Just Eat Takeaway.com

  • $100 – $4,000 per vulnerability
  • Up to $5,000 maximum reward
  • Safe harbor

Reminder for out of Scope List

Dear all,

As already mentioned on our program brief before, the domains in the list below are out of scope. However, our third party partner is still observing requests from the program. Please re-review the bounty brief in detail and adjust your testing, and all scanners accordingly to make sure you are only testing and submitting in-scope bugs.

If you have any questions on the change in the scope, please reach out to support@bugcrowd.com.

Kind regards

The out-of-scope domain list:
orderandwin.takeaway.com
orderandwin.lieferando.de
orderandwin.just-eat.ch
orderandwin.just-eat.dk
orderandwin.just-eat.fr
orderandwin.thuisbezorgd.nl
orderandwin.just-eat.es
orderandwin.just-eat.co.uk
orderandwin.justeat.it
wow-nachten.lieferando.at
december-surprises.takeaway.com
dekemvriiski-iznenadi.takeaway.com
treatmas.just-eat.ch
wow-nachten.lieferando.de
juleoverraskelser.just-eat.dk
noel-extraordinaire.just-eat.fr
rain-of-gifts.10bis.co.il
treatmas.takeaway.com
december-cadeautjes.thuisbezorgd.nl
pyszne-prezenty.pyszne.pl
vianocne-prekvapenia.bistro.sk
treatmas.just-eat.co.uk
treatmas.just-eat.ie
navimas.just-eat.es
treatmas.menulog.com.au
treatmas.menulog.co.nz
le-sorprese-di-natale.justeat.it
taste-the-summer.just-eat.co.uk
taste-the-summer.just-eat.ie
so-schmeckt-der-sommer.lieferando.at
taste-the-summer.takeaway.com
taste-the-summer.just-eat.ch
so-schmeckt-der-sommer.lieferando.de
saveurs-de-lete.just-eat.fr
proef-de-zomer.thuisbezorgd.nl
smak-lata.pyszne.pl
schmeckt-wie-sommer.lieferando.at
schmeckt-wie-sommer.lieferando.de
orderandwin.just-eat.ie
orderandwin.pyszne.pl
orderandwin.bistro.sk
orderandwin.pizza.be
orderandwin.lieferando.at