Yes. You have a problem.
Explorebuncombe.com: Is an events site and does not appear to have a copy of your site but may have in the past- who knows. It is not related to the next two sites.
Exploredare.com: Is a copy of your site without a frame or 301 redirect. The IP address is 50.56.48.239 which is on a Rackspace IP address block.
Exploregastonia.com: Is a copy of your site as well. I did not check for a frame or redirect- I rather doubt if these techniques are being used. The IP address is 50.56.48.239 which is on a Rackspace IP address block.
Both sites are hosted on Secureserver.net. Secureserver.net has the IP address of 97.74.104.222 which is on a GoDaddy.com IP address block.
Secureserver.net does not have a home page and gives a 404 error no matter how you access it.
The registration for Secureserver.net is under domaincontrol.com which resolves to 127.0.0.1 and does not have www, however, it is the product of GoDaddy.
This means that Exploredare.com and Exploregastonia.com as well as Secureserver.net are registered through GoDaddy.
Adding a canonical tag is like closing the gate after the horse has left the stable. I would recommend it. But too late for this issue.
You have a licence notice on the bottom of your site. I suggest removing it immediately. You may have given people permission to copy your site. This is the license you granted: http://creativecommons.org/publicdomain/zero/1.0/ I would not suggesting that this license never existed- they are on the site copies.
The damage is that there is duplicate content on the web and your search prowess has been sapped.
I suggest:
1] Changing your site significantly with the canonical tag on each page. This includes content, template, etc. Make sure that your new site outperforms the old site from an SEO standpoint. We can help with some of that here.
2] Immediately filling a DMCA (Digital Millennium Copyright Act) with Google complaint- info found here: https://support.google.com/legal/answer/1120734 If this page is not helpful, go here: https://www.google.com/webmasters/tools/dmca-dashboard You will need a Google Webmaster Tools account.
3] Call GoDaddy (480) 505-8877 and explain what is happening. Use this page if you need to. They should be disabling the website and e-mailing the site owner immediately upon your complaint. As well, you may have the legal right to the site owner contact information including name, address, and phone number for your legal records. You may have to talk to a supervisor. If they refuse the contact information, you may need to get a lawyer to write a letter to their legal department. I would mention your intent to seek legal counsel even if you do not in the end.
4] Call RackSpace 1 (800) 961-4454 and explain what is happening. Use this page if you need to. They should shutdown these sites immediately upon your complaint. As well, you may have the legal right to the site owner contact information including name, address, and phone number for your legal records. You may have to talk to a supervisor. If they refuse the contact information, you may need to get a lawyer to write a letter to their legal department. I would mention your intent to seek legal counsel even if you do not in the end.
There seems to be a lot of this these days. I am not sure what the payoff is. What is the site to gain from copying your site? Nothing.