MacRumors clone @ mychildrenhealth.com

Discussion in 'Site and Forum Feedback' started by mrsir2009, Apr 3, 2013.

  1. mrsir2009
    Expand Collapse
    macrumors 604

    mrsir2009

    Joined:
    Sep 17, 2009
    Location:
    Melbourne, Australia
    #1
  2. justperry
    Expand Collapse
    macrumors 604

    justperry

    Joined:
    Aug 10, 2007
    Location:
    In the core of a black hole.
    #2
  3. mrsir2009
    Expand Collapse
    thread starter macrumors 604

    mrsir2009

    Joined:
    Sep 17, 2009
    Location:
    Melbourne, Australia
    #3
    Yeah, I noticed that too. What a weird domain, though...
     
  4. justperry, Apr 3, 2013
    Last edited: Apr 3, 2013

    justperry
    Expand Collapse
    macrumors 604

    justperry

    Joined:
    Aug 10, 2007
    Location:
    In the core of a black hole.
    #4
    Arn is not online now, you could send him a PM, seems fishy to say the least, the name seems to be completely unrelated to the owner of MR, might be wrong though.

    Update:Two screenshots, one original the other one not, you can see your thread in Forum Feedback but not on the "Fake" one.
     

    Attached Files:

  5. mrsir2009
    Expand Collapse
    thread starter macrumors 604

    mrsir2009

    Joined:
    Sep 17, 2009
    Location:
    Melbourne, Australia
    #5
    And the details for the domain seem dodgy too - The domain was registered to a gmail address, with certainly seems amateur...
     
  6. justperry
    Expand Collapse
    macrumors 604

    justperry

    Joined:
    Aug 10, 2007
    Location:
    In the core of a black hole.
    #6
    See my last post, added screenshots.
     
  7. mrsir2009
    Expand Collapse
    thread starter macrumors 604

    mrsir2009

    Joined:
    Sep 17, 2009
    Location:
    Melbourne, Australia
    #7
    Definitely looks like a clone, then. The owner might update it at intervals.

    [EDIT: I found all this out because I was looking on Google Analytics through my website's inbound links, and mychildrenhealth.com was there - Meaning there must be traffic flowing through that fake site.
     
  8. justperry, Apr 3, 2013
    Last edited: Apr 3, 2013

    justperry
    Expand Collapse
    macrumors 604

    justperry

    Joined:
    Aug 10, 2007
    Location:
    In the core of a black hole.
    #8
  9. balamw
    Expand Collapse
    Moderator

    balamw

    Staff Member

    Joined:
    Aug 16, 2005
    Location:
    New England
    #9
    It may just be a stale reverse DNS entry. Only arn can tell us if there is any relationship we should be aware of.

    B
     
  10. ChristianJapan
    Expand Collapse
    macrumors 68040

    ChristianJapan

    Joined:
    May 10, 2010
    Location:
    日本
    #10
    I would not try to enter user name and password there. Phishing ? And how did you found it ?
     
  11. r2shyyou
    Expand Collapse
    macrumors 68000

    r2shyyou

    Joined:
    Oct 3, 2010
    Location:
    Paris, France
    #11
    Reason provided below:

    Also, while it may only be coincidental, arn is/was a doctor prior to running MR full-time.
     
  12. maflynn
    Expand Collapse
    Moderator

    maflynn

    Staff Member

    Joined:
    May 3, 2009
    Location:
    Boston
    #12
    I posted in one of our back room threads for Arn to review this thread and that site.
     
  13. ChristianJapan
    Expand Collapse
    macrumors 68040

    ChristianJapan

    Joined:
    May 10, 2010
    Location:
    日本
    #13
    Note to myself: read before post :eek:
    Note to the rest: sorry :eek:
     
  14. r2shyyou
    Expand Collapse
    macrumors 68000

    r2shyyou

    Joined:
    Oct 3, 2010
    Location:
    Paris, France
    #14
    No "Note to r2shyyou: thank you :)" or anything like that?? ...:mad:

    (Just kidding.)
     
  15. Mr_Brightside_@
    Expand Collapse
    macrumors 68000

    Mr_Brightside_@

    Joined:
    Sep 23, 2005
    Location:
    The 6ix
    #15
    You misspelt MacRumors though :(
     
  16. TheAppleFairy
    Expand Collapse
    macrumors 68000

    TheAppleFairy

    Joined:
    Mar 28, 2013
    Location:
    岩手県
    #16
    That's why I saw Cayman island info when I looked at his link, instead of Arnolds stuff.

    Justperry must be a Canadian or European. They add the vowel "u" to a lot of my favo'u'rite words.
     
  17. justperry
    Expand Collapse
    macrumors 604

    justperry

    Joined:
    Aug 10, 2007
    Location:
    In the core of a black hole.
    #17
    Should I be :eek: :p

    But, you are right.:)

    Bold, No, wrong.

    Americans misspell a lot of English words not the other way around.
     
  18. Peace, Apr 3, 2013
    Last edited: Apr 3, 2013

    Peace
    Expand Collapse
    macrumors P6

    Peace

    Joined:
    Apr 1, 2005
    Location:
    Space--The ONLY Frontier
    #18
    MR= DNS Servers:
    ns2.tecknohost.com
    d3.tecknohost.com
    ns1.tecknohost.com

    NS1.TECKNOHOST.COM 37.58.81.250
    NS2.TECKNOHOST.COM 5.79.26.209

    ------------------

    mychildrenhealth =

    Domain name: mychildrenhealth.com

    Administrative Contact:

    Keva Reed (fenzu.333@gmail.com)
    +1.9899281913
    Fax:
    4738 Juniper Drive
    Saginaw, AL 48607
    US

    Technical Contact:

    Keva Reed (fenzu.333@gmail.com)
    +1.9899281913
    Fax:
    4738 Juniper Drive
    Saginaw, AL 48607
    US

    Registrant Contact:

    Keva Reed ()

    Fax:
    4738 Juniper Drive
    Saginaw, AL 48607
    US

    Status: Locked

    Name Servers:
    beth.ns.cloudflare.com
    igor.ns.cloudflare.com

    Creation date: 02 Mar 2009 08:51:34
    Expiration date: 02 Mar 2014 08:51:00

    --------

    Both registered through register.com
     
  19. snberk103
    Expand Collapse
    macrumors 603

    Joined:
    Oct 22, 2007
    Location:
    An Island in the Salish Sea
    #19
    Just for fun, I plugged the address found on the MyChildrenHealth Whois record into Google Maps. As listed, it is wrong... There is no Juniper Drive in Saginaw Alabama (AL)... however if you change the AL to MI (Michigan) it does work - zip code included. Don't know how significant this is... maybe a typo. Street view shows a modest rural or suburban neighbourhood.

    A Mystery Indeed, eh?
     
  20. Peace
    Expand Collapse
    macrumors P6

    Peace

    Joined:
    Apr 1, 2005
    Location:
    Space--The ONLY Frontier
    #20
    Don't think so. It could be a phishing scam. I'd not click through anything at the health site.

    Contact info for the registrar is :

    Administrative Contact, Technical Contact:
    Admin, Domain domains at cloudflare.com
    CloudFlare, Inc.
    665 Third Street
    Suite 207
    San Francisco, CA 94107

    DNS2.CLOUDFLARE.COM 173.245.58.99
    DNS3.CLOUDFLARE.COM 173.245.59.99
     
  21. snberk103
    Expand Collapse
    macrumors 603

    Joined:
    Oct 22, 2007
    Location:
    An Island in the Salish Sea
    #21
    I dug some more.

    fenzu.111@gmail.com (similar to the fenzu.333@gmail.com used in the MyChildrenHealth.com whois record) is connected to TheLifeFitness.com, and its Whois record is below - note the Name Servers - same as other one. I think the street address for the contact on this one is not accurate too...
    ---
    Domain Name: THELIFEFITNESS.COM
    Registrar: ENOM, INC.
    Whois Server: whois.enom.com
    Referral URL: http://www.enom.com
    Name Server: BETH.NS.CLOUDFLARE.COM
    Name Server: IGOR.NS.CLOUDFLARE.COM
    Status: clientTransferProhibited
    Updated Date: 01-mar-2013
    Creation Date: 02-mar-2009
    Expiration Date: 02-mar-2014
     
  22. snberk103
    Expand Collapse
    macrumors 603

    Joined:
    Oct 22, 2007
    Location:
    An Island in the Salish Sea
    #23
    I think you are right ... something phishy in any case.
     
  23. Peace, Apr 3, 2013
    Last edited: Apr 3, 2013

    Peace
    Expand Collapse
    macrumors P6

    Peace

    Joined:
    Apr 1, 2005
    Location:
    Space--The ONLY Frontier
    #24
    In any case mychildrenhealth is about to go down.

    Either because it's a DNS snafu, a phishing scam or arn is in the middle of changing domain servers. I kinda of question the latter because MR has always been out of England.
     
  24. TheAppleFairy
    Expand Collapse
    macrumors 68000

    TheAppleFairy

    Joined:
    Mar 28, 2013
    Location:
    岩手県
    #25
    I didn't say your spelling of rumours/rumors is wrong, just different than how Americans spell it.

    In this case you did misspell, since the site is macrumors and not macrumours.

    ----------

    Definately a DNS issue, but I wonder if it's done on purpose and if they have gotten any passwords or any other private information from users.
     

Share This Page