MacRumors clone @ mychildrenhealth.com

Discussion in 'Site and Forum Feedback' started by mrsir2009, Apr 3, 2013.

  1. macrumors 604

    mrsir2009

    Joined:
    Sep 17, 2009
    Location:
    Melbourne, Australia
    #1
  2. macrumors 603

    justperry

    #2
  3. thread starter macrumors 604

    mrsir2009

    Joined:
    Sep 17, 2009
    Location:
    Melbourne, Australia
    #3
    Yeah, I noticed that too. What a weird domain, though...
     
  4. justperry, Apr 3, 2013
    Last edited: Apr 3, 2013

    macrumors 603

    justperry

    #4
    Arn is not online now, you could send him a PM, seems fishy to say the least, the name seems to be completely unrelated to the owner of MR, might be wrong though.

    Update:Two screenshots, one original the other one not, you can see your thread in Forum Feedback but not on the "Fake" one.
     

    Attached Files:

  5. thread starter macrumors 604

    mrsir2009

    Joined:
    Sep 17, 2009
    Location:
    Melbourne, Australia
    #5
    And the details for the domain seem dodgy too - The domain was registered to a gmail address, with certainly seems amateur...
     
  6. macrumors 603

    justperry

    #6
    See my last post, added screenshots.
     
  7. thread starter macrumors 604

    mrsir2009

    Joined:
    Sep 17, 2009
    Location:
    Melbourne, Australia
    #7
    Definitely looks like a clone, then. The owner might update it at intervals.

    [EDIT: I found all this out because I was looking on Google Analytics through my website's inbound links, and mychildrenhealth.com was there - Meaning there must be traffic flowing through that fake site.
     
  8. justperry, Apr 3, 2013
    Last edited: Apr 3, 2013

    macrumors 603

    justperry

    #8
  9. Moderator

    balamw

    Staff Member

    Joined:
    Aug 16, 2005
    Location:
    New England
    #9
    It may just be a stale reverse DNS entry. Only arn can tell us if there is any relationship we should be aware of.

    B
     
  10. macrumors demi-god

    ChristianJapan

    Joined:
    May 10, 2010
    Location:
    日本
    #10
    I would not try to enter user name and password there. Phishing ? And how did you found it ?
     
  11. macrumors 68000

    r2shyyou

    Joined:
    Oct 3, 2010
    Location:
    Paris, France
    #11
    Reason provided below:

    Also, while it may only be coincidental, arn is/was a doctor prior to running MR full-time.
     
  12. Moderator

    maflynn

    Staff Member

    Joined:
    May 3, 2009
    Location:
    Boston
    #12
    I posted in one of our back room threads for Arn to review this thread and that site.
     
  13. macrumors demi-god

    ChristianJapan

    Joined:
    May 10, 2010
    Location:
    日本
    #13
    Note to myself: read before post :eek:
    Note to the rest: sorry :eek:
     
  14. macrumors 68000

    r2shyyou

    Joined:
    Oct 3, 2010
    Location:
    Paris, France
    #14
    No "Note to r2shyyou: thank you :)" or anything like that?? ...:mad:

    (Just kidding.)
     
  15. macrumors 65816

    Mr_Brightside_@

    Joined:
    Sep 23, 2005
    Location:
    below Ash Tree Lane
    #15
    You misspelt MacRumors though :(
     
  16. macrumors 65816

    TheAppleFairy

    Joined:
    Mar 28, 2013
    Location:
    岩手県
    #16
    That's why I saw Cayman island info when I looked at his link, instead of Arnolds stuff.

    Justperry must be a Canadian or European. They add the vowel "u" to a lot of my favo'u'rite words.
     
  17. macrumors 603

    justperry

    #17
    Should I be :eek: :p

    But, you are right.:)

    Bold, No, wrong.

    Americans misspell a lot of English words not the other way around.
     
  18. Peace, Apr 3, 2013
    Last edited: Apr 3, 2013

    macrumors P6

    Peace

    Joined:
    Apr 1, 2005
    Location:
    Space--The ONLY Frontier
    #18
    MR= DNS Servers:
    ns2.tecknohost.com
    d3.tecknohost.com
    ns1.tecknohost.com

    NS1.TECKNOHOST.COM 37.58.81.250
    NS2.TECKNOHOST.COM 5.79.26.209

    ------------------

    mychildrenhealth =

    Domain name: mychildrenhealth.com

    Administrative Contact:

    Keva Reed (fenzu.333@gmail.com)
    +1.9899281913
    Fax:
    4738 Juniper Drive
    Saginaw, AL 48607
    US

    Technical Contact:

    Keva Reed (fenzu.333@gmail.com)
    +1.9899281913
    Fax:
    4738 Juniper Drive
    Saginaw, AL 48607
    US

    Registrant Contact:

    Keva Reed ()

    Fax:
    4738 Juniper Drive
    Saginaw, AL 48607
    US

    Status: Locked

    Name Servers:
    beth.ns.cloudflare.com
    igor.ns.cloudflare.com

    Creation date: 02 Mar 2009 08:51:34
    Expiration date: 02 Mar 2014 08:51:00

    --------

    Both registered through register.com
     
  19. macrumors 603

    Joined:
    Oct 22, 2007
    Location:
    An Island in the Salish Sea
    #19
    Just for fun, I plugged the address found on the MyChildrenHealth Whois record into Google Maps. As listed, it is wrong... There is no Juniper Drive in Saginaw Alabama (AL)... however if you change the AL to MI (Michigan) it does work - zip code included. Don't know how significant this is... maybe a typo. Street view shows a modest rural or suburban neighbourhood.

    A Mystery Indeed, eh?
     
  20. macrumors P6

    Peace

    Joined:
    Apr 1, 2005
    Location:
    Space--The ONLY Frontier
    #20
    Don't think so. It could be a phishing scam. I'd not click through anything at the health site.

    Contact info for the registrar is :

    Administrative Contact, Technical Contact:
    Admin, Domain domains at cloudflare.com
    CloudFlare, Inc.
    665 Third Street
    Suite 207
    San Francisco, CA 94107

    DNS2.CLOUDFLARE.COM 173.245.58.99
    DNS3.CLOUDFLARE.COM 173.245.59.99
     
  21. macrumors 603

    Joined:
    Oct 22, 2007
    Location:
    An Island in the Salish Sea
    #21
    I dug some more.

    fenzu.111@gmail.com (similar to the fenzu.333@gmail.com used in the MyChildrenHealth.com whois record) is connected to TheLifeFitness.com, and its Whois record is below - note the Name Servers - same as other one. I think the street address for the contact on this one is not accurate too...
    ---
    Domain Name: THELIFEFITNESS.COM
    Registrar: ENOM, INC.
    Whois Server: whois.enom.com
    Referral URL: http://www.enom.com
    Name Server: BETH.NS.CLOUDFLARE.COM
    Name Server: IGOR.NS.CLOUDFLARE.COM
    Status: clientTransferProhibited
    Updated Date: 01-mar-2013
    Creation Date: 02-mar-2009
    Expiration Date: 02-mar-2014
     
  22. macrumors 68000

    r2shyyou

    Joined:
    Oct 3, 2010
    Location:
    Paris, France
  23. macrumors 603

    Joined:
    Oct 22, 2007
    Location:
    An Island in the Salish Sea
    #23
    I think you are right ... something phishy in any case.
     
  24. Peace, Apr 3, 2013
    Last edited: Apr 3, 2013

    macrumors P6

    Peace

    Joined:
    Apr 1, 2005
    Location:
    Space--The ONLY Frontier
    #24
    In any case mychildrenhealth is about to go down.

    Either because it's a DNS snafu, a phishing scam or arn is in the middle of changing domain servers. I kinda of question the latter because MR has always been out of England.
     
  25. macrumors 65816

    TheAppleFairy

    Joined:
    Mar 28, 2013
    Location:
    岩手県
    #25
    I didn't say your spelling of rumours/rumors is wrong, just different than how Americans spell it.

    In this case you did misspell, since the site is macrumors and not macrumours.

    ----------

    Definately a DNS issue, but I wonder if it's done on purpose and if they have gotten any passwords or any other private information from users.
     

Share This Page