The host at this IP address (52.168.18.255) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
http://ret.space/payload
AS number: AS8075
AS name: MICROSOFT-CORP-MSN-AS-BLOCK — Microsoft Corporation