Apperently a new thing to attack SEO on websites, is to reverse proxy the site with a new domain, we have had a case of this, reveled by google search console.
Is there an effective way to block this from happening either thrue nginx, or php?