Using Forcefield standalone 1.5.53.49 with ZAP 9.3.0.37

Last night I noticed some internet activity and used the "netstat command" to check and saw what appeared to be Forcefield connected to an unknown IP address ending in "ptr.us.xo.net". The whole address was something like IP numbers then ending with ptr.us.xo.net, like ###.###.###.##.ptr.us.xo.net.

At first I wondered if Forcefield might be updating its database, but then I wondered why it would use that weird address rather than zonelabs.com. If I do a manual check to see if Forcefield is up to date, it connects to update.zonelabs.com for just a second and then says "you have the latest version."

Any thoughts?