I'm not sure exactly how to call this type of hijacking, as they didn't seem to download our site but just running a script.

Surely this can be done from their registrars control panel where they can point their name at any site, retain their domain name all the time but simply change the meta details?

I can't understand why they would want to do that other than wonder if they have made a mistake and pointed it at the incorrect site?

I wonder where their traffic is coming from - are they ranking in SE's

"I looked at Google Analytics and saw a new site directing big traffic to us"
I guess they copied your analytics code also

I also cannot understand what they can benefit from re-rerouting their domain and pointing it to my site. And that makes me more scared because it seems a way to sabotage us, albeit slowly (duplicate content?).

I was just perplexed to see a huge jump in my Adsense impressions yesterday but cannot find any increases in the impressions from any of our channels.

This is not the first time someone used our site. But others before have downloaded all our content and site design (unpolished it may be), and replaced our name with their name. This is the first for this type of abuse.

And I'm not happy that the form I used in the Google Adsense website to report the invalid activity came back to me as undeliverable. Time to contact the reps.

I don't see them in Google as yet. Though looking at the site in Firefox, it seems to be part of some blast traffic site.

It's scary that someone will want to use a domain and point that domain to our site, and use blast traffic to promote it.

I had this happen to me a couple of months ago. It's very scary and infuriating. I went to whoisdomain and got the domain owner's name and email (yes, it was there). Sent him a message threatening immediate legal action if he didn't stop his piracy -- next day his site was down and I haven't had any trouble since.

I hope your solution turns out to be as simple.

Good luck

I'm waiting for the web host to respond.

The domain registrar's legal dept already responded to say that while they are indeed the domain registrar, I need to contact the web host. Grrr....

Thanks Astrobiologist. It is a pain indeed.

Is there anything else I can do to protect my Adsense (and my site as well)?

Yes, go to AdSense Setup -> Allowed Sites and provide a list of your domains and the other domain will be rejected by AdSense and no longer impact your reporting.

Another site is running a script to show our pages on their domain. Any update on our site is immediately reflected on that domain. They only changed the metatag in their site -- but the logo, our site's name, everything is still in that thief's site

This may be a simple DNS hijacking, except the meta tag you mentioned, which can be easily fixed if it's only a DNS hijacking.

Anyone can aim their dns entry at your server's IP and assuming you have more than one domain on the server it will only resolve to the first domain on that server.

Adding this to your .htaccess file should help this problem:

RewriteCond %{HTTP_HOST} !^(example\.com)?$
RewriteRule ^(.*)$ http://example.com/$1 [R=301,L]

This will stop any dns hijacking of your site in the search engines or otherwise as Apache will redirect anything that isn't your domain name back to your actual domain name.

Thanks incredibill ... I added the code to the .htaccess file but it did not work. The site is still showing up our site

But with an added twist -- when you go to the domain of the thief showing our website, there's an audio announcing business opportunity. We're a leading information site in that space (not bizopp, but the more general field).

Firefox shows that they are framing our site.

It was not there this morning. So they may have added it today and using our site to market their bizopp.

I added a frame busting script to my site. Going to the pest's domain now goes straight to our domain. Whew!

But it is scary that other sites who wants to promote their bizopps will hijack another site to give them credibility!

I would file some DMCA complaints with the SEs first, once knocked out of the SEs those domains are pretty useless, then file DMCA complaints with their hosts and get them offline.

I would file some DMCA complaints

That would be a bad idea since all they are doing is framing the OP's site.

Allowed Sites and provide a list of your domains and the other domain will be rejected by AdSense

That wouldn't work either. The framed site is still the OP's and would be allowed.

I added a frame busting script to my site. Going to the pest's domain now goes straight to our domain. Whew!

Be aware that some people have JavaScript disabled, so the solution is not 100%.

RewriteCond %{HTTP_HOST} !^(example\.com)?$
RewriteRule ^(.*)$ http://example.com/$1 [R=301,L]

Causes an endless redirect error

By the way, how did you found out that your site was hijacked? It may also be happening to me but I dont know how to check it.

Mod-rewrites are so tricky. I don't see why that one should be failing, but if anything, it's too specific. Try:

RewriteCond %{HTTP_HOST} !example\.com
RewriteRule ^(.*)$ http://example.com/$1 [R=301,L]