Effective immediately, Credit Karma has added https://www.creditkarma.ca/ to the scope of their public program.
The above URL does require a unique set of credentials. To request access to the new attack surface, please refer to the brief and follow the instructions provided; please allow 24 business hours to receive your credential information.
Thank you and happy hunting!
Steve @ Bugcrowd