The IP 66.228.54.109 is hosting a Cambodian site, which has content hosted on the IP 172.104.165.73.
With translation, the content of the site is as following
Dive into 66.228.54.109
As we continue with the research into 66.228.54.109, it becomes a little bit more clear as what the purpose of this site might be. There is a high chance that this site serves some kind of Khmer lottery.
Unsecure Khmer lottery site?
After doing some research on the hyperlinks which are available on the 66.228.54.109 site, the hyperlink “khmerlottery.biz” got our attention. Once we followed the hyperlink, we landed on the ‘khmerlottery.biz’ site, which had the following information on it.
Doing some research on the social media background, we landed on their Facebook page which has over 500000 followers.
Conclusion
Everything counted up, the complete environment is weird. The site works by downloading an Android APK file from 2017, and all of the connections are unsecure. I have little to no knowledge on how much this site is being used. If you have an idea, please leave a comment.