Spanish

_ga_R800EXT5K9

_cfuvid

has_js

cf_clearance

_gid

The domain 'www.unam.mx' uses the Mexican country-code top-level domain (.mx) with subdomain 'www'. Its registrable label 'unam' stretches across 4 characters split between 2 vowels and two consonants. Tokenizing the label suggests one word: unam. No strong language cues emerged from the frequency lists.

require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:225:0

object-src 'none';base-uri 'self';script-src 'nonce-hz1TGpgQqTh2DTp6jXjQCg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:207:0

script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsggc:139:0

a34366380e85ace41a9882973f5f3520dd907a3a45ef63d5046b1b52587c2de6

756841383b307575e4d4ce59e67caa35f1a58e6ab0c54c002bd8ba0f46120cdb

4a96c9006d41bb582e936d1f880fb3d579dc247178e0195da9cb3b8808755cb3

61c6caebd23921741fb5ffe6603f16634fca9840c2bf56ac8201e9264d6daccf

e1ac4849b9d4a498b68f8aca01e6ed99a11d94b35a2cec533b3916b8fb722fd6

16089a42741acc5fd00ab17da92be9458e8f0029fd645f159e582a7ea0f52ec1

f35e666f92df8704a0728e47a71caa54980456f181d19302f8df348e4e56302f

56e7323394268294d7194053adde96e78854cef70ee0b390b7883c65ffb54af6

f1a61277e3f902f50ab42015d8b07218db9b7601bb0967e54a52bfdcb4fa7e81

f11c4fa3c3efa9519001af37fe61602c65f511196cd558682b02b87c2aeea91f

35cde39ea6dbd3d3f74a19bdb9a134e53fabfb8e8e0fbc30ec34990a5d31c0be

10a9c17992ffe359864ba5dd17ee737c4c67081f051cac344be046e9dfe693c3

Versions of jquery prior to 1.9.0 are vulnerable to Cross-Site Scripting. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed. This allows attackers to execute arbitrary JavaScript in a victim's browser.


## Recommendation

Upgrade to version 1.9.0 or later.

parseHTML() executes scripts in event handlers

jQuery 1.x and 2.x are End-of-Life and no longer receiving security updates

jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution

passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code.

Regex in its jQuery.htmlPrefilter sometimes may introduce XSS

XSS in the `altField` option of the Datepicker widget

XSS in the `of` option of the `.position()` util

XSS Vulnerability on text options of jQuery UI datepicker

XSS when refreshing a checkboxradio with an HTML-like initial text label 

b9fa73e84a546b84725a62d64b6868dd13dba6bf9a90dbb1c71e4dee05047396

5a693e03acfaf25017568c34b0bba0aef4d5278f58cf50258ead24ebcadec9ef

10aa51a25d97a15bba893aaf08042c04727f7be9ddf6a7d3c1c4a532afd14979

3c6fa90483e11cbbcda4a6ed4a7b9441b74dacc82c7df890779ff8202501113b

b2d6917d962a51b0305cf51b8e58f70f2364c0f82034671e76867da6cae37e2a

835e8622a53ce60cfa6dcfc7c3c63d9286d96e6bacc8f4ac027790618ce694e6

c51971156d0cf90fbc68af9560759939862c0ed65eecedb2970038c9d38dd43c

XKRWyyGt95v_zmlA-EgJwa-t3Cpq1ukroEUR-FySwjI

google-site-verification

Precipitación  Es agua en cualquier estado físico, líquido (lluvia) o sólido (nieve y granizo), que cae de la atmósfera y alcanza el terreno. Lluvia Gotas de agua o cristales de hielo que caen de una nube por efecto de la gravedad. Inundaciones pluviales Suceden cuando el agua de lluvia satura la capacidad del terreno para drenarla, acumulándose por horas o días sobre éste.

description

msapplication-TileImage

msapplication-TileColor

MobileOptimized

HandheldFriendly

viewport

unam.mx

Abuse

Admin

Cloudflare-NOC

Cloudflare, Inc.

CLOUDFLARENET

window.jQuery || document.write("<script src='/sites/all/modules/jquery_update/replace/jquery/1.8/jquery.min.js'>\x3C/script>")

window.jQuery.ui || document.write("<script src='/sites/all/modules/jquery_update/replace/ui/ui/minified/jquery-ui.min.js'>\x3C/script>")


        jQuery(document).ready(function () {
          if ( jQuery(".webform-client-form").length ) {
            jQuery(".webform-client-form input:text, .webform-client-form textarea").first().focus();
          }
        });

jQuery.extend(Drupal.settings, {"basePath":"\/","pathPrefix":"","ajaxPageState":{"theme":"unam","theme_token":"-0AY35jJTvyJEwXLewBtnK5X5jFRASk43o1kEKKnATo","js":{"sites\/all\/themes\/unam\/js\/scripts_generales.js":1,"sites\/all\/libraries\/tour\/js\/bootstrap-tour-standalone.min.js":1,"sites\/all\/libraries\/tour\/js\/tour.js":1,"sites\/all\/themes\/unam\/js\/menu_jquery.js":1,"\/\/ajax.googleapis.com\/ajax\/libs\/jquery\/1.8.3\/jquery.min.js":1,"0":1,"misc\/jquery-extend-3.4.0.js":1,"misc\/jquery.once.js":1,"misc\/drupal.js":1,"\/\/ajax.googleapis.com\/ajax\/libs\/jqueryui\/1.10.2\/jquery-ui.min.js":1,"1":1,"sites\/all\/modules\/jquery_ui_filter\/jquery_ui_filter.js":1,"public:\/\/languages\/es_hzknvkiuIIsAmK55yuZ7cotCFcunEL8I1-xqN7Tcj90.js":1,"sites\/all\/libraries\/colorbox\/jquery.colorbox-min.js":1,"sites\/all\/modules\/colorbox\/js\/colorbox.js":1,"sites\/all\/modules\/colorbox\/styles\/default\/colorbox_style.js":1,"sites\/all\/modules\/colorbox\/js\/colorbox_load.js":1,"sites\/all\/modules\/colorbox\/js\/colorbox_inline.js":1,"sites\/all\/modules\/jquery_ui_filter\/accordion\/jquery_ui_filter_accordion.js":1,"sites\/all\/modules\/responsive_menus\/styles\/meanMenu\/jquery.meanmenu.min.js":1,"sites\/all\/modules\/responsive_menus\/styles\/meanMenu\/responsive_menus_mean_menu.js":1,"sites\/all\/modules\/google_analytics\/googleanalytics.js":1,"2":1,"3":1,"sites\/all\/modules\/bloque_gcse\/bloque_gcse.js":1,"sites\/all\/libraries\/superfish\/jquery.hoverIntent.minified.js":1,"sites\/all\/libraries\/superfish\/supposition.js":1,"sites\/all\/libraries\/superfish\/superfish.js":1,"sites\/all\/modules\/superfish\/superfish.js":1},"css":{"modules\/system\/system.base.css":1,"modules\/system\/system.menus.css":1,"modules\/system\/system.messages.css":1,"modules\/system\/system.theme.css":1,"misc\/ui\/jquery.ui.core.css":1,"misc\/ui\/jquery.ui.theme.css":1,"misc\/ui\/jquery.ui.accordion.css":1,"modules\/comment\/comment.css":1,"sites\/all\/modules\/date\/date_api\/date.css":1,"sites\/all\/modules\/date\/date_popup\/themes\/datepicker.1.7.css":1,"modules\/field\/theme\/field.css":1,"modules\/node\/node.css":1,"modules\/search\/search.css":1,"modules\/user\/user.css":1,"sites\/all\/modules\/views\/css\/views.css":1,"sites\/all\/modules\/ckeditor\/css\/ckeditor.css":1,"sites\/all\/modules\/colorbox\/styles\/default\/colorbox_style.css":1,"sites\/all\/modules\/ctools\/css\/ctools.css":1,"sites\/all\/modules\/panels\/css\/panels.css":1,"sites\/all\/modules\/responsive_menus\/styles\/meanMenu\/meanmenu.min.css":1,"sites\/all\/libraries\/tour\/css\/bootstrap-tour-standalone.min.css":1,"sites\/all\/libraries\/superfish\/css\/superfish.css":1,"sites\/all\/libraries\/superfish\/style\/simple\/simple.css":1,"sites\/all\/themes\/unam\/system.menus.css":1,"sites\/all\/themes\/unam\/system.messages.css":1,"sites\/all\/themes\/unam\/system.theme.css":1,"sites\/all\/themes\/unam\/css\/styles.css":1,"sites\/all\/themes\/unam\/css\/unam-styles.css":1}},"colorbox":{"transition":"elastic","speed":"350","opacity":"0.85","slideshow":false,"slideshowAuto":true,"slideshowSpeed":"2500","slideshowStart":"start slideshow","slideshowStop":"stop slideshow","current":"{current} de {total}","previous":"\u00ab Anterior","next":"Siguiente \u00bb","close":"Cerrar","overlayClose":true,"returnFocus":true,"maxWidth":"50%","maxHeight":"70%","initialWidth":"90%","initialHeight":"95%","fixed":true,"scrolling":true,"mobiledetect":false,"mobiledevicewidth":"480px"},"jQueryUiFilter":{"disabled":0,"accordionHeaderTag":"h3","accordionOptions":{"active":0,"animated":"slide","autoHeight":"false","clearStyle":"true","collapsible":"false","event":"click","scrollTo":0,"history":"false"}},"responsive_menus":[{"selectors":"#main-menu, #block-superfish-1","container":"body","trigger_txt":"\u003Cspan \/\u003E\u003Cspan \/\u003E\u003Cspan \/\u003E","close_txt":"X","close_size":"18px","position":"right","media_size":"800","show_children":"1","expand_children":"1","expand_txt":"+","contract_txt":"-","remove_attrs":"1","responsive_menus_style":"mean_menu"}],"googleanalytics":{"trackOutbound":1,"trackMailto":1,"trackDownload":1,"trackDownloadExtensions":"7z|aac|arc|arj|asf|asx|avi|bin|csv|doc(x|m)?|dot(x|m)?|exe|flv|gif|gz|gzip|hqx|jar|jpe?g|js|mp(2|3|4|e?g)|mov(ie)?|msi|msp|pdf|phps|png|ppt(x|m)?|pot(x|m)?|pps(x|m)?|ppam|sld(x|m)?|thmx|qtm?|ra(m|r)?|sea|sit|tar|tgz|torrent|txt|wav|wma|wmv|wpd|xls(x|m|b)?|xlt(x|m)|xlam|xml|z|zip","trackColorbox":1},"superfish":{"1":{"id":"1","sf":{"animation":{"opacity":"show","height":"show"},"speed":"\u0027fast\u0027","autoArrows":true,"dropShadows":true,"disableHI":false},"plugins":{"supposition":true,"bgiframe":false}}}});

Requests	IP Address	Location	AS Autonomous System
11	104.17.118.46Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	104.16.79.73Cloudflare · WAF	United States	AS13335Cloudflare, Inc.
11	142.251.110.95Google · CDN	United States	AS15169Google LLC
33	3	-	-

Security Scan Report: www.unam.mx

Summary

AI Security Verdict

Safe Website

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies11

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History