CompTIA Security+ (SY0-701) SY0-701 — Question 71

A security analyst reviews domain activity logs and notices the following: Which of the following is the best explanation for what the security analyst has discovered?