I just installed Symantec Client Security 2 on my computer (no hassles, ok?).

I was looking through the logs and stuff getting acquainted with the software when i noticed some traffic to/from www.cyberarmy.com. I know I've never been there, and didn't even know what it was so I looked into it.

No webpages came up for me though searches indicated it was a hacking oriented website.

I pinged cyberarmy.com and got a normal IP address, but no replies. I ping www.cyberarmy.com (with the www) and it gives me the loopback address and replies (127.0.0.1).

I am aware that DNS entries can be modified to point to any IP address, but my question is ... How the heck does my computer know about www.cyberarmy.com?

After looking at the traffic some more, it all looks like legit localhost traffic, I just don't know why my computer is insisting on using www.cyberarmy.com instead of localhost or 127.0.0.1. Fresh computer, no virus, no adware, no hosts modifications.

Anyone with insights?