Official version of paint net calling out to a random blog.

[2139812371823]

Why?  What is the purpose of this?

http://i.imgur.com/8J3Kgmc.png

Edited August 21, 2018 by 2139812371823

[Ego Eram Reputo]

More info please. What do you do to get directed to that URL?

 

[2139812371823]

1 minute ago, Ego Eram Reputo said:

More info please. What do you do to get directed to that URL?

 

I did not do anything to prompt it. I saw it on my glasswire information just now and then I made this thread, it tried to and connected to that website for some reason. Not sure why or how. Does that website have any affiliation with paint net? It did not transfer much data but the question is still to be made why it connected at all.

[Ego Eram Reputo]

Plugins can poll the a website to determine if you're using the latest version. It could be that. The Plugin Browser polls GitHub for the latest copy of the Plugin Index for example.

[2139812371823]

1 minute ago, Ego Eram Reputo said:

Plugins can poll the a website to determine if you're using the latest version. It could be that. The Plugin Browser polls GitHub for the latest copy of the Plugin Index for example.

I don't use any plugins. But, when I try updating it it connects to getpaint.net, which has a PTR that matches the website I had in the OP. I guess it's all settled then and this is harmless.

Thanks for your help.

[BoltBait]

Paint.NET contacts getpaint.net to see if there is a new version available.  It doesn't do this every time... just once a week (or 2 weeks, I forget).

 

Anyway, getpaint.net is probably on the same server as the blog you circled.  I'm really not sure why you'd get a report about that blog as it has nothing to do with paint.net.

[toe_head2001]

The explanation here is simple. getpatint.net and victoriaclarkonline.com are hosted on the same server, and thus have the same IP address.

This is common on shared servers. Typically, shared servers have a few hundred sites on them.

Apache (or nginx, or whatever http server) directs the traffic to the correct account on the server, so no data is actually going to the victoriaclarkonline.com people.