topic Re: Fraud Sites Warning in Arlo Pro 3

Fraud Sites Warning

AlanBer — Tue, 21 Jun 2022 17:08:06 GMT

There are at least two fraud websites - myarlo.com and arloslogn.com that appear to exist to get your credentials. The second one looks somewhat legitimate. The first has been reported to Arlo multiple times. It appears that either they do not care or do not have a mechanism to protect their customers and themselves.

This post is also an attempt to see if Arlo is paying any attention to the community boards.

Re: Fraud Sites Warning

JamesC — Tue, 21 Jun 2022 17:39:50 GMT

AlanBer,

Thank you for providing this information. These websites should always be reported to: reportscam@arlo.com

For more information on avoiding fraudulent websites and support scams, take a look here: https://kb.arlo.com/000062119/How-can-I-avoid-Arlo-support-scams

JamesC

Re: Fraud Sites Warning

AlanBer — Tue, 21 Jun 2022 18:05:03 GMT

Thank you. Done.

Can you pass this along to first-line support? I have mentioned it several times in chats.

Re: Fraud Sites Warning

StephenB — Tue, 21 Jun 2022 19:27:36 GMT

@AlanBer wrote:

There are at least two fraud websites - myarlo.com and arloslogn.com that appear to exist to get your credentials. The second one looks somewhat legitimate.

More info on myarlo.com is here: https://www.whois.com/whois/myarlo.com It is hosted by GoDaddy and abuse can be reported here: https://www.godaddy.com/help/reporting-abuse-27154 Seems to me it clearly falls into the phishing category.

More info on arloslogn.com is here: https://www.whois.com/whois/arloslogn.com It is hosted by bigrock (India), and abuse can be reported at https://www.bigrock.com/contact-us/ I'm not seeing any phishing - the only login links I find go to the real my.arlo.com. Third party support is legal, so it might be harder to find a way to shut this down.

Re: Fraud Sites Warning

AlanBer — Fri, 24 Jun 2022 17:27:11 GMT

BigRock reported that they shut down the obvious fraud site.

Arlo said their lawyers have been in touch with the owner of myarlo.com. Third or fourth had, the owner uses the site for sharing messages with friends and family, not for fraud. I suggested that they ask the owner to add a disclaimer that this site is not an Arlo site; my.arlo.com should be used. The owner could even hyperlink to it, though that might create a risk of liability if someone hacks myarlo.com.