Found duplicates of my websites

Customer support forums for Atomic Protector (formerly Atomic Secured Linux). There is no such thing as a bad question here as long as it pertains to using Atomic Protector. Newbies feel free to get help getting started or asking questions that may be obvious. Regular users are asked to be gentle. :-)
victor2306
Forum User
Forum User
Posts: 6
Joined: Thu Aug 29, 2013 10:42 am
Location: California

Found duplicates of my websites

Unread post by victor2306 »

I found that 2 of my websites were duplicated (copied) with all content and database and has the same reverse IP like mine.

I run domaintools and I get:
Reverse IP: 2 websites use this address. (examples: chirlnunce.com melosdeas.com)

How is that possible? What can I do?
I have ASL installed on Plesk 11.
faris
Long Time Forum Regular
Long Time Forum Regular
Posts: 2321
Joined: Thu Dec 09, 2004 11:19 am

Re: Found duplicates of my websites

Unread post by faris »

I think you need to be more specific about your problem.

You see it is perfectly normal for more than one website to use the same IP...most of the websites on your server will use the same IP and therefore have the same rDNS.

What's more, if you set a domain as the default website for a particular IP, and then you remove hosting for other domains (but not DNS), I seem to remember that visitors to those other domains will see your default website. Or something very similar.

So if you don't know anything about these other websites and have never hosted them, it is possible that someone has incorrectly configured their DNS or nameservers or something?

But maybe what I'm saying is not what's happening and someone has made an exact duplicate of your sites and for some reason has decided to duplicate the rDNS as well, in order to send spam, maybe? It just seems odd that someone would go to the trouble of doing this, which is why I'm suggesting it may be a Plesk configuration thing.

The best way to check is to use dnsreport.com to check how these duplicate sites are configured. Do they resolve to your IPs or to someone else's? If they resolve to your IPs then you know it is as I've outlined.
--------------------------------
<advert>
If you want to rent a UK-based VPS that comes with friendly advice and support from a fellow ART fan, please get in touch.
</advert>
victor2306
Forum User
Forum User
Posts: 6
Joined: Thu Aug 29, 2013 10:42 am
Location: California

Re: Found duplicates of my websites

Unread post by victor2306 »

Thank you for replying.

My website inventnet.com has unique IP there are no other domains sharing it.
I just made some changes and they appear in these sites too.

There are a bunch of websites that are using the same IP and duplicates my content.
Here they are : diosemals.com,mansiquayd.com,chirlnunce.com,melosdeas.com,miniapparel.com

Some of them are registered in Panama, Singapore and WA state.
When I looked at the index.php page info I see one difference here is mine the original:
<base href="http://www.inventnet.com/" />
<link href="http://www.inventnet.com/" rel="canonical" />
and one of the copy:
<base href="http://diosemals.com/" />
<link href="http://diosemals.com/" rel="canonical" />

I think they are also using iframe.

What can I do?
prupert
Forum Regular
Forum Regular
Posts: 573
Joined: Tue Aug 01, 2006 2:45 pm
Location: Netherlands

Re: Found duplicates of my websites

Unread post by prupert »

victor2306 wrote:Thank you for replying.

My website inventnet.com has unique IP there are no other domains sharing it.
I just made some changes and they appear in these sites too.

There are a bunch of websites that are using the same IP and duplicates my content.
Here they are : diosemals.com,mansiquayd.com,chirlnunce.com,melosdeas.com,miniapparel.com
The DNS record for 'inventnet.com' points to IP address 209.239.119.159. It appears that you have configured your webserver to also show this website when the hostname is not provided, see http://209.239.119.159

The DNS records for the other domains you mentioned (e.g. 'diosemals.com') point to IP address 209.239.119.160. I suspect that the same server that is holding 209.239.119.159 is also holding 209.239.119.160. I also suspect that you have configured your webserver to show the website 'inventnet.com' as the default website for all IP addresses on your server, see http://209.239.119.160

As faris mentioned, I also believe this is just a configuration issue on your end. Nobody's stealing your website, if that is what you think is going on... ;-)
Lemonbit Internet Dedicated Server Management
Post Reply