my website has been copied? stolen? hacked?

[NicoC]

Hi,

I think my site has been hacked? stolen?

It started when I was maintaining some images on my shop and I found the root address of those images had been changed to someone else's site, and next I found all my shop's root address all become a foreign address. So, I went to check what website it is and surprisingly found it is exactly the same as my site! next, I found this foreign address has got the same IP as my dedicated (Bluehost) IP address.

 

I have a backup, so I quickly delete everything and change all the passwords and restore it. Now, I can see my site seems to be working fine, the root address is showing my own domain not the foreign one. So I guess my site is now clean??

 

After I restored - I tried the foreign address to see if it was still mirroring my website, and it was still a copy of mine, however the root addresses were showing as mine.

 

We phoned support at Bluehost requesting they change our IP address, but they were not helpful and couldn't do anything to stop the foreign address using the same IP.

 

Has anyone had a similar experience & is it right to say my site is clean now? how to deal with the foreign site pointing to the same IP issue? or is the only option to move to a different host/IP ?

 

I would be very grateful for any suggestions/help

[BWT]

Your hosting company should be able to change your IP although that might mean migrating to another server within there service. Not sure why someone would want to mirror your site as it would be a negative thing to do search engines would rank it poorly for duplicate content.

 

The image issue sounds like someone is "Hot linking" to your images. There are many ways for a site to be "infected" by malware have you scanned your site with tools like http://sitecheck.sucuri.net/scanner