A Russian website is using my site somehow (do not how). Everything is same (even logo). That copy site is blocked when I activate the ‘Under Attack Mode’. I tracked down their IP in ‘Firewall Events’ and blocked it. But, the block doesn’t work when I deactivate the ‘Under Attack Mode’. Please someone tell me what to do. I have Cloudflare Pro Plan.
The first thing to determine would be how they point to your site. Do they simply point to it, do they proxy it, do they actually crawl it and clone the content, etc.
From your description it would appear as if it was proxying. When you load their site, do you get any entries in your log files? If so, which IP address shows up? Yours?