Arlo is connecting to registration.ngxcld.com and advisor.ngxcld.com ?

Siliconvalley — Mon, 26 Sep 2016 23:08:40 GMT

Is there a particular reason why my Arlo is connecting to registration.ngxcld.com and advisor.ngxcld.com domains on startup? These are listed as unknown category domains by my firewall and they are blocked by default. Are these related to Arlo or did they recently change? Never saw them in my logs before. The IPs (54.171.42.232 and 52.24.43.216) look like they belong to AWS.

Security Dude checkin' things out. Thanks in advance.

Re: Arlo is connecting to registration.ngxcld.com and advisor.ngxcld.com ?

Siliconvalley — Fri, 05 Feb 2016 19:05:21 GMT

Netgear... Still no answer on this. Please give more details and confirm if this is a required communications channel.

The domain comes up with no reputation and IP appears to be Amazon in Ireland.

I want to confirm this is Netgear authorized and isn't malware from the "Internet of Things" compromise since most vendors these days forget to actually secure their devices.

Thanks.

Whois Server Version 2.0

Domain names in the .com and .net domains can now be registered
with many different competing registrars. Go t
for detailed information.

Domain Name: NGXCLD.COM
Registrar: NETWORK SOLUTIONS, LLC.
Sponsoring Registrar IANA ID: 2
Whois Server: whois.networksolutions.com

Name Server: NS-123.AWSDNS-15.COM
Name Server: NS-1309.AWSDNS-35.ORG
Name Server: NS-1790.AWSDNS-31.CO.UK
Name Server: NS-980.AWSDNS-58.NET
Status: clientTransferProhibited
Updated Date: 01-mar-2014
Creation Date: 28-feb-2014
Expiration Date: 28-feb-2019

>>> Last update of whois database: Wed, 24 Jun 2015 06:17:02 GMT <<<

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar. Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability. VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

For more information on Whois status codes, please visit
https://www.icann.org/resources/pages/epp-status-codes-2014-06-16-en.

52.17.193.45 Whois

Registrar

Administered by ARIN

Whois Server

whois.arin.net

Status

LEGACY

Contact Email

Registrant

Amazon Technologies Inc.
410 Terry Ave N.
Seattle, WA 98109
UNITED STATES

Re: Arlo is connecting to registration.ngxcld.com and advisor.ngxcld.com ?

Schorschi — Fri, 05 Feb 2016 19:12:14 GMT

Ok, I'm not from Netgear, but the "Arlo cloud" is actually the Amazon cloud, so no need to worry. I.e. Netgear is making use of Amazon's cloud services and paying them, so that the Arlo videos can be stored and downloaded from there.

topic Re: Arlo is connecting to registration.ngxcld.com and advisor.ngxcld.com ? in Arlo

Arlo is connecting to registration.ngxcld.com and advisor.ngxcld.com ?

Re: Arlo is connecting to registration.ngxcld.com and advisor.ngxcld.com ?

Re: Arlo is connecting to registration.ngxcld.com and advisor.ngxcld.com ?