• Resolved Slams

    (@slams)


    Hello

    I’ve discovered that all my images from subdomains are accessible for download through https://i2.wp.com and https://i1.wp.com, and spammers are actively using this.

    How can I remove my domains and subdomains from caching, so that my images cannot be accessed through them?

    Domains
    img.delovcusa.com
    img.delo-vcusa.ru

Viewing 7 replies - 1 through 7 (of 7 total)
  • Plugin Support Reynier (a11n)

    (@reynierc)

    Hi @slams

    Thank you for reaching out with your concerns about image optimization and caching with Jetpack. I understand the importance of ensuring your images are handled in a way that suits your needs.

    For more context about image optimization, Jetpack uses the Site Accelerator feature, which helps to speed up your site by serving images and static files from our global network of servers.

    This can improve loading times, but I understand you may have reasons for wanting to modify this feature, especially considering the issue with spammers.

    How can I remove my domains and subdomains from caching, so that my images cannot be accessed through them?

    Disabling Image Caching:
    You can disable the image caching feature by turning off the Site Accelerator in your Jetpack settings. To do this, navigate to Jetpack > Settings > Performance in your WordPress dashboard and toggle off the “Enable site accelerator” or ” option. [Screenshot Here]

    Notes about the effect of Effects of Disabling Image Caching:
    Disabling this feature will stop Jetpack from serving your images via its CDN (content delivery network), which might lead to slightly slower image loading times since they will be served directly from your server. However, it also means that your images will no longer be accessible through the i2.wp.com or i1.wp.com URLs.

    Also, simply disabling the feature does not entirely protect your images from being accessed or used by others, especially if they are publicly available on your site.

    For example, after disabling it, the image would be served through: img.delovcusa.com/image.jpg or img.delo-vcusa.ru/image.png

    Might I suggest using other techniques like adding an image watermark to protect them? While this doesn’t prevent downloading, it can discourage unauthorized reuse.

    Just out of curiosity though, can you share more about how spammers are using your image from the CDN links? A screenshot of these spammers in action would help us understand better.

    Thread Starter Slams

    (@slams)

    HI @reynierc

    Thank you very much for your answer! The most interesting thing is that I haven’t used Jetpack for more than 10 years. I don’t quite understand how this feature ended up being enabled. I don’t even remember my account access credentials. If I’m not mistaken, they were stolen during one of the password leaks to the darknet.

    Regarding the spammers, I can’t give a quick answer, I need to search through the links. But the picture is as follows:
    Image farms are massively stealing and embedding them on their sites.
    Since hotlinking prevention are configured on the server, they display images through your CDN.

    • This reply was modified 3 weeks, 2 days ago by Slams.
    Plugin Support Reynier (a11n)

    (@reynierc)

    Hi @slams

    Thank you for explaining more about the situation.

    To help us address this issue effectively, could you please provide the specific image URL(s) in question, the one with https://i2.wp.com and https://i1.wp.com?

    With the URL(s), we can investigate further and take the necessary steps to address the misuse or remove the image from our servers. If you want the details it to remain private, you can also contact us via this contact form.

    If you choose to reach out directly through the contact form, please include a link to this thread.

    Thread Starter Slams

    (@slams)

    Hi @reynierc

    I wrote to you through the contact form. Thank you!

    Plugin Contributor Stef (a11n)

    (@erania-pinnera)

    Hi there, @slams!

    Did you include the URL of this thread in your message via the contact form? I don’t seem to be seeing it in our support queue, and we want to be sure we got your message before closing this thread.

    Thanks!

    Thread Starter Slams

    (@slams)

    Hi @erania-pinnera!

    Yes, I did. I chose the ‘Something other than what is listed above’ category, but didn’t receive any notifications or ticket ID.

    Should I resubmit the form?

    Plugin Contributor Stef (a11n)

    (@erania-pinnera)

    Hi there, @slams,

    Should I resubmit the form?

    Yes please, if it’s not too much of a trouble for you! The ticket might be in the system, but since I can’t see it on my end is making my anxious ??

    Feel free to chat with our Virtual Assistant if that helps, and ask it to get you in touch with a Happiness Engineer ??

    Better to have a duplicate ticket that a lost ticket! Let us know when you have submitted it. Thanks ?

Viewing 7 replies - 1 through 7 (of 7 total)
  • You must be logged in to reply to this topic.