The host at this IP address (104.199.1.118) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
https://www.datapolish.com/modules/php/msg.jpg
AS number: AS15169
AS name: GOOGLE — Google LLC
Hostname: 118.1.199.104.bc.googleusercontent.com