Thanks buddy,

Yes we can report this because this is an application level dos and not the network level dos. The companies that states the DoS out of scope is network level dos and not an application level dos.