Seen in bedep post infection traff.
Most often redirect to Magnitude
https://www.virustotal.com/ip-address/31.3.242.100/information/
https://www.virustotal.com/ip-address/31.3.242.102/information/
https://www.virustotal.com/ip-address/31.3.242.104/information/
https://www.virustotal.com/ip-address/31.3.242.106/information/
https://www.virustotal.com/ip-address/188.227.165.19/information/
https://www.virustotal.com/ip-address/188.227.165.20/information/
https://www.virustotal.com/ip-address/188.227.165.21/information/