Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
anyone else getting this pop up?
- Thread starter Kronie
- Start date
- Sort by reaction score
This is in the Macrumors forums? That's not right. The login is for a totally different website. Try Firefox or something or clear your Cache.
I just got it, but in that thread... Very strange. Maybe someone embedded a script. Just hit cancel I think it's probably not legit.
That's what I thought originally was that it was something someone had embedded in the script somehow. Is that thread gone now? I cant even find it.....
This guy has it in his signature (I think) https://forums.macrumors.com/members/24021/
It's pointing to: http://www.msluiter.com/junk/imac.jpg
Here's the whois:
Domain ID:
Domain Name: msluiter.com
Created On: 28-Sep-2005 00:00:00
Expiration Date: 28-Sep-2010 00:00:00
Sponsoring Registrar: 'Check Whois' (SCHLUND) (SCHLUND)
Status: ok
Name Server: ns29.1and1.com
Name Server: ns30.1and1.com
Registrant ID: Unknown
Registrant Name: Matthew Sluiter
Registrant Organization: Unknown
Registrant Street1: 4900 N 168th AVE
Registrant Street2: Unknown
Registrant Street3: Unknown
Registrant City: Holland
Registrant State/Province: Unknown
Registrant Postal Code: 49424
Registrant Country: US
Registrant Phone: Unknown
Registrant Fax: Unknown
Registrant Email: Unknown
Admin ID: Unknown
Admin Name: Matthew Sluiter
Admin Organization: Unknown
Admin Street1: 4900 N 168th AVE
Admin Street2: Unknown
Admin Street3: Unknown
Admin City: Holland
Admin State: Unknown
Admin Postal Code: 49424
Admin Country: US
Admin Phone: +1.6163991176
Admin Fax: Unknown
Admin Email: mattsluiter@gmail.com
It's pointing to: http://www.msluiter.com/junk/imac.jpg
Here's the whois:
Domain ID:
Domain Name: msluiter.com
Created On: 28-Sep-2005 00:00:00
Expiration Date: 28-Sep-2010 00:00:00
Sponsoring Registrar: 'Check Whois' (SCHLUND) (SCHLUND)
Status: ok
Name Server: ns29.1and1.com
Name Server: ns30.1and1.com
Registrant ID: Unknown
Registrant Name: Matthew Sluiter
Registrant Organization: Unknown
Registrant Street1: 4900 N 168th AVE
Registrant Street2: Unknown
Registrant Street3: Unknown
Registrant City: Holland
Registrant State/Province: Unknown
Registrant Postal Code: 49424
Registrant Country: US
Registrant Phone: Unknown
Registrant Fax: Unknown
Registrant Email: Unknown
Admin ID: Unknown
Admin Name: Matthew Sluiter
Admin Organization: Unknown
Admin Street1: 4900 N 168th AVE
Admin Street2: Unknown
Admin Street3: Unknown
Admin City: Holland
Admin State: Unknown
Admin Postal Code: 49424
Admin Country: US
Admin Phone: +1.6163991176
Admin Fax: Unknown
Admin Email: mattsluiter@gmail.com
The mystery has been solved!
It's not his signature, I checked other threads with his posts. He put that image of an iMac on his server and posted it in that one thread. So whenever your browser tries to load the image it requests a password. In the year and a half since that post he must have removed the image and changed his authentication. Oh well. 
Yep. Now, how many passwords has he stolen with people thinking that it was for MacRumors?
Yep, anyone who tried to enter a un/pw into that pop-up might want to change the password for the username you entered.
Its not stealing as it wasn't deliberate.
And if anyone types in any password when the box clearly states it is for another website then I suggest they leave the Internet until they get a good phishing filter and some common sense
I agree, however on my phone it doesn't state a website name and a user potentially could enter in some information thinking it was for MacRumors. On a PC you can clearly see that it is for a different web server.