{"id":"a5e48d28-ece7-463c-b333-e6b613af0298","engagementId":"59d0e077-cf13-47b8-84cc-e9db55c5a769","data":{"brief":{"id":"d46bd93e-3894-4115-a833-166d21040b88","name":"The Trade Desk","tagline":"Help us defend the platform driving the future of digital advertising.","description":"\u003cp\u003eWelcome to The Trade Desk's Bug Bounty Program! At The Trade Desk, we are committed to maintaining the highest standards of security for our global digital advertising platform. As a leader in ad tech, we empower brands to reach their audiences with precision and efficiency. To ensure our platform remains secure, we invite skilled security researchers like you to join us in identifying and addressing potential vulnerabilities. Your expertise plays a crucial role in safeguarding the integrity of our systems, protecting our clients, and ensuring a safer digital advertising ecosystem. We value your contributions and are eager to collaborate in making The Trade Desk's platform as secure as possible. Happy hunting!\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards:\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"46b8dcc8-bbd9-4a60-80ab-ab088c2bc3e4","targetsOverview":"\u003cp\u003e\u003cem\u003eTesting is only authorized on the targets listed as In-Scope. Any domain/property of The Trade Desk not listed in the targets section is out of scope. This includes any/all subdomains not listed above.\u003c/em\u003e\u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003e\u003cstrong\u003eTHE TRADE DESK EMPLOYEES ARE NOT ELIGIBLE FOR REWARDS.\u003c/strong\u003e\u003c/em\u003e\u003c/p\u003e\n\n\u003ch2\u003eThe following issues are In-Scope, but are typically not rewarded:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eInformation or functionality intentionally exposed to the public\u003c/li\u003e\n\u003cli\u003eSubdomain takeovers\u003c/li\u003e\n\u003cli\u003eKnown issues from outdated software versions that do not pose a significant risk to The Trade Desk production systems\u003c/li\u003e\n\u003cli\u003eKnown issues from outdated software versions that pose a significant risk to The Trade Desk but have been known for less than 30 days\u003c/li\u003e\n\u003cli\u003eTLS/SSL configuration improvements\u003c/li\u003e\n\u003cli\u003eMissing cookie flags on non-sensitive cookies\u003c/li\u003e\n\u003cli\u003eMissing HTTP security headers, unless accompanied by an impactful PoC\u003c/li\u003e\n\u003cli\u003eMinor issues with rate limiting that do not lead to significant abuse or exploitation\u003c/li\u003e\n\u003cli\u003eEXIF geolocation data not stripped from uploaded images, unless accompanied by an impactful PoC\u003c/li\u003e\n\u003cli\u003eOpen redirects, unless accompanied by an impactful PoC\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eOut of Scope Activities:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eExploiting out-of-scope assets\u003c/li\u003e\n\u003cli\u003eSocial engineering\u003c/li\u003e\n\u003cli\u003ePhysical attacks on The Trade Desk premises or attempting to breach physical security controls\u003c/li\u003e\n\u003cli\u003eAutomated brute force attacks beyond the minimum required to demonstrate a lack of rate limiting controls\u003c/li\u003e\n\u003cli\u003eSignificant data exfiltration from databases or other storage systems\u003c/li\u003e\n\u003cli\u003eHacking third-party services that are not under the direct control of The Trade Desk\u003c/li\u003e\n\u003cli\u003eAny activities that result in spam emails being sent to other customers\u003c/li\u003e\n\u003cli\u003eAny actions that could lead to data loss or service disruption\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess:\u003c/h2\u003e\n\n\u003cp\u003eAll targets listed are public facing.\u003c/p\u003e\n\n\u003ch3\u003eCredentials:\u003c/h3\u003e\n\n\u003cp\u003e\u003cstrong\u003eNO CREDENTIALS\u003c/strong\u003e ARE PROVIDED FOR THIS PROGRAM\u003cbr\u003e\nResearchers should approach targets from an unauthorized point-of-view.\u003cbr\u003e\nSome In-Scope targets have self-registration features that can be utilized BUT you must use your @bugcrowdninja.com email address when registering.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via support@bugcrowd.com before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"6d2654e1-3566-4ab9-8ed5-c7ccdc100199","name":"Special Target","targets":[{"id":"99b96e4b-1086-4ace-bab1-777158754b04","uri":"https://open.sincera.io","name":"open.sincera.io","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c9cb219a-f9de-4399-9e52-f1508592cdb6","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"99b96e4b-1086-4ace-bab1-777158754b04"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"de462b84-cbe8-4bbb-a9f2-c7b059f613ef","p1MaxCents":500000,"p1MinCents":400000,"p2MaxCents":300000,"p2MinCents":200000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":22500,"p4MinCents":17500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eOpenSincera is a media telemetry service offered free by The Trade Desk. It is currently in active Beta, and we are temporarily increasing the bounty for P1 and P2 submissions for this target.\u003c/p\u003e\n\n\u003cp\u003eWe are particularly interested in submissions regarding broken access control. Use only your own accounts for cross-account attacks; do not attempt to access other customers\u0026#39; accounts.\u003c/p\u003e\n\n\u003cp\u003e\u003cstrong\u003eYou must self-register OpenSincera accounts with your @bugcrowdninja.com email address.\u003c/strong\u003e\u003c/p\u003e","rewardRangeData":{"1":{"min":4000,"max":5000},"2":{"min":2000,"max":3000},"3":{"min":500,"max":750},"4":{"min":175,"max":225},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"5dede798-4626-467c-8abe-a3ca1c7460f0","name":"Tier 1 Targets","targets":[{"id":"5cd9122a-fa72-4c03-ba94-c63cfda945cc","uri":"https://desk.thetradedesk.com","name":"desk.thetradedesk.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"65749817-a89b-4aa3-9b00-e9a028784c39","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"5cd9122a-fa72-4c03-ba94-c63cfda945cc"},{"id":"9dd4899d-3a63-4126-8c83-c1fc1de50c25","name":"Amazon Cloudfront","targetId":"5cd9122a-fa72-4c03-ba94-c63cfda945cc"},{"id":"9ffd297c-4781-4777-94cf-ef4e2ddda266","name":"C#","targetId":"5cd9122a-fa72-4c03-ba94-c63cfda945cc"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5cd9122a-fa72-4c03-ba94-c63cfda945cc"}],"recentChangeFlags":null},{"id":"39e0e977-f045-478b-981b-567707021d12","uri":"https://api.thetradedesk.com","name":"api.thetradedesk.com","category":"api","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"84fd65fd-54b4-4f96-95ee-eb505a4e9804","sortOrder":1},"sortOrder":1,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"39e0e977-f045-478b-981b-567707021d12"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"39e0e977-f045-478b-981b-567707021d12"},{"id":"9ffd297c-4781-4777-94cf-ef4e2ddda266","name":"C#","targetId":"39e0e977-f045-478b-981b-567707021d12"}],"recentChangeFlags":null},{"id":"91e4d2b0-605d-4d08-b812-a24358cf4eda","uri":"https://auth.thetradedesk.com","name":"auth.thetradedesk.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"204c1b67-9200-443c-8a08-da43cf285b9e","sortOrder":2},"sortOrder":2,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"91e4d2b0-605d-4d08-b812-a24358cf4eda"}],"recentChangeFlags":null},{"id":"262b4bc8-6092-497d-90db-52a2a07fc7c7","uri":"https://partner.thetradedesk.com","name":"partner.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0e24688f-4b3f-454d-8d8c-301e6c00dcd7","sortOrder":3},"sortOrder":3,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"262b4bc8-6092-497d-90db-52a2a07fc7c7"}],"recentChangeFlags":null},{"id":"5f0cc1d1-453d-4c09-abf6-dd1f8dc5e66b","uri":"https://www.thetradedesk.com","name":"www.thetradedesk.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2a2278a9-18df-47d1-a29f-2f1021463b3d","sortOrder":4},"sortOrder":4,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"5f0cc1d1-453d-4c09-abf6-dd1f8dc5e66b"},{"id":"9dded18a-fb38-4faa-b2ac-82845ca03735","name":"ReactJS","targetId":"5f0cc1d1-453d-4c09-abf6-dd1f8dc5e66b"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5f0cc1d1-453d-4c09-abf6-dd1f8dc5e66b"},{"id":"e8a0921a-8c3b-463d-af43-8dbdc6b1c03d","name":"NodeJS","targetId":"5f0cc1d1-453d-4c09-abf6-dd1f8dc5e66b"}],"recentChangeFlags":null},{"id":"8678e01f-f0bd-44fe-8df7-bb34c2d14f21","uri":"https://ops-sso.adsrvr.org/","name":"ops-sso.adsrvr.org","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8cb19cb2-3a48-4fd8-bd2e-31d613cb48fe","sortOrder":5},"sortOrder":5,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"8678e01f-f0bd-44fe-8df7-bb34c2d14f21"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8678e01f-f0bd-44fe-8df7-bb34c2d14f21"}],"recentChangeFlags":null},{"id":"a99e5e9d-00b7-451e-893e-de3fe55d8c5e","uri":"https://myopenpass.com","name":"myopenpass.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7f0b5c67-672d-489a-b897-2d42e002ae6b","sortOrder":6},"sortOrder":6,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"a99e5e9d-00b7-451e-893e-de3fe55d8c5e"},{"id":"624f911d-7e8c-4d56-b523-e7416c1cc319","name":"NextJS","targetId":"a99e5e9d-00b7-451e-893e-de3fe55d8c5e"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a99e5e9d-00b7-451e-893e-de3fe55d8c5e"}],"recentChangeFlags":null},{"id":"8e5b2d4a-9687-42a0-b3e5-87bd6e11b7ee","uri":"https://auth.myopenpass.com","name":"auth.myopenpass.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"51c67606-669e-4d6d-aeee-5fe782fb324e","sortOrder":7},"sortOrder":7,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"8e5b2d4a-9687-42a0-b3e5-87bd6e11b7ee"},{"id":"3ff3fda3-da69-45cc-9640-b57d3228af94","name":"OAuth","targetId":"8e5b2d4a-9687-42a0-b3e5-87bd6e11b7ee"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"8e5b2d4a-9687-42a0-b3e5-87bd6e11b7ee"},{"id":"a41318b7-d0b8-4b39-8250-dbbad194e770","name":"MongoDB","targetId":"8e5b2d4a-9687-42a0-b3e5-87bd6e11b7ee"}],"recentChangeFlags":null},{"id":"0be0115c-b47a-4ab2-9ffa-046905ee5164","uri":"https://partner.myopenpass.com","name":"partner.myopenpass.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cc4957c5-0737-4550-a321-5473d41afc2b","sortOrder":8},"sortOrder":8,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"0be0115c-b47a-4ab2-9ffa-046905ee5164"},{"id":"624f911d-7e8c-4d56-b523-e7416c1cc319","name":"NextJS","targetId":"0be0115c-b47a-4ab2-9ffa-046905ee5164"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0be0115c-b47a-4ab2-9ffa-046905ee5164"}],"recentChangeFlags":null},{"id":"05be309e-7117-4b4d-bf02-0db8ac996d83","uri":"https://atlantis-ext.myopenpass.com","name":"atlantis-ext.myopenpass.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5a24914f-25e0-4d7f-a655-fb865584ccdc","sortOrder":9},"sortOrder":9,"tags":[{"id":"20f6988d-5b8c-41bb-9ca8-d9b271b7874d","name":"Github","targetId":"05be309e-7117-4b4d-bf02-0db8ac996d83"},{"id":"8442481b-5110-4077-bdd1-54fd464584f6","name":"Go","targetId":"05be309e-7117-4b4d-bf02-0db8ac996d83"}],"recentChangeFlags":null},{"id":"2c98c6aa-c66a-44c4-81a8-18f6e59f0a5c","uri":"https://prod.uidapi.com","name":"*.prod.uidapi.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fde3fe5d-d7cf-4d0f-988e-3c08daff98ac","sortOrder":10},"sortOrder":10,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"2c98c6aa-c66a-44c4-81a8-18f6e59f0a5c"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"2c98c6aa-c66a-44c4-81a8-18f6e59f0a5c"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"2c98c6aa-c66a-44c4-81a8-18f6e59f0a5c"}],"recentChangeFlags":null},{"id":"9e23bfda-e5ad-428a-87e4-3e7c8ff6100d","uri":"https://prod.euid.eu","name":"prod.euid.eu","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d6cac69d-97cc-4ec7-8217-a5379e03f6ae","sortOrder":11},"sortOrder":11,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"9e23bfda-e5ad-428a-87e4-3e7c8ff6100d"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"9e23bfda-e5ad-428a-87e4-3e7c8ff6100d"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"9e23bfda-e5ad-428a-87e4-3e7c8ff6100d"}],"recentChangeFlags":null},{"id":"f19ef270-0a90-4020-b192-8e23cb283b4b","uri":"https://core-prod.uidapi.com","name":"core-prod.uidapi.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"29f6d98f-2780-4697-97e8-f38305e64530","sortOrder":12},"sortOrder":12,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"f19ef270-0a90-4020-b192-8e23cb283b4b"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"f19ef270-0a90-4020-b192-8e23cb283b4b"}],"recentChangeFlags":null},{"id":"47677a16-a323-4ce6-aa55-0612ed27a222","uri":"https://optout-prod.uidapi.com","name":"optout-prod.uidapi.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f46a4f07-6df6-42fc-98a4-9bb043097221","sortOrder":13},"sortOrder":13,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"47677a16-a323-4ce6-aa55-0612ed27a222"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"47677a16-a323-4ce6-aa55-0612ed27a222"}],"recentChangeFlags":null},{"id":"7022d80c-3283-4e2c-af70-0838b9a66194","uri":"https://optout.prod.euid.eu","name":"optout.prod.euid.eu","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2ec8b7a6-0864-40bd-8afb-306882faf72b","sortOrder":14},"sortOrder":14,"tags":[{"id":"1892c58d-2dbd-4b0d-96ee-1d2322fd1711","name":"Java","targetId":"7022d80c-3283-4e2c-af70-0838b9a66194"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"7022d80c-3283-4e2c-af70-0838b9a66194"}],"recentChangeFlags":null},{"id":"f179c2a8-a3ea-4b3f-9458-91def64e2ec4","uri":"https://transparentadvertising.com","name":"transparentadvertising.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"32245936-d327-4c85-8b05-8acdb2ef187e","sortOrder":15},"sortOrder":15,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"f179c2a8-a3ea-4b3f-9458-91def64e2ec4"},{"id":"9f26f47e-4acd-4d8d-aad2-414b6b367eb0","name":"Handlebars","targetId":"f179c2a8-a3ea-4b3f-9458-91def64e2ec4"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f179c2a8-a3ea-4b3f-9458-91def64e2ec4"}],"recentChangeFlags":null},{"id":"b90c038a-a88b-411d-91aa-2fbd43c9afa5","uri":"https://transparentadvertising.eu","name":"transparentadvertising.eu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"213b114b-c6b4-4d9b-91bb-21cc24328543","sortOrder":16},"sortOrder":16,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"b90c038a-a88b-411d-91aa-2fbd43c9afa5"},{"id":"9f26f47e-4acd-4d8d-aad2-414b6b367eb0","name":"Handlebars","targetId":"b90c038a-a88b-411d-91aa-2fbd43c9afa5"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b90c038a-a88b-411d-91aa-2fbd43c9afa5"}],"recentChangeFlags":null},{"id":"a08180c0-2ad5-42b5-bcb1-6ab1d596ff59","uri":"https://portal.unifiedid.com","name":"portal.unifiedid.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"55c99836-aee6-417f-b595-432d3ffbb231","sortOrder":17},"sortOrder":17,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"a08180c0-2ad5-42b5-bcb1-6ab1d596ff59"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a08180c0-2ad5-42b5-bcb1-6ab1d596ff59"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"48acfae9-ac88-4dac-8e90-f08b748e79f0","p1MaxCents":450000,"p1MinCents":350000,"p2MaxCents":250000,"p2MinCents":150000,"p3MaxCents":75000,"p3MinCents":50000,"p4MaxCents":22500,"p4MinCents":17500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eThis tier includes high-priority targets that are crucial for business operations or handle sensitive data.\u003c/p\u003e\n\n\u003ch3\u003eTarget Information:\u003c/h3\u003e\n\n\u003ch4\u003eDesk Platform\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003edesk.thetradedesk.com\u003c/strong\u003e - Create, manage, optimize, and measure digital advertising campaigns.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eapi.thetradedesk.com\u003c/strong\u003e - RESTful JSON API.  A highly flexible alternative to the UI where scale or automation scenarios can be enabled.\u003c/li\u003e\n\u003cli\u003e\u003cp\u003e\u003cstrong\u003eauth.thetradedesk.com\u003c/strong\u003e - A single sign-on solution (SSO) allowing access to multiple products and platforms offered by The Trade Desk.\u003c/p\u003e\n\n\u003cp\u003eAPI Documentation (for reference only):  \u003ca href=\"https://partner.thetradedesk.com/v3/portal/api/overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://partner.thetradedesk.com/v3/portal/api/overview\u003c/a\u003e\u003c/p\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eOpenPass\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eauth.myopenpass.com\u003c/strong\u003e - OIDC API. A single sign-on solution (SSO) allowing consumers access to premium content on the open internet without a password.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emyopenpass.com\u003c/strong\u003e - View and manage consumer OpenPass settings.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003epartner.myopenpass.com\u003c/strong\u003e - Publishers can integrate their applications with OpenPass.\u003c/li\u003e\n\u003cli\u003e\u003cp\u003e\u003cstrong\u003eatlantis-ext.myopenpass.com\u003c/strong\u003e - Webhooks endpoint to receive GitHub events.\u003c/p\u003e\n\n\u003cp\u003eServices and API Documentation (for reference only): \u003ca href=\"https://partner.thetradedesk.com/v3/portal/openpass/overview\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://partner.thetradedesk.com/v3/portal/openpass/overview\u003c/a\u003e\u003c/p\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eUID2\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e*.prod.uidapi.com\u003c/strong\u003e  - The UID2 Public Operator Service. It enables the management and storage of encryption keys and salts from the UID2 Core Service, hashing of users\u0026#39; personal data, encryption of raw UID2s, and decryption of UID2 tokens.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003ecore-prod.uidapi.com\u003c/strong\u003e - The UID2 Core Service manages access to salts, encryption keys, and other relevant data in the UID2 ecosystem.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptout-prod.uidapi.com\u003c/strong\u003e - The UID2 Opt-Out Service manages and stores user opt-out requests and disseminates them to publishers, operator service instances, and DSPs.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eportal.unifiedid.com\u003c/strong\u003e - The UID2 Portal allows users to set up and configure their UID2 account.\u003c/li\u003e\n\u003cli\u003e\u003cp\u003e\u003cstrong\u003etransparentadvertising.com\u003c/strong\u003e - The Transparency and Control Portal that allows consumers to opt out of UID2 at any time.\u003c/p\u003e\n\n\u003cp\u003eServices and API Documentation (for reference only): \u003ca href=\"https://unifiedid.com/docs/intro\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://unifiedid.com/docs/intro\u003c/a\u003e\u003cbr\u003e\nSource code repositories (for reference only, GitHub itself is not in scope): \u003ca href=\"https://github.com/IABTechLab\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://github.com/IABTechLab\u003c/a\u003e\u003c/p\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eEUID\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003eprod.euid.eu\u003c/strong\u003e - The EUID Public Operator Service. It enables the management and storage of encryption keys and salts from the EUID Core Service, hashing of users\u0026#39; personal data, encryption of raw EUIDs, and decryption of EUID tokens.\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eoptout.prod.euid.eu\u003c/strong\u003e - The EUID Opt-Out Service manages and stores user opt-out requests and disseminates them to publishers, operator service instances, and DSPs.\u003c/li\u003e\n\u003cli\u003e\u003cp\u003e\u003cstrong\u003etransparentadvertising.eu\u003c/strong\u003e - The Transparency and Control Portal that allows consumers to opt out of EUID being used to show them personalized ads.\u003c/p\u003e\n\n\u003cp\u003eServices and API Documentation (for reference only): \u003ca href=\"https://euid.eu/docs/intro\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://euid.eu/docs/intro\u003c/a\u003e\u003c/p\u003e\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":3500,"max":4500},"2":{"min":1500,"max":2500},"3":{"min":500,"max":750},"4":{"min":175,"max":225},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"de4a643c-8620-49fb-8073-766fb3e7ed2f","name":"Tier 2 Targets","targets":[{"id":"b83c02d8-2643-40f5-94a7-65a90c92fe00","uri":"","name":"*.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"042e01d8-b67e-471f-976b-1f1c1575c85c","sortOrder":0},"sortOrder":0,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"b83c02d8-2643-40f5-94a7-65a90c92fe00"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"b83c02d8-2643-40f5-94a7-65a90c92fe00"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b83c02d8-2643-40f5-94a7-65a90c92fe00"}],"recentChangeFlags":null},{"id":"34a1d2df-a04e-42f8-a6cb-85005ed1e0cf","uri":"","name":"*.adsrvr.org","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"62631bdd-f42c-488c-b174-bd4a9328f762","sortOrder":1},"sortOrder":1,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"34a1d2df-a04e-42f8-a6cb-85005ed1e0cf"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"34a1d2df-a04e-42f8-a6cb-85005ed1e0cf"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"34a1d2df-a04e-42f8-a6cb-85005ed1e0cf"},{"id":"e82bba17-848b-4f2b-a2a5-58d2a83530d4","name":"Kubernetes","targetId":"34a1d2df-a04e-42f8-a6cb-85005ed1e0cf"}],"recentChangeFlags":null},{"id":"b0be1886-e482-4a38-b927-ecc4949dbac2","uri":"https://www.thecurrent.com","name":"www.thecurrent.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4267b190-f335-47cb-9c28-5b7a45f090d1","sortOrder":2},"sortOrder":2,"tags":[{"id":"624f911d-7e8c-4d56-b523-e7416c1cc319","name":"NextJS","targetId":"b0be1886-e482-4a38-b927-ecc4949dbac2"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b0be1886-e482-4a38-b927-ecc4949dbac2"}],"recentChangeFlags":null},{"id":"b793f553-69ef-4551-858d-139e2ac81631","uri":"https://cdn.myopenpass.com","name":"cdn.myopenpass.com","category":"api","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a83084ca-fe6f-4a7e-9345-d90a983f85ce","sortOrder":3},"sortOrder":3,"tags":[{"id":"9dd4899d-3a63-4126-8c83-c1fc1de50c25","name":"Amazon Cloudfront","targetId":"b793f553-69ef-4551-858d-139e2ac81631"}],"recentChangeFlags":null},{"id":"e7a38f4a-2023-4f49-a83a-e79e1b8d371e","uri":"https://cstg-integ.uidapi.com","name":"cstg-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e19f6c44-4a85-4247-ba33-923f28ea574a","sortOrder":4},"sortOrder":4,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"e7a38f4a-2023-4f49-a83a-e79e1b8d371e"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e7a38f4a-2023-4f49-a83a-e79e1b8d371e"}],"recentChangeFlags":null},{"id":"cae077cc-47ec-4373-8d5e-57934e74deb2","uri":"https://esp-jssdk-integ.uidapi.com","name":"esp-jssdk-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1b868efd-ec85-4f11-98f3-f4f23e9398da","sortOrder":5},"sortOrder":5,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"cae077cc-47ec-4373-8d5e-57934e74deb2"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cae077cc-47ec-4373-8d5e-57934e74deb2"}],"recentChangeFlags":null},{"id":"f42fab98-3c52-4478-87b3-3a8b37bfee9f","uri":"https://esp-srvonly-integ.uidapi.com","name":"esp-srvonly-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e8d55001-a3f3-4bd3-a82e-3b8618351866","sortOrder":6},"sortOrder":6,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"f42fab98-3c52-4478-87b3-3a8b37bfee9f"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f42fab98-3c52-4478-87b3-3a8b37bfee9f"}],"recentChangeFlags":null},{"id":"506042a8-a461-4f2b-b101-a65c804ea0c4","uri":"https://example-jssdk-integ.uidapi.com","name":"example-jssdk-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a9ace4e7-2ea5-4a58-a4b9-899aee265159","sortOrder":7},"sortOrder":7,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"506042a8-a461-4f2b-b101-a65c804ea0c4"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"506042a8-a461-4f2b-b101-a65c804ea0c4"}],"recentChangeFlags":null},{"id":"92725ea8-4402-4f42-a885-c91402a2e624","uri":"https://example-srvonly-integ.uidapi.com","name":"example-srvonly-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4ec1f097-6840-44fd-a92c-d69dc26e85b7","sortOrder":8},"sortOrder":8,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"92725ea8-4402-4f42-a885-c91402a2e624"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"92725ea8-4402-4f42-a885-c91402a2e624"}],"recentChangeFlags":null},{"id":"9c08123c-adc2-4b0a-abe7-9a80da01ddad","uri":"https://secure-signals-jssdk-integ.uidapi.com","name":"secure-signals-jssdk-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"68d18fff-cbd5-4d42-897a-944fb1cbbdab","sortOrder":9},"sortOrder":9,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"9c08123c-adc2-4b0a-abe7-9a80da01ddad"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9c08123c-adc2-4b0a-abe7-9a80da01ddad"}],"recentChangeFlags":null},{"id":"d67e7373-0fbc-4387-bd62-5d15b3134c03","uri":"https://secure-signals-srvonly-integ.uidapi.com","name":"secure-signals-srvonly-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1dcdb469-8652-4dbe-b87d-3327a6401784","sortOrder":10},"sortOrder":10,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"d67e7373-0fbc-4387-bd62-5d15b3134c03"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d67e7373-0fbc-4387-bd62-5d15b3134c03"}],"recentChangeFlags":null},{"id":"887bad17-7418-49d5-9d2e-29c7ab4a3740","uri":"https://secure-signals-client-side-integ.uidapi.com/","name":"secure-signals-client-side-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c8e6e6c4-985a-45ed-9c3a-721d98344a39","sortOrder":11},"sortOrder":11,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"887bad17-7418-49d5-9d2e-29c7ab4a3740"}],"recentChangeFlags":null},{"id":"f05ee13f-0678-414c-b84e-6309e4d4065d","uri":"https://secure-signals-react-integ.uidapi.com","name":"secure-signals-react-integ.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5a5cc766-ded4-4d1e-8087-2a2f84b86167","sortOrder":12},"sortOrder":12,"tags":[{"id":"33a7c027-8a7e-4564-8330-cb149ab4352e","name":"TypeScript","targetId":"f05ee13f-0678-414c-b84e-6309e4d4065d"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":{"id":"edc003ab-1b97-46a4-8a49-e801882fba05","p1MaxCents":150000,"p1MinCents":100000,"p2MaxCents":90000,"p2MinCents":70000,"p3MaxCents":50000,"p3MinCents":30000,"p4MaxCents":20000,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eThis tier covers company-controlled services that may handle some sensitive information but are not as critical. If a submission for any of these targets are proven to also cause significant harm to a Tier 1 target then we will reward appropriately at that tier.\u003c/p\u003e\n\n\u003ch3\u003eTarget Information:\u003c/h3\u003e\n\n\u003ch4\u003eUID2\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cp\u003e\u003cstrong\u003e*-integ.uidapi.com\u003c/strong\u003e - Example sites for content publishers to test various UID2 integrations.\u003c/p\u003e\n\n\u003cp\u003eServices and API Documentation (for reference only): \u003ca href=\"https://unifiedid.com/docs/guides/summary-guides\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://unifiedid.com/docs/guides/summary-guides\u003c/a\u003e\u003cbr\u003e\nSource code repositories (for reference only, GitHub itself is not in scope): \u003ca href=\"https://github.com/IABTechLab/uid2-web-integrations\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://github.com/IABTechLab/uid2-web-integrations\u003c/a\u003e\u003c/p\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch4\u003eWildcard Domains\u003c/h4\u003e\n\n\u003cul\u003e\n\u003cli\u003e\u003cstrong\u003e*.thetradedesk.com\u003c/strong\u003e \u0026amp; \u003cstrong\u003e*.adsrvr.org\u003c/strong\u003e - These targets encompass all subdomains not listed in one of the other tiers or out-of-scope.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":1000,"max":1500},"2":{"min":700,"max":900},"3":{"min":300,"max":500},"4":{"min":0,"max":200},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"ba0c01ed-7a04-4d43-acbe-520a0cbc6d45","name":"Tier 3 Targets","targets":[{"id":"5b276f12-840e-4dd6-8cf5-67ad4b20132d","uri":"https://www.adsrvr.org","name":"www.adsrvr.org","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b079087c-52cc-4ec4-bbb7-40883b9a614a","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"5b276f12-840e-4dd6-8cf5-67ad4b20132d"},{"id":"68da3fae-5355-463e-8442-9a5016b1bda0","name":"ASP.NET","targetId":"5b276f12-840e-4dd6-8cf5-67ad4b20132d"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"5b276f12-840e-4dd6-8cf5-67ad4b20132d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5b276f12-840e-4dd6-8cf5-67ad4b20132d"}],"recentChangeFlags":null},{"id":"270b3d4e-9dac-4dc5-a6bd-a0dcaa2f6ed3","uri":"https://myopenpassdemo.com/","name":"myopenpassdemo.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0857da24-303d-4f1f-9a1c-a5a0a50653fb","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"f2dbe1bd-57b1-41c1-bdb4-7b80dfd268de","uri":"https://careers.thetradedesk.com","name":"careers.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"428a33f8-6016-4f0c-8159-ec071fdf32bb","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"73b301c8-6766-4997-a5f8-984bcb158e2f","uri":"https://www.venturatvos.com","name":"venturatvos.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ee7c53c2-4b35-4e7f-ab8a-a2fe0bc95c18","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"da01ecb7-c2c3-4a6c-b36a-a83eaf1bbc3b","uri":"https://www.opensincera.com","name":"opensincera.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d11fad95-476b-4c24-83ed-a901bcade41b","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"77b0d7bc-f1a1-44c4-9f6f-7b481b3ee010","uri":"https://edgeacademy.thetradedesk.com","name":"edgeacademy.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"928376af-7b9c-48be-8529-8b877a96546a","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null}],"inScope":true,"sortOrder":3,"description":null,"rewardRange":{"id":"d43786ed-91d3-43a5-8cdd-aa7aff498145","p1MaxCents":100000,"p1MinCents":50000,"p2MaxCents":50000,"p2MinCents":25000,"p3MaxCents":20000,"p3MinCents":null,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eThis tier consists of services that do not manage sensitive data or interact with critical systems. If a submission for any of these targets are proven to also cause significant harm to a Tier 1 or Tier 2 target then we will reward appropriately at that tier.\u003c/p\u003e\n\n\u003cp\u003eThe target \u003ccode\u003eedgeacademy.thetradedesk.com\u003c/code\u003e is in-scope but \u003ccode\u003ewww.thetradedeskedgeacademy.com\u003c/code\u003e is out-of-scope because it is owned by a third-party.\u003c/p\u003e","rewardRangeData":{"1":{"min":500,"max":1000},"2":{"min":250,"max":500},"3":{"min":0,"max":200},"4":{"min":null,"max":null},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"05f95854-1814-4e21-baaf-a675dd1f14eb","name":"Out of Scope","targets":[{"id":"db8e41d2-b52a-436a-a7fe-ee4fbfc9db59","uri":"https://investors.thetradedesk.com","name":"investors.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8f60511c-4981-402c-91bc-db7d049f4041","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"ae99a5b5-58b1-4335-9907-ec431e94c8de","uri":"https://ask.thetradedesk.com","name":"ask.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"78ec5413-e76f-43c1-a41b-e3dbdc4bb0db","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null},{"id":"1884ccb6-35fb-4df4-b605-bf3b9a54c1e2","uri":"https://www.thetradedeskedgeacademy.com","name":"www.thetradedeskedgeacademy.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"336b99ac-713b-479b-9731-2755d176c20a","sortOrder":2},"sortOrder":2,"tags":null,"recentChangeFlags":null},{"id":"f531c44a-487c-424f-aaa0-9eaf390ad7fd","uri":"https://openpass.thetradedesk.com","name":"openpass.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c3ae7e91-6b72-4e08-bf3c-85ee3b92b050","sortOrder":3},"sortOrder":3,"tags":null,"recentChangeFlags":null},{"id":"9d676118-13bf-4d98-8830-879b5b5b4723","uri":"https://unifiedid.com","name":"unifiedid.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4b5c8ef2-beba-4556-8061-877b0425dbdc","sortOrder":4},"sortOrder":4,"tags":null,"recentChangeFlags":null},{"id":"9d6d6602-cffc-43cf-91ab-f0df979af435","uri":"https://euid.eu","name":"euid.eu","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e633b0c9-bd5d-419a-9f99-fae3749715b9","sortOrder":5},"sortOrder":5,"tags":null,"recentChangeFlags":null},{"id":"e5b5b20c-2a1b-416c-aca5-49f7a5b8abed","uri":"","name":"argocd.*.uidapi.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5ed7b262-7b04-43bd-bf46-d1bf39661175","sortOrder":6},"sortOrder":6,"tags":null,"recentChangeFlags":null},{"id":"b259934d-6450-4f80-86f9-91e3d27b7a62","uri":"","name":"All client websites that have integrated with OpenPass","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0683aa10-ee56-4881-8a30-ebf6e67430cd","sortOrder":7},"sortOrder":7,"tags":null,"recentChangeFlags":null},{"id":"6c479e7d-a897-40a5-82b1-520972db8d48","uri":"https://stationery.thetradedesk.com","name":"stationery.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5175ac45-64bb-4b4e-b2fe-06c636b4a9a5","sortOrder":8},"sortOrder":8,"tags":null,"recentChangeFlags":null},{"id":"b3a8b03c-9a32-4606-8b46-e19ed24be079","uri":"https://bynder.thetradedesk.com","name":"bynder.thetradedesk.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4f4a007f-e62a-4b29-8f27-e9f6a2e8f8a1","sortOrder":9},"sortOrder":9,"tags":null,"recentChangeFlags":null},{"id":"2cbe55ee-703f-4c5b-ade3-14631a17de1a","uri":"","name":"Applications that resolve to *.skilljarapp.com","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"065abd25-e8ef-4fb8-9972-0a7d1f7de205","sortOrder":10},"sortOrder":10,"tags":null,"recentChangeFlags":null},{"id":"a82eac37-e346-4b32-96ad-68ecaec57d3f","uri":"","name":"Applications that resolve to *.smartling.com (ex: id.thetradedesk.com)","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"49ff1857-69bf-4e14-acd3-b6b445f05ccd","sortOrder":11},"sortOrder":11,"tags":null,"recentChangeFlags":null},{"id":"087942eb-3136-45b8-a844-f60da7fdcb23","uri":"","name":"Applications that resolve to *.quilvem.com (ex: update.adsrvr.org)","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c5e644b3-7df4-4cf1-b274-0ab17821b0ce","sortOrder":12},"sortOrder":12,"tags":null,"recentChangeFlags":null},{"id":"90bd0bcc-0a7e-4d08-8c32-82ef6162d3bf","uri":"","name":"Applications that resolve to *.okta.com (ex: openpath-login.thetradedesk.com)","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5cc1ea35-81b0-4b04-aed8-439887478717","sortOrder":13},"sortOrder":13,"tags":null,"recentChangeFlags":null},{"id":"a420d307-1075-4d3b-96be-3020102165c5","uri":"","name":"Anything not explicitly listed as Tier 1, Tier 2, or Tier 3","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fb238523-b45b-4aec-b102-21de544bdc01","sortOrder":14},"sortOrder":14,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":4,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eThese are all third-party services that must not be tested. \u003c/p\u003e\n\n\u003cp\u003eThis list may not be inclusive of all third-party services so DNS records should be queried on each domain to ensure it\u0026#39;s under the direct control of The Trade Desk, prior to testing.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"59d0e077-cf13-47b8-84cc-e9db55c5a769","code":"thetradedesk-mbb","state":"in_progress","endsAt":null,"bountyId":"8f8ab030-e810-4713-b40c-7350824ce5c1","startsAt":"2020-08-27T18:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Technology","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/2d7f/dbad/2676bacf/f6ec3ba64eed878c8d913b1ab01df244_TTD_Logo_400x400-03.jpg","logoBackgroundColor":"#fff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2020-08-27T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/thetradedesk-mbb","changelogs":"/engagements/thetradedesk-mbb/changelog","submissions":null,"announcements":"/engagements/thetradedesk-mbb/announcements","hallOfFame":"/engagements/thetradedesk-mbb/hall_of_fames","crowdstream":"/engagements/thetradedesk-mbb/crowdstream"},"announcementsCount":12,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/thetradedesk-mbb/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=thetradedesk-mbb\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/thetradedesk-mbb/engagement_subscribers","engagementChangelogsUrl":"/engagements/thetradedesk-mbb/changelog","publishedAt":"2026-01-13T21:19:57.046Z","engagementChangelogUrl":"/engagements/thetradedesk-mbb/changelog/a5e48d28-ece7-463c-b333-e6b613af0298","createUserFeedbacksUrl":"/engagements/thetradedesk-mbb/feedbacks","engagementCrowdstreamUrl":"/engagements/thetradedesk-mbb/crowdstream","acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}