The host at this IP address (35.213.140.157) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
https://atlasconcreteworks.com/dgcivv7mk.zip
https://villasoledadbeachresort.com/a8k45o.rar
AS number: AS15169
AS name: GOOGLE
Hostname: 157.140.213.35.bc.googleusercontent.com