39

Today I found these websites that are fully similar to the original ones and am curious to know is there any legal connection/interaction between Stack Exchange and these sites or those are some sort of phishing.

9
  • This was a result for this on Google. Not good! Apr 13, 2015 at 15:57
  • Seems 80bola has stopped working!
    – frogatto
    Apr 20, 2015 at 10:10
  • Yay :D​​​​​​​​​ Apr 20, 2015 at 10:51
  • ..Although it now redirects to a chinese shopping site. Apr 20, 2015 at 14:05
  • Currently it is redirecting to AliExpress, I thought it might be only on my browser or computer, but it is also redirecting to that site even usinga proxy (tried using rxproxy.com) and VPN, it might also redirect to another sites.
    – vhanla
    Apr 21, 2015 at 2:53
  • And now it's been replaced by www.searchalleasy.com. Sigh. Apr 27, 2015 at 14:55
  • @Shadow It's not a clone site. Per the answer, it's a proxy site. (I didn't add the proxy tag due to its tag wiki.) Dec 12, 2018 at 8:22
  • @SonictheInclusiveHedgehog tricky, hard to tell without digging into it. Dec 12, 2018 at 8:24
  • The sits appear to be no longer online, closing this as no-longer- reproducable
    – Luuklag
    Jul 4 at 13:23

2 Answers 2

34

It is a (slow) proxy site; it accepts any domain name in front of 80bola.com:

or links from your profile:

etc.

In other words, they are not specifically copying Stack Exchange sites.

6
  • I just visited a proxied question on page 2 of Googling "django rotating file handler". I wouldnt have even noticed it. Seems like no-good behavior. Apr 7, 2015 at 7:16
  • 7
    damn..and they pollute Google searches
    – Juri
    Apr 13, 2015 at 7:54
  • 2
    @Juri: yes, because they proxy everything and rewrite all links, they are a page rank network all of their own. I expect Google to cotton on eventually and simply remove the network from the index. Apr 13, 2015 at 8:30
  • Perhaps we can move that along a bit somehow. I just got caught by this and shared an 80bola link without realising. Apr 13, 2015 at 15:58
  • 2
    @LightningRacisinObrit: There is this form but I think it is up to Stack Exchange to report it. Apr 13, 2015 at 16:24
  • @MartijnPieters: I concur; I guess I meant to prod SE into action with my comment :P Apr 13, 2015 at 16:32
27

Although it's only a proxy site, I would definitely not recommend using it, as there are possible vulnerabilities (feel free to edit or add to the list):

  1. Cross Sub-domain Scripting - although sub-domains are considered different and will not pass the Same Origin Policy unless the document.domain is tampered with, different browsers still behave differently

  2. Cookies might be 'shared' - if explicitly named in the Set-Cookie header. Currently the login sessions are separate. i.e. logining in stackoverflow does not log you in stackoverflow.com.80bola.com

  3. Cross Frame Scripting - Although unlikely, it is still possible for 80bola to use 2 frames to exploit a cross-frame-scripting bug to access private data on a third-party website

  4. Man-in-the-middle - Depending on how the proxy is set up, there's a possiblility that traffic is visible to 80bola and of intercepting and manipulating the packets.

Adding a screenshot here for future reference in case the proxy is removed:

enter image description here

Lastly, I believe all the content and backlinks are giving them additional SEO juice to push them up the search ranking.

2
  • 1
    The domain is registered this year through a company called WHOISGUARD, INC in Panama. Just by surfing to www.80bola.com it will redirect you through google short-urls and jump to some adsite (godaddy.com). Its fishy! Apr 25, 2015 at 9:29
  • @Exterior8931509 Whoisguard is just a replacement as registrar if the domain buyer wants to remain anonymous. It's a common thing for phishing sites.
    – Filnor
    Dec 12, 2018 at 9:13

Not the answer you're looking for? Browse other questions tagged .