Innogames / InnoGames Intigriti


Target Policy
https://app.intigriti.com/api/core/researcher/programs/innogames/innogames
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • com.innogames.elvenar - Android

    Sign up on Microsoft AppCenter and download the special app for BugBounty testing:
    https://install.appcenter.ms/orgs/innogames-gmbh/apps/elvenar-bugbounty-android/distribution_groups/bugbounty

    Other
    medium
  • xs0.elvenar.com

    This is our game master server which stores information about all worlds available. Here: xs1.

    * Request limit does not apply

    URL
    medium
  • xs.grepolis.com

    This is our game landing page system which is used to signup, login and get news about the game

    * Request limit does not apply

    URL
    medium
  • xs1.elvenar.com

    This is the actual game world where all the game logic resides and the player gets redirected to

    * Request limit does not apply
    * The game worlds will be reset regularly without any advance notice

    URL
    medium
  • com.innogames.foeandroid

    Sign up on AppCenter and download the special app for BugBounty testing:
    https://install.appcenter.ms/orgs/innogames-gmbh/apps/foe-bugbounty-android/distribution_groups/bugbounty

    Other
    medium
  • *.igpayment.com

    This is our payment environment used in all of our games.

    **Note for automated-scanning:**
    We are happy that you are as enthusiastic as we are about this program!
    To not impact our live-systems and other researchers too much, we ask you to keep your automated scanners on a scan rate of 1 request/s.

    URL
    high
  • xs.elvenar.com

    This is our game landing page system which is used to signup, login and get news about the game

    * Request limit does not apply

    URL
    medium
  • support.innogames.com

    * Please avoid creating many new tickets, but instead concentrate your testing on the ticket contents.

    URL
    high
  • xs0.forgeofempires.com

    This is our game master server which stores information about all worlds available. Here: xs1.

    * Request limit does not apply

    URL
    medium
  • xs1.grepolis.com

    This is the actual game world where all the game logic resides and the player gets redirected to

    * Request limit does not apply
    * The game worlds will be reset regularly without any advance notice

    URL
    medium
  • xs1.forgeofempires.com

    This is the actual game world where all the game logic resides and the player gets redirected to

    * Request limit does not apply
    * The game worlds will be reset regularly without any advance notice

    URL
    medium
  • xs1.tribalwars.cash

    This is the actual game world where all the game logic resides and the player gets redirected to
    * Request limit does not apply
    * The game worlds will be reset regularly without any advance notice

    URL
    medium
  • xs0.grepolis.com

    This is our game master server which stores information about all worlds available. Here: xs1.

    * Request limit does not apply

    URL
    medium
  • xs.forgeofempires.com

    This is our game landing page system which is used to signup, login and get news about the game

    * Request limit does not apply

    URL
    medium
  • tribalwars.cash

    This is our game master server which stores information about all worlds available. Here: xs1.

    * Request limit does not apply

    URL
    medium
  • innogames.com

    * Zero days are not covered by this program.
    * Bugs are considered valid after a new version has been released for more than 30 days

    Please do not send applications through the application form. This is a 3rd party tool and out-of-scope.

    URL
    medium
  • *.innogames.de

    **Notes for login.innogames.de**
    This is our central login and account management tool. We do not provide accounts for this service and there are no registration pages available.

    **Note for automated-scanning:**
    We are happy that you are as enthusiastic as we are about this program!
    To not impact our live-systems and other researchers too much, we ask you to keep your automated scanners on a scan rate of 1 request/s.

    URL
    high
  • *.innogames.com

    **Note for automated-scanning:**
    We are happy that you are as enthusiastic as we are about this program!
    To not impact our live-systems and other researchers too much, we ask you to keep your automated scanners on a scan rate of 1 request/s.

    URL
    medium
Target Scope Domains
  • igpayment.com
  • innogames.com
  • innogames.de
  • support.innogames.com
  • tribalwars.cash
  • xs.elvenar.com
  • xs.forgeofempires.com
  • xs.grepolis.com
  • xs0.elvenar.com
  • xs0.forgeofempires.com
  • xs0.grepolis.com
  • xs1.elvenar.com
  • xs1.forgeofempires.com
  • xs1.grepolis.com
  • xs1.tribalwars.cash
Tech Stack

Last Finished Scan:
Scan Name
Fleet
Finished
State
allkxss
8 months, 3 weeks ago
Finished
  • Fleet: allkxss
  • Duration: 17.87 Minutes
  • Finished: 8 months, 3 weeks ago