The IP 18.104.22.168 is hosting a Cambodian site, which has content hosted on the IP 22.214.171.124.
With translation, the content of the site is as following
Dive into 126.96.36.199
As we continue with the research into 188.8.131.52, it becomes a little bit more clear as what the purpose of this site might be. There is a high chance that this site serves some kind of Khmer lottery.
Unsecure Khmer lottery site?
After doing some research on the hyperlinks which are available on the 184.108.40.206 site, the hyperlink “khmerlottery.biz” got our attention. Once we followed the hyperlink, we landed on the ‘khmerlottery.biz’ site, which had the following information on it.
Doing some research on the social media background, we landed on their Facebook page which has over 500000 followers.
Everything counted up, the complete environment is weird. The site works by downloading an Android APK file from 2017, and all of the connections are unsecure. I have little to no knowledge on how much this site is being used. If you have an idea, please leave a comment.