Scope Updates

Recent changes to bug bounty program scopes.

	Asset / Change	Scope Type	Program URL	Platform	Timestamp
+	Program Removed		https://bugcrowd.com/engagements/soundcloud	bugcrowd	2025-10-17 12:36
Associated Assets: ANDROID: https://play.google.com/store/apps/details?id=com.soundcloud.android&hl=en&gl=US WEBSITE: https://soundcloud.com WEBSITE: .soundcloud.org WEBSITE: .s-cloud.net IOS: https://apps.apple.com/us/app/soundcloud-music-audio/id336353151 API: https://connect.soundcloud.com API: .services.repostnetwork.com API: api-.soundcloud.com WEBSITE: http://artists.soundcloud.com/ WEBSITE: https://soundcloud.org WEBSITE: blog.soundcloud.com WEBSITE: status.soundcloud.com WEBSITE: help.soundcloud.com WEBSITE: community.soundcloud.com WEBSITE: copyright.soundcloud.com WEBSITE: advertising.soundcloud.com OTHER: https://soundcloudmail.com WEBSITE: press.soundcloud.com WEBSITE: https://scdrops.soundcloud.com WEBSITE: https://promote.soundcloud.com WEBSITE: contest.soundcloud.com WEBSITE: playback.soundcloud.com WEBSITE: jobs.soundcloud.com WEBSITE: playerone.soundcloud.com WEBSITE: support.soundcloud.org WEBSITE: secdomaintest.soundcloud.com WEBSITE: firston.soundcloud.com
+	Program Added		https://bugcrowd.com/engagements/neohrms	bugcrowd	2025-10-17 12:06
Associated Assets: WEBSITE: https://secure.neogov.com WEBSITE: https://login.neogov.com WEBSITE: https://performance.neogov.com WEBSITE: https://learn.neogov.com WEBSITE: https://api.neogov.com WEBSITE: https://onboard.neogov.com WEBSITE: https://unified.neogov.com WEBSITE: https://eforms.neogov.com WEBSITE: https://cdn.neogov.com WEBSITE: https://www.governmentjobs.com WEBSITE: https://analytics.neogov.com WEBSITE: https://powerdms.com/ WEBSITE: https://secure.cuehit.net WEBSITE: https://app.agency360.com WEBSITE: https://securesignin.neogov.com WEBSITE: https://securesignin.powerdms.com/ WEBSITE: https://hr.neogov.com
+	Program Removed		https://bugcrowd.com/engagements/neohrms	bugcrowd	2025-10-17 11:36
Associated Assets: WEBSITE: https://secure.neogov.com WEBSITE: https://login.neogov.com WEBSITE: https://performance.neogov.com WEBSITE: https://learn.neogov.com WEBSITE: https://api.neogov.com WEBSITE: https://onboard.neogov.com WEBSITE: https://unified.neogov.com WEBSITE: https://eforms.neogov.com WEBSITE: https://cdn.neogov.com WEBSITE: https://www.governmentjobs.com WEBSITE: https://analytics.neogov.com WEBSITE: https://powerdms.com/ WEBSITE: https://secure.cuehit.net WEBSITE: https://app.agency360.com WEBSITE: https://securesignin.neogov.com WEBSITE: https://securesignin.powerdms.com/ WEBSITE: https://hr.neogov.com
+	Program Added		https://bugcrowd.com/engagements/cfr	bugcrowd	2025-10-17 10:37
Associated Assets: WEBSITE: https://www.cfr.org/ WEBSITE: https://thinkglobalhealth.org WEBSITE: https://education.cfr.org/ WEBSITE: https://subs.foreignaffairs.com WEBSITE: https://subscribe.foreignaffairs.com WEBSITE: https://world101.cfr.org/ WEBSITE: https://modeldiplomacy.cfr.org
+	Program Added		https://bugcrowd.com/engagements/xfinity-home	bugcrowd	2025-10-17 10:06
Associated Assets: WEBSITE: https://home.xfinity.com WEBSITE: Internet.xfinity.com WEBSITE: -cvr-aws-.sys.comcast.net WEBSITE: signalservice.comcast.net WEBSITE: .dh-commerce.com WEBSITE: .ssr.ccp.xcal.tv WEBSITE: orc-xfi.com WEBSITE: .xfiplatform.com IOS: https://apps.apple.com/us/app/xfinity/id1178765645 IOS: Xfinity iOS mobile app ANDROID: https://play.google.com/store/apps/details?id=com.xfinity.digitalhome&hl=en_US&gl=US ANDROID: Xfinity Android mobile app API: xhomeapi-.codebig2.net API: xhomeapi-.cloud.comcast.net HARDWARE: Xfinity Home Hardware (items listed below in brief) IOT: Xfinity Home cameras WEBSITE: speedtest.xfinity.com API: siorc.xfinity.com WEBSITE: smartinet.xfinity.com API: gw.api.dh.comcast.com HARDWARE: xFi Gateways (e.g., XB3, XB6, XB7) HARDWARE: xFi Pods API: https://csp-prod.codebig2.net API: csp-pci.prod.codebig2.net API: aiq-prod.codebig2.net WEBSITE: .xfinityhome.com IOT: 3rd Party Devices (known as Works with Xfinity) WEBSITE: oauth.xfinity.com WEBSITE: https://login.xfinity.com WEBSITE: .xerxessecure.com WEBSITE: .cimcontent.net WEBSITE: .identity.xfinity.com WEBSITE: \\business.comcast.com WEBSITE: .hfc.comcastbusiness.net WEBSITE: .hsd1..comcast.net WEBSITE: .pulseinsights.com WEBSITE: .wurfulcloud.com WEBSITE: .appcenter.ms WEBSITE: .kampyle.com WEBSITE: .demdex.net WEBSITE: .openx.net WEBSITE: .criteo.net WEBSITE: .webcontentassessor.com WEBSITE: .amazon-adsystem.com WEBSITE: .adobedtm.com WEBSITE: .adnxs.com WEBSITE: .fwmrm.net NETWORK: 10.0.0.0/8 NETWORK: 50.128.0.0/12 NETWORK: 50.152.0.0/13 NETWORK: 96.201.0.0/16 NETWORK: 96.202.128.0/17 NETWORK: 96.203.0.0/16 NETWORK: 172.26.128.0/18 NETWORK: 184.112.0.0/13 NETWORK: 184.122.0.0/15 WEBSITE: admin.selectwifi.xfinity.com
+	Program Removed		https://bugcrowd.com/engagements/cfr	bugcrowd	2025-10-17 10:06
Associated Assets: WEBSITE: https://www.cfr.org/ WEBSITE: https://thinkglobalhealth.org WEBSITE: https://education.cfr.org/ WEBSITE: https://subs.foreignaffairs.com WEBSITE: https://subscribe.foreignaffairs.com WEBSITE: https://world101.cfr.org/ WEBSITE: https://modeldiplomacy.cfr.org
+	Program Removed		https://bugcrowd.com/engagements/xfinity-home	bugcrowd	2025-10-17 09:36
Associated Assets: WEBSITE: https://home.xfinity.com WEBSITE: Internet.xfinity.com WEBSITE: -cvr-aws-.sys.comcast.net WEBSITE: signalservice.comcast.net WEBSITE: .dh-commerce.com WEBSITE: .ssr.ccp.xcal.tv WEBSITE: orc-xfi.com WEBSITE: .xfiplatform.com IOS: https://apps.apple.com/us/app/xfinity/id1178765645 IOS: Xfinity iOS mobile app ANDROID: https://play.google.com/store/apps/details?id=com.xfinity.digitalhome&hl=en_US&gl=US ANDROID: Xfinity Android mobile app API: xhomeapi-.codebig2.net API: xhomeapi-.cloud.comcast.net HARDWARE: Xfinity Home Hardware (items listed below in brief) IOT: Xfinity Home cameras WEBSITE: speedtest.xfinity.com API: siorc.xfinity.com WEBSITE: smartinet.xfinity.com API: gw.api.dh.comcast.com HARDWARE: xFi Gateways (e.g., XB3, XB6, XB7) HARDWARE: xFi Pods API: https://csp-prod.codebig2.net API: csp-pci.prod.codebig2.net API: aiq-prod.codebig2.net WEBSITE: .xfinityhome.com IOT: 3rd Party Devices (known as Works with Xfinity) WEBSITE: oauth.xfinity.com WEBSITE: https://login.xfinity.com WEBSITE: .xerxessecure.com WEBSITE: .cimcontent.net WEBSITE: .identity.xfinity.com WEBSITE: \\business.comcast.com WEBSITE: .hfc.comcastbusiness.net WEBSITE: .hsd1..comcast.net WEBSITE: .pulseinsights.com WEBSITE: .wurfulcloud.com WEBSITE: .appcenter.ms WEBSITE: .kampyle.com WEBSITE: .demdex.net WEBSITE: .openx.net WEBSITE: .criteo.net WEBSITE: .webcontentassessor.com WEBSITE: .amazon-adsystem.com WEBSITE: .adobedtm.com WEBSITE: .adnxs.com WEBSITE: .fwmrm.net NETWORK: 10.0.0.0/8 NETWORK: 50.128.0.0/12 NETWORK: 50.152.0.0/13 NETWORK: 96.201.0.0/16 NETWORK: 96.202.128.0/17 NETWORK: 96.203.0.0/16 NETWORK: 172.26.128.0/18 NETWORK: 184.112.0.0/13 NETWORK: 184.122.0.0/15 WEBSITE: admin.selectwifi.xfinity.com
+	Program Added		https://bugcrowd.com/engagements/xfinity-home	bugcrowd	2025-10-17 09:06
Associated Assets: WEBSITE: https://home.xfinity.com WEBSITE: Internet.xfinity.com WEBSITE: -cvr-aws-.sys.comcast.net WEBSITE: signalservice.comcast.net WEBSITE: .dh-commerce.com WEBSITE: .ssr.ccp.xcal.tv WEBSITE: orc-xfi.com WEBSITE: .xfiplatform.com IOS: https://apps.apple.com/us/app/xfinity/id1178765645 IOS: Xfinity iOS mobile app ANDROID: https://play.google.com/store/apps/details?id=com.xfinity.digitalhome&hl=en_US&gl=US ANDROID: Xfinity Android mobile app API: xhomeapi-.codebig2.net API: xhomeapi-.cloud.comcast.net HARDWARE: Xfinity Home Hardware (items listed below in brief) IOT: Xfinity Home cameras WEBSITE: speedtest.xfinity.com API: siorc.xfinity.com WEBSITE: smartinet.xfinity.com API: gw.api.dh.comcast.com HARDWARE: xFi Gateways (e.g., XB3, XB6, XB7) HARDWARE: xFi Pods API: https://csp-prod.codebig2.net API: csp-pci.prod.codebig2.net API: aiq-prod.codebig2.net WEBSITE: .xfinityhome.com IOT: 3rd Party Devices (known as Works with Xfinity) WEBSITE: oauth.xfinity.com WEBSITE: https://login.xfinity.com WEBSITE: .xerxessecure.com WEBSITE: .cimcontent.net WEBSITE: .identity.xfinity.com WEBSITE: \\business.comcast.com WEBSITE: .hfc.comcastbusiness.net WEBSITE: .hsd1..comcast.net WEBSITE: .pulseinsights.com WEBSITE: .wurfulcloud.com WEBSITE: .appcenter.ms WEBSITE: .kampyle.com WEBSITE: .demdex.net WEBSITE: .openx.net WEBSITE: .criteo.net WEBSITE: .webcontentassessor.com WEBSITE: .amazon-adsystem.com WEBSITE: .adobedtm.com WEBSITE: .adnxs.com WEBSITE: .fwmrm.net NETWORK: 10.0.0.0/8 NETWORK: 50.128.0.0/12 NETWORK: 50.152.0.0/13 NETWORK: 96.201.0.0/16 NETWORK: 96.202.128.0/17 NETWORK: 96.203.0.0/16 NETWORK: 172.26.128.0/18 NETWORK: 184.112.0.0/13 NETWORK: 184.122.0.0/15 WEBSITE: admin.selectwifi.xfinity.com
+	Program Removed		https://bugcrowd.com/engagements/xfinity-home	bugcrowd	2025-10-17 08:36
Associated Assets: WEBSITE: https://home.xfinity.com WEBSITE: Internet.xfinity.com WEBSITE: -cvr-aws-.sys.comcast.net WEBSITE: signalservice.comcast.net WEBSITE: .dh-commerce.com WEBSITE: .ssr.ccp.xcal.tv WEBSITE: orc-xfi.com WEBSITE: .xfiplatform.com IOS: https://apps.apple.com/us/app/xfinity/id1178765645 IOS: Xfinity iOS mobile app ANDROID: https://play.google.com/store/apps/details?id=com.xfinity.digitalhome&hl=en_US&gl=US ANDROID: Xfinity Android mobile app API: xhomeapi-.codebig2.net API: xhomeapi-.cloud.comcast.net HARDWARE: Xfinity Home Hardware (items listed below in brief) IOT: Xfinity Home cameras WEBSITE: speedtest.xfinity.com API: siorc.xfinity.com WEBSITE: smartinet.xfinity.com API: gw.api.dh.comcast.com HARDWARE: xFi Gateways (e.g., XB3, XB6, XB7) HARDWARE: xFi Pods API: https://csp-prod.codebig2.net API: csp-pci.prod.codebig2.net API: aiq-prod.codebig2.net WEBSITE: .xfinityhome.com IOT: 3rd Party Devices (known as Works with Xfinity) WEBSITE: oauth.xfinity.com WEBSITE: https://login.xfinity.com WEBSITE: .xerxessecure.com WEBSITE: .cimcontent.net WEBSITE: .identity.xfinity.com WEBSITE: \\business.comcast.com WEBSITE: .hfc.comcastbusiness.net WEBSITE: .hsd1..comcast.net WEBSITE: .pulseinsights.com WEBSITE: .wurfulcloud.com WEBSITE: .appcenter.ms WEBSITE: .kampyle.com WEBSITE: .demdex.net WEBSITE: .openx.net WEBSITE: .criteo.net WEBSITE: .webcontentassessor.com WEBSITE: .amazon-adsystem.com WEBSITE: .adobedtm.com WEBSITE: .adnxs.com WEBSITE: .fwmrm.net NETWORK: 10.0.0.0/8 NETWORK: 50.128.0.0/12 NETWORK: 50.152.0.0/13 NETWORK: 96.201.0.0/16 NETWORK: 96.202.128.0/17 NETWORK: 96.203.0.0/16 NETWORK: 172.26.128.0/18 NETWORK: 184.112.0.0/13 NETWORK: 184.122.0.0/15 WEBSITE: admin.selectwifi.xfinity.com
+	Program Added		https://app.intigriti.c...grams/torfs/torfs/detail	intigriti	2025-10-17 08:30
Associated Assets: URL: winkels.torfs.be URL: www.schoenentorfs.be URL: www.schoenentorfs.nl URL: www.torfs.be URL: www.torfs.nl URL: www.samenfittorfs.be
	Asset Removed: URL: xero-sandbox.gocardless.com	Out of Scope	https://hackerone.com/gocardless_bbp	hackerone	2025-10-17 08:17
+	Program Added		https://bugcrowd.com/engagements/cfr	bugcrowd	2025-10-17 08:06
Associated Assets: WEBSITE: https://www.cfr.org/ WEBSITE: https://thinkglobalhealth.org WEBSITE: https://education.cfr.org/ WEBSITE: https://subs.foreignaffairs.com WEBSITE: https://subscribe.foreignaffairs.com WEBSITE: https://world101.cfr.org/ WEBSITE: https://modeldiplomacy.cfr.org
+	Program Added		https://app.intigriti.c...ido/aikidoruntime/detail	intigriti	2025-10-17 08:00
Associated Assets: OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-node#False Positive OTHER: https://github.com/AikidoSec/firewall-python#False Positive
+	Program Removed		https://bugcrowd.com/engagements/cfr	bugcrowd	2025-10-17 07:36
Associated Assets: WEBSITE: https://www.cfr.org/ WEBSITE: https://thinkglobalhealth.org WEBSITE: https://education.cfr.org/ WEBSITE: https://subs.foreignaffairs.com WEBSITE: https://subscribe.foreignaffairs.com WEBSITE: https://world101.cfr.org/ WEBSITE: https://modeldiplomacy.cfr.org
+	Program Added		https://bugcrowd.com/engagements/cfr	bugcrowd	2025-10-17 07:07
Associated Assets: WEBSITE: https://www.cfr.org/ WEBSITE: https://thinkglobalhealth.org WEBSITE: https://education.cfr.org/ WEBSITE: https://subs.foreignaffairs.com WEBSITE: https://subscribe.foreignaffairs.com WEBSITE: https://world101.cfr.org/ WEBSITE: https://modeldiplomacy.cfr.org
+	Program Removed		https://app.intigriti.c...ido/aikidoruntime/detail	intigriti	2025-10-17 07:00
Associated Assets: OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-node#False Positive OTHER: https://github.com/AikidoSec/firewall-python#False Positive
+	Program Removed		https://bugcrowd.com/engagements/cfr	bugcrowd	2025-10-17 06:06
Associated Assets: WEBSITE: https://www.cfr.org/ WEBSITE: https://thinkglobalhealth.org WEBSITE: https://education.cfr.org/ WEBSITE: https://subs.foreignaffairs.com WEBSITE: https://subscribe.foreignaffairs.com WEBSITE: https://world101.cfr.org/ WEBSITE: https://modeldiplomacy.cfr.org
+	Program Added		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-10-17 05:00
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Removed		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-10-17 04:00
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Added		https://app.intigriti.c...cbugbountyprogram/detail	intigriti	2025-10-16 11:00
Associated Assets: WILDCARD: .monzo.com WILDCARD: .prod-ffs.io IOS: 1052238659 ANDROID: co.uk.getmondo URL: www.monzo.com URL: monzo.com WILDCARD: /p2p/ WILDCARD: /contact-discovery/ WILDCARD: /inbound-p2p/ WILDCARD: *.monzo.me URL: community.monzo.com URL: login.internal.monzo.com URL: monzo.me
	Asset Added: URL: studio-fa-porsche.com	In Scope	https://hackerone.com/porsche	hackerone	2025-10-16 10:57
	Asset Added: URL: studiofaporsche.at	In Scope	https://hackerone.com/porsche	hackerone	2025-10-16 10:57
	Asset Added: URL: studio-fa-porsche.at	In Scope	https://hackerone.com/porsche	hackerone	2025-10-16 10:57
	Asset Added: WEB-APPLICATION: *.soyoustart.com	In Scope	https://yeswehack.com/programs/ovh	yeswehack	2025-10-16 10:02
	Asset Added: WEBSITE: *.business.just-eat.co.uk	Out of Scope	https://bugcrowd.com/engagements/justeattakeaway	bugcrowd	2025-10-16 08:36

Scope Updates

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets: