kohls

BugcrowdView on Bugcrowd
RawAI Enhanced
4
In Scope
29
Out of Scope
In-Scope Assets (4)
AssetCategoryBountyQuick Links
Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below)OTHERYes-
https://www.kohls.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://www.kohls.com/feature/app.jspANDROIDYes-
https://www.kohls.com/feature/app.jspIOSYes-
Out-of-Scope Assets (29)
AssetCategoryBounty
*kohls.com/checkout/prequal_inquiry.jsp#/preQualEligibleURLYes
*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLYes
*kohls.com/kohlscredit/prequalURLYes
*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/preQualEligibleURLYes
*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLYes
*kohlsecommerce.com/kohlscredit/prequalOTHERYes
*qa*.kohls.comURLYes
any domain with archaius.json endoint is out of scopeURLYes
apply.kohls.comURLYes
author-mykohls.kohls.comURLYes
author-qa65-mykohls.kohls.comURLYes
author-stage65-mykohls.kohls.comURLYes
connection.kohls.comURLYes
corporate.kohls.comURLYes
developer.kohls.comURLYes
http://www.b2b.kohls.comURLYes
kconnect.kohls.comURLYes
kohlsmerch.kohls.com/URLYes
lclive.kohls.comURLYes
link-preprod.kohls.comURLYes
mykohls-origin.kohls.comURLYes
mykohls.kohls.comURLYes
origin-stage65-corporate.kohls.comURLYes
origin-stage65-mykohls.kohls.comURLYes
productchampions.kohls.comURLYes
stage65-corporate.kohls.comURLYes
stage65-mykohls.kohls.comURLYes
vp-*.kohls.comURLYes
wfh*.kohls.comURLYes
Scope Changes (166)
Mar 5, 2026
ChangeAssetCategoryScopeTime
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope22:32
Addeddeveloper.kohls.comURLOut of Scope22:32
Addedlink-preprod.kohls.comURLOut of Scope22:32
Added*qa*.kohls.comWILDCARDOut of Scope22:32
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope22:32
Addedstage65-mykohls.kohls.comURLOut of Scope22:32
Addedorigin-stage65-corporate.kohls.comURLOut of Scope22:32
Addedhttp://www.b2b.kohls.comURLOut of Scope22:32
Addedmykohls.kohls.comURLOut of Scope22:32
Addedstage65-corporate.kohls.comURLOut of Scope22:32
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope22:32
Addedhttps://www.kohls.comURLIn Scope22:32
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERIn Scope22:32
Addedkconnect.kohls.comURLOut of Scope22:32
Addedvp-*.kohls.comWILDCARDOut of Scope22:32
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope22:32
Addedmykohls-origin.kohls.comURLOut of Scope22:32
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERIn Scope22:32
Addedauthor-mykohls.kohls.comURLOut of Scope22:32
Addedcorporate.kohls.comURLOut of Scope22:32
Added*kohls.com/kohlscredit/prequalWILDCARDOut of Scope22:32
Addedconnection.kohls.comURLOut of Scope22:32
Addedwfh*.kohls.comWILDCARDOut of Scope22:32
Addedlclive.kohls.comURLOut of Scope22:32
Addedproductchampions.kohls.comURLOut of Scope22:32
Addedapply.kohls.comURLOut of Scope22:32
Addedkohlsmerch.kohls.comURLOut of Scope22:32
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope22:32
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope22:32
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope22:32
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope22:32
Added*kohlsecommerce.com/kohlscredit/prequalWILDCARDOut of Scope22:32
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope22:32
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope22:32
Addedhttp://www.b2b.kohls.comURLOut of Scope22:32
Addedkohlsmerch.kohls.comURLOut of Scope22:32
Addedconnection.kohls.comURLOut of Scope22:32
Addedkconnect.kohls.comURLOut of Scope22:32
Addedwfh*.kohls.comURLOut of Scope22:32
Added*qa*.kohls.comURLOut of Scope22:32
Addedvp-*.kohls.comURLOut of Scope22:32
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope22:32
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope22:32
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope22:32
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope22:32
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope22:32
Addedmykohls.kohls.comURLOut of Scope22:32
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope22:32
Addedstage65-mykohls.kohls.comURLOut of Scope22:32
Addedstage65-corporate.kohls.comURLOut of Scope22:32
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope22:32
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope22:32
Addedorigin-stage65-corporate.kohls.comURLOut of Scope22:32
Addedmykohls-origin.kohls.comURLOut of Scope22:32
Addedauthor-mykohls.kohls.comURLOut of Scope22:32
Addedlclive.kohls.comURLOut of Scope22:32
Addeddeveloper.kohls.comURLOut of Scope22:32
Addedlink-preprod.kohls.comURLOut of Scope22:32
Addedproductchampions.kohls.comURLOut of Scope22:32
Addedcorporate.kohls.comURLOut of Scope22:32
Added*kohlsecommerce.com/kohlscredit/prequalOTHEROut of Scope22:32
Added*kohls.com/kohlscredit/prequalURLOut of Scope22:32
Addedapply.kohls.comURLOut of Scope22:32
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope22:32
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope22:32
Addedhttps://www.kohls.comURLIn Scope22:32
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedcorporate.kohls.comURLOut of Scope19:14
Addeddeveloper.kohls.comURLOut of Scope19:14
Added*kohlsecommerce.com/kohlscredit/prequalWILDCARDOut of Scope19:14
Addedlink-preprod.kohls.comURLOut of Scope19:14
Addedorigin-stage65-corporate.kohls.comURLOut of Scope19:14
Addedstage65-corporate.kohls.comURLOut of Scope19:14
Addedmykohls-origin.kohls.comURLOut of Scope19:14
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope19:14
Addedwfh*.kohls.comWILDCARDOut of Scope19:14
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHEROut of Scope19:14
Added*kohls.com/kohlscredit/prequalWILDCARDOut of Scope19:14
Addedauthor-mykohls.kohls.comURLOut of Scope19:14
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope19:14
Addedstage65-mykohls.kohls.comURLOut of Scope19:14
Added*qa*.kohls.comWILDCARDOut of Scope19:14
Addedkconnect.kohls.comURLOut of Scope19:14
Addedkohlsmerch.kohls.comURLOut of Scope19:14
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope19:14
Addedmykohls.kohls.comURLOut of Scope19:14
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope19:14
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope19:14
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope19:14
Addedproductchampions.kohls.comURLOut of Scope19:14
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope19:14
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope19:14
Addedconnection.kohls.comURLOut of Scope19:14
Addedapply.kohls.comURLOut of Scope19:14
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope19:14
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope19:14
Addedvp-*.kohls.comWILDCARDOut of Scope19:14
Addedhttps://www.kohls.comURLIn Scope19:14
Addedlclive.kohls.comURLOut of Scope19:14
Addedhttp://www.b2b.kohls.comURLOut of Scope19:14
Program Removed———17:22
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERIn Scope17:13
Added*qa*.kohls.comWILDCARDOut of Scope17:13
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope17:13
Addedapply.kohls.comURLOut of Scope17:13
Addedvp-*.kohls.comWILDCARDOut of Scope17:13
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope17:13
Added*kohlsecommerce.com/kohlscredit/prequalWILDCARDOut of Scope17:13
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHEROut of Scope17:13
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope17:13
Addedconnection.kohls.comURLOut of Scope17:13
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope17:13
Addedlclive.kohls.comURLOut of Scope17:13
Added*kohls.com/kohlscredit/prequalWILDCARDOut of Scope17:13
Addedauthor-mykohls.kohls.comURLOut of Scope17:13
Addedstage65-mykohls.kohls.comURLOut of Scope17:13
Addedkconnect.kohls.comURLOut of Scope17:13
Addedwfh*.kohls.comWILDCARDOut of Scope17:13
Addedmykohls.kohls.comURLOut of Scope17:13
Addedorigin-stage65-corporate.kohls.comURLOut of Scope17:13
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope17:13
Addedhttp://www.b2b.kohls.comURLOut of Scope17:13
Addedkohlsmerch.kohls.comURLOut of Scope17:13
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope17:13
Addedstage65-corporate.kohls.comURLOut of Scope17:13
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope17:13
Addedmykohls-origin.kohls.comURLOut of Scope17:13
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope17:13
Addedhttps://www.kohls.comURLIn Scope17:13
Addeddeveloper.kohls.comURLOut of Scope17:13
Addedlink-preprod.kohls.comURLOut of Scope17:13
Addedproductchampions.kohls.comURLOut of Scope17:13
Addedcorporate.kohls.comURLOut of Scope17:13
Addedany domain with archaius.json endoint is out of scopeOTHEROut of Scope17:13
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope17:13
Addedhttp://www.b2b.kohls.comURLOut of Scope17:13
Addedkohlsmerch.kohls.comURLOut of Scope17:13
Addedconnection.kohls.comURLOut of Scope17:13
Addedkconnect.kohls.comURLOut of Scope17:13
Addedwfh*.kohls.comURLOut of Scope17:13
Added*qa*.kohls.comURLOut of Scope17:13
Addedvp-*.kohls.comURLOut of Scope17:13
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope17:13
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope17:13
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope17:13
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope17:13
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope17:13
Addedmykohls.kohls.comURLOut of Scope17:13
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope17:13
Addedstage65-mykohls.kohls.comURLOut of Scope17:13
Addedstage65-corporate.kohls.comURLOut of Scope17:13
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope17:13
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope17:13
Addedorigin-stage65-corporate.kohls.comURLOut of Scope17:13
Addedmykohls-origin.kohls.comURLOut of Scope17:13
Addedauthor-mykohls.kohls.comURLOut of Scope17:13
Addedlclive.kohls.comURLOut of Scope17:13
Addeddeveloper.kohls.comURLOut of Scope17:13
Addedlink-preprod.kohls.comURLOut of Scope17:13
Addedproductchampions.kohls.comURLOut of Scope17:13
Addedcorporate.kohls.comURLOut of Scope17:13
Added*kohlsecommerce.com/kohlscredit/prequalOTHEROut of Scope17:13
Added*kohls.com/kohlscredit/prequalURLOut of Scope17:13
Addedapply.kohls.comURLOut of Scope17:13
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope17:13
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope17:13
Addedhttps://www.kohls.comURLIn Scope17:13