First let me say, I'm awaiting my tax refund to purchase NIS2010
But in the meantime, I was hoping to try to understand something.
I was doing a littl eexploring and looked at my internet connection logs. I noticed something a little odd.
The log would show I had been connected to www. symantecliveupdate .com But the IP address associated with it was
64.208.187.99 When Iooked up that IP address on ARIN WHOIS, it did not indicate symantec, but Global Crossing
Now my activity log showed that Live Update (which was scheduled to run at that time) had run at that time and my Virus defs were updated
But my concern is why did it not show the IP address of symantec or Norton?
So to further explore this I googled "Norton" then clicked the symantec.com link from google. When I clicked that link, it took me to the symantec home page (symantec.com/index.jsp I know this was the legit symantec page as I was able to go to the forums, look at the virus def page, and go to the products page
BUT when I looked at the internet connection logs, again it showed the IP address as 64.208.187.91 (Global Crossing)
So does symantec sometimes use Global Crossing ( as well as NTT) as servers for their websites? Or is this a malicious redirect??