The host at this IP address (52.173.184.147) is either operated by cybercriminals or hosting compromised websites that are being used to distribute malware:
http://shmwptravel.azurewebsites.net/wp-admin/399237150579-Ep2cgkNoh-array/open-profile/07202627664256-dFWnA0iVMPH/
AS number: AS8075
AS name: MICROSOFT-CORP-MSN-AS-BLOCK — Microsoft Corporation