HELP win1234(dot)ddns(dot)net

[DVDR_Dog]

Malwarebytes reports explorer is trying to connect to the above address.
Doesn't tell me where the origin may be. The IP is 167.246.187.145, port 434 (it's from a dynamic source: LION Resources). I did a complete registry sweep and that URL doesn't exit in the registry.
I have a hardened gateway, Omada E-605, pointing to 1.1.1.1 for DNS. I can hardware filter this URL, but where and why is this happening?

 

[DVDR_Dog]

For those of you who are curious, I have attached the results from a current MWB scan.
The entries are:
HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\MPCMDRUN.EXE|DEBUGGER which is related no doubt to the Windows Defender disable crack
and
1 file: C:\PROGRAM FILES\MICROSOFT OFFICE\ACTIVATOR.EXE which must be a leftover from an attempt to install 2024 Office Pro. I forgot I purchased a 3 user gray market license, so no crack needed. I always buy a gray market for my sweetheart. I don't need to hear some BS about her have problems with office.