Where does OS X get defaults from in Guest User Web access Parental Controls?
Using online tools it appears that as of this date/time that is a hard coded IP address from the app called Telegram or Telegram Messenger.   

Why it's hard coded into the app as IP address doesn't make sense, but it seems to be where it is coming from.