Kohls.com

server: AkamaiGHost
content-length: 0
location: https://www.kohls.com/
expires: Tue, 20 Jan 2026 15:14:31 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Tue, 20 Jan 2026 15:14:31 GMT
vary: User-Agent
strict-transport-security: max-age=31536000 ; preload
set-cookie: _abck=A816BC86B0E63179B3A06E14B92FAE21~-1~YAAQ3mQRAvKf2NebAQAAv8H42w9Q1W9UhmDe+9o6ieqUykoiPC39OgNmbN0VWquEsE7jqWw9qmVWwJYGSgCjExCnTM0aJ3UIGp37fcVV1CZdt0sLw/LuNRKU9pajSCmTKWU7j4dWZKcBkhSbNeVraQQkic9rFCudCxA2OWoyhViFtiDKGyT/kDiZLgEq9zV62y6CWBJbbwVxKBFX4Ygdda0Bc9MCYYyFZcY9ejSC+z9pDdaz8zvaSy34cnmD9X7vIyDZL/XJVjK+NsmvhsHxJQmIk93c9RXLO5z+Wg7ZIO6/zSbILIjeMkaI6i0+iVi3I3ekzyBohbwOce0BMpse8nDN+5Roga7YGYnfF6Z/tFNyF329dEeaDhYGBHYvjMa+o9n1zMG+T9wyzMUCsXsVtfU+N6Ta4WTcsyJeGQyq/vGrgHhi9CWXgNtrfb/xGLS48rDPrqI=~-1~-1~-1~-1~-1; Domain=.kohls.com; Path=/; Expires=Wed, 20 Jan 2027 15:14:31 GMT; Max-Age=31536000; SameSite=None; Secure
set-cookie: bm_sz=59F1D708684A866B9782B1B4072F2D9F~YAAQ3mQRAvOf2NebAQAAv8H42x6I1NLELi2BaJ7QdjpyG+NFfxaKQZRuV0G6H7jWSRyUfPlGSr50m0njl/Zaa6ASdBpzqwkV1xC+shZbbFBzLZjrf8hnfGZpopdxSQ3X8NofJDsHMiUmm7dS1G3d6EXdcd0oESOr6Plc7Gch5NgPy9zmtLapMmweT6Or656ZGG4xuWKFSOlu72w47iODlTCYbIhN8NwGICWkH15+1DvwREB/U7i8S8bnqJsffry2UQP/ML/oNVM8+4AjnsBkIiZGdQsL1ZIXILpYeLQL2IktV/YA6FYL++bbxO+8+qT9lPvybg3L+F0nWP7gwty5LjjffGMYk3KL8wiQx7jJX/dHTSYziuVuT5kFFFY/+8fgmIXjMnR0Bdvv5S48hg==~3687732~3487281; Domain=.kohls.com; Path=/; Expires=Tue, 20 Jan 2026 19:14:31 GMT; Max-Age=14400; SameSite=None; Secure

HTTP/2 403 
server: AkamaiGHost
mime-version: 1.0
content-type: text/html
content-length: 365
cache-control: max-age=0
expires: Tue, 20 Jan 2026 15:14:31 GMT
date: Tue, 20 Jan 2026 15:14:31 GMT
set-cookie: AKA_GEO=DE; path=/; secure
set-cookie: AKA_STP100=89; expires=Wed, 21-Jan-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_SNB_STP=test; expires=Wed, 21-Jan-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_RV2=5; expires=Sun, 19-Jul-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_RV=34; expires=Sun, 19-Jul-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_RV3=12; expires=Sun, 19-Jul-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_RV5=19; expires=Sun, 19-Jul-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_RV4=6; expires=Sun, 19-Jul-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_RV8=17; expires=Sun, 19-Jul-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_RV6=69; expires=Sun, 19-Jul-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_CNC2=True; expires=Wed, 20-Jan-2027 15:14:31 GMT; path=/; secure
set-cookie: AKA_CBCC=True; expires=Wed, 20-Jan-2027 15:14:31 GMT; path=/; secure
set-cookie: AKA_HP2=True; expires=Wed, 20-Jan-2027 15:14:31 GMT; path=/; secure
set-cookie: AKA_PDP2=True; expires=Wed, 20-Jan-2027 15:14:31 GMT; path=/; secure
set-cookie: AKA_STP=false; expires=Wed, 20-Jan-2027 15:14:31 GMT; path=/; secure
set-cookie: AKA_CDP2=True; expires=Wed, 20-Jan-2027 15:14:31 GMT; path=/; secure
set-cookie: AKA_ACM=True; expires=Wed, 20-Jan-2027 15:14:31 GMT; path=/; secure
set-cookie: AKA_PIQ=True; expires=Wed, 20-Jan-2027 15:14:31 GMT; path=/; secure
set-cookie: AKA_PMP_YP100=12; expires=Wed, 21-Jan-2026 15:14:31 GMT; path=/; secure
set-cookie: AKA_EXP=test; expires=Wed, 21-Jan-2026 15:14:31 GMT; path=/; secure
set-cookie: ksa-app-measurement-beta=true; path=/; secure; SameSite=Lax
server-timing: cdn-cache; desc=HIT
server-timing: edge; dur=1
esi_status: ENABLED
content-security-policy: block-all-mixed-content;  script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: 	*.kohls.com *.adobedtm.com *.yahoodns.net *.cdnbasket.net lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com diagnostics.id5-sync.com *.babylist.com *.kargo.com *.cloudfront.net esm.sh *.dotomi.com *.fastclick.net *.licdn.com *.pubmatic.com *.rubiconproject.com *.doubleclick.net *.iesnare.com *.youtube.com *.fontawesome.com kohlsblog.wpengine.com *.collectivevoice.com *.flippenterprise.net *.kohlslocal.com *.media.net *.syndigo.com *.syndigo.cloud *.rewardstyle.com *.adnxs-simple.com media.adcanvas.com *.loudcrowd.com *.2mdn.net c.tvpixel.com *.3lift.com *.flashtalking.com *.ampproject.org *.scorecardresearch.com *.evgnet.com *.vovici.com *.casalemedia.com cdn.cookielaw.org app.contentsquare.com *.fohr.co cdnjs.cloudflare.com *.yahoo.com cdn.js7k.com *.doubleverify.com *.adnxs.com *.adsafeprotected.com kohls.sspinc.io *.webcollage.net *.brsrvr.com *.pinterest.com *.googleapis.com *.dynatrace.com *.snapchat.com *.go-mpulse.net *.adobedtm.com *.coherentpath.com *.igodigital.com *.bing.com *.google.com *.paypalobjects.com *.braintreegateway.com *.gstatic.com *.paypal.com *.micpn.com *.clicktale.net *.yimg.com *.liadm.com *.ads-twitter.com *.pinimg.com *.facebook.net *.tiktok.com *.vibescm.com sc-static.net *.googletagmanager.com *.google-analytics.com *.cnnx.link *.taboola.com *.impactradius-event.com *.googletagservices.com *.indexww.com *.googlesyndication.com *.bazaarvoice.com *.tagdelivery.com *.googleadservices.com *.rokt.com *.fohr.co *.recaptcha.net cadent.tv z.moatads.com *.confiant-integrations.net *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.contentsquare.net *.id5-sync.com *.adtrafficquality.google *.cnnx.link *.granify.com *.redditstatic.com *.getmetrical.com ucm-us.verint-cdn.com *.usw2.pure.cloud *.newrelic.com *.nr-data.net *.rtmpromos.com *.curalate.com; style-src 'self' 'unsafe-inline' blob: data: 	*.kohls.com *.licdn.com kohlsblog.wpengine.com cdn.honey.io *.flippenterprise.net *.fontawesome.com *.kohlslocal.com *.loudcrowd.com *.quantcount.com *.googleapis.com *.bazaarvoice.com *.getmetrical.com ucm-us.verint-cdn.com; img-src 'self' blob: data: 	*.kohls.com *.cdnwidget.com imagedelivery.net *.yahoodns.net a.wishabi.com f.wishabi.net *.cloudfront.net *.dotomi.com *.youtube.com lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com *.id5-sync.com *.fastclick.net *.adsensecustomsearchads.com *.doubleclick.net *.licdn.com *.scorecardresearch.com *.adnxs.com *.clicktale.net cdn.honey.io *.kohlsimg.com *.casalemedia.com *.yahoo.com *.fontawesome.com *.loudcrowd.com *.fbsbx.com kohlsblog.wpengine.com *.syndigo.com *.syndigo.cloud *.adcanvas.com *.googleadservices.com *.quantserve.com *.vibescm.com *.quantcount.com www.ojrq.net *.flippenterprise.net *.liadm.com *.rlcdn.com *.media.net us-u.openx.net *.rubiconproject.com *.demdex.net *.everesttech.net prodeastusmappscreative.azureedge.net *.pubmatic.com *.yimg.com *.kohlslocal.com *.gstatic.com *.doubleverify.com *.flashtalking.com *.advertising.com *.googleapis.com cdn.cookielaw.org *.fohr.co *.webcollage.net *.adsafeprotected.com *.3lift.com *.stylitics.com dpm.demdex.net *.micpn.com cm.everesttech.net *.googletagmanager.com services.postcodeanywhere.co.uk *.bing.com *.paypal.com *.google.com t.co *.twitter.com *.pinterest.com *.facebook.com *.google-analytics.com *.taboola.com *.2mdn.net *.admedia.com *.admarketplace.net *.igodigital.com trkn.us *.4cinsights.com *.bazaarvoice.com *.tagdelivery.com *.bizrate.com *.googlesyndication.com *.adxcel-ec2.com *.fohr.co cadent.tv z.moatads.com *.confiant-integrations.net *.bttrack.com *.33across.com id5-sync.com id.crwdcntrl.net match.adsrvr.org *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.contentsquare.net events.bouncex.net lh3.googleusercontent.com *.adtrafficquality.google google.com www.akamai.com s-a.innovid.com *.granify.com *.reddit.com *.getmetrical.com ucm-us.verint-cdn.com survey.vovici.com *.usw2.pure.cloud *.rtmpromos.com *.curalate.com; connect-src 'self' data: 	 *.kohls.com *.domdog.io kohls.koddi.io *.yahoodns.net lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com *.id5-sync.com *.babylist.com *.bttrack.com *.kargo.com *.cloudfront.net *.dotomi.com *.fastclick.net *.evergage.com *.casalemedia.com *.iesnare.com *.syndigo.com *.syndigo.cloud *.adeptmind.ai endpoint.dlp-webservices.prod.dlp.adeptmind.net plausible.io *.loudcrowd.com *.fontawesome.com *.flippenterprise.net *.flipp.com *.flippback.com *.ampproject.org s.update.ib.adnxs.net *.kohlslocal.com *.google-analytics.com *.flashtalking.com *.onetrust.com cdn.cookielaw.org *.fohr.co p.tvpixel.com *.tagdelivery.com *.doubleverify.com *.adnxs.com *.googleapis.com hb.emxdgt.com *.pubmatic.com *.gstatic.com *.rlcdn.com *.google.com *.yahoo.com *.facebook.com *.akstat.io *.rubiconproject.com *.3lift.com *.snapchat.com *.tiktok.com *.bing.com *.paypal.com *.techlab-cdn.com *.omtrdc.net *.go-mpulse.net *.dynatrace.com *.yimg.com *.liadm.com *.clicktale.net *.pinterest.com *.taboola.com *.braintree-api.com *.braintreegateway.com *.addressy.com dpm.demdex.net *.doubleclick.net *.googlesyndication.com *.bazaarvoice.com kohls.sjv.io *.coherentpath.com *.fohr.co *.contentsquare.net *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org d.impct.site/d *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.sharethrough.com *.media.net events.bouncex.net *.cdnwidget.com *.cdnbasket.net *.adtrafficquality.google google.com *.bizrate.com *.granify.com *.reddit.com *.redditstatic.com redditstatic.com *.getmetrical.com ucm-us.verint-cdn.com survey.vovici.com hoover.foresee.com *.xmverint.com analytics.foresee.com https://*.usw2.pure.cloud production-platform-media.s3.amazonaws.com www.googleadservices.com *.nr-data.net shyrka-prod-usw2.s3.us-west-2.amazonaws.com *.newrelic.com wss://*.usw2.pure.cloud *.rtmpromos.com *.curalate.com *.criteo.com *.pubmatic.com; frame-src 'self' data: 	survey.vovici.com lb.eu-1-id5-sync.com lb.eu-2-id5-sync.com lb.eu-3-id5-sync.com lb.eu-4-id5-sync.com lb.us-1-id5-sync.com lb.us-2-id5-sync.com diagnostics.id5-sync.com *.babylist.com *.indexww.com *.brealtime.com *.2mdn.net *.adnxs.com *.rewardstyle.com *.googletagservices.com *.collectivevoice.com *.casalemedia.com player.vimeo.com *.youtube.com *.syndigo.com *.syndigo.cloud *.bazaarvoice.com eus.rubiconproject.com *.3lift.com *.media.net *.pubmatic.com core-gp.firstinsight.com tsdtocl.com tr.snapchat.com *.rokt.com *.google.com *.liadm.com *.pinterest.com *.doubleclick.net kohls.demdex.net *.paypal.com *.facebook.com *.rlcdn.com *.googlesyndication.com *.flashtalking.com *.recaptcha.net *.33across.com id5-sync.com id.crwdcntrl.net *.adsrvr.org *.sharethrough.com *.googletagmanager.com *.adtrafficquality.google *.taboola.com *.usw2.pure.cloud *.rtmpromos.com *.curalate.com *.kohlsimg.com; worker-src 'self' blob:  	*.clicktale.net *.contentsquare.net; child-src 'self' blob:  	*.clicktale.net *.contentsquare.net *.usw2.pure.cloud *.rtmpromos.com; font-src 'self' data:  	cdn.honey.io cdnjs.cloudflare.com *.kohls.com *.syndigo.com *.bazaarvoice.com *.syndigo.cloud *.fontawesome.com *.kohlslocal.com *.gstatic.com *.paypalobjects.com *.rakuten.com ucm-us.verint-cdn.com; form-action 'self'  	*.kohls.com *.facebook.com *.bazaarvoice.com *.snapchat.com *.pinterest.com;  base-uri 'self'  	*.kohls.com;  frame-ancestors 'self';  manifest-src 'self'  	*.kohls.com *.bazaarvoice.com;  media-src 'self' blob:  	*.kohlsimg.com *.iesnare.com *.bazaarvoice.com *.loudcrowd.com *.fbsbx.com *.bing.com *.syndigo.com *.syndigo.cloud *.usw2.pure.cloud *.curalate.com;  object-src 'self' *.getamigo.io *.amigoclienttesting.io *.goodgrowth.tech *.usw2.pure.cloud *.kohlsimg.com; report-uri https://csp38.domdog.io/report-uri/a9a6fb14-365a-4648-b17b-2e47930f8b49/1/1-97/block;
x-frame-options: SAMEORIGIN
x-origin-cc: 
x-origin-ttl: Tue, 20 Jan 2026 15:14:31 GMT
set-cookie: akavpau_www=1768922371~id=5f75d1ea2618b8c98c825dfe3a26dc73; Path=/; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000 ; preload
server-timing: ak_p; desc="1768922071556_34694375_122593893_35_20962_5_8_15";dur=1