• Vulnerabilities related to rate limit are considered outside the scope of bug bounty until they lead to a vulnerability with a higher degree of importance.

• Vulnerabilities on third-party websites or applications

• Social engineering attacks

• Brute Forcing accounts

• Issues related to outdated or unsupported browsers/clients

• Vulnerabilities requiring physical access to devices

• Open Redirect (POST-Based)

• lack of security headers

• Issues related to insecure SSL/TLS cipher suites or protocols

• Vulnerabilities already reported by others

• Email spoofing

• Internal open redirect

• Self XSS

• DOS/DDOS attacks

• SSRF (DNS Query Only)