how we sort the index, not an estimate of what you’ll earn
Attack surface
33 in-scope
www.unibet.(com|it|se|co.uk|be|nl|dk|ro|ee|ie|com.au|mt)fi.unibet.compayment.unibet.(com|it|se|co.uk|be|nl|dk|ro|ee|ie|com.au|mt)www.mariacasino.(com|se|ee|dk)fi.mariacasino.compayment.mariacasino.(com|se|ee|dk)int.32red.comwww.bingo.com(se|fi|uk).bingo.compayment.bingo.comwww.ottokasino.comen.ottokasino.compayment.ottokasino.comwww.ottocasino.sepayment.ottocasino.sewww.kolikkopelit.comen.kolikkopelit.compayment.kolikkopelit.comwww.storspiller.compayment.storspiller.comwww.storspelare.sepayment.storspelare.sewww.casinohuone.comen.casinohuone.compayment.casinohuone.comwww.vladcazino.ropayment.vladcazino.ropci.kindredgroup.comwww.32red.com//blog/ (or translated equivalent) endpoints on our sitesAll domains or subdomains not list…considered to be out of scopeotherfirst indexed
92d ago · 33 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for FDJ United (Online Betting and Gaming) - Bug Bounty program.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "fdj-united-online-betting-gaming-bug-bounty-program",
"name": "FDJ United (Online Betting and Gaming) - Bug Bounty program",
"public": true,
"managed": null,
"targets": {
"in_scope": [
{
"type": "web-application",
"target": "www.unibet.(com|it|se|co.uk|be|nl|dk|ro|ee|ie|com.au|mt)"
},
{
"type": "web-application",
"target": "fi.unibet.com"
},
{
"type": "web-application",
"target": "payment.unibet.(com|it|se|co.uk|be|nl|dk|ro|ee|ie|com.au|mt)"
},
{
"type": "web-application",
"target": "www.mariacasino.(com|se|ee|dk)"
},
{
"type": "web-application",
"target": "fi.mariacasino.com"
},
{
"type": "web-application",
"target": "payment.mariacasino.(com|se|ee|dk)"
},
{
"type": "web-application",
"target": "int.32red.com"
},
{
"type": "web-application",
"target": "www.bingo.com"
},
{
"type": "web-application",
"target": "(se|fi|uk).bingo.com"
},
{
"type": "web-application",
"target": "payment.bingo.com"
},
{
"type": "web-application",
"target": "www.ottokasino.com"
},
{
"type": "web-application",
"target": "en.ottokasino.com"
},
{
"type": "web-application",
"target": "payment.ottokasino.com"
},
{
"type": "web-application",
"target": "www.ottocasino.se"
},
{
"type": "web-application",
"target": "payment.ottocasino.se"
},
{
"type": "web-application",
"target": "www.kolikkopelit.com"
},
{
"type": "web-application",
"target": "en.kolikkopelit.com"
},
{
"type": "web-application",
"target": "payment.kolikkopelit.com"
},
{
"type": "web-application",
"target": "www.storspiller.com"
},
{
"type": "web-application",
"target": "payment.storspiller.com"
},
{
"type": "web-application",
"target": "www.storspelare.se"
},
{
"type": "web-application",
"target": "payment.storspelare.se"
},
{
"type": "web-application",
"target": "www.casinohuone.com"
},
{
"type": "web-application",
"target": "en.casinohuone.com"
},
{
"type": "web-application",
"target": "payment.casinohuone.com"
},
{
"type": "web-application",
"target": "www.vladcazino.ro"
},
{
"type": "web-application",
"target": "payment.vladcazino.ro"
},
{
"type": "web-application",
"target": "https://pci.kindredgroup.com"
},
{
"type": "web-application",
"target": "https://www.32red.com/"
},
{
"type": "web-application",
"target": "/blog/ (or translated equivalent) endpoints on our sites"
},
{
"type": "mobile-application-ios",
"target": "https://itunes.apple.com/gb/app/unibet-live-sports-betting/id463335337"
},
{
"type": "mobile-application-ios",
"target": "https://itunes.apple.com/gb/app/unibet-casino-slots-games/id905382680"
},
{
"type": "mobile-application-android",
"target": "https://cdn.unicdn.net/apk/UnibetCasino.apk"
}
],
"out_of_scope": [
{
"type": "other",
"target": "All domains or subdomains not listed in the above list of 'Scopes' should be considered to be out of scope"
}
]
},
"disabled": false,
"max_bounty": 15000,
"min_bounty": 50
}