BC Bugcrowd LIVE
Kohl's
up to$4,500
Open on Bugcrowd ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- managed triage
- yes
- safe harbor
- partial
3 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
https://www.kohls.com | domain | · | · | 2026-09-20 |
https://www.kohls.com/feature/app.jsp | mobile | · | · | 2026-09-20 |
Kohl’s entire public digital footprint that is not Out-Of-Scope(See list below) | other | · | · | 2026-09-20 |
29 out of scope — black ICE, don't touch
any domain with archaius.json endoint is out of scopedomainapply.kohls.comdomainauthor-mykohls.kohls.comdomainauthor-qa65-mykohls.kohls.comdomainauthor-stage65-mykohls.kohls.comdomainconnection.kohls.comdomaincorporate.kohls.comdomaindeveloper.kohls.comdomainhttp://www.b2b.kohls.comdomainkconnect.kohls.comdomainkohlsmerch.kohls.com/domainlclive.kohls.comdomainlink-preprod.kohls.comdomainmykohls-origin.kohls.comdomainmykohls.kohls.comdomainorigin-stage65-corporate.kohls.comdomainorigin-stage65-mykohls.kohls.comdomainproductchampions.kohls.comdomainstage65-corporate.kohls.comdomainstage65-mykohls.kohls.comdomain*kohlsecommerce.com/kohlscredit/prequalother*kohls.com/checkout/prequal_inquiry.jsp#/preQualEligiblewildcard*kohls.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterwildcard*kohls.com/kohlscredit/prequalwildcard*kohlsecommerce.com/checkout/prequal_inquiry.jsp#/preQualEligiblewildcard*kohlsecommerce.com/feature/pre-qual/prequal_inquiry.jsp?icid=prequalfooterwildcard*qa*.kohls.comwildcardvp-*.kohls.comwildcardwfh*.kohls.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.