{"id":"d9a84c1d-2911-4875-abbb-696accf7c084","engagementId":"342a8f01-0fd9-447d-9001-349129a3f6fd","data":{"brief":{"id":"b820bbbf-4aee-4b38-aeb2-d3b2d53f4522","name":"REA Group | realestate.com.au, realcommercial.com.au, property.com.au","tagline":"REA Group is a digital business with more than 3,300 people working to change the way the world experiences property. With brands like realestate.com.au, realcommercial.com.au, property.com.au, and others, we provide services such as property listings and data, valuation and estimates, home financing, and more.","description":"\u003cp\u003e\u003cimg src=\"https://bugcrowd.com/engagements/rea-mbb-og/attachments/fc7d6338-303a-4c2b-94f1-0ffe234cbad2\" title=\"reagroup_logo_h_rgb.png\" alt=\"reagroup_logo_h_rgb.png\"\u003e\u003c/p\u003e\n\n\u003cp\u003eREA Group is a digital business with more than 3,300 people working to change the way the world experiences property. We use new technology and our collective global knowledge to deliver the best products and services to our customers and consumers. Our global footprint covers three continents including Australia, Asia and North America.\u003c/p\u003e\n\n\u003cp\u003eAt REA the safety and security of our customers, consumers, and wider community are of utmost importance to us. We regularly review and update our security measures to keep up with changing technologies.\u003c/p\u003e\n\n\u003cp\u003eAs such we are looking for passionate and driven researchers who are excited to join us in our pursuit of securing homebuyers, renters, and agents alike.\u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003eGood luck, and happy hunting!\u003c/em\u003e\u003c/p\u003e\n\n\u003ch2\u003eGood Behaviour\u003c/h2\u003e\n\n\u003cp\u003eOur real estate apps mean the world to our huge user base of families, individuals, real estate agents, brokers and many more.\u003cbr\u003e\nPlease conduct your research in a safe manner by following rate limits and being wary of what you submit. Please adhere to the  below instructions.\u003c/p\u003e\n\n\u003cp\u003e\u003cimg src=\"https://bugcrowd.com/engagements/rea-mbb-og/attachments/09a5b142-9856-4e34-8430-b0569b0a2599\" title=\"border.png\" alt=\"border.png\"\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eDo not interact (DNI) with any other user, including but not limited to: renters, brokers, agents, property managers, REA employees, third parties, and others.\n\n\u003cul\u003e\n\u003cli\u003eThis includes support and contact forms, and any ticketing systems.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003eDo not rapidly submit forms (e.g., Burp Intruder, automated scripts) since these can have impact on our users.\u003c/li\u003e\n\u003cli\u003eUse your Bugcrowd email when signing up.\u003c/li\u003e\n\u003cli\u003eWhen submitting forms please ensure you include \"Test\" or \"Bugcrowd\" or similar, so people know it's for testing purposes.\u003c/li\u003e\n\u003cli\u003eIf you need to test attacks against other users, please create a secondary test account.\u003c/li\u003e\n\u003cli\u003eSome sub-domains might have CNAME records to other domains, please remain in-scope and do not test products/brands which are not listed as in-scope.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cimg src=\"https://bugcrowd.com/engagements/rea-mbb-og/attachments/09a5b142-9856-4e34-8430-b0569b0a2599\" title=\"border.png\" alt=\"border.png\"\u003e\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"f7d6118f-e788-4bb7-a2a6-7078424c9d3c","targetsOverview":"\u003cp\u003e\u003cem\u003eTesting is only authorized in accordance with the scoping information above. Cloud resources which are not associated with the hostnames listed in the scoping, but are demonstrably associated with REA Group will be considered for inclusion in this bug bounty program. If you happen to identify a security vulnerability on a target that is not in scope, but it demonstrably belongs to REA Group, you can report it to our vulnerability disclosure program. However, be aware that such reports will be ineligible for rewards or points-based compensation.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eFocus Areas:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003ePII extraction (excluding agency contact details)\u003c/li\u003e\n\u003cli\u003eCorporate data extraction\u003c/li\u003e\n\u003cli\u003eAccess internal network access\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eDo Not Interact\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003ePlease DO NOT submit enquiry forms that may trigger contact with REA Group staff, real estate agents or brokers, employees and customers. For example any of our support or contact forms.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eTarget Information\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eA core function of our websites is the publishing of agent and agency contact information. These details are not sensitive and should not be considered as a security finding.\u003c/li\u003e\n\u003cli\u003eWe employ WAF and anti-bot/anti-scraping technologies across REA’s websites \n\n\u003cul\u003e\n\u003cli\u003eOur property listing data (property addresses, prices, features etc) is incredibly valuable and, whilst it is public and viewable by users, we do not permit that data to be scraped.\u003c/li\u003e\n\u003cli\u003eIf you see an “Error 429 – Too Many Requests” when accessing the website, particularly when using automated scripts or web proxies, this is an indication that our anti-bot/anti-scraping tool is blocking your client. A blank white screen (no content) is also displayed in this case and may indicate that the tool has interfered with your request.\u003c/li\u003e\n\u003cli\u003eViewing the target applications with a regular web browser should NOT trigger the WAF or the anti-bot measures. Please do not attempt to brute-force or use DoS techniques to overwhelm the WAF or anti-bot tooling, and always follow the RoE.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eCredentials\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eAll targets in scope follow a standard user registration process requiring an email address.\u003c/li\u003e\n\u003cli\u003eSSO is used to allow users to login to many of our web apps using the same email address.\u003c/li\u003e\n\u003cli\u003eTo gain access, please sign up for an account using your @bugcrowdninja.com email address. For more info regarding @bugcrowdninja email addresses, see \u003ca href=\"https://docs.bugcrowd.com/researchers/participating-in-program/your-bugcrowdninja-email-address/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehere\u003c/a\u003e \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eSubmissions that are best practice or informational without a proven impact or PoC (e.g., HTTP headers).\u003c/li\u003e\n\u003cli\u003ePlease do not submit forms that may trigger contact with REA Group staff. For example any of our support or contact forms.\u003c/li\u003e\n\u003cli\u003eSocial Engineering and any interaction with REA Group physical locations, real estate agents or brokers, employees and customers.\u003c/li\u003e\n\u003cli\u003eVolumetric brute-forcing (e.g., password spraying, credential stuffing, PIN code brute-force)\u003c/li\u003e\n\u003cli\u003ePublicly-known zero-day vulnerabilities (e.g. CVE/GHSA) will not be considered for eligibility until more than 30 days have passed since patch availability.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eExcluded Submission Types\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eMail server issues (DMARC/DKIM/SPF)\u003c/li\u003e\n\u003cli\u003eRate limiting issues (DoS/DDos, brute force, credential stuffing etc.)\u003c/li\u003e\n\u003cli\u003eCookie flags (HTTPOnly, Secure, SameSite etc.)\u003c/li\u003e\n\u003cli\u003eHTTP security headers\u003c/li\u003e\n\u003cli\u003eLong-lived session tokens\u003c/li\u003e\n\u003cli\u003eClient-facing API keys with minimal impact such as Google Maps\u003c/li\u003e\n\u003cli\u003elocalStorage/sessionStorage unless PII is clearly shown\u003c/li\u003e\n\u003cli\u003eTLS issues such as TLS version and cipher suites (except SSL)\u003c/li\u003e\n\u003cli\u003eOpen redirect in authentication/authorisation/OAuth flows (known issue we are fixing)\u003c/li\u003e\n\u003cli\u003eAbsent/Defeatable SSL Certificate Pinning (Android/iOS)\u003c/li\u003e\n\u003cli\u003eRoot/Jailbreak detection (Android/iOS)\u003c/li\u003e\n\u003cli\u003eApp Crash (Android/iOS)\u003c/li\u003e\n\u003cli\u003eScreenshots/Screen Caching Enabled (Android/iOS)\u003c/li\u003e\n\u003cli\u003eBroken social media links and other moderation issues\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eLeaked Credentials\u003c/h2\u003e\n\n\u003cp\u003eIf you happen to identify vulnerabilities involving data that has been exposed or leaked such as dark web forums or leaked credential sites. You can report it to this engagement. However, be aware that it is only eligible for points-based compensation. This policy helps maintain the highest standard of operational confidentiality, integrity, and compliance.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd support portal\u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"aeae25b0-3065-4f19-a080-a0292c871b3c","name":"REA Group - Corporate Website","targets":[{"id":"a599af0e-adba-46d9-9b18-d631ee798c39","uri":"","name":"rea-group.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"35d79e89-3455-425b-a5c0-eccfaa5c8864","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"1139c8f6-fdd3-431d-ac27-ef58fb10e000","uri":"","name":"reastatic.net","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"28c4df46-7ff6-47f8-a31f-a3ff17fbc110","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"c8cd8581-492f-40f2-b2cd-5b9405cea96f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":20000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003e\u003cstrong\u003eREA Group Corporate Website\u003c/strong\u003e\u003c/p\u003e\n\n\u003cblockquote\u003e\n\u003cp\u003eOur corporate website at \u003ca href=\"https://rea-group.com\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003erea-group.com\u003c/a\u003e provides information about our business including:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eWhat we do as a company including our history, our products and brands.\u003c/li\u003e\n\u003cli\u003eInvestor reports and stock information.\u003c/li\u003e\n\u003cli\u003eNews, media and press releases.\u003c/li\u003e\n\u003cli\u003eCareers section.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\n\u003cp\u003eFindings we\u0026#39;re interested in for this target:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAccessing blog posts before they are published publicly (e.g., accessing investor information early).\u003c/li\u003e\n\u003cli\u003eVulnerabilities relating to the careers section (not including Workday - not in scope).\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eREA Static\u003c/strong\u003e\u003c/p\u003e\n\n\u003cblockquote\u003e\n\u003cp\u003eThis domain hosts our static assets such as JavaScript files and images. \u003cbr\u003e\nDirectly accessing the website may show an error as the assets are usually hosted under subdomains. \u003cbr\u003e\nWhile navigating our other apps such as \u003ca href=\"https://www.property.com.au\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eproperty.com.au\u003c/a\u003e and \u003ca href=\"https://realcommercial.com.au\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003erealcommercial.com.au\u003c/a\u003e you may see references to \u003ca href=\"https://reastatic.net\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ereastatic.net\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\u003cp\u003eFindings we\u0026#39;re interested in for this target:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eSensitive files located amongst static files.\u003c/li\u003e\n\u003cli\u003eNon-static resources (e.g., dynamic web pages, debug/staging content).\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":50,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"c46cbaf1-5568-43eb-aa2c-4d0aa478a0df","name":"REA Group - www.realestate.com.au","targets":[{"id":"18cb3939-8837-4ab4-a2bf-8e1ae8800100","uri":"","name":"*.api.id.realestate.com.au","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"229fa41b-ae15-41b3-b65c-c24a414977e6","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"18cb3939-8837-4ab4-a2bf-8e1ae8800100"}],"recentChangeFlags":null},{"id":"647549c7-b4d9-4ad2-a950-35b365280660","uri":"","name":"*.id.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0d819e08-eeca-4b3b-89da-e3184b0a9ffe","sortOrder":1},"sortOrder":1,"tags":[{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"647549c7-b4d9-4ad2-a950-35b365280660"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"647549c7-b4d9-4ad2-a950-35b365280660"},{"id":"d866e8ba-8dcd-4711-a16d-abaccdd975ec","name":"WAF/RASP Bypass","targetId":"647549c7-b4d9-4ad2-a950-35b365280660"}],"recentChangeFlags":null},{"id":"66d226c6-6968-409c-868c-2cd964ae842d","uri":"","name":"*.accounts.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d54a7457-6ac3-4fc8-a55e-2c850b95bcfb","sortOrder":2},"sortOrder":2,"tags":[{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"66d226c6-6968-409c-868c-2cd964ae842d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"66d226c6-6968-409c-868c-2cd964ae842d"},{"id":"d866e8ba-8dcd-4711-a16d-abaccdd975ec","name":"WAF/RASP Bypass","targetId":"66d226c6-6968-409c-868c-2cd964ae842d"}],"recentChangeFlags":null},{"id":"fcb10e1f-4d25-4012-8e4f-1595965ec7fe","uri":"https://play.google.com/store/apps/details?id=au.com.realestate.app","name":"realestate.com.au Android App","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c6afcb89-be4e-4aac-84b7-3b574d41f27c","sortOrder":3},"sortOrder":3,"tags":[{"id":"c4d77d88-21a3-4a8d-81b7-555e301c483e","name":"Kotlin","targetId":"fcb10e1f-4d25-4012-8e4f-1595965ec7fe"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"fcb10e1f-4d25-4012-8e4f-1595965ec7fe"}],"recentChangeFlags":null},{"id":"d999a5e9-c687-4556-8c53-6c287e2e3126","uri":"https://apps.apple.com/au/app/realestate-com-au-property/id404667893","name":"realestate.com.au iOS App","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e01f1106-cb37-49dd-a313-80cc0de7496c","sortOrder":4},"sortOrder":4,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"d999a5e9-c687-4556-8c53-6c287e2e3126"}],"recentChangeFlags":null},{"id":"09f7230b-7d0e-4f11-ba24-be66f056a41e","uri":"","name":"*.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b77f3880-670f-4e91-b179-eeb93848da97","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"c8cd8581-492f-40f2-b2cd-5b9405cea96f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":20000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003e\u003cstrong\u003eRealestate.com.au\u003c/strong\u003e\u003c/p\u003e\n\n\u003cblockquote\u003e\n\u003cp\u003eAt realestate.com.au our purpose is to empower people by making property simple, efficient and stress free. Whether you’re just beginning your property journey or have had years of experience, realestate.com.au is the number one place for people to come together to explore, research and share their passion for Australian property.\u003c/p\u003e\n\n\u003cp\u003eWith an average of over 12 million visitors each month across web and mobile we are the leading property resource in Australia. Whether you are looking for a share house, an investment property with a great rental return or possibly even inspiration for updating that living room, realestate.com.au is here to help you make better decisions for taking your next step.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\u003cp\u003ewww.realestate.com.au is a website dedicated to Australian residential real estate. Users can search for properties to buy or lease, as well as look at properties that have already sold or been leased. By signing in with a free account, users can save properties for later and get notifications of property updates.\u003c/p\u003e\n\n\u003cp\u003eUsers cannot publish property listings for sale or lease, as this is only available to real estate agents who pay to advertise on the platform.\u003c/p\u003e\n\n\u003cp\u003eOur mobile apps offer a mobile experience using the same APIs and backend systems as our primary site www.realestate.com.au\u003c/p\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":50,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"c64ad9ee-5fba-408f-80e2-80acb1d3ebd0","name":"REA Group - Real Commercial (RCA)","targets":[{"id":"2e1ac3ab-3745-442b-90a8-4feb182425d6","uri":"https://www.realcommercial.com.au/","name":"*.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"809c96b6-fbda-4df4-963d-bc13f8f26b6d","sortOrder":1},"sortOrder":1,"tags":[{"id":"08e84ba6-1e84-4c11-b559-a3b3b963546f","name":"Akamai CDN","targetId":"2e1ac3ab-3745-442b-90a8-4feb182425d6"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"2e1ac3ab-3745-442b-90a8-4feb182425d6"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"2e1ac3ab-3745-442b-90a8-4feb182425d6"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2e1ac3ab-3745-442b-90a8-4feb182425d6"},{"id":"d2e9f7fd-1403-4a01-b5b8-fba5e0f49e37","name":"ExpressJS","targetId":"2e1ac3ab-3745-442b-90a8-4feb182425d6"},{"id":"d866e8ba-8dcd-4711-a16d-abaccdd975ec","name":"WAF/RASP Bypass","targetId":"2e1ac3ab-3745-442b-90a8-4feb182425d6"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"2e1ac3ab-3745-442b-90a8-4feb182425d6"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":{"id":"c8cd8581-492f-40f2-b2cd-5b9405cea96f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":20000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003e\u003cstrong\u003eReal Commercial (RCA)\u003c/strong\u003e\u003c/p\u003e\n\n\u003cblockquote\u003e\n\u003cp\u003eWhether you’re looking for a commercial property, researching the market or looking for a commercial agent, find it all on Australia’s favourite commercial property site.\u003cbr\u003e\nWith our foundations in property search, we also are one of Australia’s best destinations for news on the commercial property market, tips and guides to get you started, and stories of inspiring commercial property experiences.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\u003cp\u003e\u003ca href=\"https://www.realcommercial.com.au\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ewww.realcommercial.com.au\u003c/a\u003e is a website dedicated to Australian commercial real estate. Users can search for properties to buy or lease, as well as look at properties that have already sold or been leased. By signing in with a free account, users can save properties for later and get notifications of property updates.\u003c/p\u003e\n\n\u003cp\u003eUsers cannot publish property listings for sale or lease, as this is only available to real estate agents who pay to advertise on the platform.\u003c/p\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":50,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"75223b17-c383-4dea-a02a-25ff22dbd066","name":"REA Group - next.flatmates.com.au (Staging)","targets":[{"id":"0a0fbe57-2e8c-4a8e-b0f6-3dbdc4d01054","uri":"https://next.flatmates.com.au","name":"next.flatmates.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"99b797b9-f5fe-458c-acdd-0e41bf43eb4c","sortOrder":0},"sortOrder":0,"tags":[{"id":"4e9d5c53-3b04-4bca-ba30-e8e33d87019a","name":"Ruby on Rails","targetId":"0a0fbe57-2e8c-4a8e-b0f6-3dbdc4d01054"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"0a0fbe57-2e8c-4a8e-b0f6-3dbdc4d01054"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0a0fbe57-2e8c-4a8e-b0f6-3dbdc4d01054"}],"recentChangeFlags":null},{"id":"3129eafb-ba59-4066-9b90-987554bd8908","uri":"https://api-next.flatmates.com.au","name":"api-next.flatmates.com.au","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"51eb649c-dbb2-44a5-9ba7-37145cf309f3","sortOrder":1},"sortOrder":1,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"3129eafb-ba59-4066-9b90-987554bd8908"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":3,"description":null,"rewardRange":{"id":"c8cd8581-492f-40f2-b2cd-5b9405cea96f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":20000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003ch1\u003eFlatmates\u003c/h1\u003e\n\n\u003cblockquote\u003e\n\u003cp\u003eFlatmates is Australia’s No.1 share accommodation platform. Based in Melbourne, Australia, Flatmates.com.au allows people to list their spare rooms, find accommodation or team up with others to start a share house.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\u003cp\u003eWe are Australia\u0026#39;s largest share accommodation platform with a vision to create the best shared living experiences. We provide an online community where people offering accommodation can meet flatmates who are looking for a room to rent and a place to call home.\u003c/p\u003e\n\n\u003ch2\u003eStaging Environment Instructions\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003ePlease Note: This is a staging environment, read carefully!\u003c/strong\u003e\u003c/p\u003e\n\n\u003cp\u003eThe domain in-scope is \u003ccode\u003enext.flatmates.com.au\u003c/code\u003e which is the staging environment for this system. \u003cbr\u003e\nDo not test \u003ccode\u003eflatmates.com.au\u003c/code\u003e (production). \u003cbr\u003e\nIf you accidentally touch production please stop testing immediately and double check your scope settings.\u003c/p\u003e\n\n\u003ch3\u003eAccess\u003c/h3\u003e\n\n\u003cp\u003eYou must provide the following HTTP header to access the environment:\u003c/p\u003e\n\u003cdiv class=\"highlight\"\u003e\u003cpre class=\"highlight plaintext\"\u003e\u003ccode\u003ebugcrowd-id: \u0026lt;your Bugcrowd email OR user ID\u0026gt;\nflatmates-bugcrowd: E277D811-7BE0-4DC1-BDF8-C3B9394E5C69\n\u003c/code\u003e\u003c/pre\u003e\u003c/div\u003e\n\u003ch3\u003eCreating Listings\u003c/h3\u003e\n\n\u003cp\u003eIn the staging environment all listings should be auto-approved if you register an account and verify with SMS-based OTP.\u003c/p\u003e\n\n\u003cp\u003eNormally (in production) all listings are reviewed and approved before they \u0026#39;Go Live\u0026#39; so please take that into consideration before raising issues.\u003cbr\u003e\nWe have skipped that step in the staging environment to make it easier for you to test.\u003c/p\u003e\n\n\u003ch3\u003ePayment Information\u003c/h3\u003e\n\n\u003cp\u003eIf payment is required for testing please use the following test card details:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eCard Number: \u003ccode\u003e4242 4242 4242 4242\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eExpiry: \u003ccode\u003e04/26\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eCVV: \u003ccode\u003e424\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eUptime\u003c/h3\u003e\n\n\u003cp\u003eThe server has the following downtimes:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e4:00 AM to 8:00 AM AEST: Server is unavailable\u003c/li\u003e\n\u003cli\u003e4:00 AM to 9:00 AM AEST: Search results are not available\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eIf the server is not working please try again later, this is a staging environment after all!\u003c/p\u003e\n\n\u003cp\u003eAdditionally the \u003cstrong\u003etest database is wiped every night\u003c/strong\u003e so you will have to re-create accounts, listings etc.\u003c/p\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":50,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"d8bdd00b-1c9f-4fd1-a238-6016fb33c994","name":"REA Group - Property.com.au (PCA)","targets":[{"id":"d9ec4834-00a3-49be-a09d-7df8a1f14660","uri":"https://property.com.au","name":"www.property.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dbbdba1a-8989-4855-b19b-74cacbc69034","sortOrder":0},"sortOrder":0,"tags":[{"id":"187a0132-af2c-45e1-b4af-77ac6117b9dc","name":"Adobe Experience Manager","targetId":"d9ec4834-00a3-49be-a09d-7df8a1f14660"},{"id":"6f2f82a5-9ef3-4bc5-9d86-6634e03133e1","name":"Recon","targetId":"d9ec4834-00a3-49be-a09d-7df8a1f14660"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"d9ec4834-00a3-49be-a09d-7df8a1f14660"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d9ec4834-00a3-49be-a09d-7df8a1f14660"},{"id":"d866e8ba-8dcd-4711-a16d-abaccdd975ec","name":"WAF/RASP Bypass","targetId":"d9ec4834-00a3-49be-a09d-7df8a1f14660"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":4,"description":null,"rewardRange":{"id":"c8cd8581-492f-40f2-b2cd-5b9405cea96f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":20000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003e\u003cstrong\u003eProperty.com.au (PCA)\u003c/strong\u003e\u003c/p\u003e\n\n\u003cblockquote\u003e\n\u003cp\u003eProperty.com.au is on a mission to help Australians find the full picture on every property. \u003cbr\u003e\nWe leverage data from a range of publicly available sources and make it easily digestible for everyone – whether you’re renting, buying or selling for the first time, just curious about how your property is tracking, or a seasoned investor.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\u003cp\u003e\u003ca href=\"https://www.property.com.au\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ewww.property.com.au\u003c/a\u003e is a comprehensive platform for searching Australian residential real estate. Users can search and view for any property, even ones that are not currently listed for sale. Users can browse detailed property listings, view photos, read property descriptions, and access information about local areas.\u003c/p\u003e\n\n\u003cp\u003eNote that only \u003ccode\u003ewww.property.com.au\u003c/code\u003e domain is in-scope for PCA.\u003c/p\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":50,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"86ae8f71-ce51-4728-8dd3-6414b3c70f37","name":"REA Group - mortgagechoice.com.au","targets":[{"id":"996366b1-ec31-4e33-a0cf-4e92b70dc630","uri":"","name":"*.mortgagechoice.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8405da20-1ced-4912-8d64-4a45e84885df","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"58f74837-272f-46cb-a666-283d1b8414bb","uri":"","name":"*.demo.bp.mortgagechoice.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8560bc36-6812-496b-b2f4-4b1bc4698845","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"af8a51a7-8d4c-479f-9621-38823d454267","uri":"","name":"*.smartline.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"548f915d-ec28-41b9-8aac-8fffbbd8d18d","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"6cb47d4a-6bdf-4abd-959e-c4f4c83e3f32","uri":"","name":"*.mclead.com.au","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bb26bf4e-f4eb-4800-93c0-a9bb6f4f2510","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":5,"description":null,"rewardRange":{"id":"c8cd8581-492f-40f2-b2cd-5b9405cea96f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":20000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003ch1\u003eMortgage Choice\u003c/h1\u003e\n\n\u003cblockquote\u003e\n\u003cp\u003eFor 30 years, Mortgage Choice has helped Australians finance their homes, investment properties, cars and businesses by delivering a range of choices with a team of trusted experts.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\u003cp\u003eMortgage Choice is part of our family at REA Group, helping Australians navigate the home loan process with confidence. Through our network of expert brokers, we connect people with lending options that suit their needs and goals.\u003c/p\u003e\n\n\u003ch2\u003eProduction Environment Instructions\u003c/h2\u003e\n\n\u003cp\u003eWe are allowing researchers like yourself to test our production environment for Mortgage Choice but there are some caveats in addition to the out-of-scope section.\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eDo not make any bookings (\u0026quot;Book An Appointment\u0026quot;) via our Ubookr, Calendly, Acuity, Mystro, or other third-party integrations.\u003c/li\u003e\n\u003cli\u003eDo not submit any \u0026#39;Contact us\u0026#39; forms, especially to actual brokers.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003ePlease do not submit the following types of issues for this target, as they are already known issues we are actively remediating:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eBroken social media links and other moderation issues.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":50,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"fb70cfef-a4a7-4b2e-b126-ca00f2aaa23d","name":"REA Group - developersites.com.au","targets":[{"id":"9597c56d-d657-40dd-b4d7-341e86be50b7","uri":"https://www.developersites.com.au/testing-2505-lms/","name":"www.developersites.com.au/testing-2505-lms/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ae909fd4-d8a0-4644-85d5-941a6f288153","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"8dc54286-4e54-4587-9f9a-795317c0af98","uri":"https://www.developersites.com.au/testing-2505-houston/","name":"www.developersites.com.au/testing-2505-houston/","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9feaeba8-2911-4b3f-94f3-efb92c9f560d","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"4508824c-0c0b-45f5-8e01-a8c28cc05b5a","uri":"","name":"scripts.developersites.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a85c2983-28d5-4f46-83c9-81245cc99d57","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"e2ed7b01-b215-4922-bc8d-f5c7bbd83815","uri":"sftp://ftp.developersites.com.au:45875","name":"ftp.developersites.com.au","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cd44adb1-65d3-4b5b-88ed-15bee7f4b8ce","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"bed720f9-b6ce-4500-b39d-94e2fa084af1","uri":"https://agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e","name":"agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"424909b5-f4c3-47d4-abf9-deca00b21e72","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":6,"description":null,"rewardRange":{"id":"c8cd8581-492f-40f2-b2cd-5b9405cea96f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":20000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eDeveloper Sites hosts content created by the marketing team within the Developer line of business. These landing pages and campaigns are designed to collect contact details from prospective clients, and pass these along to property developers.\u003c/p\u003e\n\n\u003cp\u003eThe system handles PII, so care should be taken when any exploitation is attempted.\u003c/p\u003e\n\n\u003ch2\u003eProduction Environment Instructions\u003c/h2\u003e\n\n\u003cp\u003eWe are allowing researchers like yourself to test our production environment for DeveloperSites but there are some caveats in addition to the out-of-scope section.\u003cbr\u003e\nForm submissions \u003cem\u003eMUST\u003c/em\u003e be made from the in-scope testing URL paths so that they do not disturb paying customers (property developers).\u003c/p\u003e\n\n\u003ch3\u003eCatpure Leads API Submission\u003c/h3\u003e\n\n\u003cp\u003eThe \u003ccode\u003edata.relationships.capture-campaign.data.id\u003c/code\u003e property for the capture leads API \u003cem\u003eMUST\u003c/em\u003e be set to \u003ccode\u003eca153ac6-2f5b-4769-bd80-74b9c7f84878\u003c/code\u003e\u003c/p\u003e\n\n\u003ch3\u003eAgent Contact API Submission\u003c/h3\u003e\n\n\u003cp\u003eSubmissions \u003cem\u003eMUST\u003c/em\u003e be sent to the following URL:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003ehttps://agent-contact.realestate.com.au/lead-capture-page/campaign-id/8e50c3d0-0d2b-44d1-9df6-f4e02b9a690e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eNo other path on this hostname should be used while testing.\u003c/p\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":50,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"8b00d484-fd2d-492c-93a1-7f046991efc8","name":"Out of Scope - www.rea-group.com","targets":[{"id":"1e711018-da40-461a-8506-3b928c220ceb","uri":"","name":"*.email.rea-group.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"35f5eca6-c882-46b7-bca3-4434dac768a5","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"0bf9709e-720f-47d0-bcc4-2458f0056a5a","uri":"","name":"autodiscover.rea-group.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"15dd5796-fabe-4d66-a2b1-803be52258ad","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"c661c666-e6ac-4c88-a48c-a45e631cd7d5","uri":"","name":"garage.rea-group.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d9921be9-6238-456f-afb1-2402795329f0","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"c470baa7-acdc-4665-a230-9a813a321241","uri":"","name":"help.enterprise.rea-group.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0100b6fb-6289-402c-9aa3-4ee788730886","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"5752c371-c262-4a3d-b003-48f91af9bac2","uri":"","name":"help.rea-group.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7f162c69-aba2-4e13-b5c3-3a89ff9514b0","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"b0b49bd5-19df-4152-a6ee-2f4bc98c2976","uri":"","name":"university.rea-group.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c0dd4963-f1b4-4bf1-8f05-44d8a91ee81a","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":7,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease do not test out of scope targets as they may be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThird party vendors and SaaS products which have not consented to security testing, OR\u003c/li\u003e\n\u003cli\u003eLinks which are likely to breach the do-not-interact (DNI) clause of this programme.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"cb8b3b4c-e4e0-4ded-8e06-c5550a5f3bfe","name":"Out of Scope - www.realestate.com.au","targets":[{"id":"57eac540-b524-42c0-9dd9-7426e94d764f","uri":"","name":"analytics[.e2e].realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8b121faa-706e-445f-b9d2-f12299c5e2d6","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e649e2db-a4b9-4ee7-8360-38470e0a0817","uri":"","name":"*.realestate.com.au/homeloans","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a84d09bd-7238-474e-b2d6-375f612dba60","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"2f16fba9-2c75-44ed-8b40-49654d776774","uri":"","name":"homeloans.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"56f20440-edeb-4d10-994b-f2e408bda6ef","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"f4675f61-811e-4216-990d-c7cc0695b9c7","uri":"","name":"realestate.com.au/advice","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f4640c1f-2593-4b52-b486-6620f3ee291d","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"b9ed2d8b-0559-4a2c-b5f3-b8606e9eaaa5","uri":"https://www.realestate.com.au/insights/","name":"realestate.com.au/insights","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"521826dd-5ec4-43e7-92f0-daeb451d8441","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"10f132fd-c021-4c56-9c56-5b540f7ddbfe","uri":"","name":"realestate.com.au/lifestyle","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f0d40ba7-55e3-4483-b461-f332490938bc","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"b4bee427-19ad-4b80-83ff-c56afc143aa0","uri":"https://www.realestate.com.au/advice/","name":"realestate.com.au/news","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fae9c263-fe26-4948-af20-5c76b74b2c0b","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null},{"id":"276e5eed-449d-4473-8127-430a1a0c7a33","uri":"","name":"realestate.com.au/podcasts","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2f3633d5-b720-4c0e-a0d9-6e3fd94837af","sortOrder":7},"sortOrder":7,"tags":null,"recentChangeFlags":null},{"id":"dc74ee3e-efb4-4631-83fc-6c5d887860f9","uri":"","name":"sasinator.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b5508b87-3e9b-477f-9263-a8eecf48fd86","sortOrder":8},"sortOrder":8,"tags":null,"recentChangeFlags":null},{"id":"9b6b96e2-235d-49c1-a13e-b0ac1f797a82","uri":"","name":"smetrics.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"164d72f5-40b2-4936-a066-3b0659d8f636","sortOrder":9},"sortOrder":9,"tags":null,"recentChangeFlags":null},{"id":"42e90104-b134-435a-8eb5-af14afc965e0","uri":"https://video.realestate.com.au/","name":"video.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0863a1d2-ef10-4dcf-b4e2-d2eb7cda08a1","sortOrder":10},"sortOrder":10,"tags":null,"recentChangeFlags":null},{"id":"405ca8b1-3055-4bee-afbf-6c8fbb2b39be","uri":"https://help.realestate.com.au","name":"help.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c98a6d10-cb44-4f81-81d5-98ea8185a9e5","sortOrder":11},"sortOrder":11,"tags":null,"recentChangeFlags":null},{"id":"9e430c11-4ed4-4907-9289-05fa4519217c","uri":"","name":"*.propertypanel.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d35395ea-25a0-47c6-968d-3e479226aa33","sortOrder":12},"sortOrder":12,"tags":null,"recentChangeFlags":null},{"id":"d86aab6f-f19b-47da-a73b-2e16f1a48178","uri":"","name":"realtair-sell.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7ed04b13-ed7e-4ea0-a494-fab7bb98f6bb","sortOrder":13},"sortOrder":13,"tags":null,"recentChangeFlags":null},{"id":"46a1b6c2-d26a-42e3-81fe-bf4746343520","uri":"","name":"realtair-buy.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5b0e6645-6945-46b8-ba38-4e08f26e5b6c","sortOrder":14},"sortOrder":14,"tags":null,"recentChangeFlags":null},{"id":"7c7a1504-a899-4a7b-9851-4e9845b47335","uri":"","name":"*.realtair.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"40c15b98-613d-4b93-938a-8d4b471914bb","sortOrder":15},"sortOrder":15,"tags":null,"recentChangeFlags":null},{"id":"882adcce-a6bc-4419-a9d2-10fbc91ae956","uri":"https://adslot.realestate.com.au","name":"adslot.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b283cdbb-8855-4dd3-a6ac-25c3cb84e1b2","sortOrder":16},"sortOrder":16,"tags":null,"recentChangeFlags":null},{"id":"7c249fbb-e77c-4585-9299-fa7a75052b02","uri":"https://everest.realestate.com.au","name":"everest.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f30e5037-aa0b-4929-b228-1eb114882e99","sortOrder":17},"sortOrder":17,"tags":null,"recentChangeFlags":null},{"id":"503b35a7-2267-43ce-aee6-0e378261eab9","uri":"http://images.media-comms.realestate.com.au","name":"images.media-comms.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"381c1446-4ac6-445e-b442-7ed5f9a84c9f","sortOrder":18},"sortOrder":18,"tags":null,"recentChangeFlags":null},{"id":"74ad847d-1373-47dd-bc53-a277bbd36da8","uri":"https://images.mediateam.realestate.com.au","name":"images.mediateam.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5b0cc117-e9d2-4109-93c3-e8f04177e835","sortOrder":19},"sortOrder":19,"tags":null,"recentChangeFlags":null},{"id":"e3900cb1-91dc-4ed6-a6ed-30d153f4f151","uri":"https://metrics.realestate.com.au","name":"metrics.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"62c9fc20-801d-4dfa-985e-bb359fccf7d4","sortOrder":20},"sortOrder":20,"tags":null,"recentChangeFlags":null},{"id":"7286bf94-87be-4696-83e6-50aa86a802dd","uri":"https://stg-api.realtair.gateway.ignite.realestate.com.au","name":"stg-api.realtair.gateway.ignite.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e12c1edc-f77a-4d74-95e0-68195200c22f","sortOrder":21},"sortOrder":21,"tags":null,"recentChangeFlags":null},{"id":"7514e9cf-d678-40e5-a4bc-311faee82cf3","uri":"https://support.realestate.com.au","name":"support.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"71c46448-beb2-4237-9358-a90ad8457f98","sortOrder":22},"sortOrder":22,"tags":null,"recentChangeFlags":null},{"id":"30472fd3-a258-47c0-b256-1d8fbce67d09","uri":"https://stg-pitch.realtair.gateway.ignite.realestate.com.au","name":"stg-pitch.realtair.gateway.ignite.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"21eeedac-e512-4677-8951-2b6857787982","sortOrder":23},"sortOrder":23,"tags":null,"recentChangeFlags":null},{"id":"a3a65924-1985-4cb7-9be1-dfc979b4ab11","uri":"https://tags.realestate.com.au","name":"tags.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cb38ef66-8244-4548-a0fb-6de1f6702d04","sortOrder":24},"sortOrder":24,"tags":null,"recentChangeFlags":null},{"id":"c3f798c1-ce18-43d2-bfff-2fc2f8a43409","uri":"https://api.leads.developersites.devlob-staging.realestate.com.au","name":"api.leads.developersites.devlob-staging.realestate.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"53e099ae-54fa-46b3-b661-77cc6b05a856","sortOrder":25},"sortOrder":25,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":8,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease do not test out of scope targets as they may be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThird party vendors and SaaS products which have not consented to security testing, OR\u003c/li\u003e\n\u003cli\u003eLinks which are likely to breach the do-not-interact (DNI) clause of this programme.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"6da59e93-c3f0-43f0-bcaa-d30b3a738f1f","name":"Out of Scope - Real Commercial (RCA)","targets":[{"id":"709e14ce-6130-40ff-ac87-064c02ca59ea","uri":"","name":"*.agent.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3b17a3af-b4ef-4a58-97bd-db7db131b2da","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"f2c8f843-faa3-4bcb-b4f2-e691ab9e66e7","uri":"","name":"*.email.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8ed6ff14-d293-4e4e-88b7-775be7a31ccb","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"03c984b2-92d8-447f-949b-e893a262eb0f","uri":"","name":"abmail.campaign.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"476f59ec-bcbd-4eb3-a127-337b8655d383","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"ca2acb3e-3913-400a-a563-b832c4681dd3","uri":"","name":"autodiscover.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"535403d3-8134-4505-8632-d935b2ea9c77","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"2ff26b37-18eb-4947-b360-9eeea09439a1","uri":"","name":"metrics.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5ec9f529-4bb8-42e1-9346-f9bd96dd865b","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"a4b12046-f839-4e2c-ad46-c3f447835f0c","uri":"","name":"propertypanelcontent.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b7d31a40-58d0-4b0c-9c68-62a1b52ccac6","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"52ad5daa-69d4-4cf5-9b66-82103aea08e3","uri":"","name":"realcommercial.com.au/building/enquiry","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1d01fa06-9596-4e42-8b7e-b505d18c26b4","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null},{"id":"2ea7f62e-d9a5-47fb-943d-e0027f49bfdf","uri":"","name":"realcommercial.com.au/contact-agency-commercial/*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ffe71879-fa78-4b92-923e-fe25f2a9eae7","sortOrder":7},"sortOrder":7,"tags":null,"recentChangeFlags":null},{"id":"ff8b7d7b-8256-467f-99fe-7fddeed10a6d","uri":"","name":"realcommercial.com.au/listing-ui/enquiry","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e0bcd4d8-cb81-4faa-a651-9bec8e83b600","sortOrder":8},"sortOrder":8,"tags":null,"recentChangeFlags":null},{"id":"843c6ee9-2ae5-40f6-8321-5c4c2e37a32e","uri":"","name":"realcommercial.com.au/mobile/enquiries/*/*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6f9acced-a821-4617-a3c3-0a993400e099","sortOrder":9},"sortOrder":9,"tags":null,"recentChangeFlags":null},{"id":"11975ebb-808d-47ef-93da-3c8bd24709ad","uri":"","name":"research.surveys.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7b5f4bfc-6f23-4085-a8ad-6ae0d2b58f92","sortOrder":10},"sortOrder":10,"tags":null,"recentChangeFlags":null},{"id":"83c78c2c-09ce-476e-939b-f530b8c2b672","uri":"","name":"smetrics.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"db7b18f3-640c-4063-a7ce-1080e9c73c21","sortOrder":11},"sortOrder":11,"tags":null,"recentChangeFlags":null},{"id":"64f2c238-5bf4-44d0-8eaf-5dd25b97b485","uri":"","name":"support.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9f77f868-2ae5-4cda-ae9f-36e2cd49ef36","sortOrder":12},"sortOrder":12,"tags":null,"recentChangeFlags":null},{"id":"202ffbe4-7f74-4f23-ab86-0f1f1624c5d3","uri":"","name":"propertypanel.realcommercial.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ffe5a268-e99b-4f84-bed6-4b55e2304edd","sortOrder":13},"sortOrder":13,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":9,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease do not test out of scope targets as they may be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThird party vendors and SaaS products which have not consented to security testing, OR\u003c/li\u003e\n\u003cli\u003eLinks which are likely to breach the do-not-interact (DNI) clause of this programme.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"bf9f8aa5-ffb9-40e9-9327-69cc0828d104","name":"Out of Scope - Property.com.au (PCA)","targets":[{"id":"e61be8e0-f11c-4f4b-bbb7-736db82b3f44","uri":"","name":"autodiscover.property.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0ac18e5b-bea9-413d-9a60-b60cb5292dc5","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"713331dc-3aa0-4c65-bd3e-2b713aa6c673","uri":"","name":"email.property.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a88befe1-2858-4ded-800a-f31cae99a9ba","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"bcd71360-13dd-4999-b920-b83bc5b9dac8","uri":"","name":"help.property.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ef83e1bb-0832-4508-bbaf-85125493fe6e","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"ad330996-004e-40b8-9321-8b0a1f9c3c14","uri":"","name":"info.property.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"30fabad5-d02d-4d0c-bed8-627862b4d485","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":10,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease do not test out of scope targets as they may be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThird party vendors and SaaS products which have not consented to security testing, OR\u003c/li\u003e\n\u003cli\u003eLinks which are likely to breach the do-not-interact (DNI) clause of this programme.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"d2c77ef2-2a2d-4a49-876a-ae7130c25682","name":"Out of Scope - Other REA brands","targets":[{"id":"117a3141-8d7a-4f5b-b982-8dbf8bb27370","uri":"","name":"*.realtair.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"215c5bd4-843a-41f7-a19e-65fa2c54e09d","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"8d013746-722e-49f8-9c51-03cc5bc9c4d8","uri":"","name":"*.campaignagent.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b5471726-08bc-404b-8eb9-729dd8879b05","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"30eb03b4-8799-4ca2-9b35-bb1536254b1c","uri":"","name":"*.simpology.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3692f724-e65b-41b1-98d4-3072e756d81a","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null},{"id":"43c0e454-ed24-4791-a3ff-f709527fc52d","uri":"","name":"*.athena.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6b8a7f3e-81d1-4dc1-b79b-205e1d0c1632","sortOrder":7},"sortOrder":7,"tags":null,"recentChangeFlags":null},{"id":"429ffc6c-618a-42ce-a931-aaea60b71784","uri":"","name":"*.housing.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"15373ee3-f8fe-4e4f-a5e7-546ae1688e9c","sortOrder":8},"sortOrder":8,"tags":null,"recentChangeFlags":null},{"id":"51beacb3-d5f1-4df6-a1ce-9fba5f9af6b6","uri":"","name":"*.proptiger.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"668be49b-e576-413f-9881-d68cd8850e90","sortOrder":9},"sortOrder":9,"tags":null,"recentChangeFlags":null},{"id":"0283a6f1-073c-4d8d-b32e-1f0a458e2ed0","uri":"","name":"*.makaan.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dec166b7-6b60-4055-a27f-2b1a3c369790","sortOrder":10},"sortOrder":10,"tags":null,"recentChangeFlags":null},{"id":"c00107e5-c675-43d7-b98a-e03643ffaed1","uri":"","name":"*.easiloan.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"08346fc3-2961-45b0-a699-365f2a4c85b9","sortOrder":11},"sortOrder":11,"tags":null,"recentChangeFlags":null},{"id":"57422b96-eca7-4def-b438-0fae2cb81eeb","uri":"","name":"*.realtor.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6446a88c-3860-4c3c-9811-ee3217c243b2","sortOrder":12},"sortOrder":12,"tags":null,"recentChangeFlags":null},{"id":"d10acdf7-6bcf-477b-af63-584573f8f3cc","uri":"","name":"*.spacely.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"828da81f-b752-487e-87c4-593686fa715a","sortOrder":13},"sortOrder":13,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":11,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThese are other brands owned by REA, though are not currently in scope of our Bug Bounty program.\u003c/p\u003e\n\n\u003cp\u003eAny submissions against these targets will not be accepted, even if they are reachable via an in-scope target. \u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"cb56526c-a7f2-4963-8128-c999e7e1adf7","name":"Out of Scope - Flatmates (Staging)","targets":[{"id":"0bcfe455-9eb6-4aec-8f62-cf349bc8bead","uri":"","name":"*.flatmates.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fdcc92c1-1b2e-4422-83a9-b63bd1d8a933","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"9223e5d1-5e72-4fbb-8e4c-9055ea33b4f5","uri":"https://www.flatmates.com.au","name":"www.flatmates.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"98ea6e76-d822-4f6f-8d20-6dd1cec209d7","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"94d4d220-5ac6-409a-925a-9501cbc294ae","uri":"https://api.flatmates.com.au","name":"api.flatmates.com.au","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"240e1a21-ef14-4e4e-8b97-7006ee6ddf55","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"2d39f75d-47f9-4c18-ae78-ff0b56821aea","uri":"https://flatmates-experience-api.flatmates.com.au","name":"flatmates-experience-api.flatmates.com.au","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"286a0885-65ae-48cf-9a08-3bdc663fda1a","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"aac94f02-2043-4951-8920-e8f931126a22","uri":"https://help.flatmates.com.au","name":"help.flatmates.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8f4afe88-e1a3-4931-bbb8-4f2df8252c60","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"f213a280-89d3-43b0-9b1d-1bcf42a8b61f","uri":"","name":"email.flatmates.com.au","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"71389864-2d79-4393-bf25-19d728b51836","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"06579dfc-fdbd-46cd-b544-002415530940","uri":"https://sasinator.flatmates.com.au","name":"sasinator.flatmates.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"aac1e284-11f4-4829-b4fd-243333427a9c","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":12,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease do not test out of scope targets as they may be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThird party vendors and SaaS products which have not consented to security testing, OR\u003c/li\u003e\n\u003cli\u003eLinks which are likely to breach the do-not-interact (DNI) clause of this programme.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"4cf18e79-3ba9-4331-bc04-e07fd6b3e024","name":"Out of Scope - Mortgage Choice","targets":[{"id":"bbe39502-ea2d-4eae-b4a2-e3897c29cafc","uri":"","name":"*.lendingtoolkit.mortgagechoice.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2467dfbf-d981-404a-befd-5da3a8d0f81d","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"a0497161-a671-4ce1-a15a-012ce94691c7","uri":"","name":"*.apps.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b21d7f07-73a5-4cec-bcf2-9bcc4878458f","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"bd75aad8-d7a4-4bd1-a06a-47974dca3cdf","uri":"","name":"*.bp.mortgagechoice.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"10a06ccb-1541-40e3-bd1b-c49606d43b09","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"5db8321f-cd8e-4565-9cef-ff5b186bc633","uri":"","name":"*.bpm.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"08eaded6-a8b1-498f-aa3d-d027b3265f4f","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"cd6fc8c9-cfa2-465d-9482-5b194e47d5d8","uri":"","name":"*myhub*.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0923d03b-f425-4635-b288-5d2c76e9e829","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"f78f5753-28f4-4e94-b632-9088fe5f2f78","uri":"","name":"*.primeuat.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"92e56475-c5fd-4a09-aba1-d70810fd38eb","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"77ffb6b4-e55a-4576-acdc-9af1a05ce840","uri":"","name":"*.prime.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b9f77814-34c7-47d3-aa7a-023eac5a13f6","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null},{"id":"56e37598-fdb4-4477-b6c3-e764aaa00cc4","uri":"","name":"awverify.*.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0d4e537b-c252-4cdb-a511-0698be525d01","sortOrder":7},"sortOrder":7,"tags":null,"recentChangeFlags":null},{"id":"c89d348e-80b8-4950-b7cd-c90ffd2e1695","uri":"","name":"zendesk*.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d60a968c-a579-471e-82fe-9cf094caea1b","sortOrder":8},"sortOrder":8,"tags":null,"recentChangeFlags":null},{"id":"c10c2bb0-0d63-4443-95ae-4c73ad8d2f50","uri":"","name":"links-*.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ff7057c7-4535-4673-8a70-777981230619","sortOrder":9},"sortOrder":9,"tags":null,"recentChangeFlags":null},{"id":"dfe1fb77-652a-47de-90e1-f636f6b6729e","uri":"","name":"web-*.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"88582ff6-6341-4147-b5a5-7e9e2c872294","sortOrder":10},"sortOrder":10,"tags":null,"recentChangeFlags":null},{"id":"2725f350-b8c3-4d8f-8ddf-791dcb6d5fe9","uri":"","name":"autodiscover.mortgagechoice.net.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"73e49f2f-61a7-4378-846b-ac2d0671e77f","sortOrder":11},"sortOrder":11,"tags":null,"recentChangeFlags":null},{"id":"65ef14c3-b881-4fd2-afef-0304f73c8db2","uri":"","name":"bh5po56arjfv.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ccabb484-95d7-4522-8ac2-b7b70cd46fa3","sortOrder":12},"sortOrder":12,"tags":null,"recentChangeFlags":null},{"id":"e659c161-0a5e-48a5-a4ba-2f84495020ea","uri":"","name":"broker.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3e6fbb55-34c8-43b7-915a-f0fdd2e2f8b2","sortOrder":13},"sortOrder":13,"tags":null,"recentChangeFlags":null},{"id":"6b15d1fb-b083-43e7-a6b5-3f53acb3bab2","uri":"","name":"calendar.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a0abd3c8-c405-442b-964f-51a41a0774ef","sortOrder":14},"sortOrder":14,"tags":null,"recentChangeFlags":null},{"id":"7cbbc8b6-65f3-4799-a60d-ec49fa537f77","uri":"","name":"cpt.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"14522bcc-c5c5-4ad3-a161-ea7a3dafb699","sortOrder":15},"sortOrder":15,"tags":null,"recentChangeFlags":null},{"id":"70976789-3454-4d3d-b024-74db66fc539e","uri":"","name":"dashboard.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0e9acad7-f303-435e-8dcb-b67fabf06999","sortOrder":16},"sortOrder":16,"tags":null,"recentChangeFlags":null},{"id":"eb48120f-2cdf-4f14-9be5-77796743a8d6","uri":"","name":"docs.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a15589fc-6509-477b-bdb9-935886225bd1","sortOrder":17},"sortOrder":17,"tags":null,"recentChangeFlags":null},{"id":"75c8f654-b68b-430e-b740-123b8712c16c","uri":"","name":"documents.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"28c2ea80-e4ab-48db-8a16-6e7645074353","sortOrder":18},"sortOrder":18,"tags":null,"recentChangeFlags":null},{"id":"b4ac4e40-a4a3-44af-b558-1e37b141f206","uri":"","name":"ecomply.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e081d779-91c8-4eef-b708-81ff654fd00d","sortOrder":19},"sortOrder":19,"tags":null,"recentChangeFlags":null},{"id":"2afd87d0-fea2-4843-9624-5ab056e5de46","uri":"","name":"elink.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bb457b80-a2cd-4b8b-90f8-9c36b324c98d","sortOrder":20},"sortOrder":20,"tags":null,"recentChangeFlags":null},{"id":"8f880357-d210-4c48-b4ea-4600166e6823","uri":"","name":"enterpriseenrollment.mortgagechoice.net.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"63d58320-84ac-4e7a-b780-c607ee72f68e","sortOrder":21},"sortOrder":21,"tags":null,"recentChangeFlags":null},{"id":"2b3692ed-91d5-4e52-b752-c7b4c250d72f","uri":"","name":"enterpriseregistration.mortgagechoice.net.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"117e66e6-2d0f-40ee-92b7-1453ae76343a","sortOrder":22},"sortOrder":22,"tags":null,"recentChangeFlags":null},{"id":"ad82483e-a999-4e1d-8d1f-6a2351576845","uri":"","name":"fil.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6ca51a0f-ff3b-4f4a-a7d0-5ff228ac239d","sortOrder":23},"sortOrder":23,"tags":null,"recentChangeFlags":null},{"id":"d165ce46-65f0-4c07-aa9d-a8414dfb9947","uri":"","name":"go.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"60a74a3f-6554-4ab9-bfa6-ddb4a58d72b1","sortOrder":24},"sortOrder":24,"tags":null,"recentChangeFlags":null},{"id":"bf0a8184-cca1-4347-b629-111a548de389","uri":"","name":"groups.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"15d3d25d-774c-4285-b3a8-c1bcef7d3b67","sortOrder":25},"sortOrder":25,"tags":null,"recentChangeFlags":null},{"id":"012b2857-f4f8-458a-8cde-318b229cee16","uri":"","name":"hbvuanp6xgfw.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5ea4371d-d786-4b0c-8920-5a0431e6de4a","sortOrder":26},"sortOrder":26,"tags":null,"recentChangeFlags":null},{"id":"6155e699-4c3b-4554-8aca-136f5fc3aa23","uri":"","name":"home.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"363dcd21-a08d-4a81-82eb-f1b5a539be89","sortOrder":27},"sortOrder":27,"tags":null,"recentChangeFlags":null},{"id":"7b17b3a8-e6b1-4c1a-9c8b-fb3eb884dfdc","uri":"","name":"info.lp.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7d584373-3bc1-4a54-be9c-2288a22e5cd3","sortOrder":28},"sortOrder":28,"tags":null,"recentChangeFlags":null},{"id":"295f17a8-62c0-48f3-a41e-3bccb4ea0e44","uri":"","name":"learn.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4060e107-9620-4cdf-9a92-b72cb31b2a95","sortOrder":29},"sortOrder":29,"tags":null,"recentChangeFlags":null},{"id":"525f2a77-2923-46cd-a803-ca6ecbea2c9d","uri":"","name":"lyncdiscover.mortgagechoice.net.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"50451468-5409-4810-b284-290761e29fea","sortOrder":30},"sortOrder":30,"tags":null,"recentChangeFlags":null},{"id":"d8cde341-15bd-4cd8-9e94-307044950442","uri":"","name":"mail.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ea76a3c8-873e-4319-b280-ae2335df95e8","sortOrder":31},"sortOrder":31,"tags":null,"recentChangeFlags":null},{"id":"f31fc12f-8b7b-4945-ac9e-3fc8a3282a80","uri":"","name":"mcmoneytrack.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"775b81a9-4b11-4428-bd9e-27e0dea86b0b","sortOrder":32},"sortOrder":32,"tags":null,"recentChangeFlags":null},{"id":"718c5aa7-b8a6-49a5-a8ce-a535bbebc905","uri":"","name":"msoid.mortgagechoice.net.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5ca8caeb-bfdd-4f2d-a4a3-23e0b768ed8a","sortOrder":33},"sortOrder":33,"tags":null,"recentChangeFlags":null},{"id":"08824145-9a60-4da5-9564-c868ebbd404d","uri":"","name":"one.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cf4df0dd-5bee-4f07-8377-f8cb1317cbd6","sortOrder":34},"sortOrder":34,"tags":null,"recentChangeFlags":null},{"id":"9d896cee-958e-46b1-b6c4-f5ae9ddc78fc","uri":"","name":"project-*.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"187cdfb1-98d3-49f8-b847-42bebcc91d82","sortOrder":35},"sortOrder":35,"tags":null,"recentChangeFlags":null},{"id":"b8a6ba8a-5d28-4a3d-a0f9-bea1eb88b922","uri":"","name":"questions.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"72bd3a75-911c-4751-ae00-ed6fdfdc6c40","sortOrder":36},"sortOrder":36,"tags":null,"recentChangeFlags":null},{"id":"3b88bb99-eea8-42ca-9926-7f46d7578b10","uri":"","name":"servicefo.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ec86ae79-cfce-4726-97ce-96056d7089e5","sortOrder":37},"sortOrder":37,"tags":null,"recentChangeFlags":null},{"id":"d0aff69b-e59c-465a-bf6a-755d056853f2","uri":"","name":"servicemorfo.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4909c143-6f93-4ae5-92d8-f375318bda44","sortOrder":38},"sortOrder":38,"tags":null,"recentChangeFlags":null},{"id":"344ac68a-5cef-47ba-be5c-d9f5fb34c1fd","uri":"","name":"services.mortgagechoice.com.au/Services/NextGenIntegrator/*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1e5d2372-9aa0-4dce-8fb7-ba4e31810812","sortOrder":39},"sortOrder":39,"tags":null,"recentChangeFlags":null},{"id":"f3d9cc76-0c21-476d-981d-c8637d860849","uri":"","name":"sip.mortgagechoice.net.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"42b18a9f-59a3-4170-bb3f-fa04601667e3","sortOrder":40},"sortOrder":40,"tags":null,"recentChangeFlags":null},{"id":"becb7327-c3b4-4fa3-8d1d-80c587df4cd2","uri":"","name":"sites.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3a5be6a4-5c0d-4880-b79a-b122a3bc24d4","sortOrder":41},"sortOrder":41,"tags":null,"recentChangeFlags":null},{"id":"92544f34-a7c5-4f45-bf69-7ebbde93b2d7","uri":"","name":"slxtest.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4e2fe4f7-92c6-48f9-8ec1-e017fb7bf855","sortOrder":42},"sortOrder":42,"tags":null,"recentChangeFlags":null},{"id":"e26327df-71b6-4a9b-91fc-7536e779184c","uri":"","name":"sta.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e3f2268e-2bce-4dbd-8dcd-4ed5b7a49034","sortOrder":43},"sortOrder":43,"tags":null,"recentChangeFlags":null},{"id":"9c2ee294-4c75-48ed-8f8a-c2f6bd918b47","uri":"","name":"trackinsight.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"76c9217e-3a90-42fe-8984-461e56c97d66","sortOrder":44},"sortOrder":44,"tags":null,"recentChangeFlags":null},{"id":"c8feb03d-dedb-4b24-9478-f7c3b52e89f7","uri":"","name":"video.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dc8b0518-94a6-46fd-a3d2-4ae8936d4bc5","sortOrder":45},"sortOrder":45,"tags":null,"recentChangeFlags":null},{"id":"9129060f-4492-4184-aab2-1b0f781c43a9","uri":"","name":"wave.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"aa402cc8-8657-47df-94ea-ee5eb502b84a","sortOrder":46},"sortOrder":46,"tags":null,"recentChangeFlags":null},{"id":"40fe9449-8aa4-4ee6-be7d-67a307ef85c7","uri":"","name":"zac80040032.mortgagechoice.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"52c8309a-ef74-46ae-af3a-32144d0a0da8","sortOrder":47},"sortOrder":47,"tags":null,"recentChangeFlags":null},{"id":"37dbe0a0-c916-46c8-b9c9-dfaf674ce84c","uri":"","name":"em1997.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"93e58583-c3a7-4bb5-a1c7-6134bac004ce","sortOrder":48},"sortOrder":48,"tags":null,"recentChangeFlags":null},{"id":"b926a9a4-f25d-4ac1-975e-e6e8966a2b00","uri":"","name":"em398464.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cd95efaf-6024-429e-9f07-aa547a667a2b","sortOrder":49},"sortOrder":49,"tags":null,"recentChangeFlags":null},{"id":"7bea0012-f975-4675-a2db-d3412ba6fa5f","uri":"","name":"em8918.mortgagechoice.com.au","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6c8ee56b-007b-4687-b62d-69b85806deda","sortOrder":50},"sortOrder":50,"tags":null,"recentChangeFlags":null},{"id":"73a50372-e0e2-478b-b0ef-e6dbebbc1bb9","uri":"","name":"cloudhq.mortgagechoice.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3b0ec0bb-9e69-4160-84c1-e3bdaeaae216","sortOrder":51},"sortOrder":51,"tags":null,"recentChangeFlags":null},{"id":"7d538b7d-a311-4252-88f4-f2ef6dff5729","uri":"","name":"cloudhqforms.mortgagechoice.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7c42adff-f9f9-451b-9633-1b2cedea5546","sortOrder":52},"sortOrder":52,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":13,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease do not test out of scope targets as they may be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThird party vendors and SaaS products which have not consented to security testing, OR\u003c/li\u003e\n\u003cli\u003eLinks which are likely to breach the do-not-interact (DNI) clause of this programme.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"bc81a06c-f7c7-49a4-a2f3-a3fa48eb8f28","name":"Out of Scope - Developer Sites","targets":[{"id":"45be2084-a50d-47a0-9dfc-d277d827d786","uri":"","name":"*.leads.developersites.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cd6ef3a1-54be-4f8c-bd9e-2cfa2b98dc22","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"1437009f-29e6-47f6-9b03-53b0749649af","uri":"","name":"www.developersites.com.au/*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5a799104-e656-439b-945b-359adc42145e","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":14,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease do not test out of scope targets as they may be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThird party vendors and SaaS products which have not consented to security testing, OR\u003c/li\u003e\n\u003cli\u003eLinks which are likely to breach the do-not-interact (DNI) clause of this programme.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"a13ff3e6-8504-44dd-b848-ea70a036bae7","name":"REA Group - Proptrack.com.au","targets":[{"id":"e1059a31-086b-47e2-8377-e9fed8dc172b","uri":"https://*.report.uat.proptrack.com","name":"https://*.report.uat.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0bf68545-11b3-477e-acb8-7bad80876fa2","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"dd7ac5d8-9f47-4df2-91dc-8342363d9f4b","uri":"https://access-sit.uat.proptrack.com","name":"access-sit.uat.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6507b5dc-0645-4b4d-bb53-bddae1234581","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"26d1b2c5-da99-4341-9939-a8cbe934d943","uri":"https://desktop-sit.uat.proptrack.com","name":"desktop-sit.uat.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0f1203d0-a9b8-4139-ace0-41ed5ba19b9f","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"d0510dbe-8cf8-4f35-a1c9-68aa7d649f33","uri":"https://explore-sit.uat.proptrack.com","name":"explore-sit.uat.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5c1d4903-edf6-45ac-a624-bd29ceeb92ad","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"b9f3eb27-4ab0-49f6-993d-1265050327c0","uri":"https://one-sit.uat.proptrack.com/","name":"one-sit.uat.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"56d55f85-74bf-402d-90ad-525ff79c2052","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"d4c41d83-fc6e-4761-a25d-57989f8d78ad","uri":"https://portfolio-manager-sit.uat.proptrack.com/","name":"https://portfolio-manager-sit.uat.proptrack.com/ ","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c9a753c9-2be4-4ebd-a133-411b34fd7681","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"5b2254db-8b45-4a02-ae86-658485b6845d","uri":"https://valuations-sit.uat.proptrack.com","name":"https://valuations-sit.uat.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9a620263-42d5-47bb-b942-92960cd54895","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null},{"id":"d44c0bd3-e0cb-47c1-82ce-cf66bf2a7590","uri":"https://www.proptrack.com","name":"www.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"27b262a8-2222-4d98-b45c-036836bd6789","sortOrder":7},"sortOrder":7,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"d44c0bd3-e0cb-47c1-82ce-cf66bf2a7590"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"d44c0bd3-e0cb-47c1-82ce-cf66bf2a7590"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d44c0bd3-e0cb-47c1-82ce-cf66bf2a7590"}],"recentChangeFlags":null},{"id":"70fd2f8e-3abe-49d0-8fb3-68b04a8dc08c","uri":"https://www.proptrack.com.au","name":"www.proptrack.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f933217a-b906-42ac-917c-f9255029b7ad","sortOrder":8},"sortOrder":8,"tags":[{"id":"487e9af0-2610-4813-a092-ea46f4cb6de1","name":"Wordpress","targetId":"70fd2f8e-3abe-49d0-8fb3-68b04a8dc08c"},{"id":"7ff6bfde-4352-4ff1-b376-565d898c283f","name":"nginx","targetId":"70fd2f8e-3abe-49d0-8fb3-68b04a8dc08c"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"70fd2f8e-3abe-49d0-8fb3-68b04a8dc08c"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":15,"description":null,"rewardRange":{"id":"c8cd8581-492f-40f2-b2cd-5b9405cea96f","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":20000,"p4MinCents":5000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cblockquote\u003e\n\u003cp\u003eAt PropTrack, our purpose is to help businesses make better property decisions through trusted data, digital valuation solutions and predictive analytics. PropTrack provides cloud-based valuation platforms, digital assessment tools and property data access for customers across banking, mortgage broking, valuations, government, telecommunications and utilities.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\u003cp\u003ePropTrack is used by organisations that need fast, reliable property information and workflows across the property lifecycle, including customer acquisition, valuation ordering, digital assessment and portfolio management. Customers use PropTrack to order and manage valuations, access property reports and data, understand local market activity, and support lending, planning, retention and operational decisions.\u003c/p\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":50,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"1cae68db-77dd-43c1-ba90-a8b7c66e2226","name":"Out of Scope - proptrack.com.au","targets":[{"id":"fc0940e1-f338-4599-9407-d51b94737179","uri":"","name":"*.proptrack.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d1181150-cc33-4ad6-8716-a8138c85b2bb","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"02a885bf-1af7-4b1c-b055-84140591ae86","uri":"","name":"*.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"309a3820-caf2-41f0-ab39-3bc6b25cd6fb","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"b93d9d8c-8acc-451a-9e29-a2c6b3e0b365","uri":"","name":"website.proptrack.com.au","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e2e04441-3803-4ac2-8420-1e2fd6444310","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"27b6fb13-2feb-424e-af10-8c9ae5fbb792","uri":"https://developer.proptrack.com.au","name":"developer.proptrack.com.au","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dd88a1dd-fc79-4621-ac5d-abdebea4c759","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"5fe7d8cc-c799-4142-8981-745d189e1275","uri":"https://www.proptrack.com.au/contact-us/*","name":"www.proptrack.com.au/contact-us/*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ad8afe0e-e644-4cea-9039-17f5ec2388a8","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"695e1e77-093d-4f76-83ac-74f2890c79e3","uri":"https://widgets-api-sit.uat.proptrack.com","name":"widgets-api-sit.uat.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d33e3b54-b810-4dfd-b53a-7bfc878de877","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"db55def1-ae5f-4fa1-8509-362c37bde052","uri":"https://avm-sit.uat.proptrack.com","name":"avm-sit.uat.proptrack.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"daa1e534-0759-40ee-a5d5-3de2472a7257","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":16,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003ePlease do not test out of scope targets as they may be:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThird party vendors and SaaS products which have not consented to security testing, OR\u003c/li\u003e\n\u003cli\u003eExperience after login, OR\u003c/li\u003e\n\u003cli\u003eLinks which are likely to breach the do-not-interact (DNI) clause of this programme.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[{"id":"fc7d6338-303a-4c2b-94f1-0ffe234cbad2","attachmentPath":"https://bugcrowd.com/engagements/rea-mbb-og/attachments/fc7d6338-303a-4c2b-94f1-0ffe234cbad2","name":"reagroup_logo_h_rgb.png","filename":"reagroup_logo_h_rgb.png","description":null,"icon":"fileImage","size":16989,"sizeLabel":"16.6 KB","uploadedAt":"11 Mar 2025","fileType":"Image","embedUrl":"https://bugcrowd.com/engagements/rea-mbb-og/attachments/fc7d6338-303a-4c2b-94f1-0ffe234cbad2"},{"id":"09a5b142-9856-4e34-8430-b0569b0a2599","attachmentPath":"https://bugcrowd.com/engagements/rea-mbb-og/attachments/09a5b142-9856-4e34-8430-b0569b0a2599","name":"border.png","filename":"border.png","description":null,"icon":"fileImage","size":663,"sizeLabel":"663 Bytes","uploadedAt":"7 Aug 2025","fileType":"Image","embedUrl":"https://bugcrowd.com/engagements/rea-mbb-og/attachments/09a5b142-9856-4e34-8430-b0569b0a2599"}],"engagement":{"id":"342a8f01-0fd9-447d-9001-349129a3f6fd","code":"rea-mbb-og","state":"in_progress","endsAt":null,"bountyId":"c2901f87-a734-48ce-a4e9-5908a1d39467","startsAt":"2024-12-05T18:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Real Estate","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/d994/1fb6/d68e1bdc/254a2b65ae49c595cfde00715a5586b3_rea_group_logo.jpeg","logoBackgroundColor":"#fff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2024-12-05T18:00:00.259Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/rea-mbb-og","changelogs":"/engagements/rea-mbb-og/changelog","submissions":null,"announcements":"/engagements/rea-mbb-og/announcements","hallOfFame":"/engagements/rea-mbb-og/hall_of_fames","crowdstream":"/engagements/rea-mbb-og/crowdstream"},"announcementsCount":11,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/rea-mbb-og/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=rea-mbb-og\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/rea-mbb-og/engagement_subscribers","engagementChangelogsUrl":"/engagements/rea-mbb-og/changelog","publishedAt":"2026-07-27T00:27:49.052Z","engagementChangelogUrl":"/engagements/rea-mbb-og/changelog/d9a84c1d-2911-4875-abbb-696accf7c084","createUserFeedbacksUrl":"/engagements/rea-mbb-og/feedbacks","engagementCrowdstreamUrl":"/engagements/rea-mbb-og/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}