| Company |
Asset |
Asset Type |
Coverage |
Severity |
Bounty |
Create Date |
Resolved |
| Omarchy |
https://github.com/omacom/omarchy |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-23 |
0 |
| Live Nation |
livenation.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-03 |
8 |
| Live Nation |
https://apps.apple.com/no/app/royal-arena/id1181913144 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Live Nation |
dk.royalarena.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-08-03 |
1 |
| Live Nation |
www.lineup.com.mx |
Domain |
In Scope |
Critical |
Eligible |
2026-08-04 |
5 |
| Live Nation |
www.onthewaterfrontfestival.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Live Nation |
www.royalarena.dk |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
1 |
| Live Nation |
www.livenation.co.uk |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
4 |
| Live Nation |
https://signup.ticketmaster.com/bugbountytest |
Url |
In Scope |
Critical |
Eligible |
2026-07-01 |
2 |
| Live Nation |
livenation.me |
Domain |
In Scope |
Critical |
Eligible |
2026-05-19 |
1 |
| Live Nation |
frontgatetickets.com |
Domain |
In Scope |
Critical |
Eligible |
2026-05-27 |
0 |
| Live Nation |
ticketmaster.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-03 |
10 |
| Live Nation |
ticketmaster.ca |
Domain |
In Scope |
Critical |
Eligible |
2026-03-03 |
1 |
| Live Nation |
ticketmaster.co.uk |
Domain |
In Scope |
Critical |
Eligible |
2026-03-03 |
1 |
| Live Nation |
ticketmaster.com.mx |
Domain |
In Scope |
Critical |
Eligible |
2026-03-03 |
1 |
| Live Nation |
ticketmaster.de |
Domain |
In Scope |
Critical |
Eligible |
2026-03-03 |
1 |
| Live Nation |
ticketmaster.com.br |
Domain |
In Scope |
Critical |
Eligible |
2026-03-03 |
0 |
| Live Nation |
app.ticketmaster.com.au |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
0 |
| Live Nation |
app.ticketmaster.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
4 |
| Live Nation |
app.ticketmaster.eu |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
0 |
| Live Nation |
app.ticketmaster.ie |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
0 |
| Live Nation |
app.ticketmaster.co.uk |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
0 |
| Live Nation |
app.ticketmaster.ca |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
0 |
| Live Nation |
app.ticketmaster.com.mx |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
0 |
| Live Nation |
app.livenation.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
2 |
| Live Nation |
https://apps.apple.com/us/app/ticketmaster-buy-sell-tickets/id500003565 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-12-18 |
0 |
| Vercel |
https://github.com/vercel/workflow |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/vercel |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/turborepo |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/swr |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/next.js |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/ms |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/flags |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/eve |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
1 |
| Vercel |
https://github.com/vercel/chat |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/async-sema |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel/ai |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel-labs/skills |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/vercel-labs/agent-skills |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/sveltejs/svelte |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/nuxt/nuxt |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
https://github.com/nitrojs/nitro |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-21 |
0 |
| Vercel |
Vercel sandbox |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-08-10 |
0 |
| Vercel |
v0.app |
Domain |
In Scope |
Critical |
Eligible |
2026-06-11 |
12 |
| Vercel |
*.vercel.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-09-04 |
15 |
| Vercel |
v0.dev |
Domain |
In Scope |
Critical |
Eligible |
2024-12-16 |
50 |
| Vercel |
https://github.com/vercel |
SourceCode |
In Scope |
Critical |
Eligible |
2024-10-24 |
16 |
| Vercel |
*.vercel.app |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-10-24 |
0 |
| Vercel |
*.vercel.live |
Wildcard |
In Scope |
Critical |
Eligible |
2022-12-20 |
6 |
| Vercel |
vercel.com |
Domain |
In Scope |
Critical |
Eligible |
2022-09-29 |
194 |
| Vercel |
vercel.app |
Domain |
In Scope |
Critical |
Eligible |
2022-09-29 |
8 |
| d-you App & German EUDI Wallet Ecosystem |
OOS: All other domains from [*.]youniqx.com |
Api |
Out of Scope |
None |
Ineligible |
2026-09-23 |
0 |
| d-you App & German EUDI Wallet Ecosystem |
OOS: All domains from [*.]bundesdruckerei.de |
Api |
Out of Scope |
None |
Ineligible |
2026-09-23 |
0 |
| d-you App & German EUDI Wallet Ecosystem |
https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/pns |
Api |
In Scope |
High |
Eligible |
2026-09-16 |
0 |
| d-you App & German EUDI Wallet Ecosystem |
https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/status-lists |
Api |
In Scope |
Critical |
Eligible |
2026-09-16 |
0 |
| d-you App & German EUDI Wallet Ecosystem |
https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/mdvm |
Api |
In Scope |
Critical |
Eligible |
2026-09-16 |
0 |
| d-you App & German EUDI Wallet Ecosystem |
https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/wpb |
Api |
In Scope |
Critical |
Eligible |
2026-09-15 |
0 |
| d-you App & German EUDI Wallet Ecosystem |
https://wallet-backend-sandbox.apps.sandbox.nwb.youniqx.com/v1/rwsca |
Api |
In Scope |
Critical |
Eligible |
2026-09-16 |
0 |
| d-you App & German EUDI Wallet Ecosystem |
d-you Wallet iOS Test |
IosTestflight |
In Scope |
Critical |
Eligible |
2026-09-16 |
0 |
| d-you App & German EUDI Wallet Ecosystem |
d-you Wallet Android Test |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-16 |
0 |
| Arc |
*.arc.io |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-14 |
2 |
| Arc |
help.arc.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-16 |
0 |
| Arc |
explorer.arc.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-16 |
0 |
| Arc |
community.arc.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-16 |
0 |
| Arc |
rpc.drpc.testnet.arc.network |
Domain |
In Scope |
Critical |
Eligible |
2026-09-14 |
0 |
| Arc |
https://github.com/circlefin/malachite |
SourceCode |
In Scope |
Critical |
Eligible |
2026-02-26 |
0 |
| Arc |
rpc.testnet.arc.network |
Domain |
In Scope |
Critical |
Eligible |
2026-09-14 |
0 |
| Arc |
https://github.com/circlefin/arc-remote-signer |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-14 |
0 |
| Arc |
https://github.com/circlefin/arc-node |
SourceCode |
In Scope |
Critical |
Eligible |
2026-09-14 |
0 |
| Box BB |
signrequest.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-12-22 |
0 |
| Box BB |
sr-staging-1.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-12-22 |
0 |
| Box BB |
Box Tools |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-01 |
0 |
| Box BB |
cloud.app.box.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-01 |
1 |
| Box BB |
notes.services.box.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-07 |
4 |
| Box BB |
app.box.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-01 |
18 |
| Box BB |
account.box.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-01 |
0 |
| Box BB |
dl.boxcloud.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-01 |
0 |
| Box BB |
upload.box.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-01 |
0 |
| Box BB |
iOS Box Mobile App |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-01-09 |
1 |
| Box BB |
Android Box Mobile App |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2019-12-03 |
1 |
| Box BB |
api.box.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-01 |
2 |
| Box BB |
m.box.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-26 |
1 |
| Box BB |
Box Drive |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-02-14 |
3 |
| Wolt |
https://wolt.typeform.com |
Url |
Out of Scope |
None |
Ineligible |
2026-08-11 |
0 |
| Wolt |
https://merchant.wolt.com/app/partner-with-wolt |
Url |
Out of Scope |
None |
Ineligible |
2026-08-11 |
0 |
| Wolt |
https://wolt.com/en/wolt-for-work-contact-request |
Url |
Out of Scope |
None |
Ineligible |
2026-08-10 |
0 |
| Wolt |
https://merchant-onboarding-service.wolt.com/merchant-admin/inbound-merchant |
Url |
Out of Scope |
None |
Ineligible |
2026-08-10 |
0 |
| Wolt |
https://restaurant-api.wolt.com/v1/waw-api/corporate-leads |
Url |
Out of Scope |
None |
Ineligible |
2026-08-10 |
0 |
| Wolt |
https://merchant.wolt.com/api/merchant-onboarding/merchant-admin/inbound-merchant |
Url |
Out of Scope |
None |
Ineligible |
2026-08-10 |
0 |
| Wolt |
*.pipedrive.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-08-10 |
0 |
| Wolt |
*.wolt.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
press.wolt.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-06 |
0 |
| Wolt |
blog.wolt.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-06 |
0 |
| Wolt |
authentication.wolt.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
corporate.wolt.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
drive.wolt.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
merchant.wolt.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
ops.wolt.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
restaurant-api.wolt.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
wolt.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
com.wolt.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
943905271 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
com.wolt.courierapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
1477299281 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-07-06 |
0 |
| Wolt |
gettest.wolt.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-06 |
0 |
| Wolt |
links.wolt.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-06 |
0 |
| Wolt |
wolt.atlassian.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-06 |
0 |
| Abercrombie & Fitch Bug Bounty |
http://nonmerchvendorprofile.anfcorp.com |
Url |
Out of Scope |
None |
Ineligible |
2026-07-21 |
0 |
| Abercrombie & Fitch Bug Bounty |
applications.abercrombie.com/ |
Domain |
Out of Scope |
None |
Ineligible |
2024-08-30 |
0 |
| Abercrombie & Fitch Bug Bounty |
corporate.abercrombie.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-09 |
2 |
| Abercrombie & Fitch Bug Bounty |
anfcorp.com |
Domain |
In Scope |
Critical |
Eligible |
2024-07-15 |
15 |
| Abercrombie & Fitch Bug Bounty |
hollisterco.com |
Domain |
In Scope |
Critical |
Eligible |
2022-07-28 |
8 |
| Abercrombie & Fitch Bug Bounty |
abercrombie.com |
Domain |
In Scope |
Critical |
Eligible |
2022-07-28 |
23 |
| Abercrombie & Fitch Bug Bounty |
383915209 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-08-01 |
0 |
| Abercrombie & Fitch Bug Bounty |
339041767 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-08-01 |
0 |
| Abercrombie & Fitch Bug Bounty |
com.abercrombie.hollister |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-08-01 |
1 |
| Abercrombie & Fitch Bug Bounty |
com.abercrombie.abercrombie |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-08-01 |
1 |
| Agoda Public |
https://www.agoda.com/account/agodacash |
Url |
In Scope |
Critical |
Eligible |
2026-09-01 |
0 |
| Agoda Public |
https://www.agoda.com/account/cashback |
Url |
In Scope |
Critical |
Eligible |
2026-09-01 |
0 |
| Agoda Public |
https://www.agoda.com/book/ |
Url |
In Scope |
Critical |
Eligible |
2026-06-14 |
0 |
| Anthropic |
API & SDKs |
AiModel |
In Scope |
Critical |
Eligible |
2023-09-09 |
30 |
| Anthropic |
Claude Code |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-03-03 |
189 |
| Anthropic |
https://github.com/modelcontextprotocol |
SourceCode |
Out of Scope |
None |
Ineligible |
2024-11-28 |
0 |
| Anthropic |
Claude in Chrome |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-12-18 |
6 |
| Anthropic |
Claude Desktop Extensions and Claude.ai MCP servers |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-08-05 |
6 |
| Anthropic |
github.com/anthropics |
SourceCode |
In Scope |
Critical |
Eligible |
2025-05-29 |
33 |
| Anthropic |
anthropic.atlassian.com |
Domain |
In Scope |
Critical |
Eligible |
2025-06-06 |
2 |
| Anthropic |
Infrastructure & Internal Apps/Services |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-05-13 |
30 |
| Anthropic |
support.anthropic.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-29 |
0 |
| Anthropic |
docs.anthropic.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-29 |
1 |
| Anthropic |
Leaked Employee API Keys |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-05-29 |
2 |
| Anthropic |
api.anthropic.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-29 |
7 |
| Anthropic |
console.anthropic.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-29 |
3 |
| Anthropic |
Official Clients |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-11-28 |
34 |
| Anthropic |
claude.ai |
Domain |
In Scope |
Critical |
Eligible |
2023-09-08 |
74 |
| Coupang Taiwan |
SUPERAPP (IOS) |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
SUPERAPP (AOS) |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-03-13 |
1 |
| Coupang Taiwan |
www.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
4 |
| Coupang Taiwan |
tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
2 |
| Coupang Taiwan |
review.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
payment.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
pay.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
pages.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
notification-front-web.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
member.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
5 |
| Coupang Taiwan |
mc.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
m.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
cmapi.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
checkout.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
cash.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
cart.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| Coupang Taiwan |
promo.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
tw.coupangls.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
tw.coupangcorp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
1 |
| Coupang Taiwan |
syndication.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
store-display.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
shop.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
2 |
| Coupang Taiwan |
rs-open-api.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
reco.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
partners.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
1 |
| Coupang Taiwan |
myself.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
my.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
1 |
| Coupang Taiwan |
mauth.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
marketplace.tw.coupangcorp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
2 |
| Coupang Taiwan |
loyalty.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
logs-partners.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
ljc.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
ljc-test.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
link.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
influencers.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
id.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
2 |
| Coupang Taiwan |
helpseller.tw.coupangcorp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
helpcenter-tw.coupangcorp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
go-cms.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
fintech-aml-kyc-tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
fileupload.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
fileupload-video.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
developers.tw.coupangcorp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
feed-web.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
dco.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
cart-front-api.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| Coupang Taiwan |
ads-partners.tw.coupang.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-20 |
0 |
| 1win |
1w.run |
Domain |
In Scope |
Critical |
Eligible |
2026-02-18 |
0 |
| 1win |
1w.cash |
Domain |
In Scope |
Critical |
Eligible |
2026-02-18 |
0 |
| 1win |
Deposit/Withdraw |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-22 |
4 |
| 1win |
https://1win.com/betting |
Url |
In Scope |
Critical |
Eligible |
2025-08-06 |
0 |
| 1win |
https://1win.com/casino |
Url |
In Scope |
Critical |
Eligible |
2025-10-22 |
0 |
| 1win |
1win.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-06 |
12 |
| Whatnot |
com.whatnot_mobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-03-09 |
1 |
| Whatnot |
www.whatnot.com |
Domain |
In Scope |
Critical |
Eligible |
2021-06-15 |
34 |
| Whatnot |
Whatnot: Shop, Sell, Connect |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-03-09 |
0 |
| Whatnot |
auction-service.whatnot.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-09 |
1 |
| Whatnot |
live-service.whatnot.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-09 |
1 |
| Whatnot |
api.whatnot.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-09 |
0 |
| Whatnot |
*.whatnot.com |
Wildcard |
In Scope |
High |
Eligible |
2021-06-15 |
46 |
| CLEAR |
my.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2019-03-22 |
9 |
| CLEAR |
http://verified.clearme.com/dashboard |
Url |
In Scope |
Critical |
Eligible |
2026-01-28 |
0 |
| CLEAR |
identity.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2026-01-28 |
0 |
| CLEAR |
concierge.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2026-01-28 |
0 |
| CLEAR |
verified.clearme.com/v1/verification_sessions |
Api |
In Scope |
Critical |
Eligible |
2025-11-17 |
0 |
| CLEAR |
com.clearme.clearapp |
AndroidApk |
In Scope |
Critical |
Eligible |
2020-03-21 |
4 |
| CLEAR |
clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-15 |
27 |
| CLEAR |
ir.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2024-12-09 |
0 |
| CLEAR |
verified.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2025-11-04 |
1 |
| CLEAR |
authentication.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2025-11-04 |
1 |
| CLEAR |
enroll.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-15 |
0 |
| CLEAR |
scan.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2025-01-10 |
0 |
| CLEAR |
docs.clearme.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-12-30 |
0 |
| CLEAR |
legal.clearme.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-12-04 |
0 |
| CLEAR |
clearme.atlassian.net |
Domain |
In Scope |
High |
Eligible |
2024-07-16 |
3 |
| CLEAR |
www.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-15 |
11 |
| CLEAR |
fieldsupport.clearme.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-04 |
0 |
| CLEAR |
hub.clearme.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-14 |
0 |
| CLEAR |
web-edge.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2019-02-06 |
1 |
| CLEAR |
com.clearme.Clear |
IosIpa |
In Scope |
Critical |
Eligible |
2020-03-21 |
0 |
| CLEAR |
mobile.clearme.com |
Domain |
In Scope |
Critical |
Eligible |
2020-03-21 |
0 |
| Meesho |
admin.meesho.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-04-20 |
0 |
| Meesho |
meesho.io |
Domain |
In Scope |
Low |
Eligible |
2026-04-20 |
0 |
| Meesho |
investor.meesho.com |
Domain |
In Scope |
Low |
Eligible |
2026-02-10 |
0 |
| Meesho |
*.meeshoapi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Meesho |
*.valmo.in |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Meesho |
*.meeshosupply.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Meesho |
*.meesho.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Meesho |
Rider App |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Meesho |
com.valmo.ops |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Meesho |
log10-web-staging.valmo.in |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Meesho |
console.valmo.in |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Meesho |
*.meeshoaiservices.ai |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-02-10 |
0 |
| Meesho |
di-prd-superset.meesho.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-10 |
0 |
| Meesho |
*.meeshogcp.in |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-02-10 |
0 |
| Meesho |
agency.meesho.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-10 |
0 |
| Meesho |
warehouse.meesho.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-10 |
0 |
| Meesho |
superstoreapp.meesho.com |
Domain |
In Scope |
High |
Eligible |
2026-01-29 |
1 |
| Meesho |
admin.meeshosupply.com |
Domain |
In Scope |
Critical |
Eligible |
2025-04-28 |
0 |
| Meesho |
affiliate-c.meesho.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-29 |
0 |
| Meesho |
atlas.valmo.in |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-29 |
0 |
| Meesho |
farmiso.meeshosupply.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-29 |
0 |
| Meesho |
grocery-supplier.meesho.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-29 |
0 |
| Meesho |
Other Asset |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-11-21 |
0 |
| Meesho |
com.valmo.valmo |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-11-11 |
2 |
| Meesho |
www.valmo.in |
Domain |
In Scope |
Critical |
Eligible |
2025-11-11 |
7 |
| Meesho |
www.meesho.com |
Domain |
In Scope |
Critical |
Eligible |
2025-04-28 |
17 |
| Meesho |
com.meesho.supply |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-04-28 |
7 |
| Meesho |
affiliate.meesho.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-13 |
4 |
| Meesho |
prod.meeshoapi.com |
Api |
In Scope |
Critical |
Eligible |
2025-10-14 |
5 |
| Meesho |
supplier.meesho.com |
Domain |
In Scope |
Critical |
Eligible |
2025-04-28 |
10 |
| Meesho |
1457958492 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-04-28 |
1 |
| Twilio |
jobs.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-27 |
0 |
| Twilio |
*.sip.*.twilio.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-10-20 |
7 |
| Twilio |
api.twilio.com |
Api |
In Scope |
Critical |
Eligible |
2025-10-20 |
4 |
| Twilio |
http://tsock.us1.twilio.com |
Url |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
https://www.twilio.com/docs/libraries |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-20 |
2 |
| Twilio |
https://www.twilio.com/en-us/blog/get-started-webrtc |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
https://www.twilio.com/login?g=%2fconsole%3f&t=2b1c98334b25c1a785ef15b6556396290e3c704a9b57fc40687cbccd79c46a8c |
Url |
In Scope |
Critical |
Eligible |
2025-10-20 |
13 |
| Twilio |
Twilio APIs |
Api |
In Scope |
Critical |
Eligible |
2025-10-20 |
13 |
| Twilio |
http://events.cdpweek.com |
Url |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
http://apjevents.twilio.com |
Url |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
Third-party services |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
http://twilio.com/labs |
Url |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
http://twilio.com/en-us/company/jobs |
Url |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
http://segment.com/jobs |
Url |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
http://segment.com/contact |
Url |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
Twilio Wireless |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
Twilio Quest |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
All Kurento domains |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
TwimlBins |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
Electric Imp and its assets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
Ytica and its assets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
All Twilio acquisitions until explicitly noted under the in-scope targets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
zipwhip.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
twiliotraining.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
twil.io |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
lab.authy.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
webinars.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
transform.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
support.sendgrid.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
status.sendgrid.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
webinars.segment.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
status.segment.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
community.segment.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
talks.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
surveys.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
support.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
store.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
status.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
signal.twilio.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| Twilio |
api.segment.io |
Api |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
app.segment.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-20 |
19 |
| Twilio |
https://segment.com/docs/connections/sources/ |
Url |
In Scope |
Critical |
Eligible |
2025-10-20 |
6 |
| Twilio |
Any host/web property verified to be owned by Twilio et al. |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-20 |
56 |
| Twilio |
https://www.twilio.com/docs/authy/api |
Api |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
https://www.twilio.com/docs/verify/api |
Api |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
https://www.authy.com/download/ |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-10-20 |
2 |
| Twilio |
https://www.authy.com/download/ |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-10-20 |
1 |
| Twilio |
smtp.sendgrid.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
mc.sendgrid.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
api.sendgrid.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-20 |
5 |
| Twilio |
signup.sendgrid.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
app.sendgrid.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-20 |
3 |
| Twilio |
sendgrid.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-20 |
3 |
| Twilio |
http://help.twilio.com |
Url |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Twilio |
http://twilio.com/blog |
Url |
In Scope |
Critical |
Eligible |
2025-10-20 |
2 |
| Twilio |
static*.twilio.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-10-20 |
0 |
| Anduril Industries |
andurilgear.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-20 |
0 |
| Anduril Industries |
*.anduril.com.au |
Wildcard |
In Scope |
Critical |
Eligible |
2026-01-14 |
0 |
| Anduril Industries |
*.anduril.au |
Wildcard |
In Scope |
Critical |
Eligible |
2026-01-14 |
0 |
| Anduril Industries |
*.andurildev.au |
Wildcard |
In Scope |
Critical |
Eligible |
2026-01-14 |
0 |
| Anduril Industries |
Anduril Property and Facilities |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-01-06 |
0 |
| Anduril Industries |
*.anduril.dev |
Wildcard |
In Scope |
Critical |
Eligible |
2025-12-22 |
3 |
| Anduril Industries |
*.andurildev.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-12-22 |
0 |
| Anduril Industries |
*.anduril.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-12-22 |
17 |
| Unico IDtech |
*.cadastro.uat.unico.app |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-11-12 |
0 |
| Unico IDtech |
uconf.uat.unico.app |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-08 |
0 |
| Unico IDtech |
https://sdk-h1.unico.io/createprocess |
Url |
In Scope |
High |
Eligible |
2026-01-16 |
0 |
| Unico IDtech |
devcenter.unico.io |
Domain |
In Scope |
Medium |
Eligible |
2026-01-16 |
0 |
| Unico IDtech |
unico.io |
Domain |
In Scope |
Critical |
Eligible |
2026-01-16 |
4 |
| Unico IDtech |
blog.unico.io |
Domain |
In Scope |
Medium |
Eligible |
2026-01-16 |
0 |
| Unico IDtech |
secure.unico.io |
Domain |
In Scope |
Critical |
Eligible |
2026-01-16 |
0 |
| Unico IDtech |
openfinance.unico.io |
Domain |
In Scope |
Critical |
Eligible |
2026-01-16 |
0 |
| Unico IDtech |
idcash-uat.unico.io |
Domain |
In Scope |
Critical |
Eligible |
2026-01-16 |
0 |
| Unico IDtech |
issuer.idpay-uat.unico.io |
Domain |
In Scope |
Critical |
Eligible |
2026-01-16 |
0 |
| Unico IDtech |
idpay-uat.unico.io |
Domain |
In Scope |
Critical |
Eligible |
2026-01-16 |
0 |
| Unico IDtech |
[Unico] Liveness Bypass |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-03-17 |
0 |
| Unico IDtech |
backend-sdk.uat.private.unico.run |
Domain |
In Scope |
Critical |
Eligible |
2026-01-14 |
0 |
| Unico IDtech |
*.uat.unico.app |
Wildcard |
In Scope |
Critical |
Eligible |
2026-01-14 |
3 |
| Unico IDtech |
identityhomolog.acesso.io |
Domain |
In Scope |
Critical |
Eligible |
2026-01-14 |
0 |
| Unico IDtech |
accountshomolog.acesso.io |
Domain |
In Scope |
Critical |
Eligible |
2026-01-14 |
0 |
| Banco Plata |
https://platacard.mx/*/whistleblowing |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-27 |
0 |
| Banco Plata |
https://bancoplata.mx/*/whistleblowing |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-27 |
0 |
| Banco Plata |
*.bancoplata.mx |
Wildcard |
In Scope |
Critical |
Eligible |
2026-04-27 |
0 |
| Banco Plata |
*.platacard.mx |
Wildcard |
In Scope |
Critical |
Eligible |
2025-06-03 |
3 |
| Banco Plata |
id6443932656 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-06-03 |
0 |
| Banco Plata |
dif.tech.plata |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-06-03 |
1 |
| Notion Labs, Inc. |
Notion AI |
AiModel |
In Scope |
Critical |
Eligible |
2024-02-13 |
8 |
| Notion Labs, Inc. |
Github Repositories or other public artifacts owned by makenotion |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-11-24 |
1 |
| Notion Labs, Inc. |
calendar.notion.so |
Domain |
In Scope |
Critical |
Eligible |
2025-04-21 |
2 |
| Notion Labs, Inc. |
mail.notion.so |
Domain |
In Scope |
Critical |
Eligible |
2025-04-15 |
3 |
| Notion Labs, Inc. |
Notion Authentication |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-23 |
5 |
| Notion Labs, Inc. |
Privilege Escalation |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-02-13 |
2 |
| Notion Labs, Inc. |
notion.id |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-07-11 |
3 |
| Notion Labs, Inc. |
Notion Integrations |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-02-13 |
6 |
| Notion Labs, Inc. |
Notion Frontend |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-07-05 |
21 |
| Notion Labs, Inc. |
Public API |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-02-13 |
3 |
| Notion Labs, Inc. |
Product API |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-07-05 |
98 |
| Notion Labs, Inc. |
Notion Desktop App |
Executable |
In Scope |
Critical |
Eligible |
2023-06-21 |
4 |
| Stripchat |
websocket-apps.sc-apps.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-05-05 |
0 |
| Stripchat |
extensions.stripchat.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-05-05 |
0 |
| Stripchat |
ext.stripchat.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-05-05 |
0 |
| Stripchat |
go.stripchat.com |
Domain |
In Scope |
None |
Eligible |
2024-03-13 |
0 |
| Stripchat |
mta*.stripchat.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-03-13 |
0 |
| Stripchat |
*.stripchat.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-01-09 |
38 |
| Stripchat |
wiki.stripchat.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-10 |
0 |
| Stripchat |
https://stripchat.com/wiki |
Url |
Out of Scope |
None |
Ineligible |
2023-05-10 |
0 |
| Stripchat |
support.stripchat.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-09 |
0 |
| Stripchat |
https://stripchat.com/page* |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-05-09 |
0 |
| Stripchat |
pxl.stripchat.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-05 |
0 |
| DoorDash |
doordash.DoorDashConsumer |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-10-22 |
0 |
| DoorDash |
com.dd.doordash |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-10-21 |
1 |
| DoorDash |
www.doordash.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-21 |
11 |
| DoorDash |
doordash.com/orders/drive/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
internal.doordash.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
track.doordash.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
https://doordash.com/merchant |
Url |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
merchant-portal.doordash.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
merchant-mobile-bff.doordash.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
consumer-mobile-bff.doordash.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
unified-gateway.doordash.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
doordash.com/unified-gateway/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
ir.doordash.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
careersatdoordash.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
DoorDash Payments |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
*.order.online |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
http://help.doordash.com |
Url |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
*.doorcrawl.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| DoorDash |
*.dashapi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| Kong |
Kong Gateway Enterprise |
Executable |
In Scope |
Critical |
Eligible |
2025-09-28 |
1 |
| Kong |
Kong Enterprise Gateway - Sandbox Functionality |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-05-14 |
0 |
| Kong |
http://cloud.konghq.com |
Url |
In Scope |
Critical |
Eligible |
2025-03-25 |
10 |
| Kong |
Kong Gateway OSS |
Executable |
In Scope |
Medium |
Ineligible |
2025-10-21 |
0 |
| Kong |
Subdomain Takeover - konghq.com |
OtherAsset |
In Scope |
High |
Eligible |
2025-08-25 |
0 |
| Kong |
https://us.identity.konghq.com/* |
Wildcard |
In Scope |
Critical |
Eligible |
2025-08-04 |
0 |
| Kong |
konghq.com |
Domain |
In Scope |
High |
Eligible |
2025-07-16 |
4 |
| Kong |
developer.konghq.com |
Domain |
In Scope |
High |
Eligible |
2025-07-16 |
1 |
| Kong |
https://httpbin.konghq.com/ |
Url |
Out of Scope |
None |
Ineligible |
2025-06-19 |
0 |
| Kong |
*.*.edge.gateways.konghq.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-06-19 |
0 |
| Kong |
*.gateways.konghq.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-06-19 |
0 |
| Kong |
https://*.api.konghq.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-03-24 |
11 |
| Kong |
Non-Kong Plugins |
Executable |
Out of Scope |
None |
Ineligible |
2025-03-24 |
0 |
| Kong |
Non-Kong GitHub Repositories |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-04-23 |
0 |
| Kong |
https://*.konghq.tech |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-03-24 |
0 |
| Kong |
https://docs.konghq.com |
Url |
Out of Scope |
None |
Ineligible |
2025-04-03 |
0 |
| Kong |
https://app.insomnia.rest/ |
Url |
In Scope |
Critical |
Eligible |
2025-03-24 |
17 |
| Kong |
Kong Mesh |
Executable |
In Scope |
Critical |
Eligible |
2025-03-24 |
3 |
| Kong |
Kong Gateway Plugins (Kong-Supported Only) |
Executable |
In Scope |
Critical |
Eligible |
2025-03-24 |
1 |
| Kong |
https://insomnia.rest/ |
Url |
Out of Scope |
None |
Ineligible |
2025-03-24 |
0 |
| Kong |
Insomnia Desktop Client |
Executable |
In Scope |
Critical |
Eligible |
2025-03-24 |
3 |
| Kong |
https://kuma.io/ |
Url |
Out of Scope |
None |
Ineligible |
2025-03-24 |
0 |
| Kong |
Insomnia CLI (inso) |
Executable |
In Scope |
Critical |
Eligible |
2025-03-24 |
0 |
| Kong |
GitHub Actions in our Public Repositories |
OtherAsset |
In Scope |
None |
Eligible |
2025-04-14 |
1 |
| Robinhood Markets Bounty |
insight2.tradepmr.com |
Domain |
In Scope |
Critical |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
www.tradepmr.com |
Domain |
In Scope |
Critical |
Ineligible |
2025-12-09 |
3 |
| Robinhood Markets Bounty |
fusion.tradepmr.com |
Domain |
In Scope |
Critical |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
url6884.team.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
status.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
enterpriseregistration.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
enterpriseenrollment.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
em9457.team.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
em1198.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
em4296.team.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
bounces.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
autodiscover.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
_domainconnect.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
_16928ca3f53f40a48a751be40fa24e4c.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
7671800.team.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
7671800.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
com.robinhood.global Android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-02-11 |
0 |
| Robinhood Markets Bounty |
Tier 3 |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-02-09 |
1 |
| Robinhood Markets Bounty |
sandbox.bitstamp.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
net.bitstamp.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-01-02 |
1 |
| Robinhood Markets Bounty |
Id1406825640 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
www.bitstamp.net |
Domain |
In Scope |
Critical |
Eligible |
2026-01-02 |
0 |
| Robinhood Markets Bounty |
api.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
auth.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
api-validation.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
auth-validation.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
fusion.uat3.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
fusion.uat2.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
fusion.uat.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
fusion-demo.uat2.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
fusion-demo.uat.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
fusion-demo.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
api-sandbox.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
auth-sandbox.tradepmr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-09 |
0 |
| Robinhood Markets Bounty |
*.saytechnologies.com |
OtherAsset |
In Scope |
Medium |
Eligible |
2025-09-02 |
18 |
| Robinhood Markets Bounty |
*.say.rocks |
OtherAsset |
In Scope |
Medium |
Eligible |
2025-09-02 |
5 |
| Robinhood Markets Bounty |
https://*.saytechnologies.com |
Wildcard |
In Scope |
Medium |
Eligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
identi.robinhood.com |
Domain |
In Scope |
Critical |
Eligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
earlytalent.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
careers.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
weareallinvestors.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
roadshow.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
press.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
underthehoodpod.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
go.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
startinvesting.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
esg.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
share.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
vgs-api.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
affiliates.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
events.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
content.research.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
fleet.infra.robinhood.net |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
shop.robinhood.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
com.robinhood.money |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-09-02 |
1 |
| Robinhood Markets Bounty |
com.robinhood.gateway |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-09-02 |
1 |
| Robinhood Markets Bounty |
938003185 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
6462308655 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
1634080733 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
com.robinhood.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
*.robinhood.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-09-02 |
3 |
| Robinhood Markets Bounty |
*.robinhood.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-09-02 |
21 |
| Robinhood Markets Bounty |
*.rhinternal.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-09-02 |
3 |
| Robinhood Markets Bounty |
https://www.saytechnologies.com/contact/sales |
Url |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| Robinhood Markets Bounty |
nummus.robinhood.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-29 |
0 |
| Robinhood Markets Bounty |
minerva.robinhood.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-29 |
0 |
| Robinhood Markets Bounty |
cashier.robinhood.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-29 |
0 |
| Robinhood Markets Bounty |
api.robinhood.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-29 |
20 |
| Ripio |
Web3 - Smart Contracts Scope |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://bridge.ripio.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://worldscan.org/address/0xDe7Ec97CFDeE9F20f9d256F4a0A0d694479fa2E0 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://basescan.org/address/0xf469eC9dEBf7F0adEBA4d1Db2FF5c70707bEeB30 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0xD168CFbBE260D48cd119497a9a2eE8482080C5E7 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0x46167cB034feC6ceC46CaeD4f61281f5Aa0Eb0e6 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0x465e642387d3d73a57CDc1368fFA53A800bA5D47 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0xdcC340132740AD57E9Fc90C9BD08B00dBbc87986 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0x4F34c8b3b5FB6D98Da888F0feA543d4d9C9F2eBE |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0x61D450a098b6a7f69fC4b98CE68198fe59768651 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0x8a1D45e102e886510e891d2Ec656a708991e2D76 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0xD76f5Faf6888e24D9F04Bf92a0c8B921FE4390e0 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0x337E7456B420bD3481e7FA61fA9850343d610d34 |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
https://etherscan.io/address/0x0DC4F92879B7670e5f4e4e6e3c801D229129D90D |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-29 |
0 |
| Ripio |
sandbox-b2b.ripio.com |
Domain |
In Scope |
Critical |
Eligible |
2025-11-18 |
0 |
| Ripio |
*ripio.com |
Wildcard |
In Scope |
None |
Ineligible |
2024-10-31 |
8 |
| Ripio |
*ripiotrade.co |
Wildcard |
In Scope |
Critical |
Eligible |
2025-06-09 |
2 |
| Ripio |
defi.ripio.com |
Domain |
In Scope |
Critical |
Eligible |
2025-01-03 |
0 |
| Ripio |
com.ripio.ios |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-01-24 |
1 |
| Ripio |
com.ripio.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-01-24 |
3 |
| Ripio |
app.ripio.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-04 |
2 |
| Ripio |
http://auth.ripio.com |
Url |
In Scope |
Critical |
Eligible |
2024-10-31 |
1 |
| Ripio |
https://kyc.ripio.com/ |
Url |
In Scope |
Critical |
Eligible |
2024-10-31 |
6 |
| Ripio |
trade.ripio.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-11 |
2 |
| Dyson |
*.dynsystem.kr |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-10-23 |
0 |
| Dyson |
shop.dyson.ru |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.com.ee |
Domain |
In Scope |
Critical |
Eligible |
2024-06-24 |
0 |
| Dyson |
www.gr.dyson.com |
Domain |
In Scope |
Critical |
Eligible |
2024-05-02 |
0 |
| Dyson |
www.dyson.tw |
Domain |
In Scope |
Critical |
Eligible |
2024-04-10 |
0 |
| Dyson |
shop.dyson.tw |
Domain |
In Scope |
Critical |
Eligible |
2024-04-10 |
2 |
| Dyson |
*dyson-demo.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-04-05 |
0 |
| Dyson |
www.dyson.com.ua |
Domain |
In Scope |
Critical |
Eligible |
2024-03-12 |
0 |
| Dyson |
careers.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-20 |
0 |
| Dyson |
community.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-15 |
0 |
| Dyson |
993135524 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-04-30 |
0 |
| Dyson |
com.dyson.mobile.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-04-30 |
2 |
| Dyson |
Dyson Connected Products (IoT Hardware) |
Hardware |
In Scope |
Critical |
Eligible |
2018-04-30 |
1 |
| Dyson |
Github findings |
OtherAsset |
In Scope |
High |
Eligible |
2020-06-09 |
6 |
| Dyson |
Other Dyson Assets |
OtherAsset |
In Scope |
High |
Eligible |
2019-01-21 |
378 |
| Dyson |
central-test.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-02-16 |
0 |
| Dyson |
svn.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
dysontherapie.fr |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.ovh |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
30secondbleeps.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
centraltest.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
auth.dysonrecall.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
fsc.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
api.q.dyson.cn |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
q.dyson.cn |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
aio.shop.china-dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
jamesdysonfoundation.* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
*central.dyson.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
shop.dyson.co.kr |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
test.oepay.dyson.cn |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
mail.register-dyson.co.kr |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
view.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
sm3.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
reviews.dyson* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
jobs.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
register-dyson.co.kr |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
m.shop.dyson.cn |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
sm2.dyson.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
on.dyson.co.uk |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
sakti3.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-25 |
0 |
| Dyson |
bounce.dyson* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-02-17 |
0 |
| Dyson |
comm.dyson* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-02-17 |
0 |
| Dyson |
www.dyson.cn |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
20 |
| Dyson |
*.cp.dyson.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.vn |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
2 |
| Dyson |
www.dyson.com.ro |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.co.jp |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
3 |
| Dyson |
www.dyson.hu |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.cz |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
2 |
| Dyson |
www.sa.dyson.com |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
shop.dyson.co.za |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.my |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.co.th |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.hk |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
9 |
| Dyson |
www.dyson.com.au |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
2 |
| Dyson |
www.dyson.co.il |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.ae |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.com.tr |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
2 |
| Dyson |
www.dyson.co.nz |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.co.kr |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.com.sg |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.com.mx |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.in |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
2 |
| Dyson |
www.dyson.pl |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.fi.dyson.com |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.com |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.ie |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.fr |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
api.dyson.ch |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.de |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.no |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.pt |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.be |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.nl |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.at |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.co.uk |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
api.dyson.es |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.it |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.dk |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dysoncanada.ca |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
api.dyson.se |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.fi.dyson.com |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.es |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.dk |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.no |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.fr |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.de |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.pt |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.be |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.at |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.nl |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.se |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.ch |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| Dyson |
www.dyson.ie |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dyson.it |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
1 |
| Dyson |
www.dysoncanada.ca |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
3 |
| Dyson |
www.dyson.com |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
10 |
| Dyson |
www.dyson.co.uk |
Domain |
In Scope |
Critical |
Eligible |
2022-01-25 |
0 |
| HubSpot |
hubspot.net |
Domain |
In Scope |
Medium |
Eligible |
2026-03-11 |
0 |
| HubSpot |
api*.hubapi.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-06-12 |
4 |
| HubSpot |
api*.hubspot.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-06-12 |
4 |
| HubSpot |
app*.hubspot.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-06-12 |
197 |
| HubSpot |
connect.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-20 |
0 |
| HubSpot |
events.hubspot.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-02-20 |
0 |
| HubSpot |
*.hubspotemail.net |
Wildcard |
In Scope |
Medium |
Eligible |
2024-11-20 |
3 |
| HubSpot |
Customer Portal |
OtherAsset |
In Scope |
Low |
Eligible |
2024-11-25 |
0 |
| HubSpot |
Customer Connected Domain |
OtherAsset |
In Scope |
Medium |
Eligible |
2024-11-25 |
4 |
| HubSpot |
HubSpot Android Mobile App |
AndroidPlayStore |
In Scope |
High |
Eligible |
2024-11-25 |
1 |
| HubSpot |
HubSpot iOS Mobile App |
IosAppStore |
In Scope |
High |
Eligible |
2024-11-25 |
0 |
| HubSpot |
HubSpot Sales Office 365 add-in |
OtherAsset |
In Scope |
Medium |
Eligible |
2024-11-25 |
0 |
| HubSpot |
Other HubSpot-owned (sub)domains not listed as Out of Scope |
OtherAsset |
In Scope |
Low |
Eligible |
2024-11-25 |
12 |
| HubSpot |
*.hubspotpagebuilder.eu |
Wildcard |
In Scope |
Low |
Eligible |
2024-11-25 |
0 |
| HubSpot |
*.hubspotpagebuilder.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-11-25 |
1 |
| HubSpot |
*.hs-sites(-eu1)?.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-11-25 |
0 |
| HubSpot |
ir.hubspot.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-20 |
0 |
| HubSpot |
thespot.hubspot.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-20 |
0 |
| HubSpot |
trust.hubspot.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-20 |
0 |
| HubSpot |
shop.hubspot.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-20 |
0 |
| HubSpot |
chatspot.ai |
Domain |
In Scope |
Medium |
Eligible |
2024-11-20 |
0 |
| Braze, Inc. |
https://bug-bounty-rest.k8s.tools-001.d-use-1.braze-dev.com/ |
Api |
In Scope |
Critical |
Eligible |
2025-05-05 |
1 |
| Braze, Inc. |
https://bug-bounty-api.k8s.tools-001.d-use-1.braze-dev.com/ |
Api |
In Scope |
Critical |
Eligible |
2025-05-05 |
5 |
| Braze, Inc. |
https://bug-bounty-dashboard.k8s.tools-001.d-use-1.braze-dev.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-05-05 |
44 |
| Walt.io |
http://t.me/walt |
Url |
In Scope |
Critical |
Eligible |
2026-09-29 |
0 |
| Walt.io |
http://t.me/wallet |
Url |
In Scope |
Critical |
Eligible |
2026-09-29 |
0 |
| Walt.io |
walt.io |
Domain |
In Scope |
Low |
Eligible |
2026-09-29 |
1 |
| Walt.io |
p2p.walletbot.me |
Domain |
In Scope |
Critical |
Eligible |
2026-03-16 |
2 |
| Walt.io |
toncenter.walletbot.me |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| Walt.io |
wallettg.net |
Domain |
In Scope |
Critical |
Eligible |
2026-02-06 |
0 |
| Walt.io |
wallettg.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-06 |
0 |
| Walt.io |
Crypto infrastructure for cold and hot wallets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-04-11 |
2 |
| Walt.io |
docs.wallet.tg |
Domain |
Out of Scope |
None |
Ineligible |
2024-04-11 |
0 |
| Walt.io |
wallet.helpscoutdocs.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-04-11 |
0 |
| Walt.io |
wallet.tg |
Domain |
In Scope |
Low |
Eligible |
2024-04-11 |
2 |
| Walt.io |
pay.wallet.tg |
Domain |
In Scope |
High |
Eligible |
2024-04-11 |
0 |
| Walt.io |
walletbot.me |
Domain |
In Scope |
Critical |
Eligible |
2024-04-11 |
12 |
| Audible |
acx-horizonte.audible.com/ |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-09 |
0 |
| Audible |
adobedtm.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-05-08 |
0 |
| Audible |
omtrdc.net |
Domain |
Out of Scope |
None |
Ineligible |
2025-05-08 |
0 |
| Audible |
demdex.net |
Domain |
Out of Scope |
None |
Ineligible |
2025-05-08 |
0 |
| Audible |
*.acx.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-04-30 |
0 |
| Audible |
*.audible.(TLD) |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-13 |
61 |
| Audible |
tax.audible.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-08 |
2 |
| Audible |
Affiliate Programs |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-11-06 |
0 |
| Audible |
All Audible blogs across marketplaces |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-11-06 |
0 |
| Audible |
All help centers across marketplaces |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-11-06 |
0 |
| Audible |
379693831 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-10-13 |
3 |
| Audible |
com.audible.application |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-10-13 |
7 |
| Audible |
https://www.audible.com/ep/podcast-development-program |
Url |
Out of Scope |
None |
Ineligible |
2023-11-03 |
0 |
| Audible |
https://www.audiblehub.com/submit |
Url |
Out of Scope |
None |
Ineligible |
2023-11-03 |
0 |
| Audible |
www.audiblecareers.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-11-03 |
0 |
| Audible |
newsletters.audible.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-11-03 |
0 |
| Flipkart |
https://apps.apple.com/in/app/flipkart-online-shopping-app/id742044692 |
Url |
In Scope |
Critical |
Eligible |
2025-04-16 |
0 |
| Flipkart |
https://play.google.com/store/apps/details?id=com.flipkart.android |
Url |
In Scope |
Critical |
Eligible |
2025-04-16 |
0 |
| Flipkart |
https://play.google.com/store/apps/details?id=com.myntra.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-04-16 |
0 |
| Flipkart |
https://apps.apple.com/in/app/myntra-fashion-shopping-app/id907394059 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-04-16 |
0 |
| Flipkart |
https://uiscoop.payzippy.com |
Url |
In Scope |
Critical |
Eligible |
2025-04-07 |
0 |
| Flipkart |
https://pay.payzippy.com |
Url |
In Scope |
Critical |
Eligible |
2025-04-07 |
0 |
| Flipkart |
https://www.flipkart.com |
Url |
In Scope |
Critical |
Eligible |
2025-04-03 |
5 |
| Flipkart |
https://www.myntra.com |
Url |
In Scope |
Critical |
Eligible |
2025-04-03 |
2 |
| Flipkart |
https://payments.myntra.com |
Url |
In Scope |
Critical |
Eligible |
2025-04-03 |
0 |
| Flipkart |
https://api.myntra.com |
Url |
In Scope |
Critical |
Eligible |
2025-04-03 |
0 |
| Zooplus |
www.matina-gmbh.de |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.se |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.ro |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.pt |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.no |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
zooplus.io |
Domain |
Out of Scope |
None |
Ineligible |
2021-12-01 |
0 |
| Zooplus |
www.zooplus.ie |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-06 |
0 |
| Zooplus |
www.zooplus.hr |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.gr |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-06 |
0 |
| Zooplus |
www.zooplus.fi |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-06 |
0 |
| Zooplus |
www.zooplus.dk |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-06 |
0 |
| Zooplus |
www.zooplus.ch |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.be |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-06 |
0 |
| Zooplus |
www.zooplus.at |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zoohit.sk |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zoohit.si |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zoochic-eu.ru |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.wolf-of-wilderness.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-07 |
0 |
| Zooplus |
www.bitiba.de |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.pl |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.nl |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.it |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-06 |
0 |
| Zooplus |
www.zooplus.hu |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zooplus.fr |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-06 |
0 |
| Zooplus |
www.zooplus.es |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
www.zoohit.cz |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Zooplus |
https://www.zoohit.cz/veterinari |
Url |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Zooplus |
https://www.zooplus.pl/weterynarz |
Url |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Zooplus |
https://www.zooplus.nl/dierenarts |
Url |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Zooplus |
https://www.zooplus.it/veterinari |
Url |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Zooplus |
https://www.zooplus.hu/allatorvos |
Url |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Zooplus |
https://www.zooplus.fr/veterinaire |
Url |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Zooplus |
https://www.zooplus.es/veterinarios |
Url |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Zooplus |
https://www.zooplus.de/tierarzt |
Url |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Zooplus |
zooplus.net |
Domain |
In Scope |
Critical |
Eligible |
2024-06-11 |
9 |
| Zooplus |
www.zooplus.com |
Domain |
In Scope |
Critical |
Eligible |
2021-08-12 |
117 |
| Zooplus |
www.zooplus.co.uk |
Domain |
In Scope |
Critical |
Eligible |
2021-08-06 |
18 |
| Zooplus |
www.zooplus.de |
Domain |
In Scope |
Critical |
Eligible |
2021-07-30 |
48 |
| Syfe |
uat-bugbounty.nonprod.syfe.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-01 |
4 |
| Syfe |
www.syfe.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-01 |
6 |
| Syfe |
com.syfe |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-10-03 |
0 |
| Syfe |
https://apps.apple.com/sg/app/syfe-stay-invested/id1497156434 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-10-03 |
0 |
| Syfe |
api.syfe.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-01 |
5 |
| Syfe |
mark8.syfe.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-01 |
1 |
| Syfe |
alfred.syfe.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-01 |
2 |
| Syfe |
api-uat-bugbounty.nonprod.syfe.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-01 |
2 |
| Neon |
Neon-supported extensions |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-10 |
0 |
| Neon |
https://console-stage.neon.build/ |
Url |
In Scope |
Critical |
Eligible |
2024-11-15 |
13 |
| Neon |
https://console.neon.tech/ |
Url |
In Scope |
Critical |
Eligible |
2024-11-15 |
36 |
| Neon |
https://console.neon.tech/api/v2/ |
Url |
In Scope |
Critical |
Eligible |
2024-11-15 |
13 |
| Whoop Bug Bounty |
WHOOP 5.0/MG STRAP |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-07-09 |
1 |
| Whoop Bug Bounty |
Credit/Debit Card Testing |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-06-23 |
0 |
| Whoop Bug Bounty |
Azure AD, Google Drive, Link Sharing Websites |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-03-03 |
0 |
| Whoop Bug Bounty |
shop.whoop.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-03 |
5 |
| Whoop Bug Bounty |
join.whoop.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-03-03 |
2 |
| Whoop Bug Bounty |
app.whoop.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-03 |
7 |
| Whoop Bug Bounty |
okta.whoop.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-02-27 |
0 |
| Whoop Bug Bounty |
Support System |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-02-26 |
0 |
| Whoop Bug Bounty |
api.prod.whoop.com |
Domain |
In Scope |
Critical |
Eligible |
2025-01-09 |
19 |
| Whoop Bug Bounty |
WHOOP 4.0 STRAP |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-09 |
0 |
| Whoop Bug Bounty |
com.whoop.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-09 |
2 |
| Whoop Bug Bounty |
com.whoop.iphone |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-09 |
0 |
| OPPO |
https://e-global.heytap.com/marketing/login |
Url |
In Scope |
Critical |
Eligible |
2026-05-18 |
1 |
| OPPO |
com.katanlabs.matchballgame |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| OPPO |
com.fullmetalgamedev.fruitshooting |
AndroidApk |
Out of Scope |
None |
Ineligible |
2026-04-28 |
0 |
| OPPO |
https://communityin.oppo.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-28 |
2 |
| OPPO |
https://community.oppo.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| OPPO |
https://c.realme.com/ru/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| OPPO |
https://c.realme.com/in/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| OPPO |
https://c.realme.com/id/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| OPPO |
https://c.realme.com/global/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| OPPO |
https://c.realme.com/eg/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| OPPO |
com.heytap.xgame |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-21 |
0 |
| OPPO |
http://open.oppomobile.com |
Url |
In Scope |
Critical |
Eligible |
2026-04-28 |
1 |
| OPPO |
com.oppo.quicksearchbox |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-21 |
0 |
| OPPO |
com.katanlabs.worm.ioeatemall |
WindowsMicrosoftStore |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| OPPO |
com.katanlabs.bubblepop |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-04-28 |
1 |
| OPPO |
com.oplus.games |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-03-01 |
0 |
| OPPO |
com.coloros.video |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-21 |
0 |
| OPPO |
https://developers.oppomobile.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-04-23 |
0 |
| OPPO |
com.heytap.music |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-03-01 |
0 |
| OPPO |
Low Level Properties and Test environment |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-02-20 |
0 |
| OPPO |
com.shopai.apps |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.qpon.platform |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
4 |
| OPPO |
com.qpon.merchant |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
1 |
| OPPO |
com.oplus.studycenter |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.oplus.melody |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.oplus.accesscard |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.wearable.themestore |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.wearable.research |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.wearable.market |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.wearable.healthassessment |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.wearable.elves |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.wearable.browser |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.wearable.breeno |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.tas |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
1 |
| OPPO |
com.heytap.reader |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.ocsp.client |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.miniapp.sports |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.heymelody |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.health.quickapp |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.databaseengine |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.book |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
https://www.coloros.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-03-24 |
1 |
| OPPO |
com.fintech.life |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
https://zhongbao.heytap.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-03-24 |
2 |
| OPPO |
https://zhongbao-ear.heytap.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-03-24 |
0 |
| OPPO |
com.heytap.wallet |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-19 |
0 |
| OPPO |
com.coloros.assistantscreen |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-03-10 |
0 |
| OPPO |
realme C71 |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme C75 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme Note 70 |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
NARZO 80 Pro 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
NARZO 80x 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
Narzo 80 lite 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
NARZO 80 Lite 4G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme P1 speed |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme P4 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme P4 Pro 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme P3 Lite 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme 15T |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme 15 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme 15 Pro 5G |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme GT6T |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme GT6 |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme GT7T |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme GT7 |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
realme GT7Pro |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-21 |
0 |
| OPPO |
https://safe.heytap.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-07-16 |
1 |
| OPPO |
id.heytap.com |
Domain |
In Scope |
Critical |
Eligible |
2025-07-16 |
4 |
| OPPO |
id.oppo.com |
Domain |
In Scope |
Critical |
Eligible |
2025-07-16 |
5 |
| OPPO |
com.coloros.wallet |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
https://www.oppo.com/in/store |
Url |
In Scope |
Critical |
Eligible |
2025-07-15 |
1 |
| OPPO |
com.oppo.store |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
com.oplus.play |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
com.oppo.speechassist |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
com.oplus.aimemory |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
1 |
| OPPO |
https://drp.myoppo.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
com.netease.my.nearme.gamecenter |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
https://u.oppomobile.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-07-15 |
1 |
| OPPO |
https://e.oppo.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-07-15 |
1 |
| OPPO |
https://gcsm.oppoit.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-07-15 |
1 |
| OPPO |
com.heytap.research |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
com.finshell.finance |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
com.nearme.gamecenter |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
com.finshell.wallet |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
2 |
| OPPO |
com.coloros.findmyphone |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-07-15 |
0 |
| OPPO |
com.heytap.mall |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-06-10 |
1 |
| OPPO |
com.heytap.store |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-06-10 |
1 |
| OPPO |
https://www.oppo.com/th/store |
Url |
In Scope |
Critical |
Eligible |
2025-06-10 |
1 |
| OPPO |
https://www.oppo.com/id/store |
Url |
In Scope |
Critical |
Eligible |
2025-06-10 |
2 |
| OPPO |
https://www.oppo.com/my/store |
Url |
In Scope |
Critical |
Eligible |
2025-06-10 |
4 |
| OPPO |
com.coloros.pictorial |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-03-01 |
0 |
| OPPO |
com.heytap.pictorial |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-03-01 |
0 |
| OPPO |
https://cloud.oppo.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-02-25 |
4 |
| OPPO |
https://www.opposhop.cn/m/ |
Url |
In Scope |
Critical |
Eligible |
2025-02-25 |
0 |
| OPPO |
https://www.opposhop.cn/ |
Url |
In Scope |
Critical |
Eligible |
2025-02-25 |
1 |
| OPPO |
Reno 9 5G |
Hardware |
In Scope |
Critical |
Eligible |
2024-11-21 |
0 |
| OPPO |
Reno9Pro5G |
Hardware |
In Scope |
Critical |
Eligible |
2024-11-21 |
0 |
| OPPO |
Reno9Pro+5G |
Hardware |
In Scope |
Critical |
Eligible |
2024-11-21 |
0 |
| OPPO |
Reno8Pro5G |
Hardware |
In Scope |
Critical |
Eligible |
2024-11-21 |
0 |
| OPPO |
Reno12Pro |
Hardware |
In Scope |
Critical |
Eligible |
2024-11-21 |
0 |
| Inspectorio |
https://collabora.stg.inspectorio.com |
Url |
In Scope |
Critical |
Ineligible |
2026-05-04 |
0 |
| Inspectorio |
https://app.bitrise.io/app/51a95edaab331ec5/installable-artifacts/e5213e1a814bf0ba/public-install-page/bed0d33f048271d6828c5a4a979ecc96 |
AndroidApk |
In Scope |
Critical |
Eligible |
2025-01-28 |
1 |
| Inspectorio |
https://testflight.apple.com/join/vwFxXX7t |
IosTestflight |
In Scope |
Critical |
Eligible |
2025-01-28 |
0 |
| Inspectorio |
id.stg.inspectorio.com |
Domain |
In Scope |
Critical |
Eligible |
2023-12-11 |
2 |
| Inspectorio |
docuflow.stg.inspectorio.com |
Domain |
In Scope |
Critical |
Eligible |
2023-12-11 |
18 |
| Inspectorio |
rise-api.stg.inspectorio.com |
Domain |
In Scope |
Critical |
Eligible |
2023-08-15 |
12 |
| Inspectorio |
api.stg.inspectorio.com |
Domain |
In Scope |
Critical |
Eligible |
2023-08-01 |
11 |
| Inspectorio |
rise.stg.inspectorio.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-20 |
7 |
| Inspectorio |
report-html-sight.stg.inspectorio.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-24 |
2 |
| Inspectorio |
app.stg.inspectorio.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-20 |
16 |
| Inspectorio |
files-stg.inspectorio.com |
Domain |
In Scope |
Critical |
Ineligible |
2021-10-28 |
0 |
| Bumba |
http://bumba.global |
Url |
In Scope |
Critical |
Eligible |
2024-05-14 |
6 |
| Verily Life Sciences |
https://*.verily.com/ |
Wildcard |
In Scope |
Critical |
Eligible |
2024-11-11 |
59 |
| Verily Life Sciences |
https://*.projectbaseline.com/ |
Wildcard |
In Scope |
Low |
Eligible |
2024-11-11 |
9 |
| Verily Life Sciences |
https://*.verilyme.com/ |
Wildcard |
In Scope |
Critical |
Eligible |
2025-11-17 |
2 |
| Verily Life Sciences |
https://play.google.com/store/apps/details?id=com.verily.me |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-13 |
2 |
| Verily Life Sciences |
https://apps.apple.com/us/app/verily-me/id6448808133 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-11-11 |
0 |
| Verily Life Sciences |
https://*.signalpath.com/ |
Wildcard |
In Scope |
Critical |
Eligible |
2024-11-11 |
10 |
| Bykea |
*.bykea.net |
Wildcard |
In Scope |
Critical |
Eligible |
2023-09-18 |
44 |
| Bykea |
com.bykea.pk.partner |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-09-18 |
3 |
| Bykea |
bykea.com |
Domain |
In Scope |
Critical |
Eligible |
2023-09-18 |
15 |
| Bykea |
https://geocode-beta.bykea.net |
Url |
In Scope |
Critical |
Eligible |
2023-09-19 |
2 |
| Bykea |
https://leaflet-map.bykea.net |
Url |
In Scope |
Critical |
Eligible |
2023-09-19 |
1 |
| Bykea |
https://*test*.bykea.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-06 |
0 |
| Bykea |
https://nominatim.bykea.net |
Url |
In Scope |
Critical |
Eligible |
2023-09-19 |
1 |
| Bykea |
https://googleplace*.bykea.net |
Wildcard |
In Scope |
Critical |
Eligible |
2023-09-19 |
0 |
| Bykea |
https://maps.bykea.net |
Url |
In Scope |
Critical |
Eligible |
2023-09-19 |
0 |
| Bykea |
*.tellocast.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-01-28 |
0 |
| Bykea |
tomoe.bykea.net |
Domain |
In Scope |
Critical |
Eligible |
2026-01-28 |
0 |
| Bykea |
https://api.bykea.net |
Url |
In Scope |
Critical |
Eligible |
2024-03-05 |
15 |
| Bykea |
1351179184 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-09-18 |
2 |
| Bykea |
com.bykea.pk |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-09-18 |
9 |
| Bykea |
https://kronos*.bykea.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-05 |
0 |
| Bykea |
www.tilismtechservices.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-11-29 |
0 |
| Bykea |
https://loadboard*.bykea.net/ |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-05 |
1 |
| Bykea |
https://raptor*.bykea.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-05 |
1 |
| Starbucks Japan |
login.starbucks.co.jp |
Domain |
In Scope |
Critical |
Eligible |
2024-10-23 |
0 |
| Starbucks Japan |
gift.starbucks.co.jp |
Domain |
In Scope |
Critical |
Eligible |
2024-10-23 |
4 |
| Starbucks Japan |
cart.starbucks.co.jp |
Domain |
In Scope |
Critical |
Eligible |
2024-10-23 |
3 |
| Starbucks Japan |
www.cart.starbucks.co.jp/ |
Domain |
In Scope |
Critical |
Eligible |
2024-09-26 |
0 |
| Starbucks Japan |
Starbucks Japan Android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-09-26 |
0 |
| Starbucks Japan |
Starbucks Japan iOS |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-09-26 |
0 |
| Starbucks Japan |
www.starbucks.co.jp |
Domain |
In Scope |
Critical |
Eligible |
2024-09-26 |
9 |
| Starbucks China |
Teavana |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-01-05 |
0 |
| Starbucks China |
Starbucks China Android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-09-26 |
7 |
| Starbucks China |
Starbucks China iOS |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-09-26 |
0 |
| Starbucks China |
www.starbucks.com.cn/ |
Domain |
In Scope |
Critical |
Eligible |
2024-09-26 |
7 |
| Wells Fargo Bounty |
accountoffers.wellsfargo.com |
Domain |
In Scope |
Critical |
Ineligible |
2025-01-09 |
1 |
| Wells Fargo Bounty |
homeloans.wellsfargo.com |
Domain |
In Scope |
Critical |
Ineligible |
2024-12-05 |
0 |
| Wells Fargo Bounty |
*.wf.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2021-11-29 |
26 |
| Wells Fargo Bounty |
*.wellsfargo.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-11-12 |
154 |
| Wells Fargo Bounty |
http://wf.com |
Url |
In Scope |
Critical |
Ineligible |
2023-05-30 |
0 |
| Wells Fargo Bounty |
*.advisor-connection.com |
OtherAsset |
In Scope |
Critical |
Ineligible |
2024-10-16 |
0 |
| Wells Fargo Bounty |
*.mworld.com |
OtherAsset |
In Scope |
Critical |
Ineligible |
2024-10-16 |
0 |
| Wells Fargo Bounty |
*.wellsfargoadvisors.com |
OtherAsset |
In Scope |
Critical |
Ineligible |
2024-10-16 |
2 |
| Wells Fargo Bounty |
http://wellsfargo.com |
Url |
In Scope |
Critical |
Eligible |
2023-05-25 |
3 |
| Wells Fargo Bounty |
com.wf.ceomobile |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-11-29 |
0 |
| Wells Fargo Bounty |
com.wf.mobilebanking |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-11-29 |
0 |
| Wells Fargo Bounty |
com.wf.wellsfargomobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-11-29 |
1 |
| Wells Fargo Bounty |
com.wellsfargo.ceomobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-11-29 |
0 |
| Wells Fargo Bounty |
connect.secure.wellsfargo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-11-29 |
14 |
| KHealth |
*.pennmedicine.connect-visit.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
0 |
| KHealth |
*.novanthealthvirtualprimarycare.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
1 |
| KHealth |
*.primarycareondemand.mayoclinic.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
0 |
| KHealth |
*.hmh247.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
0 |
| KHealth |
*.northwellprimarycarenow.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
0 |
| KHealth |
*.mgbcareconnect.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
0 |
| KHealth |
*.csconnect.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
0 |
| KHealth |
*.khealth-test.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
3 |
| KHealth |
*.hhc247.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-05 |
5 |
| KHealth |
salesforce.khealth.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-11-02 |
0 |
| KHealth |
1180400838 |
IosAppStore |
Out of Scope |
None |
Ineligible |
2021-05-19 |
0 |
| KHealth |
ai.kanghealth |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2021-05-19 |
0 |
| KHealth |
app.khealth.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-10-18 |
0 |
| KHealth |
www.kpharmacyllc.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-21 |
0 |
| KHealth |
org.hartfordhealthcare.hhc247 |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-10-09 |
4 |
| KHealth |
6741442288 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-10-09 |
0 |
| KHealth |
https://apps.apple.com/us/app/hhc-24-7/id6741442288 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-10-09 |
0 |
| KHealth |
https://*.khealth.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-07-04 |
37 |
| Capital One Bug Bounty |
*.capitalone.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-06 |
44 |
| Capital One Bug Bounty |
1089294040 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-09-06 |
0 |
| Capital One Bug Bounty |
407558537 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-09-06 |
0 |
| Capital One Bug Bounty |
Eno® Browser Extension |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-03-09 |
0 |
| Capital One Bug Bounty |
*.capitalone.ca |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-06 |
4 |
| Capital One Bug Bounty |
*.capitalonegslbex.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-06 |
10 |
| Capital One Bug Bounty |
Capital One Shopping Browser Extension |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-06 |
0 |
| Capital One Bug Bounty |
com.wikibuy.prod.main |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-09-06 |
1 |
| Capital One Bug Bounty |
com.konylabs.capitalone |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-09-06 |
0 |
| Capital One Bug Bounty |
*.capitaloneshopping.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-06 |
16 |
| Playtika |
Tier 1 |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-08-20 |
1 |
| Playtika |
Tier 3 |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-08-20 |
0 |
| Playtika |
Tier 2 |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-08-20 |
0 |
| Playtika |
Tier 1 Studios |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-08-20 |
1 |
| Playtika |
*.playticorp.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-27 |
6 |
| Playtika |
1474700 (Steam app id) |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-13 |
0 |
| Playtika |
*.monopoly-poker.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-13 |
3 |
| Playtika |
1448884851 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-13 |
0 |
| Playtika |
com.youdagames.monopolypoker |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-13 |
0 |
| Playtika |
9nqwjwnqjj5n |
WindowsMicrosoftStore |
In Scope |
Critical |
Eligible |
2025-01-13 |
0 |
| Playtika |
*.gop3.nl |
Wildcard |
In Scope |
Critical |
Ineligible |
2023-12-14 |
1 |
| Playtika |
*.governorofpoker.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2023-12-12 |
3 |
| Playtika |
bestfiends.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-13 |
5 |
| Playtika |
*.seriously.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-01-18 |
7 |
| Playtika |
*.redecor.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-11-02 |
19 |
| Playtika |
*.wooga.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-10-20 |
18 |
| Playtika |
*.serious.li |
Wildcard |
In Scope |
Critical |
Eligible |
2022-08-28 |
14 |
| Playtika |
*.playwsop.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-06-26 |
7 |
| Playtika |
*.houseoffun.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-06-26 |
7 |
| Playtika |
*.boardkingsgame.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-27 |
2 |
| Playtika |
*.caesarsgames.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-27 |
7 |
| Playtika |
*.bingoblitz.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-08-04 |
14 |
| Playtika |
*.playtika.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-04-14 |
104 |
| Playtika |
*.slotomania.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-04-14 |
27 |
| Playtika |
https://apps.facebook.com/pearls-peril |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-01-18 |
0 |
| Playtika |
com.wooga.pearlsperil |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
1 |
| Playtika |
594802437 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
0 |
| Playtika |
net.wooga.tropicats_tropical_cats_puzzle_paradise |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
2 |
| Playtika |
1215220850 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
0 |
| Playtika |
net.wooga.switchcraft.googleplay |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
0 |
| Playtika |
1510325826 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
0 |
| Playtika |
645949180 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
0 |
| Playtika |
1508620125 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
2 |
| Playtika |
lol.onevone |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
2 |
| Playtika |
com.Seriously.Phoenix |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
0 |
| Playtika |
1438744533 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-01-18 |
2 |
| Playtika |
https://apps.facebook.com/vegas_downtown_slots |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-02 |
1 |
| Playtika |
https://apps.facebook.com/pokerheat |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-02 |
1 |
| Playtika |
1413287364 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-11-02 |
0 |
| Playtika |
fi.reworks.redecor |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-11-02 |
0 |
| Playtika |
480523695 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-11-02 |
1 |
| Playtika |
com.bigblueparrot.pokerfriends |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-11-02 |
0 |
| Playtika |
975035622 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-11-02 |
1 |
| Playtika |
air.com.playtika.cvs |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-11-02 |
1 |
| Playtika |
1200391796 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-09-13 |
0 |
| Playtika |
net.wooga.junes_journey_hidden_object_mystery_game |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-09-13 |
3 |
| Playtika |
net.supertreat.solitaire |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-09-13 |
2 |
| Playtika |
1223338261 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-09-13 |
2 |
| Playtika |
com.jellybtn.cashkingmobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-08-24 |
0 |
| Playtika |
654671575 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-08-24 |
1 |
| Playtika |
com.Seriously.BestFiends |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-08-24 |
0 |
| Playtika |
868013618 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-08-24 |
0 |
| Playtika |
com.playtika.wsop.gp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-06-26 |
3 |
| Playtika |
719525810 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-06-26 |
0 |
| Playtika |
com.pacificinteractive.HouseOfFun |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-06-26 |
0 |
| Playtika |
586634331 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-06-26 |
0 |
| Playtika |
1116488672 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-10-27 |
1 |
| Playtika |
com.jellybtn.boardkings |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-10-27 |
7 |
| Playtika |
603097018 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-10-27 |
0 |
| Playtika |
com.playtika.caesarscasino |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-10-27 |
1 |
| Playtika |
529996768 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-08-04 |
0 |
| Playtika |
air.com.buffalo_studios.newflashbingo |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-08-04 |
1 |
| Playtika |
gnocchi-www.buffalo-ggn.net |
Domain |
In Scope |
Critical |
Eligible |
2021-08-04 |
2 |
| Playtika |
447553564 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-04-14 |
0 |
| Playtika |
air.com.playtika.slotomania |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-04-14 |
3 |
| Vodafone Oman |
1589071345 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-10-16 |
0 |
| Vodafone Oman |
om.vodafone.mva |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-10-16 |
2 |
| Vodafone Oman |
vfo03.vodafone.om |
Domain |
In Scope |
Critical |
Eligible |
2022-10-16 |
0 |
| Vodafone Oman |
vfo02.vodafone.om |
Domain |
In Scope |
Critical |
Eligible |
2022-10-16 |
0 |
| Vodafone Oman |
vfo01.vodafone.om |
Domain |
In Scope |
Critical |
Eligible |
2022-10-16 |
1 |
| Vodafone Oman |
apix.vodafone.om |
Domain |
In Scope |
Critical |
Eligible |
2022-10-16 |
1 |
| Vodafone Oman |
www.vodafone.om |
Domain |
In Scope |
Critical |
Eligible |
2022-10-16 |
10 |
| NBA Public Bug Bounty |
www.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2024-07-22 |
18 |
| NBA Public Bug Bounty |
identity.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2024-07-22 |
3 |
| NBA Public Bug Bounty |
brand.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-18 |
0 |
| NBA Public Bug Bounty |
cms-dev.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-11 |
0 |
| NBA Public Bug Bounty |
stats.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2024-11-21 |
1 |
| NBA Public Bug Bounty |
stats-trafficcop-prod.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2024-07-22 |
0 |
| NBA Public Bug Bounty |
login-sandbox.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-05-06 |
0 |
| NBA Public Bug Bounty |
ak-static.cms.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
ak-static.cms-qa.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
ak-static.cms-dev.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
cms.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-07-22 |
0 |
| NBA Public Bug Bounty |
cms-qa.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-11 |
0 |
| NBA Public Bug Bounty |
cms-int.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-11 |
0 |
| NBA Public Bug Bounty |
games.nbaacademy.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-08 |
0 |
| NBA Public Bug Bounty |
wnbabroadcastmanuals.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
wisconsin.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
wisconsin-qa.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
wisconsin-dev.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
windycity.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
windycity-qa.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
windycity-dev.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
westchester.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
westchester-qa.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
westchester-dev.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
vttp.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
trs.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
tpp.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
townhall.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
texas.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
texas-qa.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
texas-dev.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
teamvideo.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
teamofficelist.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
teaminquiry.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
teamapps.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
taiwan.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
stockton.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
stockton-qa.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
stockton-dev.gleague.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
sems.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
ptiw.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
pr.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
pr-qa.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
pr-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
playerhealthvideo.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
peopleanalyticsportal.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
official.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
official-qa.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
official-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
nbavideo.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
nbatickets.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
nbatickets-qa.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
nbatickets-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
hoop.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
gldatacenter.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
dwhreports.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
data-test.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| NBA Public Bug Bounty |
jr.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-04 |
0 |
| NBA Public Bug Bounty |
mediacentral.nba.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-04 |
0 |
| NBA Public Bug Bounty |
pdfroster.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
pdfroster-qa.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
pdfroster-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nycbasketball.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbameeting.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbaintl.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbaholidaycard.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbaholidaycard-qa.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbaholidaycard-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbabroadcastmanuals.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbaacademy.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbaacademy-qa.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nbaacademy-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
nba-ar-app.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
mexicogames.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
meetings.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
mediaday.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
mediaavail.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
lockervisionteam.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
jrnbaworldchampionship.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
jrnbaworldchampionship-QA.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
jrnbaworldchampionship-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
indiaontrack.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
inclusion.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
inclusion-qa.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
inclusion-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
huddle.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
hoopsfortroops.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
green.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
gms.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
gms-prev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
globalstores.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
globalstores-qa.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
globalstores-dev.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
gatoradetrainingcenter.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
fit.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
ec2redirect-west.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
ec2-redirect-west.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
dev.courtside.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| NBA Public Bug Bounty |
courtside.nba.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| Insightly |
www.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-18 |
0 |
| Insightly |
*.insight.ly |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-04-01 |
0 |
| Insightly |
marketing.na1.insightly.com |
Domain |
In Scope |
Critical |
Eligible |
2021-01-25 |
9 |
| Insightly |
http://api.na1.insightly.com/v3.1/ |
Url |
In Scope |
Critical |
Eligible |
2020-12-16 |
1 |
| Insightly |
mobileapi.insightly.com |
Domain |
In Scope |
Critical |
Eligible |
2020-04-01 |
0 |
| Insightly |
outlook.insightly.com |
Domain |
In Scope |
Critical |
Eligible |
2020-04-01 |
0 |
| Insightly |
mobileapi.na1.insightly.com |
Domain |
In Scope |
Critical |
Eligible |
2020-04-01 |
0 |
| Insightly |
http://api.insightly.com/v3.1/ |
Url |
In Scope |
Critical |
Eligible |
2020-04-01 |
0 |
| Insightly |
crm.na1.insightly.com |
Domain |
In Scope |
Critical |
Eligible |
2020-03-23 |
138 |
| Insightly |
login.insightly.com |
Domain |
In Scope |
Critical |
Eligible |
2020-04-01 |
5 |
| Insightly |
accounts.insightly.com |
Domain |
In Scope |
Critical |
Eligible |
2020-03-23 |
3 |
| Insightly |
563017797 |
IosAppStore |
Out of Scope |
None |
Ineligible |
2020-03-18 |
0 |
| Insightly |
com.insightly.droid |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2020-03-23 |
0 |
| Insightly |
gmailaddon.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-04-01 |
0 |
| Insightly |
help.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-23 |
0 |
| Insightly |
www.insight.ly |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-18 |
0 |
| Insightly |
insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-18 |
0 |
| Insightly |
insight.ly |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-18 |
0 |
| Insightly |
webhook.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-04-01 |
0 |
| Insightly |
blog.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-23 |
0 |
| Insightly |
newsletter.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-23 |
0 |
| Insightly |
my.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-23 |
0 |
| Insightly |
support.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-23 |
0 |
| Insightly |
podapi.na1.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-04-01 |
0 |
| Insightly |
chloe.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-04-01 |
0 |
| Insightly |
frontdoorproxy.insightly.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-04-01 |
0 |
| Circle |
https://github.com/circlefin/stellar-cctp |
Url |
In Scope |
Critical |
Eligible |
2026-05-12 |
0 |
| Circle |
https://github.com/circlefin/stablecoin-xlm |
SourceCode |
In Scope |
Critical |
Eligible |
2026-04-21 |
0 |
| Circle |
https://github.com/circlefin/solana-gateway-contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2026-01-14 |
0 |
| Circle |
https://github.com/circlefin/stablecoin-near |
SmartContract |
In Scope |
Critical |
Eligible |
2025-11-24 |
0 |
| Circle |
https://github.com/circlefin/evm-cpn-contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2025-11-24 |
0 |
| Circle |
https://github.com/circlefin/starknet-cctp |
SmartContract |
In Scope |
Critical |
Eligible |
2025-11-24 |
0 |
| Circle |
https://github.com/circlefin/aptos-cctp |
SourceCode |
In Scope |
Critical |
Eligible |
2025-11-24 |
0 |
| Circle |
https://github.com/circlefin/evm-xreserve-contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2025-11-24 |
1 |
| Circle |
https://github.com/circlefin/stablecoin-starknet |
SourceCode |
In Scope |
Critical |
Eligible |
2025-10-22 |
0 |
| Circle |
https://github.com/circlefin/evm-gateway-contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2025-05-30 |
0 |
| Circle |
https://github.com/circlefin/sui-cctp |
SourceCode |
In Scope |
Critical |
Eligible |
2024-12-10 |
0 |
| Circle |
https://github.com/circlefin/stablecoin-aptos |
SourceCode |
In Scope |
Critical |
Eligible |
2024-11-20 |
0 |
| Circle |
https://github.com/circlefin/noble-fiattokenfactory |
SmartContract |
In Scope |
Critical |
Eligible |
2024-11-14 |
0 |
| Circle |
https://github.com/circlefin/stablecoin-evm |
SmartContract |
In Scope |
Critical |
Eligible |
2024-11-14 |
0 |
| Circle |
https://github.com/circlefin/buidl-wallet-contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2024-11-14 |
0 |
| Circle |
https://github.com/circlefin/stablecoin-sui |
SourceCode |
In Scope |
Critical |
Eligible |
2024-10-28 |
0 |
| Circle |
console.circle.com |
Domain |
In Scope |
Critical |
Eligible |
2024-08-15 |
7 |
| Circle |
api.circle.com |
Domain |
In Scope |
Critical |
Eligible |
2024-05-23 |
5 |
| Circle |
app.circle.com |
Domain |
In Scope |
Critical |
Eligible |
2024-05-23 |
22 |
| Circle |
https://github.com/circlefin/solana-cctp-contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2024-05-23 |
0 |
| Circle |
http://github.com/circlefin/noble-cctp |
SmartContract |
In Scope |
Critical |
Eligible |
2024-05-23 |
2 |
| Circle |
https://github.com/circlefin/evm-cctp-contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2024-05-23 |
2 |
| Netflix |
Open Source - Consoleme |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-01-11 |
0 |
| Netflix |
Open Source - Weep |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-01-11 |
0 |
| Netflix |
Assets associated with ReadyPlayerMe |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-12-19 |
0 |
| Netflix |
Open Source - Dispatch |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-01-12 |
0 |
| Netflix |
Netflix Mobile Application for Android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-01-16 |
156 |
| Netflix |
Netflix Mobile Application for iOS |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-01-16 |
51 |
| Netflix |
Corporate Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-01-11 |
80 |
| Netflix |
Set-top-boxes, smart TVs, streaming sticks Out of Scope |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-01-12 |
0 |
| Netflix |
netflixinvestor.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-01-12 |
0 |
| Netflix |
ir.netflix.net |
Domain |
Out of Scope |
None |
Ineligible |
2024-01-12 |
0 |
| Netflix |
ir.netflix.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-01-12 |
0 |
| Netflix |
Third party websites or systems hosted by non-Netflix entities Out of Scope |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-01-12 |
0 |
| Netflix |
Netflix Gaming Target |
OtherAsset |
In Scope |
Critical |
Ineligible |
2024-01-12 |
1 |
| Netflix |
Low impact, individually exposed Google Docs with no common root cause (see “Publicly accessible Google Document or Drive Links” in the “Corporate Targets” section) |
OtherAsset |
In Scope |
Critical |
Ineligible |
2024-01-12 |
0 |
| Netflix |
Content authorization vulnerabilities affecting only the in-browser player |
OtherAsset |
In Scope |
Critical |
Ineligible |
2024-01-12 |
0 |
| Netflix |
Affiliates or entities such as recently acquired companies |
OtherAsset |
In Scope |
Critical |
Ineligible |
2024-01-12 |
0 |
| Netflix |
Content Authorization Targets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-01-12 |
17 |
| Netflix |
meechum.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-12 |
7 |
| Netflix |
customerevents.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
14 |
| Netflix |
nmtracking.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
3 |
| Netflix |
presentationtracking.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
3 |
| Netflix |
beacon.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
17 |
| Netflix |
ichnaea.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
25 |
| Netflix |
help.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
133 |
| Netflix |
*.nflxso.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-11 |
13 |
| Netflix |
*.nflximg.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-11 |
33 |
| Netflix |
*.nflxext.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-10 |
19 |
| Netflix |
secure.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
76 |
| Netflix |
*.prod.dradis.netflix.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-11 |
2 |
| Netflix |
api*.netflix.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-11 |
113 |
| Netflix |
*.prod.ftl.netflix.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-11 |
5 |
| Netflix |
Secondary Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-01-12 |
194 |
| Netflix |
Open Source - Zuul |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-01-11 |
6 |
| Netflix |
Open Source - Spectator |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-01-11 |
1 |
| Netflix |
Microsites |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-01-11 |
25 |
| Netflix |
*.nflxvideo.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-11 |
28 |
| Netflix |
Open Source - Atlas |
SourceCode |
In Scope |
Critical |
Eligible |
2024-01-11 |
12 |
| Netflix |
*.prod.cloud.netflix.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-11 |
10 |
| Netflix |
www.netflix.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
1199 |
| Early Warning |
www.certos.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-02 |
0 |
| Early Warning |
zelleservice.my.salesforce.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-09 |
0 |
| Early Warning |
zellepay.force.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-03-18 |
0 |
| Early Warning |
platform.cat.earlywarning.io |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-10 |
0 |
| Early Warning |
platformtest.cat.earlywarning.io |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-23 |
0 |
| Early Warning |
api.zmsp.*.earlywarning.io |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-05-17 |
0 |
| Early Warning |
http://earlywarningapi.force.com |
Url |
Out of Scope |
None |
Ineligible |
2025-07-17 |
0 |
| Early Warning |
http://api.zmsp.earlywarning.com |
Url |
Out of Scope |
None |
Ineligible |
2025-07-17 |
0 |
| Early Warning |
http://api.zellepay.com |
Url |
Out of Scope |
None |
Ineligible |
2025-07-17 |
0 |
| Early Warning |
*.clearxchange.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-02-03 |
0 |
| Early Warning |
ccpa*.zellepay.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-09-25 |
0 |
| Early Warning |
support*.earlywarning.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-08-31 |
0 |
| Early Warning |
developer*.earlywarning.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-08-31 |
1 |
| Early Warning |
ews-fusion.my.site.com |
Domain |
In Scope |
Critical |
Eligible |
2024-03-18 |
1 |
| Early Warning |
zelleservice.my.site.com |
Domain |
In Scope |
Critical |
Eligible |
2024-03-18 |
1 |
| Early Warning |
flip0717.earlywarning.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-07-18 |
0 |
| Early Warning |
docs.earlywarning.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-16 |
0 |
| Early Warning |
*.zelle.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-01-30 |
3 |
| Early Warning |
*bc.earlywarning.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-08-08 |
0 |
| Early Warning |
*.earlywarning.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-01-08 |
55 |
| Early Warning |
*.zellepay.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-01-08 |
41 |
| Early Warning |
demo.earlywarning.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-02-03 |
0 |
| Early Warning |
zellepay.earlywarning.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-31 |
0 |
| Early Warning |
ccpa.zellepay.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-11-03 |
0 |
| Early Warning |
toolkit.zellepay.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-11-22 |
0 |
| Klarna |
*.pricerunner.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-08-12 |
1 |
| Klarna |
*.klarnacdn.net |
Wildcard |
In Scope |
Critical |
Eligible |
2026-08-12 |
0 |
| Klarna |
*.klarna.net |
Wildcard |
In Scope |
Critical |
Eligible |
2026-08-12 |
2 |
| Klarna |
*.klarna.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-08-12 |
4 |
| Klarna |
jobs.pricerunner.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-21 |
0 |
| Klarna |
https://api-stage.pricerunner.com/swagger-ui.html |
Url |
Out of Scope |
None |
Ineligible |
2025-10-13 |
0 |
| Klarna |
https://api-us.pricerunner.com/swagger-ui.html |
Url |
Out of Scope |
None |
Ineligible |
2025-10-13 |
0 |
| Klarna |
https://api.pricerunner.com/swagger-ui.html |
Url |
Out of Scope |
None |
Ineligible |
2025-10-13 |
0 |
| Klarna |
https://app.klarna.com/us/api/connected_card_bff/ |
Url |
Out of Scope |
None |
Ineligible |
2025-10-13 |
0 |
| Klarna |
Kustom |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-10-13 |
0 |
| Klarna |
locker.klarna.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-13 |
0 |
| Klarna |
nuji.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-13 |
0 |
| Klarna |
app.klarna.com |
Api |
In Scope |
Critical |
Eligible |
2025-02-24 |
10 |
| Klarna |
Klarna Android App (com.myklarnamobile) |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-02-17 |
8 |
| Klarna |
Klarna iOS App (com.klarna.app) |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-02-17 |
1 |
| Klarna |
Merchant Portal |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-05-10 |
29 |
| KOHO |
clicks.koho.ca |
Domain |
In Scope |
Low |
Eligible |
2026-07-22 |
0 |
| KOHO |
assets.koho.ca |
Domain |
In Scope |
Low |
Eligible |
2026-07-22 |
0 |
| KOHO |
login.koho.ca |
Domain |
In Scope |
Critical |
Eligible |
2026-07-22 |
1 |
| KOHO |
*.line-of-credit.koho.ca |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-20 |
0 |
| KOHO |
usercontent.koho.ca |
Domain |
In Scope |
Medium |
Eligible |
2021-11-05 |
0 |
| KOHO |
www.koho.ca |
Domain |
In Scope |
Medium |
Eligible |
2021-11-05 |
19 |
| KOHO |
*.koho.ca/cdn-cgi |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-05-21 |
0 |
| KOHO |
http://api.koho.ca/1.0 |
Url |
In Scope |
Critical |
Eligible |
2021-11-05 |
30 |
| KOHO |
http://api.koho.ca/partner |
Url |
In Scope |
Critical |
Eligible |
2021-11-05 |
0 |
| KOHO |
1091010942 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-11-05 |
0 |
| KOHO |
ca.koho |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-11-05 |
12 |
| KOHO |
web.koho.ca |
Domain |
In Scope |
Critical |
Eligible |
2021-11-05 |
19 |
| KOHO |
app.koho.ca |
Domain |
In Scope |
Critical |
Eligible |
2021-11-05 |
4 |
| Remitly |
whyisend.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
travelcash.money |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitresearch.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitlywallet.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitlytest.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitlypayments.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
1 |
| Remitly |
remitlypay.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitlyit.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
2 |
| Remitly |
remitlydata.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitlycredit.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitlycard.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitlyapi.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.xyz |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.uk |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.org |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.net |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.mx |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.me |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.jp |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.fr |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.eu |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.es |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.de |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.com.mx |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.com.au |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.co.uk |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.co |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.cash |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.ca |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly-vendor.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly-3pjs.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitiy.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
1 |
| Remitly |
remitir.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remilty.org |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remilty.net |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
origenfinance.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
origendebit.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
origencard.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
origenbanking.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
origenapp.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
insuritly.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
getsurenow.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
getorigen.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
beamitmobile.com |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
remitly.io |
Domain |
In Scope |
Medium |
Eligible |
2026-05-07 |
0 |
| Remitly |
login.remitly.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-30 |
1 |
| Remitly |
app.rewire.to |
Domain |
In Scope |
Critical |
Eligible |
2023-09-30 |
9 |
| Remitly |
careers.remitly.com |
Domain |
In Scope |
Medium |
Eligible |
2024-07-11 |
7 |
| Remitly |
site.rewire.com |
Domain |
In Scope |
Medium |
Eligible |
2024-10-21 |
2 |
| Remitly |
auth.remitly.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-13 |
9 |
| Remitly |
blog.remitly.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-03 |
2 |
| Remitly |
access-sandbox.remitly.com |
Domain |
In Scope |
High |
Eligible |
2024-09-05 |
0 |
| Remitly |
access.remitly.com |
Domain |
In Scope |
Critical |
Eligible |
2024-09-05 |
1 |
| Remitly |
news.remitly.com |
Domain |
In Scope |
High |
Eligible |
2024-07-16 |
5 |
| Remitly |
metrics.int.remitly.com |
Domain |
In Scope |
Medium |
Eligible |
2024-07-16 |
0 |
| Remitly |
ir.remitly.com |
Domain |
In Scope |
High |
Eligible |
2024-07-11 |
0 |
| Remitly |
ablink.info.remitly.com |
Domain |
In Scope |
High |
Eligible |
2024-05-28 |
0 |
| Remitly |
partner-webhook.remitly.io |
Domain |
In Scope |
High |
Eligible |
2024-05-24 |
0 |
| Remitly |
cardpayments.remitly.io |
Domain |
In Scope |
Critical |
Eligible |
2024-05-24 |
0 |
| Remitly |
hub-api-sandbox.remitly.io |
Api |
In Scope |
Medium |
Eligible |
2024-05-24 |
0 |
| Remitly |
media.remitly.io |
Domain |
In Scope |
High |
Eligible |
2024-05-24 |
0 |
| Remitly |
funding-webhooks.remitly.io |
Api |
In Scope |
High |
Eligible |
2024-05-24 |
0 |
| Remitly |
*.int.remitly.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-29 |
5 |
| Remitly |
*.dev.remitly.com |
Wildcard |
In Scope |
High |
Eligible |
2024-03-29 |
2 |
| Remitly |
app3.rewire.to |
Domain |
In Scope |
Medium |
Eligible |
2024-03-18 |
3 |
| Remitly |
rates.rewire.com |
Domain |
In Scope |
Medium |
Eligible |
2024-03-15 |
3 |
| Remitly |
rewire.com |
Domain |
In Scope |
Critical |
Eligible |
2023-08-28 |
18 |
| Remitly |
https://www.remitly.com/blog |
OtherAsset |
Out of Scope |
None |
Ineligible |
2019-08-01 |
0 |
| Remitly |
cards.remitly.io |
Domain |
In Scope |
Critical |
Eligible |
2018-10-19 |
1 |
| Remitly |
api.remitly.io |
Domain |
In Scope |
Critical |
Eligible |
2018-10-19 |
12 |
| Remitly |
674258465 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-10-03 |
4 |
| Remitly |
com.remitly.androidapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-10-03 |
8 |
| Remitly |
remitly.com |
Domain |
In Scope |
Critical |
Eligible |
2018-09-11 |
95 |
| Chia Network |
api.vault.chiatest.net |
Domain |
In Scope |
Critical |
Eligible |
2024-12-11 |
14 |
| Chia Network |
https://apps.apple.com/app/chia-signer/id6504493785 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-12-04 |
1 |
| Chia Network |
https://vault.chiatest.net/ |
Url |
In Scope |
Critical |
Eligible |
2024-12-03 |
7 |
| Chia Network |
https://github.com/Chia-Network/chiavdf |
SourceCode |
In Scope |
Critical |
Eligible |
2024-02-27 |
0 |
| Chia Network |
https://github.com/Chia-Network/chiapos |
SourceCode |
In Scope |
Critical |
Eligible |
2024-02-27 |
0 |
| Chia Network |
https://github.com/Chia-Network/chia_rs |
SourceCode |
In Scope |
Critical |
Eligible |
2024-02-27 |
1 |
| Chia Network |
https://github.com/Chia-Network/clvm_rs |
SourceCode |
In Scope |
Critical |
Eligible |
2024-02-27 |
0 |
| Chia Network |
https://github.com/Chia-Network/chia-blockchain-gui |
SourceCode |
In Scope |
Critical |
Eligible |
2024-02-27 |
4 |
| Chia Network |
https://github.com/Chia-Network/chia-blockchain |
SourceCode |
In Scope |
Critical |
Eligible |
2024-02-27 |
11 |
| Tools for Humanity |
https://github.com/worldcoin/orb-hardware |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-04-27 |
0 |
| Tools for Humanity |
https://github.com/worldcoin/orb-rustzone |
SourceCode |
In Scope |
Critical |
Eligible |
2026-04-27 |
0 |
| Tools for Humanity |
https://github.com/worldcoin/orb-relay-messages |
SourceCode |
In Scope |
Critical |
Eligible |
2026-04-27 |
0 |
| Tools for Humanity |
https://github.com/worldcoin/orb-secure-element |
SourceCode |
In Scope |
Critical |
Eligible |
2026-04-27 |
0 |
| Tools for Humanity |
https://github.com/worldcoin/orb-messages |
SourceCode |
In Scope |
Critical |
Eligible |
2026-04-27 |
0 |
| Tools for Humanity |
https://github.com/worldcoin/orb-core |
SourceCode |
In Scope |
Critical |
Eligible |
2026-04-27 |
0 |
| Tools for Humanity |
https://github.com/worldcoin/orb-firmware |
SourceCode |
In Scope |
Critical |
Eligible |
2026-04-27 |
0 |
| Tools for Humanity |
https://github.com/worldcoin/orb-software |
SourceCode |
In Scope |
Critical |
Eligible |
2026-04-27 |
1 |
| Tools for Humanity |
world.org |
Domain |
In Scope |
Critical |
Eligible |
2025-02-04 |
1 |
| Tools for Humanity |
https://apps.apple.com/no/app/world-app-worldcoin-wallet/id1560859847 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-02-15 |
2 |
| Tools for Humanity |
https://play.google.com/store/apps/details?id=com.worldcoin |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-02-15 |
4 |
| Tools for Humanity |
support.world.org |
Domain |
Out of Scope |
None |
Ineligible |
2025-02-04 |
0 |
| Tools for Humanity |
toolsforhumanity.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-14 |
0 |
| Tools for Humanity |
*.worldcoin.dev |
Wildcard |
In Scope |
Critical |
Eligible |
2024-02-15 |
5 |
| Tools for Humanity |
*.worldcoin-distributors.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-02-15 |
0 |
| Tools for Humanity |
https://github.com/worldcoin |
SourceCode |
In Scope |
Critical |
Eligible |
2024-02-15 |
36 |
| Tools for Humanity |
worldcoin.org |
Domain |
In Scope |
Critical |
Eligible |
2024-02-15 |
1 |
| Tools for Humanity |
*.toolsforhumanity.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-02-15 |
6 |
| Tools for Humanity |
*.worldcoin.org |
Wildcard |
In Scope |
Critical |
Eligible |
2023-06-06 |
60 |
| Tools for Humanity |
*.consumer.worldcoin.org |
Wildcard |
In Scope |
Critical |
Eligible |
2023-06-06 |
4 |
| Tools for Humanity |
https://docs.world.org/world-chain/reference/address-book |
SmartContract |
In Scope |
Critical |
Eligible |
2024-11-04 |
3 |
| Tools for Humanity |
developer.worldcoin.org |
Domain |
In Scope |
Critical |
Eligible |
2024-11-04 |
26 |
| Tools for Humanity |
Primary Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-11-04 |
1 |
| Tools for Humanity |
Secondary Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-11-04 |
0 |
| Tools for Humanity |
support.worldcoin.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-04-23 |
0 |
| Arkose Labs |
demo.arkoselabs.com |
Domain |
In Scope |
Critical |
Eligible |
2023-07-18 |
0 |
| Arkose Labs |
www.arkoselabs.com |
Domain |
In Scope |
Critical |
Eligible |
2023-07-17 |
40 |
| Arkose Labs |
developer.arkoselabs.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-07-18 |
0 |
| Arkose Labs |
https://status.arkoselabs.com/ |
Url |
Out of Scope |
None |
Ineligible |
2023-07-17 |
0 |
| Arkose Labs |
client-api.arkoselabs.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-09 |
4 |
| Arkose Labs |
cdn.arkoselabs.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-09 |
1 |
| Arkose Labs |
iframe.arkoselabs.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-09 |
0 |
| Arkose Labs |
verify.arkoselabs.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-09 |
1 |
| Arkose Labs |
portal.arkoselabs.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-09 |
6 |
| Arkose Labs |
customer-sessions.arkoselabs.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-09 |
1 |
| Sheer |
my.sheer.com |
Domain |
In Scope |
Critical |
Eligible |
2022-10-19 |
18 |
| Sheer |
www.sheer.com |
Domain |
In Scope |
Critical |
Eligible |
2022-10-19 |
89 |
| PornBox |
www.pornworld.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
3 |
| PornBox |
www.ddfcontent.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-11 |
22 |
| PornBox |
www.analvids.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-01 |
13 |
| PornBox |
www.pornbox.com |
Domain |
In Scope |
Critical |
Eligible |
2022-12-08 |
59 |
| Dynatrace |
playground.apps.dynatrace.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-11 |
0 |
| Dynatrace |
wyq34449.sprint.apps.dynatracelabs.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-11 |
0 |
| Dynatrace |
university-staging.dynatracelabs.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-02-21 |
0 |
| Dynatrace |
*.sprint.dynatracelabs.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-04-05 |
97 |
| Dynatrace |
https://github.com/Dynatrace |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-07-10 |
64 |
| Dynatrace |
sso-sprint.dynatracelabs.com |
Domain |
In Scope |
Critical |
Eligible |
2019-07-08 |
6 |
| Dynatrace |
account-sprint.dynatracelabs.com |
Domain |
In Scope |
Critical |
Eligible |
2019-04-05 |
32 |
| Dynatrace |
Core Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-07-05 |
13 |
| Dynatrace |
Dynatrace ActiveGate |
Executable |
In Scope |
Critical |
Eligible |
2020-03-24 |
32 |
| Dynatrace |
Dynatrace MobileAgent |
Executable |
In Scope |
Critical |
Eligible |
2020-08-12 |
0 |
| Dynatrace |
Dynatrace OneAgent |
Executable |
In Scope |
Critical |
Eligible |
2019-04-05 |
49 |
| Dynatrace |
myaccount-hardening.dynatracelabs.com |
Domain |
In Scope |
Critical |
Eligible |
2022-12-12 |
29 |
| Dynatrace |
*.sprint.apps.dynatracelabs.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-05-19 |
23 |
| Dynatrace |
EasyTrade demo application |
Executable |
Out of Scope |
None |
Ineligible |
2024-01-24 |
0 |
| Dynatrace |
*.dev.dynatracelabs.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-09-28 |
0 |
| Dynatrace |
easyTravel demo application |
Executable |
Out of Scope |
None |
Ineligible |
2019-04-05 |
0 |
| Dynatrace |
*.dynatrace.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-04-05 |
0 |
| hostinger |
ecommerce.hostinger.com |
Domain |
In Scope |
Critical |
Eligible |
2026-09-18 |
0 |
| hostinger |
hostinger.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-07 |
165 |
| hostinger |
http://payments.hostinger.com |
Url |
In Scope |
Critical |
Eligible |
2026-04-14 |
6 |
| hostinger |
mail.hostinger.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-09-25 |
25 |
| hostinger |
H5G/Agency |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-07-24 |
24 |
| hostinger |
Managed OpenClaw |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-04-17 |
0 |
| hostinger |
agents.hostinger.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-30 |
10 |
| hostinger |
reach.hostinger.com |
Domain |
In Scope |
Critical |
Eligible |
2025-06-12 |
35 |
| hostinger |
horizons.hostinger.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-04 |
40 |
| hostinger |
builder.hostinger.com |
Domain |
In Scope |
Critical |
Eligible |
2024-05-08 |
83 |
| hostinger |
cpanel.hostinger.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-24 |
32 |
| hostinger |
hpanel.hostinger.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-24 |
354 |
| eufy Security |
soundcore/id1331876603 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| eufy Security |
Liberty 5 Pro Max D1204 |
Hardware |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| eufy Security |
id=com.zhixin.controller |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| eufy Security |
id=com.oceanwing.soundcore |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| eufy Security |
anker-nebula/id1319092174 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| eufy Security |
Anker soundcore Work D3200 |
Hardware |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| eufy Security |
eufyMake Studio(2D UV) |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-08-04 |
0 |
| eufy Security |
Anker |
IosAppStore |
In Scope |
High |
Eligible |
2025-10-14 |
1 |
| eufy Security |
eufyMake E1 |
Hardware |
In Scope |
Critical |
Eligible |
2025-05-09 |
0 |
| eufy Security |
com.anker.charging |
AndroidPlayStore |
In Scope |
High |
Eligible |
2025-05-09 |
0 |
| eufy Security |
Solarbank 2 E1600 Pro |
Hardware |
In Scope |
Critical |
Eligible |
2025-05-09 |
0 |
| eufy Security |
com.oceanwing.FDMPrint |
AndroidPlayStore |
In Scope |
High |
Eligible |
2023-04-11 |
0 |
| eufy Security |
com.anker.AnkerMake |
IosAppStore |
In Scope |
High |
Eligible |
2023-04-11 |
0 |
| eufy Security |
com.security.BatteryCam |
IosAppStore |
In Scope |
High |
Eligible |
2023-04-11 |
3 |
| eufy Security |
com.oceanwing.battery.cam |
AndroidPlayStore |
In Scope |
High |
Eligible |
2023-04-11 |
5 |
| eufy Security |
https://us.eufy.com/products/t8410121 |
Hardware |
In Scope |
High |
Eligible |
2023-04-10 |
2 |
| eufy Security |
https://us.eufy.com/products/t88511d1 |
Hardware |
In Scope |
High |
Eligible |
2023-04-10 |
2 |
| eufy Security |
https://us.eufy.com/products/t88711w1 |
Hardware |
In Scope |
High |
Eligible |
2023-04-06 |
0 |
| eufy Security |
https://us.eufy.com/products/e8213181 |
Hardware |
In Scope |
Critical |
Eligible |
2023-04-11 |
2 |
| 23andMe Bug Bounty |
style.23andme.org |
Domain |
In Scope |
Critical |
Eligible |
2026-04-15 |
0 |
| 23andMe Bug Bounty |
https://23andme.org/ancestry/last-names |
Url |
In Scope |
Critical |
Eligible |
2026-04-15 |
0 |
| 23andMe Bug Bounty |
www.23andme.org |
Domain |
In Scope |
Critical |
Eligible |
2026-03-02 |
1 |
| 23andMe Bug Bounty |
store.23andme.org |
Domain |
In Scope |
Critical |
Eligible |
2023-11-14 |
3 |
| 23andMe Bug Bounty |
https://23andme.org/media-center |
Url |
In Scope |
Critical |
Eligible |
2023-11-14 |
6 |
| 23andMe Bug Bounty |
https://23andme.org/education |
Url |
In Scope |
Critical |
Eligible |
2023-11-14 |
1 |
| 23andMe Bug Bounty |
https://23andme.org/clinicians |
Url |
In Scope |
Critical |
Eligible |
2023-11-14 |
4 |
| 23andMe Bug Bounty |
https://23andme.org/research |
Url |
In Scope |
Medium |
Eligible |
2023-11-16 |
0 |
| 23andMe Bug Bounty |
https://23andme.org/blog |
Url |
In Scope |
Critical |
Eligible |
2023-11-14 |
5 |
| 23andMe Bug Bounty |
23andmeresearchinstitute.org |
Domain |
In Scope |
Critical |
Eligible |
2026-04-15 |
0 |
| 23andMe Bug Bounty |
trust.23andme.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-15 |
0 |
| 23andMe Bug Bounty |
fulfillment.23andme.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-15 |
0 |
| 23andMe Bug Bounty |
portal.23andme.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-15 |
0 |
| 23andMe Bug Bounty |
merch.23andme.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-15 |
0 |
| 23andMe Bug Bounty |
refer.23andme.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-15 |
0 |
| 23andMe Bug Bounty |
api.23andme.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-14 |
4 |
| 23andMe Bug Bounty |
auth.23andme.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-14 |
3 |
| 23andMe Bug Bounty |
you.23andme.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-14 |
6 |
| MercadoLibre |
Wonder |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-10-01 |
0 |
| MercadoLibre |
mercadolibreexperience.com.* |
Wildcard |
In Scope |
Critical |
Ineligible |
2026-09-14 |
0 |
| MercadoLibre |
*.mercadolibre.com.uy |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
*.mercadolibre.com.mx |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
11 |
| MercadoLibre |
*.mercadolibre.com.co |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
13 |
| MercadoLibre |
*.mercadolivre.com.br |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
79 |
| MercadoLibre |
*.mercadolibre.cl |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
33 |
| MercadoLibre |
*.mercadolibre.com.ve |
Wildcard |
In Scope |
Critical |
Ineligible |
2026-09-07 |
0 |
| MercadoLibre |
*.tucarro.com.ve |
Wildcard |
In Scope |
Critical |
Ineligible |
2026-09-07 |
0 |
| MercadoLibre |
www.ipbooster.com |
Domain |
In Scope |
Critical |
Ineligible |
2026-09-07 |
2 |
| MercadoLibre |
*.mercadolibre.com.ar |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
40 |
| MercadoLibre |
mercadoenvios.com.ve |
Domain |
In Scope |
Critical |
Ineligible |
2026-06-11 |
0 |
| MercadoLibre |
mercadobackoffice.com |
Domain |
In Scope |
Critical |
Eligible |
2026-06-11 |
0 |
| MercadoLibre |
mpago.la |
Domain |
In Scope |
Critical |
Eligible |
2026-06-11 |
1 |
| MercadoLibre |
mpago.li |
Domain |
In Scope |
Critical |
Eligible |
2026-06-11 |
0 |
| MercadoLibre |
mercadopago.com.ve |
Domain |
In Scope |
Critical |
Eligible |
2026-06-11 |
0 |
| MercadoLibre |
Tier 3 |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-05-07 |
3 |
| MercadoLibre |
sustentabilidadmercadolibre.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-01 |
0 |
| MercadoLibre |
furydocs.io |
Domain |
In Scope |
Critical |
Eligible |
2025-08-01 |
0 |
| MercadoLibre |
furycloud.io |
Domain |
In Scope |
Critical |
Eligible |
2025-08-01 |
0 |
| MercadoLibre |
com.mercadolibre.android.mplay_tv |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-05-08 |
0 |
| MercadoLibre |
tumoto.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
tucarro.com.co |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
1 |
| MercadoLibre |
tucarro.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
portalinmobiliario.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
1 |
| MercadoLibre |
portalinmobiliario.cl |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
mercadoplay.uy |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
mercadoplay.pe |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
mercadoplay.com.uy |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
mercadoplay.com.pe |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
mercadoplay.co |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
meliplay.com.uy |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
meliplay.com.pe |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
meliplay.com.ar |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
biolivre.com.br |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
biolibre.mx |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
biolibre.co |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
biolibre.cl |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
1 |
| MercadoLibre |
biolibre.ar |
Domain |
In Scope |
Critical |
Eligible |
2025-05-06 |
0 |
| MercadoLibre |
wow-int.mercadolibre.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-04-16 |
0 |
| MercadoLibre |
*.mercadopago.com.br |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
58 |
| MercadoLibre |
Leaked Credentials |
OtherAsset |
In Scope |
High |
Eligible |
2025-03-05 |
14 |
| MercadoLibre |
com.3mosquitos.MercadoLibre |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-03-08 |
9 |
| MercadoLibre |
com.mercadoenvios.logistics |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-03-05 |
1 |
| MercadoLibre |
*.kangu.tech |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-01-20 |
0 |
| MercadoLibre |
*.gokangu.uy |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-01-20 |
0 |
| MercadoLibre |
*.gokangu.mx |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-01-20 |
0 |
| MercadoLibre |
*.gokangu.co |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-01-20 |
0 |
| MercadoLibre |
*.gokangu.cl |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-01-20 |
0 |
| MercadoLibre |
*.kangu.com.br |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-06-17 |
0 |
| MercadoLibre |
Redelcom |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-09-18 |
0 |
| MercadoLibre |
www.mercadopago.com.ec |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolivre.com |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
1 |
| MercadoLibre |
www.mercadolibre.com.sv |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolibre.com.py |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolibre.com.pa |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolibre.com.ni |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolibre.com.hn |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolibre.com.gt |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolibre.com.ec |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolibre.com.do |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
www.mercadolibre.com.bo |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
1 |
| MercadoLibre |
www.mercadolibre.co.cr |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
logistica.redelcom.cl |
Domain |
In Scope |
Critical |
Eligible |
2025-01-20 |
1 |
| MercadoLibre |
*.mlstatic.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
4 |
| MercadoLibre |
api.mercadopago.com |
Domain |
In Scope |
Critical |
Eligible |
2018-12-10 |
66 |
| MercadoLibre |
api.mercadolibre.com |
Domain |
In Scope |
Critical |
Eligible |
2021-06-16 |
77 |
| MercadoLibre |
com.mercadopago.wallet |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-10-29 |
82 |
| MercadoLibre |
com.mercadopago.MercadoPago |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-10-29 |
30 |
| MercadoLibre |
com.mercadolibre |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-03-08 |
35 |
| MercadoLibre |
Point Smart |
Hardware |
In Scope |
Critical |
Eligible |
2021-12-20 |
6 |
| MercadoLibre |
com.mercadoenvios.driver |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-12-22 |
3 |
| MercadoLibre |
com.mercadoenvios.crowdsourcing |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-12-22 |
6 |
| MercadoLibre |
*.mercadopago.com.uy |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
0 |
| MercadoLibre |
*.mercadopago.com.pe |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
2 |
| MercadoLibre |
*.mercadopago.com.mx |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
6 |
| MercadoLibre |
*.mercadopago.com.co |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
6 |
| MercadoLibre |
*.mercadopago.com.ar |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
42 |
| MercadoLibre |
*.mercadopago.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
10 |
| MercadoLibre |
*.mercadopago.cl |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
8 |
| MercadoLibre |
*.mercadolibre.com.pe |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
1 |
| MercadoLibre |
*.mercadolibre.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
29 |
| MercadoLibre |
*.adminml.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-20 |
13 |
| MercadoLibre |
Crypto |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-14 |
2 |
| MercadoLibre |
developersforum |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-09-18 |
0 |
| Temu |
partner.temu.com |
Domain |
In Scope |
Critical |
Eligible |
2026-09-28 |
0 |
| Temu |
ads.temu.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-09 |
0 |
| Temu |
seller.temu.com |
Domain |
In Scope |
Critical |
Eligible |
2025-06-26 |
6 |
| Temu |
1641486558 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-11-22 |
1 |
| Temu |
com.einnovation.temu |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-11-22 |
5 |
| Temu |
www.temu.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-03 |
22 |
| Booking.com |
surveys.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-11 |
0 |
| Booking.com |
workforce-dev.voicedqs.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-02 |
0 |
| Booking.com |
workforce.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-02 |
0 |
| Booking.com |
procurement.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-10 |
0 |
| Booking.com |
www.sustainability.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-24 |
0 |
| Booking.com |
admin.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
72 |
| Booking.com |
medialibrary.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-24 |
0 |
| Booking.com |
ams.merchandise.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-24 |
0 |
| Booking.com |
awscpasslab.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-24 |
0 |
| Booking.com |
cpass.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-24 |
0 |
| Booking.com |
welcomekit.booking.com/ |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-24 |
0 |
| Booking.com |
business.booking.com/ |
Domain |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
jobs.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-10-28 |
0 |
| Booking.com |
https://apps.apple.com/us/app/pulse-for-booking-com-partners/id992795726 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-09-10 |
1 |
| Booking.com |
https://play.google.com/store/apps/details?id=com.booking.hotelmanager&hl=en |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-09-10 |
4 |
| Booking.com |
https://play.google.com/store/apps/details?id=com.booking&hl=en |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-09-09 |
4 |
| Booking.com |
https://apps.apple.com/us/app/booking-com-hotels-travel/id367003839 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-09-09 |
2 |
| Booking.com |
desk-demo-api.fareharbor.engineering |
Domain |
Out of Scope |
None |
Ineligible |
2024-07-16 |
0 |
| Booking.com |
desk-demo.fareharbor.engineering |
Domain |
Out of Scope |
None |
Ineligible |
2024-07-16 |
0 |
| Booking.com |
*.fareharbor.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-08-14 |
31 |
| Booking.com |
fareharborsites.com |
Domain |
In Scope |
Critical |
Eligible |
2024-05-28 |
2 |
| Booking.com |
tableau.fareharbor.engineering |
Domain |
In Scope |
Critical |
Eligible |
2024-05-14 |
0 |
| Booking.com |
*.fareharbor.engineering |
Wildcard |
In Scope |
Critical |
Eligible |
2024-05-14 |
4 |
| Booking.com |
teleport.fareharbor.engineering |
Domain |
In Scope |
Critical |
Eligible |
2024-03-19 |
1 |
| Booking.com |
recruitmentsurveys.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-05-07 |
0 |
| Booking.com |
partnerfeedback.booking.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-05-06 |
0 |
| Booking.com |
fhdn.fareharbor.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-30 |
1 |
| Booking.com |
compass.fareharbor.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-30 |
5 |
| Booking.com |
sites.fareharbor.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-16 |
0 |
| Booking.com |
marketing.fareharbor.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-16 |
1 |
| Booking.com |
readonly.fareharbor.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-16 |
0 |
| Booking.com |
demo.fareharbor.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-16 |
2 |
| Booking.com |
https://fareharbor.com/demo/ |
Url |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
https://ugcupload.booking.com/upload_bbtool_company_logo |
Url |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
https://secure.booking.com/enterprise/signon.en-gb.html |
Url |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
https://secure.booking.com/companyjoin.html |
Url |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
https://www.booking.com/bbm.html |
Url |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
secure.booking.com/orgnode/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
secure.booking.com/company/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
www.booking.com/bbmanage/data/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
www.booking.com/bbmanage/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
spadmin.booking.com/ |
Domain |
Out of Scope |
None |
Ineligible |
2024-03-19 |
0 |
| Booking.com |
www.fareharbor.com |
Domain |
In Scope |
Critical |
Eligible |
2024-03-05 |
11 |
| Booking.com |
*.rentalcars.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-08-15 |
71 |
| Booking.com |
*.booking.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-08-15 |
275 |
| Booking.com |
spark.fareharbor.com |
Domain |
In Scope |
Critical |
Eligible |
2024-02-20 |
1 |
| Booking.com |
https://secure-iphone-xml.booking.com/json/ |
Url |
In Scope |
Critical |
Eligible |
2018-04-18 |
0 |
| Booking.com |
taxis.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
4 |
| Booking.com |
supply-xml.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
phone-validation.taxi.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
paynotifications.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
paymentcomponent.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
4 |
| Booking.com |
paybridge.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
1 |
| Booking.com |
kyc-onboarding.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2022-07-20 |
1 |
| Booking.com |
indicative-pricing.taxi.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
http://secure-iphone-xml.booking.com/json/ |
Url |
In Scope |
Critical |
Eligible |
2023-12-13 |
0 |
| Booking.com |
webhooks.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
secure-supply-xml.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
portal.taxi.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
8 |
| Booking.com |
https://iphone-xml.booking.com/json/ |
Url |
In Scope |
Critical |
Eligible |
2018-04-18 |
2 |
| Booking.com |
distribution-xml.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
chat.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
2 |
| Booking.com |
autocomplete.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
accommodations.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
widget.rentalcars.com |
Domain |
In Scope |
Critical |
Eligible |
2022-11-02 |
18 |
| Booking.com |
metasearch-api.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Booking.com |
experiences.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
2 |
| Booking.com |
flights.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
2 |
| Booking.com |
taxi.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2022-11-02 |
3 |
| Booking.com |
careers.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2017-12-12 |
12 |
| Booking.com |
secure.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2017-12-12 |
109 |
| Booking.com |
booking.com |
Domain |
In Scope |
Critical |
Eligible |
2017-12-12 |
119 |
| Booking.com |
account.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2019-02-04 |
22 |
| Booking.com |
cars.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2022-11-02 |
28 |
| Booking.com |
supplier.auth.toag.booking.com |
Domain |
In Scope |
Critical |
Eligible |
2023-01-18 |
0 |
| Bybit Fintech Ltd |
http://www.byreal.io |
Url |
In Scope |
Critical |
Eligible |
2025-11-06 |
2 |
| Bybit Fintech Ltd |
http://www.bybit.com/en/alpha/overview/ |
Url |
In Scope |
Critical |
Eligible |
2025-11-06 |
1 |
| Bybit Fintech Ltd |
http://www.bybit.com/trade/tradfi/ |
Url |
In Scope |
Critical |
Eligible |
2025-11-06 |
1 |
| Bybit Fintech Ltd |
*.bybit.tr |
Wildcard |
In Scope |
Critical |
Eligible |
2025-08-28 |
5 |
| Bybit Fintech Ltd |
http://testnet.bybit.eu |
Url |
In Scope |
Critical |
Eligible |
2025-08-26 |
1 |
| Bybit Fintech Ltd |
*.bybit.eu |
Wildcard |
In Scope |
Critical |
Eligible |
2025-07-16 |
8 |
| Bybit Fintech Ltd |
https://play.google.com/store/apps/details?id=com.bybit.app&hl=en |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-09-19 |
7 |
| Bybit Fintech Ltd |
*.bybit.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-09-19 |
84 |
| Bybit Fintech Ltd |
https://apps.apple.com/us/app/bybit-app/id1488296980 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-09-19 |
2 |
| Front |
Front for Windows |
Executable |
In Scope |
High |
Eligible |
2021-10-14 |
8 |
| Front |
Front for Mac |
Executable |
In Scope |
High |
Eligible |
2021-10-14 |
2 |
| Front |
com.frontapp.mobile |
AndroidPlayStore |
In Scope |
High |
Eligible |
2021-10-14 |
3 |
| Front |
com.frontapp.mobile |
IosAppStore |
In Scope |
High |
Eligible |
2021-10-14 |
1 |
| Front |
api2.frontapp.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-23 |
1 |
| Front |
app.frontapp.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-23 |
193 |
| Boozt Fashion AB |
www.kronor.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-12-17 |
0 |
| Boozt Fashion AB |
kronor.io |
Domain |
In Scope |
Critical |
Eligible |
2024-12-17 |
3 |
| Boozt Fashion AB |
bmp.boozt.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-04-16 |
0 |
| Boozt Fashion AB |
*.booztlet.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-09-27 |
11 |
| Boozt Fashion AB |
*.boozt.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-09-27 |
38 |
| Boozt Fashion AB |
analytics.boozt.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Boozt Fashion AB |
com.boozt.booztlet |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-09-27 |
0 |
| Boozt Fashion AB |
com.boozt.app |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-09-27 |
0 |
| Boozt Fashion AB |
com.booztlet |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-09-27 |
1 |
| Boozt Fashion AB |
com.boozt |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-09-27 |
4 |
| Trip.com |
*.trip.biz |
Wildcard |
In Scope |
Critical |
Eligible |
2025-06-10 |
3 |
| Trip.com |
*.vliegwinkel.nl |
Wildcard |
In Scope |
Critical |
Eligible |
2025-05-29 |
0 |
| Trip.com |
*.vayama.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-05-29 |
0 |
| Trip.com |
*.flugladen.de |
Wildcard |
In Scope |
Critical |
Eligible |
2025-05-29 |
4 |
| Trip.com |
*.budgetair.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-05-29 |
1 |
| Trip.com |
*.tyo-masters.co.jp |
Wildcard |
In Scope |
Critical |
Eligible |
2025-05-29 |
0 |
| Trip.com |
*.triplinkintl.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-05-29 |
2 |
| Trip.com |
*.playground.travix.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-04-17 |
0 |
| Trip.com |
*.development.travix.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-04-17 |
0 |
| Trip.com |
*.dev.travix.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-04-17 |
0 |
| Trip.com |
*.stg.travix.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-04-17 |
0 |
| Trip.com |
*.cheaptickets.nl |
Wildcard |
In Scope |
Critical |
Eligible |
2024-12-10 |
1 |
| Trip.com |
*.trainpal.com,*.mytrainpal.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-12-10 |
9 |
| Trip.com |
*.staging.travix.com |
OtherAsset |
In Scope |
Critical |
Ineligible |
2024-10-15 |
5 |
| Trip.com |
*.travix.io |
Wildcard |
In Scope |
Critical |
Eligible |
2024-09-23 |
1 |
| Trip.com |
*.travix.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-09-23 |
49 |
| Trip.com |
com.trip.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-10-16 |
7 |
| Trip.com |
com.trip.ios |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-10-16 |
0 |
| Trip.com |
<locale>.trip.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-09-28 |
34 |
| Trip.com |
*.trip.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-09-28 |
41 |
| Mergify |
articles.mergify.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-28 |
0 |
| Mergify |
blog.mergify.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-08-23 |
0 |
| Mergify |
mergify.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-08-23 |
0 |
| Mergify |
dashboard.mergify.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-23 |
40 |
| Mergify |
api.mergify.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-23 |
13 |
| Compass |
*.porchlightgroup.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-21 |
0 |
| Compass |
@properties |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
Glide |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
KVS Title |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
LegacyTexas Title |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
Chartwell |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
Consumer’s Title of California |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
Christie’s International Real Estate |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
c21.hk |
Domain |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
century21.hk |
Domain |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.bhgre.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.c21.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.cartus.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.cbcworldwide.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.century21.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.century21global.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.coldwellbanker.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.corcoran.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.era.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.leadrouter.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.mycbdesk.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.nrtllc.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.realogy.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.sothebysrealty.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.trgc.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.anywhere.re |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-16 |
0 |
| Compass |
*.kvstitle.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
*.attorneyskeytitle.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
SQS Square Settlements |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
*.sqstitle.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
*.firstalliancetitle.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
*.legacytexastitle.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
*.chartwellescrow.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
*.ctccal.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
glide.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-12-05 |
0 |
| Compass |
http://www.compass.com/api/v3/lead_forms/agent_profile |
Url |
Out of Scope |
None |
Ineligible |
2024-06-20 |
0 |
| Compass |
http://www.compass.com/contact/ |
Url |
Out of Scope |
None |
Ineligible |
2024-06-20 |
0 |
| Compass |
https://apps.apple.com/us/app/compass-real-estate-homes/id692766504 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-06-20 |
1 |
| Compass |
com.compass.compass |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-06-20 |
1 |
| Compass |
www.compass.com |
Domain |
In Scope |
Critical |
Eligible |
2021-12-21 |
126 |
| HYPR |
demo.hypr.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-04 |
0 |
| HYPR |
partners.hypr.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-10-08 |
0 |
| HYPR |
help.hypr.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-10-08 |
0 |
| HYPR |
support.hypr.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-10-08 |
0 |
| HYPR |
*.gethypr.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-08 |
39 |
| HYPR |
*.hypr.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-11-25 |
102 |
| HYPR |
com.hypr.one |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-12-10 |
4 |
| HYPR |
HyprUnlock.exe |
Executable |
In Scope |
Critical |
Eligible |
2020-12-10 |
10 |
| HYPR |
HYPR Workforce Access.app |
Executable |
In Scope |
Critical |
Eligible |
2020-12-10 |
6 |
| HYPR |
com.hypr.one |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-12-10 |
6 |
| Modern Treasury |
http://app.moderntreasury.com/tell_us_more |
Url |
Out of Scope |
None |
Ineligible |
2026-08-25 |
0 |
| Modern Treasury |
ph.moderntreasury.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-25 |
0 |
| Modern Treasury |
help.moderntreasury.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-12-09 |
0 |
| Modern Treasury |
trust.moderntreasury.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-26 |
0 |
| Modern Treasury |
cdn.moderntreasury.com |
Domain |
In Scope |
Critical |
Eligible |
2022-10-12 |
0 |
| Modern Treasury |
docs.moderntreasury.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-25 |
0 |
| Modern Treasury |
www.moderntreasury.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-13 |
0 |
| Modern Treasury |
app.moderntreasury.com |
Domain |
In Scope |
Critical |
Eligible |
2022-06-13 |
66 |
| REI BBP |
login.rei.com |
Domain |
In Scope |
Critical |
Eligible |
2023-09-26 |
0 |
| REI BBP |
http://rei.com/lists |
Url |
Out of Scope |
None |
Ineligible |
2024-08-07 |
0 |
| REI BBP |
*.rentals.rei.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-06-28 |
0 |
| REI BBP |
rei.gladly.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-07-10 |
0 |
| REI BBP |
http://collaboration.rei.com |
Url |
In Scope |
Critical |
Eligible |
2024-04-01 |
0 |
| REI BBP |
http://www.rei.com/learn/expert-advice |
Url |
In Scope |
Critical |
Eligible |
2024-04-01 |
1 |
| REI BBP |
partners2.rei.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-15 |
0 |
| REI BBP |
greenvestrentals.rei.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-10 |
0 |
| REI BBP |
http://rei.com/rei-garage |
Url |
Out of Scope |
None |
Ineligible |
2022-08-11 |
0 |
| REI BBP |
foryourbenefit-rei.com/ |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-27 |
0 |
| REI BBP |
desktop.rei.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-12 |
0 |
| REI BBP |
vpn.rei.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-12 |
0 |
| REI BBP |
wpvip.rei.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-11 |
0 |
| REI BBP |
test-login.rei.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-22 |
0 |
| REI BBP |
engineering.rei.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| REI BBP |
reicasting.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-13 |
0 |
| REI BBP |
destinations.rei.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-08-31 |
0 |
| REI BBP |
reifund.org |
Domain |
Out of Scope |
None |
Ineligible |
2022-08-31 |
0 |
| REI BBP |
rei.jobs |
Domain |
Out of Scope |
None |
Ineligible |
2022-08-31 |
0 |
| REI BBP |
http://rei.com/rentals |
Url |
Out of Scope |
None |
Ineligible |
2022-08-11 |
0 |
| REI BBP |
http://rei.com/blog |
Url |
Out of Scope |
None |
Ineligible |
2022-08-11 |
0 |
| REI BBP |
http://rei.com/used |
Url |
Out of Scope |
None |
Ineligible |
2022-08-11 |
0 |
| REI BBP |
Android & iOS App for REI Customers |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-08-11 |
5 |
| REI BBP |
Any public cloud resource or infrastructure operated and managed by REI. |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-08-11 |
17 |
| REI BBP |
rei.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-03 |
52 |
| Inditex |
Main corporate site |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-02-04 |
2 |
| Inditex |
Other related e-commerce services |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-02-04 |
7 |
| Inditex |
Recruitment services |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-02-04 |
5 |
| Inditex |
e-Commerce |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-09-04 |
63 |
| WisdomTree, Inc. |
dataspanapi.wisdomtree.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-04-21 |
0 |
| WisdomTree, Inc. |
https://app.wisdomtreeconnect.com |
Url |
In Scope |
Critical |
Eligible |
2026-03-10 |
7 |
| WisdomTree, Inc. |
https://app.wisdomtreeconnect.com/o/token/ |
Url |
In Scope |
Critical |
Eligible |
2026-03-10 |
0 |
| WisdomTree, Inc. |
https://app.wisdomtreeconnect.com/api/ |
Url |
In Scope |
Critical |
Eligible |
2026-03-10 |
1 |
| WisdomTree, Inc. |
wisdomtree.eu |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-30 |
0 |
| WisdomTree, Inc. |
wisdomtree.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-30 |
0 |
| WisdomTree, Inc. |
com.wisdomtree.wtprime |
AndroidApk |
In Scope |
Critical |
Eligible |
2022-10-07 |
9 |
| WisdomTree, Inc. |
com.wisdomtree.wtprime |
IosTestflight |
In Scope |
Critical |
Eligible |
2022-10-07 |
5 |
| WisdomTree, Inc. |
api.wisdomtreeprimeapp.com |
Domain |
In Scope |
Critical |
Eligible |
2022-10-07 |
20 |
| Redox |
https://redoxengine.atlassian.net |
Url |
Out of Scope |
None |
Ineligible |
2023-06-09 |
0 |
| Redox |
redox.slack.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-10 |
0 |
| Redox |
explore.redoxengine.com |
Domain |
In Scope |
Medium |
Eligible |
2023-01-10 |
0 |
| Redox |
www.redoxengine.com |
Domain |
In Scope |
Medium |
Eligible |
2023-01-10 |
4 |
| Redox |
test*.redoxengine.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-01-10 |
3 |
| Redox |
sso.redoxengine.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-10 |
0 |
| Redox |
api.redoxengine.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-10 |
0 |
| Redox |
candi.redoxengine.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-10 |
0 |
| Redox |
dashboard.redoxengine.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-10 |
0 |
| Redox |
help.redoxengine.com |
Domain |
In Scope |
Medium |
Eligible |
2023-01-10 |
0 |
| Redox |
fhir.redoxengine.com |
Domain |
In Scope |
Medium |
Eligible |
2023-01-10 |
0 |
| Redox |
docs.redoxengine.com |
Domain |
In Scope |
Medium |
Eligible |
2023-01-10 |
0 |
| Redox |
testapi.redoxengine.com |
Domain |
In Scope |
Critical |
Eligible |
2023-01-10 |
0 |
| Redox |
testapp.redoxengine.com |
Domain |
In Scope |
Critical |
Eligible |
2023-01-10 |
18 |
| Redox |
10x.redoxengine.com |
Domain |
In Scope |
Critical |
Eligible |
2023-01-10 |
2 |
| Visa |
https://www.currencycloud.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-09-30 |
0 |
| Visa |
https://ebctest.cybersource.com/CGK2 |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
sandbox.developer.plus.authorize.net |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| Visa |
developer.plus.authorize.net |
Domain |
In Scope |
Critical |
Eligible |
2026-08-31 |
0 |
| Visa |
*.visamiddleeast.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-08-27 |
0 |
| Visa |
https://ebctest.cybersource.com/vroom |
Url |
In Scope |
Critical |
Eligible |
2026-08-26 |
2 |
| Visa |
https://ebctest.cybersource.com/bos |
Url |
In Scope |
Critical |
Eligible |
2026-08-25 |
1 |
| Visa |
https://ebctest.cybersource.com/underwriting |
Url |
In Scope |
Critical |
Eligible |
2026-08-25 |
1 |
| Visa |
https://www.visa.com.ua/ |
Url |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.be |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.pl |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visabg.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.sk |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.se |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.ro |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.pt |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.no |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.nl |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.mn |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.lv |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.lt |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.is |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.ie |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.hu |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.gr |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.fi |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.es |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.ee |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.dk |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.de |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.cz |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.com.hn |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.cn |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.cl |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.ca |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visasoutheasteurope.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visakorea.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visaitalia.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visaeurope.si |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visaeurope.lu |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visaeurope.ch |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visaeurope.at |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.com.jm |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
visa.com.mx |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
rs.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
myanmar.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
cis.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
by.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
africa.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
www.visa.co.nz |
Domain |
In Scope |
Critical |
Eligible |
2023-06-14 |
4 |
| Visa |
https://usa.visa.com/gateway/api |
Url |
In Scope |
Critical |
Eligible |
2026-08-24 |
1 |
| Visa |
https://www.visa.com.az/az_az/account/registration |
Url |
In Scope |
Critical |
Eligible |
2025-04-07 |
1 |
| Visa |
www.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| Visa |
https://www.myvisacardportal.com/enbd/en_ae/landing/ |
Url |
In Scope |
Critical |
Eligible |
2026-08-22 |
0 |
| Visa |
www.visa.com.bo |
Domain |
In Scope |
Critical |
Eligible |
2026-08-22 |
0 |
| Visa |
www.visa.co.ni |
Domain |
In Scope |
Critical |
Eligible |
2026-08-22 |
0 |
| Visa |
www.visa.co.cr |
Domain |
In Scope |
Critical |
Eligible |
2026-08-22 |
0 |
| Visa |
forms.cybersource.com |
Domain |
In Scope |
Medium |
Eligible |
2026-08-21 |
0 |
| Visa |
developer.currencycloud.com |
Domain |
In Scope |
High |
Eligible |
2024-08-27 |
0 |
| Visa |
images.demand.cybersource.com |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
0 |
| Visa |
app.demand.cybersource.com |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
0 |
| Visa |
info.authorize.net |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
0 |
| Visa |
vgov.catalogue.digitalcontrolroom.com |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
0 |
| Visa |
myvu.visauniversity.com |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
0 |
| Visa |
visainnovationprogram.com |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
0 |
| Visa |
https://solutions.visaacceptance.com/subscription |
Url |
In Scope |
Medium |
Eligible |
2026-04-28 |
0 |
| Visa |
visaonchainanalytics.com |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
2 |
| Visa |
developers.pismo.io |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
0 |
| Visa |
codeofconduct.visa.com |
Domain |
In Scope |
Medium |
Eligible |
2026-04-28 |
1 |
| Visa |
http://myvisainfinite.com/suntrust/en_us/home.html |
Url |
In Scope |
Critical |
Eligible |
2024-01-31 |
0 |
| Visa |
www.trialpay.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
www.visa.com.ru |
Domain |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Visa |
survey.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-05-27 |
0 |
| Visa |
https://ebctest.cybersource.com/pbl |
Url |
In Scope |
Critical |
Eligible |
2026-05-21 |
0 |
| Visa |
releasor.payworks.com/ |
Domain |
In Scope |
Critical |
Eligible |
2026-05-14 |
0 |
| Visa |
askpeopleteam.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
testbank.xs2a.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
admin-portal.api-xperience.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
dwy.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
vasdemos.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
sap.api-xperience.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
visasgic.api-xperience.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
capability.prod.innovexperiments.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
*.prod.innovexperiments.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
vwcm.visa.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-28 |
0 |
| Visa |
https://ebctest.cybersource.com/kms/ |
Url |
In Scope |
Critical |
Eligible |
2026-03-26 |
0 |
| Visa |
https://ebctest.cybersource.com/notification-subscriptions |
Url |
In Scope |
Critical |
Eligible |
2026-03-03 |
1 |
| Visa |
https://ebctest.cybersource.com/tech-partner-integration |
Url |
In Scope |
Critical |
Eligible |
2026-02-27 |
0 |
| Visa |
https://ebctest.cybersource.com/pts/v1/transaction-batch-upload |
Url |
In Scope |
Critical |
Eligible |
2026-01-06 |
3 |
| Visa |
https://ebctest.cybersource.com/listmanager |
Url |
In Scope |
Critical |
Eligible |
2025-02-12 |
0 |
| Visa |
ebctest.cybersource.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-05 |
18 |
| Visa |
https://ebctest.cybersource.com/vts |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
https://ebctest.cybersource.com/vdm |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
https://ebctest.cybersource.com/tss |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
https://ebctest.cybersource.com/tms |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
https://ebctest.cybersource.com/sms |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
https://ebctest.cybersource.com/saconfig |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
https://ebctest.cybersource.com/riskui |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
https://ebctest.cybersource.com/reporting |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Visa |
https://ebctest.cybersource.com/pts/v2 |
Url |
In Scope |
Critical |
Eligible |
2025-10-28 |
0 |
| Ring |
publicsafety.ring.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-12 |
0 |
| Ring |
1218902777 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Anything not in scope |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-05-16 |
0 |
| Ring |
Services, Apps, Mobile |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-05-16 |
0 |
| Ring |
Devices |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-05-16 |
0 |
| Ring |
926252661 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-16 |
2 |
| Ring |
1013961111 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-16 |
1 |
| Ring |
com.ringapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-05-16 |
7 |
| Ring |
com.ring.neighborhoods |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-05-16 |
2 |
| Ring |
com.immediasemi.android.blink |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-05-16 |
2 |
| Ring |
Blink Video Doorbell |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
1 |
| Ring |
Blink Mini |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Blink Sync Module 2 |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Blink Indoor |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Blink Outdoor |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Ring Smart Lighting Bridge |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Ring Alarm |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Chime |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Stickup Cam |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Indoor Cam |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Peephole Cam |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
Video Doorbell |
Hardware |
In Scope |
Critical |
Eligible |
2023-05-16 |
1 |
| Ring |
https://*.blinkforhome.com/* |
Wildcard |
In Scope |
Critical |
Eligible |
2023-05-16 |
5 |
| Ring |
https://*.immedia-semi.com/* |
Wildcard |
In Scope |
Critical |
Eligible |
2023-05-16 |
11 |
| Ring |
prd-ring-web-us.prd.rings.solutions |
Domain |
In Scope |
Critical |
Eligible |
2023-05-16 |
1 |
| Ring |
https://billing.ring.com/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
https://oauth.ring.com/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-16 |
1 |
| Ring |
https://nw.ring.com/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
https://admin.ring.com/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
https://app.ring.com/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-16 |
1 |
| Ring |
https://fw.ring.com/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
https://api.ring.com/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Ring |
https://ring.com/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-16 |
47 |
| SIX Group |
https://apps.apple.com/mx/app/schweizer-finanzmuseum/id1225222871 |
IosAppStore |
Out of Scope |
None |
Ineligible |
2024-11-01 |
0 |
| SIX Group |
https://play.google.com/store/search?q=Schweizer+Finanzmuseum&c=apps |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2024-11-01 |
0 |
| SIX Group |
https://fx-qa.np.bolsasymercados.es/ |
Url |
In Scope |
Critical |
Eligible |
2026-07-22 |
0 |
| SIX Group |
https://bmefx.es/ |
Url |
Out of Scope |
None |
Ineligible |
2026-07-22 |
0 |
| SIX Group |
http://ibt-test.six-group.com |
Url |
In Scope |
Critical |
Eligible |
2026-07-09 |
0 |
| SIX Group |
http://ibt.six-group.com |
Url |
Out of Scope |
None |
Ineligible |
2026-07-09 |
0 |
| SIX Group |
https://disclosure-test.six-exchange-regulation.com/ |
Url |
In Scope |
Critical |
Eligible |
2026-06-23 |
0 |
| SIX Group |
https://disclosure.six-exchange-regulation.com/ |
Url |
Out of Scope |
None |
Ineligible |
2026-06-23 |
0 |
| SIX Group |
https://providerhub.six-group.com/ |
Url |
Out of Scope |
None |
Ineligible |
2026-06-08 |
0 |
| SIX Group |
https://www.six-structured-products.com/ |
Url |
Out of Scope |
None |
Ineligible |
2026-06-08 |
0 |
| SIX Group |
194.35.79.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-10-03 |
0 |
| SIX Group |
193.8.251.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-10-03 |
0 |
| SIX Group |
193.5.66.0/23 |
Cidr |
In Scope |
Critical |
Eligible |
2025-10-03 |
0 |
| SIX Group |
185.210.32.0/22 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-09 |
0 |
| SIX Group |
146.109.161.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-10-03 |
0 |
| SIX Group |
146.109.151.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-10-03 |
0 |
| SIX Group |
https://secure-test.six-swiss-exchange.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-10-03 |
0 |
| SIX Group |
146.109.150.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.149.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.148.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.143.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.142.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.141.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.140.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.67.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.68.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.66.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.65.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
146.109.64.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
153.46.48.0/22 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
153.46.176.0/22 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-15 |
0 |
| SIX Group |
194.98.112.0/24 |
Cidr |
Out of Scope |
None |
Ineligible |
2025-09-09 |
0 |
| SIX Group |
213.41.106.0/24 |
Cidr |
Out of Scope |
None |
Ineligible |
2025-09-09 |
0 |
| SIX Group |
146.109.8.0/21 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-09 |
0 |
| SIX Group |
146.109.1.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-09 |
0 |
| SIX Group |
212.95.227.64/26 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-09 |
0 |
| SIX Group |
153.46.162.0/23 |
Cidr |
In Scope |
Critical |
Eligible |
2025-09-09 |
0 |
| SIX Group |
146.109.4.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-07-21 |
0 |
| SIX Group |
146.109.3.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-07-21 |
0 |
| SIX Group |
146.109.2.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-07-21 |
0 |
| SIX Group |
153.46.0.0/16 |
Cidr |
In Scope |
Critical |
Eligible |
2025-07-21 |
0 |
| SIX Group |
174.44.253.152/29 |
Cidr |
In Scope |
Critical |
Eligible |
2025-07-21 |
0 |
| SIX Group |
193.109.229.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-01-27 |
12 |
| SIX Group |
153.46.240.0/20 |
Cidr |
In Scope |
Critical |
Eligible |
2025-01-27 |
0 |
| SIX Group |
153.46.34.0/23 |
Cidr |
In Scope |
Critical |
Eligible |
2025-05-28 |
0 |
| SIX Group |
153.46.32.0/23 |
Cidr |
In Scope |
Critical |
Eligible |
2025-05-28 |
0 |
| SIX Group |
153.46.30.0/23 |
Cidr |
In Scope |
Critical |
Eligible |
2025-05-28 |
0 |
| SIX Group |
194.209.121.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-04-14 |
0 |
| SIX Group |
146.109.8.0/22 |
Cidr |
In Scope |
Critical |
Eligible |
2025-04-14 |
0 |
| SIX Group |
153.46.104.0/22 |
Cidr |
In Scope |
Critical |
Eligible |
2025-03-25 |
0 |
| SIX Group |
153.46.111.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2025-03-25 |
0 |
| SIX Group |
*.sixidmobile.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-01-27 |
0 |
| SIX Group |
62.192.20.16/29 |
Cidr |
In Scope |
Critical |
Eligible |
2025-01-27 |
0 |
| SIX Group |
153.46.108.0/22 |
Cidr |
In Scope |
Critical |
Eligible |
2025-01-27 |
0 |
| SIX Group |
193.109.229.71 |
Domain |
Out of Scope |
None |
Ineligible |
2025-01-27 |
0 |
| SIX Group |
saferpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-01-27 |
0 |
| SIX Group |
153.46.254.150 |
IpAddress |
Out of Scope |
None |
Ineligible |
2025-01-27 |
0 |
| SIX Group |
www.bolsasymercados.es |
Domain |
In Scope |
Critical |
Eligible |
2023-04-17 |
0 |
| SIX Group |
https://www.sdx.com/ |
Url |
In Scope |
Critical |
Eligible |
2024-11-01 |
0 |
| SIX Group |
https://web3.sdx.com |
Url |
In Scope |
High |
Eligible |
2024-11-01 |
1 |
| SIX Group |
https://play.google.com/store/apps/details?id=es.grupobme.bmeconecta |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-01 |
0 |
| SIX Group |
https://play.google.com/store/apps/details?id=com.sixgroup.id&hl=en_US&pli=1 |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-01 |
0 |
| SIX Group |
https://play.google.com/store/apps/details?id=com.sixgroup.debixplus |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-01 |
1 |
| SIX Group |
https://apps.apple.com/us/app/bme-conecta/id6443938949 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-11-01 |
0 |
| SIX Group |
https://apps.apple.com/mx/app/six-id/id1620496931 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-11-01 |
0 |
| SIX Group |
https://apps.apple.com/mx/app/debix/id1581440132 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-11-01 |
0 |
| SIX Group |
https://apps.apple.com/ch/app/debix/id1581440132?l=en-GB |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-11-01 |
0 |
| SIX Group |
193.110.154.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2024-11-01 |
3 |
| SIX Group |
153.46.96.0/20 |
Cidr |
In Scope |
Critical |
Eligible |
2024-11-01 |
2 |
| SIX Group |
www.six-group.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-17 |
16 |
| Newegg |
pmtcards.newegg.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-09 |
0 |
| Newegg |
secure.newegg.ca |
Domain |
In Scope |
Critical |
Eligible |
2025-08-09 |
0 |
| Newegg |
secure.newegg.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-08 |
0 |
| Newegg |
sellerportal.newegg.com |
Domain |
In Scope |
Critical |
Ineligible |
2023-04-19 |
0 |
| Newegg |
com.newegg.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-05-21 |
1 |
| Newegg |
com.newegg.app |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-05-21 |
0 |
| Newegg |
sellingpilot.newegg.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-21 |
0 |
| Newegg |
jobs.newegg.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-08-17 |
0 |
| Newegg |
http://*.neweggbusiness.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-07-29 |
0 |
| Newegg |
http://*.newegg.ca |
Wildcard |
In Scope |
Critical |
Eligible |
2021-07-29 |
10 |
| Newegg |
http://*.newegg.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-07-29 |
82 |
| eero |
Devices |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-03-27 |
0 |
| eero |
*.e2ro.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-10-06 |
0 |
| eero |
*.eero.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-10-06 |
5 |
| eero |
eero Devices |
Hardware |
In Scope |
Critical |
Eligible |
2025-10-06 |
0 |
| eero |
1023499075 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-03-27 |
0 |
| eero |
com.eero.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-03-27 |
3 |
| eero |
Services, Apps, Mobile |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-03-27 |
0 |
| eero |
Anything not in scope |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-03-27 |
0 |
| FloQast |
*.floqast.app |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-15 |
236 |
| FloQast |
https://*.floqast.engineering |
Wildcard |
In Scope |
Critical |
Eligible |
2024-05-06 |
13 |
| FloQast |
s3://floqast |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-08-23 |
0 |
| FloQast |
*.floqast.studio |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-04-15 |
0 |
| FloQast |
*.floqast.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-04-15 |
0 |
| FloQast |
*.eu.floqast.app |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-04 |
8 |
| FloQast |
Any Asset Not Specifically Listed as In-Scope |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-04-15 |
0 |
| FloQast |
api-eu.floqast.app |
Domain |
In Scope |
Critical |
Eligible |
2022-04-15 |
1 |
| Hilton |
id635150066 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-06-24 |
0 |
| Hilton |
com.hilton.android.hhonors |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-06-24 |
0 |
| Hilton |
Hilton Third Party Applications - *.hilton.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-06-24 |
6 |
| Hilton |
hilton.com |
Domain |
In Scope |
Critical |
Eligible |
2021-12-23 |
119 |
| Hilton |
resmax.hilton.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-21 |
0 |
| Hilton |
hiltonlocalbiz.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-04 |
0 |
| Hilton |
hiltonbusinessonline.com |
Domain |
In Scope |
Critical |
Eligible |
2022-08-04 |
2 |
| Hilton |
hilton.io |
Domain |
In Scope |
Critical |
Eligible |
2021-12-23 |
1 |
| Hilton |
Managed Property Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-07-07 |
2 |
| Hilton |
Hilton Franchised Properties |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-06-24 |
2 |
| Hilton |
121.200.237.36/29 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
0 |
| Hilton |
167.187.0.0/16 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
37 |
| Hilton |
192.251.123.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
0 |
| Hilton |
192.251.124.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
0 |
| Hilton |
192.251.125.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
0 |
| Hilton |
192.251.126.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
0 |
| Hilton |
203.79.37.2/29 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
0 |
| Hilton |
62.216.152.46/29 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
1 |
| Hilton |
82.196.42.196/28 |
Cidr |
In Scope |
Critical |
Eligible |
2021-12-23 |
0 |
| Hilton |
*.hamptonhotels.com.cn |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Hilton |
a1.hilton.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-17 |
0 |
| Hilton |
hiltonfoundation.org |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| Hilton |
hgv.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-10 |
0 |
| Hilton |
hiltongrandvacations.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-02-13 |
0 |
| Hilton |
pim.hilton.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-08-12 |
0 |
| Hilton |
onqinsider.hilton.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-04-15 |
0 |
| Hilton |
hiltonnet.hilton.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-04-15 |
0 |
| Hilton |
guestfeedback.hilton.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-02-13 |
0 |
| Hilton |
https://jobs.hilton.com |
Url |
Out of Scope |
None |
Ineligible |
2024-12-20 |
0 |
| Hilton |
*.hiltonhotels.jp |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-07-27 |
0 |
| Hilton |
eis.hilton.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-04 |
0 |
| Hilton |
*.hiltonlocalbiz.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-07-27 |
0 |
| Hilton |
*.hiltonbusinessonline.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-10-31 |
3 |
| Hilton |
*.hilton.io |
Wildcard |
In Scope |
Critical |
Eligible |
2022-10-31 |
2 |
| Hilton |
*.hilton.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-10-31 |
170 |
| inDrive |
coms.ryadom.kz |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
www.juntasllegamos.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
referral-program.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
pristegnimechty.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
juntasllegamos.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
jlml.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
jlml-wf.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
company.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
av.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
arsentomsky.indrive.com |
Domain |
In Scope |
High |
Eligible |
2026-10-02 |
0 |
| inDrive |
ps-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
ppw.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
ppw-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pp-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pp-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pot-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pm-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pf-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pf-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pc-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pages.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
pa-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
no-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
no-gw-cf.africa.afso1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
nha-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
nha-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
nha-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
nf-of-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
nf-cf.latam-mx.usea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
ncc-gw-cf.latam-pe.saea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
ncc-cf.latam-br.saea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
nb-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
msg-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
msg-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
msg-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
isa-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
isa-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
is-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
inc-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
in-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
idp-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
idp-gw-cf.latam-mx.usea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
idp-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
idc-gw-cf.cis.euce1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
idc-cf.cis.euce1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
icl-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
icl-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
icl-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
icl-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
ic3-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
ic3-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
ic3-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
gvt-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
gvt-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
gt-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
gt-gw-cf-0.cis.euce1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
g2-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fsf-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fsf-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fp-cf.global.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
file-storage-front.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fic-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fe-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fch-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fch-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fch-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
fch-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
exs-dtu-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
exs-dtu-gw-cf.africa.afso1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
es-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
dr-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
dh-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
dh-cf.mena.meso1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
daw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
courier-gw-cf.cis.euce1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
co-in-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
co-in-cf.mena.meso1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
co-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cmf-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cm-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cht-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cht-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cht-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
chat.eu-east-1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cca-cf.latam-mx.usea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cas.eu-east-1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cas-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cas-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
cas-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
ca-gw-cf.latam-mx.usea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bid-gw-scf.sa.apse1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bid-gw-cf.africa.afso1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bid-cf.africa.afso1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bf-gw-cf.latam-pe.saea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bf-cf.latam-co.saea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bdu-gw-scf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bdu-gw-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bdu-cf.euce1.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bc-gw-cf.latam-pe.saea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| inDrive |
bc-cf.latam-co.saea1.aws.indriverapp.com |
Domain |
In Scope |
Critical |
Eligible |
2026-10-02 |
0 |
| Grindr |
blog.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-10 |
0 |
| Grindr |
help.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-12 |
0 |
| Grindr |
*.grindr.mobi |
Wildcard |
In Scope |
Critical |
Eligible |
2020-10-10 |
13 |
| Grindr |
*.dev2.grindr.io |
Wildcard |
In Scope |
Medium |
Ineligible |
2026-01-20 |
0 |
| Grindr |
status.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-08-18 |
0 |
| Grindr |
grindrtogo.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-01-09 |
0 |
| Grindr |
web.grindr.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-09 |
9 |
| Grindr |
*.grindr.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-10-09 |
39 |
| Grindr |
*.dev.grindr.io |
Wildcard |
In Scope |
Medium |
Ineligible |
2021-03-15 |
3 |
| Grindr |
*.grindrads.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-10-28 |
0 |
| Grindr |
*.intomore.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-10-15 |
0 |
| Grindr |
*.grindr.io |
Wildcard |
In Scope |
Critical |
Eligible |
2020-10-09 |
25 |
| Grindr |
investors.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-12 |
0 |
| Grindr |
preprod1.grindr.com |
Domain |
In Scope |
Medium |
Ineligible |
2023-03-27 |
0 |
| Grindr |
github.com/thesokrin/vfd |
SourceCode |
Out of Scope |
None |
Ineligible |
2021-03-24 |
0 |
| Grindr |
shop.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-21 |
0 |
| Grindr |
https://github.com/grindrlabs |
Url |
Out of Scope |
None |
Ineligible |
2021-12-13 |
0 |
| Grindr |
kindr.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-16 |
0 |
| Grindr |
shop.grindrbloop.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-17 |
0 |
| Grindr |
grindrbloop.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-17 |
0 |
| Grindr |
grindr.atlassian.net |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-06 |
0 |
| Grindr |
go.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-03-12 |
0 |
| Grindr |
selfservice.grindr.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-10-10 |
0 |
| Grindr |
319881193 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-10-13 |
3 |
| Grindr |
com.grindrapp.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-10-13 |
25 |
| Malwarebytes |
Any other Malwarebytes asset |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-04-06 |
23 |
| Malwarebytes |
Any other ThreatDown asset |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-06-23 |
0 |
| Malwarebytes |
cloud.threatdown.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-21 |
4 |
| Malwarebytes |
*.cloud.malwarebytes.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-06 |
6 |
| Malwarebytes |
cloud.malwarebytes.com |
Domain |
In Scope |
Critical |
Eligible |
2018-04-18 |
18 |
| Malwarebytes |
ThreatDown Patch Management |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Malwarebytes |
ThreatDown Device Control |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Malwarebytes |
ThreatDown Browser Phishing Protection |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-01-26 |
0 |
| Malwarebytes |
ThreatDown Endpoint Detection & Response (EDR) |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-04-06 |
4 |
| Malwarebytes |
ThreatDown Endpoint Protection |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-04-06 |
2 |
| Malwarebytes |
https://oneview.threatdownstage.com |
Url |
In Scope |
Critical |
Eligible |
2025-10-23 |
6 |
| Malwarebytes |
oneview.threatdown.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-10 |
16 |
| Malwarebytes |
malwarebytes.zoom.us |
Domain |
Out of Scope |
None |
Ineligible |
2025-07-18 |
0 |
| Malwarebytes |
Malwarebytes Privacy (VPN) |
OtherAsset |
In Scope |
Medium |
Eligible |
2020-05-20 |
2 |
| Malwarebytes |
store.threatdown.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-07-04 |
0 |
| Malwarebytes |
AdwCleaner |
Executable |
In Scope |
Critical |
Eligible |
2022-03-31 |
4 |
| Malwarebytes |
Malwarebytes Anti-Ransomware |
Executable |
Out of Scope |
None |
Ineligible |
2022-04-06 |
0 |
| Malwarebytes |
Malwarebytes Support Tool (MBST) |
Executable |
In Scope |
Critical |
Eligible |
2025-05-14 |
1 |
| Malwarebytes |
Malwarebytes Anti-Exploit |
Executable |
In Scope |
Medium |
Ineligible |
2022-04-06 |
5 |
| Malwarebytes |
*.cyrus-security.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-02-20 |
0 |
| Malwarebytes |
*.threatdown.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-11-13 |
23 |
| Malwarebytes |
*.mwb-threatintel.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Malwarebytes |
*.malwarebytes.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-06 |
50 |
| Malwarebytes |
*.mbamupdates.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-06 |
6 |
| Malwarebytes |
*.mb-cosmos.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-06 |
8 |
| Malwarebytes |
*.mwbsys.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-06 |
25 |
| Malwarebytes |
view.malwarebytes.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-04-18 |
0 |
| Malwarebytes |
pages.malwarebytes.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-04-18 |
0 |
| Malwarebytes |
store.malwarebytes.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-04-05 |
0 |
| Malwarebytes |
estore.malwarebytes.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-09-15 |
0 |
| Malwarebytes |
USB Flash Drive Control |
Executable |
In Scope |
Medium |
Ineligible |
2022-04-06 |
0 |
| Malwarebytes |
support.malwarebytes.com |
Domain |
In Scope |
Critical |
Ineligible |
2018-04-05 |
3 |
| Malwarebytes |
blog.malwarebytes.com |
Domain |
In Scope |
Critical |
Ineligible |
2018-04-05 |
1 |
| Malwarebytes |
forums.malwarebytes.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-09-15 |
0 |
| Malwarebytes |
com.malwarebytes.Malwarebytes |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-04-01 |
0 |
| Malwarebytes |
Malwarebytes Windows Firewall Control |
Executable |
In Scope |
Medium |
Eligible |
2022-04-06 |
5 |
| Malwarebytes |
Malwarebytes ToolSet (MBTS) |
Executable |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Malwarebytes |
Malwarebytes Remediation for CrowdStrike |
Executable |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Malwarebytes |
Malwarebytes for Teams |
Executable |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Malwarebytes |
Malwarebytes for Mac |
Executable |
In Scope |
Critical |
Eligible |
2017-09-15 |
3 |
| Malwarebytes |
Malwarebytes for Windows |
Executable |
In Scope |
Critical |
Eligible |
2017-09-15 |
51 |
| Malwarebytes |
org.malwarebytes.antimalware |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-09-15 |
7 |
| Malwarebytes |
BrowserGuard (Firefox/Chrome/Safari browser extension) |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-04-06 |
2 |
| Malwarebytes |
my.malwarebytes.com |
Domain |
In Scope |
Critical |
Eligible |
2018-04-18 |
19 |
| Malwarebytes |
www.malwarebytes.com |
Domain |
In Scope |
Critical |
Eligible |
2018-04-05 |
40 |
| S-Pankki |
740514933 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-06-22 |
2 |
| S-Pankki |
fi.spankki |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-06-22 |
7 |
| S-Pankki |
digili.s-cloud.fi |
Domain |
In Scope |
Critical |
Eligible |
2022-06-20 |
6 |
| S-Pankki |
extranet.s-pankki.fi |
Domain |
In Scope |
Critical |
Eligible |
2021-10-04 |
0 |
| S-Pankki |
mobile.s-pankki.fi |
Domain |
In Scope |
Critical |
Eligible |
2020-06-22 |
5 |
| S-Pankki |
https://crosskey.io/stores/s-pankki/apis |
Url |
In Scope |
Critical |
Eligible |
2019-04-02 |
11 |
| S-Pankki |
www.s-pankki.fi |
Domain |
In Scope |
Critical |
Eligible |
2018-09-14 |
15 |
| S-Pankki |
online.s-pankki.fi |
Domain |
In Scope |
Critical |
Eligible |
2018-08-27 |
58 |
| TRON DAO |
https://github.com/tronprotocol/java-tron |
SourceCode |
In Scope |
Critical |
Eligible |
2022-12-30 |
29 |
| Kiwi.com |
https://github.com/kiwicom/request-session |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/pg2avro |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/orbit |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/navigation-compose-typed |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/konfetti |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/kiwi-structlog-config |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/kiwi-json |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/kiwi-cache |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/k8s-vault-operator |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
https://github.com/kiwicom/js-iam-middleware |
SourceCode |
In Scope |
High |
Eligible |
2026-07-15 |
0 |
| Kiwi.com |
link.kiwi.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-07-02 |
0 |
| Kiwi.com |
kiwistore.kiwi.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-21 |
0 |
| Kiwi.com |
*experiences.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-09-14 |
0 |
| Kiwi.com |
*.coupons.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-09-14 |
0 |
| Kiwi.com |
*citi-sign.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
*_domainkey.skypicker.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
email*kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
email*skypicker.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
*._domainkey.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
*sg.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
*ov.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
*learn.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-08-11 |
0 |
| Kiwi.com |
*parking.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-01-18 |
0 |
| Kiwi.com |
*code.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-01-03 |
0 |
| Kiwi.com |
*cars.kiwi.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-01-03 |
0 |
| Kiwi.com |
*.skypicker.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-12-31 |
61 |
| Kiwi.com |
*.kiwi.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-12-31 |
95 |
| Kiwi.com |
nyrujhhu3yuk.nest.skypicker.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
packages.kiwi.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
mail.skypicker.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
outbound.intercom.kiwi.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-24 |
0 |
| Kiwi.com |
vacation.kiwi.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-10 |
0 |
| Kiwi.com |
retool.skypicker.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-05-04 |
0 |
| Kiwi.com |
rooms.kiwi.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-01-21 |
0 |
| Kiwi.com |
status.kiwi.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-01-03 |
0 |
| Kiwi.com |
com.skypicker.Skypicker |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-12-31 |
0 |
| Kiwi.com |
com.skypicker.main |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-12-31 |
4 |
| Kiwi.com |
jobs.kiwi.com |
Domain |
In Scope |
Medium |
Eligible |
2022-05-17 |
0 |
| Kiwi.com |
http://www.kiwi.com/stories |
Url |
In Scope |
High |
Eligible |
2021-10-15 |
1 |
| Kiwi.com |
tequila.kiwi.com |
Domain |
In Scope |
Critical |
Eligible |
2019-02-14 |
19 |
| Kiwi.com |
auth.skypicker.com |
Domain |
In Scope |
Critical |
Eligible |
2019-01-05 |
2 |
| Kiwi.com |
www.kiwi.com |
Domain |
In Scope |
Critical |
Eligible |
2018-12-31 |
44 |
| 8x8 |
eg.ht |
Domain |
In Scope |
Medium |
Ineligible |
2026-09-25 |
0 |
| 8x8 |
*.rekap.8x8.com |
Wildcard |
In Scope |
High |
Ineligible |
2026-09-25 |
0 |
| 8x8 |
*.wavecell.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2023-07-03 |
34 |
| 8x8 |
*.8x8staging.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2022-10-31 |
4 |
| 8x8 |
bridge.8x8.com |
Domain |
In Scope |
Critical |
Ineligible |
2026-08-30 |
2 |
| 8x8 |
*.8x8.engineering |
Wildcard |
In Scope |
Critical |
Ineligible |
2026-08-30 |
0 |
| 8x8 |
*.8x8.cloud |
Wildcard |
In Scope |
Critical |
Ineligible |
2026-08-30 |
0 |
| 8x8 |
*.moobicast.com |
Wildcard |
In Scope |
None |
Ineligible |
2026-01-05 |
0 |
| 8x8 |
*.moobidesk.com |
Wildcard |
In Scope |
None |
Ineligible |
2026-01-05 |
2 |
| 8x8 |
*.mavenlab.com |
Wildcard |
In Scope |
None |
Ineligible |
2026-01-05 |
1 |
| 8x8 |
map.8x8.com |
Domain |
In Scope |
Critical |
Ineligible |
2026-08-25 |
1 |
| 8x8 |
Intellectual Property on Public Domains |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-07-03 |
29 |
| 8x8 |
maestro.8x8.cloud |
Domain |
In Scope |
Critical |
Ineligible |
2026-07-27 |
2 |
| 8x8 |
https://github.com/jitsi |
SourceCode |
In Scope |
Low |
Ineligible |
2020-07-10 |
73 |
| 8x8 |
8x8 Communication APIs |
Api |
In Scope |
Critical |
Ineligible |
2024-09-30 |
9 |
| 8x8 |
connect.8x8.com |
Domain |
In Scope |
Critical |
Ineligible |
2021-02-08 |
119 |
| 8x8 |
voapi.8x8.com |
Domain |
In Scope |
Critical |
Ineligible |
2023-03-06 |
9 |
| 8x8 |
Virtual Office Desktop |
Executable |
In Scope |
Critical |
Ineligible |
2023-04-18 |
9 |
| 8x8 |
https://8x8.vc/xmpp-websocket |
Url |
In Scope |
Critical |
Ineligible |
2023-04-18 |
6 |
| 8x8 |
*.8x8.vc |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-10 |
60 |
| 8x8 |
*.jit.si |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-10 |
36 |
| 8x8 |
*.jitsi.net |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-09-24 |
90 |
| 8x8 |
*.labs.8x8.com |
Wildcard |
In Scope |
High |
Ineligible |
2026-07-01 |
1 |
| 8x8 |
mcp.8x8.com |
Domain |
In Scope |
Critical |
Ineligible |
2026-07-01 |
0 |
| 8x8 |
cloud8.8x8.com |
Domain |
In Scope |
Critical |
Ineligible |
2023-05-24 |
56 |
| 8x8 |
*.8x8.studio |
Wildcard |
In Scope |
Medium |
Ineligible |
2026-06-14 |
0 |
| 8x8 |
pubtools.private.8x8cloud.net |
Domain |
In Scope |
High |
Ineligible |
2026-06-14 |
5 |
| 8x8 |
admin-resolve.8x8.com |
Domain |
In Scope |
High |
Ineligible |
2026-05-29 |
2 |
| 8x8 |
resolve.8x8.com |
Domain |
In Scope |
High |
Ineligible |
2026-05-29 |
1 |
| 8x8 |
video-agent.8x8.com |
Domain |
In Scope |
High |
Ineligible |
2025-07-24 |
0 |
| 8x8 |
converse.8x8.com |
Domain |
In Scope |
Medium |
Ineligible |
2025-07-24 |
1 |
| 8x8 |
8x8-work |
IosAppStore |
In Scope |
Critical |
Ineligible |
2023-04-18 |
3 |
| 8x8 |
org.vom8x8.sipua |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2023-02-23 |
7 |
| 8x8 |
*.preview.8x8.vc |
Wildcard |
In Scope |
Medium |
Ineligible |
2026-04-28 |
0 |
| 8x8 |
*.ai.8x8.vc |
Wildcard |
In Scope |
Medium |
Ineligible |
2026-04-28 |
3 |
| 8x8 |
*.msteams.8x8.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-30 |
0 |
| 8x8 |
sipsynergy.co.uk |
Domain |
In Scope |
Critical |
Ineligible |
2026-02-25 |
0 |
| 8x8 |
callroute.io |
Domain |
In Scope |
Critical |
Ineligible |
2026-02-25 |
1 |
| 8x8 |
callroute.com |
Domain |
In Scope |
Critical |
Ineligible |
2026-02-25 |
1 |
| 8x8 |
support-portal.8x8.com |
Domain |
In Scope |
Medium |
Ineligible |
2024-04-21 |
3 |
| 8x8 |
*.fuze.com |
Wildcard |
In Scope |
Low |
Ineligible |
2024-04-18 |
14 |
| 8x8 |
fuze.me |
Domain |
In Scope |
Low |
Ineligible |
2024-04-18 |
0 |
| 8x8 |
ASN: AS14294 |
OtherAsset |
In Scope |
Low |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS13896 |
OtherAsset |
In Scope |
Low |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS10976 |
OtherAsset |
In Scope |
Low |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
www.fuzemeeting.com |
Domain |
In Scope |
Low |
Ineligible |
2024-01-17 |
5 |
| 8x8 |
*.fuze.site |
Wildcard |
In Scope |
Low |
Ineligible |
2024-04-18 |
0 |
| 8x8 |
*.ucverse.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2024-09-02 |
1 |
| 8x8 |
*.unreal-agents.com |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-10-31 |
0 |
| 8x8 |
unreal-agents.8x8pilot.com |
Domain |
In Scope |
Medium |
Ineligible |
2025-10-31 |
0 |
| 8x8 |
*.unreal-agents.jitsi.net |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-10-31 |
0 |
| 8x8 |
developer.8x8.com |
Domain |
In Scope |
High |
Ineligible |
2025-10-31 |
0 |
| 8x8 |
vap.8x8.com |
Domain |
In Scope |
Critical |
Ineligible |
2025-08-19 |
0 |
| 8x8 |
*.bell.ca |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-08-04 |
0 |
| 8x8 |
8x8 Partner Portal |
OtherAsset |
In Scope |
High |
Ineligible |
2024-07-01 |
23 |
| 8x8 |
work.8x8.com |
Domain |
In Scope |
Critical |
Eligible |
2022-11-07 |
5 |
| 8x8 |
apps.8x8.com |
Domain |
In Scope |
Critical |
Eligible |
2025-07-23 |
0 |
| 8x8 |
admin.8x8.com |
Domain |
In Scope |
Critical |
Eligible |
2023-09-26 |
11 |
| 8x8 |
*.chalet.8x8.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-11-07 |
6 |
| 8x8 |
https://*.chalet.8x8.com/ws/v1 |
Wildcard |
In Scope |
Critical |
Eligible |
2023-04-18 |
2 |
| 8x8 |
vcc-*.8x8.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-02-06 |
93 |
| 8x8 |
*-vpn.8x8.com |
Wildcard |
In Scope |
High |
Ineligible |
2025-06-15 |
1 |
| 8x8 |
ASN: AS206422 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS199687 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS32308 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS44965 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS62306 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS62876 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS133144 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS198554 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS395362 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS398067 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS49856 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
ASN: AS46680 |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-03 |
0 |
| 8x8 |
*.call-control.ie |
Wildcard |
In Scope |
Critical |
Ineligible |
2025-05-30 |
0 |
| 8x8 |
*.8x8hosts.internal |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-05-05 |
4 |
| 8x8 |
*.8x8hosts.pilot |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-05-05 |
4 |
| 8x8 |
Cloud Misconfigurations |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-03-26 |
2 |
| 8x8 |
*.packet8-pilot.net |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-03-10 |
0 |
| 8x8 |
*.8x8testb.com |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-03-10 |
0 |
| 8x8 |
*.8x8testa.com |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-03-10 |
1 |
| 8x8 |
community.8x8.com |
Domain |
In Scope |
High |
Ineligible |
2025-03-04 |
2 |
| 8x8 |
*.in2tel.ie |
Wildcard |
In Scope |
Critical |
Ineligible |
2025-02-27 |
3 |
| 8x8 |
*.ociadmin.cloud.8x8.com |
Wildcard |
In Scope |
High |
Ineligible |
2025-02-17 |
1 |
| 8x8 |
*.prod.cloud.8x8.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2025-02-17 |
0 |
| 8x8 |
*.acceptance.cloud.8x8.com |
Wildcard |
In Scope |
High |
Ineligible |
2025-02-17 |
2 |
| 8x8 |
*.staging.cloud.8x8.com |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-02-17 |
2 |
| 8x8 |
https://www.npmjs.com/package/@8x8/pui-partner-comm |
OtherAsset |
In Scope |
High |
Ineligible |
2025-02-12 |
0 |
| 8x8 |
debug.8x8.com |
Domain |
In Scope |
Medium |
Ineligible |
2025-01-28 |
0 |
| 8x8 |
*.cceng.8x8.com |
Wildcard |
In Scope |
Medium |
Ineligible |
2024-11-20 |
0 |
| 8x8 |
mobileidentity.8x8.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-10-05 |
0 |
| 8x8 |
Discovered Leaked Credentials |
OtherAsset |
In Scope |
High |
Ineligible |
2024-09-20 |
15 |
| 8x8 |
Third Party Application |
OtherAsset |
In Scope |
High |
Ineligible |
2024-09-16 |
4 |
| 8x8 |
*.thinkingphones.net |
Wildcard |
In Scope |
Critical |
Ineligible |
2024-04-18 |
6 |
| 8x8 |
*.thinkingphones.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2024-04-18 |
7 |
| 8x8 |
*.8x8e2e.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2024-09-02 |
2 |
| 8x8 |
*.8x8.uk |
Wildcard |
In Scope |
Critical |
Ineligible |
2024-09-02 |
0 |
| 8x8 |
*.8x8.co.uk |
Wildcard |
In Scope |
Critical |
Ineligible |
2024-09-02 |
2 |
| 8x8 |
*.8x8.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2024-09-02 |
185 |
| 8x8 |
*.8x8.id |
Wildcard |
In Scope |
Critical |
Ineligible |
2023-07-03 |
2 |
| Superbet |
http://super.xyz |
Url |
In Scope |
Low |
Eligible |
2026-09-14 |
0 |
| Superbet |
*.super.xyz |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-11 |
0 |
| Superbet |
https://afiliados.superbet.com |
Url |
Out of Scope |
None |
Ineligible |
2026-06-17 |
0 |
| Superbet |
http://abc.superbet.rs |
Url |
Out of Scope |
None |
Ineligible |
2026-06-17 |
0 |
| Superbet |
superbet.bet.br |
Domain |
In Scope |
Critical |
Eligible |
2025-04-22 |
2 |
| Superbet |
*.superbet.ro |
Wildcard |
In Scope |
Critical |
Eligible |
2022-12-02 |
58 |
| Superbet |
*.superbet.rs |
Wildcard |
In Scope |
Critical |
Eligible |
2023-03-23 |
5 |
| Superbet |
*.superbet.pl |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-15 |
4 |
| Superbet |
https://superbet.ro |
Url |
In Scope |
Critical |
Eligible |
2025-05-26 |
2 |
| Superbet |
https://superbet.pl |
Url |
In Scope |
Critical |
Eligible |
2025-05-26 |
4 |
| Superbet |
https://superbet.rs |
Url |
In Scope |
Critical |
Eligible |
2025-05-26 |
1 |
| Superbet |
*.superbet.gr |
Wildcard |
In Scope |
Critical |
Eligible |
2026-04-23 |
0 |
| Superbet |
*.happening.dev |
Wildcard |
In Scope |
Critical |
Eligible |
2025-11-12 |
5 |
| Superbet |
*.epic.superbet.ro |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-12-22 |
0 |
| Superbet |
https://napoleoncasino.be/nl-be/game/plinko-napoleon?demo=false |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-09-23 |
0 |
| Superbet |
test-gw.epic.superbet.ro |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-16 |
0 |
| Superbet |
test.epic.superbet.ro |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-15 |
0 |
| Superbet |
lp.superbet.bet.br |
Domain |
Out of Scope |
None |
Ineligible |
2025-08-22 |
0 |
| Superbet |
lp.superbet.rs |
Domain |
Out of Scope |
None |
Ineligible |
2025-08-22 |
0 |
| Superbet |
lp.superbet.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-08-22 |
0 |
| Superbet |
lp.superbet.ro |
Domain |
Out of Scope |
None |
Ineligible |
2025-08-22 |
0 |
| Superbet |
lp.superbet.pl |
Domain |
Out of Scope |
None |
Ineligible |
2025-08-22 |
0 |
| Superbet |
WGP Slot Games |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-07-29 |
2 |
| Superbet |
https://napoleongames.be |
Url |
In Scope |
Critical |
Eligible |
2025-05-26 |
0 |
| Superbet |
https://napoleondice.be |
Url |
In Scope |
Critical |
Eligible |
2025-05-26 |
0 |
| Superbet |
https://napoleonsports.be |
Url |
In Scope |
Critical |
Eligible |
2025-05-26 |
0 |
| Superbet |
https://napoleoncasino.be |
Url |
In Scope |
Critical |
Eligible |
2025-05-26 |
4 |
| Superbet |
https://napoleoncasino.be/en-be/game/hogamba-crash?demo=false |
Url |
In Scope |
Critical |
Eligible |
2025-04-29 |
0 |
| Superbet |
http://surveys.superbet.com |
Url |
Out of Scope |
None |
Ineligible |
2025-02-11 |
0 |
| Superbet |
https://retail.prod.incubator.superbet.ro/ssbt-api/ |
Url |
Out of Scope |
None |
Ineligible |
2024-04-29 |
0 |
| Superbet |
affiliate.napoleongames.be |
Domain |
Out of Scope |
None |
Ineligible |
2024-01-09 |
0 |
| Superbet |
*.napoleoncasino.be |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-09 |
3 |
| Superbet |
*.napoleondice.be |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-09 |
0 |
| Superbet |
*.napoleongames.be |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-09 |
0 |
| Superbet |
*.napoleonsports.be |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-09 |
3 |
| Superbet |
*.superbet.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-04-12 |
24 |
| Superbet |
*.luckydays.ca |
Wildcard |
In Scope |
Critical |
Eligible |
2023-08-29 |
0 |
| Superbet |
*.luckydays.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-08-29 |
1 |
| Superbet |
ro.superbet.games |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-08-23 |
0 |
| Superbet |
ro.superbet.sport |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-08-23 |
1 |
| Superbet |
*.spinaway.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-08-23 |
3 |
| Superbet |
affiliates.superbet.rs |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-21 |
0 |
| Superbet |
affiliates.superbet.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-21 |
0 |
| Superbet |
https://legacy-web.superbet.ro/session/login |
Url |
Out of Scope |
None |
Ineligible |
2023-01-04 |
0 |
| MoonPay |
*.swaps.xyz |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-08 |
0 |
| MoonPay |
*.iron.xyz |
Wildcard |
In Scope |
Critical |
Eligible |
2026-08-24 |
0 |
| MoonPay |
api.moonx-dev.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
1 |
| MoonPay |
iframe.moonx-dev.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| MoonPay |
api.paybox.sh |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| MoonPay |
app.paybox.sh |
Domain |
In Scope |
Critical |
Eligible |
2026-07-29 |
0 |
| MoonPay |
*.hel.io |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-05-15 |
0 |
| MoonPay |
https://github.com/moonpay/devops-challenge |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-01-20 |
0 |
| MoonPay |
https://github.com/moonpay/moonpay-demo-integrations |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-01-20 |
0 |
| MoonPay |
https://github.com/moonpay/moonpay-sign |
SourceCode |
Out of Scope |
None |
Ineligible |
2025-07-29 |
0 |
| MoonPay |
payload-marketing.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-07-15 |
0 |
| MoonPay |
dev.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-05-23 |
0 |
| MoonPay |
ethpass.xyz |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-01 |
0 |
| MoonPay |
api.moonpay.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-14 |
5 |
| MoonPay |
app.moonpay.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-14 |
4 |
| MoonPay |
auth.moonpay.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-14 |
1 |
| MoonPay |
buy.moonpay.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-14 |
2 |
| MoonPay |
sell.moonpay.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-14 |
0 |
| MoonPay |
web3.moonpay.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-14 |
2 |
| MoonPay |
storefront.hypermint.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-08-05 |
0 |
| MoonPay |
help.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-04-09 |
0 |
| MoonPay |
docs.hypermint.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-03-20 |
0 |
| MoonPay |
request-headers.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-21 |
0 |
| MoonPay |
request-headers-no-proxy.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-19 |
0 |
| MoonPay |
plexlabs.io |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-14 |
0 |
| MoonPay |
*.plexlabs.io |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-08-14 |
0 |
| MoonPay |
https://apps.apple.com/app/id1635031432 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-04 |
1 |
| MoonPay |
https://play.google.com/store/apps/details?id=com.moonpay |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-05-04 |
4 |
| MoonPay |
*.moonpay.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-06-17 |
46 |
| MoonPay |
*.hypermint.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-06-17 |
4 |
| MoonPay |
*.moonpaycloud.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-11-08 |
12 |
| MoonPay |
docs.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-03 |
0 |
| MoonPay |
support.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-29 |
0 |
| MoonPay |
https://github.com/moonpay |
SourceCode |
In Scope |
Critical |
Eligible |
2022-12-15 |
1 |
| MoonPay |
moonpay.com |
Domain |
In Scope |
Critical |
Eligible |
2021-11-08 |
12 |
| MoonPay |
page.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-20 |
0 |
| MoonPay |
qr.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-20 |
0 |
| MoonPay |
clicks.moonpay.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-20 |
0 |
| MoonPay |
hypermint.com |
Domain |
In Scope |
Critical |
Eligible |
2022-06-17 |
2 |
| Doppler |
https://github.com/DopplerHQ/awesome-bots |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-02-27 |
0 |
| Doppler |
support.doppler.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-04 |
0 |
| Doppler |
community.doppler.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-04 |
0 |
| Doppler |
doppler.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-04 |
0 |
| Doppler |
docs.doppler.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-04 |
0 |
| Doppler |
http://calendly.com/doppler/enterprise |
Url |
Out of Scope |
None |
Ineligible |
2021-07-30 |
0 |
| Doppler |
doppler |
Executable |
In Scope |
Critical |
Eligible |
2020-11-06 |
5 |
| Doppler |
https://github.com/DopplerHQ/cli |
SourceCode |
In Scope |
Critical |
Eligible |
2020-10-27 |
1 |
| Doppler |
share.doppler.com |
Domain |
In Scope |
Critical |
Eligible |
2021-07-21 |
1 |
| Doppler |
dashboard.doppler.com |
Domain |
In Scope |
Critical |
Eligible |
2020-11-06 |
28 |
| Doppler |
api.doppler.com |
Domain |
In Scope |
Critical |
Eligible |
2020-11-06 |
3 |
| Doppler |
doppler.team |
Domain |
In Scope |
Critical |
Eligible |
2020-11-05 |
1 |
| Yuga Labs |
*.otherside.xyz |
Wildcard |
In Scope |
Critical |
Eligible |
2022-07-14 |
3 |
| Yuga Labs |
*.yugalabs.io |
Wildcard |
In Scope |
Critical |
Eligible |
2022-07-14 |
2 |
| Yuga Labs |
*.yuga.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-07-14 |
10 |
| Yuga Labs |
*.boredapeyachtclub.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-07-14 |
4 |
| Yuga Labs |
961114489414094898 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-19 |
0 |
| Yuga Labs |
831287358355275877 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-19 |
0 |
| Expedia Group Bug Bounty |
*.expediataaprewards.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-17 |
0 |
| Expedia Group Bug Bounty |
*.expediataap.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-17 |
0 |
| Expedia Group Bug Bounty |
506426310 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-10 |
0 |
| Expedia Group Bug Bounty |
642441300 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-10 |
0 |
| Expedia Group Bug Bounty |
*.wotif.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
2 |
| Expedia Group Bug Bounty |
*.vrbo.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
6 |
| Expedia Group Bug Bounty |
*.travelocity.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
9 |
| Expedia Group Bug Bounty |
*.travelocity.ca |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
4 |
| Expedia Group Bug Bounty |
*.expediapartnersolutions.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.expediapartnercentral.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
21 |
| Expedia Group Bug Bounty |
*.cheaptickets.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
1 |
| Expedia Group Bug Bounty |
*.carrentals.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
7 |
| Expedia Group Bug Bounty |
www.abritel.fr |
Domain |
In Scope |
Critical |
Eligible |
2022-09-12 |
8 |
| Expedia Group Bug Bounty |
www.vrbo.com |
Domain |
In Scope |
Critical |
Eligible |
2020-11-03 |
51 |
| Expedia Group Bug Bounty |
www.hotels.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-08 |
26 |
| Expedia Group Bug Bounty |
www.expedia.com |
Domain |
In Scope |
Critical |
Eligible |
2019-12-13 |
82 |
| Expedia Group Bug Bounty |
*.stayz.com.au |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.flights.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.expedia-aarp.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
www.hotwire.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-17 |
83 |
| Expedia Group Bug Bounty |
*.hotwire.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
20 |
| Expedia Group Bug Bounty |
*.expediacruises.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
20 |
| Expedia Group Bug Bounty |
*.orbitz.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.hotwirepartnercentral.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.hotels.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.fewo-direkt.de |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.expediagroup.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
3 |
| Expedia Group Bug Bounty |
*.expediaagents.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.expedia.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
10 |
| Expedia Group Bug Bounty |
*.ean.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.bookabach.co.nz |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.abritel.fr |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
*.tiqets.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
www.tiqets.com |
Domain |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
880759727 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Expedia Group Bug Bounty |
531549799 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Expedia Group Bug Bounty |
427916203 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-01-04 |
2 |
| Expedia Group Bug Bounty |
403546234 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-07-14 |
0 |
| Expedia Group Bug Bounty |
284971959 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-11-28 |
0 |
| Expedia Group Bug Bounty |
284803487 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-04-06 |
1 |
| Expedia Group Bug Bounty |
1245772818 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-11-28 |
0 |
| Expedia Group Bug Bounty |
www.expediapartnercentral.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-10 |
34 |
| Expedia Group Bug Bounty |
www.expediacruises.com |
Domain |
In Scope |
Critical |
Eligible |
2022-05-23 |
6 |
| Expedia Group Bug Bounty |
com.orbitz |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-07-14 |
1 |
| Expedia Group Bug Bounty |
com.expedia.bookings |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-01-04 |
1 |
| Expedia Group Bug Bounty |
com.wotif.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-04-06 |
1 |
| Expedia Group Bug Bounty |
com.travelocity.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-04-06 |
0 |
| Expedia Group Bug Bounty |
com.homeaway.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
com.carrentals |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-09 |
0 |
| Expedia Group Bug Bounty |
com.cheaptickets |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-04-06 |
1 |
| Expedia Group Bug Bounty |
www.expedia-aarp.com |
Domain |
In Scope |
Critical |
Eligible |
2025-06-24 |
2 |
| Expedia Group Bug Bounty |
www.wotif.com |
Domain |
In Scope |
Critical |
Eligible |
2022-04-06 |
3 |
| Expedia Group Bug Bounty |
www.travelocity.com |
Domain |
In Scope |
Critical |
Eligible |
2022-04-06 |
7 |
| Expedia Group Bug Bounty |
www.travelocity.ca |
Domain |
In Scope |
Critical |
Eligible |
2022-04-06 |
1 |
| Expedia Group Bug Bounty |
www.lastminute.com.au |
Domain |
In Scope |
Critical |
Eligible |
2022-04-06 |
2 |
| Expedia Group Bug Bounty |
www.lastminute.co.nz |
Domain |
In Scope |
Critical |
Eligible |
2022-04-06 |
1 |
| Expedia Group Bug Bounty |
www.carrentals.com |
Domain |
In Scope |
Critical |
Eligible |
2022-03-21 |
42 |
| Expedia Group Bug Bounty |
www.cheaptickets.com |
Domain |
In Scope |
Critical |
Eligible |
2022-04-06 |
4 |
| Expedia Group Bug Bounty |
987675995 |
IosAppStore |
In Scope |
Critical |
Ineligible |
2024-07-02 |
0 |
| Expedia Group Bug Bounty |
com.expediapartnercentral |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2024-07-02 |
0 |
| Expedia Group Bug Bounty |
www.expediataap.com |
Domain |
In Scope |
High |
Eligible |
2024-04-18 |
3 |
| Expedia Group Bug Bounty |
*.lastminute.com.au |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
3 |
| Expedia Group Bug Bounty |
*.lastminute.co.nz |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-07 |
0 |
| Expedia Group Bug Bounty |
483394780 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-07-14 |
0 |
| Expedia Group Bug Bounty |
com.ebookers |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-07-14 |
2 |
| Expedia Group Bug Bounty |
www.ebookers.fi |
Domain |
In Scope |
Critical |
Eligible |
2021-07-14 |
1 |
| Expedia Group Bug Bounty |
www.expediagroup.com |
Domain |
In Scope |
Critical |
Eligible |
2022-09-12 |
4 |
| Expedia Group Bug Bounty |
www.stayz.com.au |
Domain |
In Scope |
Critical |
Eligible |
2022-09-12 |
2 |
| Expedia Group Bug Bounty |
www.fewo-direkt.de |
Domain |
In Scope |
Critical |
Eligible |
2022-09-12 |
4 |
| Expedia Group Bug Bounty |
www.bookabach.co.nz |
Domain |
In Scope |
Critical |
Eligible |
2022-09-12 |
1 |
| Expedia Group Bug Bounty |
www.mrjet.se |
Domain |
In Scope |
Critical |
Eligible |
2021-07-14 |
5 |
| Expedia Group Bug Bounty |
www.ebookers.com |
Domain |
In Scope |
Critical |
Eligible |
2021-07-14 |
7 |
| Expedia Group Bug Bounty |
566635048 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-02-17 |
0 |
| Expedia Group Bug Bounty |
com.vrbo.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-11-28 |
3 |
| Expedia Group Bug Bounty |
com.hcom.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-11-28 |
0 |
| Expedia Group Bug Bounty |
com.hotwire.hotels |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-02-17 |
0 |
| Expedia Group Bug Bounty |
www.orbitz.com |
Domain |
In Scope |
Critical |
Eligible |
2021-07-14 |
20 |
| Magic Eden |
*.magiceden.workers.dev |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-02-10 |
0 |
| Magic Eden |
magiceden.io |
Domain |
Out of Scope |
None |
Ineligible |
2023-02-10 |
0 |
| Magic Eden |
*.magiceden.io |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-02-10 |
0 |
| Magic Eden |
*.magiceden.dev |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-02-10 |
0 |
| Magic Eden |
api.dicey.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-09 |
1 |
| Magic Eden |
dicey.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-03 |
3 |
| Magic Eden |
docs.magiceden.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-03 |
0 |
| Magic Eden |
help.dicey.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-03 |
0 |
| Magic Eden |
staging.dicey.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-03 |
0 |
| Magic Eden |
http://auth.magiceden.io |
Url |
Out of Scope |
None |
Ineligible |
2026-02-03 |
0 |
| Magic Eden |
eng.magiceden.io |
Domain |
Out of Scope |
None |
Ineligible |
2023-02-21 |
0 |
| Magic Eden |
eng.magiceden.dev |
Domain |
Out of Scope |
None |
Ineligible |
2023-02-21 |
0 |
| Magic Eden |
cdn.magiceden.dev |
Domain |
Out of Scope |
None |
Ineligible |
2024-12-31 |
0 |
| Magic Eden |
img-cdn.magiceden.dev |
Domain |
Out of Scope |
None |
Ineligible |
2024-12-31 |
0 |
| Magic Eden |
mainframe.magiceden.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-09-24 |
0 |
| Magic Eden |
http://ord-mirror.magiceden.dev |
Url |
Out of Scope |
None |
Ineligible |
2023-09-14 |
0 |
| Magic Eden |
blog.magiceden.io |
Domain |
Out of Scope |
None |
Ineligible |
2023-02-10 |
0 |
| Deribit |
support.deribit.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-05-27 |
0 |
| Deribit |
trust.deribit.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-02-21 |
0 |
| Deribit |
office.deribit.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-28 |
0 |
| Deribit |
deribit.zendesk.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-28 |
0 |
| Deribit |
*.chattest.deribit.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-01-28 |
0 |
| Deribit |
1293674041 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-01-28 |
0 |
| Deribit |
com.deribit |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-01-28 |
2 |
| Deribit |
Tier 2 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-09-20 |
1 |
| Deribit |
Tier 1 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-09-20 |
4 |
| Deribit |
pb.deribit.com |
Domain |
In Scope |
Medium |
Eligible |
2022-01-28 |
3 |
| Deribit |
insights.deribit.com |
Domain |
In Scope |
Medium |
Eligible |
2022-01-28 |
8 |
| Deribit |
test.deribit.com |
Domain |
In Scope |
Critical |
Eligible |
2022-01-28 |
10 |
| Deribit |
*.deribit.com |
Wildcard |
In Scope |
Medium |
Eligible |
2022-01-28 |
15 |
| Blend Labs |
knox.beta.blendlabs.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-01 |
10 |
| MongoDB |
MongoDB Server |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
6 |
| MongoDB |
voyageai.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-23 |
0 |
| MongoDB |
Evergreen |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-07 |
26 |
| MongoDB |
MongoDB Owned GitHub Repositories |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-08-31 |
72 |
| MongoDB |
Cluster-To-Cluster sync |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-11-28 |
0 |
| MongoDB |
Compass |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-11-28 |
8 |
| MongoDB |
MongoDB Shell |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-11-28 |
3 |
| MongoDB |
*.mongodb.com/* |
Wildcard |
In Scope |
Critical |
Eligible |
2025-10-23 |
23 |
| MongoDB |
Drivers |
Executable |
In Scope |
Critical |
Eligible |
2025-10-23 |
3 |
| MongoDB |
MongoDB Connectors |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
2 |
| MongoDB |
MongoDB MCP Server |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
2 |
| MongoDB |
Database Tools |
Executable |
In Scope |
Critical |
Eligible |
2025-10-23 |
0 |
| MongoDB |
MongoDB IntelliJ Plugin |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
0 |
| MongoDB |
MongoDB Partner Integrations |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
0 |
| MongoDB |
MongoDB Assistant |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
0 |
| MongoDB |
Jira Projects |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
2 |
| MongoDB |
VS Code Plugin |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-11-28 |
4 |
| MongoDB |
University Platform |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-10-23 |
0 |
| MongoDB |
Relational Migrator |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-11-28 |
3 |
| MongoDB |
MongoDB Toolchain |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-10-23 |
0 |
| MongoDB |
Enterprise Edition Products and Tools |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-03 |
0 |
| MongoDB |
MongoDB Atlas |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
1 |
| MongoDB |
Atlas Charts |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
2 |
| MongoDB |
Atlas IAM |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
0 |
| MongoDB |
Atlas Data Federation |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
0 |
| MongoDB |
Atlas Payments/Billing |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-23 |
1 |
| MongoDB |
MongoDB Atlas Agent Engine |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-30 |
0 |
| MongoDB |
Atlas Infinite |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-30 |
0 |
| MongoDB |
MongoDB Atlas Agent Engine CLI and First Party Libraries |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-30 |
0 |
| MongoDB |
App Services/Realm |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-10-23 |
0 |
| ALSCO |
sandbox-royal.securegateway.com |
Domain |
In Scope |
Critical |
Eligible |
2025-04-07 |
1 |
| ALSCO |
sandbox.securegateway.com |
Domain |
In Scope |
Critical |
Eligible |
2025-04-07 |
0 |
| Trendyol |
com.trendyol.go |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-09-01 |
4 |
| Trendyol |
www.tgoyemek.com |
Domain |
In Scope |
Critical |
Eligible |
2025-09-01 |
8 |
| Trendyol |
1127881507 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-04-01 |
5 |
| Trendyol |
524362642 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-04-01 |
1 |
| Trendyol |
com.trendyol.milla.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-03-05 |
11 |
| Trendyol |
www.trendyol-milla.com |
Domain |
In Scope |
Critical |
Eligible |
2023-12-05 |
11 |
| Trendyol |
6467634418 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-03-05 |
0 |
| Trendyol |
com.dolap.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-04-01 |
32 |
| Trendyol |
trendyol.com |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-04-01 |
35 |
| Trendyol |
www.dolap.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-01 |
17 |
| Trendyol |
www.trendyol.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-01 |
107 |
| MetaMask |
https://*.metamask.io |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-02-28 |
0 |
| MetaMask |
Core Tier Assets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-02-28 |
0 |
| MetaMask |
Non-Core Tier Assets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-02-28 |
0 |
| MetaMask |
*.api.cx.metamask.io |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-04-02 |
0 |
| MetaMask |
https://github.com/Web3Auth/web3auth-web |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| MetaMask |
portfolio.metamask.io (app.metamask.io) |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-02-10 |
0 |
| MetaMask |
Message signing snap |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-10-17 |
0 |
| MetaMask |
Snaps Development Packages |
SourceCode |
Out of Scope |
None |
Ineligible |
2023-09-12 |
0 |
| MetaMask |
api-dashboard.web3auth.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| MetaMask |
dashboard.web3auth.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-12 |
0 |
| MetaMask |
developer.metamask.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-26 |
0 |
| MetaMask |
https://user-storage.api.cx.metamask.io |
Url |
Out of Scope |
None |
Ineligible |
2024-07-01 |
0 |
| MetaMask |
api-wallet.web3auth.io |
Domain |
In Scope |
Critical |
Eligible |
2026-02-12 |
2 |
| MetaMask |
wallet.web3auth.io |
Domain |
In Scope |
Critical |
Eligible |
2026-02-12 |
0 |
| MetaMask |
travel.metamask.io |
Domain |
Out of Scope |
None |
Ineligible |
2025-08-07 |
0 |
| MetaMask |
mUSD Stablecoin |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-11-24 |
0 |
| MetaMask |
card.metamask.io |
Domain |
Out of Scope |
None |
Ineligible |
2025-01-24 |
0 |
| MetaMask |
MetaMask SDK |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-31 |
5 |
| MetaMask |
https://metamask.github.io/phishing-warning/<vX.Y.Z> |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-09-11 |
0 |
| MetaMask |
io.metamask.Metamask |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-03-02 |
43 |
| MetaMask |
io.metamask |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-03-02 |
38 |
| MetaMask |
MetaMask Browser Extension |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-03-02 |
44 |
| MetaMask |
signature-insights.api.cx.metamask.io |
Domain |
In Scope |
Critical |
Eligible |
2025-02-06 |
2 |
| MetaMask |
Wallet Tier Assets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-06-25 |
0 |
| MetaMask |
permissionless.snaps.metamask.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-05-03 |
0 |
| MetaMask |
https://support.metamask.io/ |
Url |
Out of Scope |
None |
Ineligible |
2024-04-03 |
0 |
| MetaMask |
https://mmi-support.metamask.io/ |
Url |
Out of Scope |
None |
Ineligible |
2024-04-03 |
0 |
| MetaMask |
metamask.io |
Domain |
In Scope |
Critical |
Eligible |
2022-03-02 |
7 |
| MetaMask |
Snaps |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-09-12 |
9 |
| MetaMask |
Third Party Snaps |
OtherAsset |
In Scope |
None |
Ineligible |
2023-09-12 |
1 |
| MetaMask |
snaps.metamask.io |
Domain |
In Scope |
Critical |
Eligible |
2023-09-12 |
1 |
| MetaMask |
https://metamask.github.io/ |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-09-11 |
0 |
| MetaMask |
community.metamask.io |
Domain |
Out of Scope |
None |
Ineligible |
2022-11-24 |
0 |
| MetaMask |
https://www.npmjs.com/search?q=%40metamask |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-03-09 |
0 |
| MetaMask |
Metamask Flask Extension |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-03-11 |
0 |
| Razorpay |
x.razorpay.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-03 |
9 |
| Razorpay |
payroll.razorpay.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-03 |
9 |
| Razorpay |
invoices.razorpay.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-06 |
4 |
| Razorpay |
checkout.razorpay.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-06 |
1 |
| Razorpay |
api.razorpay.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-06 |
18 |
| Razorpay |
dashboard.razorpay.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-06 |
64 |
| LinkedIn |
business.linkedin.com |
Domain |
In Scope |
High |
Eligible |
2022-11-04 |
16 |
| LinkedIn |
288429040 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-02-04 |
4 |
| LinkedIn |
com.linkedin.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-02-04 |
21 |
| LinkedIn |
api.linkedin.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-04 |
9 |
| LinkedIn |
www.linkedin.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-04 |
445 |
| Wealthsimple |
gifts.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
app.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
newsroom.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
shop.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
tldr-archive.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-01 |
0 |
| Wealthsimple |
schedule.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
groove.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
start.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
trust.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
status.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-01 |
0 |
| Wealthsimple |
help.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-05-30 |
0 |
| Wealthsimple |
com.wealthsimple.predict |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-01 |
0 |
| Wealthsimple |
com.wealthsimple.predict |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-01 |
0 |
| Wealthsimple |
*.wealthsimple.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-07-20 |
181 |
| Wealthsimple |
*.simpletax.ca |
Wildcard |
In Scope |
Critical |
Eligible |
2022-04-25 |
4 |
| Wealthsimple |
work.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-12 |
0 |
| Wealthsimple |
support.wealthsimple.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-05-30 |
0 |
| Wealthsimple |
com.wealthsimple.wealthsimple |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-07-20 |
2 |
| Wealthsimple |
com.wealthsimple |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-07-20 |
13 |
| KAYAK |
cruises.kayak.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-24 |
0 |
| KAYAK |
kayak.ai |
Domain |
In Scope |
Critical |
Eligible |
2025-05-12 |
7 |
| KAYAK |
*.kayak.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-03-10 |
14 |
| KAYAK |
https://*.kayakairplanemode.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-06-27 |
0 |
| KAYAK |
com.kayak.travel |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-11-19 |
1 |
| KAYAK |
com.kayak.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-11-19 |
7 |
| KAYAK |
affiliates.kayak.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-13 |
0 |
| KAYAK |
kayak.com/guides/* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-04-14 |
0 |
| KAYAK |
kayak.com/moira/ehoe/* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2018-07-16 |
0 |
| KAYAK |
kayak.com/hotelowner/* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2018-07-16 |
0 |
| KAYAK |
klassereise.checkfelix.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-07-16 |
0 |
| KAYAK |
business.kayak.com |
Domain |
In Scope |
Critical |
Eligible |
2022-01-21 |
22 |
| KAYAK |
www.mundi.com.br |
Domain |
In Scope |
Critical |
Eligible |
2021-12-09 |
2 |
| KAYAK |
www.hotelscombined.com |
Domain |
In Scope |
Critical |
Eligible |
2021-12-09 |
26 |
| KAYAK |
www.cheapflights.com |
Domain |
In Scope |
Critical |
Eligible |
2021-12-09 |
2 |
| KAYAK |
www.momondo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-12-09 |
6 |
| KAYAK |
www.checkfelix.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-16 |
3 |
| KAYAK |
www.swoodoo.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-16 |
8 |
| KAYAK |
www.kayak.com |
Domain |
In Scope |
Critical |
Eligible |
2017-11-19 |
199 |
| Sorare |
ws.sorare.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-02 |
1 |
| Sorare |
api.sorare.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-02 |
44 |
| Sorare |
sorare.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-02 |
35 |
| SHEIN |
*.sheingsp.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-08-17 |
0 |
| SHEIN |
*.romwe.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-02-04 |
25 |
| SHEIN |
*.shein.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-01-10 |
86 |
| SHEIN |
1080248000 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-02-04 |
1 |
| SHEIN |
878577184 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-01-10 |
4 |
| SHEIN |
com.romwe |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-02-04 |
2 |
| SHEIN |
com.zzkko |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-01-10 |
7 |
| Palantir Public |
palantirpacusa.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-30 |
0 |
| Palantir Public |
palantirfedstart.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-19 |
0 |
| Palantir Public |
store.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-08-11 |
0 |
| Palantir Public |
community.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-04-15 |
0 |
| Palantir Public |
sandbox.training.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Palantir Public |
Any infrastructure or assets related to Silk, FancyThat, or other Palantir acquisitions. |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-03-29 |
0 |
| Palantir Public |
Any public cloud (e.g. Amazon AWS, Microsoft Azure) resource or infrastructure operated and managed by Palantir. |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-12-13 |
12 |
| Palantir Public |
Any public (Internet-facing) infrastructure owned and operated by Palantir. |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-12-13 |
38 |
| Palantir Public |
learn.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-03 |
0 |
| Palantir Public |
training.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-19 |
0 |
| Palantir Public |
certification.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-19 |
0 |
| Palantir Public |
info.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-03-25 |
0 |
| Palantir Public |
explore.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-03-25 |
0 |
| Palantir Public |
go.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-03-25 |
0 |
| Palantir Public |
blog.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-12-13 |
0 |
| Palantir Public |
investors.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-12-13 |
0 |
| Palantir Public |
gear.palantir.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-12-13 |
0 |
| EXNESS |
stat.* (e.g. stat.exnessaffiliates.com) |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-06-05 |
0 |
| EXNESS |
com.exness.android.pa |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-07-17 |
0 |
| EXNESS |
Exness Investor |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-07-11 |
0 |
| EXNESS |
Exness Trade: Online Trading |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-07-10 |
0 |
| EXNESS |
api.excalls.mobi |
Domain |
In Scope |
Critical |
Eligible |
2023-07-10 |
4 |
| EXNESS |
exness.com |
Domain |
In Scope |
Medium |
Eligible |
2023-07-10 |
28 |
| EXNESS |
pwapi.ex2b.com |
Domain |
In Scope |
Critical |
Eligible |
2023-07-10 |
10 |
| EXNESS |
https://my.exness.com/pa/pim/manager |
Url |
In Scope |
High |
Eligible |
2023-07-10 |
0 |
| EXNESS |
exnessaffiliates.com |
Domain |
In Scope |
Critical |
Eligible |
2023-07-10 |
12 |
| EXNESS |
https://my.exness.com/webtrading/ |
Url |
In Scope |
Critical |
Eligible |
2023-07-10 |
3 |
| EXNESS |
pay.ibex.exchange |
Domain |
In Scope |
Critical |
Eligible |
2023-07-10 |
2 |
| EXNESS |
my.exness.com |
Domain |
In Scope |
Critical |
Eligible |
2023-07-10 |
19 |
| EXNESS |
External service data leakage |
OtherAsset |
In Scope |
Critical |
Ineligible |
2020-09-21 |
12 |
| EXNESS |
Any subdomain application issue |
OtherAsset |
In Scope |
Critical |
Ineligible |
2020-09-03 |
29 |
| EXNESS |
Any subdomain infrastructure issue |
OtherAsset |
In Scope |
Critical |
Ineligible |
2019-09-09 |
146 |
| SMTP2GO BBP |
support.smtp2go.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-11 |
0 |
| SMTP2GO BBP |
api.smtp2go.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-16 |
26 |
| SMTP2GO BBP |
app.smtp2go.com |
Domain |
In Scope |
Critical |
Eligible |
2021-05-11 |
224 |
| SMTP2GO BBP |
smtp2go.com |
Domain |
In Scope |
Critical |
Eligible |
2021-05-11 |
45 |
| Instacart |
template.uat.foodstorm.com |
Domain |
In Scope |
Critical |
Eligible |
2026-01-14 |
2 |
| Instacart |
instacart.careers |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-14 |
0 |
| Instacart |
news.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
*.instacart.tools |
Wildcard |
In Scope |
Critical |
Eligible |
2020-12-02 |
17 |
| Instacart |
*.instacart.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-12-02 |
78 |
| Instacart |
*.email.instacart.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
enterprise-status.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-14 |
0 |
| Instacart |
corporate.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
covidresponse.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
design.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
life.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
tech.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
carrotstore.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
brand.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-05-04 |
0 |
| Instacart |
careers.instacart.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-02 |
0 |
| Instacart |
545599256 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-11-26 |
0 |
| Instacart |
com.instacart.client |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-11-26 |
15 |
| Instacart |
Android & iOS App for Instacart Shoppers |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-02-01 |
13 |
| Instacart |
www.instacart.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-26 |
148 |
| Instacart |
admin.instacart.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-26 |
4 |
| Instacart |
shoppers.instacart.com |
Domain |
In Scope |
Critical |
Eligible |
2019-02-01 |
17 |
| Instacart |
api.instacart.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-26 |
4 |
| Databricks |
Lakebase-Supported extensions |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-10 |
0 |
| Databricks |
*.cloud.databricks.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-01-11 |
0 |
| Databricks |
Open Scope |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-01-29 |
14 |
| Databricks |
Databricks Free Edition |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-12-17 |
2 |
| Databricks |
*.azuredatabricks.net |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-01-11 |
0 |
| Databricks |
*.gcp.databricks.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-11-11 |
0 |
| Databricks |
https://dbc-9a3f8ed1-7608.cloud.databricks.com |
Url |
In Scope |
Critical |
Eligible |
2024-04-08 |
18 |
| Databricks |
accounts.cloud.databricks.com |
Domain |
In Scope |
Critical |
Eligible |
2023-08-24 |
13 |
| Databricks |
databricks.com |
Domain |
In Scope |
Critical |
Eligible |
2018-01-11 |
86 |
| Payoneer |
myaccount.payoneer.com |
Domain |
In Scope |
Critical |
Eligible |
2025-06-19 |
0 |
| Payoneer |
myaccount-cn.payoneer.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-30 |
1 |
| Payoneer |
http://greenchannel.payoneer.com.cn/gcportal |
Url |
In Scope |
Critical |
Eligible |
2025-01-21 |
7 |
| Payoneer |
skuad.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-09-30 |
0 |
| Payoneer |
brand.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-05-01 |
0 |
| Payoneer |
payoneer.com.cn |
Domain |
In Scope |
Critical |
Eligible |
2024-03-06 |
1 |
| Payoneer |
investorday.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-18 |
0 |
| Payoneer |
duediligence.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-07-10 |
0 |
| Payoneer |
register.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-01 |
0 |
| Payoneer |
explore.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-01 |
0 |
| Payoneer |
tracks.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-01 |
0 |
| Payoneer |
affiliates.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-01 |
0 |
| Payoneer |
community.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-01 |
0 |
| Payoneer |
blog.payoneer.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-01 |
0 |
| Payoneer |
*.payoneer.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-12-01 |
93 |
| Krisp |
help.krisp.ai |
Domain |
In Scope |
Critical |
Ineligible |
2021-06-18 |
5 |
| Krisp |
https://download.krisp.ai/win |
Executable |
In Scope |
Critical |
Eligible |
2021-06-18 |
5 |
| Krisp |
https://download.krisp.ai/mac |
Executable |
In Scope |
Critical |
Eligible |
2021-06-18 |
4 |
| Krisp |
upld.krisp.ai |
Domain |
In Scope |
Critical |
Eligible |
2021-06-18 |
0 |
| Krisp |
teams.krisp.ai |
Domain |
In Scope |
Critical |
Eligible |
2021-06-18 |
0 |
| Krisp |
resources.krisp.ai |
Domain |
In Scope |
None |
Ineligible |
2022-04-06 |
1 |
| Krisp |
krisp.ai |
Domain |
In Scope |
Critical |
Eligible |
2021-06-18 |
11 |
| Krisp |
help-jp.krisp.ai |
Domain |
In Scope |
Low |
Ineligible |
2022-04-27 |
0 |
| Krisp |
download.krisp.ai |
Domain |
In Scope |
Critical |
Eligible |
2021-06-18 |
0 |
| Krisp |
app.krisp.ai |
Domain |
In Scope |
Critical |
Eligible |
2024-07-24 |
17 |
| Krisp |
api.krisp.ai |
Domain |
In Scope |
Critical |
Eligible |
2021-06-18 |
20 |
| Krisp |
analytics.krisp.ai |
Domain |
In Scope |
Critical |
Eligible |
2021-06-18 |
2 |
| Krisp |
account.krisp.ai |
Domain |
In Scope |
Critical |
Eligible |
2021-06-18 |
10 |
| Krisp |
*.krisp.ai |
Wildcard |
In Scope |
Critical |
Eligible |
2021-06-18 |
23 |
| Krisp |
metabase.krisp.ai |
Domain |
Out of Scope |
None |
Ineligible |
2025-01-17 |
0 |
| Krisp |
url5145.krisp.ai |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-17 |
0 |
| Krisp |
sdk-docs.krisp.ai |
Domain |
Out of Scope |
None |
Ineligible |
2024-07-28 |
0 |
| Krisp |
whatsnew.krisp.ai |
Domain |
Out of Scope |
None |
Ineligible |
2021-06-18 |
0 |
| Krisp |
voice-ai-newsletter.krisp.ai |
Domain |
Out of Scope |
None |
Ineligible |
2024-07-24 |
0 |
| Krisp |
*dev*.krisp.ai |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-06-20 |
0 |
| Krisp |
Other |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-06-20 |
6 |
| Wickr |
Wickr Me Windows |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
3 |
| Wickr |
Wickr Pro Windows |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
1 |
| Wickr |
Wickr Pro OS X |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
1 |
| Wickr |
Wickr Me OS X |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
0 |
| Wickr |
Wickr Me Linux |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
0 |
| Wickr |
Wickr Me Android |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
1 |
| Wickr |
Wickr Me iOS |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
2 |
| Wickr |
Wickr Pro Linux |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
1 |
| Wickr |
Wickr Pro iOS |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
0 |
| Wickr |
Wickr Pro Android |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
0 |
| Wickr |
Wickr Pro/Wickr Me (all related technical components) (up to) |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-11-29 |
5 |
| Wickr |
support.wickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-11-29 |
0 |
| Wickr |
www.wickr.com |
Domain |
In Scope |
Critical |
Ineligible |
2021-11-29 |
1 |
| Wickr |
admin.wickr.com |
Domain |
In Scope |
Critical |
Eligible |
2021-11-29 |
6 |
| Judge.me |
insights.judgeme.dev |
Domain |
In Scope |
Critical |
Eligible |
2026-06-11 |
0 |
| Judge.me |
https://judge.me/reviews |
Url |
In Scope |
Critical |
Eligible |
2020-11-06 |
4 |
| Judge.me |
shop.judge.me |
Domain |
In Scope |
Critical |
Eligible |
2020-11-06 |
4 |
| Judge.me |
judge.me |
Domain |
In Scope |
Critical |
Eligible |
2020-10-30 |
122 |
| Judge.me |
woocommerce-adapter.judge.me |
Domain |
In Scope |
Critical |
Eligible |
2021-10-18 |
1 |
| Judge.me |
bigcommerce-adapter.judge.me |
Domain |
In Scope |
Critical |
Eligible |
2021-10-18 |
1 |
| Judge.me |
cache.judge.me |
Domain |
In Scope |
Critical |
Eligible |
2021-10-18 |
0 |
| Evernote |
com.evernote.android |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2019-12-10 |
0 |
| Evernote |
help.evernote.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-06-26 |
0 |
| Evernote |
api.stage.evernote.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-12-07 |
0 |
| Evernote |
accounts.stage.evernote.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-05-27 |
1 |
| Evernote |
281796108 |
IosAppStore |
In Scope |
Critical |
Eligible |
2019-12-10 |
0 |
| Evernote |
406056744 |
Executable |
In Scope |
Critical |
Eligible |
2019-12-10 |
3 |
| Evernote |
com.evernote |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-04-05 |
1 |
| Evernote |
api.evernote.com |
Domain |
In Scope |
Critical |
Eligible |
2020-12-07 |
8 |
| Evernote |
accounts.evernote.com |
Domain |
In Scope |
Critical |
Eligible |
2019-10-28 |
9 |
| Evernote |
www.evernote.com |
Domain |
In Scope |
Critical |
Eligible |
2019-10-28 |
79 |
| Evernote |
9wzdncrfj3mb |
WindowsMicrosoftStore |
In Scope |
Critical |
Eligible |
2019-12-10 |
6 |
| Epic Games |
*.superawesome.tv |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-02-09 |
0 |
| Epic Games |
*.superawesome.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-02-09 |
0 |
| Epic Games |
FortniteLauncher-Win64-Shipping.exe |
Executable |
In Scope |
Critical |
Eligible |
2019-03-26 |
5 |
| Epic Games |
FortniteLauncher-Win64-Shipping_BE.exe |
Executable |
In Scope |
Critical |
Eligible |
2019-03-26 |
0 |
| Epic Games |
FortniteLauncher-Win64-Shipping_EAC.exe |
Executable |
In Scope |
Critical |
Eligible |
2019-03-26 |
1 |
| Epic Games |
FortniteLauncher.exe |
Executable |
In Scope |
Critical |
Eligible |
2019-03-26 |
5 |
| Epic Games |
EpicGamesLauncher.exe |
Executable |
In Scope |
Critical |
Eligible |
2023-04-13 |
8 |
| Epic Games |
dev.epicgames.com/* |
Wildcard |
In Scope |
Critical |
Eligible |
2025-10-30 |
50 |
| Epic Games |
EpicOnlineServices |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-13 |
8 |
| Epic Games |
*.artstation.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-09-22 |
230 |
| Epic Games |
UnrealEditorFortnite-Win64-Shipping.exe |
Executable |
In Scope |
Critical |
Eligible |
2023-03-24 |
6 |
| Epic Games |
*.unrealengine.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-04-05 |
98 |
| Epic Games |
http://urc-uefn.live.ucs.on.epicgames.com |
Url |
In Scope |
Critical |
Eligible |
2025-10-29 |
0 |
| Epic Games |
UEFN |
Executable |
In Scope |
Critical |
Eligible |
2025-03-21 |
14 |
| Epic Games |
create.fortnite.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-21 |
32 |
| Epic Games |
cosmo.fdeb.live.use1a.on.epicgames.com |
Domain |
In Scope |
Critical |
Eligible |
2026-01-13 |
1 |
| Epic Games |
Recent Acquisitions |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-02-10 |
0 |
| Epic Games |
https://communities.epicgames.com |
Url |
In Scope |
Critical |
Eligible |
2026-02-03 |
4 |
| Epic Games |
https://fn-commerce-live.eeef.live.use1a.on.epicgames.com/api/fn-commerce/ |
Url |
In Scope |
Critical |
Eligible |
2026-01-13 |
0 |
| Epic Games |
https://fngw-svc-ds-livefn.ol.epicgames.net/api/magpie |
Url |
In Scope |
Critical |
Eligible |
2026-01-13 |
0 |
| Epic Games |
https://fngw-svc-gc-livefn.ol.epicgames.net/api/magpie |
Url |
In Scope |
Critical |
Eligible |
2026-01-13 |
0 |
| Epic Games |
*.sketchfab.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-01-10 |
73 |
| Epic Games |
staging.kidswebservices.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-24 |
0 |
| Epic Games |
http://urc-auth-uefn.live.ucs.on.epicgames.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-10-29 |
0 |
| Epic Games |
http://nexus.live.ucs.on.epicgames.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-10-29 |
0 |
| Epic Games |
help.sketchfab.com |
Domain |
In Scope |
Critical |
Ineligible |
2022-05-24 |
0 |
| Epic Games |
forum.sketchfab.com |
Domain |
In Scope |
Critical |
Ineligible |
2022-05-24 |
0 |
| Epic Games |
*.3lateral.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-08-18 |
3 |
| Epic Games |
*.bcbits.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-10-04 |
0 |
| Epic Games |
*.cubicmotion.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-08-18 |
12 |
| Epic Games |
*.hmxwebservices.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-04 |
0 |
| Epic Games |
*.jellychat.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-02-09 |
0 |
| Epic Games |
*.popjam.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-02-09 |
0 |
| Epic Games |
*.quixel.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-01-10 |
43 |
| Epic Games |
*.superbeatsports.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-10-04 |
0 |
| Epic Games |
*.singspacegame.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-04 |
1 |
| Epic Games |
aqtooling.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Epic Games |
aquiristech.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-16 |
2 |
| Epic Games |
buckingfuggy.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-16 |
2 |
| Epic Games |
capturingreality.com |
Domain |
In Scope |
Critical |
Eligible |
2023-06-06 |
10 |
| Epic Games |
harmonixmusic.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-15 |
1 |
| Epic Games |
hc2services.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Epic Games |
hmxservices.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-15 |
0 |
| Epic Games |
v1. kidswebservices.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-10-24 |
0 |
| Epic Games |
v1staging.kidswebservices.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-10-24 |
0 |
| Epic Games |
wonderboxapi.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Epic Games |
wonderboxdev.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Epic Games |
unrealfest.unrealengine.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-17 |
0 |
| Epic Games |
https://github.com/EpicGames/UnrealTournament |
SourceCode |
Out of Scope |
None |
Ineligible |
2025-04-10 |
0 |
| Epic Games |
content-service-live-testing.bfda.live.use1a.on.epicgames.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-21 |
0 |
| Epic Games |
content-service.bfda.live.use1a.on.epicgames.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-21 |
38 |
| Epic Games |
start.gg |
Domain |
Out of Scope |
None |
Ineligible |
2025-03-19 |
0 |
| Epic Games |
competitive.fortnite.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-06 |
0 |
| Epic Games |
maestro.io |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-11-14 |
0 |
| Epic Games |
http://brand.epicgames.com |
Url |
Out of Scope |
None |
Ineligible |
2024-10-29 |
0 |
| Epic Games |
niantic.kidswebservices.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-24 |
3 |
| Epic Games |
kidswebservices.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-24 |
5 |
| Epic Games |
innersloth.kidswebservices.com |
Domain |
In Scope |
Critical |
Eligible |
2024-10-24 |
0 |
| Epic Games |
fab.com |
Domain |
In Scope |
Critical |
Eligible |
2024-09-24 |
25 |
| Epic Games |
*.rukkaz.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-02-09 |
0 |
| Epic Games |
*.twinmotion.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-08-29 |
1 |
| Epic Games |
*.epicgames.dev |
Wildcard |
In Scope |
Critical |
Eligible |
2024-07-18 |
13 |
| Epic Games |
*.dropmix.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-04 |
1 |
| Epic Games |
*.dancecentral.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-04 |
1 |
| Epic Games |
*.audicagame.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-04 |
0 |
| Epic Games |
*.amplitude-game.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-04 |
0 |
| Epic Games |
epicswag.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-06-13 |
0 |
| Epic Games |
horizonchaseturbo.com |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
2 |
| Epic Games |
horizonchase.com.br |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
0 |
| Epic Games |
horizonchase.com |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
2 |
| Epic Games |
aquiris.com.br |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
4 |
| Epic Games |
*.fallguys.com |
OtherAsset |
In Scope |
Low |
Eligible |
2021-08-18 |
10 |
| Epic Games |
ballistic.com.br |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
0 |
| Epic Games |
ballistic.com |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
1 |
| Epic Games |
aquiris.studio |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
0 |
| Epic Games |
*.epicgames.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-04-05 |
555 |
| Epic Games |
*.epicgames.dev |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-04-20 |
22 |
| Epic Games |
*.rocketleague.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-09-29 |
47 |
| Epic Games |
*.oncatapult.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-08-18 |
12 |
| Epic Games |
*.unrealtournament.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-10-12 |
2 |
| Epic Games |
*.easy.ac |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-09-29 |
16 |
| Epic Games |
*.fortnite.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-04-05 |
51 |
| Epic Games |
*.psynet.gg |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-09-29 |
26 |
| Epic Games |
*.psyonix.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-06-10 |
7 |
| Epic Games |
*.mediatonic.co.uk |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-09-20 |
6 |
| Epic Games |
playwonderbox.com.br |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
0 |
| Epic Games |
playwonderbox.com |
Domain |
In Scope |
Low |
Eligible |
2023-05-16 |
1 |
| Epic Games |
*.bcbits.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-09-28 |
0 |
| Epic Games |
*.bandcamp.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-03-08 |
0 |
| Epic Games |
isitbandcampfriday.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-07 |
0 |
| Epic Games |
*.bandcamp.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-09-28 |
0 |
| Epic Games |
news.capturingreality.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-06 |
0 |
| Epic Games |
support.capturingreality.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-06 |
0 |
| Epic Games |
id1534920947 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Epic Games |
id1520720139 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-16 |
0 |
| Epic Games |
hc2tooling.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-16 |
1 |
| Epic Games |
msoid.harmonixmusic.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-16 |
0 |
| Epic Games |
fortnite.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-15 |
11 |
| Epic Games |
docs.superawesome.tv |
Domain |
Out of Scope |
None |
Ineligible |
2023-06-22 |
0 |
| Epic Games |
app.playwonderbox.com |
IosAppStore |
Out of Scope |
None |
Ineligible |
2023-05-16 |
0 |
| Tinder |
*.gotinder.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-12-12 |
37 |
| Tinder |
*.tinderwebstaging.com |
Wildcard |
In Scope |
Medium |
Eligible |
2021-10-28 |
1 |
| Tinder |
*.tstaging.tools |
Wildcard |
In Scope |
Medium |
Eligible |
2021-10-28 |
1 |
| Tinder |
*.tstaging.com |
Wildcard |
In Scope |
Medium |
Eligible |
2021-10-28 |
2 |
| Tinder |
*.tinderops.net |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-05 |
4 |
| Tinder |
*.tinder.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-12-12 |
38 |
| Tinder |
AppsFlyer Subdomains |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-02-01 |
0 |
| Tinder |
console.gotinder.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-06 |
0 |
| Tinder |
www.help.tinder.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-09-15 |
0 |
| Tinder |
gotinder.imgix.net |
Domain |
Out of Scope |
None |
Ineligible |
2021-09-15 |
0 |
| Tinder |
go.tinder.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-09-15 |
0 |
| Tinder |
547702041 |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-12-12 |
3 |
| Tinder |
com.tinder |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-12-12 |
7 |
| XVIDEOS |
www.xvideos.com |
Domain |
In Scope |
Critical |
Eligible |
2020-09-24 |
131 |
| XVIDEOS |
www.xvideos.red |
Domain |
In Scope |
Critical |
Eligible |
2020-09-24 |
17 |
| XVIDEOS |
www.xnxx.com |
Domain |
In Scope |
Critical |
Eligible |
2020-09-24 |
43 |
| XVIDEOS |
https://www.xvideos.net/app/ |
Url |
In Scope |
Critical |
Eligible |
2020-09-24 |
2 |
| XVIDEOS |
www.xvlivecams.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-09 |
0 |
| XVIDEOS |
www.xvcams.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-09 |
0 |
| XVIDEOS |
www.xnxx.gold |
Domain |
In Scope |
Critical |
Eligible |
2025-02-26 |
3 |
| Elastic |
Other |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-07-12 |
0 |
| Elastic |
cloud.elastic.co |
Domain |
Out of Scope |
None |
Ineligible |
2017-12-23 |
0 |
| Elastic |
Elastic Distributions of OpenTelemetry (EDOT) |
Executable |
Out of Scope |
None |
Ineligible |
2025-11-06 |
0 |
| Elastic |
Beats - Packetbeat |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Beats - Metricbeat |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Beats - Heartbeat |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Beats - Filebeat |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Beats - Auditbeat |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Elastic Synthetics Monitoring |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-07-13 |
0 |
| Elastic |
Elastic Package Registry |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-10-14 |
0 |
| Elastic |
*.swiftype.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-02-02 |
0 |
| Elastic |
Beats - Osquerybeat |
Executable |
Out of Scope |
None |
Ineligible |
2025-11-06 |
0 |
| Elastic |
Elastic Defend |
Executable |
Out of Scope |
None |
Ineligible |
2025-08-22 |
0 |
| Elastic |
Beats |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-05 |
0 |
| Elastic |
Kibana |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Fleet Server |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Observability - APM Server |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Observability - APM Agents |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Logstash |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Elasticsearch |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Elastic Maps Server |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Elastic Enterprise Search |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Elastic Cloud on Kubernetes (ECK) |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Elastic Cloud Enterprise (ECE) |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Elastic Agent |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Beats - Winlogbeat |
Executable |
Out of Scope |
None |
Ineligible |
2023-07-04 |
0 |
| Elastic |
Elastic Clients |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-07-05 |
0 |
| Elastic |
Subdomain takeover |
OtherAsset |
In Scope |
Low |
Eligible |
2026-07-18 |
1 |
| Elastic |
Elastic Credentials |
OtherAsset |
In Scope |
High |
Eligible |
2026-05-25 |
6 |
| Elastic |
*.jina.ai |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-04-19 |
0 |
| Elastic |
*.es.io |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-02-24 |
0 |
| Elastic |
*.theelasticast.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.prelert.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.logstash.wtf |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.logstash.net |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.kibana.wtf |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.insight.io |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.estccdn.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticsearch.wtf |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticsearch.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticsearch.jp |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticsearch.fr |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticsearch.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticps.co |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticpartneracademy.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticon.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticon.co |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticloud.wtf |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticgov.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticcloud.wtf |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticbeats.wtf |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticapm.co |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticaccelerationzone.co |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elasticacademy.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.elastic.wtf |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-24 |
0 |
| Elastic |
*.ela.st |
Wildcard |
In Scope |
Critical |
Eligible |
2026-02-19 |
0 |
| Elastic |
*.kbndev.co |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-02-19 |
0 |
| Elastic |
*.keephq.dev |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-11-25 |
0 |
| Elastic |
*.elstc.co |
Wildcard |
In Scope |
Critical |
Eligible |
2019-03-08 |
5 |
| Elastic |
*.elastic.dev |
Wildcard |
In Scope |
Critical |
Eligible |
2025-11-06 |
10 |
| Elastic |
*.found.io |
Wildcard |
In Scope |
Critical |
Eligible |
2018-01-29 |
10 |
| Elastic |
*.elastic.co |
Wildcard |
In Scope |
Critical |
Eligible |
2018-01-25 |
92 |
| Elastic |
Software Supply Chain |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-07-05 |
64 |
| Elastic |
*.eops.nl |
Wildcard |
In Scope |
Critical |
Eligible |
2020-01-27 |
4 |
| Elastic |
*.elasticnet.co |
Wildcard |
In Scope |
Critical |
Eligible |
2020-01-27 |
4 |
| Elastic |
discuss.elastic.co |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-14 |
0 |
| Elastic |
community.elastic.co |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-14 |
0 |
| Elastic |
https://github.com/elastic/*/wiki |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-05-23 |
0 |
| Elastic |
https://github.com/swiftype/*/wiki |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-04-03 |
0 |
| Elastic |
learn.elastic.co |
Domain |
Out of Scope |
None |
Ineligible |
2017-11-17 |
0 |
| Elastic |
link.email.elastic.co |
Domain |
Out of Scope |
None |
Ineligible |
2017-11-17 |
0 |
| Elastic |
track.email.elastic.co |
Domain |
Out of Scope |
None |
Ineligible |
2017-11-17 |
0 |
| Elastic |
sendgrid.elastic.co |
Domain |
Out of Scope |
None |
Ineligible |
2017-11-17 |
0 |
| Stripe |
Stripe Open Source |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
103 |
| Stripe |
*.metronome.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-16 |
11 |
| Stripe |
Stripe SDKs |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
8 |
| Stripe |
Stripe Billing |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
4 |
| Stripe |
Stripe Payments |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
2 |
| Stripe |
Customer Portal |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Stripe |
Global Payouts |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Stripe |
Stripe fiat-to-crypto onramp |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Stripe |
Stripe Projects |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-05-29 |
2 |
| Stripe |
Stripe CLI |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Stripe |
mcp.stripe.com |
Domain |
In Scope |
Critical |
Eligible |
2026-05-08 |
0 |
| Stripe |
Smokescreen Open Source Project |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-27 |
7 |
| Stripe |
Munkisrv Open Source Project |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-03-13 |
1 |
| Stripe |
*.bridge.xyz |
Wildcard |
In Scope |
Critical |
Eligible |
2025-06-16 |
5 |
| Stripe |
*.lemonsqueezy.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-10-28 |
121 |
| Stripe |
Organizations |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-05-08 |
1 |
| Stripe |
Sandboxes |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-05-08 |
0 |
| Stripe |
Tap to Pay (iOS) |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Stripe |
Tap to Pay (Android) |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Stripe |
Stripe for Visual Studio Code |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-12-07 |
0 |
| Stripe |
com.stripe.android.dashboard |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-12-07 |
4 |
| Stripe |
978516833 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-12-07 |
0 |
| Stripe |
Stripe Dashboard |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
111 |
| Stripe |
*.link.co |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-05-03 |
5 |
| Stripe |
Stripe Payment Links |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-28 |
2 |
| Stripe |
Stripe Invoicing |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-28 |
0 |
| Stripe |
Stripe Financial Connections |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-01 |
0 |
| Stripe |
Stripe Revenue Recognition |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-01 |
0 |
| Stripe |
Stripe Identity |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-01 |
0 |
| Stripe |
Stripe Climate |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-01 |
0 |
| Stripe |
Stripe Data Pipeline |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-01 |
0 |
| Stripe |
Stripe Tax |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-01 |
2 |
| Stripe |
Stripe Capital |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-01 |
0 |
| Stripe |
Stripe Treasury |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-01 |
0 |
| Stripe |
Onboarding Verification Link Crawling |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-11-20 |
0 |
| Stripe |
Stripe Third Party Apps and Integrations |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-11-08 |
0 |
| Stripe |
Stripe Apps |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-26 |
10 |
| Stripe |
*.getbouncer.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-02-02 |
0 |
| Stripe |
api.taxjar.com |
Domain |
In Scope |
Critical |
Eligible |
2021-06-23 |
0 |
| Stripe |
app.taxjar.com |
Domain |
In Scope |
Critical |
Eligible |
2021-06-23 |
39 |
| Stripe |
www.stripe.partners |
Domain |
In Scope |
Critical |
Ineligible |
2022-05-03 |
0 |
| Stripe |
Stripe Atlas |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
0 |
| Stripe |
Stripe Sigma |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
1 |
| Stripe |
Stripe Radar |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
3 |
| Stripe |
Stripe Issuing |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
0 |
| Stripe |
Stripe Elements |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
2 |
| Stripe |
Stripe Terminal |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
5 |
| Stripe |
Stripe Connect |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
6 |
| Stripe |
Stripe Checkout |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-29 |
2 |
| Stripe |
*.reckostaging.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-03-07 |
1 |
| Stripe |
*.reckoproduction.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-03-07 |
0 |
| Stripe |
*.recko.io |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-03-07 |
3 |
| Stripe |
js.stripe.com |
Domain |
In Scope |
Critical |
Eligible |
2021-01-05 |
8 |
| Stripe |
*.stripe.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-12-07 |
74 |
| Stripe |
api.stripe.com |
Domain |
In Scope |
Critical |
Eligible |
2020-12-07 |
26 |
| Urban Company |
Other urbancompany.com subdomains except for the ones in-scope |
OtherAsset |
Out of Scope |
None |
Ineligible |
2020-09-22 |
0 |
| Urban Company |
1032480595 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-10-11 |
10 |
| Urban Company |
982922982 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-10-11 |
3 |
| Urban Company |
com.urbanclap.provider |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-10-11 |
21 |
| Urban Company |
com.urbanclap.urbanclap |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-10-11 |
21 |
| Urban Company |
www.urbanclap.com |
Domain |
In Scope |
Critical |
Eligible |
2020-09-22 |
57 |
| Urban Company |
www.urbancompany.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-11 |
116 |
| Reddit |
memorable.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-05-01 |
0 |
| Reddit |
business.reddithelp.com |
Domain |
In Scope |
Critical |
Eligible |
2024-07-08 |
0 |
| Reddit |
reddit.secure.force.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-16 |
0 |
| Reddit |
developers.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2024-06-26 |
18 |
| Reddit |
Core Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-06-26 |
2 |
| Reddit |
Non-Core Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-06-26 |
6 |
| Reddit |
ads.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2019-01-08 |
58 |
| Reddit |
iOS App |
OtherAsset |
In Scope |
High |
Eligible |
2024-06-25 |
2 |
| Reddit |
Android App |
OtherAsset |
In Scope |
High |
Eligible |
2024-06-25 |
9 |
| Reddit |
*.redditinc.com |
Wildcard |
In Scope |
Medium |
Eligible |
2019-01-07 |
22 |
| Reddit |
*.reddithelp.com |
Wildcard |
In Scope |
Medium |
Eligible |
2019-01-07 |
8 |
| Reddit |
*.spiketrap.io |
Wildcard |
In Scope |
Medium |
Eligible |
2024-06-25 |
0 |
| Reddit |
redditforbusiness.com |
Domain |
In Scope |
Medium |
Eligible |
2022-08-18 |
0 |
| Reddit |
*.redditmedia.com |
Wildcard |
In Scope |
High |
Eligible |
2021-03-23 |
15 |
| Reddit |
*.redditblog.com |
Wildcard |
In Scope |
Medium |
Eligible |
2019-01-07 |
0 |
| Reddit |
meta-api.reddit.com |
Domain |
In Scope |
High |
Eligible |
2020-05-12 |
2 |
| Reddit |
strapi.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2020-03-04 |
2 |
| Reddit |
sh.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2021-06-02 |
7 |
| Reddit |
new.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2019-01-07 |
11 |
| Reddit |
mod.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2019-01-07 |
2 |
| Reddit |
m.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2020-03-04 |
0 |
| Reddit |
gql.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2020-03-04 |
26 |
| Reddit |
gateway.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2020-03-04 |
3 |
| Reddit |
api.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2019-01-07 |
5 |
| Reddit |
amp.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2020-04-29 |
2 |
| Reddit |
accounts.reddit.com |
Domain |
In Scope |
Critical |
Eligible |
2020-03-04 |
8 |
| Reddit |
*.snooguts.net |
Wildcard |
In Scope |
Critical |
Eligible |
2020-07-28 |
31 |
| Reddit |
*.reddit.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-07-21 |
133 |
| Reddit |
matrix.redditspace.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-28 |
11 |
| CoinSpot |
https://www.coinspot.com.au/v2/api |
Url |
In Scope |
Critical |
Eligible |
2025-04-10 |
3 |
| CoinSpot |
com.coinspot.app |
AndroidPlayStore |
In Scope |
High |
Eligible |
2022-12-05 |
5 |
| CoinSpot |
1541949985 |
IosAppStore |
In Scope |
High |
Eligible |
2022-12-05 |
0 |
| CoinSpot |
www.coinspot.com.au |
Domain |
In Scope |
Critical |
Eligible |
2019-06-24 |
85 |
| Via |
ridewithvia.par.piercetransit |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-04 |
0 |
| Via |
6464473474 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-11-04 |
0 |
| Via |
https://pt-runner.app.ridewithvia.com |
Url |
In Scope |
Critical |
Eligible |
2024-11-04 |
4 |
| Via |
6449737830 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-11-04 |
0 |
| Via |
ridewithvia.neoridelittlerock |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-11-04 |
0 |
| Via |
https://metroconnect.app.ridewithvia.com |
Url |
In Scope |
Critical |
Eligible |
2024-11-04 |
7 |
| Via |
remix.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-12-11 |
0 |
| Via |
platform.remix.com |
Domain |
In Scope |
Critical |
Eligible |
2023-12-11 |
2 |
| Via |
eu.remix.com |
Domain |
In Scope |
Critical |
Eligible |
2023-12-11 |
2 |
| Via |
citymapper.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-09-12 |
0 |
| Via |
global-api.citymapper.com |
Domain |
In Scope |
Critical |
Eligible |
2023-09-12 |
3 |
| Via |
*.citymapper.com/ |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-09-12 |
0 |
| Via |
com.citymapper.app.release |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-09-12 |
2 |
| Via |
469463298 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-09-12 |
4 |
| Via |
*.drivewithvia.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-02-21 |
0 |
| Via |
ridewithvia.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-02-21 |
0 |
| Via |
ridewithvia.okta.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-02-14 |
0 |
| Via |
657777015 |
IosAppStore |
In Scope |
Critical |
Eligible |
2019-03-14 |
0 |
| Via |
via.rider |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2019-03-14 |
23 |
| Scopely |
com.scopely.yux |
IosAppStore |
In Scope |
Critical |
Ineligible |
2019-07-11 |
3 |
| Scopely |
com.withbuddies.dice.free |
IosAppStore |
In Scope |
Critical |
Ineligible |
2019-07-11 |
2 |
| Scopely |
com.pieyel.scrabble |
IosAppStore |
In Scope |
Critical |
Ineligible |
2019-07-11 |
0 |
| Scopely |
com.gsn.android.tripeaks |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2024-08-08 |
9 |
| Scopely |
air.com.bitrhymes.bingo |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2024-08-08 |
0 |
| Scopely |
com.gsn.grandcasino |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2024-08-08 |
5 |
| Scopely |
com.gsn.android.casino |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2024-08-08 |
7 |
| Scopely |
com.scopely.yux |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2019-07-11 |
4 |
| Scopely |
com.withbuddies.dice.free |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2019-07-11 |
0 |
| Scopely |
com.pieyel.scrabble |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2019-07-11 |
3 |
| Scopely |
id1541153375 |
IosAppStore |
In Scope |
Critical |
Ineligible |
2024-01-12 |
0 |
| Scopely |
com.kitkagames.fallbuddies |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2024-01-12 |
8 |
| Scopely |
Games Tier 3 |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-21 |
7 |
| Scopely |
id1621328561 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-11-20 |
0 |
| Scopely |
Games Tier 2 |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-04-24 |
5 |
| Scopely |
Games Tier 1 |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-04-24 |
0 |
| Scopely |
id1427744264 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-11-24 |
0 |
| Scopely |
com.scopely.startrek |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-11-24 |
1 |
| Scopely |
com.scopely.monopolygo |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-08-21 |
4 |
| Scopely |
*.withbuddies.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-09-25 |
19 |
| Scopely |
*.scopely.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-01-03 |
42 |
| Scopely |
*.scopely.io |
Wildcard |
In Scope |
Critical |
Eligible |
2017-07-31 |
51 |
| Scopely |
com.foxnextgames.m3 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-04-20 |
2 |
| Scopely |
com.foxnextgames.m3 |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-04-20 |
9 |
| Scopely |
bamboo.scopely.io |
Domain |
Out of Scope |
None |
Ineligible |
2022-02-03 |
0 |
| Scopely |
scopely.okta.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-11-02 |
0 |
| Scopely |
jira.scopely.io |
Domain |
Out of Scope |
None |
Ineligible |
2021-11-02 |
0 |
| Scopely |
confluence.scopely.io |
Domain |
Out of Scope |
None |
Ineligible |
2021-11-02 |
0 |
| FetLife |
fetlifemail.com |
Domain |
In Scope |
Critical |
Eligible |
2021-01-07 |
0 |
| FetLife |
bitlove.co |
Domain |
Out of Scope |
None |
Ineligible |
2023-11-15 |
0 |
| FetLife |
*.bitlove.co |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-11-15 |
0 |
| FetLife |
*.fetlife.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-06-24 |
41 |
| FetLife |
Requests to our ad endpoints (on any server): `/ads/serve`, `/ads/application_serve*`, and `/ads/click/*` |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-02-18 |
0 |
| FetLife |
co.bitlove.opensource.FetLife |
IosAppStore |
Out of Scope |
None |
Ineligible |
2021-01-13 |
0 |
| FetLife |
com.bitlove.fetlife |
AndroidApk |
Out of Scope |
None |
Ineligible |
2019-06-24 |
0 |
| FetLife |
n2.fetlife.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-08-03 |
0 |
| FetLife |
mail.fetlife.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-07-03 |
0 |
| FetLife |
fetlifestatus.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-06 |
0 |
| FetLife |
status.fetlife.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-06-07 |
0 |
| FetLife |
fetlife.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-24 |
180 |
| Lark Technologies |
1452166623 |
IosAppStore |
In Scope |
Critical |
Eligible |
2019-08-07 |
7 |
| Lark Technologies |
Mac OS Executable: Download here https://www.larksuite.com/download |
Executable |
In Scope |
Critical |
Eligible |
2019-06-26 |
1 |
| Lark Technologies |
Windows OS Executable: Download here https://www.larksuite.com/download |
Executable |
In Scope |
Critical |
Eligible |
2019-06-03 |
3 |
| Lark Technologies |
com.larksuite.suite |
AndroidApk |
In Scope |
Critical |
Eligible |
2019-09-05 |
19 |
| Lark Technologies |
hackers_chosendomain.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2020-11-30 |
32 |
| Lark Technologies |
internal-api-drive-stream.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
2 |
| Lark Technologies |
internal-api-lark-api.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
18 |
| Lark Technologies |
internal-api.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
9 |
| Lark Technologies |
passport.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
7 |
| Lark Technologies |
status.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
0 |
| Lark Technologies |
caldav.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
0 |
| Lark Technologies |
app.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
7 |
| Lark Technologies |
api.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
2 |
| Lark Technologies |
open.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
23 |
| Lark Technologies |
file.larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
0 |
| Lark Technologies |
lark-frontier.byteoversea.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-02 |
1 |
| Lark Technologies |
larksuite.com |
Domain |
In Scope |
Critical |
Eligible |
2019-05-30 |
224 |
| Exodus |
Exodus Mobile App Browser and Wallet Connect |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-09-15 |
0 |
| Exodus |
https://play.google.com/store/apps/details?id=com.exodus.grateful |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2025-12-29 |
0 |
| Exodus |
https://apps.apple.com/us/app/grateful-by-exodus/id6754093889 |
IosAppStore |
Out of Scope |
None |
Ineligible |
2025-12-29 |
0 |
| Exodus |
*.grateful.me |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-01-20 |
0 |
| Exodus |
Passkey Wallet |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-10-14 |
0 |
| Exodus |
my.passkeys.network |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
api.passkeys.network |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
wallet.passkeys.foundation |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
relay.passkeys.foundation |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
passkeys.foundation |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
embedded.passkeys.foundation |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
xoswap-graphql-p.a.exodus.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
xoswap-graphql.a.exodus.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
exchange-p.exodus.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
http://exchange-server.exodus.io |
Url |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
exchange-server.exodus.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
exchange-server-p.exodus.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
dashboard-p.xoswap.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
dashboard.xoswap.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
api.xoswap.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
api-p.xoswap.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-03 |
0 |
| Exodus |
Smart Contract: Solana mainnet - xoUSDq85Rjsb6SbUwJyreFgeWQvxdkT7R3c3g7s6p5Y |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
Smart Contract: Solana - EQYRmLmkE7G7a2WQyojwrXg4SeguypCdnbm3ecncizsd |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
https://www.npmjs.com/package/@exodus/safe-string |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
https://www.npmjs.com/package/@exodus/errors |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
https://www.npmjs.com/package/@exodus/sentry-client |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
https://www.npmjs.com/package/@exodus/keychain |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
https://github.com/ExodusOSS/hydra |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
https://github.com/ExodusOSS/bytes |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
https://github.com/ExodusOSS/crypto |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-05 |
0 |
| Exodus |
kyc.a.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
fiat-prod-fallback.a.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
fiat-p.a.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
fiat.a.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
ctr.a.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
nexotrack-p.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
nexotrack.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
turing.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
pay-admin.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
login.exodus.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
pay.exodus.io |
Domain |
In Scope |
Critical |
Eligible |
2026-08-03 |
0 |
| Exodus |
safeguard.a.exodus.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-02 |
0 |
| Exodus |
https://play.google.com/store/apps/details?id=exodusmovement.exodus&hl=en_IN |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-12-09 |
0 |
| Exodus |
https://apps.apple.com/us/app/exodus-crypto-bitcoin-wallet/id1414384820 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-12-09 |
0 |
| Exodus |
Exodus Browser Extension |
Executable |
Out of Scope |
None |
Ineligible |
2025-07-09 |
0 |
| Exodus |
http://exodus.com/keybase.txt |
Url |
Out of Scope |
None |
Ineligible |
2024-10-23 |
0 |
| Exodus |
https://exodus.atlassian.net |
Url |
Out of Scope |
None |
Ineligible |
2024-10-23 |
0 |
| Exodus |
*.atp-exodus.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-01-18 |
0 |
| Exodus |
*.exodus.com |
Wildcard |
In Scope |
High |
Eligible |
2021-02-17 |
20 |
| Exodus |
www.exodus.com/job-application/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-11-09 |
0 |
| Exodus |
get.exodus.* |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-11-05 |
0 |
| Exodus |
*.a.exodus.io |
Wildcard |
In Scope |
High |
Eligible |
2019-09-30 |
23 |
| Exodus |
*.exodus.io |
Wildcard |
In Scope |
High |
Eligible |
2019-09-30 |
35 |
| Exodus |
exodusstore.blob.core.windows.net |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-04 |
0 |
| Exodus |
exodus.atlassian.net |
Domain |
Out of Scope |
None |
Ineligible |
2022-02-16 |
0 |
| Exodus |
support.exodus.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-12-02 |
0 |
| Exodus |
http://www.exodus.com/contact-support |
Url |
Out of Scope |
None |
Ineligible |
2020-11-06 |
0 |
| Exodus |
support-helpers.a.exodus.io |
Domain |
Out of Scope |
None |
Ineligible |
2020-11-09 |
0 |
| Exodus |
slack-invite.exodus.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-11-09 |
0 |
| Exodus |
Exodus Desktop Wallet |
Executable |
In Scope |
Critical |
Eligible |
2019-09-30 |
5 |
| Exodus |
exodus-movement.exodus |
IosAppStore |
In Scope |
Critical |
Eligible |
2019-09-30 |
10 |
| Yoti |
Yoti Password Manager browser extension |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Yoti |
Yoti liveness detection campaign |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-03-14 |
0 |
| Yoti |
hub.yoti.com |
Domain |
In Scope |
Critical |
Eligible |
2024-02-13 |
0 |
| Yoti |
www.yotisign.com |
Domain |
In Scope |
Critical |
Eligible |
2020-05-06 |
18 |
| Yoti |
www.yoti.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-05-18 |
0 |
| Yoti |
identity.yoti.com |
Domain |
In Scope |
Critical |
Eligible |
2024-02-13 |
0 |
| Yoti |
developers.yoti.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-12-09 |
0 |
| Yoti |
983980808 |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-10-11 |
4 |
| Yoti |
com.yoti.mobile.android.live |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-10-11 |
5 |
| Yoti |
ccloud.yoti.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-11 |
1 |
| Yoti |
api.yoti.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-11 |
3 |
| Yoti |
core.yoti.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-11 |
6 |
| Yoti |
code.yoti.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-11 |
6 |
| Netlify |
*.netlifycms.org |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-10-16 |
0 |
| Netlify |
https://github.com/netlify/ |
Url |
Out of Scope |
None |
Ineligible |
2023-05-22 |
0 |
| Netlify |
www.netlify.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-08-09 |
0 |
| Netlify |
*.netlify.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-10-28 |
0 |
| Netlify |
*.ops.netlify.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-10-28 |
2 |
| Netlify |
*.infra-prod.nsvcs.net |
Wildcard |
In Scope |
Critical |
Eligible |
2022-10-28 |
1 |
| Netlify |
*.services-prod.nsvcs.net |
Wildcard |
In Scope |
Critical |
Eligible |
2022-10-28 |
1 |
| Netlify |
*.services.netlify.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-10-28 |
0 |
| Netlify |
*.onegraph.com |
Wildcard |
In Scope |
High |
Eligible |
2022-10-28 |
6 |
| Netlify |
*.netlify.app |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-10-12 |
0 |
| Netlify |
netlify-cdp-loader.netlify.app |
Domain |
In Scope |
Critical |
Eligible |
2022-10-28 |
0 |
| Netlify |
internal.netlify.com |
Domain |
In Scope |
Critical |
Eligible |
2022-10-28 |
3 |
| Netlify |
app.netlify.com |
Domain |
In Scope |
Critical |
Eligible |
2017-08-09 |
101 |
| Netlify |
supportal.netlify.app |
Domain |
In Scope |
Medium |
Eligible |
2023-03-22 |
0 |
| Netlify |
answers.netlify.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-28 |
0 |
| Netlify |
docs.netlify.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-28 |
0 |
| Netlify |
api.netlify.com |
Domain |
In Scope |
Critical |
Eligible |
2017-08-09 |
57 |
| Netlify |
list-v2--netlify-plugins.netlify.app |
Domain |
In Scope |
Medium |
Eligible |
2022-10-28 |
0 |
| Netlify |
internal-docs.netlify.com |
Domain |
In Scope |
Medium |
Eligible |
2022-10-28 |
0 |
| Netlify |
netlify-rum.netlify.app |
Domain |
In Scope |
Medium |
Eligible |
2022-10-28 |
0 |
| Netlify |
screenshot-proxy.netlify.app |
Domain |
In Scope |
Medium |
Eligible |
2022-10-28 |
0 |
| Netlify |
webpop.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-23 |
0 |
| Basecamp |
https://github.com/basecamp/trix |
SourceCode |
In Scope |
Critical |
Ineligible |
2026-09-05 |
0 |
| Basecamp |
app.fizzy.do |
Domain |
In Scope |
Critical |
Ineligible |
2025-12-03 |
28 |
| Basecamp |
app.basecamp.com |
Domain |
In Scope |
Critical |
Eligible |
2018-01-11 |
119 |
| Basecamp |
basecamp-setup.exe |
Executable |
In Scope |
Critical |
Eligible |
2018-01-11 |
12 |
| Basecamp |
https://github.com/basecamp/once-campfire |
SourceCode |
In Scope |
High |
Ineligible |
2026-03-17 |
4 |
| Basecamp |
https://github.com/basecamp/writebook |
SourceCode |
In Scope |
High |
Ineligible |
2026-03-17 |
9 |
| Basecamp |
*.hey.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-09-03 |
140 |
| Basecamp |
*.highrisehq.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-04-11 |
0 |
| Basecamp |
*.basecamphq.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-01-11 |
0 |
| Basecamp |
world.hey.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-05 |
1 |
| Basecamp |
HEY.exe |
WindowsMicrosoftStore |
In Scope |
Critical |
Eligible |
2020-09-03 |
3 |
| Basecamp |
basecamp.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-01-11 |
0 |
| Basecamp |
com.basecamp.bc3-ios |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-01-11 |
1 |
| Basecamp |
com.hey.app.ios |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-09-03 |
1 |
| Basecamp |
HEY.app |
Executable |
In Scope |
Critical |
Eligible |
2020-09-03 |
4 |
| Basecamp |
Basecamp.app |
Executable |
In Scope |
Critical |
Eligible |
2018-01-11 |
8 |
| Basecamp |
hey-mail |
Executable |
In Scope |
Critical |
Eligible |
2020-09-03 |
1 |
| Basecamp |
com.basecamp.bc3 |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-01-11 |
18 |
| Basecamp |
com.basecamp.hey |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-09-03 |
12 |
| Basecamp |
launchpad.37signals.com |
Domain |
In Scope |
Critical |
Eligible |
2018-01-11 |
38 |
| TikTok |
6754134922 |
IosAppStore |
Out of Scope |
None |
Ineligible |
2026-08-17 |
0 |
| TikTok |
com.ss.android.ttmd.video |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2026-08-17 |
0 |
| TikTok |
drama.tiktok.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-17 |
0 |
| TikTok |
shortdrama.tiktok.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-08-17 |
0 |
| TikTok |
usds.tiktok.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
usdsjv.tiktok.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
p19-webcast.tiktokcdn-us.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
p19-sign.tiktokcdn-us.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
p16-webcast.tiktokcdn-us.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
p16-sign.tiktokcdn-us.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
p16-bg.tiktokcdn-us.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
*us.tiktokv.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
*tiktokv.us |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-06-29 |
0 |
| TikTok |
*.soundon.global |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-08 |
1 |
| TikTok |
www.soundon.global |
Domain |
In Scope |
Critical |
Eligible |
2026-06-08 |
0 |
| TikTok |
Other Asset (Campaigns) |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-03-13 |
0 |
| TikTok |
https://developers.tiktok.com/minis/ |
Url |
Out of Scope |
None |
Ineligible |
2026-02-23 |
0 |
| TikTok |
*.tiktokcdn.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-11-13 |
1 |
| TikTok |
*.tiktokpublishers.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-11-13 |
1 |
| TikTok |
*.pipopay.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-10-16 |
2 |
| TikTok |
pay.tokopediax.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-04 |
5 |
| TikTok |
shop-id.tokopedia.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-04 |
3 |
| TikTok |
seller-id.tokopedia.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-04 |
52 |
| TikTok |
affiliate-id.tokopedia.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-04 |
13 |
| TikTok |
fp-sg.tiktokv.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-15 |
1 |
| TikTok |
1591003012 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-10-02 |
4 |
| TikTok |
com.tiktokshop.seller |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-10-02 |
17 |
| TikTok |
www.pangleglobal.com |
Domain |
In Scope |
Critical |
Eligible |
2023-10-02 |
31 |
| TikTok |
academy-outbound-ads.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2023-10-02 |
3 |
| TikTok |
live-backstage.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-06 |
29 |
| TikTok |
com.zhiliao.musically.livewallpaper |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-03-02 |
0 |
| TikTok |
shop.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-02 |
12 |
| TikTok |
com.tiktok.tv |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-03-02 |
0 |
| TikTok |
partner.tiktokshop.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-02 |
23 |
| TikTok |
641062073 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-10-11 |
0 |
| TikTok |
1235601864 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-07-21 |
9 |
| TikTok |
835599320 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-07-16 |
17 |
| TikTok |
com.ss.android.ugc.now |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-10-11 |
8 |
| TikTok |
com.ss.android.ugc.trill |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-07-21 |
38 |
| TikTok |
com.zhiliaoapp.musically |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-07-16 |
95 |
| TikTok |
effecthouse.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2022-09-14 |
8 |
| TikTok |
developers.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2020-10-09 |
20 |
| TikTok |
*.tiktokv.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-10-09 |
185 |
| TikTok |
creatormarketplace.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2020-10-09 |
26 |
| TikTok |
careers.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2020-10-09 |
8 |
| TikTok |
tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-27 |
87 |
| TikTok |
ads.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-27 |
459 |
| TikTok |
business.tiktok.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-19 |
36 |
| TikTok |
*.tiktok.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-07-16 |
383 |
| Logitech |
Logitech Capture |
Executable |
Out of Scope |
None |
Ineligible |
2026-10-02 |
0 |
| Logitech |
logiq.logitech.io |
Domain |
In Scope |
Critical |
Eligible |
2026-02-12 |
0 |
| Logitech |
*.logitechg.com* |
Wildcard |
In Scope |
Critical |
Ineligible |
2025-08-01 |
2 |
| Logitech |
*.logicool.co.jp |
Wildcard |
In Scope |
Medium |
Ineligible |
2025-04-01 |
2 |
| Logitech |
https://www.logitech.com/blog |
Url |
In Scope |
Critical |
Ineligible |
2025-03-25 |
1 |
| Logitech |
www.jaybirdsport.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-28 |
8 |
| Logitech |
Logitech MIXLINE |
Executable |
In Scope |
Critical |
Eligible |
2024-04-30 |
0 |
| Logitech |
*.crossclip.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2021-08-12 |
2 |
| Logitech |
*.logi.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2021-05-08 |
14 |
| Logitech |
*.mevo.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2021-05-06 |
2 |
| Logitech |
*.wlo.link |
Wildcard |
In Scope |
Critical |
Ineligible |
2021-03-09 |
4 |
| Logitech |
*.logitech.io |
Wildcard |
In Scope |
Critical |
Ineligible |
2021-02-22 |
23 |
| Logitech |
*.wilife.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-10-21 |
0 |
| Logitech |
*.lucra.live |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-10-21 |
8 |
| Logitech |
*.oslo.io |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-10-20 |
9 |
| Logitech |
*.melonapp.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-10-20 |
8 |
| Logitech |
*.streamlabscharity.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-10-20 |
13 |
| Logitech |
*.myharmony.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-08-24 |
33 |
| Logitech |
*.streamlabs.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-07-30 |
355 |
| Logitech |
*.uesmartradio.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-30 |
5 |
| Logitech |
*.slimdevices.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-30 |
5 |
| Logitech |
*.harmonyremote.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-30 |
16 |
| Logitech |
*vc.logitech.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-07-29 |
5 |
| Logitech |
*.cognitiveperformer.com |
Wildcard |
In Scope |
Medium |
Ineligible |
2020-07-29 |
0 |
| Logitech |
*.logitech-channel-marketing.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-29 |
1 |
| Logitech |
*.logitechauthorization.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-28 |
0 |
| Logitech |
*.logitechmusic.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-28 |
1 |
| Logitech |
*.lukwerks.com |
Wildcard |
In Scope |
Medium |
Ineligible |
2020-07-28 |
0 |
| Logitech |
*.mysqueezebox.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-28 |
10 |
| Logitech |
*.saitek.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-07-28 |
0 |
| Logitech |
*.saitek-fr.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-07-28 |
0 |
| Logitech |
*.saitekforum.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-07-28 |
0 |
| Logitech |
*.ultimateearsuniversity.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-28 |
0 |
| Logitech |
*.logitech.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2020-07-28 |
129 |
| Logitech |
www.logitech.com.cn |
Domain |
In Scope |
Critical |
Eligible |
2020-07-29 |
2 |
| Logitech |
www.ultimateears.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-28 |
21 |
| Logitech |
www.astrogaming.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-28 |
10 |
| Logitech |
gaming.logicool.co.jp |
Domain |
In Scope |
Critical |
Eligible |
2022-09-27 |
3 |
| Logitech |
logitechg.com.cn |
Domain |
In Scope |
Critical |
Eligible |
2022-09-27 |
4 |
| Logitech |
www.logitechg.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-28 |
17 |
| Logitech |
www.logicool.co.jp |
Domain |
In Scope |
Critical |
Eligible |
2022-09-27 |
3 |
| Logitech |
www.logitech.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-28 |
44 |
| Logitech |
Logi Options+ PC/MAC |
Executable |
In Scope |
High |
Eligible |
2022-05-26 |
19 |
| Logitech |
select.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2022-07-29 |
0 |
| Logitech |
G Hub |
Executable |
In Scope |
High |
Eligible |
2020-08-02 |
19 |
| Logitech |
Harmony Remotes |
Hardware |
In Scope |
High |
Ineligible |
2020-07-28 |
1 |
| Logitech |
www.logitechclub.com |
Domain |
In Scope |
Critical |
Ineligible |
2021-07-21 |
8 |
| Logitech |
logitechgchallenge.com |
Domain |
In Scope |
Critical |
Ineligible |
2021-06-29 |
0 |
| Logitech |
Circle Cameras |
Hardware |
In Scope |
Critical |
Eligible |
2020-07-28 |
0 |
| Logitech |
Logitech Alert Cameras |
Hardware |
Out of Scope |
None |
Ineligible |
2020-08-02 |
0 |
| Logitech |
1294578643 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-07-30 |
0 |
| Logitech |
Squeezebox Products |
Hardware |
Out of Scope |
None |
Ineligible |
2020-08-02 |
0 |
| Logitech |
Logitech Options PC/MAC |
Executable |
In Scope |
High |
Ineligible |
2020-08-05 |
5 |
| Logitech |
Other Logitech Desktop and Mobile Application |
Executable |
In Scope |
Critical |
Ineligible |
2020-07-30 |
4 |
| Logitech |
Harmony Remote Software |
Executable |
In Scope |
Critical |
Ineligible |
2020-08-06 |
1 |
| Logitech |
Other Logitech Hardware/IoT |
Hardware |
In Scope |
Critical |
Ineligible |
2020-08-06 |
0 |
| Logitech |
Scope Questions: Items not explicitly listed here |
OtherAsset |
In Scope |
Critical |
Ineligible |
2020-07-28 |
15 |
| Logitech |
alert.logitech.com |
Domain |
In Scope |
High |
Ineligible |
2020-08-02 |
2 |
| Logitech |
support.logi.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-30 |
4 |
| Logitech |
feedback.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-30 |
0 |
| Logitech |
partner.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2018-12-10 |
2 |
| Logitech |
jira.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-30 |
17 |
| Logitech |
buy.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-29 |
3 |
| Logitech |
outage.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-29 |
0 |
| Logitech |
outagehistory.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-29 |
0 |
| Logitech |
external.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-29 |
18 |
| Logitech |
logilife.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-29 |
0 |
| Logitech |
logitech.zendesk.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-29 |
1 |
| Logitech |
www.logitech-partner.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-28 |
0 |
| Logitech |
maintenance.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-28 |
0 |
| Logitech |
www.logitechstore.com.br |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-30 |
7 |
| Logitech |
community.logitech.com |
Domain |
In Scope |
Critical |
Ineligible |
2020-07-28 |
0 |
| Logitech |
1456293789 |
IosAppStore |
In Scope |
High |
Eligible |
2020-07-30 |
0 |
| Logitech |
632344648 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-07-28 |
0 |
| Logitech |
1476615877 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-07-30 |
0 |
| Logitech |
1018340690 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-07-28 |
0 |
| Logitech |
Logi Tune PC/MAC |
Executable |
In Scope |
High |
Eligible |
2020-07-30 |
14 |
| Logitech |
Logitech Sync |
Executable |
In Scope |
Critical |
Eligible |
2020-07-30 |
18 |
| Logitech |
Streamlabs Desktop Application PC/MAC |
Executable |
In Scope |
Critical |
Eligible |
2020-07-30 |
9 |
| Logitech |
com.logitech.logue |
AndroidPlayStore |
In Scope |
High |
Eligible |
2020-07-30 |
0 |
| Logitech |
com.streamlabs |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-07-30 |
2 |
| Logitech |
com.logitech.circle |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-07-28 |
2 |
| Logitech |
com.streamlabs.slobsrc |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-07-30 |
0 |
| Logitech |
com.logitech.ueboom |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-07-28 |
4 |
| Logitech |
Ultimate Ears Speakers |
Hardware |
In Scope |
Medium |
Eligible |
2020-07-28 |
1 |
| Logitech |
Logitech Mice & Keyboards |
Hardware |
In Scope |
High |
Eligible |
2020-08-06 |
0 |
| Logitech |
Presentation Remotes |
Hardware |
In Scope |
High |
Eligible |
2020-07-28 |
0 |
| Logitech |
Video Conferencing Products |
Hardware |
In Scope |
Critical |
Eligible |
2020-07-30 |
3 |
| Logitech |
USB Unifying and LightSpeed Receivers |
Hardware |
In Scope |
Critical |
Eligible |
2020-07-30 |
0 |
| Logitech |
accounts.logi.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-28 |
6 |
| Logitech |
sync.logitech.com |
Domain |
In Scope |
Critical |
Eligible |
2020-08-03 |
30 |
| Logitech |
circle.logi.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-28 |
3 |
| Logitech |
id.logi.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-28 |
17 |
| Enjin |
platform.enjin.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-01-08 |
0 |
| Enjin |
Enjin Blockchain |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-06-11 |
1 |
| Enjin |
*.enjinusercontent.com |
Wildcard |
In Scope |
Low |
Ineligible |
2024-06-11 |
2 |
| Enjin |
cdn.enjin.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-06-11 |
0 |
| Enjin |
assets.enjin.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-06-11 |
0 |
| Enjin |
support.nft.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-03-14 |
0 |
| Enjin |
support.enjin.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-03-14 |
0 |
| Enjin |
faucet.canary.enjin.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-01-08 |
0 |
| Enjin |
nft.io |
Domain |
In Scope |
Critical |
Eligible |
2024-01-08 |
20 |
| Enjin |
cdn.nft.io |
Domain |
Out of Scope |
None |
Ineligible |
2024-01-08 |
0 |
| Enjin |
docs.enjin.io |
Domain |
Out of Scope |
None |
Ineligible |
2020-09-29 |
0 |
| Enjin |
com.enjin.mobile.wallet |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-09-29 |
13 |
| Enjin |
com.enjin.mobile.wallet |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-09-29 |
4 |
| Enjin |
enjin.io |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-04 |
0 |
| Enjin |
enj.in |
Domain |
Out of Scope |
None |
Ineligible |
2020-09-29 |
0 |
| Figma |
Figma Weave |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-07-07 |
16 |
| Figma |
Figma for Microsoft Teams |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-12 |
0 |
| Figma |
Figma Slack App |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-12 |
1 |
| Figma |
Figma iOS and Android apps |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-09-22 |
1 |
| Figma |
Figma Desktop App |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-09-22 |
8 |
| Figma |
www.designsystems.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-04-21 |
0 |
| Figma |
Figma Atlassian App |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-05-22 |
2 |
| Figma |
www.figma.com |
Domain |
In Scope |
Critical |
Eligible |
2020-04-02 |
234 |
| Figma |
api.figma.com |
Domain |
In Scope |
Critical |
Eligible |
2020-04-04 |
13 |
| CS Money |
blog.cs.money |
Domain |
In Scope |
Critical |
Eligible |
2020-03-23 |
7 |
| CS Money |
grafana.cs.money |
Domain |
Out of Scope |
None |
Ineligible |
2020-05-20 |
0 |
| CS Money |
CS.Money Antiscam |
OtherAsset |
Out of Scope |
None |
Ineligible |
2020-03-23 |
0 |
| CS Money |
wiki.cs.money |
Domain |
In Scope |
Medium |
Eligible |
2020-03-23 |
17 |
| CS Money |
support.cs.money |
Domain |
In Scope |
Critical |
Eligible |
2020-03-23 |
26 |
| CS Money |
3d.cs.money |
Domain |
In Scope |
Medium |
Eligible |
2020-03-23 |
20 |
| CS Money |
cs.money |
Domain |
In Scope |
Critical |
Eligible |
2020-03-23 |
66 |
| CS Money |
old.cs.money |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-23 |
0 |
| Faraday, Inc. |
s3://faraday-uploads |
OtherAsset |
Out of Scope |
None |
Ineligible |
2019-12-06 |
0 |
| Faraday, Inc. |
api.row.pro |
Domain |
In Scope |
Critical |
Eligible |
2026-09-17 |
0 |
| Faraday, Inc. |
api.faraday.ai |
Domain |
In Scope |
Critical |
Eligible |
2024-02-12 |
6 |
| Faraday, Inc. |
faraday.atlassian.net |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-17 |
0 |
| Faraday, Inc. |
api.pro.faraday.ai |
Domain |
In Scope |
Critical |
Eligible |
2026-09-17 |
1 |
| Faraday, Inc. |
BigQuery |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-17 |
0 |
| Faraday, Inc. |
faraday.ai |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-17 |
0 |
| Faraday, Inc. |
gs://fdy-production-sdk-uploads |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-11-07 |
0 |
| Faraday, Inc. |
gs://faraday-secret |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-11-07 |
0 |
| Faraday, Inc. |
s3://faraday-secret |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-12-06 |
0 |
| Faraday, Inc. |
vault2.faraday.ai |
Domain |
In Scope |
Critical |
Eligible |
2025-11-07 |
0 |
| Faraday, Inc. |
mcp.faraday.ai |
Domain |
In Scope |
Critical |
Eligible |
2026-09-17 |
0 |
| Faraday, Inc. |
pro.faraday.ai |
Domain |
In Scope |
Critical |
Eligible |
2026-09-17 |
0 |
| Faraday, Inc. |
row.pro |
Domain |
In Scope |
Critical |
Eligible |
2026-05-13 |
0 |
| Faraday, Inc. |
app.faraday.ai |
Domain |
In Scope |
Critical |
Eligible |
2024-02-12 |
14 |
| Faraday, Inc. |
Support Live Chat |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-11-07 |
0 |
| Acronis |
Other Acronis executables |
Executable |
In Scope |
Critical |
Eligible |
2022-09-05 |
4 |
| Acronis |
Acronis Snap Deploy |
Executable |
In Scope |
Critical |
Eligible |
2021-04-01 |
5 |
| Acronis |
training.acronis.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-31 |
0 |
| Acronis |
learn.acronis.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-01-15 |
0 |
| Acronis |
Acronis True Image (formerly Acronis Cyber Protect Home Office) |
Executable |
In Scope |
Critical |
Eligible |
2024-11-06 |
2 |
| Acronis |
beta-cloud.acronis.com |
Domain |
In Scope |
Critical |
Eligible |
2018-08-28 |
270 |
| Acronis |
978342143 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-06-23 |
1 |
| Acronis |
com.acronis.acronistrueimage |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-06-23 |
2 |
| Acronis |
com.acronis.abc |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-06-23 |
0 |
| Acronis |
*.acronis.work |
Wildcard |
In Scope |
Critical |
Eligible |
2022-05-03 |
11 |
| Acronis |
*.devicelock.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-03-09 |
47 |
| Acronis |
*.5nine.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-03-09 |
19 |
| Acronis |
*.acronis.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-07-15 |
630 |
| Acronis |
*-api-*.acronis.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-08-28 |
2 |
| Acronis |
1192506963 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-10-12 |
0 |
| Acronis |
1118448159 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-06-23 |
0 |
| Acronis |
account.acronis.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-15 |
15 |
| Acronis |
Acronis Agent |
Executable |
In Scope |
Critical |
Eligible |
2020-06-23 |
26 |
| Acronis |
Acronis Cloud Manager |
Executable |
In Scope |
Critical |
Eligible |
2023-02-22 |
8 |
| Acronis |
Acronis Cyber Protect |
Executable |
In Scope |
Critical |
Eligible |
2020-07-15 |
29 |
| Acronis |
Acronis DeviceLock DLP |
Executable |
In Scope |
Critical |
Eligible |
2021-04-01 |
0 |
| Acronis |
Acronis Cyber Infrastructure |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-15 |
0 |
| Acronis |
Other Acronis Domains |
OtherAsset |
In Scope |
Medium |
Eligible |
2018-09-03 |
347 |
| Affirm |
sandbox.affirm.com |
Domain |
In Scope |
Critical |
Eligible |
2024-02-28 |
20 |
| Affirm |
*.affirm.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-05-17 |
0 |
| Affirm |
com.affirm.central.audit |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-05-17 |
6 |
| Affirm |
com.affirm.internal.hackerone |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-11-22 |
4 |
| PlayStation |
*.playstation.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2026-05-15 |
6 |
| PlayStation |
www.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2026-05-15 |
0 |
| PlayStation |
web.np.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2026-05-15 |
1 |
| PlayStation |
compete.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2026-05-15 |
0 |
| PlayStation |
session-share.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2026-05-15 |
1 |
| PlayStation |
profile.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2026-05-15 |
1 |
| PlayStation |
checkout.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2025-09-19 |
3 |
| PlayStation |
Android Playstation App |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-03-25 |
2 |
| PlayStation |
iOS Playstation App |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-03-25 |
1 |
| PlayStation |
ps5.np.playstation.net |
Domain |
In Scope |
Critical |
Eligible |
2025-02-25 |
1 |
| PlayStation |
my.account.sony.com |
Domain |
In Scope |
Critical |
Eligible |
2023-08-24 |
2 |
| PlayStation |
ca.account.sony.com |
Domain |
In Scope |
Critical |
Eligible |
2023-08-24 |
2 |
| PlayStation |
PlayStation 5 |
Hardware |
In Scope |
Critical |
Eligible |
2020-10-23 |
31 |
| PlayStation |
PlayStation 4 |
Hardware |
In Scope |
Critical |
Eligible |
2019-11-22 |
37 |
| PlayStation |
api.direct.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2020-08-19 |
7 |
| PlayStation |
direct.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2020-08-19 |
17 |
| PlayStation |
wallets.api.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2019-11-22 |
0 |
| PlayStation |
transact.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2019-11-22 |
4 |
| PlayStation |
social.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2019-11-22 |
8 |
| PlayStation |
store.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2019-11-22 |
10 |
| PlayStation |
my.playstation.com |
Domain |
In Scope |
Critical |
Eligible |
2019-11-22 |
11 |
| PlayStation |
*.api.playstation.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-11-22 |
35 |
| PlayStation |
*.sonyentertainmentnetwork.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-11-22 |
91 |
| PlayStation |
*.playstation.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-11-22 |
262 |
| Polygon Technology |
https://github.com/maticnetwork/bor |
SourceCode |
Out of Scope |
None |
Ineligible |
2020-05-18 |
0 |
| Polygon Technology |
https://github.com/0xPolygon/heimdall-v2 |
SourceCode |
Out of Scope |
None |
Ineligible |
2025-08-29 |
0 |
| Polygon Technology |
https://github.com/maticnetwork/matic-cli |
SourceCode |
Out of Scope |
None |
Ineligible |
2024-07-05 |
0 |
| Polygon Technology |
https://github.com/maticnetwork/heimdall |
SourceCode |
Out of Scope |
None |
Ineligible |
2020-05-18 |
0 |
| Polygon Technology |
api-polygon-tokens.polygon.technology/ |
Api |
In Scope |
High |
Eligible |
2024-07-23 |
0 |
| Polygon Technology |
gasstation.polygon.technology/ |
Api |
In Scope |
High |
Eligible |
2024-07-23 |
2 |
| Polygon Technology |
api-gateway.polygon.technology |
Api |
In Scope |
Critical |
Eligible |
2024-07-23 |
5 |
| Polygon Technology |
faucet-api.polygon.technology/ |
Api |
In Scope |
High |
Eligible |
2024-07-23 |
1 |
| Polygon Technology |
staking.polygon.technology |
Domain |
In Scope |
Critical |
Eligible |
2024-07-23 |
3 |
| Polygon Technology |
portal.polygon.technology |
Domain |
In Scope |
Critical |
Eligible |
2023-12-12 |
6 |
| Polygon Technology |
*.matic.network |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-05-18 |
0 |
| Polygon Technology |
staking-api.polygon.technology |
Domain |
In Scope |
Critical |
Eligible |
2022-09-22 |
3 |
| Polygon Technology |
faucet.polygon.technology |
Domain |
In Scope |
Critical |
Eligible |
2022-09-22 |
2 |
| Polygon Technology |
https://github.com/maticnetwork/contracts |
SourceCode |
Out of Scope |
None |
Ineligible |
2020-05-18 |
0 |
| Xiaomi |
*.xiaomimimo.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-26 |
4 |
| Xiaomi |
Other APK Assets |
OtherAsset |
In Scope |
High |
Eligible |
2020-05-19 |
46 |
| Xiaomi |
Mi/Redmi Phone |
Hardware |
In Scope |
High |
Eligible |
2019-04-01 |
39 |
| Xiaomi |
Mi TV |
Hardware |
In Scope |
High |
Eligible |
2019-04-01 |
0 |
| Xiaomi |
MIUI OS for Xiaomi Phone |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-05-20 |
53 |
| Xiaomi |
Mi Band |
Hardware |
In Scope |
High |
Eligible |
2019-04-01 |
4 |
| Xiaomi |
*.zmifi.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.youpin.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.xunkids.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
4 |
| Xiaomi |
*.xunkid.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.xiaomiwear.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.xiaomiprint.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.xiaomimobile.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
2 |
| Xiaomi |
*.xiaomiev.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
2 |
| Xiaomi |
*.xiaomi.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.xiaomi.net |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
1 |
| Xiaomi |
*.xiangkannews.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.xiangkankeji.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.xiangkankeji.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.wali.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
2 |
| Xiaomi |
*.openvela.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.oktukids.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.miui.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.mipay.net |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.mipay.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
2 |
| Xiaomi |
*.miot-spec.org |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.mios.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.mioffice.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
5 |
| Xiaomi |
*.mijiayoupin.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.miinsurtech.net |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.miinsurtech.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
2 |
| Xiaomi |
*.miinsurtech.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.migames.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.mifile.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.mi.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.hongyuanib.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.duokan.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
1 |
| Xiaomi |
*.baoliyun.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.aleenote.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.aleenote.cn |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
0 |
| Xiaomi |
*.airstarfinance.net |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
1 |
| Xiaomi |
*.airstar.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
9 |
| Xiaomi |
*.airstar-finance.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-03-25 |
1 |
| Xiaomi |
*.miwifi.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-03-13 |
9 |
| Xiaomi |
*.xiaomiyoupin.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-03-13 |
19 |
| Xiaomi |
*.miui.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-03-13 |
60 |
| Xiaomi |
*.xiaomi.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-03-28 |
274 |
| Xiaomi |
*.mi.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-03-28 |
529 |
| Xiaomi |
com.android.browser |
AndroidApk |
In Scope |
High |
Eligible |
2020-05-19 |
42 |
| Xiaomi |
Mi Robot Vacuum |
Hardware |
In Scope |
High |
Eligible |
2019-04-01 |
4 |
| Xiaomi |
Mi TV Box |
Hardware |
In Scope |
High |
Eligible |
2019-04-01 |
0 |
| Xiaomi |
Mi Laser Projector |
Hardware |
In Scope |
High |
Eligible |
2019-04-01 |
0 |
| Xiaomi |
Mi Electric Scooter |
Hardware |
In Scope |
High |
Eligible |
2019-04-01 |
2 |
| Xiaomi |
Mi Home Webcam |
Hardware |
In Scope |
High |
Eligible |
2019-04-01 |
5 |
| Xiaomi |
Other Hardware Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-05-19 |
30 |
| Xiaomi |
com.xiaomi.market |
AndroidApk |
In Scope |
Critical |
Eligible |
2019-04-01 |
13 |
| Xiaomi |
com.xiaomi.mibrain.speech |
AndroidApk |
In Scope |
Critical |
Eligible |
2019-04-01 |
0 |
| Xiaomi |
com.xiaomi.account |
AndroidApk |
In Scope |
Critical |
Eligible |
2019-04-01 |
7 |
| Xiaomi |
com.miui.cloudbackup |
AndroidApk |
In Scope |
Critical |
Eligible |
2020-05-19 |
0 |
| Xiaomi |
com.miui.cloudservice |
AndroidApk |
In Scope |
Critical |
Eligible |
2020-05-19 |
1 |
| Xiaomi |
com.mi.global.shop |
AndroidApk |
In Scope |
Critical |
Eligible |
2019-04-01 |
9 |
| Xiaomi |
com.miui.micloudsync |
AndroidApk |
In Scope |
Critical |
Eligible |
2019-04-01 |
0 |
| Xiaomi |
com.xiaomi.smarthome |
AndroidApk |
In Scope |
Critical |
Eligible |
2019-04-01 |
11 |
| Xiaomi |
com.xiaomi.payment |
AndroidApk |
In Scope |
Critical |
Eligible |
2020-05-19 |
1 |
| Xiaomi |
com.xiaomi.mipicks |
AndroidApk |
In Scope |
Critical |
Eligible |
2020-05-19 |
2 |
| Xiaomi |
com.xiaomi.micloud.sdk |
AndroidApk |
In Scope |
Critical |
Eligible |
2020-05-19 |
0 |
| Flutter UK&I |
metrocompetitions.com |
Domain |
In Scope |
Critical |
Eligible |
2026-09-16 |
0 |
| Flutter UK&I |
*.ppbdev.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-09-08 |
2 |
| Flutter UK&I |
*.ppb.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-06-02 |
0 |
| Flutter UK&I |
rafflee.co.uk |
Domain |
In Scope |
Critical |
Eligible |
2025-12-19 |
9 |
| Flutter UK&I |
https://play.google.com/store/apps/dev?id=5503565801970655430&gl=gb |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-07-11 |
0 |
| Flutter UK&I |
https://play.google.com/store/apps/dev?id=8912907283039023448&gl=GB |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-07-11 |
0 |
| Flutter UK&I |
https://play.google.com/store/apps/dev?id=9151483005769461618&gl=GB |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-07-11 |
0 |
| Flutter UK&I |
https://play.google.com/store/apps/developer?id=Sky+Betting+and+Gaming+Apps&gl=uk |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-07-11 |
0 |
| Flutter UK&I |
support.developer.betfair.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-10-10 |
0 |
| Flutter UK&I |
*.technology.skybettingandgaming.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-10-16 |
0 |
| Flutter UK&I |
*.sbagmail.skybettingandgaming.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-10-16 |
0 |
| Flutter UK&I |
*.dibz.co.uk |
Wildcard |
In Scope |
Critical |
Eligible |
2023-09-27 |
1 |
| Flutter UK&I |
super6.skysports.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-07 |
1 |
| Flutter UK&I |
itv7.itv.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-07 |
1 |
| Flutter UK&I |
*.sportinglife.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
5 |
| Flutter UK&I |
*.skybusinessemail.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-02-25 |
0 |
| Flutter UK&I |
*.betfair.com.au |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-06 |
0 |
| Flutter UK&I |
*.us.betfair.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-02-17 |
0 |
| Flutter UK&I |
*.paddypartners.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-06-15 |
3 |
| Flutter UK&I |
online.*.skybingo.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-08-08 |
0 |
| Flutter UK&I |
*.email.skybet.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-20 |
0 |
| Flutter UK&I |
*.sbgmail.skybettingandgaming.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-20 |
0 |
| Flutter UK&I |
*.s6.sbgservices.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-20 |
0 |
| Flutter UK&I |
*.sbggraduates.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybetgraduates.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.sbgcolab.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.sbgdataintl.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybetchiusuraconto.it |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybet-it.info |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.sbg.life |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.sbga.me |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.sbgpeople.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybettingandgamingresearch.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybetpartner.de |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybetcareers.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybet.it |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybet.de |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.sbpartner.it |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.betsharedservices.io |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybettingandgaming.info |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
1 |
| Flutter UK&I |
*.skybettingandgaming.design |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybettest.net |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.sbgtest.net |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybet.co.uk |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybet.net |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
4 |
| Flutter UK&I |
*.securityservices.io |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.operationstechnology.io |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.msgsvc.io |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybettingandgaming.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
9 |
| Flutter UK&I |
*.sbgservices.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
8 |
| Flutter UK&I |
*.sbgorigin.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybetservices.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
8 |
| Flutter UK&I |
*.platformservices.io |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
2 |
| Flutter UK&I |
*.sbgcore.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
1 |
| Flutter UK&I |
*.skybingo.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
7 |
| Flutter UK&I |
*.skyvegas.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
12 |
| Flutter UK&I |
*.skypoker.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.betviewapi.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.skybet.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
23 |
| Flutter UK&I |
*.sbgcdn.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
1 |
| Flutter UK&I |
*.skycasino.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
5 |
| Flutter UK&I |
*.skygamingcontent.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-07 |
0 |
| Flutter UK&I |
*.paddypower.it |
Wildcard |
In Scope |
Critical |
Eligible |
2019-02-18 |
2 |
| Flutter UK&I |
*.betfair.se |
Wildcard |
In Scope |
Critical |
Eligible |
2019-02-18 |
7 |
| Flutter UK&I |
*.betfair.ro |
Wildcard |
In Scope |
Critical |
Eligible |
2019-02-18 |
8 |
| Flutter UK&I |
*.betfair.it |
Wildcard |
In Scope |
Critical |
Eligible |
2019-02-18 |
10 |
| Flutter UK&I |
*.betfair.es |
Wildcard |
In Scope |
Critical |
Eligible |
2019-02-18 |
8 |
| Flutter UK&I |
*.paddypower.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-01-17 |
118 |
| Flutter UK&I |
*.betfair.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-01-17 |
256 |
| Flutter UK&I |
www.betfair.com.co |
Domain |
Out of Scope |
None |
Ineligible |
2023-04-11 |
0 |
| Flutter UK&I |
sbagmail.skybettingandgaming.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-11 |
0 |
| Flutter UK&I |
community.staging.skypoker.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
community.skypoker.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
skyrgs.blueprintgaming.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
skymail.sky.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
email1.skybet.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
technology.skybettingandgaming.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
partners.skybet.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
affiliatehub.skybet.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-10-07 |
0 |
| Flutter UK&I |
community.betfair.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-04-07 |
0 |
| Amazon Vulnerability Research Program |
Services/Mobile/GenAI |
OtherAsset |
In Scope |
None |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
Devices |
OtherAsset |
In Scope |
None |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
Echo Family Devices |
Hardware |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
FireTV |
Hardware |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
Kindle E-Reader |
Hardware |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
Luna |
Hardware |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
Tablets |
Hardware |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
Vega OS |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.dee.alexaonwearos |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.tails |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.tahoe.freetime |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.storm.lightning.client.aosp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.kindle |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.dee.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.clouddrive.photos |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
947984433 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
944011620 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
621574163 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
302584613 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
1528364633 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
1324809509 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-09-04 |
0 |
| Amazon Vulnerability Research Program |
*.*a2z*.* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-04-18 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.firetv.recast.blaster.aosp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-05-07 |
1 |
| Amazon Vulnerability Research Program |
6560104638 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-05-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.enterprise.access.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-05-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.ihm.candycane |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-05-07 |
0 |
| Amazon Vulnerability Research Program |
6479334468 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-05-07 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.aba.application |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-05-07 |
0 |
| Amazon Vulnerability Research Program |
1151746202 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-05-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.swa.mobileapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-05-07 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.kisan.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-09 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.amazonone.androidapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-09 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.warhol.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-09 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.astro |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-09 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.sellermobile.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
18 |
| Amazon Vulnerability Research Program |
1659883691 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.vendormobile.india.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
1057338687 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.primenow.seller.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.technician.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
3 |
| Amazon Vulnerability Research Program |
988788863 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
9 |
| Amazon Vulnerability Research Program |
com.amazon.vendormobile.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
6444868926 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
1592204907 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
335187483 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
374254473 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
348712880 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
358861688 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
342576766 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
1494755014 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.shopperpanel.android.mobile.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.sellerflexmobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
794141485 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
9 |
| Amazon Vulnerability Research Program |
com.amazon.avod.thirdpartyclient |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
12 |
| Amazon Vulnerability Research Program |
com.amazon.relay |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
2 |
| Amazon Vulnerability Research Program |
in.amazon.mShop.android.shopping |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
3 |
| Amazon Vulnerability Research Program |
1478350915 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
in.amazon.mShop.android.business.shopping |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
1579372261 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.music.tv |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.ziggy.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.minitv.android.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.imdb.tv.mobile.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
1532153219 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.sft.rangoli.seller.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
12 |
| Amazon Vulnerability Research Program |
com.amazon.tahoe.grownups |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
6471528064 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.helix.prod |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.localqueen |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
2 |
| Amazon Vulnerability Research Program |
com.amazon.mp3.automotiveOS |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.amazonvideo.livingroom |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.imdbtv.livingroom |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.flex.rabbit |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
2 |
| Amazon Vulnerability Research Program |
1276296103 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
1454725763 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
1475021574 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
545519333 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
6452192521 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
510855668 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
2 |
| Amazon Vulnerability Research Program |
com.amazon.mp3 |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
3 |
| Amazon Vulnerability Research Program |
1265170914 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
1498197033 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
1 |
| Amazon Vulnerability Research Program |
com.amazon.mShop.android.business.shopping |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
1552455423 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
amazon.speech.sim |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-07 |
0 |
| Amazon Vulnerability Research Program |
com.amazon.mShop.android.shopping |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-06-30 |
24 |
| Amazon Vulnerability Research Program |
297606951 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-06-30 |
8 |
| Amazon Vulnerability Research Program |
primevideo.com/* |
Wildcard |
In Scope |
Critical |
Eligible |
2024-11-21 |
4 |
| Amazon Vulnerability Research Program |
GenAI Apps under *.amazon.* |
AiModel |
In Scope |
Critical |
Eligible |
2024-09-13 |
26 |
| Amazon Vulnerability Research Program |
learning.logistics.amazon.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-06-12 |
0 |
| Amazon Vulnerability Research Program |
amazonpayinsurance.in |
Domain |
In Scope |
Critical |
Eligible |
2024-01-29 |
2 |
| Amazon Vulnerability Research Program |
Anything which redirects to AWS |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-04-18 |
0 |
| Amazon Vulnerability Research Program |
Anything considered a non-prod asset |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-04-18 |
0 |
| Amazon Vulnerability Research Program |
*.aws.* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-04-18 |
0 |
| Amazon Vulnerability Research Program |
*.dev |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-04-18 |
0 |
| Amazon Vulnerability Research Program |
https://www.amazonpay.in/* |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-04 |
2 |
| Amazon Vulnerability Research Program |
*.amazon.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-04-16 |
661 |
| Amazon Vulnerability Research Program |
*.amazon.sg |
Wildcard |
In Scope |
Critical |
Eligible |
2024-02-29 |
4 |
| Amazon Vulnerability Research Program |
*.amazon.se |
Wildcard |
In Scope |
Critical |
Eligible |
2024-02-29 |
1 |
| Amazon Vulnerability Research Program |
*.amazon.sa |
Wildcard |
In Scope |
Critical |
Eligible |
2024-02-29 |
6 |
| Marriott Bug Bounty Program |
hotshoppeservices.com |
Domain |
In Scope |
Medium |
Eligible |
2026-09-28 |
0 |
| Marriott Bug Bounty Program |
https://gatewaydsapprd.marriott.com/v2/ |
Url |
In Scope |
Critical |
Eligible |
2021-10-01 |
3 |
| Marriott Bug Bounty Program |
https://gatewaydsapprd.marriott.com/v1/ |
Url |
In Scope |
Critical |
Eligible |
2026-09-24 |
0 |
| Marriott Bug Bounty Program |
ssm-marriottms.saviyntcloud.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
globaldesign.marriott.com/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-07-14 |
0 |
| Marriott Bug Bounty Program |
gdstest.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-14 |
0 |
| Marriott Bug Bounty Program |
ofhub.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-11 |
0 |
| Marriott Bug Bounty Program |
eswebdev.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-11 |
0 |
| Marriott Bug Bounty Program |
gis.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-11 |
0 |
| Marriott Bug Bounty Program |
clmagtest.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-11 |
0 |
| Marriott Bug Bounty Program |
latinoamerica.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-11 |
0 |
| Marriott Bug Bounty Program |
fe.emergingtech-btsales.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-11 |
0 |
| Marriott Bug Bounty Program |
llmgw.codefest2026.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-11 |
0 |
| Marriott Bug Bounty Program |
*.ritzcarlton.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2018-09-10 |
0 |
| Marriott Bug Bounty Program |
editionhotels.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-01 |
2 |
| Marriott Bug Bounty Program |
wechat.api.marriott.com |
Domain |
In Scope |
High |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
ifast.marriott.com |
Domain |
In Scope |
High |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
hotel-development.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
joinmarriottbonvoy.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
gifts.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
1 |
| Marriott Bug Bounty Program |
bilt.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
university.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
uber.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
www.travel-brilliantly.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
prod-mipaasiaasservices.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
meetmarriottbonvoy.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
mds.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
1 |
| Marriott Bug Bounty Program |
app-insiders.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
owa.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
ocijlbex1prd.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
oasisprod.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
joinrewards.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
join.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
contentportalauth.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
contentportal.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
ci-propertyconversionportal.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
2 |
| Marriott Bug Bounty Program |
channel-portal.homes-and-villas.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
cache.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
1 |
| Marriott Bug Bounty Program |
bsp.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
splunk-phantom-nlb.marriott.com |
Domain |
In Scope |
Low |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
www.members.marriott.com |
Domain |
In Scope |
Low |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
www.giving.marriott.com |
Domain |
In Scope |
Low |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
moments.marriott.com |
Domain |
In Scope |
Low |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
vacation.marriott.com |
Domain |
In Scope |
Low |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
smetrics.marriott.com |
Domain |
In Scope |
Medium |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
*.sba.marriott.com |
Wildcard |
In Scope |
High |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
device.marriott.com |
Domain |
In Scope |
High |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
bpa2.marriott.com |
Domain |
In Scope |
High |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
auth-apc.marriott.com |
Domain |
In Scope |
High |
Eligible |
2025-10-27 |
0 |
| Marriott Bug Bounty Program |
*.artifactory.marriott.com |
Wildcard |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
*.apigwc.marriott.com |
Wildcard |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
*.apigatewayc.marriott.com |
Wildcard |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
apcgateway.marriott.com |
Domain |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
*.gateway.marriott.com |
Wildcard |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
*.mgs.marriott.com |
Wildcard |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
eidhelp.marriott.com |
Domain |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
efast.marriott.com |
Domain |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
*.dcfgateway.marriott.com |
Wildcard |
In Scope |
High |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
esupplier.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
*gateway-apc.marriott.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-10-24 |
0 |
| Marriott Bug Bounty Program |
www.msg-gateway.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-16 |
0 |
| Marriott Bug Bounty Program |
psp.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2025-06-16 |
0 |
| Marriott Bug Bounty Program |
careers.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-01 |
1 |
| Marriott Bug Bounty Program |
www.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2022-01-19 |
38 |
| Marriott Bug Bounty Program |
travelagents.marriott.com/ |
Domain |
In Scope |
High |
Eligible |
2024-03-08 |
0 |
| Marriott Bug Bounty Program |
mipartnerprivileges.marriott.com |
Domain |
In Scope |
High |
Eligible |
2024-03-08 |
0 |
| Marriott Bug Bounty Program |
traveler.marriott.com |
Domain |
In Scope |
High |
Eligible |
2024-03-08 |
2 |
| Marriott Bug Bounty Program |
help.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2024-03-07 |
1 |
| Marriott Bug Bounty Program |
moments.marriottbonvoy.com |
Domain |
In Scope |
Critical |
Eligible |
2024-03-07 |
0 |
| Marriott Bug Bounty Program |
Phoenix Platform |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-01-17 |
0 |
| Marriott Bug Bounty Program |
giftcards.marriott.com |
Domain |
In Scope |
Low |
Ineligible |
2023-01-31 |
1 |
| Marriott Bug Bounty Program |
dcfgateway*.marriott.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-09-01 |
0 |
| Marriott Bug Bounty Program |
gatewaydsapdev2.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-01 |
1 |
| Marriott Bug Bounty Program |
dcfgatewaytst1.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-01 |
1 |
| Marriott Bug Bounty Program |
gatewaydsaptst1.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-01 |
2 |
| Marriott Bug Bounty Program |
gatewaydsaptst2.marriott.com |
Domain |
In Scope |
High |
Eligible |
2021-10-01 |
0 |
| Marriott Bug Bounty Program |
Not-Listed Assets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-09-01 |
0 |
| Marriott Bug Bounty Program |
*uat.marriott.com |
OtherAsset |
In Scope |
High |
Eligible |
2022-11-02 |
0 |
| Marriott Bug Bounty Program |
element-hotels.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-14 |
0 |
| Marriott Bug Bounty Program |
marriott.tech |
Domain |
Out of Scope |
None |
Ineligible |
2023-04-28 |
0 |
| Marriott Bug Bounty Program |
meetings-excellence.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-02-27 |
0 |
| Marriott Bug Bounty Program |
hotelexcellence.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-02-27 |
0 |
| Marriott Bug Bounty Program |
http://www.shopmarriott.com |
Url |
In Scope |
Medium |
Eligible |
2023-01-31 |
4 |
| Marriott Bug Bounty Program |
455004730 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-09-10 |
1 |
| Marriott Bug Bounty Program |
all-inclusive.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-13 |
11 |
| Marriott Bug Bounty Program |
marriottfranchisetransactions.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-01 |
1 |
| Marriott Bug Bounty Program |
homes-and-villas.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2020-05-18 |
17 |
| Marriott Bug Bounty Program |
passwordchallenge.marriott.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-01 |
2 |
| Marriott Bug Bounty Program |
mi.bookmarriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-21 |
0 |
| Marriott Bug Bounty Program |
www.github.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-12-05 |
0 |
| Marriott Bug Bounty Program |
marriottlearnourbrands.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-01-03 |
0 |
| Marriott Bug Bounty Program |
www.ritzcarlton.com |
Domain |
In Scope |
High |
Eligible |
2021-10-01 |
6 |
| Marriott Bug Bounty Program |
luxurybrands.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-08-12 |
0 |
| Marriott Bug Bounty Program |
milux.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-08-12 |
0 |
| Marriott Bug Bounty Program |
springhillsuites.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-03 |
0 |
| Marriott Bug Bounty Program |
*.phunware.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-11-09 |
0 |
| Marriott Bug Bounty Program |
*.ritzcarltonyachtcollection.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-11-01 |
0 |
| Marriott Bug Bounty Program |
*moxymix*.marriott.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-03-18 |
0 |
| Marriott Bug Bounty Program |
www.travelagents.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-09-01 |
0 |
| Marriott Bug Bounty Program |
towneplacesuites.marriott.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-03 |
0 |
| GoodRx |
www.goodrx.com |
Domain |
In Scope |
Critical |
Eligible |
2018-03-23 |
90 |
| GoodRx |
investors.goodrx.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-19 |
0 |
| GoodRx |
com.goodrx.gold |
IosAppStore |
Out of Scope |
None |
Ineligible |
2018-07-10 |
0 |
| GoodRx |
com.goodrx.doctors |
IosAppStore |
Out of Scope |
None |
Ineligible |
2018-07-10 |
0 |
| GoodRx |
com.goodrx.gold |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2018-07-10 |
0 |
| GoodRx |
com.goodrx.doctors |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2018-07-10 |
0 |
| GoodRx |
support.goodrx.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-06-22 |
0 |
| GoodRx |
sso.identity.goodrx.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-05-09 |
0 |
| GoodRx |
com.goodrx.iphone |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-03-14 |
5 |
| GoodRx |
com.goodrx |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-03-14 |
10 |
| Roblox |
blox.link |
Domain |
In Scope |
Low |
Eligible |
2024-09-17 |
13 |
| Roblox |
*.guilded.gg |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-06-30 |
0 |
| Roblox |
Roblox Engine |
Executable |
In Scope |
Critical |
Eligible |
2024-09-26 |
22 |
| Roblox |
*.ra.roblox.com |
Wildcard |
In Scope |
Low |
Eligible |
2020-03-25 |
2 |
| Roblox |
*.rbx.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-02-03 |
29 |
| Roblox |
*.roblox.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-07-13 |
340 |
| Roblox |
Roblox Studio |
Executable |
In Scope |
Critical |
Eligible |
2018-07-13 |
34 |
| Roblox |
Roblox Client |
Executable |
In Scope |
Critical |
Eligible |
2018-07-13 |
158 |
| Kubernetes |
Tier 3 |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-09 |
0 |
| Kubernetes |
Tier 2 |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-09 |
0 |
| Kubernetes |
Tier 1 |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-09 |
0 |
| Kubernetes |
https://github.com/kubernetes/ingress-nginx |
SourceCode |
Out of Scope |
None |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/ingress-gce |
SourceCode |
Out of Scope |
None |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
Community Management & Communications |
OtherAsset |
In Scope |
Critical |
Ineligible |
2019-07-18 |
0 |
| Kubernetes |
https://github.com/kubernetes-sigs |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-07-18 |
12 |
| Kubernetes |
github.com/kubernetes-retired |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-07-18 |
1 |
| Kubernetes |
https://github.com/kubernetes-incubator |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-07-18 |
0 |
| Kubernetes |
https://github.com/kubernetes/legacy-cloud-providers |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cloud-provider-vsphere |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cloud-provider-azure |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/perf-tests |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cloud-provider-openstack |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/enhancements |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/community |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cloud-provider-aws |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/funding |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/steering |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/examples |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/security |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cloud-provider-gcp |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/sample-apiserver |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/sample-controller |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/sample-cli-plugin |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/frakti |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kubernetes-anywhere |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kubernetes-template-project |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cloud-provider-sample |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cloud-provider-alibaba-cloud |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-06-21 |
0 |
| Kubernetes |
https://storage.googleapis.com/kubernetes-release/ |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-07-18 |
0 |
| Kubernetes |
k8s.gcr.io |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-07-18 |
0 |
| Kubernetes |
github.com/kubernetes-csi |
SourceCode |
In Scope |
Critical |
Eligible |
2019-07-18 |
3 |
| Kubernetes |
https://github.com/kubernetes-client |
SourceCode |
In Scope |
Critical |
Eligible |
2019-07-18 |
3 |
| Kubernetes |
https://github.com/kubernetes-security |
SourceCode |
In Scope |
Critical |
Eligible |
2019-07-03 |
0 |
| Kubernetes |
https://github.com/kubernetes/cloud-provider |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/csi-translation-lib |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/node-api |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cri-api |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/kubeadm |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/sig-release |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/org |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kubectl |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
2 |
| Kubernetes |
https://github.com/kubernetes/repo-infra |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/node-problem-detector |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/release |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/kube-deploy |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/autoscaler |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kube-state-metrics |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kompose |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/minikube |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
4 |
| Kubernetes |
https://github.com/kubernetes/kops |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
4 |
| Kubernetes |
https://github.com/kubernetes/test-infra |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
7 |
| Kubernetes |
https://github.com/kubernetes/website |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
2 |
| Kubernetes |
https://github.com/kubernetes/utils |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/klog |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/k8s.io |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
5 |
| Kubernetes |
https://github.com/kubernetes/cluster-registry |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/publishing-bot |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/code-generator |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/apimachinery |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/api |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/client-go |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/component-base |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/apiserver |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
2 |
| Kubernetes |
https://github.com/kubernetes/kube-aggregator |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/apiextensions-apiserver |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/metrics |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/cli-runtime |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kube-proxy |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
1 |
| Kubernetes |
https://github.com/kubernetes/kubelet |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
5 |
| Kubernetes |
https://github.com/kubernetes/kube-scheduler |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kube-controller-manager |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
2 |
| Kubernetes |
https://github.com/kubernetes/cluster-bootstrap |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/gengo |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/git-sync |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kube-openapi |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/dns |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
0 |
| Kubernetes |
https://github.com/kubernetes/kubernetes |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-21 |
29 |
| Kubernetes |
https://github.com/kubernetes/csi-api |
SourceCode |
In Scope |
Critical |
Eligible |
2019-06-20 |
0 |
| Kubernetes |
kubernetes-csi.github.io |
Domain |
In Scope |
Critical |
Eligible |
2019-07-18 |
3 |
| Kubernetes |
k8s.io |
Domain |
In Scope |
Critical |
Eligible |
2019-07-18 |
8 |
| Kubernetes |
kubernetes.io |
Domain |
In Scope |
Critical |
Eligible |
2019-07-18 |
13 |
| Kubernetes |
prow.k8s.io |
Domain |
In Scope |
Critical |
Eligible |
2019-07-18 |
4 |
| Ping Identity |
https://console.ort-one-pingone.com/?env=361b34ef-2725-4fd9-af1b-a2b189df3d05 |
Url |
In Scope |
Critical |
Eligible |
2025-10-29 |
0 |
| Ping Identity |
https://console.ort-one-pingone.com/?env=7f327541-54e0-4ba4-8335-65eac2a25b5e |
Url |
In Scope |
Critical |
Eligible |
2026-02-25 |
0 |
| Ping Identity |
privilege.ort-one-pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-01-22 |
0 |
| Ping Identity |
auth.ort-one-pingone.com |
Domain |
In Scope |
Critical |
Eligible |
2025-08-22 |
1 |
| Ping Identity |
api-staging.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-03-14 |
0 |
| Ping Identity |
apps.ort-one-pingone.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
5 |
| Ping Identity |
console-staging.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-03-14 |
0 |
| Ping Identity |
console.ort-one-pingone.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Ping Identity |
api.ort-one-pingone.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
5 |
| Ping Identity |
https://openam-bug-bounty-stag.forgeblocks.com/* |
Wildcard |
In Scope |
Critical |
Eligible |
2024-12-03 |
2 |
| Ping Identity |
https://developer.pingidentity.com/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-02-20 |
0 |
| Ping Identity |
https://*.pingidentity.net |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-09-18 |
0 |
| Ping Identity |
https://ort-desktop.pingone.com/* |
Wildcard |
In Scope |
High |
Eligible |
2018-02-13 |
0 |
| Ping Identity |
https://ort-admin.pingone.com/* |
Wildcard |
In Scope |
Critical |
Eligible |
2018-02-13 |
38 |
| Ping Identity |
https://*.pingidentity.io |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-01-25 |
0 |
| Ping Identity |
https://ort-authenticator.pingone.com/* |
Wildcard |
In Scope |
High |
Eligible |
2018-01-25 |
5 |
| Ping Identity |
https://*.pingidentity.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-01-17 |
0 |
| Ping Identity |
admin.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-01-25 |
0 |
| Ping Identity |
test-sso.connect.pingidentity.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-02-13 |
0 |
| Ping Identity |
test-desktop.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-02-13 |
0 |
| Ping Identity |
desktop.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-01-25 |
0 |
| Ping Identity |
uploads.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-05-08 |
0 |
| Ping Identity |
uploads-staging.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-05-08 |
0 |
| Ping Identity |
authenticator.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-18 |
0 |
| Ping Identity |
console.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-18 |
0 |
| Ping Identity |
api.pingone.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-01-25 |
0 |
| pixiv |
premium.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2026-05-07 |
0 |
| pixiv |
ads.pixiv.net |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-02 |
0 |
| pixiv |
sketch.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2018-07-09 |
17 |
| pixiv |
comic-indies.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2025-01-28 |
0 |
| pixiv |
pastela.app |
Domain |
In Scope |
Critical |
Eligible |
2024-07-26 |
2 |
| pixiv |
coban.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2024-02-26 |
3 |
| pixiv |
https://vroid.com/studio |
Url |
In Scope |
Critical |
Eligible |
2023-10-17 |
0 |
| pixiv |
booth.pm |
Domain |
In Scope |
Critical |
Eligible |
2018-05-25 |
14 |
| pixiv |
*.fanbox.cc |
Wildcard |
In Scope |
Critical |
Eligible |
2021-10-21 |
3 |
| pixiv |
*.pixiv.co.jp |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-10-23 |
0 |
| pixiv |
novel.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2022-10-20 |
0 |
| pixiv |
comic.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2018-05-28 |
8 |
| pixiv |
dic.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2019-10-14 |
5 |
| pixiv |
payment.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2021-12-23 |
1 |
| pixiv |
neoket.net |
Domain |
In Scope |
Critical |
Eligible |
2021-12-23 |
0 |
| pixiv |
vroid.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-21 |
3 |
| pixiv |
sensei.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2018-07-09 |
0 |
| pixiv |
factory.pixiv.net |
Domain |
Out of Scope |
None |
Ineligible |
2018-07-09 |
0 |
| pixiv |
accounts.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2018-07-09 |
15 |
| pixiv |
www.pixiv.net |
Domain |
In Scope |
Critical |
Eligible |
2018-07-09 |
78 |
| pixiv |
hub.vroid.com |
Domain |
In Scope |
Critical |
Eligible |
2019-08-27 |
6 |
| ForeScout Technologies |
CounterAct 9.x |
Hardware |
In Scope |
High |
Eligible |
2026-03-04 |
0 |
| ForeScout Technologies |
cloud.forescout.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-12 |
0 |
| ForeScout Technologies |
de.forescout.cloud |
Domain |
In Scope |
Critical |
Eligible |
2022-08-15 |
0 |
| ForeScout Technologies |
uk.forescout.cloud |
Domain |
In Scope |
Critical |
Eligible |
2022-08-15 |
0 |
| ForeScout Technologies |
us.forescout.cloud |
Domain |
In Scope |
Critical |
Eligible |
2022-08-15 |
0 |
| ForeScout Technologies |
datapod-1-query.acceptance.forescoutcloud.net |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-04 |
0 |
| ForeScout Technologies |
datapod-1-ingest.acceptance.forescoutcloud.net |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-04 |
0 |
| ForeScout Technologies |
datapod-1-100-query.testing.forescoutcloud.net |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-04 |
0 |
| ForeScout Technologies |
datapod-1-100-ingest.testing.forescoutcloud.net |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-04 |
0 |
| ForeScout Technologies |
mgmtpod-1-100.development.forescoutcloud.net |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-04 |
0 |
| ForeScout Technologies |
mgmtpod-1-100-dashboard.development.forescoutcloud.net |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-04 |
0 |
| ForeScout Technologies |
datapod-1-100-query.development.forescoutcloud.net |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-04 |
0 |
| ForeScout Technologies |
datapod-1-100-ingest.development.forescoutcloud.net |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-04 |
0 |
| ForeScout Technologies |
community.forescout.com |
Domain |
In Scope |
Critical |
Eligible |
2021-05-18 |
1 |
| ForeScout Technologies |
streaming-gw.iris.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
ab2b0c50cdc7b445391f99d4957850c5-cd4ccfdb37dfafad.elb.us-east-1.amazonaws.com |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
streaming-api.iris.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
obs-sensors.iris.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
mgmt-sensors.iris.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
streaming.iris.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
aebddc74953f248bc8455665b0f7d47b-78af959a11e5d0c1.elb.us-east-1.amazonaws.com |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
streaming-api.iris.acceptance.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
obs-sensors.iris.acceptance.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
mgmt-sensors.iris.acceptance.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
streaming.iris.acceptance.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2021-01-27 |
0 |
| ForeScout Technologies |
updates.forescout.com |
Domain |
In Scope |
Critical |
Eligible |
2020-12-21 |
2 |
| ForeScout Technologies |
iris-testing-us-east-1-nlb-4df4bbde6f6e2bbb.elb.us-east-1.amazonaws.com |
Domain |
In Scope |
Critical |
Eligible |
2020-12-03 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v3/query/zonetozone |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/services |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/ips/bydst/details |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/service-list |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/ips/bysrc |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/deletestatus |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/matrixoverview |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/overlappinggroups |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v1/polling |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v1/query/agg |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v3/query/overlappingzones |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v3/matrixoverview |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/iplist |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/firstreporttimeentry |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-query.production.forescoutcloud.net/v2/query/grouptogroup |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://mgmtpod-1.production.forescoutcloud.net/oauth/token |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://datapod-1-druid-ingest.production.forescoutcloud.net/v1/upload |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://logstash-props.devicecloud.production.forescoutcloud.net/api/v1/properties |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
http://backend-api.devicecloud.production.forescoutcloud.net/api/v1/settings |
Url |
In Scope |
Critical |
Eligible |
2020-10-13 |
0 |
| ForeScout Technologies |
https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/package |
Url |
In Scope |
Critical |
Eligible |
2020-10-12 |
0 |
| ForeScout Technologies |
https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/polling |
Url |
In Scope |
Critical |
Eligible |
2020-10-12 |
0 |
| ForeScout Technologies |
https://telemetry-polling.devicecloud.acceptance.forescoutcloud.net/v1/upload |
Url |
In Scope |
Critical |
Eligible |
2020-10-12 |
0 |
| ForeScout Technologies |
datapod-2-druid-ingest.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2020-10-05 |
1 |
| ForeScout Technologies |
datapod-1-druid-ingest.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2020-03-17 |
1 |
| ForeScout Technologies |
64.84.60.0/24 |
Cidr |
In Scope |
Critical |
Eligible |
2020-07-22 |
1 |
| ForeScout Technologies |
datapod-1-100-druid-query.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2020-03-17 |
0 |
| ForeScout Technologies |
datapod-1-100-druid-ingest.testing.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2020-03-12 |
0 |
| ForeScout Technologies |
datapod-1-100-druid-query.development.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2020-03-12 |
0 |
| ForeScout Technologies |
datapod-1-100-druid-ingest.development.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2020-03-12 |
0 |
| ForeScout Technologies |
logstash-props.devicecloud.acceptance.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2020-03-02 |
0 |
| ForeScout Technologies |
38.140.238.56/29 |
Cidr |
In Scope |
Critical |
Eligible |
2019-10-17 |
0 |
| ForeScout Technologies |
mgmtpod-1.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2019-09-04 |
0 |
| ForeScout Technologies |
mgmtpod-1-dashboard.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2019-09-04 |
2 |
| ForeScout Technologies |
datapod-1-query.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2019-09-04 |
0 |
| ForeScout Technologies |
datapod-1-ingest.production.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2019-09-04 |
0 |
| ForeScout Technologies |
datapod-2-query.acceptance.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2019-09-04 |
0 |
| ForeScout Technologies |
datapod-2-ingest.acceptance.forescoutcloud.net |
Domain |
In Scope |
Critical |
Eligible |
2019-09-04 |
0 |
| ForeScout Technologies |
212.143.112.81/29 |
Cidr |
In Scope |
Critical |
Eligible |
2019-12-13 |
0 |
| ForeScout Technologies |
194.90.89.165/32 |
Cidr |
In Scope |
Critical |
Eligible |
2019-12-13 |
0 |
| ForeScout Technologies |
194.90.151.192/28 |
Cidr |
In Scope |
Critical |
Eligible |
2019-12-13 |
0 |
| ForeScout Technologies |
194.90.25.80/29 |
Cidr |
In Scope |
Critical |
Eligible |
2019-12-13 |
0 |
| ForeScout Technologies |
64.47.18.80/29 |
Cidr |
In Scope |
Critical |
Eligible |
2019-12-13 |
0 |
| ForeScout Technologies |
97.105.243.96/28 |
Cidr |
In Scope |
Critical |
Eligible |
2019-12-13 |
0 |
| ForeScout Technologies |
www.forescout.com |
Domain |
In Scope |
Critical |
Eligible |
2019-09-04 |
54 |
| AT&T |
*.learning.directv.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.comtrain.directv.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.vtt.directv.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tul.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.firstnetbcs.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tulearn.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.bcsstechnical.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.coretechtraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.ess.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.techtalent.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.salesanddist.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.cricketlearning.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.ccltraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.retailleadershiptraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.saselearning.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.bcsswirelinetraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.salesevolution.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tusims.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.ehsato.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.retailpodcast.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.cptraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.leadershiphub.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.retailtraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.opussims.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.designthinking.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tulh.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.attconsumer.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.acetng.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tutrainenv.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tuxr.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.brandtraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.learningconnection.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.emergingtechtraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.consumercares.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.techdevtraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tuhub.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.vrl.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.retailtutorials.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.techcaretraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.opusisdtraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.customerconnecttraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.wlnp.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.premtechtraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.ran.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.bussalesret.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.cctrng.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.acenpw.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.mdp.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.attauthorizedretail.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.dfsttraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tuliveaccts.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.tuvcpagebuilder.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.mobilityranfo.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.workdayinfortraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.bizsoltraining.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
*.oml.att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-21 |
0 |
| AT&T |
http://dna-uat.az.cloud.att.com/ |
Url |
Out of Scope |
None |
Ineligible |
2026-08-07 |
0 |
| AT&T |
*tworks-att.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-03-23 |
0 |
| AT&T |
DirecTV Owned Assets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-06-12 |
0 |
| AT&T |
att.com/acctmgmt/*/chunks/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-06-14 |
0 |
| AT&T |
att.com/acctmgmt/*/stub*/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-06-14 |
0 |
| AT&T |
att.suppliergateway.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-05-28 |
0 |
| AT&T |
thedirectvmarketingzone.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-05-23 |
0 |
| AT&T |
https://40.233.66.139 |
Url |
Out of Scope |
None |
Ineligible |
2025-03-10 |
0 |
| AT&T |
40.233.66.139 |
IpAddress |
Out of Scope |
None |
Ineligible |
2025-03-10 |
0 |
| AT&T |
Other Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-04-02 |
1629 |
| AT&T |
authkeysmx01.att.com.mx |
Domain |
Out of Scope |
None |
Ineligible |
2022-02-23 |
0 |
| AT&T |
attpurchasing.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-02-18 |
0 |
| AT&T |
attsuppliers.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-02-18 |
0 |
| AT&T |
https://clec.att.com/clec/ |
Url |
Out of Scope |
None |
Ineligible |
2021-02-11 |
0 |
| AT&T |
*.sky.com.mx |
OtherAsset |
Out of Scope |
None |
Ineligible |
2020-01-14 |
0 |
| AT&T |
12.0.1.28 |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-02-11 |
0 |
| AT&T |
attdashboard.wireless.att.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-09-16 |
0 |
| AT&T |
rcloud.social |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-27 |
0 |
| AT&T |
accbusinesspricing.att.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-02-07 |
0 |
| AT&T |
prod-taxexempt.att.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-08-20 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink-solana/tree/develop/contracts/.../dev |
SmartContract |
Out of Scope |
None |
Ineligible |
2025-05-02 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink-evm/tree/develop/contracts/.../dev |
SmartContract |
Out of Scope |
None |
Ineligible |
2025-05-02 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink |
SourceCode |
In Scope |
Critical |
Eligible |
2025-05-02 |
9 |
| Chainlink |
https://github.com/smartcontractkit/chainlink-solana/tree/develop/contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2025-05-02 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink/tree/master/contracts |
SmartContract |
Out of Scope |
None |
Ineligible |
2019-05-21 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink |
SmartContract |
Out of Scope |
None |
Ineligible |
2018-08-07 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink-evm/tree/develop/contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2025-05-02 |
0 |
| Chainlink |
https://github.com/smartcontractkit/external-adapters-js/ |
SourceCode |
In Scope |
High |
Eligible |
2023-10-03 |
1 |
| Chainlink |
*.smartcontract.com |
Wildcard |
In Scope |
None |
Ineligible |
2019-10-23 |
9 |
| Chainlink |
Faucets |
OtherAsset |
In Scope |
High |
Eligible |
2019-05-21 |
7 |
| Chainlink |
https://github.com/smartcontractkit/staking-v0.1/tree/master/contracts |
SmartContract |
In Scope |
Critical |
Eligible |
2022-12-06 |
1 |
| Chainlink |
github.com/smartcontractkit/chainlink/contracts/src/*/dev |
SourceCode |
Out of Scope |
None |
Ineligible |
2019-07-07 |
0 |
| Chainlink |
blog.chain.link |
Domain |
Out of Scope |
None |
Ineligible |
2021-09-09 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink/tree/master/core/internal |
SourceCode |
Out of Scope |
None |
Ineligible |
2021-03-09 |
0 |
| Chainlink |
chainlinklabs.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-18 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink/tree/master/integration |
SourceCode |
Out of Scope |
None |
Ineligible |
2019-07-07 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink/tree/master/tools |
SourceCode |
Out of Scope |
None |
Ineligible |
2019-07-07 |
0 |
| Chainlink |
https://github.com/smartcontractkit/chainlink/tree/master/core/sgx |
SourceCode |
Out of Scope |
None |
Ineligible |
2018-12-01 |
0 |
| Chainlink |
chain.link |
Domain |
In Scope |
Medium |
Ineligible |
2018-08-07 |
52 |
| Chainlink |
github.com/smartcontractkit/chainlink/examples |
SourceCode |
Out of Scope |
None |
Ineligible |
2019-07-07 |
0 |
| Chainlink |
Intercom |
OtherAsset |
Out of Scope |
None |
Ineligible |
2019-05-20 |
0 |
| Chainlink |
create.smartcontract.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-08-10 |
0 |
| Chainlink |
docs.chain.link |
Domain |
Out of Scope |
None |
Ineligible |
2018-08-21 |
0 |
| Priceline |
secure.rezserver.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-03-05 |
0 |
| Priceline |
reservations.rezserver.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-03-05 |
0 |
| Priceline |
api.rezserver.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-07-23 |
0 |
| Priceline |
admin.rezserver.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-08-02 |
0 |
| Priceline |
com.priceline.android.negotiator |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-03-05 |
8 |
| Priceline |
336381998 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-03-05 |
3 |
| Priceline |
bookingholdings-coe.com |
Domain |
In Scope |
Critical |
Eligible |
2025-02-21 |
1 |
| Priceline |
Penny |
AiModel |
In Scope |
Critical |
Eligible |
2024-02-20 |
2 |
| Priceline |
cruises.priceline.com |
Domain |
In Scope |
Critical |
Eligible |
2018-03-05 |
19 |
| Priceline |
careers.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
www.priceline.com |
Domain |
In Scope |
Critical |
Eligible |
2018-03-05 |
161 |
| Priceline |
https://www.priceline.com/pwd/v0/pcln-graphql/ |
Url |
In Scope |
Critical |
Eligible |
2025-05-09 |
0 |
| Priceline |
ir.bookingholdings.com |
Domain |
In Scope |
Critical |
Eligible |
2025-02-21 |
0 |
| Priceline |
img1.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-19 |
0 |
| Priceline |
1psb.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
ace-qa.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
api-gnae1-poc.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
api-guse4-poc.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
booking.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
customerservice-ccp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
dashboard.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
dev.customerservice-ccp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
dev.sales-ccp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
employeedeals.flightdeals.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
experiences.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
google.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
guse4-rc-qa.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
help.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
ids-dev.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
ids-too.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
itsupport.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
jira.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
links.deals.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
localdealsemail.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
mail.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
offers.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
qaa.booking.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
remotecontrol.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
tools-qaa.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
tools.corp.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
url5932.travel.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Priceline |
weatherstatus.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-09 |
0 |
| Priceline |
groupdeals.priceline.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-02 |
0 |
| Priceline |
priceline.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-29 |
5 |
| Priceline |
flyiin.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-01 |
0 |
| Priceline |
www.bookingholdings.com |
Domain |
In Scope |
None |
Eligible |
2018-03-05 |
8 |
| Priceline |
www.priceline.com/vp-web/* |
OtherAsset |
Out of Scope |
None |
Ineligible |
2018-03-05 |
0 |
| Priceline |
*.testaroom.cloud |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Priceline |
*.testaroom.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Priceline |
*.roomvaluesteam.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Priceline |
stockroom.production.getaroom.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Priceline |
supply.getaroom.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Priceline |
breadcrumb.getaroom.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Priceline |
extranet.getaroom.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Priceline |
availability.getaroom.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-27 |
0 |
| Priceline |
www.airportrentalcars.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-03-05 |
0 |
| Priceline |
press.priceline.com |
Domain |
In Scope |
Medium |
Eligible |
2021-11-19 |
0 |
| Priceline |
www.getaroom.com |
Domain |
In Scope |
Critical |
Eligible |
2022-09-27 |
12 |
| Credit Karma |
https://*.creditkarma.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-10-11 |
73 |
| Credit Karma |
com.creditkarma.mobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-10-16 |
7 |
| Credit Karma |
com.creditkarma.mobile |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-10-16 |
1 |
| Credit Karma |
www.creditkarma.ca |
Domain |
In Scope |
Critical |
Eligible |
2018-10-11 |
6 |
| Credit Karma |
https://*.creditkarma.ca |
Wildcard |
In Scope |
Critical |
Eligible |
2023-05-01 |
2 |
| Credit Karma |
tax.creditkarma.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-11 |
0 |
| Credit Karma |
https://www.creditkarma.com/savings |
Url |
In Scope |
Critical |
Eligible |
2020-01-13 |
0 |
| Credit Karma |
help.creditkarma.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-11 |
0 |
| Credit Karma |
blog.creditkarma.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-16 |
1 |
| Credit Karma |
api.creditkarma.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-11 |
0 |
| Credit Karma |
accounts.creditkarma.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-11 |
3 |
| Credit Karma |
taxsupport.creditkarma.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-05-03 |
0 |
| Credit Karma |
socialverification.stage.creditkarma.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-16 |
0 |
| Credit Karma |
socialverification.creditkarma.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-16 |
0 |
| Credit Karma |
taplytics.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-16 |
0 |
| Credit Karma |
crashlytics.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-16 |
0 |
| Credit Karma |
appsflyer.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-16 |
0 |
| Credit Karma |
https://www.creditkarma.com/all/advice |
Url |
Out of Scope |
None |
Ineligible |
2018-10-16 |
0 |
| Credit Karma |
https://www.creditkarma.com/article/* |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-10-16 |
0 |
| Credit Karma |
com.creditkarma.mobile.international |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-01 |
0 |
| Credit Karma |
com.creditkarma.mobile.international |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-05-01 |
1 |
| Credit Karma |
support.creditkarma.ca |
Domain |
In Scope |
Critical |
Eligible |
2021-07-06 |
9 |
| Credit Karma |
https://www.creditkarma.com/reviews/ |
Url |
In Scope |
Critical |
Eligible |
2018-10-16 |
0 |
| Credit Karma |
https://*.creditkarma.co.uk |
Wildcard |
In Scope |
Critical |
Eligible |
2023-01-24 |
8 |
| Hyatt Hotels |
booking.applevacations.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-10 |
0 |
| Hyatt Hotels |
www.hyattinclusivecollection.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-10 |
9 |
| Hyatt Hotels |
res.hyattinclusivecollection.com |
Domain |
In Scope |
Critical |
Eligible |
2024-01-10 |
0 |
| Hyatt Hotels |
476639005 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-07-31 |
5 |
| Hyatt Hotels |
199.66.248.0/22 |
Cidr |
In Scope |
Critical |
Eligible |
2023-03-01 |
0 |
| Hyatt Hotels |
213.139.133.32/28 |
Cidr |
In Scope |
Critical |
Eligible |
2020-01-13 |
3 |
| Hyatt Hotels |
140.95.0.0/16 |
Cidr |
In Scope |
Critical |
Eligible |
2020-01-13 |
67 |
| Hyatt Hotels |
com.Hyatt |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-07-31 |
8 |
| Hyatt Hotels |
www.applevacations.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
6 |
| Hyatt Hotels |
vacations.united.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
5 |
| Hyatt Hotels |
www.triseptdemo.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
0 |
| Hyatt Hotels |
www.triseptapi.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
0 |
| Hyatt Hotels |
shop.wyndhamvacationownership.trisept.travel |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
0 |
| Hyatt Hotels |
rezagent.triseptsolutions.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
0 |
| Hyatt Hotels |
reservations.wynnvacations.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
1 |
| Hyatt Hotels |
res.vacations.universalstudioshollywood.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
3 |
| Hyatt Hotels |
res.vacations.united.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
1 |
| Hyatt Hotels |
res.universalorlandovacations.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
5 |
| Hyatt Hotels |
res.blueskytours.globalbookingsolutions.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
1 |
| Hyatt Hotels |
new.www.vaxvacationaccess.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
1 |
| Hyatt Hotels |
login.www.vaxvacationaccess.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
6 |
| Hyatt Hotels |
book.booktandl.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
1 |
| Hyatt Hotels |
book.applevacations.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-01 |
2 |
| Hyatt Hotels |
www.beachbound.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
2 |
| Hyatt Hotels |
www.wynnvacations.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
3 |
| Hyatt Hotels |
www.universalorlandovacations.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
6 |
| Hyatt Hotels |
www.funjet.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
5 |
| Hyatt Hotels |
vacations.universalstudioshollywood.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
1 |
| Hyatt Hotels |
res.vacations.seaworld.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
0 |
| Hyatt Hotels |
res.vacations.discoverycove.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
2 |
| Hyatt Hotels |
res.secretsresorts.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
0 |
| Hyatt Hotels |
res.funjet.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
3 |
| Hyatt Hotels |
book.beachbound.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
1 |
| Hyatt Hotels |
booking.beachbound.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-15 |
0 |
| Hyatt Hotels |
booking.cheapcaribbean.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
0 |
| Hyatt Hotels |
blueskytours.globalbookingsolutions.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
0 |
| Hyatt Hotels |
www.triseptsolutions.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
0 |
| Hyatt Hotels |
www.cheapcaribbean.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
3 |
| Hyatt Hotels |
www.blueskytours.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
2 |
| Hyatt Hotels |
vacations.travelimpressions.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
2 |
| Hyatt Hotels |
res.vacations.sesameplace.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
0 |
| Hyatt Hotels |
res.vacations.buschgardens.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
1 |
| Hyatt Hotels |
book.cheapcaribbean.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-03 |
1 |
| Hyatt Hotels |
scapegoat.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2021-03-03 |
0 |
| Hyatt Hotels |
confluence.hyattdev.com |
Domain |
In Scope |
Critical |
Eligible |
2021-01-13 |
3 |
| Hyatt Hotels |
www.hyattconnect.com |
Domain |
In Scope |
Critical |
Eligible |
2020-12-30 |
72 |
| Hyatt Hotels |
upsell.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-18 |
0 |
| Hyatt Hotels |
sso.oft.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-18 |
2 |
| Hyatt Hotels |
soaext.oft.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-18 |
0 |
| Hyatt Hotels |
roominglist.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-18 |
0 |
| Hyatt Hotels |
public.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-18 |
5 |
| Hyatt Hotels |
plannerrequest.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-18 |
7 |
| Hyatt Hotels |
mobileapp.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-18 |
3 |
| Hyatt Hotels |
ebsext.oft.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-18 |
15 |
| Hyatt Hotels |
meetings.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-17 |
6 |
| Hyatt Hotels |
salesportal.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-06-09 |
5 |
| Hyatt Hotels |
newsroom.images.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-13 |
6 |
| Hyatt Hotels |
assets.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2019-04-09 |
22 |
| Hyatt Hotels |
world.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2018-09-05 |
62 |
| Hyatt Hotels |
www.hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-31 |
134 |
| Hyatt Hotels |
hyatt.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-31 |
99 |
| Superhuman (formerly Grammarly) |
Third party external services |
OtherAsset |
Out of Scope |
None |
Ineligible |
2019-10-09 |
0 |
| Superhuman (formerly Grammarly) |
docs.superhuman.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-17 |
3 |
| Superhuman (formerly Grammarly) |
com.superhuman.mail |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2026-08-07 |
0 |
| Superhuman (formerly Grammarly) |
com.superhuman.mail |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-08-07 |
0 |
| Superhuman (formerly Grammarly) |
*.superhuman.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-11-20 |
4 |
| Superhuman (formerly Grammarly) |
Superhuman Mail |
OtherAsset |
In Scope |
None |
Eligible |
2025-11-20 |
0 |
| Superhuman (formerly Grammarly) |
Superhuman Mail Desktop App |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-07-15 |
0 |
| Superhuman (formerly Grammarly) |
Superhuman Mail Chrome Extension |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-07-15 |
0 |
| Superhuman (formerly Grammarly) |
mail.superhuman.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-15 |
2 |
| Superhuman (formerly Grammarly) |
id.superhuman.com |
Domain |
In Scope |
Critical |
Eligible |
2025-11-20 |
0 |
| Superhuman (formerly Grammarly) |
gateway.superhuman.com |
Domain |
In Scope |
Critical |
Eligible |
2025-11-20 |
2 |
| Superhuman (formerly Grammarly) |
*.grammarlyaws.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-03-05 |
10 |
| Superhuman (formerly Grammarly) |
codacontent.io |
Domain |
In Scope |
Critical |
Eligible |
2025-11-20 |
1 |
| Superhuman (formerly Grammarly) |
codahosted.io |
Domain |
In Scope |
Critical |
Eligible |
2025-11-20 |
4 |
| Superhuman (formerly Grammarly) |
status.coda.io |
Domain |
Out of Scope |
None |
Ineligible |
2025-11-20 |
0 |
| Superhuman (formerly Grammarly) |
*.coda.io |
Wildcard |
In Scope |
Critical |
Eligible |
2025-11-21 |
3 |
| Superhuman (formerly Grammarly) |
coda.io |
Domain |
In Scope |
Critical |
Eligible |
2025-11-21 |
5 |
| Superhuman (formerly Grammarly) |
coda.grammarly.com |
Domain |
In Scope |
Critical |
Eligible |
2025-11-21 |
0 |
| Superhuman (formerly Grammarly) |
io.coda.codaapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-11-20 |
4 |
| Superhuman (formerly Grammarly) |
io.coda |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-11-20 |
0 |
| Superhuman (formerly Grammarly) |
Coda Chrome Extension |
OtherAsset |
In Scope |
High |
Eligible |
2025-11-20 |
0 |
| Superhuman (formerly Grammarly) |
com.grammarly.android.keyboard |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-03-22 |
7 |
| Superhuman (formerly Grammarly) |
com.grammarly.keyboard |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-03-22 |
1 |
| Superhuman (formerly Grammarly) |
Superhuman Go |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-15 |
5 |
| Superhuman (formerly Grammarly) |
Grammarly Browser Extensions |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-11-15 |
17 |
| Superhuman (formerly Grammarly) |
superhuman.com |
Domain |
In Scope |
Critical |
Eligible |
2025-11-12 |
1 |
| Superhuman (formerly Grammarly) |
settings.superhuman.com |
Domain |
In Scope |
Critical |
Eligible |
2025-11-20 |
0 |
| Superhuman (formerly Grammarly) |
Capture the Flag |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-07-20 |
0 |
| Superhuman (formerly Grammarly) |
*.grammarly.io |
Wildcard |
In Scope |
Critical |
Eligible |
2017-09-15 |
26 |
| Superhuman (formerly Grammarly) |
*.grammarly.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-06-17 |
91 |
| Superhuman (formerly Grammarly) |
Grammarly Desktop for Windows |
Executable |
In Scope |
Critical |
Eligible |
2021-02-11 |
1 |
| Superhuman (formerly Grammarly) |
Grammarly Desktop for macOS |
Executable |
In Scope |
Critical |
Eligible |
2021-05-17 |
1 |
| FanDuel |
*.tvg.com |
Wildcard |
In Scope |
Critical |
Eligible |
2026-01-13 |
10 |
| FanDuel |
*.fanduel.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-11-01 |
186 |
| FanDuel |
affiliates.fanduel.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-07-24 |
0 |
| FanDuel |
equibase-store.fanduel.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-12-01 |
0 |
| FanDuel |
1413721906 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-07-24 |
1 |
| FanDuel |
6740879082 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-07-24 |
0 |
| FanDuel |
1485539253 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-07-24 |
0 |
| FanDuel |
com.fanduel.racing |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-07-24 |
0 |
| FanDuel |
1506229470 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-07-24 |
0 |
| FanDuel |
com.fanduel.casino |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-07-24 |
1 |
| FanDuel |
*.fndl.dev |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-01-15 |
0 |
| FanDuel |
com.fanduel.sportsbook |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-01-13 |
1 |
| FanDuel |
599664106 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-11-01 |
3 |
| FanDuel |
com.fanduel.android.self |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-11-14 |
9 |
| FanDuel |
login-4ngbets.us.betfair.com |
Domain |
In Scope |
Critical |
Eligible |
2022-11-30 |
1 |
| FanDuel |
www.4njbets.com |
Domain |
In Scope |
Critical |
Eligible |
2022-11-30 |
1 |
| FanDuel |
login-4njbets.us.betfair.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-01 |
0 |
| FanDuel |
4njbets.us.betfair.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-01 |
0 |
| FanDuel |
4njbets.com |
Domain |
In Scope |
Critical |
Eligible |
2024-04-01 |
0 |
| FanDuel |
*inf.fndlsb.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-04-01 |
0 |
| FanDuel |
*.prd.fndlsb.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-04-01 |
1 |
| FanDuel |
*.mgmt.fndlsb.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-04-01 |
0 |
| Flickr |
modefestival.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-26 |
0 |
| Flickr |
www.whatismode.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-25 |
0 |
| Flickr |
Zero Day Vulnerabilities/Security Upgrades |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-01-13 |
0 |
| Flickr |
*.flickr.net |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-05-27 |
0 |
| Flickr |
*.flickr.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-09-13 |
165 |
| Flickr |
flickrhelp.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-01-12 |
0 |
| Flickr |
links.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-06-22 |
0 |
| Flickr |
parkorbird.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
help.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
health.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
trunk.guce.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
stage.guce.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
guce.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
csp.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
code.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
bluebird.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
blogtest.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
appletv.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
amt.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-26 |
0 |
| Flickr |
blog.flickr.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-13 |
0 |
| Flickr |
com.yahoo.mobile.client.android.flickr |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-09-13 |
5 |
| Flickr |
328407587 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-09-13 |
4 |
| Matomo |
https://github.com/matomo-org/developer-documentation |
SourceCode |
In Scope |
Low |
Eligible |
2026-08-27 |
1 |
| Matomo |
https://github.com/matomo-org |
SourceCode |
In Scope |
High |
Eligible |
2018-09-24 |
53 |
| Matomo |
https://github.com/matomo-org/tracker-proxy |
SourceCode |
In Scope |
Medium |
Eligible |
2026-08-27 |
0 |
| Matomo |
https://github.com/innocraft/ |
SourceCode |
In Scope |
High |
Eligible |
2018-09-24 |
0 |
| Matomo |
https://plugins.matomo.org/developer/matomo-org |
SourceCode |
In Scope |
Critical |
Eligible |
2018-09-24 |
25 |
| Matomo |
https://plugins.matomo.org/developer/innocraft |
SourceCode |
In Scope |
Critical |
Eligible |
2018-09-24 |
17 |
| Matomo |
https://github.com/matomo-org/matomo |
SourceCode |
In Scope |
Critical |
Eligible |
2018-09-21 |
168 |
| Matomo |
matomo.cloud |
Domain |
In Scope |
Critical |
Eligible |
2018-09-24 |
105 |
| Matomo |
https://github.com/matomo-org/docker |
Url |
In Scope |
Critical |
Eligible |
2023-12-06 |
1 |
| Matomo |
shop.matomo.org |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-28 |
0 |
| Matomo |
api.matomo.org |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-24 |
0 |
| Matomo |
plugins.matomo.org |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-21 |
0 |
| Matomo |
forum.matomo.org |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-27 |
0 |
| Matomo |
matomo.org |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-24 |
0 |
| Matomo |
737216887 |
IosAppStore |
In Scope |
Medium |
Ineligible |
2018-09-24 |
0 |
| Matomo |
org.piwik.mobile2 |
AndroidPlayStore |
In Scope |
Medium |
Ineligible |
2018-09-24 |
2 |
| PayPal |
http://www.paypal-support.com |
Url |
Out of Scope |
None |
Ineligible |
2026-09-03 |
0 |
| PayPal |
com.xoom.app |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-08-17 |
0 |
| PayPal |
com.yourcompany.PPClient |
IosAppStore |
In Scope |
Critical |
Ineligible |
2018-08-17 |
3 |
| PayPal |
com.paypal.here |
IosAppStore |
Out of Scope |
None |
Ineligible |
2018-08-17 |
0 |
| PayPal |
com.paypal.merchant |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-08-17 |
3 |
| PayPal |
com.xoom.android.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-08-17 |
1 |
| PayPal |
com.paypal.merchant.client |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-08-17 |
4 |
| PayPal |
com.paypal.android.p2pmobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-08-17 |
28 |
| PayPal |
www.paypal-*.com |
OtherAsset |
In Scope |
Low |
Eligible |
2018-08-17 |
146 |
| PayPal |
*.xoom.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-08-17 |
87 |
| PayPal |
com.venmo |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-08-17 |
9 |
| PayPal |
*.paydiant.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-08-17 |
31 |
| PayPal |
*.venmo.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-08-17 |
92 |
| PayPal |
PayPal SDK |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-04-10 |
6 |
| PayPal |
Braintree SDK |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-04-10 |
7 |
| PayPal |
*.braintreegateway.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-08-17 |
84 |
| PayPal |
sandbox.braintreegateway.com |
Domain |
In Scope |
Medium |
Eligible |
2024-04-10 |
1 |
| PayPal |
www.swiftcapital.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
1 |
| PayPal |
swiftcapital.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
0 |
| PayPal |
www.loanbuilder.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
5 |
| PayPal |
my.loanbuilder.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
1 |
| PayPal |
loanbuilder.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
4 |
| PayPal |
api.loanbuilder.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
2 |
| PayPal |
prequal.swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-06-05 |
1 |
| PayPal |
swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
1 |
| PayPal |
www.swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
2 |
| PayPal |
scrutiny.swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-06-05 |
0 |
| PayPal |
pigeon.swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-06-05 |
0 |
| PayPal |
partner.swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-06-05 |
1 |
| PayPal |
my.swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
1 |
| PayPal |
decision.swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-06-05 |
0 |
| PayPal |
paypalobjects.com |
Domain |
In Scope |
Medium |
Eligible |
2018-09-27 |
29 |
| PayPal |
com.paypal.here |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2018-08-17 |
0 |
| PayPal |
com.paypal.herehd |
IosAppStore |
Out of Scope |
None |
Ineligible |
2018-08-17 |
0 |
| PayPal |
api.swiftfinancial.com |
Domain |
In Scope |
Low |
Eligible |
2019-07-08 |
7 |
| PayPal |
www.gopay.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-01 |
0 |
| PayPal |
*.paypal.cn |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-01-06 |
0 |
| PayPal |
*.atlassian.net |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-03-20 |
0 |
| PayPal |
351727428 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-08-17 |
2 |
| PayPal |
braintree.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-21 |
0 |
| PayPal |
*.paylution.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-03-01 |
12 |
| PayPal |
*.hyperwallet.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-03-01 |
51 |
| PayPal |
*.paypalcorp.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-08-07 |
95 |
| PayPal |
*.braintree.tools |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-02-14 |
2 |
| PayPal |
*.braintree-api.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-02-01 |
38 |
| PayPal |
*.braintreepayments.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-02-01 |
52 |
| PayPal |
py.pl |
Domain |
In Scope |
Critical |
Eligible |
2018-09-27 |
7 |
| PayPal |
paypal.me |
Domain |
In Scope |
Critical |
Eligible |
2018-09-27 |
9 |
| PayPal |
*.paypal.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-08-17 |
1433 |
| Chaturbate |
*.mmwebc.dev |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-01 |
1 |
| Chaturbate |
*.cb.dev |
Wildcard |
In Scope |
Critical |
Eligible |
2024-03-01 |
8 |
| Chaturbate |
*.mmcdn.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-12-15 |
3 |
| Chaturbate |
*.securegatewayaccess.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-07-03 |
6 |
| Chaturbate |
*.highwebmedia.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-07-03 |
26 |
| Chaturbate |
status.chaturbate.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-07-16 |
0 |
| Chaturbate |
chaturbate.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-03 |
155 |
| Chaturbate |
cbswag.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-08-26 |
0 |
| Chaturbate |
secure.chaturbate.com |
Domain |
In Scope |
Critical |
Eligible |
2018-08-13 |
2 |
| Chaturbate |
billingsupport.chaturbate.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-03 |
6 |
| Chaturbate |
support.chaturbate.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-07-03 |
0 |
| Chaturbate |
m.chaturbate.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-03 |
7 |
| Airtable |
https://www.npmjs.com/package/@airtable/mcp-cli |
SourceCode |
In Scope |
Critical |
Eligible |
2026-06-09 |
2 |
| Airtable |
mcp.staging.airtable.com |
Domain |
In Scope |
Critical |
Eligible |
2026-06-09 |
1 |
| Airtable |
*.staging.airtable.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-04-09 |
37 |
| Airtable |
*.staging-airtableblocks.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-04-09 |
2 |
| Airtable |
airtable.js SDK (https://www.npmjs.com/package/airtable) |
SourceCode |
In Scope |
Critical |
Eligible |
2019-11-04 |
1 |
| Airtable |
api-staging.airtable.com |
Domain |
In Scope |
Critical |
Eligible |
2019-09-17 |
3 |
| Airtable |
community.airtable.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-09 |
0 |
| Airtable |
dl.getforma.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-10 |
0 |
| Airtable |
dl.airtable.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-10 |
0 |
| Airtable |
airtable.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-08-06 |
0 |
| Airtable |
com.FormaGrid.Hyperbase |
IosAppStore |
Out of Scope |
None |
Ineligible |
2018-04-09 |
0 |
| Airtable |
guide.airtable.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-08-05 |
0 |
| Airtable |
support.airtable.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-04-12 |
0 |
| Airtable |
blog.airtable.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-04-12 |
0 |
| Airtable |
com.formagrid.airtable |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2018-04-09 |
0 |
| Airtable |
Airtable Windows app |
OtherAsset |
Out of Scope |
None |
Ineligible |
2018-04-09 |
0 |
| Airtable |
Airtable macOS app |
OtherAsset |
Out of Scope |
None |
Ineligible |
2018-04-09 |
0 |
| Airtable |
staging.airtable.com |
Domain |
In Scope |
Critical |
Eligible |
2018-04-09 |
112 |
| Goldman Sachs |
*.vennhypotheken.nl |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-04-20 |
0 |
| Goldman Sachs |
*.folioinvesting.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
*.nnip.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-20 |
8 |
| Goldman Sachs |
3rd party hosted assets |
OtherAsset |
Out of Scope |
None |
Ineligible |
2025-02-24 |
0 |
| Goldman Sachs |
*.gs.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-01-08 |
142 |
| Goldman Sachs |
*.rocaton.com,secure.rocaton.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2020-04-17 |
0 |
| Goldman Sachs |
*.gs.de |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-13 |
7 |
| Goldman Sachs |
*.events.gs.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-05-23 |
0 |
| Goldman Sachs |
*.ayco.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-02-10 |
24 |
| Goldman Sachs |
*.nextcapital.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-31 |
5 |
| Goldman Sachs |
com.gs.gsnow.external |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
com.gs.mobile.gsnow |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
4 |
| Goldman Sachs |
com.gs.gstrader.external |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
com.gs.mobile.trader |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
com.gs.pfmg.wellness |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
1 |
| Goldman Sachs |
com.gs.pwmdigital.external |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
com.gs.pwmdigital.external.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
com.marcus.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
1 |
| Goldman Sachs |
com.marcus.android.uk |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
com.marcus.ios-uk |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
com.marcus.ios-us |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
*.communicatie.vennhypotheken.nl |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-04-20 |
0 |
| Goldman Sachs |
*.overrules.vennhypotheken.nl |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-04-20 |
0 |
| Goldman Sachs |
*.scripts.vennhypotheken.nl |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-04-20 |
0 |
| Goldman Sachs |
*.folioinstitutional.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-20 |
6 |
| Goldman Sachs |
*.folioidentity.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-20 |
6 |
| Goldman Sachs |
*.foliofn.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-20 |
8 |
| Goldman Sachs |
*.foliofirst.com |
OtherAsset |
In Scope |
None |
Eligible |
2023-04-20 |
2 |
| Goldman Sachs |
*.foliodigitalwealth.com |
OtherAsset |
In Scope |
None |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
*.folioclient.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-20 |
15 |
| Goldman Sachs |
*.advisorsolutions.gs.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
api.foliofn.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
apigw.foliofn.com |
Domain |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
rubygems.nextcapital.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-31 |
0 |
| Goldman Sachs |
repo.nextcapital.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-31 |
0 |
| Goldman Sachs |
npm.nextcapital.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-31 |
0 |
| Goldman Sachs |
npm-new.nextcapital.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-31 |
0 |
| Goldman Sachs |
email.nextcapital.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-31 |
0 |
| Goldman Sachs |
deb.nextcapital.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-31 |
0 |
| Goldman Sachs |
18098.nextcapital.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-31 |
0 |
| Goldman Sachs |
GS Select iOS app |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-04-20 |
0 |
| Goldman Sachs |
All .cn domains |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-08-20 |
0 |
| Goldman Sachs |
billpay.goldman.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-26 |
0 |
| Goldman Sachs |
qa-billpay.goldman.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-08-26 |
0 |
| Goldman Sachs |
gsg-uk.goldman.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-04-01 |
0 |
| Goldman Sachs |
gspf.goldman.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-18 |
0 |
| Goldman Sachs |
gsg.goldman.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-05-30 |
0 |
| Goldman Sachs |
*.claritymoney.com |
OtherAsset |
In Scope |
Critical |
Ineligible |
2019-08-09 |
6 |
| Goldman Sachs |
*.goldmanpfm.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-05-17 |
0 |
| Goldman Sachs |
*.gspublishing.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-04-17 |
5 |
| Goldman Sachs |
marquee.gs.com |
Domain |
In Scope |
Critical |
Eligible |
2019-09-03 |
2 |
| Goldman Sachs |
goldmansachsindices.com |
Domain |
In Scope |
Critical |
Eligible |
2019-09-03 |
1 |
| Goldman Sachs |
developer.gs.com |
Domain |
In Scope |
Critical |
Eligible |
2019-09-03 |
1 |
| Goldman Sachs |
*.global-liquidity.gs.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-08-20 |
0 |
| Goldman Sachs |
*.qaglobal-liquidity.gs.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-08-20 |
0 |
| Goldman Sachs |
*.gs-mosaic.gs.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-08-20 |
0 |
| Goldman Sachs |
*.gs-mosaic.qa.gs.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-08-20 |
0 |
| Goldman Sachs |
*.gsselect.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-08-09 |
6 |
| Goldman Sachs |
*.gsam.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-08-06 |
53 |
| Goldman Sachs |
research.gs.com |
Domain |
In Scope |
Critical |
Eligible |
2019-06-25 |
0 |
| Goldman Sachs |
*.marcus.co.uk |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-10-01 |
1 |
| Goldman Sachs |
*.honestdollar.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-06-03 |
11 |
| Goldman Sachs |
*.marcus.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-06-03 |
29 |
| Goldman Sachs |
*.goldman.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-01-10 |
39 |
| Goldman Sachs |
*.goldmansachs.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-11-30 |
26 |
| Valve |
*.steamstatic.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-11-04 |
2 |
| Valve |
Steam Client |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-02-06 |
29 |
| Valve |
list.valvesoftware.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-07 |
0 |
| Valve |
help.steampowered.com |
Domain |
In Scope |
Critical |
Eligible |
2019-02-19 |
14 |
| Valve |
playartifact.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-20 |
2 |
| Valve |
valvestore.forfansbyfans.com,store.valvesoftware.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-09-08 |
0 |
| Valve |
developer.valvesoftware.com |
Domain |
In Scope |
Low |
Eligible |
2018-05-11 |
3 |
| Valve |
https://github.com/valvesoftware |
SourceCode |
In Scope |
Critical |
Ineligible |
2018-05-10 |
3 |
| Valve |
translation.steampowered.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-10-24 |
0 |
| Valve |
wiki.teamfortress.com |
Domain |
In Scope |
Critical |
Ineligible |
2018-02-02 |
1 |
| Valve |
storefront.steampowered.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-10-24 |
0 |
| Valve |
www.steamgames.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-10-30 |
0 |
| Valve |
www.counter-strike.net |
Domain |
In Scope |
Critical |
Eligible |
2017-10-25 |
15 |
| Valve |
www.teamfortress.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-25 |
16 |
| Valve |
steamcommunity.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-17 |
263 |
| Valve |
store.steampowered.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-10 |
153 |
| Valve |
www.steampowered.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-10-17 |
0 |
| Valve |
partner.steamgames.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-10 |
255 |
| Valve |
partner.steampowered.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-08 |
44 |
| Valve |
api.steampowered.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-10 |
51 |
| Valve |
support.steampowered.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-08 |
20 |
| Valve |
www.valvesoftware.com |
Domain |
In Scope |
Critical |
Eligible |
2017-10-10 |
53 |
| Valve |
www.dota2.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-08 |
88 |
| Valve |
com.valvesoftware.Steam |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-09-13 |
12 |
| Valve |
com.valvesoftware.Steam |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-09-13 |
2 |
| Valve |
Steam Servers |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-08 |
56 |
| Crypto.com |
developer-platform-api.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2024-11-08 |
0 |
| Crypto.com |
tax.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2021-03-24 |
15 |
| Crypto.com |
developer-api.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-08 |
1 |
| Crypto.com |
developer.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2025-05-08 |
0 |
| Crypto.com |
js.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2020-07-13 |
4 |
| Crypto.com |
https://crypto.com/price |
Url |
In Scope |
Medium |
Eligible |
2023-07-06 |
8 |
| Crypto.com |
https://crypto.com/nft |
Url |
In Scope |
Critical |
Eligible |
2021-03-24 |
13 |
| Crypto.com |
travel.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2026-04-13 |
2 |
| Crypto.com |
experiences.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-17 |
0 |
| Crypto.com |
tickets.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-17 |
0 |
| Crypto.com |
com.defi.wallet |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2020-06-01 |
0 |
| Crypto.com |
com.defi.wallet |
IosAppStore |
Out of Scope |
None |
Ineligible |
2020-06-01 |
0 |
| Crypto.com |
Crypto.com Wallet Extension |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-03-28 |
0 |
| Crypto.com |
merchant.crypto.com |
Domain |
In Scope |
Medium |
Eligible |
2020-07-13 |
33 |
| Crypto.com |
https://explorer.cronos.org/token/0x2e53c5586e12a99d4CAE366E9Fc5C14fE9c6495d |
SmartContract |
In Scope |
Critical |
Eligible |
2026-04-22 |
0 |
| Crypto.com |
og.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-04 |
4 |
| Crypto.com |
nadex.com |
Domain |
In Scope |
Medium |
Eligible |
2024-12-17 |
7 |
| Crypto.com |
https://etherscan.io/token/0xfe18ae03741a5b84e39c295ac9c856ed7991c38e |
SmartContract |
In Scope |
Critical |
Eligible |
2024-12-10 |
0 |
| Crypto.com |
Crypto.com mobile app APIs that require an account |
Api |
In Scope |
Critical |
Eligible |
2024-04-11 |
1 |
| Crypto.com |
Crypto.com Exchange APIs that require an account |
Api |
In Scope |
Critical |
Eligible |
2024-04-11 |
2 |
| Crypto.com |
https://github.com/crypto-com/chain-desktop-wallet |
SourceCode |
Out of Scope |
None |
Ineligible |
2024-03-13 |
0 |
| Crypto.com |
web.crypto.com |
Domain |
In Scope |
Critical |
Eligible |
2024-11-08 |
8 |
| Crypto.com |
com.monaco.mobile |
IosAppStore |
In Scope |
High |
Eligible |
2018-04-12 |
14 |
| Crypto.com |
co.mona.android |
AndroidPlayStore |
In Scope |
High |
Eligible |
2018-04-12 |
20 |
| Crypto.com |
https://github.com/crypto-com/cro-staking |
SourceCode |
Out of Scope |
None |
Ineligible |
2020-09-11 |
0 |
| Crypto.com |
https://github.com/crypto-com/swap-contracts-periphery |
SourceCode |
Out of Scope |
None |
Ineligible |
2020-09-11 |
0 |
| Crypto.com |
https://github.com/crypto-com/swap-contracts-core |
SourceCode |
Out of Scope |
None |
Ineligible |
2020-09-11 |
0 |
| Crypto.com |
*.mona.co |
Wildcard |
In Scope |
Critical |
Eligible |
2023-12-07 |
5 |
| Crypto.com |
*.crypto.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-04-12 |
104 |
| Crypto.com |
app.mona.co |
Domain |
In Scope |
Critical |
Eligible |
2020-02-20 |
24 |
| Crypto.com |
https://crypto.com/exchange |
Url |
In Scope |
Critical |
Eligible |
2019-12-03 |
24 |
| Node.js |
https://github.com/nodejs/node |
SourceCode |
In Scope |
Critical |
Eligible |
2017-08-09 |
171 |
| Plaid |
https://my.plaid.com/data-subject-request-form |
Url |
Out of Scope |
None |
Ineligible |
2026-08-13 |
0 |
| Plaid |
https://github.com/plaid/react-plaid-link |
SourceCode |
In Scope |
Critical |
Eligible |
2021-10-28 |
0 |
| Plaid |
https://github.com/plaid/react-native-plaid-link-sdk |
SourceCode |
In Scope |
Critical |
Eligible |
2021-10-28 |
1 |
| Plaid |
https://github.com/plaid/plaid-ruby |
SourceCode |
In Scope |
Critical |
Eligible |
2021-10-28 |
1 |
| Plaid |
plaid.com |
Domain |
In Scope |
Medium |
Eligible |
2021-10-28 |
6 |
| Plaid |
secure.plaid.com |
Domain |
In Scope |
Critical |
Eligible |
2021-10-28 |
8 |
| Plaid |
https://github.com/plaid/plaid-link-android |
SourceCode |
In Scope |
Critical |
Eligible |
2020-05-21 |
1 |
| Plaid |
https://github.com/plaid/plaid-link-ios |
SourceCode |
In Scope |
Critical |
Eligible |
2017-11-29 |
2 |
| Plaid |
my.plaid.com |
Domain |
In Scope |
Critical |
Eligible |
2018-06-18 |
2 |
| Plaid |
demo.plaid.com |
Domain |
In Scope |
Medium |
Eligible |
2017-11-28 |
2 |
| Plaid |
production.plaid.com |
Domain |
In Scope |
Critical |
Eligible |
2017-11-28 |
9 |
| Plaid |
dashboard.plaid.com |
Domain |
In Scope |
Critical |
Eligible |
2017-11-28 |
30 |
| Plaid |
cdn.plaid.com |
Domain |
In Scope |
Critical |
Eligible |
2017-11-29 |
5 |
| Crowdstrike |
Falcon Browser Extension V2 |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-09-25 |
0 |
| Crowdstrike |
sgnlapis.cloud |
Domain |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Crowdstrike |
sgnl.cloud |
Domain |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Crowdstrike |
sgnl.team |
Domain |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Crowdstrike |
sgnl.ai |
Domain |
In Scope |
Critical |
Eligible |
2026-05-29 |
0 |
| Crowdstrike |
onum-labs.com |
Domain |
In Scope |
Critical |
Eligible |
2025-09-30 |
0 |
| Crowdstrike |
onum.com |
Domain |
In Scope |
Critical |
Eligible |
2025-09-30 |
0 |
| Crowdstrike |
*.adaptive-shield.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-12-02 |
1 |
| Crowdstrike |
*.flowsecurity.app |
Wildcard |
In Scope |
Critical |
Eligible |
2024-06-20 |
2 |
| Crowdstrike |
*.bionic.ai |
Wildcard |
In Scope |
Critical |
Eligible |
2024-01-11 |
3 |
| Crowdstrike |
*.reposify.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-12-14 |
5 |
| Crowdstrike |
*.preemptsecurity.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-08-15 |
1 |
| Crowdstrike |
*.preempt.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-08-15 |
3 |
| Crowdstrike |
*.securecircle.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-03-14 |
6 |
| Crowdstrike |
*.humio.com |
Wildcard |
In Scope |
Critical |
Eligible |
2021-11-17 |
11 |
| Crowdstrike |
*.crowdstrike.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-01-03 |
85 |
| Crowdstrike |
play.google.com/store/apps/details?id=com.crowdstrike.falconmobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-05-02 |
3 |
| Crowdstrike |
apps.apple.com/us/app/crowdstrike-falcon/id1458815656 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-02 |
0 |
| Crowdstrike |
www.crowdstrike.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-05 |
3 |
| Crowdstrike |
CrowdStrike public infrastructure |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-01-05 |
17 |
| Crowdstrike |
hybrid-analysis.com |
Domain |
In Scope |
Critical |
Eligible |
2019-05-14 |
14 |
| Crowdstrike |
falcon-sandbox.com |
Domain |
In Scope |
Critical |
Eligible |
2019-05-14 |
2 |
| Crowdstrike |
www.crowdstrike.org |
Domain |
In Scope |
Critical |
Eligible |
2018-01-05 |
3 |
| Semrush |
www.semrush.com |
Domain |
In Scope |
Critical |
Eligible |
2026-09-03 |
2 |
| Semrush |
Leaked/Сompromised Employee accounts |
OtherAsset |
In Scope |
Medium |
Eligible |
2024-08-13 |
0 |
| Semrush |
Other Semrush Related Asset |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-08-13 |
17 |
| Semrush |
*.myinsights.io |
Wildcard |
In Scope |
High |
Eligible |
2022-08-16 |
1 |
| Semrush |
*.prowly.com |
Wildcard |
In Scope |
Critical |
Ineligible |
2021-09-13 |
40 |
| Semrush |
*.sellzone.com |
Wildcard |
In Scope |
Medium |
Eligible |
2021-05-26 |
6 |
| Semrush |
*.scatec.io |
Wildcard |
In Scope |
High |
Eligible |
2021-02-15 |
0 |
| Semrush |
*.seoab.io |
Wildcard |
In Scope |
High |
Eligible |
2021-02-15 |
1 |
| Semrush |
*.seoquake.com |
Wildcard |
In Scope |
High |
Eligible |
2021-02-15 |
4 |
| Semrush |
*.semrush.net |
Wildcard |
In Scope |
Critical |
Eligible |
2021-02-15 |
21 |
| Semrush |
*.berush.com |
Wildcard |
In Scope |
High |
Ineligible |
2018-07-26 |
15 |
| Semrush |
*.semrush.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-07-17 |
398 |
| Semrush |
investors.semrush.com |
Domain |
In Scope |
Medium |
Ineligible |
2021-04-15 |
0 |
| Semrush |
workflows.semrush.com |
Domain |
In Scope |
Medium |
Ineligible |
2021-04-15 |
7 |
| Semrush |
email.semrush.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-07-17 |
0 |
| Semrush |
advocates.semrush.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-07-17 |
0 |
| Tor |
Tor Browser |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-04-08 |
13 |
| Grab |
Cloud & 3rd-Party Services (First-Party Misconfigurations) |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-09-21 |
1 |
| Grab |
grab.careers |
Domain |
In Scope |
Medium |
Eligible |
2018-06-11 |
2 |
| Grab |
kartaview.org |
Domain |
In Scope |
Medium |
Eligible |
2022-08-17 |
6 |
| Grab |
*.ovofinansial.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-05-15 |
3 |
| Grab |
hungrygowhere.com |
Domain |
In Scope |
High |
Eligible |
2025-05-12 |
3 |
| Grab |
1481198245 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-05-12 |
0 |
| Grab |
com.moveit.app.customer |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-05-12 |
2 |
| Grab |
*.qms.grab.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-02-17 |
0 |
| Grab |
ovo.id |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2024-02-12 |
9 |
| Grab |
1142114207 |
IosAppStore |
In Scope |
Critical |
Eligible |
2024-02-12 |
0 |
| Grab |
*.ovo.id |
Wildcard |
In Scope |
High |
Eligible |
2024-02-12 |
31 |
| Grab |
*.grab-sure.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-02-28 |
11 |
| Grab |
gifts.grab.com |
Domain |
In Scope |
Critical |
Eligible |
2023-02-28 |
1 |
| Grab |
*.grabpay.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-03-26 |
25 |
| Grab |
*.grab.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-09-20 |
298 |
| Grab |
*.grab.co |
Wildcard |
In Scope |
Medium |
Eligible |
2017-09-20 |
7 |
| Grab |
*.myteksi.net |
Wildcard |
In Scope |
Critical |
Eligible |
2017-09-20 |
112 |
| Grab |
*.myteksi.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-09-20 |
24 |
| Grab |
*.grabtaxi.com |
Wildcard |
In Scope |
Medium |
Eligible |
2017-09-20 |
31 |
| Grab |
C103149579 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-25 |
0 |
| Grab |
C100447517 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-25 |
0 |
| Grab |
1257641454 |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-09-20 |
0 |
| Grab |
com.grab.merchant |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2019-10-19 |
17 |
| Grab |
647268330 |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-09-20 |
8 |
| Grab |
com.grabtaxi.driver2 |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-09-20 |
5 |
| Grab |
com.grabtaxi.passenger |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-09-20 |
43 |
| Grab |
xtramile.grabpay.com |
Domain |
In Scope |
Critical |
Eligible |
2019-03-26 |
0 |
| Grab |
1343620481 |
IosAppStore |
In Scope |
Medium |
Eligible |
2019-03-26 |
0 |
| Grab |
com.grabpay.merchant |
AndroidPlayStore |
In Scope |
Medium |
Eligible |
2019-03-26 |
1 |
| Grab |
api.grabpay.com |
Domain |
In Scope |
Critical |
Eligible |
2019-03-26 |
6 |
| Grab |
p.grabtaxi.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-20 |
19 |
| Grab |
manage.grab.co |
Domain |
In Scope |
Critical |
Eligible |
2017-09-20 |
0 |
| Grab |
gamma.grab.co |
Domain |
In Scope |
Critical |
Eligible |
2017-09-20 |
0 |
| Bumble |
brand.bumble.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-03-17 |
0 |
| Bumble |
sockets.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
1 |
| Bumble |
sockets.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
presence.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
presence.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
links.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
links.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
web.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
www.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
1 |
| Bumble |
go.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
deeplinks.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
deeplinks.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
payments.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
gateway.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
3 |
| Bumble |
router.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
2 |
| Bumble |
social.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
app.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2026-01-05 |
0 |
| Bumble |
com.genevachat.staging |
AndroidApk |
In Scope |
Critical |
Eligible |
2026-01-05 |
0 |
| Bumble |
social.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
gateway.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
payments.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
api.geneva-staging.com |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
4 |
| Bumble |
app.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
4 |
| Bumble |
www.geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
geneva-staging.chat |
Domain |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
https://testflight.apple.com/join/Y4cHu289 |
IosTestflight |
In Scope |
Critical |
Eligible |
2025-03-14 |
0 |
| Bumble |
com.bumble.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-02-03 |
9 |
| Bumble |
thebeehive.bumble.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-15 |
0 |
| Bumble |
honey.bumble.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-15 |
0 |
| Bumble |
shop.bumble.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-15 |
0 |
| Bumble |
blog.bumble.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-15 |
0 |
| Bumble |
bma.bumble.com |
Domain |
In Scope |
Critical |
Eligible |
2021-01-15 |
1 |
| Bumble |
www.bumble.com |
Domain |
In Scope |
Critical |
Eligible |
2021-01-15 |
29 |
| Bumble |
com.badoo.twa |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-02-12 |
1 |
| Bumble |
com.badoo.mobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-02-12 |
7 |
| Bumble |
translate.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
badoocdn.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
2 |
| Bumble |
mus1.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
1 |
| Bumble |
meu1.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
1 |
| Bumble |
m.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
corp.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
us1.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
eu1.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
3 |
| Bumble |
403684733 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
351331194 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-02-12 |
1 |
| Bumble |
6444040977 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-01-05 |
0 |
| Bumble |
com.bumblebff.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-03-27 |
0 |
| Bumble |
com.hotornot.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-10-05 |
1 |
| Bumble |
chatdate.app |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
5 |
| Bumble |
ccardsus1.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
ccardseu1.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
bma.badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
hotornot.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
0 |
| Bumble |
badoo.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-12 |
21 |
| Bumble |
930441707 |
IosAppStore |
In Scope |
Critical |
Eligible |
2021-02-03 |
2 |
| Spotify |
Confidence Domains |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-09-23 |
0 |
| Spotify |
https://github.com/backstage/backstage |
SourceCode |
In Scope |
Medium |
Eligible |
2026-02-19 |
6 |
| Spotify |
Core Backstage source code |
SourceCode |
In Scope |
Critical |
Eligible |
2020-04-07 |
47 |
| Spotify |
Save to Spotify CLI |
Executable |
In Scope |
Critical |
Eligible |
2026-05-08 |
1 |
| Spotify |
DRM (Digital Rights Management) System |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-04-20 |
0 |
| Spotify |
Other Spotify websites |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-03-01 |
390 |
| Spotify |
https://www.whosampled.com/ |
Url |
In Scope |
Critical |
Eligible |
2025-11-19 |
3 |
| Spotify |
Wrapped |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-10-14 |
0 |
| Spotify |
api-partner.spotify.com |
Api |
In Scope |
Critical |
Eligible |
2024-11-13 |
19 |
| Spotify |
api.spotify.com |
Domain |
In Scope |
Critical |
Eligible |
2024-11-13 |
3 |
| Spotify |
*.spotify.net |
Wildcard |
In Scope |
Critical |
Eligible |
2024-11-05 |
7 |
| Spotify |
*.spotify.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-11-05 |
149 |
| Spotify |
example.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-16 |
0 |
| Spotify |
Sonantic |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-02-16 |
2 |
| Spotify |
Okta |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-04 |
1 |
| Spotify |
Jira |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-04 |
1 |
| Spotify |
GHE |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-04 |
0 |
| Spotify |
VPN |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-04 |
0 |
| Spotify |
Non-Core Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-03 |
1 |
| Spotify |
Core Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-09-03 |
0 |
| Spotify |
backstage.io |
Domain |
In Scope |
Medium |
Eligible |
2020-03-23 |
6 |
| Spotify |
Web Playback SDK |
SourceCode |
In Scope |
Critical |
Eligible |
2019-11-19 |
0 |
| Spotify |
Anchor |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-11-12 |
85 |
| Spotify |
fm.anchor.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-11-12 |
6 |
| Spotify |
Podsights |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-03-16 |
107 |
| Spotify |
com.spotify.tv.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2019-03-01 |
2 |
| Spotify |
com.anchorfminc.Anchor |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-11-12 |
2 |
| Spotify |
*.byspotify.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-04-04 |
19 |
| Spotify |
*.withspotify.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-04-04 |
11 |
| Spotify |
*.forspotify.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-04-04 |
0 |
| Spotify |
iOS SDK |
SourceCode |
In Scope |
Critical |
Eligible |
2019-11-19 |
1 |
| Spotify |
Spotify desktop application (Windows and Mac) |
Executable |
In Scope |
Critical |
Eligible |
2019-03-28 |
16 |
| Spotify |
Spotify SDKs |
SourceCode |
In Scope |
Critical |
Eligible |
2019-03-01 |
10 |
| Spotify |
Android SDK |
SourceCode |
In Scope |
Critical |
Eligible |
2019-11-19 |
1 |
| Spotify |
com.spotify.client |
IosAppStore |
In Scope |
Critical |
Eligible |
2019-03-01 |
0 |
| Spotify |
com.spotify.s4a |
IosAppStore |
In Scope |
Critical |
Eligible |
2019-03-01 |
1 |
| Spotify |
com.spotify.s4a |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2019-03-01 |
8 |
| Spotify |
com.spotify.kids |
IosAppStore |
In Scope |
Critical |
Eligible |
2019-11-19 |
0 |
| Spotify |
com.spotify.kids |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-05-27 |
0 |
| Spotify |
Megaphone |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-08-25 |
10 |
| Spotify |
com.spotify.music |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2019-03-01 |
13 |
| Spotify |
*.tospotify.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-04-04 |
0 |
| Spotify |
*.fromspotify.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-04-04 |
0 |
| Spotify |
*.enspotify.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-04-04 |
0 |
| Spotify |
*.avecspotify.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-04-04 |
0 |
| Spotify |
*.atspotify.com |
Wildcard |
In Scope |
Low |
Eligible |
2024-04-04 |
3 |
| Spotify |
everynoise.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-16 |
0 |
| Spotify |
Preact |
OtherAsset |
Out of Scope |
None |
Ineligible |
2019-11-12 |
0 |
| Spotify |
The Ringer |
OtherAsset |
Out of Scope |
None |
Ineligible |
2020-02-26 |
0 |
| Spotify |
com.soundtrap.studioapp |
IosAppStore |
Out of Scope |
None |
Ineligible |
2019-03-01 |
0 |
| Spotify |
com.soundtrap.studioapp |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2019-03-01 |
0 |
| Spotify |
Soundtrap |
OtherAsset |
Out of Scope |
None |
Ineligible |
2019-11-12 |
0 |
| Spotify |
Findaway |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-02-16 |
0 |
| Spotify |
assets.spotify.com |
Domain |
In Scope |
Critical |
Eligible |
2019-03-01 |
4 |
| Rockstar Games |
www.rockstargames.com |
Domain |
In Scope |
Critical |
Eligible |
2025-02-06 |
1 |
| Rockstar Games |
anomotion.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-07-15 |
0 |
| Rockstar Games |
lifeinvader.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-07-25 |
0 |
| Rockstar Games |
circolocorecords.com/ |
Domain |
In Scope |
Medium |
Eligible |
2023-05-16 |
1 |
| Rockstar Games |
any-invalid-domains.rockstargames.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-02-07 |
0 |
| Rockstar Games |
Rockstar Games Launcher |
Executable |
In Scope |
Critical |
Eligible |
2019-11-04 |
20 |
| Rockstar Games |
bomgar.rockstargames.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-02-11 |
0 |
| Rockstar Games |
emailcontent.rockstargames.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-06-15 |
0 |
| Rockstar Games |
faspex.rockstargames.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-07-25 |
0 |
| Rockstar Games |
rockstarnorth.com |
Domain |
In Scope |
Medium |
Eligible |
2017-07-25 |
3 |
| Rockstar Games |
store.rockstargames.com |
Domain |
In Scope |
Critical |
Eligible |
2022-07-12 |
2 |
| Rockstar Games |
*.rockstargames.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-11-04 |
261 |
| Rockstar Games |
support.rockstargames.com |
Domain |
In Scope |
Critical |
Eligible |
2017-07-25 |
58 |
| Rockstar Games |
prod.ros.rockstargames.com |
Domain |
In Scope |
Critical |
Eligible |
2017-07-25 |
12 |
| Rockstar Games |
socialclub.rockstargames.com |
Domain |
In Scope |
Critical |
Eligible |
2017-07-25 |
223 |
| Files.com |
your-assigned-subdomain.hosted-by-files.com |
Domain |
In Scope |
Critical |
Eligible |
2026-09-15 |
3 |
| Files.com |
www.files.com |
Domain |
In Scope |
Low |
Eligible |
2018-07-10 |
11 |
| Files.com |
Files.com Desktop v6 App |
Executable |
In Scope |
Medium |
Eligible |
2025-01-27 |
3 |
| Files.com |
Files.com Mobile App |
OtherAsset |
In Scope |
Medium |
Eligible |
2025-01-27 |
1 |
| Files.com |
Files.com On-Premise Agent |
Executable |
In Scope |
Medium |
Eligible |
2025-01-27 |
9 |
| Files.com |
Files.com Command Line Interface (CLI) App |
Executable |
In Scope |
Medium |
Eligible |
2025-01-27 |
7 |
| Files.com |
Files.com SDKs and MCP |
OtherAsset |
In Scope |
Medium |
Eligible |
2020-07-21 |
14 |
| Files.com |
In-App AI Assistant |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-06-05 |
0 |
| Files.com |
FIles.com REST API |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-07-19 |
59 |
| Files.com |
app.files.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-10 |
30 |
| Files.com |
status.files.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-07-19 |
0 |
| Files.com |
developers.files.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-07-19 |
0 |
| Files.com |
your-assigned-subdomain.files.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-10 |
169 |
| Files.com |
mail.files.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-07-22 |
0 |
| Lyst |
*.lyst.co |
Wildcard |
In Scope |
Critical |
Eligible |
2020-01-21 |
2 |
| Lyst |
*.lystit.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-01-21 |
7 |
| Lyst |
*.lyst.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-06-28 |
22 |
| Lyst |
com.lyst.lystapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2021-12-06 |
1 |
| Lyst |
mobileapi.lystit.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-21 |
1 |
| Lyst |
cdna.lystit.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-21 |
0 |
| Lyst |
597940518 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-01-21 |
2 |
| Lyst |
help.lyst.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-06-28 |
0 |
| Discourse |
https://github.com/discourse/discourse |
SourceCode |
In Scope |
Critical |
Eligible |
2024-05-23 |
65 |
| Discourse |
try.discourse.org |
Domain |
In Scope |
Critical |
Eligible |
2021-03-17 |
97 |
| Quora |
*.quora.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-02-14 |
227 |
| Quora |
poe.com |
Domain |
In Scope |
Critical |
Eligible |
2024-07-27 |
35 |
| Quora |
com.quora.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-02-14 |
15 |
| Quora |
com.quora.app.mobile |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-02-14 |
0 |
| Nintendo |
Nintendo Switch 2 System Processes |
Hardware |
In Scope |
Critical |
Eligible |
2025-06-11 |
11 |
| Nintendo |
Nintendo Switch 2 System Processes allowing piracy |
Hardware |
In Scope |
Critical |
Eligible |
2025-06-11 |
0 |
| Nintendo |
Nintendo Switch 2 Kernel / ARM® TrustZone® |
Hardware |
In Scope |
Critical |
Eligible |
2025-06-11 |
0 |
| Nintendo |
Nintendo Switch 2 Security controller known as PSC or Platform Security Controller (any component) / Security controller known as TSEC (bootROM only) |
Hardware |
In Scope |
Critical |
Eligible |
2025-06-11 |
1 |
| Nintendo |
Nintendo Switch 2 applications for which Nintendo is the publisher worldwide |
Hardware |
In Scope |
Critical |
Eligible |
2025-06-11 |
8 |
| Nintendo |
Nintendo 3DS System |
Hardware |
Out of Scope |
None |
Ineligible |
2023-04-14 |
0 |
| Nintendo |
Nintendo 3DS applications for which Nintendo is the publisher worldwide |
Hardware |
Out of Scope |
None |
Ineligible |
2023-04-14 |
0 |
| Nintendo |
Nintendo Switch applications for which Nintendo is the publisher worldwide |
Hardware |
In Scope |
Critical |
Eligible |
2023-04-13 |
71 |
| Nintendo |
Nintendo Switch System |
Hardware |
In Scope |
Critical |
Eligible |
2023-04-13 |
58 |
| PortSwigger Web Security |
Burp Suite Extension (BApps) |
Executable |
Out of Scope |
None |
Ineligible |
2017-07-21 |
0 |
| PortSwigger Web Security |
id.portswigger.net |
Domain |
In Scope |
Critical |
Eligible |
2026-06-09 |
0 |
| PortSwigger Web Security |
links.portswigger.net |
Domain |
In Scope |
Critical |
Eligible |
2025-12-19 |
0 |
| PortSwigger Web Security |
share.portswigger.net |
Domain |
In Scope |
Critical |
Eligible |
2025-12-19 |
0 |
| PortSwigger Web Security |
collections.portswigger.net |
Domain |
In Scope |
Critical |
Eligible |
2025-12-19 |
0 |
| PortSwigger Web Security |
http1mustdie.com |
Domain |
In Scope |
High |
Eligible |
2025-07-29 |
1 |
| PortSwigger Web Security |
Burp Suite DAST |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-04-17 |
3 |
| PortSwigger Web Security |
ai.portswigger.net |
Domain |
In Scope |
Critical |
Eligible |
2025-04-02 |
0 |
| PortSwigger Web Security |
*.portswigger.net |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-11-18 |
0 |
| PortSwigger Web Security |
*.web-security-academy.net |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-06-12 |
0 |
| PortSwigger Web Security |
Burp Suite Pro/Community |
Executable |
In Scope |
High |
Eligible |
2017-07-21 |
23 |
| PortSwigger Web Security |
portswigger.net |
Domain |
In Scope |
Critical |
Eligible |
2017-07-21 |
33 |
| PortSwigger Web Security |
Burp Collaborator |
Executable |
In Scope |
Critical |
Eligible |
2017-07-21 |
3 |
| Starbucks |
istarbucks.co.kr |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-02 |
0 |
| Starbucks |
athome.starbucks.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-05-12 |
0 |
| Starbucks |
Teavana |
OtherAsset |
Out of Scope |
None |
Ineligible |
2026-01-05 |
0 |
| Starbucks |
lsstar.starbucks.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-09-25 |
0 |
| Starbucks |
careers.starbucks.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-06-26 |
0 |
| Starbucks |
apply.starbucks.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-04-18 |
0 |
| Starbucks |
Other assets |
OtherAsset |
In Scope |
Critical |
Ineligible |
2018-07-31 |
763 |
| Starbucks |
com.starbucks.mystarbucks |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-07-31 |
2 |
| Starbucks |
com.starbucks.mobilecard |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-07-31 |
4 |
| Starbucks |
Subdomain Takeover (SDTO) |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-09-28 |
61 |
| Starbucks |
secureui.starbucks.com |
Domain |
In Scope |
Critical |
Eligible |
2020-09-28 |
0 |
| Starbucks |
openapi.starbucks.com |
Domain |
In Scope |
Critical |
Eligible |
2020-09-28 |
1 |
| Starbucks |
app.starbucks.com |
Domain |
In Scope |
Critical |
Eligible |
2018-09-13 |
34 |
| Starbucks |
www.starbucks.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-31 |
229 |
| Starbucks |
www.starbucks.ca |
Domain |
In Scope |
Critical |
Eligible |
2018-07-31 |
16 |
| Starbucks |
www.starbucksreserve.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-31 |
7 |
| Brave Software |
Brave websites |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-03-16 |
13 |
| Brave Software |
Brave Browser Desktop |
Executable |
In Scope |
Critical |
Eligible |
2026-02-15 |
40 |
| Brave Software |
https://github.com/brave/*, https://github.com/brave-intl/* |
SourceCode |
In Scope |
Critical |
Eligible |
2025-10-08 |
27 |
| Brave Software |
com.brave.ios.browser |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-03-28 |
64 |
| Brave Software |
com.brave.browser |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-03-28 |
26 |
| Yelp |
*.yelp-support.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-02-12 |
0 |
| Yelp |
*.yelpwifi.com |
Wildcard |
In Scope |
Low |
Eligible |
2020-02-14 |
4 |
| Yelp |
*.yelp.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-02-11 |
171 |
| Yelp |
yelptop100.com |
Domain |
In Scope |
Low |
Eligible |
2022-09-20 |
0 |
| Yelp |
blog.yelp.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-02-12 |
0 |
| Yelp |
yelp.careers |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-20 |
0 |
| Yelp |
yelp-press.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-20 |
0 |
| Yelp |
cloud.e.yelp-business.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-02-14 |
0 |
| Yelp |
engineeringblog.yelp.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-02-12 |
0 |
| Yelp |
www.yelp-ir.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-02-14 |
0 |
| Yelp |
com.yelp.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-02-12 |
6 |
| Yelp |
com.yelp.android.biz |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-02-12 |
3 |
| Yelp |
284910350 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-02-11 |
1 |
| Yelp |
936983378 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-02-11 |
6 |
| Yelp |
542767785 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-02-11 |
4 |
| Ruby |
https://github.com/ruby/ruby |
SourceCode |
In Scope |
Critical |
Ineligible |
2019-05-10 |
49 |
| Ruby |
*.ruby-lang.org |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-05-10 |
0 |
| Nextcloud |
com.nextcloud.Talk |
IosAppStore |
In Scope |
Medium |
Ineligible |
2018-09-25 |
11 |
| Nextcloud |
it.twsweb.Nextcloud |
IosAppStore |
In Scope |
Medium |
Ineligible |
2017-06-14 |
13 |
| Nextcloud |
Desktop Client |
Executable |
In Scope |
Critical |
Ineligible |
2017-06-15 |
56 |
| Nextcloud |
com.nextcloud.talk2 |
AndroidPlayStore |
In Scope |
Medium |
Ineligible |
2018-09-25 |
11 |
| Nextcloud |
com.nextcloud.client |
AndroidPlayStore |
In Scope |
Medium |
Ineligible |
2017-06-14 |
41 |
| Nextcloud |
nextcloud/spreed |
SourceCode |
In Scope |
Critical |
Ineligible |
2018-09-25 |
57 |
| Nextcloud |
nextcloud/updater |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
3 |
| Nextcloud |
nextcloud/survey_client |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
1 |
| Nextcloud |
nextcloud/logreader |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
2 |
| Nextcloud |
nextcloud/nextcloud_announcements |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
1 |
| Nextcloud |
nextcloud/serverinfo |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
1 |
| Nextcloud |
nextcloud/files_retention |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
2 |
| Nextcloud |
nextcloud/files_automatedtagging |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
nextcloud/user_saml |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
5 |
| Nextcloud |
nextcloud/password_policy |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
7 |
| Nextcloud |
nextcloud/notifications |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
4 |
| Nextcloud |
nextcloud/firstrunwizard |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
nextcloud/files_texteditor |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
1 |
| Nextcloud |
nextcloud/files_pdfviewer |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
3 |
| Nextcloud |
nextcloud/3rdparty |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-15 |
8 |
| Nextcloud |
nextcloud/files_accesscontrol |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-14 |
6 |
| Nextcloud |
nextcloud/activity |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-14 |
3 |
| Nextcloud |
nextcloud/server |
SourceCode |
In Scope |
Critical |
Ineligible |
2017-06-14 |
368 |
| Nextcloud |
com.peterandlinda.iOCNotes |
IosAppStore |
In Scope |
Critical |
Ineligible |
2023-03-20 |
3 |
| Nextcloud |
it.niedermann.owncloud.notes |
AndroidPlayStore |
In Scope |
Medium |
Ineligible |
2023-03-20 |
5 |
| Nextcloud |
nextcloud/files_fulltextsearch_tesseract |
SourceCode |
In Scope |
Critical |
Ineligible |
2026-02-06 |
0 |
| Nextcloud |
https://github.com/nextcloud/collectives |
SourceCode |
In Scope |
Critical |
Ineligible |
2024-06-17 |
13 |
| Nextcloud |
https://github.com/nextcloud/tables |
SourceCode |
In Scope |
Critical |
Ineligible |
2024-06-07 |
37 |
| Nextcloud |
https://github.com/nextcloud/files_confidential |
SourceCode |
In Scope |
Critical |
Ineligible |
2024-01-15 |
2 |
| Nextcloud |
nextcloud/notes |
SourceCode |
In Scope |
Critical |
Ineligible |
2023-03-20 |
8 |
| Nextcloud |
nextcloud/globalsiteselector |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
2 |
| Nextcloud |
nextcloud/calendar_resource_management |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
3 |
| Nextcloud |
nextcloud/notify_push |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
1 |
| Nextcloud |
nextcloud/external |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
2 |
| Nextcloud |
nextcloud/twofactor_webauthn |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
3 |
| Nextcloud |
nextcloud/user_migration |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
3 |
| Nextcloud |
nextcloud/files_lock |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
3 |
| Nextcloud |
nextcloud/approval |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
5 |
| Nextcloud |
nextcloud/related_resources |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
1 |
| Nextcloud |
nextcloud/bruteforcesettings |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
2 |
| Nextcloud |
nextcloud/deck |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-05-26 |
28 |
| Nextcloud |
nextcloud/end_to_end_encryption |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-05-10 |
17 |
| Nextcloud |
nextcloud/richdocuments |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
29 |
| Nextcloud |
nextcloud/contacts |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
15 |
| Nextcloud |
nextcloud/calendar |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
24 |
| Nextcloud |
nextcloud/workflow_script |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
2 |
| Nextcloud |
nextcloud/user_oidc |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
18 |
| Nextcloud |
nextcloud/twofactor_totp |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
4 |
| Nextcloud |
nextcloud/terms_of_service |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
2 |
| Nextcloud |
nextcloud/suspicious_login |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
1 |
| Nextcloud |
nextcloud/socialsharing |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
0 |
| Nextcloud |
nextcloud/sharepoint |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
1 |
| Nextcloud |
nextcloud/guests |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
2 |
| Nextcloud |
nextcloud/groupfolders |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
11 |
| Nextcloud |
nextcloud/files_fulltextsearch |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
0 |
| Nextcloud |
nextcloud/fulltextsearch_elasticsearch |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
1 |
| Nextcloud |
nextcloud/flow_notifications |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
0 |
| Nextcloud |
nextcloud/fulltextsearch |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
1 |
| Nextcloud |
nextcloud/files_antivirus |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
2 |
| Nextcloud |
nextcloud/data_request |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
1 |
| Nextcloud |
nextcloud/circles |
SourceCode |
In Scope |
Critical |
Ineligible |
2021-04-06 |
17 |
| Nextcloud |
nextcloud/text |
SourceCode |
In Scope |
Critical |
Ineligible |
2020-03-19 |
17 |
| Nextcloud |
nextcloud/viewer |
SourceCode |
In Scope |
Critical |
Ineligible |
2020-03-19 |
2 |
| Nextcloud |
nextcloud/recommendations |
SourceCode |
In Scope |
Critical |
Ineligible |
2020-03-19 |
1 |
| Nextcloud |
nextcloud/privacy |
SourceCode |
In Scope |
Critical |
Ineligible |
2020-03-19 |
2 |
| Nextcloud |
nextcloud/files_rightclick |
SourceCode |
In Scope |
Critical |
Ineligible |
2020-03-19 |
0 |
| Nextcloud |
nextcloud/mail |
SourceCode |
In Scope |
Critical |
Ineligible |
2020-03-05 |
34 |
| Nextcloud |
nextcloud/photos |
SourceCode |
In Scope |
Critical |
Ineligible |
2020-03-05 |
8 |
| Nextcloud |
daita/files_fulltextsearch_tesseract |
SourceCode |
Out of Scope |
None |
Ineligible |
2021-04-06 |
0 |
| Nextcloud |
https://github.com/roundcube/roundcubemail |
SourceCode |
In Scope |
Critical |
Ineligible |
2023-11-29 |
36 |
| Nextcloud |
download.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
6 |
| Nextcloud |
https://nextcloud.atlassian.net/jira/dashboard |
Url |
Out of Scope |
None |
Ineligible |
2024-02-19 |
0 |
| Nextcloud |
customerupdates.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
4 |
| Nextcloud |
updates.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
5 |
| Nextcloud |
nextcloud/preferred_providers |
SourceCode |
In Scope |
Critical |
Ineligible |
2022-10-17 |
0 |
| Nextcloud |
try.nextcloud.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-09-10 |
0 |
| Nextcloud |
nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
56 |
| Nextcloud |
sentry.nextcloud.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-05-13 |
0 |
| Nextcloud |
newsletter.nextcloud.com |
Domain |
In Scope |
Low |
Ineligible |
2017-06-15 |
3 |
| Nextcloud |
auth.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
4 |
| Nextcloud |
demo.nextcloud.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
cloud.nextcloud.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
stats.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
1 |
| Nextcloud |
logs.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
push-notifications.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
1 |
| Nextcloud |
portal.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
4 |
| Nextcloud |
lists.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
1 |
| Nextcloud |
scan.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
5 |
| Nextcloud |
support.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
crm.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
1 |
| Nextcloud |
docs.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
2 |
| Nextcloud |
apps.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
23 |
| Nextcloud |
static.apps.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
conf.nextcloud.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
surveyserver.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
6 |
| Nextcloud |
knowledge.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
projects.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
0 |
| Nextcloud |
lookup.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
3 |
| Nextcloud |
usercontent.apps.nextcloud.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-06-15 |
4 |
| Nextcloud |
pushfeed.nextcloud.com |
Domain |
In Scope |
Low |
Ineligible |
2017-06-15 |
1 |
| Moneybird |
com.moneybird.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-11-02 |
10 |
| Moneybird |
com.moneybird.Moneybird |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-11-02 |
4 |
| Moneybird |
moneybirdstorage.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-02 |
0 |
| Moneybird |
moneybird.com |
Domain |
In Scope |
Critical |
Eligible |
2018-11-02 |
80 |
| GitHub |
GitHub Pages |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-02-19 |
13 |
| GitHub |
GitHub Spark |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-09-26 |
1 |
| GitHub |
Copilot Coding Agent |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-09-25 |
9 |
| GitHub |
Copilot Spaces |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-09-25 |
2 |
| GitHub |
GitHub Enterprise Cloud with Data Residency (GHEC-DR) |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-04-27 |
1 |
| GitHub |
Copilot for Business |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-08-20 |
2 |
| GitHub |
Copilot |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-09-13 |
18 |
| GitHub |
Copilot Chat on dotcom |
OtherAsset |
In Scope |
High |
Eligible |
2024-03-08 |
1 |
| GitHub |
GitHub Classroom Assistant |
Executable |
Out of Scope |
None |
Ineligible |
2019-02-19 |
0 |
| GitHub |
Electron |
Executable |
Out of Scope |
None |
Ineligible |
2017-06-23 |
0 |
| GitHub |
Atom |
Executable |
Out of Scope |
None |
Ineligible |
2017-06-23 |
0 |
| GitHub |
npm CLI |
Executable |
In Scope |
High |
Eligible |
2021-09-14 |
33 |
| GitHub |
GitHub CLI |
Executable |
In Scope |
High |
Eligible |
2020-08-25 |
33 |
| GitHub |
GitHub Desktop |
Executable |
In Scope |
Critical |
Eligible |
2017-06-23 |
14 |
| GitHub |
GitHub Enterprise Server |
Hardware |
In Scope |
Critical |
Eligible |
2017-06-22 |
137 |
| GitHub |
GitHub CSP |
OtherAsset |
In Scope |
High |
Eligible |
2017-06-24 |
5 |
| GitHub |
GitHub for mobile |
OtherAsset |
In Scope |
Critical |
Eligible |
2020-08-25 |
10 |
| GitHub |
Dependabot |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-10-08 |
16 |
| GitHub |
GitHub Production Credentials |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-02-19 |
15 |
| GitHub |
GitHub Enterprise Cloud |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-02-19 |
23 |
| GitHub |
shop.github.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-02-27 |
0 |
| GitHub |
community.github.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-02-27 |
0 |
| GitHub |
blog.github.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-02-27 |
0 |
| GitHub |
http://education.github.com/forum |
Url |
Out of Scope |
None |
Ineligible |
2019-02-27 |
0 |
| GitHub |
github.blog |
Domain |
Out of Scope |
None |
Ineligible |
2019-02-01 |
0 |
| GitHub |
spectrum.chat |
Domain |
Out of Scope |
None |
Ineligible |
2019-01-18 |
0 |
| GitHub |
git.io |
Domain |
Out of Scope |
None |
Ineligible |
2018-09-12 |
0 |
| GitHub |
*.github.io |
OtherAsset |
Out of Scope |
None |
Ineligible |
2017-06-23 |
0 |
| GitHub |
enterprise.github.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-06-22 |
0 |
| GitHub |
npmjs.org |
Domain |
In Scope |
Critical |
Eligible |
2021-09-14 |
11 |
| GitHub |
npmjs.com |
Domain |
In Scope |
Critical |
Eligible |
2021-09-14 |
72 |
| GitHub |
*.githubusercontent.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-06-21 |
15 |
| GitHub |
education.github.com |
Domain |
In Scope |
Critical |
Eligible |
2019-02-19 |
10 |
| GitHub |
*.github.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-02-19 |
5 |
| GitHub |
*.githubapp.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-06-23 |
51 |
| GitHub |
classroom.github.com |
Domain |
In Scope |
Critical |
Eligible |
2017-06-23 |
18 |
| GitHub |
gist.github.com |
Domain |
In Scope |
Critical |
Eligible |
2017-06-22 |
16 |
| GitHub |
api.github.com |
Domain |
In Scope |
Critical |
Eligible |
2017-06-22 |
193 |
| GitHub |
github.com |
Domain |
In Scope |
Critical |
Eligible |
2017-06-22 |
1093 |
| Uber |
adsacademy.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-09-22 |
0 |
| Uber |
central-beta.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-06-08 |
0 |
| Uber |
uber.com |
Domain |
In Scope |
Critical |
Eligible |
2023-03-14 |
342 |
| Uber |
merchants.ubereats.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-02-10 |
0 |
| Uber |
*scaledsolutions.uber.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-06 |
0 |
| Uber |
scaledsolutions*.uber.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-10-06 |
0 |
| Uber |
Fraud Reports |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-12-27 |
0 |
| Uber |
https://brand.uber.com |
Url |
Out of Scope |
None |
Ineligible |
2024-02-01 |
0 |
| Uber |
https://assets.uber.com |
Url |
Out of Scope |
None |
Ineligible |
2024-02-01 |
0 |
| Uber |
*.ubercarshare.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-03-14 |
0 |
| Uber |
*ubereats.com |
OtherAsset |
In Scope |
None |
Eligible |
2023-03-14 |
91 |
| Uber |
uber.com.cn |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-14 |
0 |
| Uber |
*.uberinternal.com |
OtherAsset |
In Scope |
None |
Eligible |
2023-03-14 |
39 |
| Uber |
uber.onelogin.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| Uber |
drive.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| Uber |
love.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| Uber |
people.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| Uber |
eng.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| Uber |
newsroom.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| Uber |
et.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| Uber |
bizblog.uber.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-03-13 |
0 |
| Uber |
Recon Data |
OtherAsset |
In Scope |
None |
Eligible |
2023-03-14 |
100 |
| Uber |
*.ubertransit.io |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-04-22 |
0 |
| Uber |
*.uberscoot.us |
OtherAsset |
Out of Scope |
None |
Ineligible |
2021-12-21 |
0 |
| GitLab |
https://gitlab.com/gitlab-org/opstrace/opstrace |
SourceCode |
Out of Scope |
None |
Ineligible |
2023-06-04 |
0 |
| GitLab |
*.gitlab-private.org |
Wildcard |
Out of Scope |
None |
Ineligible |
2025-05-07 |
0 |
| GitLab |
packages.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-02-06 |
0 |
| GitLab |
*.runway.gitlab.net |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-01-02 |
0 |
| GitLab |
GitLab for Jira Cloud |
OtherAsset |
In Scope |
Medium |
Eligible |
2023-12-07 |
0 |
| GitLab |
*.service-now.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-11-30 |
0 |
| GitLab |
gitlabtraining.cloud |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-16 |
0 |
| GitLab |
gitlabdemo.cloud |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-16 |
0 |
| GitLab |
gitlabsandbox.net |
Domain |
Out of Scope |
None |
Ineligible |
2023-08-16 |
0 |
| GitLab |
gitlab.com |
Domain |
In Scope |
Critical |
Eligible |
2018-12-12 |
1304 |
| GitLab |
*.gitlab.cn |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-06-13 |
0 |
| GitLab |
https://gitlab.com/gitlab-org/opstrace/opstrace-ui |
SourceCode |
Out of Scope |
None |
Ineligible |
2023-06-04 |
0 |
| GitLab |
*.gitlap.com |
Wildcard |
In Scope |
Medium |
Eligible |
2022-07-21 |
3 |
| GitLab |
*.gitlab.org |
Wildcard |
In Scope |
Medium |
Eligible |
2022-07-21 |
2 |
| GitLab |
*.gitlab.net |
Wildcard |
In Scope |
Medium |
Eligible |
2022-07-21 |
33 |
| GitLab |
customers.gitlab.com |
Domain |
In Scope |
Critical |
Eligible |
2018-12-12 |
23 |
| GitLab |
https://gitlab.com/gitlab-org/cli/ |
SourceCode |
Out of Scope |
None |
Ineligible |
2022-12-23 |
0 |
| GitLab |
gitlab.biterg.io |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-21 |
0 |
| GitLab |
https://gitlab.com/gitlab-org/gitlab-vscode-extension |
SourceCode |
In Scope |
Critical |
Eligible |
2021-01-21 |
3 |
| GitLab |
advisories.gitlab.com |
Domain |
In Scope |
Medium |
Eligible |
2022-07-21 |
0 |
| GitLab |
levelup.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-21 |
0 |
| GitLab |
design.gitlab.com |
Domain |
In Scope |
Medium |
Eligible |
2022-07-21 |
0 |
| GitLab |
docs.gitlab.com |
Domain |
In Scope |
Medium |
Eligible |
2022-07-21 |
4 |
| GitLab |
about.gitlab.com |
Domain |
In Scope |
Medium |
Eligible |
2022-07-21 |
4 |
| GitLab |
Other non-production infrastructure |
OtherAsset |
In Scope |
Medium |
Eligible |
2022-07-21 |
40 |
| GitLab |
ir.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-10 |
0 |
| GitLab |
us-federal-gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-06-14 |
0 |
| GitLab |
federal-support.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-06-14 |
0 |
| GitLab |
https://gitlab.com/gitlab-org/gitlab-shell |
SourceCode |
In Scope |
Critical |
Eligible |
2020-10-05 |
0 |
| GitLab |
https://gitlab.com/gitlab-org/gitlab-pages |
SourceCode |
In Scope |
Critical |
Eligible |
2020-10-05 |
2 |
| GitLab |
https://gitlab.com/gitlab-org/gitaly |
SourceCode |
In Scope |
Critical |
Eligible |
2020-10-05 |
3 |
| GitLab |
https://gitlab.com/gitlab-org/gitlab-runner |
SourceCode |
In Scope |
Critical |
Eligible |
2020-10-05 |
11 |
| GitLab |
https://gitlab.com/gitlab-org/gitlab |
SourceCode |
In Scope |
Critical |
Eligible |
2020-10-05 |
109 |
| GitLab |
translate.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-08-18 |
0 |
| GitLab |
aptly.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-07-29 |
0 |
| GitLab |
partners.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-06-22 |
0 |
| GitLab |
Your Own GitLab Instance |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-10-22 |
303 |
| GitLab |
status.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-12-12 |
0 |
| GitLab |
forum.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-12-12 |
0 |
| GitLab |
shop.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-12-12 |
0 |
| GitLab |
support.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-12-12 |
0 |
| GitLab |
alerts.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-12-12 |
0 |
| GitLab |
dashboards.gitlab.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-12-12 |
0 |
| GitLab |
registry.gitlab.com |
Domain |
In Scope |
Critical |
Eligible |
2018-12-12 |
1 |
| Eternal |
*.runnr.in |
Wildcard |
In Scope |
Critical |
Eligible |
2021-03-16 |
40 |
| Eternal |
Data Protection Program |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-11-19 |
12 |
| Eternal |
https://mcp-server.zomato.com/mcp |
Url |
In Scope |
Critical |
Eligible |
2025-09-23 |
3 |
| Eternal |
*.eternal.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-09-16 |
1 |
| Eternal |
960335206 |
IosAppStore |
In Scope |
Critical |
Eligible |
2023-05-04 |
2 |
| Eternal |
6670536058 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-07-08 |
0 |
| Eternal |
com.application.zomato.district |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-07-08 |
6 |
| Eternal |
bistro-api.blinkit.com |
Domain |
In Scope |
Critical |
Eligible |
2025-06-23 |
1 |
| Eternal |
6670203019 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-06-23 |
0 |
| Eternal |
com.blinkit.bistro |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-06-23 |
2 |
| Eternal |
Tier 3 |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-01-06 |
7 |
| Eternal |
*.tktnew.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-06 |
8 |
| Eternal |
*.district.in |
Wildcard |
In Scope |
Critical |
Eligible |
2024-10-10 |
28 |
| Eternal |
*.edition.in |
Wildcard |
In Scope |
Critical |
Eligible |
2024-10-10 |
5 |
| Eternal |
*.insider.in |
Wildcard |
In Scope |
Critical |
Eligible |
2024-10-10 |
29 |
| Eternal |
*.ticketnew.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-10-10 |
28 |
| Eternal |
Tier 1 |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-12-03 |
11 |
| Eternal |
Tier 2 |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-12-03 |
5 |
| Eternal |
*.hyperpure.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-11-25 |
44 |
| Eternal |
*.ali.zomans.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-10-28 |
0 |
| Eternal |
*.bstro.io |
Wildcard |
Out of Scope |
None |
Ineligible |
2024-10-03 |
0 |
| Eternal |
com.grofers.customerapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2023-05-04 |
3 |
| Eternal |
http://*.grofers.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-05-04 |
8 |
| Eternal |
*.zomatoportugal.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-07-17 |
0 |
| Eternal |
All Assets (other than Blinkit) |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-04 |
14 |
| Eternal |
http://*.grofer.io |
Wildcard |
In Scope |
Critical |
Eligible |
2023-05-04 |
1 |
| Eternal |
staging*.runnr.in |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-03-16 |
0 |
| Eternal |
*.zomans.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-08-06 |
21 |
| Eternal |
*.zdev.net |
Wildcard |
In Scope |
Critical |
Eligible |
2019-09-20 |
5 |
| Eternal |
*.zomato.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-07-24 |
548 |
| Eternal |
434613896 |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-07-24 |
10 |
| Eternal |
blinkit.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-04 |
23 |
| Eternal |
api2.grofers.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-04 |
8 |
| Eternal |
api.grofers.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-04 |
5 |
| Eternal |
http://*.blinkit.support |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-05-04 |
0 |
| Eternal |
www.zomatobook.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-07-24 |
0 |
| Eternal |
send.zomato.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-18 |
0 |
| Eternal |
devpod.hyperpure.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-11-25 |
0 |
| Eternal |
devapi.hyperpure.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-11-25 |
0 |
| Eternal |
dev.hyperpure.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-11-25 |
0 |
| Eternal |
com.application.zomato.ordering |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2017-07-24 |
0 |
| Eternal |
success.zomato.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-03-04 |
0 |
| Eternal |
Scope Questions: Items not explicitly listed here |
OtherAsset |
In Scope |
Critical |
Ineligible |
2020-02-08 |
2 |
| Eternal |
com.application.zomatomerchant |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2017-07-24 |
5 |
| Eternal |
community.zomato.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-07-24 |
0 |
| Eternal |
blog.zomato.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-07-24 |
0 |
| Eternal |
com.application.zomato |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-07-24 |
66 |
| Eternal |
business-blog.zomato.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-07-24 |
0 |
| Eternal |
winecellar.zomato.com |
Domain |
In Scope |
Critical |
Eligible |
2017-07-24 |
0 |
| Deriv.com |
https://api-core.deriv.com |
Url |
In Scope |
Critical |
Eligible |
2026-07-21 |
2 |
| Deriv.com |
core-api.deriv.com |
Domain |
In Scope |
Critical |
Eligible |
2026-07-21 |
0 |
| Deriv.com |
home.deriv.com |
Domain |
In Scope |
Critical |
Eligible |
2025-09-25 |
0 |
| Deriv.com |
api.deriv.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-26 |
7 |
| Deriv.com |
partners.deriv.com |
Domain |
In Scope |
None |
Ineligible |
2026-01-05 |
0 |
| Deriv.com |
deriv.partners |
Domain |
In Scope |
None |
Ineligible |
2025-10-16 |
1 |
| Deriv.com |
deriv.ae |
Domain |
Out of Scope |
None |
Ineligible |
2025-05-14 |
0 |
| Deriv.com |
Any 3rd party managed domain |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-10-04 |
0 |
| Deriv.com |
https://deriv.atlassian.net/servicedesk/customer/user/signup |
Url |
Out of Scope |
None |
Ineligible |
2024-10-02 |
0 |
| Deriv.com |
ct.deriv.com |
Domain |
In Scope |
Critical |
Ineligible |
2024-07-22 |
0 |
| Deriv.com |
secure-dfadmin.deriv.com |
Domain |
In Scope |
Critical |
Eligible |
2023-11-17 |
0 |
| Deriv.com |
*.derivws.com |
Wildcard |
In Scope |
Critical |
Eligible |
2023-10-30 |
3 |
| Deriv.com |
derivws.com |
Domain |
In Scope |
Critical |
Eligible |
2023-10-30 |
0 |
| Deriv.com |
*.deriv.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-05-24 |
77 |
| Deriv.com |
github.com/deriv-com |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-26 |
14 |
| Deriv.com |
oauth.deriv.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-26 |
8 |
| Deriv.com |
community.deriv.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-26 |
0 |
| Deriv.com |
trade.mql5.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-26 |
0 |
| Deriv.com |
tradingview.deriv.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-26 |
0 |
| Deriv.com |
deriv.slack.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-25 |
0 |
| Deriv.com |
*.deriv.cloud |
Wildcard |
In Scope |
Critical |
Eligible |
2022-05-25 |
9 |
| Deriv.com |
cashier.deriv.com |
Domain |
In Scope |
Critical |
Eligible |
2022-05-25 |
0 |
| Deriv.com |
smarttrader.deriv.com |
Domain |
In Scope |
Critical |
Eligible |
2022-05-25 |
0 |
| Deriv.com |
app.deriv.com |
Domain |
In Scope |
Critical |
Eligible |
2022-05-24 |
16 |
| Deriv.com |
github.com/binary-com |
SourceCode |
In Scope |
Medium |
Eligible |
2020-01-27 |
4 |
| Udemy |
coding-exercises.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-12-30 |
0 |
| Udemy |
ufbsupport.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
translate.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
theupskillingimperative.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
people-innovators.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
legalteam.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
keeplearning.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
government.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
design.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
copyright.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-05-17 |
0 |
| Udemy |
yourcompany.udemy.com |
Domain |
In Scope |
Critical |
Eligible |
2021-05-17 |
11 |
| Udemy |
helpdesk.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-21 |
0 |
| Udemy |
mi.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-21 |
0 |
| Udemy |
support.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-21 |
0 |
| Udemy |
research.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-21 |
0 |
| Udemy |
teach.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-21 |
0 |
| Udemy |
community.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-21 |
0 |
| Udemy |
business.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-21 |
0 |
| Udemy |
blog.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-18 |
0 |
| Udemy |
affiliates.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-18 |
0 |
| Udemy |
about.udemy.com |
Domain |
Out of Scope |
None |
Ineligible |
2020-01-18 |
0 |
| Udemy |
www.udemy.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-18 |
163 |
| Shopify |
Authentication & ATO |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-06-05 |
2 |
| Shopify |
Shopify Third Party Apps |
OtherAsset |
In Scope |
Medium |
Ineligible |
2018-04-24 |
24 |
| Shopify |
Shopify Third Party Store |
OtherAsset |
In Scope |
Medium |
Ineligible |
2018-04-24 |
3 |
| Shopify |
community.shopify.dev |
Domain |
Out of Scope |
None |
Ineligible |
2024-11-08 |
0 |
| Shopify |
academy.shopify.com |
Domain |
Out of Scope |
None |
Ineligible |
2024-10-09 |
0 |
| Shopify |
cdn.shopify.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-06-22 |
0 |
| Shopify |
supplier-portal.shopifycloud.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-03-13 |
0 |
| Shopify |
*.email.shopify.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2017-08-30 |
0 |
| Shopify |
investors.shopify.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-07-25 |
0 |
| Shopify |
livechat.shopify.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-12-14 |
0 |
| Shopify |
community.shopify.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-01-07 |
0 |
| Shopify |
Other |
OtherAsset |
Out of Scope |
None |
Ineligible |
2018-06-15 |
0 |
| Shopify |
*.shopify.com |
Wildcard |
In Scope |
Medium |
Eligible |
2018-05-30 |
250 |
| Shopify |
https://github.com/Shopify/* |
SourceCode |
In Scope |
Medium |
Eligible |
2024-01-30 |
35 |
| Shopify |
*.shopify.io |
Wildcard |
In Scope |
Medium |
Eligible |
2018-05-24 |
34 |
| Shopify |
*.shopifycloud.com |
Wildcard |
In Scope |
Medium |
Eligible |
2021-06-16 |
84 |
| Shopify |
Shopify Developed Apps |
OtherAsset |
In Scope |
Medium |
Eligible |
2019-09-11 |
240 |
| Shopify |
shopifyinbox.com |
Domain |
In Scope |
Medium |
Eligible |
2022-02-03 |
6 |
| Shopify |
linkpop.com |
Domain |
In Scope |
Medium |
Eligible |
2022-01-25 |
11 |
| Shopify |
*.shopifykloud.com |
Wildcard |
In Scope |
Medium |
Eligible |
2020-05-08 |
36 |
| Shopify |
accounts.shopify.com |
Domain |
In Scope |
Critical |
Eligible |
2017-07-25 |
121 |
| Shopify |
admin.shopify.com |
Domain |
In Scope |
Critical |
Eligible |
2023-06-09 |
129 |
| Shopify |
your-store.myshopify.com |
Domain |
In Scope |
Critical |
Eligible |
2017-07-25 |
500 |
| Shopify |
*.pci.shopifyinc.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-01-28 |
1 |
| Shopify |
partners.shopify.com |
Domain |
In Scope |
Critical |
Eligible |
2017-07-25 |
102 |
| Shopify |
shop.app |
Domain |
In Scope |
Critical |
Eligible |
2022-02-08 |
53 |
| Shopify |
arrive-server.shopifycloud.com |
Domain |
In Scope |
Critical |
Eligible |
2022-03-22 |
2 |
| Shopify |
*.shopifycs.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-02-14 |
2 |
| Shopify |
shopify.plus |
Domain |
In Scope |
Critical |
Eligible |
2022-03-22 |
2 |
| Shopify |
Shopify Mobile Applications |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-09-11 |
53 |
| Snapchat |
https://lensstudio.snapchat.com/api/ |
SourceCode |
In Scope |
Critical |
Eligible |
2022-02-02 |
1 |
| Snapchat |
Lens Studio |
Executable |
In Scope |
Medium |
Eligible |
2020-07-23 |
11 |
| Snapchat |
com.snapchat.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-07-04 |
72 |
| Snapchat |
Spectacles |
Hardware |
Out of Scope |
None |
Ineligible |
2018-07-04 |
0 |
| Snapchat |
Tier B - Non Core (Bitmoji, Playcanvas) |
OtherAsset |
In Scope |
Medium |
Eligible |
2023-05-08 |
3 |
| Snapchat |
*.sc-corp.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-27 |
3 |
| Snapchat |
dev.playcanv.as |
Domain |
Out of Scope |
None |
Ineligible |
2023-04-27 |
0 |
| Snapchat |
http://dev*.playcanvas.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-04-27 |
0 |
| Snapchat |
Tier A - Core Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-08 |
44 |
| Snapchat |
launch.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
1 |
| Snapchat |
playcanv.as |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
0 |
| Snapchat |
store.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
0 |
| Snapchat |
rt.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
0 |
| Snapchat |
relay.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
0 |
| Snapchat |
msg.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
0 |
| Snapchat |
login.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
3 |
| Snapchat |
developer.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
0 |
| Snapchat |
code.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
0 |
| Snapchat |
blog.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
0 |
| Snapchat |
forum.playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
1 |
| Snapchat |
playcanvas.com |
Domain |
In Scope |
Medium |
Eligible |
2023-04-27 |
21 |
| Snapchat |
Spectacles charging case |
Hardware |
Out of Scope |
None |
Ineligible |
2018-07-04 |
0 |
| Snapchat |
com.bitstrips.imoji |
IosAppStore |
In Scope |
Medium |
Eligible |
2018-07-04 |
0 |
| Snapchat |
com.toyopagroup.picaboo |
IosAppStore |
In Scope |
High |
Eligible |
2018-07-04 |
25 |
| Snapchat |
com.bitstrips.imoji |
AndroidPlayStore |
In Scope |
Medium |
Eligible |
2018-07-04 |
2 |
| Snapchat |
support.snapchat.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-07-04 |
0 |
| Snapchat |
returns.spectacles.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-09-14 |
0 |
| Snapchat |
story.snapchat.com |
Domain |
In Scope |
Low |
Eligible |
2020-07-30 |
5 |
| Snapchat |
map.snapchat.com |
Domain |
In Scope |
Low |
Eligible |
2020-07-30 |
1 |
| Snapchat |
spectacles.com |
Domain |
In Scope |
Low |
Eligible |
2018-07-04 |
2 |
| Snapchat |
scan.snapchat.com |
Domain |
In Scope |
Low |
Eligible |
2018-07-04 |
2 |
| Snapchat |
www.bitstrips.com |
Domain |
In Scope |
Medium |
Eligible |
2018-07-04 |
11 |
| Snapchat |
www.bitmoji.com |
Domain |
In Scope |
Medium |
Eligible |
2018-07-04 |
22 |
| Snapchat |
businesshelp.snapchat.com |
Domain |
In Scope |
High |
Eligible |
2022-02-02 |
4 |
| Snapchat |
my.snapchat.com |
Domain |
In Scope |
High |
Eligible |
2021-12-13 |
2 |
| Snapchat |
create.snapchat.com |
Domain |
In Scope |
High |
Eligible |
2021-12-13 |
0 |
| Snapchat |
ads.snapchat.com |
Domain |
In Scope |
High |
Eligible |
2020-07-30 |
30 |
| Snapchat |
geofilters.snapchat.com |
Domain |
In Scope |
High |
Eligible |
2018-07-04 |
6 |
| Snapchat |
snappublisher.snapchat.com |
Domain |
In Scope |
High |
Eligible |
2018-07-04 |
22 |
| Snapchat |
kit.snapchat.com |
Domain |
In Scope |
High |
Eligible |
2018-07-04 |
23 |
| Snapchat |
web.snapchat.com |
Domain |
In Scope |
Critical |
Eligible |
2022-07-19 |
24 |
| Snapchat |
store.snapchat.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-02 |
1 |
| Snapchat |
business.snapchat.com |
Domain |
In Scope |
Critical |
Eligible |
2021-12-13 |
16 |
| Snapchat |
*.sc-core.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-12-13 |
7 |
| Snapchat |
app.snapchat.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-04 |
51 |
| Snapchat |
accounts.snapchat.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-04 |
66 |
| Ubiquiti Inc. |
UniFi-Play |
Hardware |
In Scope |
Medium |
Eligible |
2026-09-14 |
0 |
| Ubiquiti Inc. |
Enterprise Audio/Video |
Hardware |
In Scope |
Medium |
Eligible |
2026-09-14 |
1 |
| Ubiquiti Inc. |
UniFi Access |
Hardware |
In Scope |
Critical |
Eligible |
2020-06-04 |
13 |
| Ubiquiti Inc. |
UniFi OS Server |
Executable |
In Scope |
Critical |
Eligible |
2025-12-09 |
26 |
| Ubiquiti Inc. |
help.uisp.com |
Domain |
In Scope |
None |
Ineligible |
2026-03-06 |
0 |
| Ubiquiti Inc. |
store.ui.com |
Domain |
In Scope |
Critical |
Eligible |
2017-12-08 |
5 |
| Ubiquiti Inc. |
*.uisp.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-06-10 |
1 |
| Ubiquiti Inc. |
UISP |
Executable |
In Scope |
Critical |
Eligible |
2025-06-06 |
8 |
| Ubiquiti Inc. |
UniFi Connect |
Hardware |
In Scope |
Critical |
Eligible |
2025-06-02 |
7 |
| Ubiquiti Inc. |
https://*.ui.com/training/partners/ |
Wildcard |
In Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Ubiquiti Inc. |
https://ui.com/training/partners/ |
Url |
In Scope |
None |
Ineligible |
2024-02-14 |
0 |
| Ubiquiti Inc. |
https://*.ui.com/distributors/ |
Wildcard |
In Scope |
None |
Ineligible |
2024-02-14 |
1 |
| Ubiquiti Inc. |
https://ui.com/distributors/ |
Url |
In Scope |
None |
Ineligible |
2024-02-14 |
2 |
| Ubiquiti Inc. |
*.go.ubnt.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-01-04 |
0 |
| Ubiquiti Inc. |
*.ui.com |
Wildcard |
In Scope |
Critical |
Eligible |
2019-05-21 |
245 |
| Ubiquiti Inc. |
*.ubnt.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-12-08 |
155 |
| Ubiquiti Inc. |
community.ui.com |
Domain |
In Scope |
Critical |
Eligible |
2017-12-08 |
18 |
| Ubiquiti Inc. |
wiki.ui.com |
Domain |
In Scope |
None |
Ineligible |
2022-11-02 |
0 |
| Ubiquiti Inc. |
forum-pt.ui.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
forum-es.ui.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
UniFi Talk Conference Speaker - UT-Conference |
Hardware |
Out of Scope |
None |
Ineligible |
2022-03-11 |
0 |
| Ubiquiti Inc. |
training.ui.com |
Domain |
In Scope |
Medium |
Ineligible |
2017-12-08 |
1 |
| Ubiquiti Inc. |
dev-training.ui.com |
Domain |
In Scope |
Medium |
Ineligible |
2022-01-06 |
0 |
| Ubiquiti Inc. |
UID |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-01-04 |
10 |
| Ubiquiti Inc. |
UniFi Network Application |
Executable |
In Scope |
Critical |
Eligible |
2017-12-08 |
32 |
| Ubiquiti Inc. |
account.ui.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-17 |
19 |
| Ubiquiti Inc. |
ispdesign.ui.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-17 |
4 |
| Ubiquiti Inc. |
careers.ui.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-17 |
2 |
| Ubiquiti Inc. |
unifi.ui.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-17 |
3 |
| Ubiquiti Inc. |
uisp.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-17 |
26 |
| Ubiquiti Inc. |
design.ui.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-17 |
10 |
| Ubiquiti Inc. |
rma.ui.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-17 |
13 |
| Ubiquiti Inc. |
fw-update.ubnt.com |
Domain |
In Scope |
Critical |
Eligible |
2021-04-17 |
14 |
| Ubiquiti Inc. |
com.ubnt.unifivideo |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
UniFi Video Server |
Executable |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
UniFi Video Cloud |
OtherAsset |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
UniFi Video |
Hardware |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
UniFi Wireless Access Points |
Hardware |
In Scope |
Critical |
Eligible |
2020-06-04 |
7 |
| Ubiquiti Inc. |
UniFi Gateways (UDM, UXG, USG) |
Hardware |
In Scope |
Critical |
Eligible |
2020-06-04 |
10 |
| Ubiquiti Inc. |
Cloudkey |
Hardware |
In Scope |
Critical |
Eligible |
2020-06-04 |
5 |
| Ubiquiti Inc. |
UniFi LED |
Hardware |
In Scope |
Critical |
Eligible |
2020-06-04 |
1 |
| Ubiquiti Inc. |
UniFi Switches |
Hardware |
In Scope |
Critical |
Eligible |
2020-06-04 |
12 |
| Ubiquiti Inc. |
UniFi Protect |
Hardware |
In Scope |
Critical |
Eligible |
2020-06-04 |
35 |
| Ubiquiti Inc. |
UniFi Talk |
Hardware |
In Scope |
Critical |
Eligible |
2020-04-08 |
12 |
| Ubiquiti Inc. |
airMAX |
Hardware |
In Scope |
Critical |
Eligible |
2017-12-08 |
28 |
| Ubiquiti Inc. |
UniFi Cloud |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-12-08 |
7 |
| Ubiquiti Inc. |
com.ubnt.unifi.edu |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
UniFi Voip |
Hardware |
Out of Scope |
None |
Ineligible |
2017-12-19 |
0 |
| Ubiquiti Inc. |
blog.ui.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
help.ui.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-12-08 |
1 |
| Ubiquiti Inc. |
ir.ui.com |
Domain |
In Scope |
Critical |
Ineligible |
2017-12-08 |
2 |
| Ubiquiti Inc. |
security.community.ui.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-06-05 |
0 |
| Ubiquiti Inc. |
UCRM |
Executable |
In Scope |
Critical |
Eligible |
2017-12-08 |
16 |
| Ubiquiti Inc. |
UNMS |
Executable |
In Scope |
Critical |
Eligible |
2017-12-08 |
13 |
| Ubiquiti Inc. |
UniFi |
Hardware |
In Scope |
Critical |
Eligible |
2017-12-08 |
60 |
| Ubiquiti Inc. |
AmpliFi |
Hardware |
In Scope |
Critical |
Eligible |
2018-07-03 |
16 |
| Ubiquiti Inc. |
airFiber |
Hardware |
In Scope |
Critical |
Eligible |
2017-12-08 |
7 |
| Ubiquiti Inc. |
UFiber |
Hardware |
In Scope |
Critical |
Eligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
EdgeMAX |
Hardware |
In Scope |
Critical |
Eligible |
2017-12-08 |
121 |
| Ubiquiti Inc. |
AirControl |
Executable |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
com.ubnt.mpower |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
com.ubnt.ucrm |
AndroidPlayStore |
In Scope |
Critical |
Ineligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
com.ubnt.discovery.app |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-12-08 |
0 |
| Ubiquiti Inc. |
com.ubnt.umobile |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-12-08 |
5 |
| Ubiquiti Inc. |
com.ubnt.easyunifi |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-12-08 |
7 |
| Ubiquiti Inc. |
mFi |
Hardware |
Out of Scope |
None |
Ineligible |
2017-12-08 |
0 |
| Airbnb |
*.airbnbpayments.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-09-22 |
0 |
| Airbnb |
*.musta.ch |
Wildcard |
In Scope |
Critical |
Eligible |
2025-09-22 |
2 |
| Airbnb |
*.airbnb.org |
Wildcard |
In Scope |
Critical |
Eligible |
2025-08-08 |
0 |
| Airbnb |
*.hoteltonight.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-05-08 |
3 |
| Airbnb |
luckeyhomes.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-08-20 |
0 |
| Airbnb |
luckey.partners |
Domain |
Out of Scope |
None |
Ineligible |
2020-05-27 |
0 |
| Airbnb |
luckey.in |
Domain |
Out of Scope |
None |
Ineligible |
2019-08-20 |
0 |
| Airbnb |
luckey.fr |
Domain |
Out of Scope |
None |
Ineligible |
2019-08-20 |
0 |
| Airbnb |
luckey.app |
Domain |
Out of Scope |
None |
Ineligible |
2019-08-20 |
0 |
| Airbnb |
provider.demo.urbandoor.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-11-18 |
0 |
| Airbnb |
demo.urbandoor.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-11-18 |
0 |
| Airbnb |
admin.demo.urbandoor.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-11-18 |
0 |
| Airbnb |
www.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
389 |
| Airbnb |
next.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
3 |
| Airbnb |
api.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
18 |
| Airbnb |
support-api.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
2 |
| Airbnb |
assets.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
3 |
| Airbnb |
m.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
0 |
| Airbnb |
one.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
2 |
| Airbnb |
open.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
1 |
| Airbnb |
callbacks.airbnb.com |
Domain |
In Scope |
Critical |
Eligible |
2017-09-18 |
0 |
| Airbnb |
*.airbnb.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
361 |
| Airbnb |
Localized airbnb sites listed at the link below: |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
22 |
| Airbnb |
*.airbnbcitizen.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
11 |
| Airbnb |
com.airbnb.app |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-09-18 |
14 |
| Airbnb |
com.airbnb.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-09-18 |
70 |
| Airbnb |
*.atairbnb.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
14 |
| Airbnb |
*.withairbnb.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
79 |
| Airbnb |
*.byairbnb.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
6 |
| Airbnb |
*.muscache.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
13 |
| Airbnb |
*.airbnb-aws.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
2 |
| Airbnb |
*.luxuryretreats.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-09-18 |
74 |
| Airbnb |
*.hoteltonight-test.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2019-11-18 |
14 |
| Airbnb |
www.hoteltonight.com |
Domain |
In Scope |
Critical |
Eligible |
2022-09-28 |
12 |
| Airbnb |
com.luxuryretreats.ios |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-09-18 |
1 |
| Vimeo |
com.livestream.livestream |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
Livestream software (Producer, Studio) |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
donations.livestream.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
www.livestream.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
*.new.livestream.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
*.livestream.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
935740658 |
IosAppStore |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
tv.vhx |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
Any previously owned/sold hardware |
Hardware |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
livestream.com/blog, *.livestream.com/blog, blog.livestream.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
s3://static.intercast-livestream.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
billing-account.vimeo.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-07-11 |
0 |
| Vimeo |
status.livestream.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
help.livestream.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
publishing-api.livestream.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
store.livestream.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
livestreamapis.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
omega.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
http://www.magisto.com/blog |
Url |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
epsilon.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
eta.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
int005vimeo.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
int004.vimeo.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
int003.vimeo.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
int002.vimeo.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
int001.vimeo.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
delta.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
gamma.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
applause2.magisto.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
vimeo.atlassian.net |
Domain |
Out of Scope |
None |
Ineligible |
2020-04-04 |
0 |
| Vimeo |
*.boost.livestream.com,boost.livestream.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
*.cdn.magisto.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
*.dev.magisto.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
*.test.magisto.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2022-07-27 |
0 |
| Vimeo |
*.wibbitz.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-11-18 |
0 |
| Vimeo |
*.wirewax.app |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-11-18 |
0 |
| Vimeo |
*.wirewax.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2021-11-18 |
0 |
| Vimeo |
*.email.vimeo.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-04-18 |
0 |
| Vimeo |
All |
WindowsMicrosoftStore |
Out of Scope |
None |
Ineligible |
2019-04-25 |
0 |
| Vimeo |
493086499 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-07-27 |
0 |
| Vimeo |
486781045 |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-07-27 |
1 |
| Vimeo |
1491791513 |
IosAppStore |
In Scope |
Critical |
Eligible |
2020-02-25 |
0 |
| Vimeo |
425194759 |
IosAppStore |
In Scope |
Critical |
Eligible |
2018-07-06 |
3 |
| Vimeo |
com.magisto |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-07-27 |
6 |
| Vimeo |
com.vimeocreate.videoeditor.moviemaker |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2020-02-25 |
1 |
| Vimeo |
com.vimeo.android.videoapp |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2018-07-06 |
13 |
| Vimeo |
VHX Branded Customer Roku Apps |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-27 |
0 |
| Vimeo |
VHX Branded Customer Android Apps |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-27 |
0 |
| Vimeo |
VHX Branded Customer iOS Apps |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-27 |
0 |
| Vimeo |
channelstore.roku.com/details/48061/vhx |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-07-27 |
0 |
| Vimeo |
applause1.magisto.com |
Domain |
In Scope |
Critical |
Eligible |
2022-07-27 |
3 |
| Vimeo |
staging.magisto.com |
Domain |
In Scope |
Critical |
Eligible |
2022-07-27 |
1 |
| Vimeo |
magisto.com,www.magisto.com |
Domain |
In Scope |
Critical |
Eligible |
2022-07-27 |
48 |
| Vimeo |
api.vhx.tv |
Domain |
In Scope |
Critical |
Eligible |
2022-07-27 |
30 |
| Vimeo |
embed.vhx.tv |
Domain |
In Scope |
Critical |
Eligible |
2022-07-27 |
8 |
| Vimeo |
vhx.tv |
Domain |
In Scope |
Critical |
Eligible |
2022-07-27 |
34 |
| Vimeo |
vimeo.magisto.com |
Domain |
In Scope |
Critical |
Eligible |
2019-11-20 |
1 |
| Vimeo |
http://vimeo.com/create |
Url |
In Scope |
Critical |
Eligible |
2019-11-14 |
9 |
| Vimeo |
checkout.vimeo.com |
Domain |
In Scope |
Critical |
Eligible |
2018-09-27 |
1 |
| Vimeo |
http://vimeo.com/api |
Url |
In Scope |
Critical |
Eligible |
2018-07-06 |
4 |
| Vimeo |
http://vimeo.com/ondemand |
Url |
In Scope |
Critical |
Eligible |
2018-07-06 |
5 |
| Vimeo |
vimeopro.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-06 |
4 |
| Vimeo |
api.vimeo.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-06 |
171 |
| Vimeo |
player.vimeo.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-06 |
24 |
| Vimeo |
www.vimeo.com |
Domain |
In Scope |
Critical |
Eligible |
2018-07-06 |
177 |
| Vimeo |
*.magisto.com |
Wildcard |
In Scope |
Critical |
Eligible |
2022-07-27 |
49 |
| Vimeo |
*.vhx.tv |
Wildcard |
In Scope |
Critical |
Eligible |
2022-07-27 |
77 |
| Vimeo |
*.vimeo.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-09-27 |
214 |
| Vimeo |
*.cloud.vimeo.com |
Wildcard |
In Scope |
Critical |
Eligible |
2018-07-06 |
21 |
| Greenhouse.io |
Tier 3 Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-08-13 |
2 |
| Greenhouse.io |
Tier 2 Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-08-13 |
0 |
| Greenhouse.io |
Tier 1 Assets |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-08-13 |
0 |
| Greenhouse.io |
app.interseller.io |
Domain |
In Scope |
Critical |
Eligible |
2023-09-26 |
6 |
| Greenhouse.io |
interseller.io |
Domain |
In Scope |
Critical |
Eligible |
2023-09-26 |
3 |
| Greenhouse.io |
store.greenhouse.io |
Domain |
Out of Scope |
None |
Ineligible |
2022-04-19 |
0 |
| Greenhouse.io |
jss.greenhouse.io |
Domain |
In Scope |
Critical |
Eligible |
2019-04-01 |
2 |
| Greenhouse.io |
www.greenhouse.io |
Domain |
In Scope |
High |
Eligible |
2018-05-01 |
53 |
| Greenhouse.io |
resources.greenhouse.io |
Domain |
Out of Scope |
None |
Ineligible |
2018-05-01 |
0 |
| Greenhouse.io |
community.greenhouse.io |
Domain |
Out of Scope |
None |
Ineligible |
2018-05-01 |
0 |
| Greenhouse.io |
support.greenhouse.io |
Domain |
In Scope |
Critical |
Eligible |
2018-05-01 |
3 |
| Greenhouse.io |
onboarding.greenhouse.io |
Domain |
In Scope |
Critical |
Eligible |
2018-05-01 |
1 |
| Greenhouse.io |
api.greenhouse.io |
Domain |
In Scope |
Critical |
Eligible |
2018-05-01 |
6 |
| Greenhouse.io |
boards.greenhouse.io |
Domain |
In Scope |
Critical |
Eligible |
2018-05-01 |
18 |
| Greenhouse.io |
app.greenhouse.io |
Domain |
In Scope |
Critical |
Eligible |
2018-05-01 |
37 |
| X / xAI |
xadsacademy.com |
Domain |
In Scope |
Medium |
Ineligible |
2024-01-26 |
0 |
| X / xAI |
grok-build |
Executable |
In Scope |
Medium |
Eligible |
2026-08-20 |
0 |
| X / xAI |
x.ai |
Domain |
In Scope |
Critical |
Eligible |
2026-08-20 |
1 |
| X / xAI |
console.x.ai |
Domain |
In Scope |
Critical |
Eligible |
2024-10-08 |
1 |
| X / xAI |
accounts.x.ai |
Domain |
In Scope |
Critical |
Eligible |
2024-10-08 |
0 |
| X / xAI |
pscp.tv |
Domain |
In Scope |
Critical |
Eligible |
2026-08-20 |
1 |
| X / xAI |
t.co |
Domain |
In Scope |
Medium |
Eligible |
2022-12-23 |
0 |
| X / xAI |
X Pixel Helper (Chrome Extension) |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-08-20 |
1 |
| X / xAI |
console.x.com |
Domain |
In Scope |
Critical |
Eligible |
2026-08-20 |
2 |
| X / xAI |
money.x.com |
Domain |
In Scope |
Critical |
Eligible |
2026-03-12 |
1 |
| X / xAI |
grokipedia.com |
Domain |
In Scope |
Critical |
Eligible |
2026-02-23 |
3 |
| X / xAI |
chat.x.com |
Domain |
In Scope |
Critical |
Eligible |
2026-01-04 |
3 |
| X / xAI |
ai.x.grok |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2025-04-28 |
2 |
| X / xAI |
ai.x.GrokApp |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-04-08 |
1 |
| X / xAI |
grok.com |
Domain |
In Scope |
Critical |
Eligible |
2025-04-08 |
36 |
| X / xAI |
*.grok.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-04-08 |
6 |
| X / xAI |
*.x.com |
Wildcard |
In Scope |
Critical |
Eligible |
2024-12-18 |
34 |
| X / xAI |
*.x.ai |
Wildcard |
In Scope |
Critical |
Eligible |
2024-10-09 |
32 |
| X / xAI |
x.com |
Domain |
In Scope |
Critical |
Eligible |
2023-08-08 |
33 |
| X / xAI |
*.twimg.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-08-29 |
23 |
| X / xAI |
*.vine.co |
Wildcard |
In Scope |
Critical |
Eligible |
2017-08-28 |
3 |
| X / xAI |
*.twitter.com |
Wildcard |
In Scope |
Critical |
Eligible |
2017-08-28 |
433 |
| X / xAI |
com.atebits.Tweetie2 |
IosAppStore |
In Scope |
Critical |
Eligible |
2017-08-29 |
11 |
| X / xAI |
com.twitter.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-08-29 |
39 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/cf |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-09-29 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/agentic-inbox |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-09-15 |
0 |
| Cloudflare Public Bug Bounty |
*.plugins.realtime.cloudflare.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-09-04 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/pp-browser-extension |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-08-24 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/templates |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-08-13 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/cloudflare-os |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-08-05 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/computer |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-08-05 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/recapn |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-07-16 |
0 |
| Cloudflare Public Bug Bounty |
waf.cumulusfire.net |
Domain |
Out of Scope |
None |
Ineligible |
2023-04-19 |
0 |
| Cloudflare Public Bug Bounty |
files.plugins.realtime.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/realtimekit-web-examples |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Cloudflare Public Bug Bounty |
test.realtime.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Cloudflare Public Bug Bounty |
app.dyte.io |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Cloudflare Public Bug Bounty |
react-examples.realtime.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Cloudflare Public Bug Bounty |
examples.realtime.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Cloudflare Public Bug Bounty |
api.staging.realtime.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Cloudflare Public Bug Bounty |
demo.realtime.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2026-07-15 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/saffron.git |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-07-08 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/moq-rs |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-07-08 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/privacy-gateway-server-go |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-07-08 |
0 |
| Cloudflare Public Bug Bounty |
Turnstile |
OtherAsset |
Out of Scope |
None |
Ineligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/vinext-private |
SourceCode |
Out of Scope |
None |
Ineligible |
2026-02-28 |
0 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/vinext |
SourceCode |
In Scope |
Critical |
Eligible |
2026-02-27 |
7 |
| Cloudflare Public Bug Bounty |
Workers AI |
AiModel |
In Scope |
Critical |
Eligible |
2023-10-26 |
3 |
| Cloudflare Public Bug Bounty |
Area 1 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-03-07 |
1 |
| Cloudflare Public Bug Bounty |
http://github.com/cloudflare |
Url |
In Scope |
Critical |
Eligible |
2022-05-18 |
40 |
| Cloudflare Public Bug Bounty |
Cloudflare Workers CI |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-10-04 |
0 |
| Cloudflare Public Bug Bounty |
WARP Mobile Apps |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
14 |
| Cloudflare Public Bug Bounty |
172.65.0.0/16 |
OtherAsset |
Out of Scope |
None |
Ineligible |
2024-05-10 |
0 |
| Cloudflare Public Bug Bounty |
*.cloudflarepartners.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-11-16 |
1 |
| Cloudflare Public Bug Bounty |
SSL/TLS |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
1 |
| Cloudflare Public Bug Bounty |
Data Loss Prevention (DLP) |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Magic WAN |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Waiting Room |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Cloudflare Durable Objects |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Cloudflare Analytics |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Workers KV |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Hyperdrive |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Vectorize |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
AI Gateway |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
1 |
| Cloudflare Public Bug Bounty |
Images |
OtherAsset |
In Scope |
None |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Browser Isolation |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
1 |
| Cloudflare Public Bug Bounty |
Gateway |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
API Shield |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
China Network |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Cloudflare Zaraz |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Magic Firewall |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Cloudflare Cache |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
1 |
| Cloudflare Public Bug Bounty |
AMP Real URL |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
0 |
| Cloudflare Public Bug Bounty |
Cloudflare Tunnel |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-10-26 |
1 |
| Cloudflare Public Bug Bounty |
Workers |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-05-19 |
3 |
| Cloudflare Public Bug Bounty |
Cloudflare Pages |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
18 |
| Cloudflare Public Bug Bounty |
events.www.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2023-05-30 |
0 |
| Cloudflare Public Bug Bounty |
Cloudflare CASB |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-19 |
3 |
| Cloudflare Public Bug Bounty |
Cloudflare DNS |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-04-04 |
1 |
| Cloudflare Public Bug Bounty |
WARP desktop client |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-10-27 |
9 |
| Cloudflare Public Bug Bounty |
Cloudflare R2 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-05-11 |
5 |
| Cloudflare Public Bug Bounty |
Cloudflare D1 |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-05-11 |
0 |
| Cloudflare Public Bug Bounty |
Open source tools from Cloudflare |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
16 |
| Cloudflare Public Bug Bounty |
Cloudflare Zero Trust/Cloudflare One |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
19 |
| Cloudflare Public Bug Bounty |
Bot Management |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
1 |
| Cloudflare Public Bug Bounty |
Load Balancing |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
5 |
| Cloudflare Public Bug Bounty |
Spectrum |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
2 |
| Cloudflare Public Bug Bounty |
Magic Transit |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
0 |
| Cloudflare Public Bug Bounty |
1.1.1.1 Resolver |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
7 |
| Cloudflare Public Bug Bounty |
Stream |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
0 |
| Cloudflare Public Bug Bounty |
Cloudflare Access |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
21 |
| Cloudflare Public Bug Bounty |
CDNJS |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
2 |
| Cloudflare Public Bug Bounty |
https://github.com/cloudflare/workerd |
SourceCode |
In Scope |
Critical |
Eligible |
2022-09-27 |
4 |
| Cloudflare Public Bug Bounty |
support.cloudflarewarp.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-10-26 |
0 |
| Cloudflare Public Bug Bounty |
community.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-09-13 |
0 |
| Cloudflare Public Bug Bounty |
support.cloudflare.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-29 |
0 |
| Cloudflare Public Bug Bounty |
one.dash.cloudflare.com |
Domain |
In Scope |
Critical |
Eligible |
2022-10-31 |
5 |
| Cloudflare Public Bug Bounty |
*.cloudflare.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
60 |
| Cloudflare Public Bug Bounty |
api.cloudflare.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-01 |
10 |
| Cloudflare Public Bug Bounty |
*.teams.cloudflare.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-02-01 |
5 |
| Cloudflare Public Bug Bounty |
cloudflareworkers.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-01 |
2 |
| Cloudflare Public Bug Bounty |
dash.cloudflare.com |
Domain |
In Scope |
Critical |
Eligible |
2022-02-01 |
67 |
| Automattic |
parse.ly |
Domain |
In Scope |
Critical |
Eligible |
2026-04-27 |
2 |
| Automattic |
WP Cloud |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-04-08 |
0 |
| Automattic |
wpscan.com |
Domain |
In Scope |
High |
Eligible |
2026-02-12 |
2 |
| Automattic |
clay.earth |
Domain |
In Scope |
High |
Eligible |
2025-07-25 |
11 |
| Automattic |
com.clay.ios |
IosAppStore |
In Scope |
High |
Eligible |
2025-07-25 |
0 |
| Automattic |
WordPress VIP |
OtherAsset |
In Scope |
Critical |
Eligible |
2025-05-06 |
7 |
| Automattic |
Beeper |
OtherAsset |
In Scope |
High |
Eligible |
2025-01-27 |
13 |
| Automattic |
Texts |
OtherAsset |
In Scope |
High |
Eligible |
2025-01-27 |
4 |
| Automattic |
happy.tools |
Domain |
Out of Scope |
None |
Ineligible |
2021-02-04 |
0 |
| Automattic |
gravatar.com |
Domain |
In Scope |
High |
Eligible |
2023-11-06 |
0 |
| Automattic |
*.crowdsignal.net |
Wildcard |
Out of Scope |
None |
Ineligible |
2023-03-15 |
0 |
| Automattic |
*.poll.fm |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-11-20 |
0 |
| Automattic |
*.survey.fm |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-11-20 |
0 |
| Automattic |
polishmywriting.com,*.polishmywriting.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-04-27 |
0 |
| Automattic |
afterthedeadline.com,*.afterthedeadline.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-04-27 |
0 |
| Automattic |
*.txmblr.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2020-01-09 |
0 |
| Automattic |
*.srvcs.tumblr.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-01-09 |
0 |
| Automattic |
*.tumblr.com |
Wildcard |
In Scope |
Critical |
Eligible |
2020-01-09 |
37 |
| Automattic |
learnboost.com,*.learnboost.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2019-05-21 |
0 |
| Automattic |
scrollkit.com,*.scrollkit.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2018-01-31 |
0 |
| Automattic |
try.pressable.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-05-19 |
0 |
| Automattic |
my.pressable.com |
Domain |
In Scope |
Critical |
Eligible |
2021-07-01 |
19 |
| Automattic |
atavist.com |
Domain |
Out of Scope |
None |
Ineligible |
2021-01-22 |
0 |
| Automattic |
mailpoet.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-04 |
45 |
| Automattic |
akismet.com |
Domain |
In Scope |
Critical |
Eligible |
2021-02-04 |
6 |
| Automattic |
WordPress Plugins & Themes |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-27 |
359 |
| Automattic |
Crowdsignal |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-08 |
38 |
| Automattic |
WooCommerce |
OtherAsset |
In Scope |
Critical |
Eligible |
2021-01-04 |
133 |
| Automattic |
Jetpack |
SourceCode |
In Scope |
Critical |
Eligible |
2021-01-04 |
55 |
| Automattic |
simperium.com |
Domain |
In Scope |
High |
Eligible |
2021-01-04 |
4 |
| Automattic |
simplenote.com |
Domain |
In Scope |
High |
Eligible |
2020-12-31 |
6 |
| Automattic |
intensedebate.com |
Domain |
In Scope |
Medium |
Eligible |
2020-12-31 |
40 |
| Automattic |
wordpress.com |
Domain |
In Scope |
Critical |
Eligible |
2020-12-30 |
58 |
| Automattic |
api.tumblr.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-09 |
10 |
| Automattic |
com.tumblr.tumblr |
IosAppStore |
In Scope |
High |
Eligible |
2020-01-09 |
0 |
| Automattic |
com.tumblr |
AndroidPlayStore |
In Scope |
High |
Eligible |
2020-01-09 |
6 |
| Automattic |
t.umblr.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-09 |
1 |
| Automattic |
www.tumblr.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-09 |
41 |
| Automattic |
embed.tumblr.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-09 |
2 |
| Automattic |
assets.tumblr.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-09 |
1 |
| Automattic |
secure.tumblr.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-09 |
2 |
| Automattic |
safe.tumblr.com |
Domain |
In Scope |
Critical |
Eligible |
2020-01-09 |
0 |
| Automattic |
*/xmlrpc.php |
OtherAsset |
Out of Scope |
None |
Ineligible |
2019-07-22 |
0 |
| Coinbase |
*.base.org |
OtherAsset |
In Scope |
Critical |
Eligible |
2023-02-23 |
29 |
| Coinbase |
*.base.app |
Wildcard |
In Scope |
Critical |
Eligible |
2026-08-07 |
1 |
| Coinbase |
com.coinbase.android |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2017-07-20 |
34 |
| Coinbase |
com.vilcsak.bitcoin2 |
IosAppStore |
In Scope |
Critical |
Eligible |
2026-02-09 |
0 |
| Coinbase |
*.coinbase.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2017-07-20 |
337 |
| Coinbase |
status.*.coinbase.com |
Wildcard |
Out of Scope |
None |
Ineligible |
2026-08-07 |
0 |
| Coinbase |
Other |
OtherAsset |
In Scope |
Medium |
Ineligible |
2019-01-02 |
75 |
| Coinbase |
https://github.com/base/* |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-07 |
0 |
| Coinbase |
https://github.com/coinbase/* |
SourceCode |
In Scope |
Critical |
Eligible |
2026-08-07 |
3 |
| Coinbase |
org.toshi |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2019-01-02 |
24 |
| Coinbase |
org.toshi.distribution |
IosAppStore |
In Scope |
Critical |
Eligible |
2019-01-02 |
14 |
| Coinbase |
https://github.com/coinbase/cb-mpc-go |
SourceCode |
In Scope |
Critical |
Ineligible |
2026-03-26 |
0 |
| Coinbase |
*.coinbase-corp.com |
Wildcard |
In Scope |
Critical |
Eligible |
2025-12-12 |
2 |
| Coinbase |
https://github.com/coinbase/cb-mpc |
SourceCode |
In Scope |
Critical |
Eligible |
2025-04-15 |
55 |
| Coinbase |
N/A - Not Coinbase owned or operated |
OtherAsset |
Out of Scope |
None |
Ineligible |
2019-06-10 |
0 |
| Coinbase |
54.175.255.192/27 |
Cidr |
In Scope |
Critical |
Eligible |
2017-07-20 |
0 |
| Coinbase |
https://chrome.google.com/webstore/detail/coinbase-wallet-extension/hnfanknocfeofbddgcijnmhnfnkdnaad |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-12-01 |
16 |
| Coinbase |
status.coinbase.com |
Domain |
Out of Scope |
None |
Ineligible |
2019-02-15 |
0 |
| Coinbase |
*.cbhq.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-07-21 |
6 |
| Slack |
https://github.com/slackhq/nebula |
SourceCode |
In Scope |
Critical |
Eligible |
2019-11-21 |
5 |
| Slack |
slackhq.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-04-21 |
0 |
| Slack |
https://apps.apple.com/us/app/quip-docs-chat-sheets/id647922896 |
IosAppStore |
In Scope |
Critical |
Eligible |
2025-01-28 |
0 |
| Slack |
www.quip.com |
Domain |
In Scope |
Critical |
Eligible |
2022-12-06 |
16 |
| Slack |
*.quip.com |
OtherAsset |
In Scope |
Critical |
Eligible |
2022-12-06 |
33 |
| Slack |
Slack Desktop Application |
OtherAsset |
In Scope |
Critical |
Eligible |
2024-06-13 |
3 |
| Slack |
slack-status.com |
Domain |
In Scope |
Critical |
Eligible |
2024-05-06 |
1 |
| Slack |
status.slack.com |
Domain |
Out of Scope |
None |
Ineligible |
2018-10-12 |
0 |
| Slack |
3rd Party Quip Apps |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-12-06 |
0 |
| Slack |
spaces.pm |
Domain |
In Scope |
Critical |
Eligible |
2022-04-21 |
1 |
| Slack |
slack-imgs.com |
Domain |
In Scope |
Critical |
Eligible |
2022-04-21 |
0 |
| Slack |
slack-redir.net |
Domain |
In Scope |
Critical |
Eligible |
2022-04-21 |
0 |
| Slack |
slackatwork.com |
Domain |
In Scope |
Critical |
Eligible |
2022-04-21 |
0 |
| Slack |
com.slack.slackintune |
IosAppStore |
Out of Scope |
None |
Ineligible |
2022-07-29 |
0 |
| Slack |
com.Slack.intune |
AndroidPlayStore |
Out of Scope |
None |
Ineligible |
2022-07-29 |
0 |
| Slack |
com.slack.slackmdm |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-07-29 |
1 |
| Slack |
com.tinyspeck.chatlyio |
IosAppStore |
In Scope |
Critical |
Eligible |
2022-07-29 |
2 |
| Slack |
https://salesforce.quip.com/blog/desktop |
Executable |
In Scope |
Critical |
Eligible |
2022-12-06 |
4 |
| Slack |
com.Slack |
AndroidPlayStore |
In Scope |
Critical |
Eligible |
2022-07-29 |
9 |
| Slack |
*.glitchthegame.com |
OtherAsset |
Out of Scope |
None |
Ineligible |
2022-09-28 |
0 |
| Slack |
edgeapi.slack.com |
Domain |
In Scope |
Critical |
Eligible |
2021-03-26 |
5 |
| Slack |
app.slack.com |
Domain |
In Scope |
Critical |
Eligible |
2019-10-07 |
360 |
| Slack |
slackb.com |
Domain |
In Scope |
Critical |
Eligible |
2019-03-05 |
3 |
| Slack |
api.slack.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-12 |
476 |
| Slack |
slack.com |
Domain |
In Scope |
Critical |
Eligible |
2018-10-12 |
359 |
| HackerOne |
https://hackerone.com/mcp |
OtherAsset |
In Scope |
Critical |
Eligible |
2026-08-28 |
1 |
| HackerOne |
hackerone-swag.com |
Domain |
Out of Scope |
None |
Ineligible |
2025-07-14 |
0 |
| HackerOne |
https://github.com/Hacker0x01/react-datepicker |
OtherAsset |
In Scope |
Critical |
Ineligible |
2025-06-23 |
0 |
| HackerOne |
hackerone-us-west-2-production-attachments.s3.us-west-2.amazonaws.com |
Domain |
In Scope |
Critical |
Eligible |
2022-06-03 |
1 |
| HackerOne |
https://*.hackerone-user-content.com/ |
OtherAsset |
In Scope |
Low |
Eligible |
2017-06-14 |
1 |
| HackerOne |
https://*.hackerone-ext-content.com |
OtherAsset |
In Scope |
Medium |
Eligible |
2018-03-13 |
0 |
| HackerOne |
errors.hackerone.net |
Domain |
In Scope |
High |
Eligible |
2018-03-13 |
3 |
| HackerOne |
hackerone.live |
Domain |
In Scope |
Low |
Eligible |
2023-04-27 |
7 |
| HackerOne |
ctf.hacker101.com |
Domain |
In Scope |
Low |
Eligible |
2022-06-03 |
2 |
| HackerOne |
*.vpn.hackerone.net |
OtherAsset |
In Scope |
Critical |
Eligible |
2018-09-28 |
0 |
| HackerOne |
reviewer.pullrequest.com |
Domain |
In Scope |
Critical |
Eligible |
2022-06-03 |
2 |
| HackerOne |
app.pullrequest.com |
Domain |
In Scope |
Critical |
Eligible |
2022-06-03 |
8 |
| HackerOne |
profile-photos.hackerone-user-content.com |
Domain |
In Scope |
Low |
Eligible |
2022-06-07 |
0 |
| HackerOne |
profile-photos-us-east-2.hackerone-user-content.com |
Domain |
In Scope |
Low |
Eligible |
2022-06-07 |
0 |
| HackerOne |
hackerone-user-content.com |
Domain |
In Scope |
Low |
Eligible |
2022-06-07 |
0 |
| HackerOne |
hackathon-photos.hackerone-user-content.com |
Domain |
In Scope |
Low |
Eligible |
2022-06-07 |
0 |
| HackerOne |
hackathon-photos-us-east-2.hackerone-user-content.com |
Domain |
In Scope |
Low |
Eligible |
2022-06-07 |
0 |
| HackerOne |
cover-photos.hackerone-user-content.com |
Domain |
In Scope |
Low |
Eligible |
2022-06-07 |
0 |
| HackerOne |
hackerone-ext-content.com |
Domain |
In Scope |
Medium |
Eligible |
2022-06-07 |
0 |
| HackerOne |
b5s.hackerone-ext-content.com |
Domain |
In Scope |
Medium |
Eligible |
2022-06-07 |
0 |
| HackerOne |
a5s.hackerone-ext-content.com |
Domain |
In Scope |
Medium |
Eligible |
2022-06-07 |
0 |
| HackerOne |
www.hackerone.com |
Domain |
In Scope |
Critical |
Eligible |
2017-06-14 |
55 |
| HackerOne |
hackerone.com |
Domain |
In Scope |
Critical |
Eligible |
2017-06-14 |
667 |
| HackerOne |
api.hackerone.com |
Domain |
In Scope |
Critical |
Eligible |
2017-06-14 |
21 |
| HackerOne |
cover-photos-us-east-2.hackerone-user-content.com |
Domain |
In Scope |
Low |
Eligible |
2022-06-07 |
0 |
| HackerOne |
www.h1.community |
Domain |
Out of Scope |
None |
Ineligible |
2023-07-27 |
0 |
| HackerOne |
h1.community |
Domain |
Out of Scope |
None |
Ineligible |
2023-07-27 |
0 |
| HackerOne |
go.hacker.one |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-03 |
0 |
| HackerOne |
support.hackerone.com |
Domain |
Out of Scope |
None |
Ineligible |
2017-06-14 |
0 |
| HackerOne |
mta-sts.wearehackerone.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-26 |
1 |
| HackerOne |
www.wearehackerone.com |
Domain |
In Scope |
Critical |
Eligible |
2023-05-26 |
1 |
| HackerOne |
ma.hacker.one |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-03 |
0 |
| HackerOne |
info.hacker.one |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-03 |
0 |
| HackerOne |
www.hackeronestatus.com |
Domain |
Out of Scope |
None |
Ineligible |
2022-06-03 |
0 |