整个网站被劫持！ 如何防止被劫持？
可以在这里找到技术解决方案：整个网站被劫持！ 第2部分：如何配置基于名称的虚拟主机？
原始域名是http://neteditr.com
令人反感的山寨网站是 http://kitchen.co.jp
阅读了一些文章后，看起来像这样一种网站劫持是由代理服务器完成的，但是“neteditr.com”的链接到底是如何从 Google 搜索页面中删除的，而他们的“kitchen.co.jp”却在列表中名列前茅呢？ 大约一个月前，我仍然可以进行“neteditr”搜索，并且 neteditr.com 排名第一。
到目前为止，我已经使用 Google 的 SearchWiki 删除了所有条目，并添加了原始 URL，希望能给原始域带来更多权重。 但这仅适用于我自己的 Google 帐户。 如果我在未登录的情况下进行一般搜索，问题仍然存在。
无论如何，我的问题是：
- 从技术上讲，如何防止您的网站被镜像到另一个域，我正在使用 Apache 并提供 HTML/JS/PHP/CSS 文件。
简短回答：您无法阻止
- 如果您当前处于镜像状态，您会怎么做？
简短回答：设置基于名称的虚拟主机。 请参阅上面的技术解决方案。
- Google 从搜索排名中删除了您的原始域，并将您的违规者网站排名在 Google 的首页上。 我们[受害者]可以向谷歌投诉此事吗？
答案：在设置基于名称的虚拟主机并且禁止 HTTP 访问违规域后，Google 应自动删除其域名
***编辑
以 stackoverflow.com 为例：
stackoverflow。 com IP = 69.59.196.211
这与注册一个名为 stackunderflow.com 的域并将其指向 69.59.196.211 相同。 在 Google 中搜索 stackoverflow 时，stackunderflow.com 出现在 Google 的首页上，而无法找到 stackoverflow.com。 他们是怎么做到的？
***编辑 2
在了解 kitchen.go.jp 指向我的原始 IP 后，我得出结论，犯罪者没有使用代理服务器。 通常在恶意镜像案例中，犯罪者会在镜像内容之上添加自己的广告和色情链接。 我的情况并非如此。 所以可能是：
A）说实话，我认为有人只是想让你的编辑器在日本域名上（也许是公司的网络过滤政策？），没有恶意 -DrJokepu
B）可能是有人想在切换之前建立搜索引擎排名不同的内容（即他们的）-Roland Shaw
The technical solution can be found here: Entire website hijacked! Part 2: How to configure name-based virtual hosting?
The original domain is http://neteditr.com
The offending copycat site is http://kitchen.co.jp
After reading upon some articles it seems like this kind of website hijacking is done by proxy servers, but how in the world is the link to "neteditr.com" removed from Google's search pages and theirs "kitchen.co.jp" is high up on the list? About a month ago, I could still do a "neteditr" search and have neteditr.com come up on 1st place.
As of now, I've used Google's SearchWiki to remove all of their entries and added the original URL hoping to give more weight back to the original domain. But this is only for my own Google account. If I do a generic search without being logged in, the problem still persists.
Anyhow my questions are:
- Technically, how do you prevent your website from being mirrored on another domain, I'm using Apache and serving HTML/JS/PHP/CSS files.
Short Answer: You can't prevent it
- What do you do if you are currently mirrored?
Short Answer: Set up name-based virtual hosting. See techinical solution above.
- Google deleted your original domain from their search rank and has ranked your offender's site on Google's first page. Can we[victims] complain to Google about this?
Answer: After name-based virtual hosting is set up and the offending domain is disallowed HTTP access, given time Google should automatically remove their domain name
***EDIT
Using stackoverflow.com as an example:
stackoverflow.com IP = 69.59.196.211
It would be the same as registering a domain named stackunderflow.com and pointing it to 69.59.196.211. And while doing a search for stackoverflow in Google, stackunderflow.com is on Google's first page and stackoverflow.com is nowhere to be found. How did they do this?
***EDIT 2
After learning kitchen.go.jp is pointing to my original IP I've concluded that the offender is not using a proxy server. Usually in malevolent mirroring cases, the offender will add their own ads and porn links on top of the mirrored content. Such is not the case in my situation. So it could be either:
A) To be honest I think someone just wanted to have your editor on a Japanese domain (company webfilter policy maybe?), nothing malvolent -DrJokepu
B) Could be someone wanting to build search engine rank before switching it out to different content (i.e. theirs) -Roland Shaw
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
在 Apache 中，设置虚拟主机。 您可以禁止从
http://kitchen.co.jp/访问您的网站，或禁止除http://neteditr.com/之外的任何内容。In Apache, set up virtual hosting. You can disallow access to your site from
http://kitchen.co.jp/or disallow from anything excepthttp://neteditr.com/.任何网站都可以复制； 任何不依赖于任何服务器端处理（即完全在客户端上用 Javascript 实现，并带有相关的 HTML/CSS/图像）的操作都将特别容易，原因很简单，为了工作，浏览器需要能够下载所有内容，此时可以从浏览器缓存中提取内容（或中途拦截，或使用恶意客户端下载）。
最好的做法是联系托管副本的 ISP - 他们可能需要证据证明他们复制了您，反之亦然。 如果你让你的律师这样做（作为版权侵权），它可能会带来更大的影响力并且更快地采取行动。
就谷歌对页面的排名更高而言，这取决于他们的算法，这将被归类为商业秘密（我认为入站链接的数量在结果中起着主要作用）。 您可以联系他们要求他们删除这些页面，但我怀疑这是否会取得很大成功，因为如果您没有提供证据表明您是版权侵权的受害者，那么您的言论就会与他们的观点相悖。
Any website can be duplicated; and any that don't rely on any server side processing (i.e. entirely implemented in Javascript on the client, with associated HTML/CSS/images) is going to be especially easy, for the simple reason that to work, the browser needs to be able to download all the content, at which point it could be pulled from browser cache (or intercepted midway, or downloaded with a malicious client).
The best course of action is to approach the ISP hosting the copy -- they will probably need evidence that they copied you, and not vice-versa. It may carry more weight and be actioned faster if you get your lawyer to do this (as a copyright infringement)
In terms of Google ranking the page higher, that's down to their algorithms, which would be classed as trade secrets (I'd assume the number of inbound links plays a major part in the results). You could approach them to ask them to remove the pages, but I doubt it would be met with much success as it would be your word against theirs without producing the evidence that you're the victim of a copyright infringement
域名 kitchen.go.jp 指向 209.20.77.104。 据 GeoIP 称，它位于密苏里州圣路易斯，这意味着它位于一个拥有强大法律体系的国家，因此您可以起诉他们或向他们发送 DMCA 通知。 联系律师。
更新：根据日本 NIC whois 服务 (whois.jprs.jp)，该域的联系信息如下：
您可能应该联系他们。 说实话，我认为有人只是想让你的编辑器在日本域上（也许是公司的网络过滤政策？），没有恶意。
The domain kitchen.go.jp points to 209.20.77.104. According to GeoIP, it is in Saint Louis, MO, which means it is in a country with a strong legal system so you can sue them or send them a DMCA notice. Contact a lawyer.
Update: According to the Japanese NIC whois service (whois.jprs.jp) the contact information for the domain is the following:
You should probably contact them. To be honest I think someone just wanted to have your editor on a Japanese domain (company webfilter policy maybe?), nothing malvolent.
这实在是没有办法。 为了让网络浏览器显示您的内容，您必须向他们发送所有 HTML/JS/CSS/图像，这正是有人复制您的网站所需要的。 唯一不能为他们提供的就是 PHP。 没有办法在不让别人盗用您的网站的情况下向您的用户提供内容。
There's really no way to do this. In order for a web browser to display your content, you have to send them all your HTML/JS/CSS/Images, which is exactly what someone would need to copy your website. The only thing you don't serve up to them on a silver platter is the PHP. There's no way to get content to your users without making it possible for someone to rip off your website.