documentation technical

English

bm_s

akavpau_tjmaxx_vp

ak_bmsc

bm_lso

AKA_A2

PIM-SESSION-ID

bm_so

x-tjx-CBTC

bm_ss

The domain 'tjmaxx.tjx.com' uses the commercial generic top-level domain (.com); it also runs on subdomain 'tjmaxx'. Its registrable label 'tjx' stretches across 3 characters containing 0 vowels alongside three consonants. Tokenizing the label suggests two words: tj, x. Median word length comes out to 1.5 characters. No strong language cues emerged from the frequency lists.

html/23/9a/239aec80-f872-40bf-987f-eae269310c6d_fallback.html.gz

Access Denied

0b7497d03527115124326c817002b0b3153e4bb1703a2574d5037307477a6bfc

e0085e3f30ca9e07af9fa45c8f1c60e56bad41e46f294cc2321142b383063ead

b3a566d0d16a3afea03a2669d4d2370701f1739592d1784e9af3ba4fa5128422

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

(window.BOOMR_mq=window.BOOMR_mq||[]).push(["addVar",{"rua.upush":"true","rua.cpush":"true","rua.upre":"true","rua.cpre":"false","rua.uprl":"false","rua.cprl":"false","rua.cprf":"false","rua.trans":"SJ-325c0a95-e542-4359-9579-dde9ee98ba9a","rua.cook":"false","rua.ims":"false","rua.ufprl":"false","rua.cfprl":"false","rua.isuxp":"false","rua.texp":"norulematch","rua.ceh":"false","rua.ueh":"false","rua.ieh.st":"0"}]);

✅ Low Risk - https://tjmaxx.tjx.com/store/index.jsp

Requests	IP Address	Location	AS Autonomous System
9	23.36.162.85	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	23.212.212.252	Germany	AS20940
1	23.36.162.89	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
1	23.35.232.134	Germany	AS20940
1	69.192.160.133	Germany	AS20940
1	2a02:26f0:7100:59a::11a6	Germany	AS20940
1	2a02:26f0:3500:592::2682	Germany	AS20940
1	2a02:26f0:3500:586::11a6	Germany	AS20940
1	2a02:26f0:7100:594::11a6	Germany	AS20940
1	2a02:26f0:3500:598::2682	Germany	AS20940
12	11	-	-

Security Scan Report: tjmaxx.tjx.com

Summary

AI Security Verdict

Details

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History