Norton website traffic from 12.1 clients?

We have started noticing alot of web traffic going to https://us.norton.com for all users who have a 12.X version of endpoint.  I have almost 1000 pcs still running 11.x and we are not seeing any traffic to the site.

Does anyone one know what feature might be trying to hit this website?  It looks like a sales page for notron products but i dont know why only machines with 12.x would be geberating this traffic.  

Is it the insight lookup feature?