39

Today I found these websites that are fully similar to the original ones and am curious to know is there any legal connection/interaction between Stack Exchange and these sites or those are some sort of phishing.

  • This was a result for this on Google. Not good! – Lightness Races in Orbit Apr 13 '15 at 15:57
  • Seems 80bola has stopped working! – Hi I'm Frogatto Apr 20 '15 at 10:10
  • Yay :D​​​​​​​​​ – Lightness Races in Orbit Apr 20 '15 at 10:51
  • ..Although it now redirects to a chinese shopping site. – JonasCz Apr 20 '15 at 14:05
  • Currently it is redirecting to AliExpress, I thought it might be only on my browser or computer, but it is also redirecting to that site even usinga proxy (tried using rxproxy.com) and VPN, it might also redirect to another sites. – vhanla Apr 21 '15 at 2:53
  • And now it's been replaced by www.searchalleasy.com. Sigh. – Lightness Races in Orbit Apr 27 '15 at 14:55
  • @Shadow It's not a clone site. Per the answer, it's a proxy site. (I didn't add the proxy tag due to its tag wiki.) – Sonic the Bracketed Hedgehog Dec 12 '18 at 8:22
  • @SonictheInclusiveHedgehog tricky, hard to tell without digging into it. – Shadow The Curly Braced Wizard Dec 12 '18 at 8:24
34

It is a (slow) proxy site; it accepts any domain name in front of 80bola.com:

or links from your profile:

etc.

In other words, they are not specifically copying Stack Exchange sites.

  • I just visited a proxied question on page 2 of Googling "django rotating file handler". I wouldnt have even noticed it. Seems like no-good behavior. – Jesvin Jose Apr 7 '15 at 7:16
  • 7
    damn..and they pollute Google searches – Juri Apr 13 '15 at 7:54
  • 2
    @Juri: yes, because they proxy everything and rewrite all links, they are a page rank network all of their own. I expect Google to cotton on eventually and simply remove the network from the index. – Martijn Pieters Apr 13 '15 at 8:30
  • Perhaps we can move that along a bit somehow. I just got caught by this and shared an 80bola link without realising. – Lightness Races in Orbit Apr 13 '15 at 15:58
  • 2
    @LightningRacisinObrit: There is this form but I think it is up to Stack Exchange to report it. – Martijn Pieters Apr 13 '15 at 16:24
  • @MartijnPieters: I concur; I guess I meant to prod SE into action with my comment :P – Lightness Races in Orbit Apr 13 '15 at 16:32
26

Although it's only a proxy site, I would definitely not recommend using it, as there are possible vulnerabilities (feel free to edit or add to the list):

  1. Cross Sub-domain Scripting - although sub-domains are considered different and will not pass the Same Origin Policy unless the document.domain is tampered with, different browsers still behave differently

  2. Cookies might be 'shared' - if explicitly named in the Set-Cookie header. Currently the login sessions are separate. i.e. logining in stackoverflow does not log you in stackoverflow.com.80bola.com

  3. Cross Frame Scripting - Although unlikely, it is still possible for 80bola to use 2 frames to exploit a cross-frame-scripting bug to access private data on a third-party website

  4. Man-in-the-middle - Depending on how the proxy is set up, there's a possiblility that traffic is visible to 80bola and of intercepting and manipulating the packets.

Adding a screenshot here for future reference in case the proxy is removed:

enter image description here

Lastly, I believe all the content and backlinks are giving them additional SEO juice to push them up the search ranking.

  • 1
    The domain is registered this year through a company called WHOISGUARD, INC in Panama. Just by surfing to www.80bola.com it will redirect you through google short-urls and jump to some adsite (godaddy.com). Its fishy! – Exterior8931509 Apr 25 '15 at 9:29
  • @Exterior8931509 Whoisguard is just a replacement as registrar if the domain buyer wants to remain anonymous. It's a common thing for phishing sites. – Filnor Dec 12 '18 at 9:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .