I'm not sure what's happening but i've just found, that someone has registered domain name *-auth.ga
that displays my website. I'm not sure how can i block that kind of issue, i don't just want to ban each domain directly. I'm looking for a more general solution.
This website is not using iframe, my nginx host has a domain name specified (dns of that fake domain is not pointing to my server so it's not an issue actually i think), i'm also forcing SSL connection but this fake domain uses ssl as well (https://*-auth.ga
) so this all seems really misterious. Anyway, even with the basic protection settings mentioned above, i'm still able to reach my website under fake domain and i can see the access logs on my server (so it's not any kind of a mirror nor anything like that)
How can i prevent such behaviour in nginx/app? can anyone explain me what's that, why someone is doing it and why/if it can be dangerous in any way? I'm not even sure how to google for that nor what tags to use in here. Thanks in advance!