Bug bounty submission: I was able do discover a domain via CT logs and bypass the WAF to connect to it

Me: you discovered a public website and connected to it with a browser, in other words, you have successfully used the internet – where should I send your reward?