Today I found these websites that are fully similar to the original ones and am curious to know is there any legal connection/interaction between Stack Exchange and these sites or those are some sort of phishing.
9
-
This was a result for this on Google. Not good!– Lightness Races in OrbitApr 13, 2015 at 15:57
-
Seems 80bola has stopped working!– frogattoApr 20, 2015 at 10:10
-
Yay :D– Lightness Races in OrbitApr 20, 2015 at 10:51
-
..Although it now redirects to a chinese shopping site.– Jonas CzechApr 20, 2015 at 14:05
-
Currently it is redirecting to AliExpress, I thought it might be only on my browser or computer, but it is also redirecting to that site even usinga proxy (tried using rxproxy.com) and VPN, it might also redirect to another sites.– vhanlaApr 21, 2015 at 2:53
-
And now it's been replaced by www.searchalleasy.com. Sigh.– Lightness Races in OrbitApr 27, 2015 at 14:55
-
@Shadow It's not a clone site. Per the answer, it's a proxy site. (I didn't add the proxy tag due to its tag wiki.)– Sonic the Anonymous HedgehogDec 12, 2018 at 8:22
-
@SonictheInclusiveHedgehog tricky, hard to tell without digging into it.– Shadow The Spring WizardDec 12, 2018 at 8:24
-
The sits appear to be no longer online, closing this as no-longer- reproducable– LuuklagJul 4, 2022 at 13:23
Add a comment
|
2 Answers
It is a (slow) proxy site; it accepts any domain name in front of 80bola.com:
or links from your profile:
- http://abforce.ir.80bola.com/pages/goldoon.html
- http://ir.linkedin.com.80bola.com/pub/ali-reza-barkhordari/82/7a8/a87
etc.
In other words, they are not specifically copying Stack Exchange sites.
answered Mar 9, 2015 at 21:56
-
I just visited a proxied question on page 2 of Googling "django rotating file handler". I wouldnt have even noticed it. Seems like no-good behavior. Apr 7, 2015 at 7:16
-
7
-
2@Juri: yes, because they proxy everything and rewrite all links, they are a page rank network all of their own. I expect Google to cotton on eventually and simply remove the network from the index. Apr 13, 2015 at 8:30
-
Perhaps we can move that along a bit somehow. I just got caught by this and shared an 80bola link without realising. Apr 13, 2015 at 15:58
-
2@LightningRacisinObrit: There is this form but I think it is up to Stack Exchange to report it. Apr 13, 2015 at 16:24
-
@MartijnPieters: I concur; I guess I meant to prod SE into action with my comment :P Apr 13, 2015 at 16:32
Although it's only a proxy site, I would definitely not recommend using it, as there are possible vulnerabilities (feel free to edit or add to the list):
Cross Sub-domain Scripting - although sub-domains are considered different and will not pass the Same Origin Policy unless the
document.domainis tampered with, different browsers still behave differentlyCookies might be 'shared' - if explicitly named in the Set-Cookie header. Currently the login sessions are separate. i.e. logining in stackoverflow does not log you in stackoverflow.com.80bola.com
Cross Frame Scripting - Although unlikely, it is still possible for 80bola to use 2 frames to exploit a cross-frame-scripting bug to access private data on a third-party website
Man-in-the-middle - Depending on how the proxy is set up, there's a possiblility that traffic is visible to 80bola and of intercepting and manipulating the packets.
Adding a screenshot here for future reference in case the proxy is removed:
Lastly, I believe all the content and backlinks are giving them additional SEO juice to push them up the search ranking.
-
1The domain is registered this year through a company called WHOISGUARD, INC in Panama. Just by surfing to www.80bola.com it will redirect you through google short-urls and jump to some adsite (godaddy.com). Its fishy! Apr 25, 2015 at 9:29
-
@Exterior8931509 Whoisguard is just a replacement as registrar if the domain buyer wants to remain anonymous. It's a common thing for phishing sites.– FilnorDec 12, 2018 at 9:13