Embed Notice

@evan yeah that is precisely the problem. What's the response when you hit the API on that domain? Does it appear to be a separate single-user instance even though it isn't, or does it provide the stats for the entire instance resulting in a bunch of false duplicate data?

Edit: Also, how's that work for defederation? The original instance gets a pass because the abusive user brought their own domain and nobody can easily tell who is actually hosting it?