GOOD JOB! WE FOUND THE IMPOSTER AND IT WAS THE NGINX SERVER! HAHAHA...