{"id":"26ab911f-3858-4f16-9def-7f2d0691c8da","engagementId":"ac27358c-63fa-4cb6-af9d-311bba65f375","data":{"brief":{"id":"66189e50-42f0-4ba4-b3be-068a2d9f220f","name":"Under Armour Corporate","tagline":"Submit your finding to Under Armour's program!","description":"\u003cp\u003eWe appreciate your interest in helping make our digital world more secure! Our mission is \u003cstrong\u003eTO MAKE ALL ATHLETES BETTER THROUGH PASSION, DESIGN AND THE RELENTLESS PURSUIT OF INNOVATION.\u003c/strong\u003e Helping us identify and address security vulnerabilities in our systems greatly supports and drives that mission. \u003c/p\u003e\n\n\u003cp\u003eNo technology is perfect and Under Armour believes that working with skilled security researchers across the globe is crucial in identifying weaknesses in any technology. We are excited for you to participate as a security researcher to help us identify vulnerabilities in our corporate assets. Good luck, and happy hunting!\u003c/p\u003e\n\n\u003ch2\u003eRatings/Rewards\u003c/h2\u003e\n\n\u003cp\u003e\u003cem\u003eFor the initial prioritization/rating of findings, this program will use the \u003ca href=\"https://bugcrowd.com/vulnerability-rating-taxonomy\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Vulnerability Rating Taxonomy\u003c/a\u003e. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood or impact. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal, and make a case for a higher priority.\u003c/em\u003e\u003c/p\u003e","industryTagId":"9ed1ce49-a148-438f-92d3-0b8d70b6a8ae","targetsOverview":"\u003cp\u003e\u003cem\u003eTesting is only authorized on the targets listed as in scope. Any domain/property/IP of Under Armour not listed in the targets section is out of scope This includes any/all subdomains not listed above. All official Under Armour social media accounts (e.g., Meta, Instagram, Twitter, LinkedIn, TikTok, YouTube).\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eAccess/Credentials\u003c/h2\u003e\n\n\u003cp\u003eAll IP ranges are publicly accessible. No credentials will be provided.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eTarget Information\u003c/h2\u003e\n\n\u003cp\u003eThe IPs cover several different areas: some AWS Corporate infrastructure, corporate Internet gateways, ingress points for AWS apps and associated services, and some retail store gateways. When reporting a vulnerability, please be sure to include the particular IP in the URL section. If a web application is hosted on one of the IPs and is NOT in scope of their public program, it would be considered in scope of this program.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eExcluded Submission Types\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eAvailability attacks, DOS, or DDoS\u003c/li\u003e\n\u003cli\u003eDo not extract or save any data\u003c/li\u003e\n\u003cli\u003eDo not actually exploit or pivot. If you feel there is a CVE that can be exploited, please submit the finding but do not actually test until it is approved by the Under Armour team.\u003c/li\u003e\n\u003cli\u003eFor AWS targets, items considered to be out of scope as per \u003ca href=\"https://aws.amazon.com/security/penetration-testing/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eAmazon Penetration Testing Guidelines\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eVulnerabilities that are in the scope of our public 'Under Armour Product Security' engagement \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eOut of Scope Websites, Apps, \u0026amp; APIs\u003c/h2\u003e\n\n\u003cp\u003eAll Under Armour websites not listed above as targets are out of scope. These include, but are not limited to, the following categories:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eSupport, blogs, and community forums\u003c/li\u003e\n\u003cli\u003eAny mobile application not specifically listed as a target\u003c/li\u003e\n\u003cli\u003eE-commerce platforms\u003c/li\u003e\n\u003cli\u003eAffiliates\u003c/li\u003e\n\u003cli\u003eCorporate websites\u003c/li\u003e\n\u003cli\u003eAffiliated career websites\u003c/li\u003e\n\u003cli\u003eMarketing, retail, and distributor platforms\u003c/li\u003e\n\u003cli\u003eUnder Armour retail/sales websites\u003c/li\u003e\n\u003cli\u003ePromotional platforms for sponsored teams, athletes, or partnerships\u003c/li\u003e\n\u003cli\u003eSocial media accounts used by Under Armour, sponsored athletes, teams, or partnerships\u003c/li\u003e\n\u003cli\u003eAny company or affiliate related to Plank Industries\u003c/li\u003e\n\u003cli\u003eOther\n\n\u003cul\u003e\n\u003cli\u003eAny website registered to Under Armour, Plank Industries, or any affiliated subsidiary\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eNotwithstanding the program safe harbor, you are expected, as always, to comply with all applicable laws. Ulta reserves all of legal rights in the event of noncompliance.\u003c/p\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via \u003ca href=\"https://bugcrowd-support.freshdesk.com/support/tickets/new\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eBugcrowd Support\u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"715782db-f419-4c21-84c3-74f8e1552d7f","name":"Group 1","targets":[{"id":"07fd729d-da4f-4427-8eb1-35d5cc384c86","uri":"https://apphouse.underarmour.com/","name":"apphouse.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"46b876e9-56f1-4b45-af04-805374617166","sortOrder":0},"sortOrder":0,"tags":[{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"07fd729d-da4f-4427-8eb1-35d5cc384c86"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"07fd729d-da4f-4427-8eb1-35d5cc384c86"}],"recentChangeFlags":null},{"id":"a451ce62-2839-49ce-8b9d-c18f4c19cdf1","uri":"http://ourhouse.underarmour.com/","name":"ourhouse.underarmour.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4d07c4c9-a06e-4149-9c0a-84eceec93c75","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a451ce62-2839-49ce-8b9d-c18f4c19cdf1"}],"recentChangeFlags":null},{"id":"66a439f7-0f47-4eaf-b3a5-9471d2d6823d","uri":"https://transfer.underarmour.com/","name":"transfer.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"83cd1d3e-f72b-4deb-85ac-2a170c12db9c","sortOrder":2},"sortOrder":2,"tags":[{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"66a439f7-0f47-4eaf-b3a5-9471d2d6823d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"66a439f7-0f47-4eaf-b3a5-9471d2d6823d"}],"recentChangeFlags":null},{"id":"57d216dd-01c5-4f91-b2a1-960f4297189e","uri":"https://vpe-us.underarmour.com/","name":"vpe-us.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"1ac38ef8-b6f9-475d-8dfc-0be76ad52338","sortOrder":3},"sortOrder":3,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"57d216dd-01c5-4f91-b2a1-960f4297189e"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"6c3172f3-aed6-4fd4-9165-f80c36032102","p1MaxCents":250000,"p1MinCents":120000,"p2MaxCents":120000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":40000,"p4MaxCents":12500,"p4MinCents":12500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1200,"max":2500},"2":{"min":1000,"max":1200},"3":{"min":400,"max":600},"4":{"min":125,"max":125},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"f7772b0a-4d2e-459a-ac51-72d55702c7dc","name":"Group 2","targets":[{"id":"67cf44ea-fcc9-489c-88b5-44cc07e3fe05","uri":"https://snc.underarmour.com/","name":"snc.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"28e09da4-c78d-47eb-b01d-cb7a9868050a","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"67cf44ea-fcc9-489c-88b5-44cc07e3fe05"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"67cf44ea-fcc9-489c-88b5-44cc07e3fe05"}],"recentChangeFlags":null},{"id":"26994a90-cc64-4157-8906-fe10d253c138","uri":"https://snctest-s.underarmour.com/","name":"snctest-s.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8e7a762f-0c49-4d16-a276-d924f5986b49","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"26994a90-cc64-4157-8906-fe10d253c138"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"26994a90-cc64-4157-8906-fe10d253c138"}],"recentChangeFlags":null},{"id":"f97922d0-15c4-41f6-9616-4181755999c4","uri":"https://snctest-c.underarmour.com/","name":"snctest-c.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fcc98745-ce53-4640-9f10-3af35e139d75","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f97922d0-15c4-41f6-9616-4181755999c4"}],"recentChangeFlags":null},{"id":"2b02856b-02bd-44e4-89d5-e4d7a94f8b58","uri":"https://supplier.underarmour.com/","name":"supplier.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4d3c596b-dcab-4635-902e-d391cbca90d2","sortOrder":0},"sortOrder":0,"tags":[{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"2b02856b-02bd-44e4-89d5-e4d7a94f8b58"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2b02856b-02bd-44e4-89d5-e4d7a94f8b58"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"6c3172f3-aed6-4fd4-9165-f80c36032102","p1MaxCents":250000,"p1MinCents":120000,"p2MaxCents":120000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":40000,"p4MaxCents":12500,"p4MinCents":12500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1200,"max":2500},"2":{"min":1000,"max":1200},"3":{"min":400,"max":600},"4":{"min":125,"max":125},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"dae14a8e-305d-4cca-8e16-ff5ab0a7646b","name":"Group 3","targets":[{"id":"ff99c50e-2c37-4b3b-9c76-4f24e25bfdb2","uri":"https://vtxapp9p.underarmour.com/","name":"vtxapp9p.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c5873967-348f-4116-9bed-bf52360a9b59","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ff99c50e-2c37-4b3b-9c76-4f24e25bfdb2"}],"recentChangeFlags":null},{"id":"631767c7-4441-4a57-8cab-6461c8084c8d","uri":"https://vtxapp9q.underarmour.com/","name":"vtxapp9q.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c8fd636f-d3e3-456e-8be3-e4992637216f","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"631767c7-4441-4a57-8cab-6461c8084c8d"}],"recentChangeFlags":null},{"id":"4767b9d6-b507-47b8-a5be-ee2ff9c6afbe","uri":"https://vtxapp9d.underarmour.com/","name":"vtxapp9d.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c51c8b67-92cf-4cb1-bd1e-f118089f8fea","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"4767b9d6-b507-47b8-a5be-ee2ff9c6afbe"}],"recentChangeFlags":null},{"id":"8cc1bc14-59e2-4410-a4d6-76dcdadb3d03","uri":"https://vtxappd.underarmour.com/","name":"vtxappd.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"001e1404-b854-4d16-a65d-983ea845e0e8","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8cc1bc14-59e2-4410-a4d6-76dcdadb3d03"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":4,"description":null,"rewardRange":{"id":"6c3172f3-aed6-4fd4-9165-f80c36032102","p1MaxCents":250000,"p1MinCents":120000,"p2MaxCents":120000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":40000,"p4MaxCents":12500,"p4MinCents":12500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1200,"max":2500},"2":{"min":1000,"max":1200},"3":{"min":400,"max":600},"4":{"min":125,"max":125},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"2a4371ee-63f4-4b72-9736-8e584e9e0406","name":"Group 4","targets":[{"id":"f0a50e5c-f8c7-4fbd-b6ea-efdbb87aba43","uri":"","name":"204.29.196.0/23","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5578f09e-fb4b-4aff-ac5a-45bbe13b5f6d","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"f0a50e5c-f8c7-4fbd-b6ea-efdbb87aba43"}],"recentChangeFlags":null},{"id":"6f8bd988-a4c4-4dc0-ae6c-437b9550df86","uri":"","name":"3.223.149.182","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"96ac5321-71f2-4206-aa1a-d7744e256ffa","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"6f8bd988-a4c4-4dc0-ae6c-437b9550df86"}],"recentChangeFlags":null},{"id":"3fba2788-443b-4e34-b946-bcf48aa4212b","uri":"","name":"34.237.130.2","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"73a61e21-6166-4265-a3a3-fa7723aae0ff","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"3fba2788-443b-4e34-b946-bcf48aa4212b"}],"recentChangeFlags":null},{"id":"c29c0b52-50a1-4e83-b6b2-bbbcd73a6fa3","uri":"","name":"52.220.158.49","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c9069f2a-27e2-4fdb-ad57-e620f5aafd7c","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"c29c0b52-50a1-4e83-b6b2-bbbcd73a6fa3"}],"recentChangeFlags":null},{"id":"b0089fc6-639c-44a1-a18c-2da83c2ac9c7","uri":"","name":"52.76.174.107","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0ddac219-fe96-4e3d-8768-0d8213a78d58","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"b0089fc6-639c-44a1-a18c-2da83c2ac9c7"}],"recentChangeFlags":null},{"id":"68223a62-f473-4bff-8982-a7706330fec4","uri":"","name":"52.67.69.35","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"7163e879-efa9-4e6f-b950-56134d44e8a0","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"68223a62-f473-4bff-8982-a7706330fec4"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":5,"description":null,"rewardRange":{"id":"6c3172f3-aed6-4fd4-9165-f80c36032102","p1MaxCents":250000,"p1MinCents":120000,"p2MaxCents":120000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":40000,"p4MaxCents":12500,"p4MinCents":12500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1200,"max":2500},"2":{"min":1000,"max":1200},"3":{"min":400,"max":600},"4":{"min":125,"max":125},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"d8a7769d-7402-4e10-96e5-bbfda87c232d","name":"Group 5","targets":[{"id":"3857bbb1-a229-477d-889c-c706d17d94de","uri":"","name":"52.44.176.187","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"e9c047e7-f53b-4260-b6de-d59ce63e8d07","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"3857bbb1-a229-477d-889c-c706d17d94de"}],"recentChangeFlags":null},{"id":"10bfd215-1b32-4d60-b5af-180d1abe4ee6","uri":"","name":"52.86.17.52","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"9d11ba87-61a5-4b5a-a146-d078c915c1b5","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"10bfd215-1b32-4d60-b5af-180d1abe4ee6"}],"recentChangeFlags":null},{"id":"5994ad30-23b3-49ee-9d5f-0aa27065af0e","uri":"","name":"54.83.32.16","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"2f77596c-bfc4-4beb-aca1-27747eb047f2","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"5994ad30-23b3-49ee-9d5f-0aa27065af0e"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":6,"description":null,"rewardRange":{"id":"6c3172f3-aed6-4fd4-9165-f80c36032102","p1MaxCents":250000,"p1MinCents":120000,"p2MaxCents":120000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":40000,"p4MaxCents":12500,"p4MinCents":12500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1200,"max":2500},"2":{"min":1000,"max":1200},"3":{"min":400,"max":600},"4":{"min":125,"max":125},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"08232e24-51bf-4a6d-a438-188dc8176e81","name":"Group 6","targets":[{"id":"5513d39c-127b-4c2b-96b7-817ca7e1fd9c","uri":"","name":"3.133.230.28","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"65ca7622-dd65-425d-ad17-d7d6f5e78c51","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"5513d39c-127b-4c2b-96b7-817ca7e1fd9c"}],"recentChangeFlags":null},{"id":"10a1e718-3269-4093-b9d9-2de54b67aebd","uri":"","name":"3.19.172.158","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"145175ac-bb73-40bd-9dd3-9fa30929808d","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"10a1e718-3269-4093-b9d9-2de54b67aebd"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":7,"description":null,"rewardRange":{"id":"6c3172f3-aed6-4fd4-9165-f80c36032102","p1MaxCents":250000,"p1MinCents":120000,"p2MaxCents":120000,"p2MinCents":100000,"p3MaxCents":60000,"p3MinCents":40000,"p4MaxCents":12500,"p4MinCents":12500,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":null,"rewardRangeData":{"1":{"min":1200,"max":2500},"2":{"min":1000,"max":1200},"3":{"min":400,"max":600},"4":{"min":125,"max":125},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"ac735aef-37bf-4758-836f-01aca3d3baf1","name":"Out of Scope","targets":[{"id":"d722a7c5-93bc-48bf-826c-5dd82426090d","uri":"","name":"investor.underarmour.com ","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"53d41bfc-83c6-475b-8727-322f4e9b1b84","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"930bafdb-9c9a-4e2f-9440-6485c8efb926","uri":"","name":"careers.underarmour.com","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"770622e7-be2a-4704-bc4b-fcc7e61d9ca1","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"c49dff0c-d414-4a44-999e-8395ae84b338","uri":"","name":"www.underarmour.\u003ccountry\u003e ","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"19a2044d-924f-4685-9bf8-8d447e16a100","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"7f5edf16-dcb2-4a5e-85e9-654e3fb9be5e","uri":"","name":"www.underarmour.com/en-us/affiliate-home","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bf47ff19-8495-429e-bbaa-b60abddbc12c","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"61fd8acd-c0a8-49ed-b07b-d934da19db48","uri":"","name":"www.uabiz.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"0093d691-f2f1-4bc0-8cf0-2c4c21f05dd3","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e53cc6ba-c180-41e4-8d38-0c2f2b3a8335","uri":"","name":"productsafety.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"4bf92741-cd69-4f9d-908a-bf77d377f0b1","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"21e84043-d5e8-4082-b9aa-bcae726da30d","uri":"","name":"uabusiness.force.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"fb77833d-dca4-46e7-8782-01c2c13c1966","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"eeb53e91-7086-4e70-b048-f2eb63120c0d","uri":"","name":"www.underarmour.jobs","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"04c3e897-1b1b-4082-a44a-b6c472979501","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"89c9c51d-554a-4bbc-b743-f0510e0fab3e","uri":"","name":"blog.underarmour.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"c0a245dc-7b22-4c0f-90a2-01dd817abb7d","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"e96110d5-ba80-4a29-9e52-c29a7475abc4","uri":"","name":"www.uateamcatalogs.com ","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a3fceb19-7543-44ee-aaad-6c5d668c1af7","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"6fe93136-94ac-47b6-ac42-467424053015","uri":"","name":"www.uaretail.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"5a2b9953-9e2e-46a7-b856-bb5baf104a3e","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"fb93b306-f410-4492-a0f8-a5d15a438b8f","uri":"","name":"uaallaccess.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"bfa31d65-073b-482c-97f0-6ad215b70155","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null},{"id":"95a2783f-9dac-4e0b-a40f-4c5e14627550","uri":"","name":"www.plankindustries.com","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"01b46440-74a7-4b0c-8985-d1285d807372","sortOrder":0},"sortOrder":0,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":9,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"ac27358c-63fa-4cb6-af9d-311bba65f375","code":"underarmour-corp","state":"in_progress","endsAt":null,"bountyId":"95797a2d-109d-49d2-bef7-ad4644201ad3","startsAt":"2021-09-16T18:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Retail","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/d1f1/c2de/a4cdcdff/2b82bb7653cca8da8e1870edf4af571f_under_armour.png","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":false,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2021-09-16T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/underarmour-corp","changelogs":"/engagements/underarmour-corp/changelog","submissions":null,"announcements":"/engagements/underarmour-corp/announcements","hallOfFame":"/engagements/underarmour-corp/hall_of_fames","crowdstream":null},"announcementsCount":1,"knownIssuesEnabled":false,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/underarmour-corp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=underarmour-corp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/underarmour-corp/engagement_subscribers","engagementChangelogsUrl":"/engagements/underarmour-corp/changelog","publishedAt":"2026-03-30T14:21:26.639Z","engagementChangelogUrl":"/engagements/underarmour-corp/changelog/26ab911f-3858-4f16-9def-7f2d0691c8da","createUserFeedbacksUrl":"/engagements/underarmour-corp/feedbacks","engagementCrowdstreamUrl":null,"acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":false,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}