Access Denied

entertainment media

e-commerce shopping

technology software

documentation technical

news media journalism

English

bm_so

bm_s

akacd_www-kohls-com-mosaic-p2

AKA_A2

AKA_EXP

AKA_PMP_YP100

AKA_ACM

AKA_STP

AKA_HP2

AKA_RV

AKA_CNC2

AKA_CBCC

AKA_STP100

AKA_RV8

AKA_PDP2

bm_ss

AKA_SNB_STP

AKA_RV4

AKA_RV5

AKA_PIQ

AKA_CDP2

AKA_RV3

ksa-app-measurement-beta

akavpau_www

shopnext

AKA_RV2

AKA_RV6

AKA_GEO

Within the commercial generic top-level domain (.com), 'www.kohls.com' is registered, featuring subdomain 'www'. The second-level label 'kohls' is 5 characters long split between 1 vowel and four consonants. Segmentation suggests 2 words: kohl, s. Median word length comes out to 2.5 characters. 'kol' most strongly signals Czech. Usage also turns up in Slovak and Croatian contexts.

html/64/04/640496e1-2c11-4e49-aea1-906e40327980.html.gz

block-all-mixed-content;  script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 	*.kohls.com *.adobedtm.com *.yahoodns.net *.cdnbasket.net lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com diagnostics.id5-sync.com *.babylist.com *.kargo.com *.cloudfront.net esm.sh *.dotomi.com *.fastclick.net *.licdn.com *.pubmatic.com *.rubiconproject.com *.doubleclick.net *.iesnare.com *.youtube.com *.fontawesome.com kohlsblog.wpengine.com *.collectivevoice.com *.flippenterprise.net *.kohlslocal.com *.media.net *.syndigo.com *.syndigo.cloud *.rewardstyle.com *.adnxs-simple.com media.adcanvas.com *.loudcrowd.com *.2mdn.net c.tvpixel.com *.3lift.com *.flashtalking.com *.ampproject.org *.scorecardresearch.com *.evgnet.com *.vovici.com *.casalemedia.com cdn.cookielaw.org app.contentsquare.com *.fohr.co cdnjs.cloudflare.com *.yahoo.com cdn.js7k.com *.doubleverify.com *.adnxs.com *.adsafeprotected.com kohls.sspinc.io *.webcollage.net *.brsrvr.com *.pinterest.com *.googleapis.com *.dynatrace.com *.snapchat.com *.go-mpulse.net *.adobedtm.com *.coherentpath.com *.igodigital.com *.bing.com *.google.com *.paypalobjects.com *.braintreegateway.com *.dynamicyield.com *.gstatic.com *.paypal.com *.micpn.com *.clicktale.net *.yimg.com *.liadm.com *.ads-twitter.com *.pinimg.com *.facebook.net *.tiktok.com *.vibescm.com sc-static.net *.googletagmanager.com *.google-analytics.com *.cnnx.link *.taboola.com *.impactradius-event.com *.googletagservices.com *.indexww.com *.googlesyndication.com *.bazaarvoice.com *.tagdelivery.com *.googleadservices.com *.rokt.com *.fohr.co *.recaptcha.net cadent.tv z.moatads.com *.confiant-integrations.net *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.contentsquare.net *.id5-sync.com *.adtrafficquality.google *.cnnx.link *.granify.com *.redditstatic.com *.getmetrical.com ucm-us.verint-cdn.com *.usw2.pure.cloud *.newrelic.com *.nr-data.net *.rtmpromos.com *.curalate.com; style-src 'self' 'unsafe-inline' blob: data: 	*.kohls.com *.licdn.com kohlsblog.wpengine.com cdn.honey.io *.flippenterprise.net *.fontawesome.com *.kohlslocal.com *.loudcrowd.com *.quantcount.com *.googleapis.com *.bazaarvoice.com *.dynamicyield.com *.getmetrical.com ucm-us.verint-cdn.com; img-src 'self' blob: data: 	*.kohls.com *.cdnwidget.com imagedelivery.net *.yahoodns.net a.wishabi.com f.wishabi.net *.cloudfront.net *.dotomi.com *.youtube.com lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com *.id5-sync.com *.fastclick.net *.adsensecustomsearchads.com *.doubleclick.net *.licdn.com *.scorecardresearch.com *.adnxs.com *.clicktale.net cdn.honey.io *.kohlsimg.com *.casalemedia.com *.yahoo.com *.fontawesome.com *.loudcrowd.com *.fbsbx.com kohlsblog.wpengine.com *.syndigo.com *.syndigo.cloud *.adcanvas.com *.googleadservices.com *.quantserve.com *.vibescm.com *.quantcount.com www.ojrq.net *.flippenterprise.net *.liadm.com *.rlcdn.com *.media.net us-u.openx.net *.rubiconproject.com *.demdex.net *.everesttech.net prodeastusmappscreative.azureedge.net *.pubmatic.com *.yimg.com *.kohlslocal.com *.gstatic.com *.doubleverify.com *.flashtalking.com *.advertising.com *.googleapis.com cdn.cookielaw.org *.fohr.co *.webcollage.net *.adsafeprotected.com *.3lift.com *.dynamicyield.com *.stylitics.com dpm.demdex.net *.micpn.com cm.everesttech.net *.googletagmanager.com services.postcodeanywhere.co.uk *.bing.com *.paypal.com *.google.com t.co *.twitter.com *.pinterest.com *.facebook.com *.google-analytics.com *.taboola.com *.2mdn.net *.admedia.com *.admarketplace.net *.igodigital.com trkn.us *.4cinsights.com *.bazaarvoice.com *.tagdelivery.com *.bizrate.com *.googlesyndication.com *.adxcel-ec2.com *.kohlsimg.com *.fohr.co cadent.tv z.moatads.com *.confiant-integrations.net *.bttrack.com *.33across.com id5-sync.com id.crwdcntrl.net match.adsrvr.org *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.contentsquare.net events.bouncex.net lh3.googleusercontent.com *.adtrafficquality.google google.com www.akamai.com s-a.innovid.com *.granify.com *.reddit.com *.getmetrical.com ucm-us.verint-cdn.com survey.vovici.com *.usw2.pure.cloud *.rtmpromos.com *.curalate.com; connect-src 'self' data: 	 *.kohls.com *.domdog.io kohls.koddi.io *.yahoodns.net lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com *.id5-sync.com *.babylist.com *.bttrack.com *.kargo.com *.cloudfront.net *.dotomi.com *.fastclick.net *.evergage.com *.casalemedia.com *.iesnare.com *.syndigo.com *.syndigo.cloud *.adeptmind.ai endpoint.dlp-webservices.prod.dlp.adeptmind.net plausible.io *.loudcrowd.com *.fontawesome.com *.flippenterprise.net *.flipp.com *.flippback.com *.ampproject.org s.update.ib.adnxs.net *.kohlslocal.com *.google-analytics.com *.flashtalking.com *.onetrust.com cdn.cookielaw.org *.fohr.co p.tvpixel.com *.tagdelivery.com *.doubleverify.com *.adnxs.com *.googleapis.com hb.emxdgt.com *.pubmatic.com *.gstatic.com *.rlcdn.com *.google.com *.yahoo.com *.facebook.com *.akstat.io *.rubiconproject.com *.3lift.com *.snapchat.com *.tiktok.com *.bing.com *.paypal.com *.techlab-cdn.com *.omtrdc.net *.go-mpulse.net *.dynatrace.com *.dynamicyield.com *.yimg.com *.liadm.com *.clicktale.net *.pinterest.com *.taboola.com *.braintree-api.com *.braintreegateway.com *.addressy.com dpm.demdex.net *.doubleclick.net *.googlesyndication.com *.bazaarvoice.com kohls.sjv.io *.coherentpath.com *.fohr.co *.contentsquare.net *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org d.impct.site/d *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.media.net events.bouncex.net *.cdnwidget.com *.cdnbasket.net *.adtrafficquality.google google.com *.bizrate.com *.granify.com *.reddit.com *.redditstatic.com redditstatic.com *.getmetrical.com ucm-us.verint-cdn.com survey.vovici.com hoover.foresee.com *.xmverint.com analytics.foresee.com https://*.usw2.pure.cloud production-platform-media.s3.amazonaws.com www.googleadservices.com *.nr-data.net shyrka-prod-usw2.s3.us-west-2.amazonaws.com *.newrelic.com wss://*.usw2.pure.cloud *.rtmpromos.com *.curalate.com rum.criteo.com; frame-src 'self' data: 	survey.vovici.com lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com diagnostics.id5-sync.com *.babylist.com *.indexww.com *.brealtime.com *.2mdn.net *.adnxs.com *.rewardstyle.com *.googletagservices.com *.collectivevoice.com *.casalemedia.com player.vimeo.com *.youtube.com *.syndigo.com *.syndigo.cloud *.bazaarvoice.com eus.rubiconproject.com *.3lift.com *.media.net *.pubmatic.com core-gp.firstinsight.com tsdtocl.com tr.snapchat.com *.rokt.com *.google.com *.liadm.com *.pinterest.com *.doubleclick.net kohls.demdex.net *.paypal.com *.facebook.com *.rlcdn.com *.googlesyndication.com *.flashtalking.com *.recaptcha.net *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org *.sharethrough.com *.googletagmanager.com *.adtrafficquality.google *.taboola.com *.usw2.pure.cloud *.rtmpromos.com *.curalate.com; worker-src 'self' blob:  	*.clicktale.net *.contentsquare.net; child-src 'self' blob:  	*.clicktale.net *.contentsquare.net *.usw2.pure.cloud *.rtmpromos.com; font-src 'self' data:  	cdn.honey.io cdnjs.cloudflare.com *.kohls.com *.syndigo.com *.bazaarvoice.com *.syndigo.cloud *.fontawesome.com *.kohlslocal.com *.gstatic.com *.paypalobjects.com *.rakuten.com ucm-us.verint-cdn.com; form-action 'self'  	*.kohls.com *.facebook.com *.bazaarvoice.com *.snapchat.com *.pinterest.com;  base-uri 'self'  	*.kohls.com;  frame-ancestors 'self';  manifest-src 'self'  	*.kohls.com *.bazaarvoice.com;  media-src 'self' blob:  	*.kohlsimg.com *.iesnare.com *.bazaarvoice.com *.loudcrowd.com *.fbsbx.com *.bing.com *.syndigo.com *.syndigo.cloud *.usw2.pure.cloud *.curalate.com;  object-src 'self' *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.usw2.pure.cloud; report-uri https://csp38.domdog.io/report-uri/a9a6fb14-365a-4648-b17b-2e47930f8b49/1/1-93/block;

HSTS header missing - vulnerable to protocol downgrade attacks

CSP header missing - vulnerable to XSS attacks

child-src https:  chrome-untrusted://new-tab-page/ chrome-untrusted://ntp-microsoft-auth/;connect-src chrome://resources chrome://theme 'self';default-src 'self';font-src chrome://resources 'self';img-src chrome://resources chrome://theme chrome://image chrome://favicon2 chrome://app-icon chrome://extension-icon chrome://fileicon blob: data: 'self';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources chrome://webui-test 'self';style-src chrome://resources chrome://theme 'self' 'unsafe-inline';trusted-types parse-html-subset sanitize-inner-html static-types webui-test-script webui-test-html polymer-html-literal polymer-template-event-attribute-policy lit-html-desktop;frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;worker-src blob: 'self';frame-ancestors 'none';

child-src 'none';object-src 'none';require-trusted-types-for 'script';script-src chrome://resources 'self';trusted-types;frame-ancestors 'none';

base-uri 'none';child-src https:;form-action https://ogs.google.com https://*.corp.google.com;object-src 'none';script-src 'self' 'unsafe-inline' https:;frame-ancestors chrome://new-tab-page/

Requests	IP Address	Location	AS Autonomous System
2	104.126.37.152	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	104.126.37.128	Frankfurt am Main, Hesse, Germany	AS20940Akamai International B.V.
0	2a02:26f0:7100::211:64eb	Germany	AS20940Akamai International B.V.
0	2a02:26f0:7100::211:64e2	Germany	AS20940Akamai International B.V.
2	4	-	-

Security Scan Report: www.kohls.com

Summary

AI Security Verdict

Safe Website

Safety Factors

Details

Bot Protection Detected

Screenshot

Page Load Overview

Language Analysis

Primary Language

Detection Details

Website Classification

Primary Category

All Detected Categories

Detected Features

Domain & IP Information

Detected Technologies8

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

ssdeep (Context Triggered Piecewise Hashing)

sdhash (Similarity Digest Hashing)

Image Hashes

Perceptual Hashes

Other Hashes

Scan History