Go Back   MacRumors Forums > Mac Community > Site and Forum Feedback

Reply
 
Thread Tools Search this Thread Display Modes
Old Apr 3, 2013, 03:09 AM   #1
mrsir2009
macrumors 604
 
mrsir2009's Avatar
 
Join Date: Sep 2009
Location: Melbourne, Australia
MacRumors clone @ mychildrenhealth.com

If you go to http://mychildrenhealth.com/ or http://forums.mychildrenhealth.com/ you end up at what looks like a MacRumors clone. It's not a redirect, because the domain stays at http://mychildrenhealth.com/ whilst you browse the site, and when I visit the forums I'm not logged in, even though I am on macrumors.com.

Does this happen with anyone else, or just me? And if so, does anyone know what's up with it?

Very odd indeed...
mrsir2009 is offline   0 Reply With Quote
Old Apr 3, 2013, 03:15 AM   #2
justperry
macrumors 603
 
justperry's Avatar
 
Join Date: Aug 2007
Location: 7 Km South of an active upside down (boat) volcano.
Same here although the page loads "widescreen" or full page instead of the normal MR pages, and the main page only has the first two articles with pictures, the rest just text.

http://whois.domaintools.com/mychildrenhealth.com
justperry is offline   0 Reply With Quote
Old Apr 3, 2013, 03:21 AM   #3
mrsir2009
Thread Starter
macrumors 604
 
mrsir2009's Avatar
 
Join Date: Sep 2009
Location: Melbourne, Australia
Quote:
Originally Posted by justperry View Post
Same here although the page loads "widescreen" or full page instead of the normal MR pages, and the main page only has the first two articles with pictures, the rest just text.

http://whois.domaintools.com/mychildrenhealth.com
Yeah, I noticed that too. What a weird domain, though...
mrsir2009 is offline   0 Reply With Quote
Old Apr 3, 2013, 03:26 AM   #4
justperry
macrumors 603
 
justperry's Avatar
 
Join Date: Aug 2007
Location: 7 Km South of an active upside down (boat) volcano.
Quote:
Originally Posted by mrsir2009 View Post
Yeah, I noticed that too. What a weird domain, though...
Arn is not online now, you could send him a PM, seems fishy to say the least, the name seems to be completely unrelated to the owner of MR, might be wrong though.

Update:Two screenshots, one original the other one not, you can see your thread in Forum Feedback but not on the "Fake" one.
Attached Thumbnails
Click image for larger version

Name:	Screen Shot 2013-04-03 at 14.30.28.png
Views:	107
Size:	81.3 KB
ID:	405981   Click image for larger version

Name:	Screen Shot 2013-04-03 at 14.30.42.png
Views:	142
Size:	57.1 KB
ID:	405982  

Last edited by justperry; Apr 3, 2013 at 03:32 AM.
justperry is offline   0 Reply With Quote
Old Apr 3, 2013, 03:29 AM   #5
mrsir2009
Thread Starter
macrumors 604
 
mrsir2009's Avatar
 
Join Date: Sep 2009
Location: Melbourne, Australia
Quote:
Originally Posted by justperry View Post
Arn is not online now, you could send him a PM, seems fishy to say the least, the name seems to be completely unrelated to the owner of MR, might be wrong though.
And the details for the domain seem dodgy too - The domain was registered to a gmail address, with certainly seems amateur...
mrsir2009 is offline   0 Reply With Quote
Old Apr 3, 2013, 03:33 AM   #6
justperry
macrumors 603
 
justperry's Avatar
 
Join Date: Aug 2007
Location: 7 Km South of an active upside down (boat) volcano.
Quote:
Originally Posted by mrsir2009 View Post
And the details for the domain seem dodgy too - The domain was registered to a gmail address, with certainly seems amateur...
See my last post, added screenshots.
justperry is offline   0 Reply With Quote
Old Apr 3, 2013, 03:38 AM   #7
mrsir2009
Thread Starter
macrumors 604
 
mrsir2009's Avatar
 
Join Date: Sep 2009
Location: Melbourne, Australia
Quote:
Originally Posted by justperry View Post
See my last post, added screenshots.
Definitely looks like a clone, then. The owner might update it at intervals.

[EDIT: I found all this out because I was looking on Google Analytics through my website's inbound links, and mychildrenhealth.com was there - Meaning there must be traffic flowing through that fake site.
mrsir2009 is offline   0 Reply With Quote
Old Apr 3, 2013, 03:43 AM   #8
justperry
macrumors 603
 
justperry's Avatar
 
Join Date: Aug 2007
Location: 7 Km South of an active upside down (boat) volcano.
Is Mr site on the same server as this one, if so something might be really messed up there, although unlikely.

Edit: Don't think so

http://whois.domaintools.com/macrumors.com

Last edited by justperry; Apr 3, 2013 at 11:52 AM. Reason: Fixed URL Macrumors instead of Macrumours
justperry is offline   0 Reply With Quote
Old Apr 3, 2013, 07:52 AM   #9
balamw
Moderator
 
balamw's Avatar
 
Join Date: Aug 2005
Location: New England, USA
Quote:
Originally Posted by mrsir2009 View Post
[EDIT: I found all this out because I was looking on Google Analytics through my website's inbound links, and mychildrenhealth.com was there - Meaning there must be traffic flowing through that fake site.
It may just be a stale reverse DNS entry. Only arn can tell us if there is any relationship we should be aware of.

B
__________________
MBA (13" 1.7 GHz 128GB), UMBP (15" SD 2.8 GHz), UMB (13" 2.4 GHz), iMac (17" Yonah), 32GB iPad 3 WiFi+LTE, 64 GB iPad WiFi, 32 GB iPhone 5, Airport Extreme
balamw is offline   0 Reply With Quote
Old Apr 3, 2013, 08:12 AM   #10
ChristianJapan
macrumors Demi-God
 
ChristianJapan's Avatar
 
Join Date: May 2010
Location: 日本
I would not try to enter user name and password there. Phishing ? And how did you found it ?
__________________
Member of MacRumors.com Folding@Home Team (#3446) & developer of the F@H Mobile Monitoring app.
ChristianJapan is offline   0 Reply With Quote
Old Apr 3, 2013, 08:20 AM   #11
r2shyyou
macrumors 68000
 
r2shyyou's Avatar
 
Join Date: Oct 2010
Location: Paris, France
Quote:
Originally Posted by ChristianJapan View Post
And how did you found it ?
Reason provided below:

Quote:
Originally Posted by mrsir2009 View Post
I found all this out because I was looking on Google Analytics through my website's inbound links, and mychildrenhealth.com was there - Meaning there must be traffic flowing through that fake site.
Also, while it may only be coincidental, arn is/was a doctor prior to running MR full-time.
__________________
"kkkkkkkk ....ok" - iphone4s16gb
r2shyyou is offline   0 Reply With Quote
Old Apr 3, 2013, 08:38 AM   #12
maflynn
Moderator
 
maflynn's Avatar
 
Join Date: May 2009
Location: Boston
I posted in one of our back room threads for Arn to review this thread and that site.
__________________
~Mike Flynn
maflynn is online now   0 Reply With Quote
Old Apr 3, 2013, 08:47 AM   #13
ChristianJapan
macrumors Demi-God
 
ChristianJapan's Avatar
 
Join Date: May 2010
Location: 日本
Quote:
Originally Posted by r2shyyou View Post
Reason provided below
Note to myself: read before post
Note to the rest: sorry
__________________
Member of MacRumors.com Folding@Home Team (#3446) & developer of the F@H Mobile Monitoring app.
ChristianJapan is offline   0 Reply With Quote
Old Apr 3, 2013, 08:49 AM   #14
r2shyyou
macrumors 68000
 
r2shyyou's Avatar
 
Join Date: Oct 2010
Location: Paris, France
Quote:
Originally Posted by ChristianJapan View Post
Note to myself: read before post
Note to the rest: sorry
No "Note to r2shyyou: thank you " or anything like that?? ...

(Just kidding.)
__________________
"kkkkkkkk ....ok" - iphone4s16gb
r2shyyou is offline   0 Reply With Quote
Old Apr 3, 2013, 11:33 AM   #15
Mr_Brightside_@
macrumors 65816
 
Mr_Brightside_@'s Avatar
 
Join Date: Sep 2005
Location: below Ash Tree Lane
Quote:
Originally Posted by justperry View Post
Is Mr site on the same server as this one, if so something might be really messed up there, although unlikely.

Edit: Don't think so

http://whois.domaintools.com/macrumours.com
You misspelt MacRumors though
__________________
All over the ship, dancing through the wreckage of the Pfhor computer core, DURANDAL WAS LAUGHING
Here is the toil of that house, and the inextricable wandering
Mr_Brightside_@ is offline   0 Reply With Quote
Old Apr 3, 2013, 11:36 AM   #16
TheAppleFairy
macrumors 65816
 
TheAppleFairy's Avatar
 
Join Date: Mar 2013
Location: 岩手県
Quote:
Originally Posted by Mr_Brightside_@ View Post
You misspelt MacRumors though
That's why I saw Cayman island info when I looked at his link, instead of Arnolds stuff.

Justperry must be a Canadian or European. They add the vowel "u" to a lot of my favo'u'rite words.
TheAppleFairy is offline   1 Reply With Quote
Old Apr 3, 2013, 11:45 AM   #17
justperry
macrumors 603
 
justperry's Avatar
 
Join Date: Aug 2007
Location: 7 Km South of an active upside down (boat) volcano.
Quote:
Originally Posted by Mr_Brightside_@ View Post
You misspelt MacRumors though
Should I be

But, you are right.

Quote:
Originally Posted by TheAppleFairy View Post
That's why I saw Cayman island info when I looked at his link, instead of Arnolds stuff.

Justperry must be a Canadian or European. They add the vowel "u" to a lot of my favo'u'rite words.
Bold, No, wrong.

Americans misspell a lot of English words not the other way around.
justperry is offline   2 Reply With Quote
Old Apr 3, 2013, 11:49 AM   #18
Peace
macrumors P6
 
Peace's Avatar
 
Join Date: Apr 2005
Location: Space--The ONLY Frontier
MR= DNS Servers:
ns2.tecknohost.com
d3.tecknohost.com
ns1.tecknohost.com

NS1.TECKNOHOST.COM 37.58.81.250
NS2.TECKNOHOST.COM 5.79.26.209

------------------

mychildrenhealth =

Domain name: mychildrenhealth.com

Administrative Contact:

Keva Reed (fenzu.333@gmail.com)
+1.9899281913
Fax:
4738 Juniper Drive
Saginaw, AL 48607
US

Technical Contact:

Keva Reed (fenzu.333@gmail.com)
+1.9899281913
Fax:
4738 Juniper Drive
Saginaw, AL 48607
US

Registrant Contact:

Keva Reed ()

Fax:
4738 Juniper Drive
Saginaw, AL 48607
US

Status: Locked

Name Servers:
beth.ns.cloudflare.com
igor.ns.cloudflare.com

Creation date: 02 Mar 2009 08:51:34
Expiration date: 02 Mar 2014 08:51:00

--------

Both registered through register.com

Last edited by Peace; Apr 3, 2013 at 11:59 AM.
Peace is offline   0 Reply With Quote
Old Apr 3, 2013, 11:52 AM   #19
snberk103
macrumors 603
 
Join Date: Oct 2007
Location: An Island in the Salish Sea
Just for fun, I plugged the address found on the MyChildrenHealth Whois record into Google Maps. As listed, it is wrong... There is no Juniper Drive in Saginaw Alabama (AL)... however if you change the AL to MI (Michigan) it does work - zip code included. Don't know how significant this is... maybe a typo. Street view shows a modest rural or suburban neighbourhood.

A Mystery Indeed, eh?
__________________
My friends, love is better than anger. Hope is better than fear. Optimism is better than despair. So let us be loving, hopeful and optimistic. And we'll change the world. - Jack Layton
snberk103 is offline   0 Reply With Quote
Old Apr 3, 2013, 11:54 AM   #20
Peace
macrumors P6
 
Peace's Avatar
 
Join Date: Apr 2005
Location: Space--The ONLY Frontier
Quote:
Originally Posted by snberk103 View Post
Just for fun, I plugged the address found on the MyChildrenHealth Whois record into Google Maps. As listed, it is wrong... There is no Juniper Drive in Saginaw Alabama (AL)... however if you change the AL to MI (Michigan) it does work - zip code included. Don't know how significant this is... maybe a typo. Street view shows a modest rural or suburban neighbourhood.

A Mystery Indeed, eh?
Don't think so. It could be a phishing scam. I'd not click through anything at the health site.

Contact info for the registrar is :

Administrative Contact, Technical Contact:
Admin, Domain domains at cloudflare.com
CloudFlare, Inc.
665 Third Street
Suite 207
San Francisco, CA 94107

DNS2.CLOUDFLARE.COM 173.245.58.99
DNS3.CLOUDFLARE.COM 173.245.59.99
Peace is offline   0 Reply With Quote
Old Apr 3, 2013, 12:01 PM   #21
snberk103
macrumors 603
 
Join Date: Oct 2007
Location: An Island in the Salish Sea
I dug some more.

fenzu.111@gmail.com (similar to the fenzu.333@gmail.com used in the MyChildrenHealth.com whois record) is connected to TheLifeFitness.com, and its Whois record is below - note the Name Servers - same as other one. I think the street address for the contact on this one is not accurate too...
---
Domain Name: THELIFEFITNESS.COM
Registrar: ENOM, INC.
Whois Server: whois.enom.com
Referral URL: http://www.enom.com
Name Server: BETH.NS.CLOUDFLARE.COM
Name Server: IGOR.NS.CLOUDFLARE.COM
Status: clientTransferProhibited
Updated Date: 01-mar-2013
Creation Date: 02-mar-2009
Expiration Date: 02-mar-2014
__________________
My friends, love is better than anger. Hope is better than fear. Optimism is better than despair. So let us be loving, hopeful and optimistic. And we'll change the world. - Jack Layton
snberk103 is offline   0 Reply With Quote
Old Apr 3, 2013, 12:04 PM   #22
r2shyyou
macrumors 68000
 
r2shyyou's Avatar
 
Join Date: Oct 2010
Location: Paris, France
In addition to mychildrenhealth.com, here are some others listed under the same person:

tigerwoodsnews.com
FitnessCareServices.com
celebhotpic.com
nofaxloansonline.com
tvdealsblackfriday.com
beastquote.com
__________________
"kkkkkkkk ....ok" - iphone4s16gb
r2shyyou is offline   0 Reply With Quote
Old Apr 3, 2013, 12:04 PM   #23
snberk103
macrumors 603
 
Join Date: Oct 2007
Location: An Island in the Salish Sea
Quote:
Originally Posted by Peace View Post
Don't think so. It could be a phishing scam. I'd not click through anything at the health site.
....
I think you are right ... something phishy in any case.
__________________
My friends, love is better than anger. Hope is better than fear. Optimism is better than despair. So let us be loving, hopeful and optimistic. And we'll change the world. - Jack Layton
snberk103 is offline   0 Reply With Quote
Old Apr 3, 2013, 12:05 PM   #24
Peace
macrumors P6
 
Peace's Avatar
 
Join Date: Apr 2005
Location: Space--The ONLY Frontier
In any case mychildrenhealth is about to go down.

Either because it's a DNS snafu, a phishing scam or arn is in the middle of changing domain servers. I kinda of question the latter because MR has always been out of England.

Last edited by Peace; Apr 3, 2013 at 12:12 PM.
Peace is offline   0 Reply With Quote
Old Apr 3, 2013, 01:25 PM   #25
TheAppleFairy
macrumors 65816
 
TheAppleFairy's Avatar
 
Join Date: Mar 2013
Location: 岩手県
Quote:
Originally Posted by justperry View Post
Should I be

But, you are right.



Bold, No, wrong.

Americans misspell a lot of English words not the other way around.
I didn't say your spelling of rumours/rumors is wrong, just different than how Americans spell it.

In this case you did misspell, since the site is macrumors and not macrumours.

----------

Quote:
Originally Posted by Peace View Post
In any case mychildrenhealth is about to go down.

Either because it's a DNS snafu, a phishing scam or arn is in the middle of changing domain servers. I kinda of question the latter because MR has always been out of England.
Definately a DNS issue, but I wonder if it's done on purpose and if they have gotten any passwords or any other private information from users.
TheAppleFairy is offline   0 Reply With Quote


Reply
MacRumors Forums > Mac Community > Site and Forum Feedback

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Similar Threads
thread Thread Starter Forum Replies Last Post
Best way to back-up/reinstall OS - to clone or not to clone pianoman88 Mac mini 5 Apr 10, 2014 05:54 PM
Um, what? forums.mychildrenhealth.com rmwebs Site and Forum Feedback 3 Nov 22, 2013 07:06 PM
how to clone fanfaron PowerPC Macs 5 Jun 23, 2013 12:46 PM
Resolved: How do I clone my OS X? Please help! Adam1988 Mac Applications and Mac App Store 7 May 26, 2013 09:52 AM

Forum Jump

All times are GMT -5. The time now is 07:30 AM.

Mac Rumors | Mac | iPhone | iPhone Game Reviews | iPhone Apps

Mobile Version | Fixed | Fluid | Fluid HD
Copyright 2002-2013, MacRumors.com, LLC