English

ai_session

ai_user

_gid

__cf_bm

_ga_NV8R2BF7TW

_cfuvid

ARRAffinity

ARRAffinitySameSite

.AspNetCore.Antiforgery.TTWebApp

The domain name 'law-buffalo.12twenty.com' uses the commercial generic top-level domain (.com), featuring subdomain 'law-buffalo'. Its registrable label '12twenty' stretches across 8 characters holding one vowel versus five consonants; it also includes two digits. Breaking it apart gives 2 words: 12, twenty. Average segment length settles at 4 characters. No strong language cues emerged from the frequency lists.

UserName

Password

ReturnUrl

UserTypeId

__RequestVerificationToken

html/92/c6/92c66b3c-df16-4e60-bdba-dfd9f7726d8f.html.gz

frame-ancestors 'self'; worker-src blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' *;connect-src *;

appId=cid-v1:fac1b1f4-eba3-43c9-b382-f01352caef02

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:210:0

668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404

28ce75d953678c4942df47a11707a15e3c756021cf89090e3e6aa7ad6b6971c3

4036ae9b5b63e8ec4b70f944e1b61cbbe60838508af3a32d7885f0fa6002e850

07db7b73430b944a12636a8843b6ddcd878627745d9bf46f63cfdcc1ca9dcb58

d41cd935b302a1a19b532fd2118da58c8c0e270d0ce6a9aa8a2239c920e40ed2

3694e4a84fc6ae89582a98482935caea90c2ad31575c1b9bd6256ba2680f45a8

a2caebb5dfc8e6268ad927d8fcdb3f5f8826dafbac1f2acca7b367ca3b75a884

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

9a89d4ecfb60dd07f1e921d9b983a945fdb35e6b31807f818290aa2393212576

25a321749a84414fc1e3ad928003ad1758e803938a69d7e37d8b09d6051d28b2

88d6a3c564ed86dda8fae7ae8606cc23b5387f940500f4fe0070e75f4586952e

8e1b84265e633c043720dd0921476c16bc9f75e393e855c9116ca7c3a847b5c7

bde9be4cbe799089a419225f87c2a9986043f6c7cb55853aaadab7200713f136

a6ad4ef68faac085b6cbd223609e6ec90251c97397dc428f4608f5230d752102

d810a9c30e80ec62db6bfc7f1112d26824ccd721f40c25c729a66e2f39f71bfb

b5d07838c3ea51f80b2d9a4f4f13044fd75fca959c2d86cfbbe168b98d40b12c

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

XSS in the `altField` option of the Datepicker widget

XSS in the `of` option of the `.position()` util

XSS Vulnerability on text options of jQuery UI datepicker

XSS when refreshing a checkboxradio with an HTML-like initial text label 

1061afed1a1f7ce64dea32cf0014ea5575bb985325773c9ad80686fcb9a7fed1

2d7578caf5a4bbce706e0dba77daf0be6181639007a2960628e0c3af91e1ccdd

354bffbd1be2a17d4554b422e2cf7d601ebf7c5fcf02f77143d3f27482db5ba5

53c7b7488f8e6625f123eef988f95d9268c7b673501f465712561ea83d77bd78

2d7de4afc9d8d8f15f7592166d7267d7c4628ec93d93f204a5c1accd7c77f628

38858b6bbd7aabb168697f1e3331b602e173915b0bb5f86a395283d63ef8d69d

d55a4004844b2d167131fe16306e1802255c357dad748f3e7c5758c75a96139e

20a891fc8c94969fb26259d5463d039c5ca4793fceaae81f8fd2aa3026e95e57

14415d48af1ed10aa8c66f4deff15cab211eb3a91a43977c16ff746011a0df94

2799c9ebec323062fa051c1b9c932384c82d76d387ad51b31618bc33a8d22676

c346af9afa6beeac9ce88498aa27323aeeb57728d6a876d9bc97d90eabd4788d

042569575cb9b7ef1a553252037282b753b9550ae7dd2584333cb0d7a7d7f6ec

9f5f050bbde24aeab8506d323817351eb5ce08dc858e94b5da6b0d07cf779b43

fc94f7567f0031937aa5abe5b3448bc79fd1dc2c6f8e205ca2aebdd6c07b9caa

4f89fe68f8f93caba39f63d6f924ff64b13f9e10f08a7c58fcf9a307a5802b92

5343873eff67fdf69f91107fd604cc3974d936e645f533a302bef3dba1809dd1

d06c55efe1ade9f7a946dd211a49d2cfc61c983d5627f1ca1a6a7d27422bd1bb

3NNj0GXVktLOmVKwWUDendk4Vq2qgMVDBDX+Sni48ATJl9JBj+zF+9W2HGB3pvt6qowOihTbQgTeBm9SKbdTwYAAABfeyJvcmlnaW4iOiJodHRwczovL3JlY2FwdGNoYS5uZXQ6NDQzIiwiZmVhdHVyZSI6IlRwY2QiLCJleHBpcnkiOjE3MzUzNDM5OTksImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=

A6iYDRdcg1LVww9DNZEU+JUx2g1IJxSxk4P6F+LimR0ElFa38FydBqtz/AmsKdGr11ZooRgDPCInHJfGzwtR+A4AAACXeyJvcmlnaW4iOiJodHRwczovL3d3dy5yZWNhcHRjaGEubmV0OjQ0MyIsImZlYXR1cmUiOiJEaXNhYmxlVGhpcmRQYXJ0eVN0b3JhZ2VQYXJ0aXRpb25pbmczIiwiZXhwaXJ5IjoxNzU3OTgwODAwLCJpc1N1YmRvbWFpbiI6dHJ1ZSwiaXNUaGlyZFBhcnR5Ijp0cnVlfQ==

viewport

robots

html/92/c6/92c66b3c-df16-4e60-bdba-dfd9f7726d8f_nodriver.html.gz

law-buffalo.12twenty.com

GoDaddy.com, LLC

12TWENTY.COM

Abuse

Google LLC

GOOGLE


        window.localStorage.setItem('AntiForgeryToken', 'CfDJ8Mr-flWmztJGk4SkX1uzT2rqbpTNnPq3zazD-wrrv_KD-k8_KrNBEKbmWr-n-n2cuDXSZ_euor66WwU7zLCOcKoeDCT0_rIMoTIqEzHYQgNGTadV1Hpr4heaQNj4OmYyzGGG5gu652sKEt4XHi8txoY');
    

(window.jQuery||document.write("\u003Cscript src=\u0022/bundles/jquery-1.12.4.js\u0022 src=\u0022/bundles/jquery-1.12.4.js\u0022 crossorigin=\u0022anonymous\u0022 integrity=\u0022sha512-jGsMH83oKe9asCpkOVkBnUrDDTp8wl\u002BadkB2D\u002B//JtlxO4SrLoJdhbOysIFQJloQFD\u002BC4Fl1rMsQZF76JjV0eQ==\u0022\u003E\u003C/script\u003E"));


        (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':
        new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],
        j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=
        'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);
        })(window,document,'script','dataLayer','GTM-W43ZCCZR');
    


    // bf: see jobPostingListSimple.component.  This is used to record a page view
    //     against the page details even though it's a link click on the list page
    var analyticsHashOverride;

    (function(i, s, o, g, r, a, m) {
        i['GoogleAnalyticsObject'] = r; i[r] = i[r] || function() {
            (i[r].q = i[r].q || []).push(arguments)
        }, i[r].l = 1 * new Date(); a = s.createElement(o),
        m = s.getElementsByTagName(o)[0]; a.async = 1; a.src = g; m.parentNode.insertBefore(a, m)
    })(window, document, 'script', '//www.google-analytics.com/analytics.js', 'ga');

    ga('create', 'UA-34186102-1', 'auto');
     var ga_dimensions = {
         // taken from clean url
        'queryParams': 'dimension1',
        'siteInstanceId': 'dimension2', 
        // Custom dimension name in UI: TT User Type
        'userTypeName': 'dimension3',
        'entityTypeName': 'dimension4', 
        'entityId': 'dimension5', 
        'userId': 'dimension6'
     };

    var ga_pathEntityMap = {
        // Note that these are all lowercase on purpose
        'jobpostings': 'JobPosting',
        'events': 'Event',
        'companies': 'Company',
        'companies/contacts': 'Contact',
        'appointments': 'Appointment',
        'appointments/blocks': 'AppointmentBlock',
        'resumebooks': 'ResumeBook',
        'profile/index': 'Student'
    };

        ga('set', ga_dimensions.siteInstanceId, '1001250310');

    ga(ga_setCustomTask);
    ga('require', 'eventTracker');
    ga('require', 'ecommerce');
    ga('require', 'urlChangeTracker');
    ga('set', 'forceSSL', true);

    // Track SPA which does not use HTML5 mode, and updates after #/
    var ga_lastPage;
    // https://github.com/googleanalytics/autotrack/blob/master/docs/common-options.md#fieldsobj
    function ga_sendPageView() {
        var timeout = setTimeout(function () {
            ga('send', 'pageview');
            clearTimeout(timeout);
        }, 10);
    }
    $ && $(window).on('hashchange', ga_sendPageView).trigger('hashchange') || ga_sendPageView();

    function ga_setCustomTask(tracker) {
        tracker.set('customTask', ga_customTaskWrapper);
    }

    function ga_customTaskWrapper(model) {
        try {
            ga_customTask(model);
        } catch (e) {
            console.log(e);
        }
    }

    // This is invoked on every command sent to ga.
    // Note that this is invoked for both hash change, and history change.
    function ga_customTask(model) {
        var hash = analyticsHashOverride || decodeURIComponent(location.hash);
        analyticsHashOverride = null;

        var pathname = location.pathname + hash.replace(/^#/, '/');
        var paths = pathname.split(/\/+/);
        var search = decodeURIComponent(location.search);

        { 
            if (paths.length > 2) {
                // Also support weird places which have a '-' for casing (ex: student-tracking)
                if (paths[1].toLowerCase() === paths[2].toLowerCase().replace('-', '')) {
                    paths.splice(2, 1); // Remove the duplicate
                }
            }
        }

        var entityType;
        var firstId;
        { // dimension entityTypeId
            // Support sub paths, ex: companies#/contacts
            if (paths.length > 1) {
                var entityPath = (paths[1] + '/' + paths[2]).toLowerCase();
                entityType = ga_pathEntityMap[entityPath];
            }

            if (entityType == null) {
                var rootPath = paths[1].toLowerCase();
                // Check to see if there is an override (ie: Events -> Event)
                entityType = ga_pathEntityMap[rootPath];
            }
        }

        { // dimension entityId
            firstId = paths.find(function (val) {
                return /^\d+$/.test(val);
            });
        }

        { // Replace numbers with $id
            pathname = paths
                .map(function (part) {
                    return part.replace(/^[a-f\d\-]+$/i, '$id');
                })
                .join('/');
        }

        { // Clean search
            search = search
                .split(/[\&]+/)
                //.filter(function (pair) {
                //    return !/=\d+$/.test(pair);
                //})
                .map(function (value) {
                    var values = value.split('=');
                    if (values.length < 2) {
                        return value;
                    }

                    if (values[0] === 'studentId' || values[0] === '?studentId' && entityType === 'student') {
                        firstId = values[1];
                    }

                    if (/^\d+$/.test(values[1])) {
                        return values[0] + '=$id';
                    }

                    if (/^[a-f\d\-]+$/i.test(values[1])) {
                        return values[0] + '=$value';
                    }

                    try {
                        var parsed = JSON.parse(values[1]);
                        if (parsed !== null && typeof parsed === 'object') {
                            return values[0] + '=object';
                        }
                    } catch (e) {
                    }

                    return value;
                })
                .join('&');
        }

        model.set(ga_dimensions.queryParams, search);
        // Only log dimension for when we're on an entity detail or edit
        // Otherwise, we use the built in dimension to get the list page views, etc.
        if (firstId != null && entityType != null) {
            model.set(ga_dimensions.entityTypeName, entityType);
            model.set(ga_dimensions.entityId, firstId);
        }

        model.set('page', pathname);
    }



        function setFocusToMainWrapper() {
            document.querySelector('#main-wrapper').focus();
            return false;
        }
    

window.ngon={};ngon.InterviewJobStatuses=[4,5];ngon.DefaultPageSize=25;ngon.siteSettings={"IsAdminSite":false,"SchoolName":"University at Buffalo School of Law","HasInterview":false,"BaseUrl":""};


        window.AppcuesSettings = {
            enableURLDetection: true
        };
    


    // the script need to make our dropdown menus accessible, based on https://www.w3.org/WAI/tutorials/menus/application-menus/
    $('.dropdown').on('show.bs.dropdown', function (e) {
        var $dropdown = $(this);
        $dropdown.on('keydown', function (event) {
            var keyCode = event.keyCode || event.which;
            if (keyCode === 9) {
                $dropdown.removeClass("open");
                $dropdown.unbind("keydown");
            }
        });
    })


(window.jQuery && window.jQuery.ui||document.write("\u003Cscript src=\u0022/bundles/jqueryui-1.12.1.js\u0022 src=\u0022/bundles/jqueryui-1.12.1.js\u0022 crossorigin=\u0022anonymous\u0022 integrity=\u0022sha512-uto9mlQzrs59VwILcLiRYeLKPPbS/bT71da/OEBYEwcdNUk8jYIy\u002BD176RYoop1Da\u002Bf9mvkYrmj5MCLZWEtQuA==\u0022\u003E\u003C/script\u003E"));

Requests	IP Address	Location	AS Autonomous System
41	104.18.20.128	United States	AS13335Cloudflare, Inc.
41	1	-	-

Security Scan Report: law-buffalo.12twenty.com

Summary

AI Security Verdict

Low Risk

Risk Factors

Safety Factors

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies17

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History