Program Removed

This program is no longer available on Bugcrowd. The scope data shown below is historical and may not reflect the final state of the program.

kohls

BugcrowdView on Bugcrowd
RawAI Enhanced
7
In Scope
61
Out of Scope
In-Scope Assets (7)
AssetCategoryBountyQuick Links
https://www.kohls.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://www.kohls.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://www.kohls.com/feature/app.jspIOSYes-
https://www.kohls.com/feature/app.jspANDROIDYes-
https://www.kohls.com/feature/app.jspANDROIDYes-
https://www.kohls.com/feature/app.jspIOSYes-
kohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERYes-
Out-of-Scope Assets (61)
AssetCategoryBounty
*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLYes
*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLYes
*kohls.com/kohlscredit/prequalURLYes
*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLYes
*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLYes
*kohlsecommerce.com/kohlscredit/prequalOTHERYes
*qa*.kohls.comURLYes
any domain with archaius.json endoint is out of scopeURLYes
any domain with archaius.json endoint is out of scopeOTHERYes
any domain with archaius.json endoint is out of scopeURLYes
apply.kohls.comURLYes
apply.kohls.comURLYes
author-mykohls.kohls.comURLYes
author-mykohls.kohls.comURLYes
author-qa65-mykohls.kohls.comURLYes
author-qa65-mykohls.kohls.comURLYes
author-stage65-mykohls.kohls.comURLYes
author-stage65-mykohls.kohls.comURLYes
connection.kohls.comURLYes
connection.kohls.comURLYes
corporate.kohls.comURLYes
corporate.kohls.comURLYes
developer.kohls.comURLYes
developer.kohls.comURLYes
http://www.b2b.kohls.comURLYes
http://www.b2b.kohls.comURLYes
kconnect.kohls.comURLYes
kconnect.kohls.comURLYes
kohls.comWILDCARDYes
kohls.comWILDCARDYes
kohls.comWILDCARDYes
kohls.comWILDCARDYes
kohls.comWILDCARDYes
kohls.comWILDCARDYes
kohlsecommerce.comWILDCARDYes
kohlsecommerce.comWILDCARDYes
kohlsecommerce.comWILDCARDYes
kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLYes
kohlsmerch.kohls.comURLYes
kohlsmerch.kohls.comURLYes
kohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERYes
lclive.kohls.comURLYes
lclive.kohls.comURLYes
link-preprod.kohls.comURLYes
link-preprod.kohls.comURLYes
mykohls-origin.kohls.comURLYes
mykohls-origin.kohls.comURLYes
mykohls.kohls.comURLYes
mykohls.kohls.comURLYes
origin-stage65-corporate.kohls.comURLYes
origin-stage65-corporate.kohls.comURLYes
origin-stage65-mykohls.kohls.comURLYes
origin-stage65-mykohls.kohls.comURLYes
productchampions.kohls.comURLYes
productchampions.kohls.comURLYes
stage65-corporate.kohls.comURLYes
stage65-corporate.kohls.comURLYes
stage65-mykohls.kohls.comURLYes
stage65-mykohls.kohls.comURLYes
vp-*.kohls.comURLYes
wfh*.kohls.comURLYes
Scope Changes (234)
Jun 26, 2026
ChangeAssetCategoryScopeTime
Program Removed———06:34
Jun 17, 2026
ChangeAssetCategoryScopeTime
Addedhttp://www.b2b.kohls.comURLOut of Scope11:34
Addedkconnect.kohls.comURLOut of Scope11:34
Addedproductchampions.kohls.comURLOut of Scope11:34
Addedlink-preprod.kohls.comURLOut of Scope11:34
Addeddeveloper.kohls.comURLOut of Scope11:34
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope11:34
Addedstage65-corporate.kohls.comURLOut of Scope11:34
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope11:34
Added*qa*.kohls.comWILDCARDOut of Scope11:34
Addedwfh*.kohls.comWILDCARDOut of Scope11:34
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHEROut of Scope11:34
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope11:34
Addedcorporate.kohls.comURLOut of Scope11:34
Addedlclive.kohls.comURLOut of Scope11:34
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope11:34
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope11:34
Addedmykohls.kohls.comURLOut of Scope11:34
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope11:34
Addedkohlsmerch.kohls.comURLOut of Scope11:34
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope11:34
Added*kohls.com/kohlscredit/prequalWILDCARDOut of Scope11:34
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope11:34
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope11:34
Addedvp-*.kohls.comWILDCARDOut of Scope11:34
Addedconnection.kohls.comURLOut of Scope11:34
Added*kohlsecommerce.com/kohlscredit/prequalWILDCARDOut of Scope11:34
Addedmykohls-origin.kohls.comURLOut of Scope11:34
Addedorigin-stage65-corporate.kohls.comURLOut of Scope11:34
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope11:34
Addedhttp://www.b2b.kohls.comURLOut of Scope11:34
Addedhttps://www.kohls.comURLIn Scope11:34
Addedapply.kohls.comURLOut of Scope11:34
Addedauthor-mykohls.kohls.comURLOut of Scope11:34
Addedstage65-mykohls.kohls.comURLOut of Scope11:34
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERIn Scope11:34
Addedhttps://www.kohls.comURLIn Scope11:34
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope11:34
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope11:34
Addedapply.kohls.comURLOut of Scope11:34
Added*kohls.com/kohlscredit/prequalURLOut of Scope11:34
Added*kohlsecommerce.com/kohlscredit/prequalOTHEROut of Scope11:34
Addedcorporate.kohls.comURLOut of Scope11:34
Addedproductchampions.kohls.comURLOut of Scope11:34
Addedlink-preprod.kohls.comURLOut of Scope11:34
Addeddeveloper.kohls.comURLOut of Scope11:34
Addedlclive.kohls.comURLOut of Scope11:34
Addedauthor-mykohls.kohls.comURLOut of Scope11:34
Addedmykohls-origin.kohls.comURLOut of Scope11:34
Addedorigin-stage65-corporate.kohls.comURLOut of Scope11:34
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope11:34
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope11:34
Addedstage65-corporate.kohls.comURLOut of Scope11:34
Addedstage65-mykohls.kohls.comURLOut of Scope11:34
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope11:34
Addedmykohls.kohls.comURLOut of Scope11:34
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope11:34
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope11:34
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope11:34
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope11:34
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope11:34
Addedvp-*.kohls.comURLOut of Scope11:34
Added*qa*.kohls.comURLOut of Scope11:34
Addedwfh*.kohls.comURLOut of Scope11:34
Addedkconnect.kohls.comURLOut of Scope11:34
Addedconnection.kohls.comURLOut of Scope11:34
Addedkohlsmerch.kohls.comURLOut of Scope11:34
Program Removed———10:34
Mar 5, 2026
ChangeAssetCategoryScopeTime
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERIn Scope22:32
Addedhttps://www.kohls.comURLIn Scope22:32
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope22:32
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope22:32
Addedapply.kohls.comURLOut of Scope22:32
Added*kohls.com/kohlscredit/prequalURLOut of Scope22:32
Added*kohlsecommerce.com/kohlscredit/prequalOTHEROut of Scope22:32
Addedcorporate.kohls.comURLOut of Scope22:32
Addedproductchampions.kohls.comURLOut of Scope22:32
Addedlink-preprod.kohls.comURLOut of Scope22:32
Addeddeveloper.kohls.comURLOut of Scope22:32
Addedlclive.kohls.comURLOut of Scope22:32
Addedauthor-mykohls.kohls.comURLOut of Scope22:32
Addedmykohls-origin.kohls.comURLOut of Scope22:32
Addedorigin-stage65-corporate.kohls.comURLOut of Scope22:32
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope22:32
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope22:32
Addedstage65-corporate.kohls.comURLOut of Scope22:32
Addedstage65-mykohls.kohls.comURLOut of Scope22:32
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope22:32
Addedmykohls.kohls.comURLOut of Scope22:32
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope22:32
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope22:32
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope22:32
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope22:32
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope22:32
Addedvp-*.kohls.comURLOut of Scope22:32
Added*qa*.kohls.comURLOut of Scope22:32
Addedwfh*.kohls.comURLOut of Scope22:32
Addedkconnect.kohls.comURLOut of Scope22:32
Addedconnection.kohls.comURLOut of Scope22:32
Addedkohlsmerch.kohls.comURLOut of Scope22:32
Addedhttp://www.b2b.kohls.comURLOut of Scope22:32
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope22:32
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope22:32
Added*kohlsecommerce.com/kohlscredit/prequalWILDCARDOut of Scope22:32
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope22:32
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope22:32
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope22:32
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope22:32
Addedkohlsmerch.kohls.comURLOut of Scope22:32
Addedapply.kohls.comURLOut of Scope22:32
Addedproductchampions.kohls.comURLOut of Scope22:32
Addedlclive.kohls.comURLOut of Scope22:32
Addedwfh*.kohls.comWILDCARDOut of Scope22:32
Addedconnection.kohls.comURLOut of Scope22:32
Added*kohls.com/kohlscredit/prequalWILDCARDOut of Scope22:32
Addedcorporate.kohls.comURLOut of Scope22:32
Addedauthor-mykohls.kohls.comURLOut of Scope22:32
Addedmykohls-origin.kohls.comURLOut of Scope22:32
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope22:32
Addedvp-*.kohls.comWILDCARDOut of Scope22:32
Addedkconnect.kohls.comURLOut of Scope22:32
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERIn Scope22:32
Addedhttps://www.kohls.comURLIn Scope22:32
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope22:32
Addedstage65-corporate.kohls.comURLOut of Scope22:32
Addedmykohls.kohls.comURLOut of Scope22:32
Addedorigin-stage65-corporate.kohls.comURLOut of Scope22:32
Addedstage65-mykohls.kohls.comURLOut of Scope22:32
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope22:32
Added*qa*.kohls.comWILDCARDOut of Scope22:32
Addedlink-preprod.kohls.comURLOut of Scope22:32
Addeddeveloper.kohls.comURLOut of Scope22:32
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope22:32
Addedhttp://www.b2b.kohls.comURLOut of Scope22:32
Feb 25, 2026
ChangeAssetCategoryScopeTime
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope19:14
Added*kohlsecommerce.com/kohlscredit/prequalWILDCARDOut of Scope19:14
Addedlink-preprod.kohls.comURLOut of Scope19:14
Addedorigin-stage65-corporate.kohls.comURLOut of Scope19:14
Addedstage65-corporate.kohls.comURLOut of Scope19:14
Addedmykohls-origin.kohls.comURLOut of Scope19:14
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope19:14
Addedwfh*.kohls.comWILDCARDOut of Scope19:14
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHEROut of Scope19:14
Added*kohls.com/kohlscredit/prequalWILDCARDOut of Scope19:14
Addedauthor-mykohls.kohls.comURLOut of Scope19:14
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope19:14
Addedstage65-mykohls.kohls.comURLOut of Scope19:14
Added*qa*.kohls.comWILDCARDOut of Scope19:14
Addedkconnect.kohls.comURLOut of Scope19:14
Addedkohlsmerch.kohls.comURLOut of Scope19:14
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope19:14
Addedcorporate.kohls.comURLOut of Scope19:14
Addedmykohls.kohls.comURLOut of Scope19:14
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope19:14
Addeddeveloper.kohls.comURLOut of Scope19:14
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope19:14
Addedproductchampions.kohls.comURLOut of Scope19:14
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope19:14
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope19:14
Addedconnection.kohls.comURLOut of Scope19:14
Addedapply.kohls.comURLOut of Scope19:14
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope19:14
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope19:14
Addedvp-*.kohls.comWILDCARDOut of Scope19:14
Addedhttps://www.kohls.comURLIn Scope19:14
Addedlclive.kohls.comURLOut of Scope19:14
Addedhttp://www.b2b.kohls.comURLOut of Scope19:14
Program Removed———17:22
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHERIn Scope17:13
Addedhttps://www.kohls.comURLIn Scope17:13
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope17:13
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope17:13
Addedapply.kohls.comURLOut of Scope17:13
Added*kohls.com/kohlscredit/prequalURLOut of Scope17:13
Added*kohlsecommerce.com/kohlscredit/prequalOTHEROut of Scope17:13
Addedcorporate.kohls.comURLOut of Scope17:13
Addedproductchampions.kohls.comURLOut of Scope17:13
Addedlink-preprod.kohls.comURLOut of Scope17:13
Addeddeveloper.kohls.comURLOut of Scope17:13
Addedlclive.kohls.comURLOut of Scope17:13
Addedauthor-mykohls.kohls.comURLOut of Scope17:13
Addedmykohls-origin.kohls.comURLOut of Scope17:13
Addedorigin-stage65-corporate.kohls.comURLOut of Scope17:13
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope17:13
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope17:13
Addedstage65-corporate.kohls.comURLOut of Scope17:13
Addedstage65-mykohls.kohls.comURLOut of Scope17:13
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope17:13
Addedmykohls.kohls.comURLOut of Scope17:13
Addedany domain with archaius.json endoint is out of scopeURLOut of Scope17:13
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope17:13
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope17:13
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterURLOut of Scope17:13
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleURLOut of Scope17:13
Addedvp-*.kohls.comURLOut of Scope17:13
Added*qa*.kohls.comURLOut of Scope17:13
Addedwfh*.kohls.comURLOut of Scope17:13
Addedkconnect.kohls.comURLOut of Scope17:13
Addedconnection.kohls.comURLOut of Scope17:13
Addedkohlsmerch.kohls.comURLOut of Scope17:13
Addedhttp://www.b2b.kohls.comURLOut of Scope17:13
Addedauthor-qa65-mykohls.kohls.comURLOut of Scope17:13
Addedany domain with archaius.json endoint is out of scopeOTHEROut of Scope17:13
Addedcorporate.kohls.comURLOut of Scope17:13
Addedproductchampions.kohls.comURLOut of Scope17:13
Addedlink-preprod.kohls.comURLOut of Scope17:13
Addeddeveloper.kohls.comURLOut of Scope17:13
Addedhttps://www.kohls.comURLIn Scope17:13
Addedhttps://www.kohls.com/feature/app.jspANDROIDIn Scope17:13
Addedmykohls-origin.kohls.comURLOut of Scope17:13
Addedauthor-stage65-mykohls.kohls.comURLOut of Scope17:13
Addedstage65-corporate.kohls.comURLOut of Scope17:13
Added*kohls.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope17:13
Addedkohlsmerch.kohls.comURLOut of Scope17:13
Addedhttp://www.b2b.kohls.comURLOut of Scope17:13
Added*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope17:13
Addedorigin-stage65-corporate.kohls.comURLOut of Scope17:13
Addedmykohls.kohls.comURLOut of Scope17:13
Addedwfh*.kohls.comWILDCARDOut of Scope17:13
Addedkconnect.kohls.comURLOut of Scope17:13
Addedstage65-mykohls.kohls.comURLOut of Scope17:13
Addedauthor-mykohls.kohls.comURLOut of Scope17:13
Added*kohls.com/kohlscredit/prequalWILDCARDOut of Scope17:13
Addedlclive.kohls.comURLOut of Scope17:13
Addedorigin-stage65-mykohls.kohls.comURLOut of Scope17:13
Addedconnection.kohls.comURLOut of Scope17:13
Addedhttps://www.kohls.com/feature/app.jspIOSIn Scope17:13
Addedkohl’s entire public digital footprint that is not out-of-scope(see list below)OTHEROut of Scope17:13
Added*kohlsecommerce.com/kohlscredit/prequalWILDCARDOut of Scope17:13
Added*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterWILDCARDOut of Scope17:13
Addedvp-*.kohls.comWILDCARDOut of Scope17:13
Addedapply.kohls.comURLOut of Scope17:13
Added*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/prequaleligibleWILDCARDOut of Scope17:13
Added*qa*.kohls.comWILDCARDOut of Scope17:13