x-frame header or iframe or oembed issue,

there is a wordpress site cloned multiple times using iframe or something else i am not able to rectify the situation, therefore asking for help here.
I added x-frame header to origin only and deny in htaccess but clone still working
i added wp-config snippet but clone is still working.
added functions.php snippet clone is not down.
header.php snippet clone is still not down.

If anyone could help it would really be appriciated. i will share the site links in pm

Probably he is using curl to scrape, instead of iframe? Really hard to control if somebody knows what he is doing.

If you pm me the evil site, I can have a look.

Gogol said:

Probably he is using curl to scrape, instead of iframe? Really hard to control if somebody knows what he is doing.

If you pm me the evil site, I can have a look.

Click to expand...

pm is sent please check

You can use Content-Security-Policy to make sure your site cannot be framed

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Security-Policy/frame-src

Ok I checked the site. It's not iframe, so setting CSP won't help. The evil sites are using either curl, or selenium to scrape the actual content. So, I suggested OP (check ur PM man) using recaptcha V3 api to filter the scrapers out.