The IP 22.214.171.124 is hosting a Cambodian site, which has content hosted on the IP 126.96.36.199.
With translation, the content of the site is as following
Dive into 188.8.131.52
As we continue with the research into 184.108.40.206, it becomes a little bit more clear as what the purpose of this site might be. There is a high chance that this site serves some kind of Khmer lottery.
Unsecure Khmer lottery site?
After doing some research on the hyperlinks which are available on the 220.127.116.11 site, the hyperlink “khmerlottery.biz” got our attention. Once we followed the hyperlink, we landed on the ‘khmerlottery.biz’ site, which had the following information on it.
Doing some research on the social media background, we landed on their Facebook page which has over 500000 followers.
Everything counted up, the complete environment is weird. The site works by downloading an Android APK file from 2017, and all of the connections are unsecure. I have little to no knowledge on how much this site is being used. If you have an idea, please leave a comment.