Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So the person who owns say,, appears to be forwarding with masking his domain to my domain

Should I be concerned about this for some reason? If so, why?

What can I do about it, if I need to?

share|improve this question

Assuming he's using an iframe which contains your actual website, you can simply break it by entering this javascript code into your pages:

<script language="javascript" type="text/javascript">
window.onload = function() {
if (top.location != location) {
top.location.href = document.location.href ;


This should redirect the end-user to the actual page with no hidden frame.

The only reason why you should be worried is if he's trying to phish for user information with this technique, as I don't see any other use for what he's doing.

share|improve this answer
Assuming that it's not an iframe, is phising a possibility? How so? Aren't any requests essentially going to me site? Or is there a possible middleman somewhere? – wherestheph Jan 21 '10 at 20:24
If the other site is just a CNAME DNS record pointed at your website, then there shouldn't be any trouble. If you have a web server that responds to all requests pointed at your IP address, then you should make sure to change that to only answer to your domain, since anyone could point a website to your IP and the domain name in the title bar would not change when they browse. Again, even this wouldn't really be a security issue, at least I can't see one, but perhaps someone will chime in if there is any. – gekkz Jan 21 '10 at 20:48

I have/had the same issue. Just came up recently. I have what appears to be two domains "p/" pointing to my website. No idea why. Can't find them on whois lookup. They're in Chicago I know. Contacted their server host who won't help at all. I found this "solution" on line. To add this javascript to the homepage.

if (location.href != "") { location.href = "" }

I did and it works. It does redirect right to my site URL. Before our site came up with their URL, something like . We use the Alexa traffic bar and our site was around 200K and when it pulled up on their URL it was near 4,000,000 rank. I hope this helps. But also want to know if this is actually a fix, or am I hurting myself here somehow? It redirects my own search results that have the index.html extension to the URL. So I don't know if I should have just left it alone or did this.

share|improve this answer

I think you should be super-concerned because it is a trivial way to lower someone's ranking into Google.

Google considers every site with different names but pointing to the same content to be duplicated content and shall penalize your legitimate site's ranking accordingly.

Which is why it is recommend to:

  1. permanent redirect (301) to (it's not your issue here, but it's the same 'duplicated content' SNAFU)

  2. use something (like Apache *mod_rewrite*) to permanently redirect (301) any single query pointing to your IP that is not asking for to

It's explained here and it's ugly:

share|improve this answer

Yeah you should, if you are interested in saving bandwidth. Take a look at his WHOIS to see who it is, and maybe inform the DNS host. It could be a mistake on his part as well ;)

share|improve this answer

Yes, that's rarely an acceptable situation. Only time is when there's consent. You can:

  1. Contact the owner and request that they stop
  2. If you have access to the server/routers you can set up filters to block the traffic.
  3. If you don't have access then you can work with your ISP to block.

Items 2 and 3 can get to be a pain quick, though.

share|improve this answer
I have server access, which filters would I set up to block the traffic? – wherestheph Jan 21 '10 at 20:25

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.