Question Nginx proxy reserve - phishing !!!!

[viasite]

Hello, I have an updated server with all the updates, where I use nginx reserve proxy and php-fpm 7.2
I have a multi-domain website.

Example urls on my server with my domains can be these:
EXAMPLE SPIELE - Spielen. Online-Spiele
EXAMPLE GAMES - Play, online games

and an external domain in another server that is supplanting me in real time is this: EXAMPLE SPIELE - Spielen. Online-Spiele

How can he do that? some help? Thank you.

 

[Brujo]

Well I belive this is not a Plesk issue, but as a adhoc task perhaps you can identify the clones/script IP in the webserver access logfile of your domain and lock the IP address via the Plesk firewall, so that the clone/script can no longer access the content. You also should ensure that your website got not compromised in some way, therefore you can try something like maldet or the plesk extension Revisium to check your website.

See for example also: Cloned Website Stealing Google Rankings & JonasCz/How-To-Prevent-Scraping & Cloned Website? - Here's What To Do

 

[viasite]

Thanks for the reply.
I'm trying to get the remote ip of the clone server through the nginx directives to compare them with the ips of my server and block all those.
the variables $realip_remote_addr; or $remote_addr; they do not work, since sometimes, it shows my own IP
Can you do something?
There will be other clones that you can not realize that they are cloning you and you can not wait for you to find out who copies you.
thank you

 

[viasite]

if you say it's not plesk's problem.
How can a panel like plesk not allow a few simple options so that they do not clone or impersonate your web using nginx proxy?
this is not secure and plesk does not support a simple phishing vulnerability option

 

[viasite]

any idea? please ...