Reading the policy rules I noticed that the domains valid for bounties were restricted to a very few, but I did not care and explored all the reachable targets regardless, one of the first being news.starbucks.com .