>ParkedDomain

https://web.archive.org/web/20180615000000*/ip.network

The domain had a former life (pre-2024) where it bounced to a domain broker sales page, which may well be the trigger.

Aside: I worked at Sophos from '98 to '06, some of the best & worst years of my life.