Whoever it is, is using the same domain name, but different TLDs - .live, .info etc.

Questions to community

1. Why could they be doing this? Only reasons I can think of are (a) phishing (b) adversarial SEO. Latter's definitely worked coz I discovered them through a Claude citation (!!) To protect against (a), I'm planning to just email all our candidates and coaches to make sure they don't accidentally use their login credentials on the copycat.

Are there more dangerous motives I should proactively hedge against?

2. How can I protect myself against this more structurally? They're calling our backend endpoints so we're going to add CORS policies to protect against this.

Anything else I should be doing?

Thanks to everyone who weighs in. Prepfully's been a weekend project for the longest time, I should maybe have prioritized defending against this higher in my todos.