VOGONS


Something... Odd... (Domain Name Related)

Topic actions

First post, by Gemini000

User metadata
Rank l33t
Rank
l33t

I got a rather lengthy eMail from someone this morning that was, in the end, simple fan mail, except that at the very end the guy was impressed that I owned three domain names: pixelships.com, pixelmusement.com, and ancientdosgames.com.

There's just one problem... I DON'T own ancientdosgames.com... o_o;

Yet, if you go there: http : / / www . ancientdosgames.com (blanked out just in case)

...it renders my website. :o

The web address also persists, so every time you click a link, even if it goes to someone else's website, it still says you're on ancientdosgames.com in the HTTP bar. Also, everything renders very slightly differently than if you went to my website properly, as though it's being rendered by a slightly different system, then rendered into the user's browser window by that system.

I'm not sure I've ever seen this before on the internet and some advice or information about what the heck is going on would be appreciated.

--- Kris Asick (Gemini)
--- Pixelmusement Website: www.pixelships.com
--- Ancient DOS Games Webshow: www.pixelships.com/adg

Reply 1 of 28, by sliderider

User metadata
Rank l33t++
Rank
l33t++

Are your initials S.P.? The whois for that domain shows it is registered to someone with those initials.

Reply 2 of 28, by Gemini000

User metadata
Rank l33t
Rank
l33t

My initials are K.S.A.

Very handy having an A at the end with arcade machines. :D

--- Kris Asick (Gemini)
--- Pixelmusement Website: www.pixelships.com
--- Ancient DOS Games Webshow: www.pixelships.com/adg

Reply 3 of 28, by HunterZ

User metadata
Rank l33t++
Rank
l33t++

-

Reply 4 of 28, by bucket

User metadata
Rank Member
Rank
Member

Smells too fishy to visit myself, but it sounds like someone is trying to spoof your site - like goggle.com or nicrosoft.com. I'd run a virus check if I were you.

Reply 5 of 28, by Gemini000

User metadata
Rank l33t
Rank
l33t

I took a look at the HTML source for the ancientdosgames.com website and it's nothing more than a frame loader which pulls up my website in a full-window frame, which is why the web address doesn't change no matter what links you visit, so the simple thing to do would be to just detect if a page on my site is being loaded in a frame and redirect to a warning page that lets users know that the web address they came from is not supported and to manually cut and paste the correct address into their address bars.

...if there's any way to do that? (My web-coding knowledge is surprisingly limited.)

I should also note there isn't any malware or anything at present. At least, nothing my virus scanners are detecting. In fact, the code for loading the frame is very simple and the blank webpage it uses itself as its frame reference is even simpler.

...I don't think the eMail address provided in that WHOIS is legit either. I'm gonna contact the domain registar and ask them to investigate.

--- Kris Asick (Gemini)
--- Pixelmusement Website: www.pixelships.com
--- Ancient DOS Games Webshow: www.pixelships.com/adg

Reply 6 of 28, by sliderider

User metadata
Rank l33t++
Rank
l33t++

You can try blocking the IP address of his server from accessing your site.

Reply 7 of 28, by HunterZ

User metadata
Rank l33t++
Rank
l33t++

My previous post had one link to an idea on blocking. Here are some more from a quick Google search that are specific to the loading-in-a-frame issue:
http://www.phacai.com/how-to-avoid-your-page- … ame-or-iframe-2
http://stackoverflow.com/questions/2896623/ho … frame-of-iframe
http://www.thesitewizard.com/apache/frame-blo … ckjacking.shtml

Reply 8 of 28, by Gemini000

User metadata
Rank l33t
Rank
l33t

This is getting interesting...

I'm doing some major digging now. Whoever owns this domain name actually owns several odd ones, most of which either have placeholders or are completely blank, save for one:

http://www.yougotsars.com

It's a blog this guy's been running since March of 2006. At least, I think it's something he's running. Admittedly, it could just be he's the contact for dealing with the domain name, but it's a weird coincidence.

I also found out he worked/works for an IT company and I now have four separate eMail addresses for him. I've also found a bunch of personally identifying things like phone numbers and addresses (yes, more than one for both).

I suppose I could just eMail him, especially now that I have so many possible addresses that may or may not work, and just ask, "Dude, why did you register a domain name and point it at my website?"

I'd like to think that there's people in this world with good intentions, even if their actions are questionable, so we'll see where that ends up first.

--- Kris Asick (Gemini)
--- Pixelmusement Website: www.pixelships.com
--- Ancient DOS Games Webshow: www.pixelships.com/adg

Reply 9 of 28, by HunterZ

User metadata
Rank l33t++
Rank
l33t++

The fact that he's loading your site in a frame sounds like a likely attempt at setting up a clickjacking attack on your site: https://en.wikipedia.org/wiki/Clickjacking

You really really need to put in one of the fixes/safeguards I've linked ASAP and before doing anything else.

After that, you should definitely email the guy and see what he has to say. It should at least be entertaining.

Reply 10 of 28, by Gemini000

User metadata
Rank l33t
Rank
l33t

I already got an eMail back from the guy from his work address. It wasn't very long but if it was sincere then I suspect the situation may actually be beyond his control. He said he would eMail me again later in the afternoon.

I also have already whipped up a single line of javascript and a brand new frame detection page. At the moment, it's only implemented on a highly infrequently visited page on my website for testing purposes. But, if you go to ancientdosgames.com , then click your way to my games section, to Star Gladiators 2, then to the Guides section for it, you should trigger the frame blocking. Go there through pixelships.com or pixelmusement.com and it should load fine.

I did some Browsershots to ensure this wouldn't screw with anything automated and am now altering the redirect page just so it's a little more descriptive of the problem and why there's frame blocking in the first place. I'll get the updates online either later tonight, or rapidly if the situation with ancientdosgames.com changes for the worse.

--- Kris Asick (Gemini)
--- Pixelmusement Website: www.pixelships.com
--- Ancient DOS Games Webshow: www.pixelships.com/adg

Reply 11 of 28, by HunterZ

User metadata
Rank l33t++
Rank
l33t++
Gemini000 wrote:

I already got an eMail back from the guy from his work address. It wasn't very long but if it was sincere then I suspect the situation may actually be beyond his control. He said he would eMail me again later in the afternoon.

Keep us posted!

I also have already whipped up a single line of javascript and a brand new frame detection page.

Just tested with Firefox 17.0.4 ESR behind a corporate firewall, and it appears to work correctly: blocks via ancientdosgames.com but works via pixelships.com.

Reply 12 of 28, by VileR

User metadata
Rank l33t
Rank
l33t

Working fine on my end, too.
Definitely curious about what that guy will have to say...

[ WEB ] - [ BLOG ] - [ TUBE ] - [ CODE ]

Reply 13 of 28, by Gemini000

User metadata
Rank l33t
Rank
l33t

Well, guess what? ...I already had gotten several eMails from him in the past. He's a fan of the show. :O

He responded saying he thought he was doing me a favour and was prepared to take the domain name down just now but I eMailed him back to let him know that so long as he alters the way his ancientdosgames.com site works, I'm all for it. Basically, I just want him to put up a simple page saying he's a fan of the show and registered the domain name himself to help keep out the cybersquaters, and to provide a proper link to the show itself for people to click on.

I've still got all my pages ready with the new frames blocking code and will be uploading them to my website later tonight.

--- Kris Asick (Gemini)
--- Pixelmusement Website: www.pixelships.com
--- Ancient DOS Games Webshow: www.pixelships.com/adg

Reply 14 of 28, by HunterZ

User metadata
Rank l33t++
Rank
l33t++

Good news?

Maybe he would be willing to transfer ownership of the domain without charging you an arm and a leg?

Reply 15 of 28, by Gemini000

User metadata
Rank l33t
Rank
l33t

He replied back saying he might be able to help with the costs, since he does work for an IT company after all, so I'll see if that goes anywhere, and he did agree to make the change I requested, so that's good too. :)

Also to the mods/admins: I would request this entire thread be deleted before the end of the day since there's some personally identifying info in here. (Or just delete anything personally identifying.)

--- Kris Asick (Gemini)
--- Pixelmusement Website: www.pixelships.com
--- Ancient DOS Games Webshow: www.pixelships.com/adg

Reply 16 of 28, by robertmo

User metadata
Rank l33t++
Rank
l33t++

you can always edit your posts 😉

Reply 17 of 28, by cdoublejj

User metadata
Rank Oldbie
Rank
Oldbie

i remember when my cine massacre bookmark stopped working after they changed adresses. you had to click a link to get to the main page. I found it kind of annoying, why can't you just have it shoot people over to your site with out any frame trickery or links (extra step on users ed)?

Reply 18 of 28, by HunterZ

User metadata
Rank l33t++
Rank
l33t++
Gemini000 wrote:

He replied back saying he might be able to help with the costs, since he does work for an IT company after all, so I'll see if that goes anywhere, and he did agree to make the change I requested, so that's good too. 😀

Also to the mods/admins: I would request this entire thread be deleted before the end of the day since there's some personally identifying info in here. (Or just delete anything personally identifying.)

I'd rather not jettison the entire thread, but I will if you feel strongly about it.

You should be able to edit and/or delete your own posts.

Feel free to post here or PM me if you have any specific concerns or need me to use moderator powers to edit/delete anything specific.

Reply 19 of 28, by Gemini000

User metadata
Rank l33t
Rank
l33t
robertmo wrote:

you can always edit your posts

Mine? Yes. HunterZ's? No. ;)

cdoublejj wrote:

i remember when my cine massacre bookmark stopped working after they changed adresses. you had to click a link to get to the main page. I found it kind of annoying, why can't you just have it shoot people over to your site with out any frame trickery or links (extra step on users ed)?

Because if it links through directly, people may expect me to be the owner of the domain name, and I'm not, which means if the owner makes changes or loses the domain name for whatever reason, I may get the complaints and won't be able to do anything about it because he's the one with control over it. :P

It's also a potential hazard if search engines index it as though it were my own site for similar reasons. It's very important that I, as a website owner, have control over any address which apparently equates to my own website in order to prevent future problems that would be incredibly difficult to deal with if and when they happened.

--- Kris Asick (Gemini)
--- Pixelmusement Website: www.pixelships.com
--- Ancient DOS Games Webshow: www.pixelships.com/adg