We’re seeing a cluster of domains (mostly associated with phishing) targeting the retail sector. Keep an eye on any traffic traversing to/from this IP.