education

social media

English

JSESSIONID

Within the sponsored educational top-level domain (.edu), 'dp.ucsf.edu' is registered; it also runs on subdomain 'dp'. The second-level label 'ucsf' is 4 characters long split between 1 vowel and three consonants. Word splitting yields 2 words: uc, sf. Average segment length settles at two characters. No strong language cues emerged from the frequency lists.

j_username

j_password

_shib_idp_revokeConsent

_eventId_proceed

html/38/89/38898740-8e8c-4a16-9f2f-21b61dcf926c.html.gz

1cd4a815b48e4003a4f267c82a0acc997c91d84c3d54d7d69513991128a570d0

description

author

UCSF, Identity & Access Management, IAM, IT

keywords

viewport

html/38/89/38898740-8e8c-4a16-9f2f-21b61dcf926c_nodriver.html.gz

University of California, San Francisco - MyAccess

UCSF.EDU

UCSF ITS Information Security Services

Tom Chen

University of California San Francisco

Steve Young

Charles Koehler

UCSF-2NET


        // from https://cdn.jsdelivr.net/npm/js-cookie@2/src/js.cookie.min.js
/**
 * Minified by jsDelivr using Terser v3.14.1.
 * Original file: /npm/js-cookie@2.2.1/src/js.cookie.js
 * 
 * Do NOT use SRI with dynamically generated files! More information: https://www.jsdelivr.com/using-sri-with-dynamic-files
 */
!function(e){var n;if("function"==typeof define&&define.amd&&(define(e),n=!0),"object"==typeof exports&&(module.exports=e(),n=!0),!n){var t=window.Cookies,o=window.Cookies=e();o.noConflict=function(){return window.Cookies=t,o}}}(function(){function e(){for(var e=0,n={};e<arguments.length;e++){var t=arguments[e];for(var o in t)n[o]=t[o]}return n}function n(e){return e.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}return function t(o){function r(){}function i(n,t,i){if("undefined"!=typeof document){"number"==typeof(i=e({path:"/"},r.defaults,i)).expires&&(i.expires=new Date(1*new Date+864e5*i.expires)),i.expires=i.expires?i.expires.toUTCString():"";try{var c=JSON.stringify(t);/^[\{\[]/.test(c)&&(t=c)}catch(e){}t=o.write?o.write(t,n):encodeURIComponent(String(t)).replace(/%(23|24|26|2B|3A|3C|3E|3D|2F|3F|40|5B|5D|5E|60|7B|7D|7C)/g,decodeURIComponent),n=encodeURIComponent(String(n)).replace(/%(23|24|26|2B|5E|60|7C)/g,decodeURIComponent).replace(/[\(\)]/g,escape);var f="";for(var u in i)i[u]&&(f+="; "+u,!0!==i[u]&&(f+="="+i[u].split(";")[0]));return document.cookie=n+"="+t+f}}function c(e,t){if("undefined"!=typeof document){for(var r={},i=document.cookie?document.cookie.split("; "):[],c=0;c<i.length;c++){var f=i[c].split("="),u=f.slice(1).join("=");t||'"'!==u.charAt(0)||(u=u.slice(1,-1));try{var a=n(f[0]);if(u=(o.read||o)(u,a)||n(u),t)try{u=JSON.parse(u)}catch(e){}if(r[a]=u,e===a)break}catch(e){}}return e?r[e]:r}}return r.set=i,r.get=function(e){return c(e,!1)},r.getJSON=function(e){return c(e,!0)},r.remove=function(n,t){i(n,"",e(t,{expires:-1}))},r.defaults={},r.withConverter=t,r}(function(){})});
//# sourceMappingURL=/sm/b0ce608ffc029736e9ac80a8dd6a7db2da8e1d45d2dcfc92043deb2214aa30d8.map        
        // Using a textarea to decode HTML entities
        function decodeEntities(encodedString) {
            var textArea = document.createElement('textarea');
            textArea.innerHTML = encodedString;
            return textArea.value;
        }

        var cookieOptions = {expires: 36500, path: '/idp'};

    
        window.onload = function() {
            console.log('Window.onload starting');
        
            // Inject banner into the page
            var bannerUrl = 'https://myaccess.ucsf.edu/banner';
            fetch(bannerUrl)
                .then(
                    function(response) {
                        if (response.status !== 200) {
                            console.error('Unexpect response while fetching banner', response.status);
                        } else {
                            response.text().then(
                                function(data) {
                                    document.getElementById("banner").innerHTML = data;
                                    console.log('Banner info injected');
                                }
                            )
                        }
                    }
                ) 
                .catch(
                    function(error) {
                        console.error('Error while fetching banner', error);
                    }
                ) 
        
            // Inject warning into the page
            var warningUrl = 'https://myaccess.ucsf.edu/warning';
            fetch(warningUrl)
                .then(
                    function(response) {
                        if (response.status !== 200) {
                            console.error('Unexpect response while fetching warning', response.status);
                        } else {
                            response.text().then(
                                function(data) {
                                    var warning = document.getElementById("warning")
                                    console.log('Warning element found');
                                    if (warning) {
                                        document.getElementById("warning").innerHTML = data;
                                        console.log('Warning info injected');
                                    }
                                }
                            )
                        }
                    }
                ) 
                .catch(
                    function(error) {
                        console.error('Error while fetching warning', error);
                    }
                ) 
    
            // Username "Remember me" cookie
            var adUsernameCookie = Cookies.get('ucsf_it_idp_ad_username');
            if (adUsernameCookie) {
                console.log('adUsernameCookie in use: "'+adUsernameCookie+'"');
                var rememberMe = document.getElementById("remember-me");
                if (rememberMe) {
                    rememberMe.checked = true;
                    console.log('Remember me set to checked');
                }
                var adUsername = document.getElementById("ad-username");
                if (adUsername) {
                    adUsername.value = adUsernameCookie;
                    console.log('adUsername set to adUsernameCookie');
                }
            } else {
                console.log('Cookie ucsf_it_idp_ad_username not in use. Clearing just in case.');
                Cookies.remove('ucsf_it_idp_ad_username');
            }
    
    
            // The IDP has issue sending back the username when it contains odd characters,
            // such as the separator for domain\username.  So the practice is to HTML-encode
            // them. However, we need to decode these (from &#xx special char encodings)
            // so we can manipulate them properly
            var idpUsername = '';
            if (idpUsername) {
                console.log('Pre-decode idpUsername = "'+idpUsername+'"');
                idpUsername = decodeEntities(idpUsername);
                console.log('Post-decode idpUsername = "'+idpUsername+'"');
                document.getElementById("ad-username").value = idpUsername;
                console.log('ad-username set to  "'+idpUsername+'"');
            }
    
            // Password eye
            var passwordIcon = document.getElementById("password-hide-handle");
            if (passwordIcon) passwordIcon.addEventListener("click", function() {
                console.log('Password eye clicked');
                var passwordField = document.getElementById("password");
                console.log('Password field found');

                passwordIcon.classList.toggle('glyphicon-eye-close');
                passwordIcon.classList.toggle('glyphicon-eye-open');
                console.log('Password eye toggled');

                if (passwordIcon.classList.contains('glyphicon-eye-open')) {
                    passwordField.type = 'text';
                } else {
                    passwordField.type = 'password';
                }
                console.log('Password field type set to  "'+passwordField.type+'"');
            });
        
            console.log('Window.onload complete');
        }; // window.onload


        // Pre-empt submission of login for to process AD domain, username and cookies
        function loginFormSubmit() {
            var adUsername = document.getElementById("ad-username");
            console.log('ad-username is "'+adUsername.value+'"');

            // Poplate username "remember me" cookie if requested
            if (document.getElementById("remember-me").checked === true) {
                Cookies.set('ucsf_it_idp_ad_username', adUsername.value, cookieOptions);
                console.log('Setting cookie: ucsf_it_idp_ad_username to "'+adUsername.value+'"');
            } else {
                Cookies.remove('ucsf_it_idp_ad_username', cookieOptions);
                console.log('Clearing cookie:  ucsf_it_idp_ad_username');
            }

            // Put the final username value into the real username field. Note that
            // the AD domain will be empty for SFID, email and EPPN users
            var username = document.getElementById("username");
            username.value = adUsername.value;
            console.log('applying adUsername.value to username.value');

            console.log('username = "'+username.value+'"');
            document.getElementById('form_submit').text = 'Logging in, please wait...';
        };


    

Requests	IP Address	Location	AS Autonomous System
6	64.54.194.22	San Francisco, California, United States	AS5653UCSF
5	64.54.132.120	San Francisco, California, United States	AS5653UCSF
5	104.18.11.207	United States	Unknown
16	3	-	-

Security Scan Report: dp.ucsf.edu

Summary

AI Security Verdict

Safe Website

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies4

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History