be sure to obfuscate the domain name in some way, or PM me with it.

Rick
Universal4

[wonderpunter]

DMCA in google search console.. its quick and easy and will wipe them from google search, you dont need these 3rd parties to send emails for you.

[Marketing Sapper]

I got an answer from Google..

It is unclear to us whether or not you are the authorized copyright agent for the content in question. Only the copyright owner or an authorized representative can file a DMCA Infringement Notice on his/her behalf. Please note that you could be liable for damages (including costs and attorneys' fees) if you materially misrepresent that your rights have been infringed.
If you or your client is not the copyright owner for this content, we cannot process your notice. Please have the copyright owner file a DMCA notice with us. If you or your client is the copyright owner, please provide more detail explaining how this is the case.
Regards,
The Google Team

This is insane.. Can anyone help me with this?

[mediapartner]

I got an answer from Google..

This is insane.. Can anyone help me with this?

This is a standard reply from google. Dont mind the liability texts. Just resubmit the dmca complaint and make sure you add as much info in the fields where you have to proove your copyrights: meaning, add your url, with all the info you have and explain that you are the rightfull owner.

secondly, you can also send a dmca complaint to the hosting (or cloudflare) from which the hacker hosts the site.

but dont be too hopeful it will work. in many cases both google an hosting companies do nothing against this without a court order.... but sometimes you are lucky.

[Former Member 14]

This is insane.. Can anyone help me with this?

Seems Google, for whatever reason, is questioning your ownership of said "copyrighted" content etc., etc, and your identity to such claim. Unless you can prove your the copyright-holder, then basically your screwed.

A DMCA usual is ALL it takes to have content removed. However, in this case its gone pear shaped.

I'd be seek legal advice at this point.

[tufty]

I haven't been in the situation you are in but this is what I'd do now: Prove your website was up first. Screenshots from archive.org perhaps.
Perhaps looks at the age of the other guy's domain via whois.com (date it was registered) and prove your domain was live with your content before their domain even started.
It is possible google is not looking for much here. Just enough to show you had it first. They know only a genuine party would come back to them with some evidence like this. If you were the 'crook' then they know their request for evidence would likely be met with silence. So don't meet it with silence, gather some solid evidence today and send it to them. They haven't shut the door in your face at all. I'd take it as a big positive that they are inviting a communication.
Stay strong, do what they request: persuade them.

[Strider1973]

Yes it should be no problem to prove the website is yours.
Did you maybe click a wrong checkbox because Google now questions that you are the copyright owner?

Anyway, just contact them again and prove that you are the owner of the domain and that the text was online there first. As tufty said with archive.org for example. Also use a email with your domain to contact them. And put some unique file on the server (for example a .txt file with the same text that you just sent them) so that they can see that you have access to the server.

[eaton2003]

Hi,

one of my websites which I have developed for a long time and which is highly ranked on one of the European markets has been stolen. Hackers somehow broke into my server and copied the whole website (including database) which is now available under a different domain. The only thing that has been changed are affiliate links which now lead to Royal Vegas Casino which belongs to Buffalo Partners. I tried to contact Buffalo Partners on LinkedIn but unfortunately they have not responded yet. Is there any representative of Buffalo Partners here?

Need help

Did they actually hack your site and how? or did they just scrape the content and duplicate it?

[Rowdie]

This was also my problem when I reported stolen content. The answer from Google was "prove it". I kind of understand that, but at this point I simply said Screw them...

I got an answer from Google..


This is insane.. Can anyone help me with this?