Think I got scammed

[sad39]

Hi,

I have been having a problem with my internet, and my ISP seemed to think it might be my router. This post isnt about that. 

I went to login to my router, and got a chat that offered help. 
Not until the Orbi technician was helping me did I realize I had navigated to Orbilogiin.com... with 2 ii's.

I hung up, and I didnt show anything on my screen, and was watching the whole time, so i dont think they got access to anything... but... how do i know?

On a similar note, anybody else get this !$$%@#!ing scam site?

[FURRYe38]

Ya shouild not be going to any other sites when using orbilogin.com with 1 (i). 

I would close all brosers and clear all browser caches. Use MalwareBytes and do a can of your PC or Laptops. 

You can access the RBRs web page at 192.168.1.1 as well if your wanting to access it. 

What Firmware is currently loaded?
What is the Mfr and model# of the ISP modem the NG router is connected too?

[sad39]

I dont know how i went to that wrong page... jittery typing hand or google autofill betrayed me... who knows... im a bonehead.

I have closed everything, and restarted my system... 

I have since cleared the cache and history in my browser, run my antivirus scans (kaspersky), and am running malwarebytes now... I even activated the Netgear armor...

I am using a RBR50 with a satellite, using firmwar v2.3.5.30

The modem is an ARRIS DG1670A.

It drops out intermittently, as much as 4-10 times per day. I cannot link the outage to any specific usage patterns... happens when only 1 wired PC is being used, happens when the whole family is watching TV and playing video games... 

[FURRYe38]

Try a different browser or load up something different and use this one browser to manage the Orbi. Don't use it for anything else. I use Opera. 

I see your modem already has a built in router. This would be a double NAT condition which isn't recommended. https://kb.netgear.com/30186/What-is-Double-NAT
https://kb.netgear.com/30187/How-to-fix-issues-with-Double-NAT
Couple of options,
1. Configure the modem for transparent bridge or modem only mode. Then use the Orbi router in router mode. You'll need to contact the ISP for help and information in regards to the modem being bridged correctly.
2. If you can't bridge the modem, disable ALL wifi radios on the modem, configure the modems DMZ/ExposedHost or IP Pass-Through for the IP address the Orbi router gets from the modem. Then you can use the Orbi router in Router mode.
3. Or disable all wifi radios on the modem and connect the Orbi router to the modem, configure AP mode on the Orbi router. https://kb.netgear.com/31218/How-do-I-configure-my-Orbi-router-to-act-as-an-access-point and https://www.youtube.com/watch?v=H7LOcJ8GdDo&app=desktop 

[sad39]

So... the ARRIS modem is supplied by my employer... I work from home... 

As directed by my employer, the cable company had the wifi capabilities (and 3 of the 4 lan ports) disabled when it was installed.... so i think point 1 is covered.

[FURRYe38]

Ok, just checking. 

[Ergates]

I have just been setting up my new router and, in the process, came across this site too - https://www.orbilogiin.com/ (didn't touch it with a barge pole obvously).

Thought I should come here and see if anyone else had encountered it and found this post from 3 years ago!

Netgear, any mods here who could pass this on to your cyber team? - I'm sure it should just be taken down (or is it some kind of approved third party support site)?

[CrimpOn]

---

@Ergates wrote:

I have just been setting up my new router and, in the process, came across this site too - https://www.orbilogiin.com/ (didn't touch it with a barge pole obvously).

---

Good move.  Certainly not Netgear.  (Notice the two "i"s in "orbilogiin".)  It's certainly not Netgear.  I have no idea what the process is to get internet name authorities to "unname" someone.  (Imagine how many variations one could come up with.  Remove the "dot" between www and orbilogin.  Change orbilogin to just orbi.)

I had been wondering how so many people came across these "non-Netgear" web sites.  Typing two i's in a row is one of my most common mistakes.

[FURRYe38]

It's a 3rd party non official site with NG Orbi setup information on Orbi systems. Sites doesn't seem nefarious and information seems ok. Might be helpful for some users. Just as most initial setup, configuration and how to FW update all on one page. Seems like some non official support for Orbi. Take it or leave it. I would probably not use chat or give any information should one be asked though. I'd keep to 

https://www.netgear.com/support/

and https://www.netgear.com/support/#

for all your offical NG support needs...

---

@Ergates wrote:

I have just been setting up my new router and, in the process, came across this site too - https://www.orbilogiin.com/ (didn't touch it with a barge pole obvously).

Thought I should come here and see if anyone else had encountered it and found this post from 3 years ago!

Netgear, any mods here who could pass this on to your cyber team? - I'm sure it should just be taken down (or is it some kind of approved third party support site)?

---

[hhquinn]

For sure this is a scam.  THey got me before I figured out that it was the wrong site.  They were trying to sell me a $400 firewall.  I allowed them access to my computer (unfortunately) and figured it out after about 5 minutes.  I ended the connection and got in touch with Netgear who fixed everything and ran Malwarebytes.  The Netgear support was amazing.  THe Orbi phishing site was a sofisticated operation as it reroutes you from orbilogin.

[FURRYe38]

Thanks for letting us know. Glad NG support go you back up and running clean. MalwareBytes is a great program to have.