The problem is Site B and any of its content / assets should NOT be reachable via the external facing webserver / dispatcher instance.I placed deny filters in the dispatcher conf, but I am still able to get to resources of site b.I commented dispatcher cache to isolate the issue and cleared cache.