don't know how to classify this...
last night I did some digging and noticed copies of my site indexed in google (some even on top of my original results)
so I found a direct copy of my site as:
Website Hosting - Mysite.com
example:
Mike In Brazil ? - Official Site
when you visit planhe.com directly, it shows NGINX error, but check it out AFTER you visit some subdomain (like my example below)
it will show:
I'm really not all too familiar with black hat tactics but there is something SHADY as fuck with this