Ok. I have a hacker that keeps coming back almost daily. I’m using WordPress and Wordfence. The hacker keeps getting past Wordfence by using subdomains. I do not use subdomains at all. All http requests are forwarded to https as are all www requests forwarded to non-www. So basically I’m hoping there’s a way to stop the use of subdomains completely.