{"id":"7978066a-0855-409b-9333-cfb95766b31e","engagementId":"16bf556a-dc66-4783-9671-e6f8b1669ea9","data":{"brief":{"id":"984ad92a-9b37-4c03-a92f-bd71c2eef5ed","name":"T-Mobile","tagline":"Welcome to The Uncarrier. Are You With Us?","description":"\u003ch2\u003eProgram Purpose\u003c/h2\u003e\n\n\u003cp\u003eT-Mobile USA, Inc. (\"T-Mobile\") is committed to protecting our customers, our employees, our partners, and our brand. As part of this commitment, T-Mobile works with the security community to keep our customers and business safe.\u003c/p\u003e\n\n\u003cp\u003eIf you have identified a high-impact, reproducible security vulnerability in a T-Mobile property, application, or system, we encourage you to report it. We are especially interested in vulnerabilities that could materially affect:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eT-Mobile customers, employees, and owned brands or acquired businesses;\u003c/li\u003e\n\u003cli\u003ecustomer accounts, billing, identity, authentication, and line-management systems;\u003c/li\u003e\n\u003cli\u003ecellular, MSISDN, SIM/eSIM, DIGITS, messaging, location, and carrier-trust workflows;\u003c/li\u003e\n\u003cli\u003eT-Mobile internal, cloud, administrative, and business operations.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eWe evaluate reported vulnerabilities and promptly take appropriate action.\u003c/p\u003e\n\n\u003ch2\u003eScope Boundary\u003c/h2\u003e\n\n\u003cp\u003eIn this policy, \u003cstrong\u003eT-Mobile\u003c/strong\u003e means T-Mobile USA, Inc. and its affiliates.\u003c/p\u003e\n\n\u003cp\u003eThis program is limited to T-Mobile-owned or T-Mobile-controlled assets explicitly listed as in scope. T-Mobile does not own — and cannot remediate findings on — non-T-Mobile assets, including Deutsche Telekom assets and third-party vendors.\u003c/p\u003e\n\n\u003cp\u003eDeutsche Telekom domains, applications, systems, networks, services, subsidiaries, infrastructure, employee accounts, customer data, and corporate environments are out of scope and not eligible for bounty — even where the asset references T-Mobile, shares branding, links to T-Mobile properties, or appears related to T-Mobile business operations.\u003c/p\u003e\n\n\u003cp\u003eAny domain, property, product, protocol, or service not explicitly listed in scope is out of scope. Submissions against unlisted assets are welcome but not guaranteed a bounty.\u003c/p\u003e\n\n\u003ch2\u003eEligibility\u003c/h2\u003e\n\n\u003cp\u003eThe following are not eligible to participate. T-Mobile determines eligibility in its sole discretion, evaluated at submission and at payment.\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eresidents of countries or regions under applicable U.S. sanctions or export restrictions;\u003c/li\u003e\n\u003cli\u003epersons on the U.S. Treasury SDN List or another applicable restricted-party list;\u003c/li\u003e\n\u003cli\u003ecurrent or former employees, contractors, consultants, interns, or vendor staff of T-Mobile or any T-Mobile affiliate, regardless of when the relationship ended;\u003c/li\u003e\n\u003cli\u003ecurrent or former employees of SoftBank Group Corp. or any of its affiliates;\u003c/li\u003e\n\u003cli\u003eimmediate family or household members of any person in the preceding two bullets;\u003c/li\u003e\n\u003cli\u003eany person bound by a current or former NDA, confidentiality, or similar agreement with T-Mobile or any T-Mobile affiliate covering T-Mobile systems, security, source code, operations, or customer/employee data;\u003c/li\u003e\n\u003cli\u003eany person who has had, at any time, non-public access to T-Mobile systems, source code, vulnerabilities, security testing, internal tools, credentials, or customer/employee data;\u003c/li\u003e\n\u003cli\u003eany Bugcrowd staff member with access to the T-Mobile program, and their immediate family or household members;\u003c/li\u003e\n\u003cli\u003eany person who learned of, identified, or developed the finding while in any role, agreement, or access above, regardless of current status;\u003c/li\u003e\n\u003cli\u003eany other person prohibited by applicable law, regulation, contract, or program rule.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eT-Mobile affiliate\u003c/strong\u003e means any parent, subsidiary, predecessor, successor, acquired entity, branded MVNO, joint venture, or otherwise controlled entity of T-Mobile USA, Inc. \u003cstrong\u003eImmediate family\u003c/strong\u003e means spouse, domestic partner, parent, child, sibling, and step/half/in-law equivalents. \u003cstrong\u003eHousehold member\u003c/strong\u003e means anyone sharing the researcher’s residence.\u003c/p\u003e\n\n\u003cp\u003eSubmitting on behalf of an ineligible person through a proxy, agent, alt account, or third party voids the submission. Researchers must promptly disclose any fact that could affect eligibility, and T-Mobile may require identity, employment, or tax documentation as a condition of triage or payment.\u003c/p\u003e\n\n\u003cp\u003eIneligible submissions are void. T-Mobile may withhold unpaid rewards and, where permitted, recover amounts already paid, close associated submissions, ban the researcher, and refer the matter to Bugcrowd, law enforcement, or regulators.\u003c/p\u003e\n\n\u003ch2\u003eProgram Terms\u003c/h2\u003e\n\n\u003cp\u003eParticipation in T-Mobile’s Bug Bounty Program is voluntary and subject to the terms and conditions of this policy. By submitting a vulnerability report to T-Mobile, researchers acknowledge that they have read and agree to comply with this policy.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile may modify this policy at any time. Continued participation in the program after a modification constitutes acceptance of the modified policy.\u003c/p\u003e\n\n\u003cp\u003eSubmission of a security report does not create a consumer, employment, contractor, partnership, or agency relationship between the researcher and T-Mobile.\u003c/p\u003e\n\n\u003cp\u003eAll communications regarding vulnerability findings, submissions, appeals, questions, or T-Mobile Bug Bounty Program policies must be conducted through the Bugcrowd platform. Researchers must not use any alternative channel unless expressly authorized in writing by T-Mobile or Bugcrowd. Prohibited channels include but are not limited to:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003edirect contact with T-Mobile employees or executives by any means;\u003c/li\u003e\n\u003cli\u003esocial-media messages or posts directed at T-Mobile personnel;\u003c/li\u003e\n\u003cli\u003eT-Mobile customer, enterprise, support, sales, PR, HR, or legal channels;\u003c/li\u003e\n\u003cli\u003ephysical visits to T-Mobile locations;\u003c/li\u003e\n\u003cli\u003eany T-Mobile contact, regardless of how it was obtained.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eIntent (e.g., “just a heads-up”) does not create an exception. Failure to comply may result in removal from the program, reduced or forfeited bounty payments, ineligibility for future participation, and/or other punitive actions.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile may use the contents of submitted reports for any purpose related to validation, remediation, legal obligations, regulatory obligations, contractual obligations, security operations, or protection of T-Mobile, its customers, employees, partners, products, services, or systems.\u003c/p\u003e\n\n\u003cp\u003eInformation provided to T-Mobile will be handled according to T-Mobile’s Privacy Policy.\u003c/p\u003e\n\n\u003cp\u003eResearchers must adhere to the Bugcrowd Community Code of Conduct and Bugcrowd Terms and Conditions. If this policy conflicts with Bugcrowd disclosure guidance or platform rules, this policy controls for the T-Mobile program.\u003c/p\u003e\n\n\u003cp\u003eFailure to comply with this policy may result in reduced reward, reward ineligibility, report closure, removal from the program, or loss of eligibility for future participation.\u003c/p\u003e\n\n\u003ch2\u003eNon-Disclosure\u003c/h2\u003e\n\n\u003cp\u003eResearchers must not publicly disclose or discuss any vulnerability, submission, or program-related information — including resolved vulnerabilities — outside the T-Mobile Bug Bounty Program without T-Mobile’s prior written approval.\u003c/p\u003e\n\n\u003cp\u003eDisclosure requests are evaluated case by case. T-Mobile reserves the ultimate right to approve or deny any disclosure request in its sole discretion. Absent written approval, no disclosure is permitted.\u003c/p\u003e\n\n\u003cp\u003eThis restriction includes, but is not limited to, public disclosures, social media posts, blog posts, presentations, interviews, conference talks, or discussions in other public or private forums.\u003c/p\u003e\n\n\u003cp\u003eFailure to comply with this requirement may result in removal from the program, reduced or forfeited bounty payments, ineligibility for future participation, and/or other punitive actions.\u003c/p\u003e\n\n\u003ch2\u003eThird-Party Systems and Disclosure\u003c/h2\u003e\n\n\u003cp\u003eT-Mobile does not authorize testing against third-party systems, networks, applications, products, services, or data that T-Mobile does not own or control.\u003c/p\u003e\n\n\u003cp\u003eIf a reported vulnerability appears to affect third-party software, systems, devices, or processes, T-Mobile may report the issue to the relevant third party on a best-efforts basis.\u003c/p\u003e\n\n\u003cp\u003eWhen a reported vulnerability turns out to affect a third party’s software, device, or process, T-Mobile will not publicly disclose the issue for 90 days after notifying the third party, unless disclosure is required by law, legal process, or lawful government request, or T-Mobile determines earlier disclosure is necessary to protect customers, employees, partners, or the public. After 90 days, if the third party has not responded or the issue remains unresolved, T-Mobile may, in its sole discretion, publicly disclose the vulnerability and any related information it deems appropriate.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile does not pay bounties for vulnerabilities reported through a third party’s own disclosure or bug bounty process unless T-Mobile separately determines the report is eligible under this program.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile cannot guarantee that a third party will respond, remediate, communicate status, or provide safe harbor.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile cannot bind third parties and cannot defend, indemnify, or otherwise protect researchers from third-party action based on testing or disclosure involving third-party systems.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile may disclose vulnerability information when required by law, legal process, lawful government request, regulatory obligation, contractual obligation, or when T-Mobile determines disclosure is necessary to protect customers, employees, partners, systems, services, or the public.\u003c/p\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003eT-Mobile supports good-faith security research conducted in accordance with this policy.\u003c/p\u003e\n\n\u003cp\u003eFor security research and vulnerability disclosure activities conducted consistent with this policy, T-Mobile considers that activity authorized under the Computer Fraud and Abuse Act, the DMCA, and other applicable computer-use laws.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile will not pursue civil or criminal action, or send notice to law enforcement, for accidental or good-faith violations of this policy when the researcher acts promptly to stop testing, avoid harm, avoid data misuse, and report the issue through the program.\u003c/p\u003e\n\n\u003cp\u003eThis safe harbor does not apply to activity that is unlawful, destructive, extortive, deceptive, harmful, outside program scope, or inconsistent with this policy.\u003c/p\u003e\n\n\u003cp\u003eThis safe harbor does not apply to third-party systems, networks, applications, products, services, or data that T-Mobile does not own or control.\u003c/p\u003e\n\n\u003cp\u003eThis safe harbor does not waive any rights of third parties affected by your activity.\u003c/p\u003e\n\n\u003cp\u003eResearchers are responsible for complying with all laws applicable to them and must not disrupt services, compromise data, or access data beyond what this policy permits.\u003c/p\u003e\n\n\u003cp\u003eResearchers should contact T-Mobile through the Bugcrowd platform before engaging in conduct that may be inconsistent with or unaddressed by this policy. Asking before testing is a significant factor in determining whether conduct was accidental and in good faith.\u003c/p\u003e","industryTagId":"2b678620-ffdb-439a-8bac-c91b0087e0a0","targetsOverview":"\u003ch2\u003eBusiness Impact Standard\u003c/h2\u003e\n\n\u003cp\u003eT-Mobile prioritizes vulnerabilities that create meaningful business, customer, operational, financial, regulatory, brand, or security impact.\u003c/p\u003e\n\n\u003cp\u003eA report should demonstrate what an attacker can do that matters to T-Mobile, its customers, employees, partners, systems, services, or data. Technical behavior alone is not always enough. The report must connect the technical issue to a practical consequence, such as unauthorized access to sensitive data, account or line compromise, fraud, service abuse, internal system access, credential misuse, customer harm, employee impact, regulatory exposure, material financial loss, or trusted-brand abuse.\u003c/p\u003e\n\n\u003cp\u003eFindings are less likely to be accepted or rewarded when the demonstrated impact is limited to:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003ebehavior affecting only the researcher’s own account, device, installation, or local environment;\u003c/li\u003e\n\u003cli\u003econtrol of an inactive, unused, non-sensitive, or non-production host with no trusted traffic or meaningful abuse path;\u003c/li\u003e\n\u003cli\u003eexposed credentials, API keys, tokens, or secrets that do not provide meaningful access, meaningful spend risk, sensitive data access, privileged capability, or operational impact;\u003c/li\u003e\n\u003cli\u003eclient-side or local application behavior that does not affect other users, backend systems, T-Mobile data, authentication, authorization, account security, or service integrity;\u003c/li\u003e\n\u003cli\u003etheoretical impact without evidence of a practical attack path;\u003c/li\u003e\n\u003cli\u003elow-dollar, non-repeatable, or operationally insignificant abuse with no broader customer, business, or security consequence.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eThe same vulnerability class may receive different treatment depending on business impact.\u003c/p\u003e\n\n\u003ch3\u003eReward Eligibility\u003c/h3\u003e\n\n\u003cp\u003eThis program rewards P1 and P2 findings. P4 and P5 are never rewarded.\u003c/p\u003e\n\n\u003cp\u003eP3 is rewarded only in two specific cases:\u003c/p\u003e\n\n\u003col\u003e\n\u003cli\u003eA P3 finding that escalates to P2 under a Business Impact Modifier (Severity Rating Chart §9.1). The reward is paid at the applicable P2 amount for the asset tier.\u003c/li\u003e\n\u003cli\u003eSubdomain Takeover of an active trusted-traffic host. The reward is $1,500 flat.\u003c/li\u003e\n\u003c/ol\u003e\n\n\u003cp\u003eP3 reports that do not meet either condition are closed as Informational or N/A.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile determines final priority, qualification for reward, and the applicable reward amount in its sole discretion based on demonstrated impact, evidence quality, and exploit reliability.\u003c/p\u003e\n\n\u003ch3\u003eRating Disputes\u003c/h3\u003e\n\n\u003cp\u003eAll rating and reward disputes are handled by Bugcrowd. Researchers must raise disputes through the Bugcrowd submission using Bugcrowd’s standard challenge process. Bugcrowd’s triage team is the first point of review and will escalate to T-Mobile only when a dispute cannot be resolved on the platform.\u003c/p\u003e\n\n\u003cp\u003eResearchers must not contact T-Mobile directly to challenge a rating, reward, or submission outcome. Bypassing Bugcrowd may result in the dispute being declined.\u003c/p\u003e\n\n\u003ch2\u003eReport Relationships\u003c/h2\u003e\n\n\u003ch3\u003eDuplicates\u003c/h3\u003e\n\n\u003cp\u003eReports will be treated as duplicates when they:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eshare the same root cause, even if they affect multiple endpoints, brands, or apps; or\u003c/li\u003e\n\u003cli\u003ewill be resolved by the same remediation, even if the underlying vulnerabilities are otherwise unrelated (for example, multiple findings blocked by a single WAF rule, configuration change, or other consolidated remediation).\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eRegressions and Bypasses\u003c/h3\u003e\n\n\u003cp\u003eA regression or bypass is rewardable at 25% of the original reward when:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003ethe original issue was confirmed remediated;\u003c/li\u003e\n\u003cli\u003ethe new report demonstrates renewed exploitation;\u003c/li\u003e\n\u003cli\u003ethe behavior is not merely the same unresolved issue;\u003c/li\u003e\n\u003cli\u003ethe bypass appears after remediation deployment or after T-Mobile confirms the original issue resolved.\u003c/li\u003e\n\u003c/ul\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":"\u003ch2\u003eTesting Rules\u003c/h2\u003e\n\n\u003ch3\u003eRequired Header\u003c/h3\u003e\n\n\u003cp\u003eResearchers must include:\u003c/p\u003e\n\u003cdiv class=\"highlight\"\u003e\u003cpre class=\"highlight plaintext\"\u003e\u003ccode\u003eX-Bug-Bounty: BugCrowd-\u0026lt;username\u0026gt;\n\u003c/code\u003e\u003c/pre\u003e\u003c/div\u003e\n\u003cp\u003eFailure to include the header may reduce bounty eligibility when it materially affects attribution, traffic correlation, safety review, or reproduction.\u003c/p\u003e\n\n\u003ch3\u003eSource IP Address\u003c/h3\u003e\n\n\u003cp\u003eResearchers must include the source IP address or source IP range used for testing in each submission.\u003c/p\u003e\n\n\u003cp\u003eIf testing was performed from multiple IP addresses, VPNs, cloud hosts, proxies, mobile networks, or automated tooling infrastructure, the submission must identify all relevant source IPs or ranges used during testing.\u003c/p\u003e\n\n\u003cp\u003eFailure to provide accurate source IP information may delay triage, prevent validation, or reduce bounty eligibility when T-Mobile cannot reliably identify, correlate, or distinguish the researcher’s traffic.\u003c/p\u003e\n\n\u003cp\u003eResearchers must not use source IP information to hide, misattribute, or evade testing activity.\u003c/p\u003e\n\n\u003ch3\u003eSubmission Template\u003c/h3\u003e\n\n\u003cp\u003eResearchers must use the current submission template. Required documentation fields include the testing timeframe (start and end of the testing activity that produced the finding), source IP information, and any other fields marked required in the template.\u003c/p\u003e\n\n\u003cp\u003eSubmissions that do not use the current template, or that omit required documentation fields, will be closed by Bugcrowd, who will ask the researcher to resubmit using the correct template.\u003c/p\u003e\n\n\u003ch3\u003ePenalty Stacking\u003c/h3\u003e\n\n\u003cp\u003eA bounty may be reduced for good-faith noncompliance with any program requirement — including documentation gaps, incomplete testing detail, or any other shortfall that impedes T-Mobile’s ability to attribute, correlate, validate, or reproduce a finding. No single shortfall carries a fixed penalty; reductions are proportionate to impact and, for good-faith submissions, will not combine to exceed 50% of the bounty.\u003c/p\u003e\n\n\u003cp\u003eSeparately, T-Mobile reserves the right to withhold, reduce, or deny a bounty where a report involves bad-faith testing, unsafe testing, evasion, deliberate prevention of attribution or reproduction, or prohibited conduct. This is reserved for bad-faith conduct — good-faith researchers who make an honest mistake are not the target of this provision.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile may waive penalties when the researcher provides sufficient alternative evidence or when the testing context made compliance impractical.\u003c/p\u003e\n\n\u003ch3\u003eAutomated Tooling\u003c/h3\u003e\n\n\u003cp\u003eMaximum automated tooling rate:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e5 requests per second.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eHigher rates, fuzzing, or testing likely to affect service require prior written approval.\u003c/p\u003e\n\n\u003ch3\u003eData Handling\u003c/h3\u003e\n\n\u003cp\u003eResearchers must test only accounts, lines, devices, data, and systems they own or are authorized to use.\u003c/p\u003e\n\n\u003cp\u003eIntentional access to T-Mobile Customer or Personal Information other than the researcher’s own information is prohibited.\u003c/p\u003e\n\n\u003cp\u003eT-Mobile Customer or Personal Information means any data obtained from T-Mobile, on T-Mobile’s behalf, or generated by a T-Mobile customer, consumer, employee, account, household, device, or line that is reasonably capable of being associated with, or could reasonably be linked, directly or indirectly, to an identified or identifiable individual, household, device, line, or T-Mobile account.\u003c/p\u003e\n\n\u003cp\u003eIf T-Mobile Customer or Personal Information is inadvertently discovered, uncovered, or accessed, researchers must:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003estop testing immediately;\u003c/li\u003e\n\u003cli\u003ecease any activity involving the T-Mobile Customer or Personal Information or the vulnerability;\u003c/li\u003e\n\u003cli\u003eimmediately report the discovery, access, or acquisition in the submission;\u003c/li\u003e\n\u003cli\u003eprovide enough detail for T-Mobile to identify and remediate the issue;\u003c/li\u003e\n\u003cli\u003enot retain, copy, use, disclose, download, exfiltrate, or further access the information.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eResearchers must not modify customer accounts, production data, account settings, line settings, billing settings, or service state except within accounts, lines, devices, or data they own or are authorized to use.\u003c/p\u003e\n\n\u003cp\u003eIntentional modification of customer accounts or unauthorized access to customer data may result in reduced reward, ineligibility, removal from the program, or other action.\u003c/p\u003e\n\n\u003ch3\u003eProhibited Conduct\u003c/h3\u003e\n\n\u003cp\u003eResearchers must not:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eviolate any law or regulation;\u003c/li\u003e\n\u003cli\u003eviolate T-Mobile’s Terms of Service or Privacy Policy;\u003c/li\u003e\n\u003cli\u003edisrupt, degrade, or interrupt T-Mobile services;\u003c/li\u003e\n\u003cli\u003edestroy, corrupt, alter, or exfiltrate data;\u003c/li\u003e\n\u003cli\u003econtact, spam, or attempt to deceive T-Mobile customers or potential customers;\u003c/li\u003e\n\u003cli\u003eengage in phishing or social engineering of T-Mobile customers, employees, contractors, vendors, or partners;\u003c/li\u003e\n\u003cli\u003eperform physical attacks against T-Mobile infrastructure, stores, offices, property, or data centers;\u003c/li\u003e\n\u003cli\u003eperform aggressive vulnerability scans or automated scans outside the published rate limits;\u003c/li\u003e\n\u003cli\u003eperform automated credential guessing, credential stuffing, password spraying, or high-volume brute-force attacks;\u003c/li\u003e\n\u003cli\u003euse a finding to compromise the security of T-Mobile, T-Mobile customers, or T-Mobile systems beyond the minimum proof necessary for the report.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eProhibited conduct is a basis for immediate suspension, ban, forfeiture of unpaid rewards, and referral to Bugcrowd, law enforcement, or regulators. In cases of fraud or ineligibility, T-Mobile may also seek recovery of amounts already paid, where permitted.\u003c/p\u003e\n\n\u003ch3\u003eReport and Communication Standards\u003c/h3\u003e\n\n\u003cp\u003eThis applies to submissions and to all follow-up communication (comments, replies, dispute responses).\u003c/p\u003e\n\n\u003cp\u003eContent in a submission or any follow-up communication must reflect the researcher’s own testing and analysis. AI-assisted drafting is permitted; researchers remain responsible for every claim, endpoint, PoC step, request, response, and impact assertion.\u003c/p\u003e\n\n\u003cp\u003eBugcrowd may close a report, and T-Mobile may deny or revoke a bounty, when the report or a subsequent communication:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003econtains fabricated, hallucinated, or unverifiable endpoints, parameters, requests, or responses;\u003c/li\u003e\n\u003cli\u003epresents unverified AI-generated content as testing results or as engagement with the triager’s reasoning;\u003c/li\u003e\n\u003cli\u003erepeats an argument after it has been addressed by the triager;\u003c/li\u003e\n\u003cli\u003erestates the finding in longer form rather than engaging with the specific reasoning given;\u003c/li\u003e\n\u003cli\u003eis excessively verbose, off-topic, or buries the actual point;\u003c/li\u003e\n\u003cli\u003eis hostile, personal, or abusive;\u003c/li\u003e\n\u003cli\u003ecopies content from scanner output, public disclosures, or other researchers’ reports without attribution and independent validation.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eRepeated abuse of the report or communication process may result in report closure, forfeiture of pending rewards, and program removal.\u003c/p\u003e\n\n\u003ch3\u003eNon-Production Environments\u003c/h3\u003e\n\n\u003cp\u003eFindings against non-production systems are evaluated under the Severity Rating Chart §7 Environment Rules — synthetic or test-only data is closed as P4/N/A, while production data found in a non-production environment is treated as production impact.\u003c/p\u003e\n\n\u003ch2\u003eAccess and Test Accounts\u003c/h2\u003e\n\n\u003cp\u003eResearchers may self-register a T-Mobile account using an \u003ccode\u003e@bugcrowdninja.com\u003c/code\u003e email address. T-Mobile accounts are not provisioned by Bugcrowd or T-Mobile.\u003c/p\u003e\n\n\u003cp\u003ePostpaid lines, prepaid lines, SIM cards, phones, hotspots, hardware, and IoT devices must be purchased by the researcher.\u003c/p\u003e"},"scope":[{"id":"4bbed9d1-e124-4291-9800-de87c8fc57af","name":"Special Target","targets":[{"id":"5bb00674-e103-4c74-835c-d55618dc1a95","uri":null,"name":"Self-Register Account on T-Mobile Microsoft Entra ID","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5ac19749-f2a0-457e-ada0-51e81a638504","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"843135c1-2a7a-4bac-ad1a-0475d4a0a289","uri":null,"name":"Cellular Network Auth Bypass via Web App/T-Life (404-200-7239)","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"35de618f-4ba4-4e1d-827b-fa1f4443efd4","sortOrder":1},"sortOrder":1,"tags":[{"id":"a6a12b60-e857-44a3-9cc9-3aa9a21aa203","name":"Mobile Application Testing","targetId":"843135c1-2a7a-4bac-ad1a-0475d4a0a289"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"843135c1-2a7a-4bac-ad1a-0475d4a0a289"}],"recentChangeFlags":null},{"id":"ee70da4a-ef0e-450e-80c7-bbbc12b4db5f","uri":null,"name":"T\u0026P Servers (Temporarily Out of Scope)","category":"network","ipAddress":"http://10.72.218.66/flag.txt, http://10.62.252.214/flag.txt","description":null,"engagementBriefTargetGroupTarget":{"id":"665ee9e2-275d-4048-8391-f88d66a13f63","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"d1d07a78-ee98-496c-8cb7-67fb90def2a7","p1MaxCents":13370000,"p1MinCents":13370000,"p2MaxCents":null,"p2MinCents":null,"p3MaxCents":null,"p3MinCents":null,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eSpecial Target objectives are predefined, business-critical outcomes eligible for T-Mobile’s highest rewards.\u003c/p\u003e\n\n\u003cp\u003eThese are not ordinary assets. They require exact evidence and strict qualification.\u003c/p\u003e\n\n\u003cp\u003eSpecial Target rewards supersede Core and Supplemental asset-tier bands when both could apply. Reports that do not meet Special Target qualifying evidence are evaluated under the applicable asset tier.\u003c/p\u003e\n\n\u003ch3\u003eSpecial Target Reward\u003c/h3\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePriority\u003c/th\u003e\n\u003cth style=\"text-align: right\"\u003eReward\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eP1\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003e$133,700+\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e\n\n\u003cp\u003eA Special Target report qualifies under one of three scenarios, each with its own evidence requirements:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eT\u0026amp;P Flag Servers\u003c/strong\u003e (Temporarily Out of Scope)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eCellular Network Authentication Bypass\u003c/strong\u003e\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eSelf-Register Account on T-Mobile Microsoft Entra ID\u003c/strong\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eT\u0026amp;P Flag Servers (Temporarily Out of Scope)\u003c/h3\u003e\n\n\u003cp\u003eA report qualifies only when the researcher retrieves the contents of \u003ccode\u003eflag.txt\u003c/code\u003e from a listed T\u0026amp;P flag server.\u003c/p\u003e\n\n\u003cp\u003eCurrent targets:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003ehttp://10.72.218.66/flag.txt\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ehttp://10.62.252.214/flag.txt\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eRequired evidence:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003efull attack path;\u003c/li\u003e\n\u003cli\u003eproof of flag retrieval;\u003c/li\u003e\n\u003cli\u003etimestamp;\u003c/li\u003e\n\u003cli\u003esource asset or vector used to reach the flag;\u003c/li\u003e\n\u003cli\u003ereproducible steps or requests.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003ePrivate IP reachability alone is not sufficient unless the required flag contents are retrieved.\u003c/p\u003e\n\n\u003ch3\u003eCellular Network Authentication Bypass\u003c/h3\u003e\n\n\u003cp\u003eThis scenario applies to authentication bypasses involving cellular-network identity, SIM/eSIM trust, MSISDN trust, device identity, or carrier-authenticated context.\u003c/p\u003e\n\n\u003cp\u003eCurrent authorized MSISDN for safe testing:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e404-200-7239\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eThe authorized MSISDN is a production testing target for this objective. It is not a lower-severity test environment or reduced-impact account.\u003c/p\u003e\n\n\u003cp\u003eRequired evidence — one video demonstrating:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003ethe affected mobile or web workflow;\u003c/li\u003e\n\u003cli\u003ethe authentication bypass path;\u003c/li\u003e\n\u003cli\u003ethe account profile, settings, and line visibility.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eSelf-Register Account on T-Mobile Microsoft Entra ID\u003c/h3\u003e\n\n\u003cp\u003eA report qualifies when the researcher self-registers or creates an account in T-Mobile’s Microsoft Entra ID (corporate identity) tenant without authorization.\u003c/p\u003e\n\n\u003cp\u003eRequired evidence:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eproof of the self-registered or created account in the T-Mobile Entra ID tenant;\u003c/li\u003e\n\u003cli\u003ethe account identifier (UPN / email) created;\u003c/li\u003e\n\u003cli\u003ethe registration path or flow used;\u003c/li\u003e\n\u003cli\u003eany tenant access, group membership, application, or resource the account can reach;\u003c/li\u003e\n\u003cli\u003etimestamp and reproducible steps or requests.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eExistence of a public sign-up or guest-invite page alone is not sufficient — the researcher must demonstrate a usable account provisioned in the T-Mobile tenant.\u003c/p\u003e","rewardRangeData":{"1":{"min":133700,"max":133700},"2":{"min":null,"max":null},"3":{"min":null,"max":null},"4":{"min":null,"max":null},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"8705f96c-6c63-492a-9400-5990f908ab4d","name":"Core Assets","targets":[{"id":"37707a0e-7976-480c-9a61-50c62984ace0","uri":"https://t-mobile.com","name":"t-mobile.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"03a795d2-976e-47c1-b170-dbc31592e52c","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"37707a0e-7976-480c-9a61-50c62984ace0"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"37707a0e-7976-480c-9a61-50c62984ace0"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"37707a0e-7976-480c-9a61-50c62984ace0"}],"recentChangeFlags":null},{"id":"a6523e18-4ffa-47cc-930f-bda20204fc55","uri":"https://account.t-mobile.com","name":"account.t-mobile.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0b63d459-a641-4a48-8015-4de94426338e","sortOrder":1},"sortOrder":1,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"a6523e18-4ffa-47cc-930f-bda20204fc55"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a6523e18-4ffa-47cc-930f-bda20204fc55"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"a6523e18-4ffa-47cc-930f-bda20204fc55"}],"recentChangeFlags":null},{"id":"60d3b46b-434c-4535-95ba-48999d600ed3","uri":"https://api.t-mobile.com","name":"*.api.t-mobile.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"414de709-8fe0-4c68-980f-c40b480da410","sortOrder":2},"sortOrder":2,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"60d3b46b-434c-4535-95ba-48999d600ed3"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"60d3b46b-434c-4535-95ba-48999d600ed3"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"60d3b46b-434c-4535-95ba-48999d600ed3"}],"recentChangeFlags":null},{"id":"119cb570-2afb-4991-b91d-3415e3f43a7d","uri":"https://metrobyt-mobile.com","name":"metrobyt-mobile.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"46b4a5bb-ff96-4589-8249-ea1378fd9384","sortOrder":3},"sortOrder":3,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"119cb570-2afb-4991-b91d-3415e3f43a7d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"119cb570-2afb-4991-b91d-3415e3f43a7d"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"119cb570-2afb-4991-b91d-3415e3f43a7d"}],"recentChangeFlags":null},{"id":"fed72758-866f-42b2-a1d2-1bd49467432e","uri":"https://sprint.com","name":"sprint.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"24d2712d-18db-4d6f-81d4-f142a51bc95b","sortOrder":4},"sortOrder":4,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"fed72758-866f-42b2-a1d2-1bd49467432e"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fed72758-866f-42b2-a1d2-1bd49467432e"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"fed72758-866f-42b2-a1d2-1bd49467432e"}],"recentChangeFlags":null},{"id":"c53e6ff9-48d9-4fe8-8a55-33dde73052e4","uri":"https://tfb.t-mobile.com","name":"tfb.t-mobile.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fcff369e-e753-4fa9-a95d-f945c463fbc1","sortOrder":5},"sortOrder":5,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"c53e6ff9-48d9-4fe8-8a55-33dde73052e4"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"c53e6ff9-48d9-4fe8-8a55-33dde73052e4"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"c53e6ff9-48d9-4fe8-8a55-33dde73052e4"}],"recentChangeFlags":null},{"id":"0278f544-b8a5-4c42-9768-2605b192221c","uri":"https://devedge.t-mobile.com","name":"devedge.t-mobile.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cc765523-12a0-4ec2-adb6-0a8178c238f5","sortOrder":6},"sortOrder":6,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"0278f544-b8a5-4c42-9768-2605b192221c"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0278f544-b8a5-4c42-9768-2605b192221c"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"0278f544-b8a5-4c42-9768-2605b192221c"}],"recentChangeFlags":null},{"id":"eed64d02-e364-40b9-9ce7-dde18b87a8aa","uri":"https://tess.service-now.com","name":"tess.service-now.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0cce9a87-1f49-43eb-aea9-46b1370f4df9","sortOrder":7},"sortOrder":7,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"eed64d02-e364-40b9-9ce7-dde18b87a8aa"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"eed64d02-e364-40b9-9ce7-dde18b87a8aa"}],"recentChangeFlags":null},{"id":"ea22de11-db9b-473e-9c39-1237c72507a0","uri":"https://digits.t-mobile.com","name":"DIGITS - Web, Desktop, Mobile","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c3f3973a-0a30-4858-9e34-7ea49b3e4082","sortOrder":8},"sortOrder":8,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ea22de11-db9b-473e-9c39-1237c72507a0"},{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"ea22de11-db9b-473e-9c39-1237c72507a0"},{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"ea22de11-db9b-473e-9c39-1237c72507a0"}],"recentChangeFlags":null},{"id":"ab0e6773-0afd-4d29-88d7-76c59da5c448","uri":"https://account.business.t-mobile.com","name":"account.business.t-mobile.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"234bc6cf-0a6c-42b6-a0d2-b9fa18090b02","sortOrder":9},"sortOrder":9,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"ab0e6773-0afd-4d29-88d7-76c59da5c448"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"ab0e6773-0afd-4d29-88d7-76c59da5c448"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ab0e6773-0afd-4d29-88d7-76c59da5c448"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"ab0e6773-0afd-4d29-88d7-76c59da5c448"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":{"id":"c87b18f4-5351-42cf-a9a1-c54cd0a0bd96","p1MaxCents":5500000,"p1MinCents":5500000,"p2MaxCents":3500000,"p2MinCents":3500000,"p3MaxCents":null,"p3MinCents":null,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eCore Assets are high-value T-Mobile systems supporting customer accounts, billing, authentication, APIs, business workflows, carrier services, or major customer-facing products.\u003c/p\u003e\n\n\u003ch3\u003eCore Web/API Assets\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003et-mobile.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eaccount.t-mobile.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e*.api.t-mobile.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emetrobyt-mobile.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003esprint.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003etfb.t-mobile.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edevedge.t-mobile.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003etess.service-now.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edigits.t-mobile.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eaccount.business.t-mobile.com\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eCore Mobile/Desktop Assets\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eT-Life iOS\u003c/li\u003e\n\u003cli\u003eT-Life Android\u003c/li\u003e\n\u003cli\u003eDIGITS Mobile/Desktop\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eDIGITS auth bypass routing.\u003c/strong\u003e DIGITS authentication bypasses are evaluated under Core Mobile/Desktop Assets unless the submission demonstrates bypass of the cellular-network, SIM/eSIM, MSISDN, or carrier-authenticated trust layer — in which case the report routes to Special Target Cellular Network Authentication Bypass.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\u003ch3\u003eCore Reward Band\u003c/h3\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePriority\u003c/th\u003e\n\u003cth style=\"text-align: right\"\u003eReward\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eP1\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003e$55,000\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP2\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003e$35,000\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e","rewardRangeData":{"1":{"min":55000,"max":55000},"2":{"min":35000,"max":35000},"3":{"min":null,"max":null},"4":{"min":null,"max":null},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"b433b80e-001b-4816-8c92-d36a1bc5f126","name":"Supplemental Assets","targets":[{"id":"172f72dd-fb60-4d5a-9b22-86f53c69e70c","uri":"https://t-mobile.com","name":"*.t-mobile.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dd66bc36-9023-44f3-add8-6171a08b9caf","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"172f72dd-fb60-4d5a-9b22-86f53c69e70c"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"172f72dd-fb60-4d5a-9b22-86f53c69e70c"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"172f72dd-fb60-4d5a-9b22-86f53c69e70c"}],"recentChangeFlags":null},{"id":"060b4091-c43b-49d3-b84a-eba19a18f90d","uri":"https://metrobyt-mobile.com","name":"*.metrobyt-mobile.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"51852447-e9d2-40da-998f-23828ddc7455","sortOrder":1},"sortOrder":1,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"060b4091-c43b-49d3-b84a-eba19a18f90d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"060b4091-c43b-49d3-b84a-eba19a18f90d"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"060b4091-c43b-49d3-b84a-eba19a18f90d"}],"recentChangeFlags":null},{"id":"7a15a06b-ab88-4625-b894-6cdfae5cfabb","uri":"https://sprint.com","name":"*.sprint.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"176acb32-e781-4fcd-a70e-6852a5f0f487","sortOrder":2},"sortOrder":2,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"7a15a06b-ab88-4625-b894-6cdfae5cfabb"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7a15a06b-ab88-4625-b894-6cdfae5cfabb"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"7a15a06b-ab88-4625-b894-6cdfae5cfabb"}],"recentChangeFlags":null},{"id":"3d374af5-4f5a-4ee4-b7ad-791043447fd5","uri":"https://api.vistarmedia.com","name":"api.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"65665885-0193-4b4a-ba5c-eff35848f452","sortOrder":3},"sortOrder":3,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3d374af5-4f5a-4ee4-b7ad-791043447fd5"}],"recentChangeFlags":null},{"id":"7839b699-82d5-4d17-b583-7216785fc122","uri":"https://packages.cortexpowered.com","name":"packages.cortexpowered.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a37b64d9-b8de-4d59-b4e2-5c16d8443dc7","sortOrder":4},"sortOrder":4,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7839b699-82d5-4d17-b583-7216785fc122"}],"recentChangeFlags":null},{"id":"f2b0ed92-60d2-4cc8-984b-3b233489d919","uri":"https://api.vistarmedia.eu","name":"api.vistarmedia.eu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5497c319-c82d-4d5d-8608-da0d2415c4c7","sortOrder":5},"sortOrder":5,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f2b0ed92-60d2-4cc8-984b-3b233489d919"}],"recentChangeFlags":null},{"id":"da84b6b8-5e48-4c4c-b15c-c6f41680432a","uri":"https://production-dynam-creative.vistarmedia.com","name":"production-dynam-creative.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"133a814b-a480-4635-8549-864b1a0518f5","sortOrder":6},"sortOrder":6,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"da84b6b8-5e48-4c4c-b15c-c6f41680432a"}],"recentChangeFlags":null},{"id":"3dd1ce8c-46f7-4896-ae78-c873be60c8c0","uri":"https://storybook.vistarmedia.com","name":"storybook.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"43c63b1b-78b9-4c18-83c7-a1bb391c2ab1","sortOrder":7},"sortOrder":7,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3dd1ce8c-46f7-4896-ae78-c873be60c8c0"}],"recentChangeFlags":null},{"id":"58222989-0f6b-42b8-99ba-9b69747a838a","uri":"https://creatives.vistarmedia.com","name":"creatives.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3cc31195-32e1-497d-9d49-f1a1f8ed5cc8","sortOrder":8},"sortOrder":8,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"58222989-0f6b-42b8-99ba-9b69747a838a"}],"recentChangeFlags":null},{"id":"b6fc14e6-1de2-42f7-a0d0-9d13fa0a1648","uri":"https://sflower.cortexpowered.com","name":"sflower.cortexpowered.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dc2ea3bc-0a03-44c4-a13f-31b3118a16e0","sortOrder":9},"sortOrder":9,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b6fc14e6-1de2-42f7-a0d0-9d13fa0a1648"}],"recentChangeFlags":null},{"id":"d9f2faec-1eea-4714-b2ab-1d2c5de90a4e","uri":"https://production-delivery-metrics-svc.vistarmedia.com","name":"production-delivery-metrics-svc.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2f0e174b-0151-4ade-9161-1a361d020185","sortOrder":10},"sortOrder":10,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d9f2faec-1eea-4714-b2ab-1d2c5de90a4e"}],"recentChangeFlags":null},{"id":"3a7dd9cc-da7a-416a-9d66-4187394a8694","uri":"https://maps.vistarmedia.com","name":"maps.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"14b46e37-7ce6-4d09-a9f8-fee157b287aa","sortOrder":11},"sortOrder":11,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3a7dd9cc-da7a-416a-9d66-4187394a8694"}],"recentChangeFlags":null},{"id":"880d3beb-83cd-4e8a-9c26-8e5d48b65c68","uri":"https://transcodes-cdn.vistarmedia.com","name":"transcodes-cdn.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bb069e05-2e29-487b-83eb-fb10e1d21afa","sortOrder":12},"sortOrder":12,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"880d3beb-83cd-4e8a-9c26-8e5d48b65c68"}],"recentChangeFlags":null},{"id":"57b3cb71-ffd8-4b44-800d-6fbdee13f668","uri":"https://assets-cdn.vistarmedia.com","name":"assets-cdn.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f1fd397e-7405-4261-be34-16ff2fcab1ad","sortOrder":13},"sortOrder":13,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"57b3cb71-ffd8-4b44-800d-6fbdee13f668"}],"recentChangeFlags":null},{"id":"dad68c3b-04a9-43a8-ac32-07a6086ed0a8","uri":"https://docker-staging.adstruc.com","name":"docker-staging.adstruc.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cc970511-7fc1-44d0-8dce-5ddd0651ae3e","sortOrder":14},"sortOrder":14,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"dad68c3b-04a9-43a8-ac32-07a6086ed0a8"}],"recentChangeFlags":null},{"id":"404deb7f-2b18-4d8e-af20-270c8559822c","uri":"https://staging-trafficking.vistarmedia.com","name":"staging-trafficking.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9bba610a-5996-4202-8ba0-92efadda5d58","sortOrder":15},"sortOrder":15,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"404deb7f-2b18-4d8e-af20-270c8559822c"}],"recentChangeFlags":null},{"id":"18307665-6922-4662-b716-320ca120923b","uri":"https://job-svc-b.vistarmedia.com","name":"job-svc-b.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"708577a9-d7fe-41ef-bdc4-1ff8b05e9f74","sortOrder":16},"sortOrder":16,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"18307665-6922-4662-b716-320ca120923b"}],"recentChangeFlags":null},{"id":"4b0dcfce-ad78-4343-bfe1-e9acd874e4b7","uri":"https://docsite.vistarmedia.com","name":"docsite.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"addd053c-d094-48d5-bce3-33fb6ea26dbf","sortOrder":17},"sortOrder":17,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"4b0dcfce-ad78-4343-bfe1-e9acd874e4b7"}],"recentChangeFlags":null},{"id":"1968010b-91d6-42cf-9b1a-d171e31b8c10","uri":"https://sfleet.cortexpowered.com","name":"sfleet.cortexpowered.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8efc0965-b189-48c0-abe8-9ef67be88747","sortOrder":18},"sortOrder":18,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1968010b-91d6-42cf-9b1a-d171e31b8c10"}],"recentChangeFlags":null},{"id":"56e8bbeb-7fd2-4f02-8195-49d60e47b851","uri":"https://audience-builder.vistarmedia.com","name":"audience-builder.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"458c08cc-5e93-447c-abde-c073dec17cfe","sortOrder":19},"sortOrder":19,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"56e8bbeb-7fd2-4f02-8195-49d60e47b851"}],"recentChangeFlags":null},{"id":"9bc3c53e-0163-4935-80f1-394fc535e8e8","uri":"https://staging-login.vistarmedia.com","name":"staging-login.vistarmedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"112f911c-8c04-4573-b847-b7ee698976e4","sortOrder":20},"sortOrder":20,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9bc3c53e-0163-4935-80f1-394fc535e8e8"}],"recentChangeFlags":null},{"id":"b6e785ca-e610-4c49-8bf7-a59a8a989440","uri":"https://clients.adstruc.com","name":"clients.adstruc.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d39e673f-3a40-4d95-b314-fe4ea9e63316","sortOrder":21},"sortOrder":21,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b6e785ca-e610-4c49-8bf7-a59a8a989440"}],"recentChangeFlags":null},{"id":"ec6b09d3-6dff-44b8-82f0-1ab5e0ce1ef8","uri":"https://demo.adstruc.com","name":"demo.adstruc.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"aed75435-1637-418b-b5bd-76f5f3214de0","sortOrder":22},"sortOrder":22,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ec6b09d3-6dff-44b8-82f0-1ab5e0ce1ef8"}],"recentChangeFlags":null},{"id":"ad9b0821-67ae-47af-8fe8-7785e772d38a","uri":"https://*.uscc.net","name":"*.uscc.net","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8b58331e-8be6-4016-a4b4-3d9c9d65a592","sortOrder":23},"sortOrder":23,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ad9b0821-67ae-47af-8fe8-7785e772d38a"}],"recentChangeFlags":null},{"id":"b315ebef-bc2b-43f2-a67d-1cbd1928313a","uri":"https://*.uscc.com","name":"*.uscc.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"23150386-44f0-4ad2-9762-ea66c45bfb76","sortOrder":24},"sortOrder":24,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b315ebef-bc2b-43f2-a67d-1cbd1928313a"}],"recentChangeFlags":null},{"id":"427422f0-a85f-4498-9ae1-f06296a48a66","uri":"https://*.uscellular.com","name":"*.uscellular.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e505ce08-c1f8-4ef6-b5a1-3755b32c7b30","sortOrder":25},"sortOrder":25,"tags":null,"recentChangeFlags":null},{"id":"c95c344f-8c4f-47d7-8ed9-58a845e074a7","uri":"https://dashboard-101.moengage.com","name":"dashboard-101.moengage.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7bccdb92-eda5-4cb5-a8ae-bcd6eaf89080","sortOrder":26},"sortOrder":26,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"c95c344f-8c4f-47d7-8ed9-58a845e074a7"}],"recentChangeFlags":null},{"id":"7125993a-f9a0-4bcb-b66c-86a4ce8396e6","uri":"https://www.assurancewireless.com","name":"assurancewireless.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ddb4b4fd-104b-428c-8dd1-0e7cbec7887e","sortOrder":27},"sortOrder":27,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"7125993a-f9a0-4bcb-b66c-86a4ce8396e6"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7125993a-f9a0-4bcb-b66c-86a4ce8396e6"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"7125993a-f9a0-4bcb-b66c-86a4ce8396e6"}],"recentChangeFlags":null},{"id":"2ec140e9-a2da-4aef-92a7-775f2226f9da","uri":"https://*.assurancewireless.com","name":"*.assurancewireless.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"160fbf32-7413-4fcb-9f0c-cdda56975e89","sortOrder":28},"sortOrder":28,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"2ec140e9-a2da-4aef-92a7-775f2226f9da"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2ec140e9-a2da-4aef-92a7-775f2226f9da"},{"id":"ef82adfb-fd5b-439b-a090-ed44823bf259","name":"Azure","targetId":"2ec140e9-a2da-4aef-92a7-775f2226f9da"}],"recentChangeFlags":null},{"id":"83447bb5-e91d-4d6f-aa79-3a4cc2aba57a","uri":"https://assets.platform.blis.com","name":"assets.platform.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8bc5086a-79b8-4cf9-86f3-0553a168af94","sortOrder":29},"sortOrder":29,"tags":null,"recentChangeFlags":null},{"id":"6d34d47a-1b2d-44c4-9dcc-2551bd4e365c","uri":"https://assets.development.amazon-tacticalplanner.com","name":"assets.development.amazon-tacticalplanner.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"25371ac3-065e-4a91-b6a8-178aaee7a9e9","sortOrder":30},"sortOrder":30,"tags":null,"recentChangeFlags":null},{"id":"cfd6f402-070e-490e-a1cf-1250c14bf401","uri":"https://assets.platform.development.blis.com","name":"assets.platform.development.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ee96080f-76f9-43a8-97a7-5d8f1a03f18b","sortOrder":31},"sortOrder":31,"tags":null,"recentChangeFlags":null},{"id":"97e10035-aab6-4802-89d9-2728bc24b9ce","uri":"https://assets.platform.rc.blis.com","name":"assets.platform.rc.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"395dd218-141c-41ad-b3b1-e54cb3c93ff3","sortOrder":32},"sortOrder":32,"tags":null,"recentChangeFlags":null},{"id":"25471553-62cd-46e8-b03e-8ca79172d729","uri":"https://audiencelogos.blis.com","name":"audiencelogos.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"981a4def-d802-48bf-a3b3-7ea8c18d5e31","sortOrder":33},"sortOrder":33,"tags":null,"recentChangeFlags":null},{"id":"e668622e-04ad-4cf6-9a25-8425aa6fc1d5","uri":"https://blis.com","name":"blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"692d0208-56cb-4936-a029-820100de7cfb","sortOrder":34},"sortOrder":34,"tags":null,"recentChangeFlags":null},{"id":"46b1cca5-d881-4a48-8bf5-ebc81b2839e1","uri":"https://creative.infinity.blismedia.com","name":"creative.infinity.blismedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2be3fe8c-7b1f-49bf-af47-7d1ff12e58f6","sortOrder":35},"sortOrder":35,"tags":null,"recentChangeFlags":null},{"id":"4ff74710-d5e2-4e19-8ecd-35638f796ac9","uri":"https://development.wmaudience.com","name":"development.wmaudience.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"887852cb-693c-4832-b063-b04889f5a23e","sortOrder":36},"sortOrder":36,"tags":null,"recentChangeFlags":null},{"id":"a1fc6181-1ab4-4a83-af00-893f62eec596","uri":"https://imply-pivot.blis.com","name":"imply-pivot.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ae70e668-d398-4e96-90f8-d82056946ba7","sortOrder":37},"sortOrder":37,"tags":null,"recentChangeFlags":null},{"id":"10e6a9b8-6057-4f73-a87e-658486df9bab","uri":"https://imply-pivot.test.blis.com","name":"imply-pivot.test.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a532f9b1-51f3-4e4d-af11-98f44d23954b","sortOrder":38},"sortOrder":38,"tags":null,"recentChangeFlags":null},{"id":"d036ce4c-d6cf-40ab-ad82-7607dd6c10a6","uri":"https://imply.blis.com","name":"imply.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e8ec5cb9-41e3-478d-afd2-09c9ae26612c","sortOrder":39},"sortOrder":39,"tags":null,"recentChangeFlags":null},{"id":"4767d4db-2705-44fb-b071-9e9efb3b9879","uri":"https://imply.internal.platform.blis.com","name":"imply.internal.platform.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cc847b91-fb8c-4a32-aaa6-5fc849f81b23","sortOrder":40},"sortOrder":40,"tags":null,"recentChangeFlags":null},{"id":"18f0f0bf-8c29-48a6-878d-80f99ce31bf3","uri":"https://imply.platform.blis.com","name":"imply.platform.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f87c8591-368c-49e1-a386-9207be03872c","sortOrder":41},"sortOrder":41,"tags":null,"recentChangeFlags":null},{"id":"e99a7834-ac15-4661-84cb-5a59aebeecf3","uri":"https://imply.platform.development.blis.com","name":"imply.platform.development.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"46c132a1-96d9-407e-a228-092b4349ddd7","sortOrder":42},"sortOrder":42,"tags":null,"recentChangeFlags":null},{"id":"7436c450-bc03-4019-83ed-efa65811b28d","uri":"https://imply.platform.rc.blis.com","name":"imply.platform.rc.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"300e694e-4a43-4cd2-8e6c-da46e0663649","sortOrder":43},"sortOrder":43,"tags":null,"recentChangeFlags":null},{"id":"e6030674-2513-4ebb-b185-2ca5b7f5195b","uri":"https://imply.test.blis.com","name":"imply.test.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7a2ae76c-7170-4151-bb0b-25dc21fb4834","sortOrder":44},"sortOrder":44,"tags":null,"recentChangeFlags":null},{"id":"e4efd43f-f213-4ade-ad65-15f0cd203a60","uri":"https://imply.wmaudience.com","name":"imply.wmaudience.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d308a37c-ec33-4cca-874b-fb58fd93b933","sortOrder":45},"sortOrder":45,"tags":null,"recentChangeFlags":null},{"id":"0dc0010d-849e-49b7-b1a6-4932a0db920c","uri":"https://internal.platform.blis.com","name":"internal.platform.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"41f5c739-5de8-4737-b2b3-78707a300fed","sortOrder":46},"sortOrder":46,"tags":null,"recentChangeFlags":null},{"id":"dd2eb91c-f584-4840-b03a-9a429a77a68b","uri":"https://jenkins-github.gcp.blis.com","name":"jenkins-github.gcp.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1ad6c508-382a-49f6-b6e1-5bdcb8d82701","sortOrder":47},"sortOrder":47,"tags":null,"recentChangeFlags":null},{"id":"f01b61d4-4567-414b-a873-6a9ac9bdc048","uri":"https://platform.blis.com","name":"platform.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"50482868-858e-4623-9b02-e745e24609fc","sortOrder":48},"sortOrder":48,"tags":null,"recentChangeFlags":null},{"id":"a8bdf5d8-09cf-4d94-8a53-33552ac49e5f","uri":"https://platform.blismedia.com","name":"platform.blismedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a8197de2-1a56-4674-aa34-e08a393f6efa","sortOrder":49},"sortOrder":49,"tags":null,"recentChangeFlags":null},{"id":"5e413df4-12b7-4cca-9c83-6b60b6a2cc8c","uri":"https://platform.development.blis.com","name":"platform.development.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"347a7171-7d85-4045-bade-5a487a8f62f8","sortOrder":50},"sortOrder":50,"tags":null,"recentChangeFlags":null},{"id":"6e45e514-0e16-4773-b4d0-ae2607551915","uri":"https://platform.development2.blis.com","name":"platform.development2.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"92aceee6-673b-48d6-9068-f9602638962c","sortOrder":51},"sortOrder":51,"tags":null,"recentChangeFlags":null},{"id":"b80f1f2f-15be-420d-9d0a-85c4650777ff","uri":"https://platform.rc.blis.com","name":"platform.rc.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"99a03065-aece-4201-95a3-f7b5eb7927fb","sortOrder":52},"sortOrder":52,"tags":null,"recentChangeFlags":null},{"id":"29d5a0c9-c9d9-460f-b072-3bf52591ed53","uri":"https://privacy.blismedia.com","name":"privacy.blismedia.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b06c242f-8da2-4601-b339-f1f3bcc60cc8","sortOrder":53},"sortOrder":53,"tags":null,"recentChangeFlags":null},{"id":"79f1ed80-e8cf-4d6f-92db-bf982cc98002","uri":"https://rc.wmaudience.com","name":"rc.wmaudience.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6846d3b7-b613-4fd7-8e98-6fca3c9617dd","sortOrder":54},"sortOrder":54,"tags":null,"recentChangeFlags":null},{"id":"02dc10da-b141-4184-a751-e7ad40a95889","uri":"https://signature.blis.com","name":"signature.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0e760bff-7c58-4be6-807a-9f5df50d9469","sortOrder":55},"sortOrder":55,"tags":null,"recentChangeFlags":null},{"id":"8e1871a9-daff-4e63-b201-7fdd615fdf9e","uri":"https://sitepixel.blis.com","name":"sitepixel.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bed92130-4e15-4f55-9b53-1a5a2d84b21d","sortOrder":56},"sortOrder":56,"tags":null,"recentChangeFlags":null},{"id":"abfd7b8b-038f-4f14-b496-f36608b7649d","uri":"https://sitepixel.dev.blis.com","name":"sitepixel.dev.blis.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5f2fd42f-9019-430f-b3b9-812106823f4d","sortOrder":57},"sortOrder":57,"tags":null,"recentChangeFlags":null},{"id":"d75c9c09-10e6-4439-8f81-97508b6bf119","uri":"https://wiki.atom-lens.com","name":"wiki.atom-lens.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"938768e5-5ac3-4316-9ead-ba938b8317aa","sortOrder":58},"sortOrder":58,"tags":null,"recentChangeFlags":null},{"id":"ec1e28ed-d05a-48fc-9069-e0a025ec9d50","uri":"https://wmaudience.com","name":"wmaudience.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"11c54f15-4667-4227-8d44-95d11bb2d119","sortOrder":59},"sortOrder":59,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":4,"description":null,"rewardRange":{"id":"bd6c97a1-2574-4aa9-b2d5-c55c54696524","p1MaxCents":2000000,"p1MinCents":2000000,"p2MaxCents":1200000,"p2MinCents":1200000,"p3MaxCents":null,"p3MinCents":null,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eSupplemental Assets are T-Mobile-owned, T-Mobile-operated, acquired, transitional, lower-priority, or limited-support assets where T-Mobile has remediation ownership but where expected business impact is lower than Core.\u003c/p\u003e\n\n\u003ch3\u003eSupplemental Asset Intake Criteria\u003c/h3\u003e\n\n\u003cp\u003eAn asset may enter Supplemental scope when:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eT-Mobile or a T-Mobile-controlled entity owns or operates it;\u003c/li\u003e\n\u003cli\u003eT-Mobile has a remediation owner;\u003c/li\u003e\n\u003cli\u003ethe asset is internet-accessible or otherwise researcher-testable;\u003c/li\u003e\n\u003cli\u003eexploitable vulnerabilities could plausibly affect T-Mobile customers, employees, partners, corporate data, brand, service integrity, or business operations.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eNewly acquired or M\u0026amp;A-related assets enter Supplemental by default unless T-Mobile designates them Core.\u003c/p\u003e\n\n\u003ch3\u003eCurrent Supplemental Assets\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003e*.t-mobile.com\u003c/code\u003e, except listed Core assets\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e*.metrobyt-mobile.com\u003c/code\u003e, except listed Core assets\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e*.sprint.com\u003c/code\u003e, except listed Core assets\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eassurancewireless.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e*.assurancewireless.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e*.uscc.net\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e*.uscc.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003e*.uscellular.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edashboard-101.moengage.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eapi.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eapi.vistarmedia.eu\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eproduction-dynam-creative.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003estorybook.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecreatives.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eproduction-delivery-metrics-svc.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003emaps.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003etranscodes-cdn.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eassets-cdn.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003estaging-trafficking.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ejob-svc-b.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edocsite.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eaudience-builder.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003estaging-login.vistarmedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003epackages.cortexpowered.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003esflower.cortexpowered.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003esfleet.cortexpowered.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edocker-staging.adstruc.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eclients.adstruc.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edemo.adstruc.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eblis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform.development.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform.development2.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform.rc.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003einternal.platform.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eassets.platform.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eassets.platform.development.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eassets.platform.rc.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eaudiencelogos.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply-pivot.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply-pivot.test.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply.internal.platform.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply.platform.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply.platform.development.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply.platform.rc.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply.test.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ejenkins-github.gcp.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003esignature.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003esitepixel.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003esitepixel.dev.blis.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eplatform.blismedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eprivacy.blismedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ecreative.infinity.blismedia.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ewmaudience.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003erc.wmaudience.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003edevelopment.wmaudience.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eimply.wmaudience.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003ewiki.atom-lens.com\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eassets.development.amazon-tacticalplanner.com\u003c/code\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eSupplemental Reward Band\u003c/h3\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003ePriority\u003c/th\u003e\n\u003cth style=\"text-align: right\"\u003eReward\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eP1\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003e$20,000\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eP2\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003e$12,000\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e","rewardRangeData":{"1":{"min":20000,"max":20000},"2":{"min":12000,"max":12000},"3":{"min":null,"max":null},"4":{"min":null,"max":null},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"6fc2a23e-10b9-490c-b62a-7988dab01b12","name":"Static Bug-Class Rewards","targets":[{"id":"e6f99c7f-6287-4299-8d33-283b9436531f","uri":null,"name":"Subdomain Takeover","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"50371b5f-8f77-4d60-bad3-daff3a775d2b","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":5,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThese rules apply across in-scope assets and override the asset-tier reward when the bug class matches. Where a rule delegates back to the asset tier, the matching Core or Supplemental band is used.\u003c/p\u003e\n\n\u003ch3\u003eSubdomain Takeover\u003c/h3\u003e\n\n\u003cp\u003eReward eligibility requires demonstrated control of content or service behavior for an in-scope T-Mobile subdomain.\u003c/p\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eScenario\u003c/th\u003e\n\u003cth style=\"text-align: right\"\u003ePriority\u003c/th\u003e\n\u003cth style=\"text-align: right\"\u003eReward\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eDangling DNS only; no takeover possible\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003eN/A\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003e$0\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTakeover of inactive, parked, non-sensitive, or zero-traffic host\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003eN/A\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003e$0\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTakeover of active host serving customer, employee, partner, auth, download, or brand-sensitive traffic, with traffic evidence\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003eP3\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003e$1,500\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eTakeover enabling credential theft, customer-data access, malware distribution, trusted service abuse, or auth flow compromise\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003eP1/P2\u003c/td\u003e\n\u003ctd style=\"text-align: right\"\u003eper applicable asset tier (Core or Supplemental band)\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e\n\n\u003cp\u003e\u003cstrong\u003eActive trusted traffic\u003c/strong\u003e means the researcher provides observable evidence that the takeover would be reached by real users, customers, employees, partners, or in-product flows — for example referrers, in-app links, current marketing or email campaigns, OAuth callbacks, download endpoints, or measured DNS/HTTP request volume. Hostnames that look active but cannot be shown to receive trusted traffic do not qualify.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhat counts as active trusted traffic evidence\u003c/strong\u003e (observational — no data collection required):\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003ereferer or origin data captured from \u003cem\u003eyour own\u003c/em\u003e browser session while navigating T-Mobile’s own products (in-app clicks, email link clicks, download flows);\u003c/li\u003e\n\u003cli\u003edocumented in-product links, marketing emails, push notifications, or CDN configuration pointing at the takeoverable host;\u003c/li\u003e\n\u003cli\u003eOAuth/OIDC redirect targets or download endpoints configured in T-Mobile source or first-party JavaScript;\u003c/li\u003e\n\u003cli\u003eyour own DNS query counts against the host over a reasonable window;\u003c/li\u003e\n\u003cli\u003epassive DNS from established datasets (PassiveTotal, DomainTools, Censys DNS) showing active resolver history.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eNot required, and not permitted:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003ecapturing traffic that contains other users’ credentials, session tokens, cookies, PII, or business data;\u003c/li\u003e\n\u003cli\u003eserving content that would deceive real users, capture their input, or interfere with their session;\u003c/li\u003e\n\u003cli\u003ecollecting credentials, customer data, or third-party data of any kind to prove impact.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eIf the takeover is real and the host is real, both bars can be satisfied without ever intercepting a third-party request body.\u003c/p\u003e\n\n\u003cp\u003eThis is the only P3-eligible bug class in the program. All other subdomain takeover reports are either N/A or escalate to P2/P1 under the Severity Rating Chart.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"6b59c3da-7296-4917-b202-03c11c046ae0","name":"Mobile Targets","targets":[{"id":"90559ee7-50eb-4b42-896d-e1c7e12ef01d","uri":"https://apps.apple.com/us/app/t-life/id1111876388","name":"T-Life - iOS","category":"ios","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4f69aa29-512e-44c8-8991-20a464b44dfb","sortOrder":2},"sortOrder":2,"tags":[{"id":"e251f4f0-1204-4c8a-9e12-dba8fdaadf48","name":"iOS","targetId":"90559ee7-50eb-4b42-896d-e1c7e12ef01d"}],"recentChangeFlags":["entirely_new"]},{"id":"bc811890-a77b-4873-8da0-9037ef4c7e47","uri":"https://play.google.com/store/apps/details?id=com.tmobile.tuesdays\u0026hl=en_US\u0026gl=US","name":"T-Life - Android","category":"android","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"36bd0915-648c-4a9b-9de4-0baf38d1f1dc","sortOrder":2},"sortOrder":2,"tags":[{"id":"ee1461dd-e5fd-4e9d-8c95-0344ba08bdc2","name":"Android","targetId":"bc811890-a77b-4873-8da0-9037ef4c7e47"}],"recentChangeFlags":["entirely_new"]}],"inScope":true,"sortOrder":6,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eMobile findings are rewarded based on the affected backend, account, data, or business function — not solely the app binary.\u003c/p\u003e\n\n\u003ch3\u003eMobile Reward Mapping\u003c/h3\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eMobile App\u003c/th\u003e\n\u003cth\u003eDefault Asset Category\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003eT-Life iOS / Android\u003c/td\u003e\n\u003ctd\u003eCore\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eDIGITS Mobile / Desktop\u003c/td\u003e\n\u003ctd\u003eCore\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e\n\n\u003cp\u003eIf a mobile vulnerability terminates against a backend API, reward is based on the backend asset category and demonstrated impact.\u003c/p\u003e\n\n\u003cp\u003eClient-side-only findings are not normally rewarded unless they affect other users, T-Mobile systems, sensitive customer data, authentication controls, or backend trust.\u003c/p\u003e\n\n\u003ch3\u003eMobile Issues Not Rewarded\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003elack of certificate pinning;\u003c/li\u003e\n\u003cli\u003elack of obfuscation;\u003c/li\u003e\n\u003cli\u003elack of jailbreak/root detection;\u003c/li\u003e\n\u003cli\u003elocal storage issues requiring a compromised device;\u003c/li\u003e\n\u003cli\u003emobile OS vulnerabilities;\u003c/li\u003e\n\u003cli\u003eattacks requiring rooted/jailbroken devices;\u003c/li\u003e\n\u003cli\u003ememory dumps requiring an already-compromised device;\u003c/li\u003e\n\u003cli\u003eclient-side secrets that are invalid, public, expired, or not sensitive.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"b0326696-ea56-4d08-89ae-b3c8f3669e18","name":"Restricted Targets","targets":[{"id":"c0e4821d-7b35-4da5-b9b5-8c5a2cfe388a","uri":"","name":"/self-service-*","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"eeadbd3c-dffb-4818-8966-d3b2472da713","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"a1a39881-9d90-42e2-a59f-ec304c8482f3","uri":null,"name":"http://10.72.218.66/flag.txt","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a27cf32c-26c6-4e20-aacd-ebf38b469128","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"b5a11c86-e6c6-486c-bd28-5a16b43afe65","uri":null,"name":"http://10.62.252.214/flag.txt","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e3f828bb-cc2d-44a8-b899-3d084acdf54f","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"49dc0811-37cb-4882-955e-1f910ac7cadf","uri":"","name":"*.sprint.net","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"177d16e5-eba8-4f6d-89a5-96928a0022fa","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"d5163b2f-10cd-481f-a51c-c223454867ef","uri":"","name":"*.mobile.uscc.net","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ea0a26b7-a59f-4f4e-9b51-7a210fb9209a","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"57616ea6-9f01-410d-9560-c8bb9f05918c","uri":"","name":"*.mobile.uscc.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3199661e-11a6-4ce4-a8ed-b80f626a7bfc","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"cbcd24af-103d-4df2-89d1-c5af7bef8d1f","uri":"https://*.moengage.com","name":"*.moengage.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5277dfe6-e7bf-4c19-a215-f9650e1ba0b1","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null},{"id":"93944147-551a-4d02-865a-8dbc2c318a40","uri":"https://appointments.uscellular.com","name":"appointments.uscellular.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"19db8259-ddbb-45fe-80fb-3e593d9bcdc1","sortOrder":7},"sortOrder":7,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":7,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eRestricted Targets are not eligible for bounty. Some targets are restricted temporarily and may return to scope; others are restricted permanently.\u003c/p\u003e\n\n\u003ch3\u003eSuspended Targets\u003c/h3\u003e\n\n\u003cp\u003eSuspended Targets are temporarily ineligible while undergoing remediation, migration, review, noise reduction, ownership validation, or third-party boundary review. After review, T-Mobile may return the target to scope, keep it suspended, move it to another asset category, or move it to Removed.\u003c/p\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eAsset / Pattern\u003c/th\u003e\n\u003cth\u003eReason\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e/self-service-*\u003c/code\u003e API paths (any host)\u003c/td\u003e\n\u003ctd\u003eremediation/review\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003eflag servers\u003c/td\u003e\n\u003ctd\u003eimprovements/review\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e\n\n\u003ch3\u003eRemoved Targets\u003c/h3\u003e\n\n\u003cp\u003eRemoved Targets are permanently ineligible. T-Mobile is not seeking reports against these targets and will not reconsider scope absent significant business change.\u003c/p\u003e\n\n\u003ctable\u003e\u003cthead\u003e\n\u003ctr\u003e\n\u003cth\u003eAsset / Pattern\u003c/th\u003e\n\u003cth\u003eReason\u003c/th\u003e\n\u003c/tr\u003e\n\u003c/thead\u003e\u003ctbody\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e*.sprint.net\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003elegacy\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e*.mobile.uscc.net\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003ecustomer leased\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e*.mobile.uscc.com\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003ecustomer leased\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003eappointments.uscellular.com\u003c/code\u003e\u003c/td\u003e\n\u003ctd\u003eexcluded from \u003ccode\u003e*.uscellular.com\u003c/code\u003e\u003c/td\u003e\n\u003c/tr\u003e\n\u003ctr\u003e\n\u003ctd\u003e\u003ccode\u003e*.moengage.com\u003c/code\u003e, except listed Supplemental asset\u003c/td\u003e\n\u003ctd\u003ethird-party/SaaS boundary\u003c/td\u003e\n\u003c/tr\u003e\n\u003c/tbody\u003e\u003c/table\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"a1b923c6-bc9d-437e-9c33-05f6d47c7ae9","name":"Categorical Exclusions","targets":[{"id":"ed486426-c048-4dad-9485-aaa2a56e5d3e","uri":"","name":"Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus.","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0267ae6b-72ef-4d0a-8ee5-89163e66c475","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":8,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThis section lists two categories of submissions:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eNever rewarded\u003c/strong\u003e — categorically not eligible for bounty regardless of impact, asset, or evidence.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eConditionally rewarded\u003c/strong\u003e — eligible only when the researcher demonstrates the specific impact called out for that category.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eWeb/API Issue Types — Never Rewarded\u003c/h3\u003e\n\n\u003cp\u003eWeb and API assets are in scope. The following \u003cem\u003especific issue types\u003c/em\u003e are categorically not eligible for bounty, regardless of asset, impact, evidence, or whether they appear as part of an attack chain:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eautomated scanner output without working proof of exploitability;\u003c/li\u003e\n\u003cli\u003emissing security headers;\u003c/li\u003e\n\u003cli\u003emissing cookie flags on non-sensitive cookies;\u003c/li\u003e\n\u003cli\u003eOPTIONS or TRACE enabled without demonstrated exploit;\u003c/li\u003e\n\u003cli\u003eweak TLS configuration without demonstrated exploit;\u003c/li\u003e\n\u003cli\u003eexpired TLS certificates;\u003c/li\u003e\n\u003cli\u003eoutdated software/library version without working exploit;\u003c/li\u003e\n\u003cli\u003eclickjacking on pages with no sensitive data or state-changing action;\u003c/li\u003e\n\u003cli\u003eunauthenticated/login/logout CSRF;\u003c/li\u003e\n\u003cli\u003eautocomplete on forms;\u003c/li\u003e\n\u003cli\u003elack of email verification during registration;\u003c/li\u003e\n\u003cli\u003eself-XSS;\u003c/li\u003e\n\u003cli\u003eXSS that cannot be triggered by a T-Mobile-controlled URL alone (e.g., where exploitation requires a victim to interact with an attacker-controlled page);\u003c/li\u003e\n\u003cli\u003ecredentials from public breaches or known credential lists.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eAvailability / Disruption Activities — Never Rewarded\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eDoS/DDoS;\u003c/li\u003e\n\u003cli\u003ehigh-volume scanning;\u003c/li\u003e\n\u003cli\u003eservice degradation testing;\u003c/li\u003e\n\u003cli\u003edestructive testing;\u003c/li\u003e\n\u003cli\u003espam;\u003c/li\u003e\n\u003cli\u003ebulk scraping;\u003c/li\u003e\n\u003cli\u003ecustomer/employee contact.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eSocial / Physical / Third-Party Activities — Never Rewarded\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003ephishing or social engineering of T-Mobile employees, contractors, vendors, or customers;\u003c/li\u003e\n\u003cli\u003ephysical attacks;\u003c/li\u003e\n\u003cli\u003eattacks requiring physical access to a victim device;\u003c/li\u003e\n\u003cli\u003eattacks requiring MITM unless explicitly authorized;\u003c/li\u003e\n\u003cli\u003evulnerabilities only in third-party systems T-Mobile cannot remediate;\u003c/li\u003e\n\u003cli\u003eDeutsche Telekom assets.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eConditionally Rewarded Issue Types\u003c/h3\u003e\n\n\u003cp\u003eThe following are rewarded only when the researcher demonstrates concrete exploitability resulting in P1 or P2 impact under the Severity Rating Chart:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eopen redirects — require token theft, credential theft, or trusted-domain abuse;\u003c/li\u003e\n\u003cli\u003econtent spoofing / text injection — require HTML/CSS/script control or meaningful abuse;\u003c/li\u003e\n\u003cli\u003etabnabbing — require demonstrated victim impact;\u003c/li\u003e\n\u003cli\u003eCSV injection — require demonstrated exploitability against a real downstream consumer;\u003c/li\u003e\n\u003cli\u003ecache poisoning — require demonstrated impact on real users;\u003c/li\u003e\n\u003cli\u003eXSS — in scope only when the payload executes in another user\u0026#39;s authenticated session or chains to account takeover \u003cstrong\u003eand\u003c/strong\u003e the payload can be triggered by a T-Mobile-controlled URL alone;\u003c/li\u003e\n\u003cli\u003eOAuth/OIDC flow misconfigurations (open redirects in auth flows, PKCE bypass, state parameter manipulation, token leakage via referrer) — require demonstrated credential or token theft, authentication bypass, or account takeover;\u003c/li\u003e\n\u003cli\u003eleaked credentials — require credentials that are valid, non-public and not from breach lists, tied to T-Mobile or an in-scope asset, \u003cstrong\u003eand\u003c/strong\u003e usable to access an in-scope system, sensitive data, privileged capability, or meaningful business function. \u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[{"id":"03fb764a-5048-454e-82ac-603dc960e901","attachmentPath":"https://bugcrowd.com/engagements/t-mobile/attachments/03fb764a-5048-454e-82ac-603dc960e901","name":"submission-template.md","filename":"submission-template.md","description":null,"icon":"fileOther","size":523,"sizeLabel":"523 Bytes","uploadedAt":"10 Sep 2025","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/t-mobile/attachments/03fb764a-5048-454e-82ac-603dc960e901"},{"id":"3a151f84-8f07-4be8-9bf9-96c072064a2d","attachmentPath":"https://bugcrowd.com/engagements/t-mobile/attachments/3a151f84-8f07-4be8-9bf9-96c072064a2d","name":"Severity-Rating-Chart_v2.pdf","filename":"Severity-Rating-Chart_v2.pdf","description":null,"icon":"fileOther","size":222781,"sizeLabel":"218 KB","uploadedAt":"1 Sep 2026","fileType":"Document","embedUrl":"https://bugcrowd.com/engagements/t-mobile/attachments/3a151f84-8f07-4be8-9bf9-96c072064a2d"}],"engagement":{"id":"16bf556a-dc66-4783-9671-e6f8b1669ea9","code":"t-mobile","state":"in_progress","endsAt":null,"bountyId":"d9a3ee22-8572-4d8d-b8ee-1bf349ffa99f","startsAt":"2023-07-18T18:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Telecommunications","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/536d/20c9/6661dfe6/222ce2fcbe4559e1a34d9bf812be42c6_T-Digit_Logo_Ltd-Use_RGB_W_2022-03-14.png","logoBackgroundColor":"#e20074","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2024-08-13T20:39:05.748Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/t-mobile","changelogs":"/engagements/t-mobile/changelog","submissions":null,"announcements":"/engagements/t-mobile/announcements","hallOfFame":"/engagements/t-mobile/hall_of_fames","crowdstream":"/engagements/t-mobile/crowdstream"},"announcementsCount":83,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/t-mobile/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=t-mobile\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/t-mobile/engagement_subscribers","engagementChangelogsUrl":"/engagements/t-mobile/changelog","publishedAt":"2026-09-23T21:45:11.265Z","engagementChangelogUrl":"/engagements/t-mobile/changelog/7978066a-0855-409b-9333-cfb95766b31e","createUserFeedbacksUrl":"/engagements/t-mobile/feedbacks","engagementCrowdstreamUrl":"/engagements/t-mobile/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}