The host at this IP address (23.96.103.159) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
https://help.hizuko.com/groovy-count/FILE/pkiadn813d-00034986/
https://help.hizuko.com/groovy-count/47HLm/INC/238785/9ymyqfn7z0y-165424/
https://help.hizuko.com/groovy-count/oct/0xmvft0c9nff/
AS number: AS8075
AS name: MICROSOFT-CORP-MSN-AS-BLOCK