Spotify · in scope
Wildcard domains
10 assets in scope
Every dot is an asset the program lists in scope. The first 9 are named here; the program's own page has the full scope.
Open Spotify on HackerOneEvery one of the 10 is a mark on the map. Named now: 1 to 9, as listed first.
- *.atspotify.com
- *.avecspotify.com
- *.byspotify.com
- *.enspotify.com
- *.forspotify.com
- *.fromspotify.com
- *.spotify.com
- *.spotify.net
- *.tospotify.com
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP