{"id":"3d77a480-c8c2-42be-b79b-d366eb5479ec","engagementId":"90c74874-8746-4f64-a668-b12cc2aa1622","data":{"brief":{"id":"5940fd3b-d77b-42f9-a673-3e705d229248","name":"U.S. Department of Commerce - Vulnerability Disclosure Program","tagline":"The Department of Commerce’s mission is to create the conditions for economic growth and opportunity for all communities.","description":"\u003ch2\u003eIntroduction\u003c/h2\u003e\n\n\u003cp\u003eThe United States (U.S.) Department of Commerce (DOC) manages data critical to creating conditions for U.S. economic growth and opportunity.\u003c/p\u003e\n\n\u003cp\u003eThe DOC is committed to ensuring the security of the U.S. public by protecting the public’s information from unwarranted disclosure. As such, the DOC has created a Vulnerability Disclosure Policy (VDP) and Vulnerability Disclosure Program, to give security researchers clear guidelines for conducting vulnerability discovery activities on DOC systems and websites and convey the DOC’s preferences in how to submit discovered vulnerabilities to the DOC.\u003c/p\u003e\n\n\u003cp\u003eThe DOC’s Vulnerability Disclosure Policy describes what systems and types of research are covered under this program, how to submit vulnerability reports, and requirements for public disclosure of submitted vulnerabilities.\u003c/p\u003e","industryTagId":"2a38890b-c88e-4bc0-8db0-02059f3fafe6","targetsOverview":"\u003ch2\u003eApplicability and Scope\u003c/h2\u003e\n\n\u003cp\u003eThis policy is for security researchers interested in reporting system security vulnerabilities and is intended for authorized DOC publicly available systems/services only. This policy applies to anyone wishing to conduct vulnerability discovery activities, including research and testing conducted on the DOC’s publicly available systems/services within the DOC.gov domains.  Specifically, this policy applies to the above DOC websites, information systems, and digital services intended for public use or made internet-accessible.\u003c/p\u003e\n\n\u003ch2\u003eAuthorization\u003c/h2\u003e\n\n\u003cp\u003eSecurity researchers must comply with all applicable Federal, State, and local laws in connection with the security research activities or other participation in this Vulnerability Disclosure Program.\u003c/p\u003e\n\n\u003cp\u003eEfforts made in good faith to comply with this policy during all security research will be considered authorized. The DOC will work with the researcher to understand and quickly resolve issues and will not recommend or pursue legal action related to your research. Should legal action be initiated by a third party against the security researcher for research conducted in accordance with this policy, the DOC will reaffirm this authorization.\u003c/p\u003e\n\n\u003ch2\u003eOut-of-Scope Systems and Services:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eNational Security Systems (NSS). The definition of a National Security System, along with other applicable terms used in the National Security Community, are found in CNSSI 4009, Information Assurance Glossary\u003c/li\u003e\n\u003cli\u003eInformation systems, websites, or services owned and operated by vendors or other entities; vulnerabilities found in information systems from our vendors and other entities fall outside of this policy’s scope and should be reported directly to the vendor according to their disclosure policy (if any);\u003c/li\u003e\n\u003cli\u003eNon-public facing or non-internet-accessible websites, information systems, and digital services.\u003c/li\u003e\n\u003cli\u003eThe following websites, information systems, and services are excluded from the testing provisions and legal protections afforded to Reporters within this policy. If Reporters are uncertain of whether a website, information system or digital service is in-scope of this policy, it is recommended that they reach out to the Bugcrowd support team at support@bugcrowd.com or to the security contact for the information system’s domain name listed in the .gov WHOIS before beginning testing:\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eThough the DOC develops and maintains other internet-accessible systems or services, we ask that active research and testing be conducted only on the systems and services covered by the scope of this document. We will increase the scope of this policy over time. This policy applies to anyone wishing to conduct vulnerability discovery activities, including research and testing.\u003c/p\u003e\n\n\u003cp\u003eIf there is uncertainty regarding the scope, please contact support@bugcrowd.com\u003c/p\u003e\n\n\u003cp\u003eAdditionally, vulnerabilities found in systems from non-DOC entities are outside of this policy’s scope and should be reported directly to the non-DOC entity according to their disclosure policy. If there is uncertainty regarding the scope of a system, contact support@bugcrowd.com\u003c/p\u003e\n\n\u003cp\u003eWhile the DOC Office of the Chief Information Officer (OCIO) is responsible for the development and maintenance for various internet-accessible systems or services, research and testing should only be conducted on the systems and services covered by the scope of this policy. The scope of this policy is subject to change; please contact support@bugcrowd.com if questions arise regarding systems not currently in scope.\u003c/p\u003e\n\n\u003ch2\u003eGuidelines\u003c/h2\u003e\n\n\u003cp\u003eUnder this policy, “research” means activities in which you:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eNotify the DOC as soon as possible after the discovery of any real or potential security issue(s).\u003c/li\u003e\n\u003cli\u003eMake every effort to avoid privacy violations, degradation of user experience, disruption to production systems, and destruction or manipulation of data.\u003c/li\u003e\n\u003cli\u003eOnly use exploits to the extent necessary to confirm a vulnerability’s presence. Do not use an exploit to compromise or exfiltrate data, establish persistent command line access, or use the exploit to pivot to other systems.\u003c/li\u003e\n\u003cli\u003eDo not submit a high volume of low-quality reports.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eUpon the discovery of a vulnerability or sensitive data (including personally identifiable information, financial information or proprietary information or trade secrets of any party):\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eALL tests must be stopped.\u003c/li\u003e\n\u003cli\u003eNotify DOC immediately.\u003c/li\u003e\n\u003cli\u003eDo Not disclose this data to anyone.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eReporting a Vulnerability\u003c/h2\u003e\n\n\u003cp\u003eInformation submitted under this policy will be used for defensive purposes only. If discovered findings include new vulnerabilities that affect all users of a product or service and not solely the DOC, the DOC may share your report with the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA), where it will be handled according to their coordinated vulnerability disclosure process. The DOC will not share your name or contact information without express permission.\u003c/p\u003e\n\n\u003cp\u003eThe DOC only accepts vulnerability reports here within the Bugcrowd platform. The DOC will acknowledge receipt of the information within three (3) business days.\u003c/p\u003e\n\n\u003cp\u003eWhen submitting a vulnerability, the security researcher acknowledges that there is no expectation of payment and that any future pay claims against the U.S. Government related to the submission have been waived.\u003c/p\u003e\n\n\u003cp\u003eWhen contact information is shared, the DOC commits to coordinating with the security researcher in a transparent and timely manner:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eWithin three (3) business days, the DOC will acknowledge that the report has been received.\u003c/li\u003e\n\u003cli\u003eWithin (15) business days, the DOC will confirm the existence of the vulnerability and provide further discussion on findings, resolutions and/or issues or challenges that may delay resolution.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003ePolicy\u003c/h2\u003e\n\n\u003ch3\u003eVulnerability Reports\u003c/h3\u003e\n\n\u003cp\u003eTo report identified vulnerabilities, security researchers must:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eSubmit vulnerability reports through the Bugcrowd platform. \u003c/li\u003e\n\u003cli\u003eDescribe the location the vulnerability was discovered and the potential impact of exploitation.\u003c/li\u003e\n\u003cli\u003eOffer a detailed description of the steps needed to reproduce the vulnerability (proof of concept scripts or screenshots).\u003c/li\u003e\n\u003cli\u003eSubmit vulnerability reports. DOC will acknowledge, via comments in submitted reports within three (3) business days.\u003c/li\u003e\n\u003cli\u003eKeep confidential any information about discovered vulnerabilities unless notified by the DOC.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eCoordinated Disclosure\u003c/h3\u003e\n\n\u003cp\u003eDOC is committed to patching vulnerabilities within (90) days or less and disclosing the details of those vulnerabilities when patches are published. We believe that public disclosure of vulnerabilities is an essential part of the vulnerability disclosure process and that one of the best ways to make software better is to enable everyone to learn from each other’s mistakes.\u003c/p\u003e\n\n\u003cp\u003eAt the same time, we believe that disclosure in absence of a readily available patch tends to increase risk rather than reduce it, and so we ask that security researchers refrain from sharing reports with others, or releasing reports to the public, while patching is occurring. If there is a need to inform others of the submitted report before the patch is available, please coordinate with DOC or reach out to support@bugcrowd.com prior to release for assessment.\u003c/p\u003e\n\n\u003ch3\u003eUse of Vulnerability Reports\u003c/h3\u003e\n\n\u003cp\u003eInformation submitted under this policy shall be used by the DOC for defensive cybersecurity purposes (i.e. to mitigate or remediate vulnerabilities). If an issue has been reported and determined to be both within the program scope and determined to be a valid security issue, the DOC will validate the finding(s) and the security researcher can disclose the vulnerability after a resolution has been issued.  The details within the Vulnerability Intake form may be submitted to an independent third-party vendor for evaluation and handling\u003c/p\u003e\n\n\u003ch3\u003eInformation Sharing\u003c/h3\u003e\n\n\u003cp\u003eInformation submitted under this policy may be shared for defensive cybersecurity means:\u003c/p\u003e\n\n\u003cp\u003eIf findings submitted include newly discovered vulnerabilities that affect users of a product or service outside of the DOC, the DOC may share vulnerability reports with DHS CISA, where it will be handled under DHS CISA’s coordinated vulnerability disclosure process. The DOC retains the right to share this information with DHS CISA and other applicable organizations, as needed.\u003cbr\u003e\nPersonal information pertinent to the security researcher will not be disclosed or shared without the researcher’s express written permission.\u003c/p\u003e\n\n\u003ch2\u003eTesting Methods\u003c/h2\u003e\n\n\u003cp\u003eThe DOC requires that security researchers comply with authorized test methods to access systems within the publicly available DOC.gov domains, and not perform any unauthorized test methods.\u003c/p\u003e\n\n\u003ch3\u003eUnauthorized Testing Methods\u003c/h3\u003e\n\n\u003cp\u003eThe following test methods are \u003cstrong\u003enot authorized\u003c/strong\u003e by the DOC:\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eTest any systems other than the systems set forth in the ‘Scope’ of this policy.\u003c/li\u003e\n\u003cli\u003ePhysical testing of facilities or resources (e.g., office access, open doors, tailgating).\u003c/li\u003e\n\u003cli\u003eSocial engineering (e.g., phishing, vishing, spam, and other suspicious emails), and any other non-technical vulnerability testing.\u003c/li\u003e\n\u003cli\u003eNetwork denial of service (DoS or Distributed DoS) or tests that impair access to or damage availability to a system or data.\u003c/li\u003e\n\u003cli\u003eTests that exhaust bandwidth or are resource intensive.\u003c/li\u003e\n\u003cli\u003eUnidentified malware, viruses, Trojan horses, or worms.\u003c/li\u003e\n\u003cli\u003eRainbow tables, password cracking, or brute force testing.\u003c/li\u003e\n\u003cli\u003eUse an exploit to exfiltrate data, establish command line access, establish a persistent presence on DOC systems, or “pivot” to other DOC systems.\u003c/li\u003e\n\u003cli\u003eTest third-party applications, websites, or services that integrate with or link to or from DOC systems.\u003c/li\u003e\n\u003cli\u003eDelete, alter, share, retain, or destroy DOC data, or render DOC data inaccessible.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch2\u003eQuestions\u003c/h2\u003e\n\n\u003cp\u003eQuestions or suggestions regarding this policy may be sent to support@bugcrowd.com\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"0b1049c0-7764-48b6-95f6-5b6cbac17daf","name":"In Scope Targets","targets":[{"id":"1e985bb8-9dd9-4b42-abde-4dc6f4702f14","uri":"","name":"*.dnsops.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3543a827-8ec9-4055-9aed-28f61cdd1184","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1e985bb8-9dd9-4b42-abde-4dc6f4702f14"}],"recentChangeFlags":null},{"id":"e0b859e2-cc50-47c0-8de3-7bf70c5e9e15","uri":"","name":"*.nist.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"28df0936-37dd-4fb2-9ce1-be62042a3e08","sortOrder":1},"sortOrder":1,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e0b859e2-cc50-47c0-8de3-7bf70c5e9e15"}],"recentChangeFlags":null},{"id":"59164e6a-1ccb-455c-8284-e2e00c948516","uri":"","name":"*.noaa.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"82f321e6-ec9f-491a-9ee6-8c755d618700","sortOrder":2},"sortOrder":2,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"59164e6a-1ccb-455c-8284-e2e00c948516"}],"recentChangeFlags":null},{"id":"992fc580-ea49-47cc-aa84-d671e8ca60fd","uri":"","name":"*.uspto.gov","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"6d0fcf76-9013-4069-9684-74d73cfcb9a5","sortOrder":3},"sortOrder":3,"tags":[{"id":"3a3487a7-9abf-45f0-8057-51dabed20371","name":"Drupal","targetId":"992fc580-ea49-47cc-aa84-d671e8ca60fd"},{"id":"a51a78cb-e0a6-4043-a736-335dec2d238c","name":"jQuery","targetId":"992fc580-ea49-47cc-aa84-d671e8ca60fd"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"992fc580-ea49-47cc-aa84-d671e8ca60fd"}],"recentChangeFlags":null},{"id":"48f28dab-52e4-4fdd-8ea5-c5209a49150b","uri":"","name":"*.census.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1555e01e-9fb1-4da0-aa47-7784c8da0084","sortOrder":4},"sortOrder":4,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"48f28dab-52e4-4fdd-8ea5-c5209a49150b"}],"recentChangeFlags":null},{"id":"255b5344-fa1c-4632-be1b-7fdf78257740","uri":"","name":"*.doc.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9001f088-7ee4-44c4-9851-4c8273647a21","sortOrder":5},"sortOrder":5,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"255b5344-fa1c-4632-be1b-7fdf78257740"}],"recentChangeFlags":null},{"id":"a1c77a32-b2db-4fb1-a6aa-0304bb74e6cf","uri":"","name":"*.commerce.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d93e225e-193b-4066-89a8-1b4ce9d944be","sortOrder":6},"sortOrder":6,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a1c77a32-b2db-4fb1-a6aa-0304bb74e6cf"}],"recentChangeFlags":null},{"id":"8afb7e6d-56d8-49f6-8794-97b412a10e1b","uri":"","name":"*.firstnet.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"5b851f3f-0455-47b8-8e73-05c67f683519","sortOrder":7},"sortOrder":7,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8afb7e6d-56d8-49f6-8794-97b412a10e1b"}],"recentChangeFlags":null},{"id":"a19df252-71d5-4e92-9f0b-0be20c808c81","uri":"","name":"*.export.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4ea3910e-23a0-471c-a917-ddac0e711b58","sortOrder":8},"sortOrder":8,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a19df252-71d5-4e92-9f0b-0be20c808c81"}],"recentChangeFlags":null},{"id":"adacbd7c-b9e8-4f96-9380-f38f4fc8315e","uri":"","name":"*.trade.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e8b6ffe3-d330-4930-ba13-700a89b83cf1","sortOrder":9},"sortOrder":9,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"adacbd7c-b9e8-4f96-9380-f38f4fc8315e"}],"recentChangeFlags":null},{"id":"358d9ffd-a11b-40c7-b54d-315dc396dd14","uri":"","name":"*.2020census.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ca5486b4-b194-4c83-9287-7d67a1f27254","sortOrder":10},"sortOrder":10,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"358d9ffd-a11b-40c7-b54d-315dc396dd14"}],"recentChangeFlags":null},{"id":"03577f07-62d6-4e01-babf-82aac020dd51","uri":"","name":"*.bea.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a96d2a3c-725c-4eb4-865a-e925ad197cdf","sortOrder":11},"sortOrder":11,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"03577f07-62d6-4e01-babf-82aac020dd51"}],"recentChangeFlags":null},{"id":"446fa7a1-0659-4d58-81d6-72b39945ee2d","uri":"","name":"*.aviationweather.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f7c670fc-0243-4a88-9f49-6df672357881","sortOrder":12},"sortOrder":12,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"446fa7a1-0659-4d58-81d6-72b39945ee2d"}],"recentChangeFlags":null},{"id":"e97fb5fb-f911-4f34-ac74-f4ad5e6899af","uri":"","name":"*.ntis.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"3c66693f-270a-4afb-b567-b7d43cee73e8","sortOrder":13},"sortOrder":13,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e97fb5fb-f911-4f34-ac74-f4ad5e6899af"}],"recentChangeFlags":null},{"id":"b02227e4-0b5d-4995-b6ef-4c371623253a","uri":"","name":"*.weather.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"66c3fffd-85d4-4bc9-baeb-a7b0cb256a73","sortOrder":14},"sortOrder":14,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b02227e4-0b5d-4995-b6ef-4c371623253a"}],"recentChangeFlags":null},{"id":"339a7551-a36a-471f-9bf1-3fd4dd99652c","uri":"","name":"*.ap.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d73c2558-d2c9-4063-ab25-5144ac45687b","sortOrder":15},"sortOrder":15,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"339a7551-a36a-471f-9bf1-3fd4dd99652c"}],"recentChangeFlags":null},{"id":"b0b1fa4a-442f-4e45-b5f4-a2e9eb198497","uri":"","name":"*.bldrdoc.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b6ef7597-ea10-45f8-972d-6afed03675a5","sortOrder":16},"sortOrder":16,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b0b1fa4a-442f-4e45-b5f4-a2e9eb198497"}],"recentChangeFlags":null},{"id":"7317b8fe-678a-44e0-8f2b-1026205116f7","uri":"","name":"*.mbda.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f3ebdf25-4a7e-4210-b9a8-45878deb6520","sortOrder":17},"sortOrder":17,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7317b8fe-678a-44e0-8f2b-1026205116f7"}],"recentChangeFlags":null},{"id":"73f3f313-848a-40c6-a6ce-18bc58f9685c","uri":"","name":"*.drought.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"2bfe2627-c39c-417c-8d22-94dc1512a853","sortOrder":18},"sortOrder":18,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"73f3f313-848a-40c6-a6ce-18bc58f9685c"}],"recentChangeFlags":null},{"id":"e9a29f80-4a27-403c-ad7c-41aec845f1fc","uri":"","name":"*.bis.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c9aad92b-fe11-4cb7-8e18-6ae9fedcb909","sortOrder":19},"sortOrder":19,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e9a29f80-4a27-403c-ad7c-41aec845f1fc"}],"recentChangeFlags":null},{"id":"cbaa38ea-b48c-4eed-b2dc-14c02d26287a","uri":"","name":"*.buyusa.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"41b028a1-a309-47e5-aa7a-9639b0712854","sortOrder":20},"sortOrder":20,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cbaa38ea-b48c-4eed-b2dc-14c02d26287a"}],"recentChangeFlags":null},{"id":"6d9978a7-5136-4c00-9977-5fc21c196be6","uri":"","name":"*.chips.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"90324221-83f9-4452-8c69-e3356f434445","sortOrder":21},"sortOrder":21,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6d9978a7-5136-4c00-9977-5fc21c196be6"}],"recentChangeFlags":null},{"id":"436079f3-30c8-491a-8319-a94bbe27a6bd","uri":"","name":"*.climate.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"566b2173-2865-48c5-a594-68c57c79203e","sortOrder":22},"sortOrder":22,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"436079f3-30c8-491a-8319-a94bbe27a6bd"}],"recentChangeFlags":null},{"id":"e8694c08-5d4e-4299-bcf9-210274f8353a","uri":"","name":"*.ntia.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a5b280e0-0114-4129-b48c-816bc136b2ee","sortOrder":23},"sortOrder":23,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e8694c08-5d4e-4299-bcf9-210274f8353a"}],"recentChangeFlags":null},{"id":"953305f6-fe64-4979-8ffc-dd848e8e3059","uri":"","name":"*.manufacturing.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"66b28ee9-bd18-484f-a42d-d15e11793774","sortOrder":24},"sortOrder":24,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"953305f6-fe64-4979-8ffc-dd848e8e3059"}],"recentChangeFlags":null},{"id":"4b07fc16-14fb-4965-b9c6-2c3ad3ca5d1a","uri":"","name":"*.eda.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c72bf2c5-a4c9-4baf-bcfb-52afac7f2eb3","sortOrder":25},"sortOrder":25,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"4b07fc16-14fb-4965-b9c6-2c3ad3ca5d1a"}],"recentChangeFlags":null},{"id":"e2c70def-6253-4492-8d06-830ba2fee847","uri":"","name":"*.edison.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"eaaae038-b6b5-4f6f-be57-a16138a6cb80","sortOrder":26},"sortOrder":26,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e2c70def-6253-4492-8d06-830ba2fee847"}],"recentChangeFlags":null},{"id":"8d114d82-9857-4f97-ab12-3da64368f87e","uri":"","name":"*.fishwatch.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"56053d08-95e9-4644-a7a1-e1f270d0119e","sortOrder":27},"sortOrder":27,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8d114d82-9857-4f97-ab12-3da64368f87e"}],"recentChangeFlags":null},{"id":"ced864b4-3af1-4092-be45-7cacaa0786f1","uri":"","name":"*.stopfakes.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ce5216db-bd9e-42c3-bc1b-df840d962ee9","sortOrder":28},"sortOrder":28,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ced864b4-3af1-4092-be45-7cacaa0786f1"}],"recentChangeFlags":null},{"id":"54aad222-f523-46f5-8965-f5a4325a2422","uri":"","name":"*.goes-r.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a8a10a50-1ab5-4306-b27e-7c444cb32179","sortOrder":29},"sortOrder":29,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"54aad222-f523-46f5-8965-f5a4325a2422"}],"recentChangeFlags":null},{"id":"a7eeb954-2257-4679-be02-69ff28cb26bc","uri":"","name":"*.gps.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fe141677-49d5-4e04-b5dc-74213533730d","sortOrder":30},"sortOrder":30,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a7eeb954-2257-4679-be02-69ff28cb26bc"}],"recentChangeFlags":null},{"id":"39488a37-ca77-4b8d-95cc-0b33c8319fd7","uri":"","name":"*.heat.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"faa7b1ca-adaa-4357-9adb-55aab948106a","sortOrder":31},"sortOrder":31,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"39488a37-ca77-4b8d-95cc-0b33c8319fd7"}],"recentChangeFlags":null},{"id":"fc0a7258-4e5c-45f6-b69c-36b39e4ac7e1","uri":"","name":"*.hurricanes.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"629ef2a1-9242-4ba1-9cae-db10195082ef","sortOrder":32},"sortOrder":32,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fc0a7258-4e5c-45f6-b69c-36b39e4ac7e1"}],"recentChangeFlags":null},{"id":"0ce0475a-e80f-4af5-8fd6-deb26c7ceba9","uri":"","name":"*.icams-portal.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d6537243-9c19-4039-a9c6-b94cc6e2c603","sortOrder":33},"sortOrder":33,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0ce0475a-e80f-4af5-8fd6-deb26c7ceba9"}],"recentChangeFlags":null},{"id":"0a2dae80-3bef-4cf9-9fa0-36e899e5f383","uri":"","name":"*.iedison.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cef02bd8-02c7-4dc3-bf93-7e197b9427ec","sortOrder":34},"sortOrder":34,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0a2dae80-3bef-4cf9-9fa0-36e899e5f383"}],"recentChangeFlags":null},{"id":"3eb23182-ea6c-41c2-bcb1-dd0e076a8e3f","uri":"","name":"*.ofcm.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"79349c8e-8b79-41d6-b291-ca14ff1093e0","sortOrder":35},"sortOrder":35,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"3eb23182-ea6c-41c2-bcb1-dd0e076a8e3f"}],"recentChangeFlags":null},{"id":"5a2cebef-e76f-4684-9c4b-5360206ce362","uri":"","name":"*.internet4all.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"68dd58e6-82ed-4483-93c7-4a10331be0d1","sortOrder":36},"sortOrder":36,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5a2cebef-e76f-4684-9c4b-5360206ce362"}],"recentChangeFlags":null},{"id":"78c38bfd-28b6-4e15-bb61-f2332cab36b7","uri":"","name":"*.internetforall.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8ccd4eca-b7c0-4a66-a999-f59398e8af3e","sortOrder":37},"sortOrder":37,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"78c38bfd-28b6-4e15-bb61-f2332cab36b7"}],"recentChangeFlags":null},{"id":"5b3d78f3-6995-4a2b-b86f-b9d5b16db6ea","uri":"","name":"*.luca-appeals.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"16d91f93-701c-49d5-852b-602003f5236b","sortOrder":38},"sortOrder":38,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"5b3d78f3-6995-4a2b-b86f-b9d5b16db6ea"}],"recentChangeFlags":null},{"id":"455fabb6-d3bb-4cea-82da-09523f494cec","uri":"","name":"*.manufacturingusa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fbeb138c-383d-442a-a1e9-d1bfca23e322","sortOrder":39},"sortOrder":39,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"455fabb6-d3bb-4cea-82da-09523f494cec"}],"recentChangeFlags":null},{"id":"a76c334b-f410-422b-954d-50cd0f498110","uri":"","name":"*.marinecadastre.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ffb85800-67a3-4325-aad2-76e5326ce2b5","sortOrder":40},"sortOrder":40,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a76c334b-f410-422b-954d-50cd0f498110"}],"recentChangeFlags":null},{"id":"f4aebff0-5733-47a5-a7ff-b771f394e81c","uri":"","name":"*.mfgusa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ad69613d-1ade-4cf5-8277-ee61b5bdac87","sortOrder":41},"sortOrder":41,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f4aebff0-5733-47a5-a7ff-b771f394e81c"}],"recentChangeFlags":null},{"id":"bee17db2-bae2-4076-a207-a728cfdeefad","uri":"","name":"*.mgi.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a90ddc6d-fc34-4957-a714-1e15c2b96cb4","sortOrder":42},"sortOrder":42,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"bee17db2-bae2-4076-a207-a728cfdeefad"}],"recentChangeFlags":null},{"id":"8c48c814-25e9-45f3-8ba6-e0c622e35ed2","uri":"","name":"*.my2020census.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9dc30f25-695e-4f14-8743-2ac45153a609","sortOrder":43},"sortOrder":43,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8c48c814-25e9-45f3-8ba6-e0c622e35ed2"}],"recentChangeFlags":null},{"id":"425e9f7c-d5ec-4b56-9dc6-1b66582b553f","uri":"","name":"*.nccoe.org","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f9166807-f2a8-48c6-92a4-e3121c944081","sortOrder":44},"sortOrder":44,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"425e9f7c-d5ec-4b56-9dc6-1b66582b553f"}],"recentChangeFlags":null},{"id":"85e41c1a-a448-4e0a-9a19-713970a840bd","uri":"","name":"*.nehrp.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"216b1e54-717c-426f-be98-604b0257f9f3","sortOrder":45},"sortOrder":45,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"85e41c1a-a448-4e0a-9a19-713970a840bd"}],"recentChangeFlags":null},{"id":"14e0a8c1-35b9-46b3-9606-23a8056852f0","uri":"","name":"*.time.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c6db3578-c0d4-45c3-9369-90743f51d5bf","sortOrder":46},"sortOrder":46,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"14e0a8c1-35b9-46b3-9606-23a8056852f0"}],"recentChangeFlags":null},{"id":"7c52244c-fa11-4628-b4d3-cf35449bbe93","uri":"","name":"*.tsunami.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"965ae13a-eb9d-483b-b8d8-c46b62447d46","sortOrder":47},"sortOrder":47,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7c52244c-fa11-4628-b4d3-cf35449bbe93"}],"recentChangeFlags":null},{"id":"7ff112d9-2612-460f-93ab-e27b48d330ec","uri":"","name":"*.nwirp.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"64c8c8cb-d3b4-4665-9b72-dad1152279c4","sortOrder":48},"sortOrder":48,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7ff112d9-2612-460f-93ab-e27b48d330ec"}],"recentChangeFlags":null},{"id":"cd975656-ff28-4c86-a889-4f8a87a6d57f","uri":"","name":"*.papahanaumokuakea.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1b60fa46-f25e-46e9-bd46-61d4cf34245b","sortOrder":49},"sortOrder":49,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"cd975656-ff28-4c86-a889-4f8a87a6d57f"}],"recentChangeFlags":null},{"id":"58a8edef-d124-4f6c-a5cc-802a48fbb160","uri":"","name":"*.pscr.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"6d2613b3-4878-4ae0-b455-b4211b8afd88","sortOrder":50},"sortOrder":50,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"58a8edef-d124-4f6c-a5cc-802a48fbb160"}],"recentChangeFlags":null},{"id":"9f8e01eb-b4ca-4f86-85e0-209963d3b53a","uri":"","name":"*.privacyshield.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8cf50433-d5e7-4430-8038-e6aadec56020","sortOrder":51},"sortOrder":51,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"9f8e01eb-b4ca-4f86-85e0-209963d3b53a"}],"recentChangeFlags":null},{"id":"820240c1-6518-472a-b6f7-675586d29fa8","uri":"","name":"*.sdr.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"80c5e762-6e52-4552-9d76-55b5e5d73be3","sortOrder":52},"sortOrder":52,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"820240c1-6518-472a-b6f7-675586d29fa8"}],"recentChangeFlags":null},{"id":"d7d47f4b-5e2a-4ac3-bd71-6511b1a028f8","uri":"","name":"*.selectusa.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"70ba6f25-460d-48e8-a364-074db334d93e","sortOrder":53},"sortOrder":53,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d7d47f4b-5e2a-4ac3-bd71-6511b1a028f8"}],"recentChangeFlags":null},{"id":"47837a90-45e6-4bf1-987e-b19e2dee245b","uri":"","name":"*.semiconductors.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"91f7e653-4b20-4835-8bbc-fee9815f56f6","sortOrder":54},"sortOrder":54,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"47837a90-45e6-4bf1-987e-b19e2dee245b"}],"recentChangeFlags":null},{"id":"d0fb27fb-eea8-407c-8773-20f2d40a9754","uri":"","name":"*.spaceweather.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1b2e45c7-c5af-470b-85a9-1c9d457104c5","sortOrder":55},"sortOrder":55,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"d0fb27fb-eea8-407c-8773-20f2d40a9754"}],"recentChangeFlags":null},{"id":"0d83f92d-fa44-46c8-bbcd-e9529a7120be","uri":"","name":"*.spectrum.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a6f7cea2-3882-4dd9-86f1-331c22ef4b03","sortOrder":56},"sortOrder":56,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0d83f92d-fa44-46c8-bbcd-e9529a7120be"}],"recentChangeFlags":null},{"id":"191f3d56-47d8-47a2-9297-55028c0b5d7f","uri":"","name":"*.standards.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1edb03ab-b285-46b0-bb04-7217a953db25","sortOrder":57},"sortOrder":57,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"191f3d56-47d8-47a2-9297-55028c0b5d7f"}],"recentChangeFlags":null},{"id":"41e47961-07e4-42d6-9694-a54141d932b6","uri":"","name":"*.sworm.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"4f2cf97b-5bfa-40ed-a1e2-ff26dba8d136","sortOrder":58},"sortOrder":58,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"41e47961-07e4-42d6-9694-a54141d932b6"}],"recentChangeFlags":null},{"id":"fa2763d2-a518-4291-b90d-3145b1a90dda","uri":"","name":"*.tasefiling.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dc257882-93c2-4bc4-afce-cb4d64d1f5f6","sortOrder":59},"sortOrder":59,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fa2763d2-a518-4291-b90d-3145b1a90dda"}],"recentChangeFlags":null},{"id":"991923de-7488-4a6c-a7f3-6082dae61c97","uri":"","name":"*.usicecenter.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f348698f-c4b2-4356-89df-1679befbfec0","sortOrder":60},"sortOrder":60,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"991923de-7488-4a6c-a7f3-6082dae61c97"}],"recentChangeFlags":null},{"id":"1afef31a-23c0-4fab-b6da-829b21e6858d","uri":"","name":"*.wwtg.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"559dcd42-c554-40e7-be07-3045d51cddf0","sortOrder":61},"sortOrder":61,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"1afef31a-23c0-4fab-b6da-829b21e6858d"}],"recentChangeFlags":null},{"id":"647409be-9623-4838-b79a-1755d833444b","uri":"","name":"*.xd.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ec2a9dc2-fe7e-4610-b435-a1fee25813f8","sortOrder":62},"sortOrder":62,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"647409be-9623-4838-b79a-1755d833444b"}],"recentChangeFlags":null},{"id":"b0ec014f-8e29-4815-98b2-b72883330f78","uri":"","name":"*.cwc.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"d6444313-c59b-4a08-b844-29fff0781d91","sortOrder":63},"sortOrder":63,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"b0ec014f-8e29-4815-98b2-b72883330f78"}],"recentChangeFlags":null},{"id":"95d0f277-58e7-40f4-a6ad-f5df352f8f78","uri":"","name":"*.spd15revision.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c95cffc8-bd67-4473-b930-50b2c6e151cd","sortOrder":64},"sortOrder":64,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"95d0f277-58e7-40f4-a6ad-f5df352f8f78"}],"recentChangeFlags":null},{"id":"2a349fc4-f9e9-4f96-8ecc-20323ecbea90","uri":"https://trumpcard.gov","name":"trumpcard.gov","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"51455ac4-f141-480f-8c0d-e8bb234187db","sortOrder":65},"sortOrder":65,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2a349fc4-f9e9-4f96-8ecc-20323ecbea90"}],"recentChangeFlags":null},{"id":"fa38a9cf-8a16-4878-af3d-f7dd805fe7e6","uri":"","name":"trumpgoldcard.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"18b1bb87-1e80-426b-8a5a-b77c9d0e3b32","sortOrder":66},"sortOrder":66,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"fa38a9cf-8a16-4878-af3d-f7dd805fe7e6"}],"recentChangeFlags":null},{"id":"5f93bf61-0a2b-42ff-9b94-63d638a9a8e8","uri":"https://github.com/usnistgov/","name":"NIST GitHub","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b5b8c287-eca3-4cc1-a58b-a7f04dbd6642","sortOrder":67},"sortOrder":67,"tags":[{"id":"20f6988d-5b8c-41bb-9ca8-d9b271b7874d","name":"Github","targetId":"5f93bf61-0a2b-42ff-9b94-63d638a9a8e8"}],"recentChangeFlags":null},{"id":"4c241de2-1aa8-4714-851e-31d6f35cb39b","uri":"","name":"*.boulder.doc.gov","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"b499674f-0842-49c7-acf8-adca2f10535a","sortOrder":68},"sortOrder":68,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"4c241de2-1aa8-4714-851e-31d6f35cb39b"}],"recentChangeFlags":null},{"id":"8458b4ce-7c2f-4891-ad1e-cd5385805480","uri":"","name":"*.natcast.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"cc9aa83f-d2a1-41e6-9e4c-9a330b3b89f9","sortOrder":69},"sortOrder":69,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"8458b4ce-7c2f-4891-ad1e-cd5385805480"}],"recentChangeFlags":null},{"id":"6d1b7586-eda8-4f1c-a3c8-ef6a21079494","uri":"","name":"*.natcast.net","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a48b2b8b-3065-4429-af49-afa0e534688c","sortOrder":70},"sortOrder":70,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6d1b7586-eda8-4f1c-a3c8-ef6a21079494"}],"recentChangeFlags":null},{"id":"01c82b01-450c-4018-93f0-7f4a5c3f250f","uri":"","name":"*.natcast.org","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8b144ef9-3c46-4a8a-988c-28814e0424d1","sortOrder":71},"sortOrder":71,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"01c82b01-450c-4018-93f0-7f4a5c3f250f"}],"recentChangeFlags":null},{"id":"a61153e4-4b82-4358-8241-97b81174d62f","uri":"","name":"*.nstc-usa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"8afc8e99-8fc8-45a7-ab80-97685f2ec4be","sortOrder":72},"sortOrder":72,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a61153e4-4b82-4358-8241-97b81174d62f"}],"recentChangeFlags":null},{"id":"0601e0c6-00dd-48df-84a6-4abdb052a9eb","uri":"","name":"*.nstcusa.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"40fca9ce-896c-4a3b-8e9e-e556ba5a18d3","sortOrder":73},"sortOrder":73,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"0601e0c6-00dd-48df-84a6-4abdb052a9eb"}],"recentChangeFlags":null},{"id":"f6106052-12af-40b1-b67a-b9a743dc4b6c","uri":"","name":"*.nstc-usa.net","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"89c52168-5d2f-4bad-b64a-c1c1d2bfe6db","sortOrder":74},"sortOrder":74,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"f6106052-12af-40b1-b67a-b9a743dc4b6c"}],"recentChangeFlags":null},{"id":"62b9a11b-b54c-45e8-a77d-d47c8c0019ad","uri":"","name":"*.nstc-usa.org","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a8660e08-9169-4f89-b009-4273cda0ae31","sortOrder":75},"sortOrder":75,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"62b9a11b-b54c-45e8-a77d-d47c8c0019ad"}],"recentChangeFlags":null},{"id":"76e32cef-d062-4ab1-8699-5afd0257af8f","uri":"","name":"*.nstcusa.org","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"95bd60d1-bef0-47da-92f0-6698ae051bde","sortOrder":76},"sortOrder":76,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"76e32cef-d062-4ab1-8699-5afd0257af8f"}],"recentChangeFlags":null},{"id":"a1740615-d4b7-4e28-8ec5-86378f789509","uri":"","name":"*.usnstc.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ec25e575-74e7-4c00-b4ed-d2074662abd7","sortOrder":77},"sortOrder":77,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a1740615-d4b7-4e28-8ec5-86378f789509"}],"recentChangeFlags":null},{"id":"a0853bf0-2b35-4f8e-b120-3483935c8956","uri":"","name":"*.usnstc.net","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"7a904d58-7080-4bb0-957e-16f2c2a457cd","sortOrder":78},"sortOrder":78,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"a0853bf0-2b35-4f8e-b120-3483935c8956"}],"recentChangeFlags":null},{"id":"6c929f09-3780-48f7-96b3-94dedd099456","uri":"","name":"*.usnstc.org","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"1a706047-a10d-4fd6-802c-04362ac9e3b0","sortOrder":79},"sortOrder":79,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"6c929f09-3780-48f7-96b3-94dedd099456"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":null,"descriptionHtml":null,"rewardRangeData":{},"recentChangeFlags":null}],"resources":[],"engagement":{"id":"90c74874-8746-4f64-a668-b12cc2aa1622","code":"usdoc-vdp","state":"in_progress","endsAt":null,"bountyId":"ddbca351-e639-4aaa-81a9-5ae36e07cb2a","startsAt":"2025-10-22T15:44:03Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Government","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/1ae5/44fa/e94470ea/eebba71d79348d62f165411242943488_u_s_department_of_commerce_logo.jpeg","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"no_reward","engagementTypeDetail":{"iconVariant":"vdp","productLabel":"Vulnerability Disclosure","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2025-10-22T15:44:03.178Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/usdoc-vdp","changelogs":"/engagements/usdoc-vdp/changelog","submissions":null,"announcements":"/engagements/usdoc-vdp/announcements","hallOfFame":"/engagements/usdoc-vdp/hall_of_fames","crowdstream":"/engagements/usdoc-vdp/crowdstream"},"announcementsCount":1,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Priority Triage","submitReportUrl":"/engagements/usdoc-vdp/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=usdoc-vdp\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/usdoc-vdp/engagement_subscribers","engagementChangelogsUrl":"/engagements/usdoc-vdp/changelog","publishedAt":"2026-04-20T19:36:16.337Z","engagementChangelogUrl":"/engagements/usdoc-vdp/changelog/3d77a480-c8c2-42be-b79b-d366eb5479ec","createUserFeedbacksUrl":"/engagements/usdoc-vdp/feedbacks","engagementCrowdstreamUrl":"/engagements/usdoc-vdp/crowdstream","acceptedSubmissionsEnabled":true,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}