HOW.IS
?

How is kohls.com?

Looks fine risk 0/100

Registered 28 years ago, on no blocklists we checked, valid HTTPS, the site answered 403 in 48 ms.

Why

02050100
finecarefulhigh risk
  • ·Nothing in the checks added risk.

Rule-based: domain age, blocklists, TLS. A heuristic, not a guarantee.

How kohls.com looks right now
The home page, rendered by how.is in a sandboxed browser. Nothing on it is clickable here.
Site
403
48 ms
HTTPS
164 d
left on a DigiCert Inc certificate
Age
28 years
registered 1998-06-11
Blocklists
0
listings across 5 lists

Everything we looked at

DNS records5 record types
A23.205.106.84
23.205.106.68
23.205.106.77
23.205.106.82
23.205.106.70
23.205.106.88
AAAA2600:1408:c400:c::17cd:6894
2600:1408:c400:c::17cd:6886
2600:1408:c400:c::17cd:688b
2600:1408:c400:c::17cd:6897
2600:1408:c400:c::17cd:6884
MX1 mx2.kohlsinbound.iphmx.com
1 mx1.kohlsinbound.iphmx.com
NSa12-64.akam.net
a9-67.akam.net
a6-65.akam.net
a8-66.akam.net
a11-67.akam.net
a1-236.akam.net
TXTbugcrowd-verification=14536e1a7386b99d0a818cae94bd43fc
teamviewer-sso-verification=6891399076b44969baa89c8c982a1b1a
paloaltonetworks-site-verification=b86750d259d9d72de6c93466e1233a9ec385f6546287a0336d98431cc38d8d71
google-site-verification=2TCfEecw_Ds5qgY7r5UvQn8BVtPN2fDPAiJ_UXECgas
MS=4E8DEFBFAC78571E4A510228D83A47AC59BD1822
atlassian-domain-verification=i/rT1ehyS09wGKSeLNnGaU6wUa5mFMCeiK9cp9YGVH/Ad4QZMY3wcwYHq/Uv3gqk
ZOOM_verify_HLQ0Zque03GrEQ9zgpK9Ud
miro-verification=ea43f67de2533b3d22d6ad1edea640f8eb59923e
extensis-domain-verification=c99574d8-e21b-476b-96a9-4421cd0b39c4
ahrefs-site-verification_5b757d0fa6fc709985684df2d4abe9b3c76f77ec825113d2471b738acd3a3035
MS=ms75226883
adobe-idp-site-verification=afe97c22a54e94be63d7ed71ca884d567e82722d051e4beb9bffdee934ea79f4
MS=CAFA420CAC8A0572A5BF2F553417DA75A85AFF72
google-site-verification=zrMfmVGNrKnVo7mTkJOKLmj__PSPJtzNtVfVMcOVYOg
apple-domain-verification=PeMdjoUHSR5U1JDX
776c9a2143b0c70c4a72bd8af025302152081b7fb59e07b67cc326b0c3b13547
mongodb-site-verification=tTtY99J9cRrPfZ39OTSAONdoeYEpjWKT
_qi8b4hi86epnx83epmnxtwidy1l8w5o
asv=ffdacec6a9831b1169fb10cba756adf9
1f3e56e7-9c0e-4276-9231-1e775c4ea814
docker-verification=312fd5ce-b1e1-42b5-b10c-38cedd05bc2d
docusign=68a62297-4d97-4195-8b9c-ba7a9539c491
afe97c22a54e94be63d7ed71ca884d567e82722d051e4beb9bffdee934ea79f4
google-site-verification=WBkJ0AWa8wVbwgpb7bKmwoKNAqdI0vI_ST6ikknypnA
_7lcr0eqf4rv7ubs0dn28e8b55u7blaf
jamf-site-verification=ZmBgbDbShJpjzG9BKsZETQ
openai-domain-verification=dv-KVElDfrZQrOmTveNQCFLbBU9
apple-domain-verification=2iogvvem6KOmqeTwD01P8ujbl0hhJsIQffO0A5Tphng
2c8304339431a69521c1fac0f799f579114c5b21cd23e20a0afd72a0049ecb27
apple-domain-verification=7o11KX9wbUN5CqPm
rHNSYAzNNodYFUoH-9W-hwvSH8g
onetrust-domain-verification=497db3eea89b47db875adb3097b0444a
v=spf1 include:_spf.kohls.com include:_spf2.kohls.com include:_spf3.kohls.com mx ~all
canva-site-verification=Fshqrk4KEbw-tq_IsLg-_g
Dynatrace-site-verification=db17d477-b6d4-4daf-bedd-8d4c00cbfeba__7sgrsrpqffepgt2b8bouv90i97
mk-org-sso-b86f54eb-c4b2-42b1-967c-9c208e7e44db
onetrust-domain-verification=1e0210c4a5614efa997a13b7a1957da3
asv=011a419947f92ae141e41f89c560efd4
RegistrationCSC Corporate Domains, Inc.
registrarCSC Corporate Domains, Inc.
registered1998-06-11
expires2027-06-10
last changed2026-06-06
ownerKIN,Inc. (f/k/a Kohl's Illinois, Inc)
nameserversa1-236.akam.net
a11-67.akam.net
a12-64.akam.net
a6-65.akam.net
a8-66.akam.net
a9-67.akam.net
statusclient transfer prohibited
server delete prohibited
server transfer prohibited
server update prohibited
registered 1998-06-11expires 2027-06-10
HTTPS certificate164 days left
validyes
issuerDigiCert Inc
coverskohls.com, *.kohls.com, *.kpp.kohls.com, api.platform.kohls.com, crms.kohlsrewards.com, csr.kohlsrewards.com, k-lab.com, kohlscorporation.com, kohlsgreen.com, kohlsgreenscene.com, kohlsrealestate.com, kohlsrewards.com
protocolTLSv1.3
issued 2026-09-24expires 2027-04-10
DNSSECinsecure

Domain is not signed with DNSSEC

. → com → kohls.com
Email authenticationexcellent
SPFpass v=spf1 include:_spf.kohls.com include:_spf2.kohls.com include:_spf3.kohls.com mx ~all
DMARCpass policy reject
DKIMfound: s1, s2

Whether mail claiming to be from this domain can be checked as genuine.

Security scoregrade B · 155/205
Basic Security
10/40missing: DNSSEC Enabled, Nameserver Diversity
Record Security
30/45missing: CAA Records, DKIM Presence
Advanced Security
20/25missing: SOA Record Configuration
Domain Reputation
50/50
Threat Detection
45/45missing: Domain Age Check
Blocklists0 listings · 17 lookups
SURBL MultidomainURIBL MultidomainSpamCop23.205.106.79Barracuda23.205.106.79UCEPROTECT Level 123.205.106.79SpamCop23.205.106.87Barracuda23.205.106.87UCEPROTECT Level 123.205.106.87SpamCop23.205.106.75Barracuda23.205.106.75UCEPROTECT Level 123.205.106.75SpamCop23.205.106.77Barracuda23.205.106.77UCEPROTECT Level 123.205.106.77SpamCop23.205.106.88Barracuda23.205.106.88UCEPROTECT Level 123.205.106.88

Green: clean. Red: listed. Grey: the list did not answer.

Ask it yourself

Agents get this as data. Bought through the API, the checks behind this page cost $0.070: profile $0.025 + trust $0.020 + screenshot $0.020 + site status $0.005.

curl "https://how.is/v1/domain/trust?domain=kohls.com" \ -H "Authorization: Bearer $HOWIS_KEY" # or pay per call in USDC (x402), no key: the 402 tells your agent the price curl -i "https://how.is/v1/domain/profile?domain=kohls.com"

MCP: add https://how.is/mcp to Claude, Codex or Cursor (one-line install) and ask for domain_trust on kohls.com. Reference: /llms.txt.

Watch kohls.com. DNS read at the source every 5 minutes; certificate, blocklists and expiry every 6 hours. You get an email only when something changes.

Watch — $1 / 30 days