That website can probally steal any information that users enter in the login form.

You can't stop that from happening... if you can access it from the browser, you can copy/replicate it...

decline?

Also, that's not a replication of the website. It's a proxy.

Data replication/scraping will happen, because blocking that means blocking an IP, which is easy to get around. So yeah, that'd be declined.

There is discussion (in #wikimedia-operations) about blocking specific referrers (since this just might be a MITM/proxy, I haven't looked closely, tbh).

You can block the domain see https://httpd.apache.org/docs/2.4/rewrite/access.html secition Denying Hosts in a Blacklist

Which would make it a lot harder since they would need to change there domain which would be costly unless they use the free domains such as .tk

I don't see how to technically "stop allowing other websites to cache content". You can also screenscrape any data or use the feed.

Legally speaking, we state that in Wikimedia Phabricator, content is "licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted". If the logo on top or other items are considered a Trademark Abuse, https://wikimediafoundation.org/wiki/Trademark_policy#6_Trademark_Misuse should apply?

In T130156#2127637, @Aklapper wrote:

I don't see how to technically "stop allowing other websites to cache content". You can also screenscrape any data or use the feed.

Legally speaking, we state that in Wikimedia Phabricator, content is "licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted". If the logo on top or other items are considered a Trademark Abuse, https://wikimediafoundation.org/wiki/Trademark_policy#6_Trademark_Misuse should apply?

But woulden copying the login page and allow a user to put there username and password constitute a security risk since that is stealing someones data. Even if a user should know the website is fake. Some people can be scammed into entering the details. Plus it has everyones users information.

You can also block access to those websites meaning anyone from that website wont be able to access phabricator unless they change there domain.

We could ask http://www.noip.com/ to ask for the website to be taken down.

In T130156#2127654, @Paladox wrote:

In T130156#2127637, @Aklapper wrote:

I don't see how to technically "stop allowing other websites to cache content". You can also screenscrape any data or use the feed.

Legally speaking, we state that in Wikimedia Phabricator, content is "licensed under Creative Commons Attribution-ShareAlike 3.0 (CC-BY-SA) unless otherwise noted". If the logo on top or other items are considered a Trademark Abuse, https://wikimediafoundation.org/wiki/Trademark_policy#6_Trademark_Misuse should apply?

But woulden copying the login page and allow a user to put there username and password constitute a security risk since that is stealing someones data. Even if a user should know the website is fake. Some people can be scammed into entering the details. Plus it has everyones users information.

We can't police the internet, sadly. There are phishing attempts all the time.

We could ask http://www.noip.com/ to ask for the website to be taken down.

There's hundreds more, and enough who don't care about laws/requests to take down.

Yeh probly not but we could try.

@Vulpix found this http://jice.ddns.net:808/0/?url=MEQzJXdvZGFoU2Vyb25naTYyJXdobXFyRlBJZXE3cG0za1FJRFVMUDNEaEo4ZmtYTVhHTXM5c29GT210ZlZEV3VYSjQ5V2RNV0ZTRGczS25aWmFzWV85M1lxNTlBR2s2c2d2ZmdQVFBxcEtaa0J0YUd0MEg3Rm5MZ1djTnZZY21fWEpNeTAtSllyTG1zcFNtTDZkSG9TTE5yUDJUanlTU09lSVZwTFhDQlFGcElYa1JrR3dIQUQzJWRyYTYyJXNlRDMlbGhGMyUveXJldm9jZXIvc3RudW9jY2EvbW9jLmVsZ29vZy53d3cvL0EzJXNwdHRo google is also being copied.

It's not being copied, it's a proxy, MITM (Man In The Middle).

@Paladox, you can report trademark abuse here, and we'll investigate: https://meta.wikimedia.org/wiki/Special:Contact/licenseabuse

It appears that this is an anti-censorship web proxy (see here) that will work for any site.

Oh thanks for finding that out I didn't know that.

But seems strange to be coming from china in the English lanaguge.

And it uses http not https.

I came across this strange URL while searching for something on Google.

https://lookup-api.apple.com/phabricator.wikimedia.org/T99174

All the links in the task are prefixed as well. The first link to Meta also partially works.

It looks innocuous, but I thought worth mentioning.