I noticed bing webmaster telling me I had a backlink from somewhere. I investigated to find to my surprise someone had stole my discourse based site! I deactivated ‘allow same origin’ plugin but its still somehow appearing on this fake site. My site is http://www.aibuapp.com/ and the catfish is http://labthi.ng/ Has my discourse been hacked?

have you checked your DNS? kindly check your host/domain provider as well. They might be able to look into the config/settings why is your site pointing to another domain simultaneously.

Yes I contacted them. They said this other person is pointing their domain to the server. Why would they even bother doing that?? What’s a foolproof and easy way to block traffic from their domain?

I think this is a fix @sam needs to make so the site will only answer to the official domain and IP address.

We already had this case once here on Meta, but I cannot find the topic or remember the resolution :frowning:

I don’t have the topic reference to hand, but it was given to me to rummage around and try to munge the nginx config to setup a separate default site. Never quite got around to actually doing it, though.

Sometime, it’s quite useful for helping reduce the redirection configuration, i.e. www And I am pretty sure web ssl template will redirect the user to the actual domain. if ($http_host != $$ENV_DISCOURSE_HOSTNAME) { rewrite (.*) https://$$ENV_DISCOURSE_HOSTNAME$1 permanent; } ssl and letsencrypt templates would relieve you from all kinds of troubles. EDIT: You don’t even need to issue any certs for domain where you want redirection comes from.

Yes, I consider this solved, everyone should be using the lets encrypt template, it is free and solves this issue 100%

Ok where do I find it and use it? Does this mean I need to install a certificate?

The first search result for: “lets encrypt” [image] Set up HTTPS support with Let's Encrypt Self-Hosting bookmark This is a guide for enabling HTTPS on an existing Discourse installation using Let’s Encrypt. It assumes prior installation without HTTPS enabled. person_raising_hand Required user level: System Administrator exclamation This guide is only for existing installs where HTTPS is not enabled. Following the official setup guide automatically enables HTTPS by default. So you’d like to add https to your Discourse absolutely free, courtesy of our friends at Let’s Encrypt? bell I…

My discourse has either been hacked or catfished?

Product Support

Falco (Falco) May 13, 2016, 2:34pm 10

The first search result for: “lets encrypt”

Topic		Replies	Views
LetsEncrypt working without www, not with www Product Support	11	2158	January 19, 2020
Making 'www' work with Discourse Product Support	30	3051	May 15, 2020
Setup Let’s Encrypt + non-www > www Sysadmins how-to , domains	5	3633	February 23, 2025
Forwarding from https:// to https://www Self-hosting hosting	15	463	September 14, 2024
Discourse + Let's Encrypt w/ multiple hostnames Product Support	8	1653	January 18, 2020

My discourse has either been hacked or catfished?

Related topics