Question posted in 
I have a website :
http://bamboo-straws.com
But since yesterday I see that this site is displaying it as well :
http://kevineger.xyz
The problem is that it totally f**k up my SEO. My site doesn’t even show up in the 20 first pages, while if you google the other, it appears in page 4-5, showing my title, description etc.
I tryed to look about solution but I have no idea what to do.
It seems that their DNS is pointing to my IP.
I just did set up a “no hot linking” so they don’t have the images anymore…
The site is based on wordpress.
Very unlucky, we launched the product a few days ago…
2
Answers
The problem here seems to be that you are serving this site as the default content whenever anyone requests something from this IP. You need to change the server-block in your nginx configuration so this site is not the default that is sent.
This page on the nginx wiki shows how that is done https://www.nginx.com/resources/wiki/start/topics/examples/server_blocks/
As a side note there is a chance that this is actually not malicious. This domain was registered some time ago and points at the Digital Ocean nameservers, they probably had the same IP address you have now at DO attached onto their droplet and once they released it then it got assigned to you. I see this myself in request logs at my Digital Ocean droplets from sites requesting to use my DNS and bots trying to access the site – I just simply don’t serve them any content as I chose not to have a default server-block.
Just configure serverpilot the right way so its pointing to right app. Or add the domain to an existing app. Its basically pointing to the default app right now, which is in your case bamboo-straws.com.
You can also point the unwanted domain to an “empty” default app. Create a .htaccess file in the app’s folder:
Deny from allBtw, you are running an apache server not NGINX.