Identify why I get a connection to ransomware server
You receive this message when switching to only this network because it is likely your IT dept have a monitoring tool set upon it, which is using an API with this IP blacklisted for ransomware activity

The problem is this IP is shared across thousands of URLs and only a select few may be associated with ransomware