Bug bounty program
eToro Managed Bug Bounty Engagement
- Platform
- Bugcrowd
- Bounties
- Pays
- Assets in scope
- 8
- Disclosed reports
- 0
- Subdomains
- 652
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains652
| Name | Scope | First seen |
|---|---|---|
| api-docs.delta.appapi | Not in the scope | 2026-11-14 |
| api-staging.delta.appapi, staging | Not in the scope | 2026-11-14 |
| ask.delta.app | Not in the scope | 2026-11-14 |
| blog.delta.app | Not in the scope | 2026-11-14 |
| bloomberg-debugger.delta.app | Not in the scope | 2026-11-14 |
| clicks.delta.app | Not in the scope | 2026-11-14 |
| club-e2e-test-results.delta.apptest | Not in the scope | 2026-11-14 |
| csv-debugger.delta.app | Not in the scope | 2026-11-14 |
| dailyrecap.delta.app | Not in the scope | 2026-11-14 |
| desktop.delta.app | Not in the scope | 2026-11-14 |
| prod.desktop.delta.app | Not in the scope | 2026-11-14 |
| stg.desktop.delta.appstaging | Not in the scope | 2026-11-14 |
| updates.desktop.delta.app | Not in the scope | 2026-11-14 |
| develop.delta.appdev | Not in the scope | 2026-11-14 |
| direct.delta.app | Not in the scope | 2026-11-14 |
| discord.delta.app | Not in the scope | 2026-11-14 |
| download.delta.app | Not in the scope | 2026-11-14 |
| etoro-api-docs.delta.appapi | Not in the scope | 2026-11-14 |
| exchange.delta.appmail | Not in the scope | 2026-11-14 |
| facebook.delta.app | Not in the scope | 2026-11-14 |
| form.delta.app | Not in the scope | 2026-11-14 |
| get.delta.app | Not in the scope | 2026-11-14 |
| go.delta.app | Not in the scope | 2026-11-14 |
| home-feed-cms.delta.appadmin | Not in the scope | 2026-11-14 |
| hr.delta.app | Not in the scope | 2026-11-14 |
| bz254.info.delta.app | Not in the scope | 2026-11-14 |
| instagram.delta.app | Not in the scope | 2026-11-14 |
| interim.delta.app | Not in the scope | 2026-11-14 |
| jobs.delta.app | Not in the scope | 2026-11-14 |
| l.delta.app | Not in the scope | 2026-11-14 |
| linkedin.delta.app | Not in the scope | 2026-11-14 |
| mcp.delta.app | Not in the scope | 2026-11-14 |
| mcp-staging.delta.appstaging | Not in the scope | 2026-11-14 |
| mcp-test.delta.apptest | Not in the scope | 2026-11-14 |
| moad.delta.app | Not in the scope | 2026-11-14 |
| my.delta.app | Not in the scope | 2026-11-14 |
| bz253.news.delta.app | Not in the scope | 2026-11-14 |
| nft-debugger.delta.app | Not in the scope | 2026-11-14 |
| nft-images.delta.app | Not in the scope | 2026-11-14 |
| nft-img-proxy.delta.app | Not in the scope | 2026-11-14 |
| nft-img-proxy-staging.delta.appstaging | Not in the scope | 2026-11-14 |
| open.delta.app | Not in the scope | 2026-11-14 |
| pay.delta.app | Not in the scope | 2026-11-14 |
| portfolio-debugger.delta.app | Not in the scope | 2026-11-14 |
| portfolio-debugger-staging.delta.appstaging | Not in the scope | 2026-11-14 |
| reddit.delta.app | Not in the scope | 2026-11-14 |
| rsca.delta.app | Not in the scope | 2026-11-14 |
| api.rsca.delta.appapi | Not in the scope | 2026-11-14 |
| staging.rsca.delta.appstaging | Not in the scope | 2026-11-14 |
| api.staging.rsca.delta.appapi, staging | Not in the scope | 2026-11-14 |
| www.staging.rsca.delta.appstaging | Not in the scope | 2026-11-14 |
| www.rsca.delta.app | Not in the scope | 2026-11-14 |
| slack.delta.app | Not in the scope | 2026-11-14 |
| staging.delta.appstaging | Not in the scope | 2026-11-14 |
| static.delta.app | Not in the scope | 2026-11-14 |
| support.delta.app | Not in the scope | 2026-11-14 |
| talk-to-your-portfolio.delta.app | Not in the scope | 2026-11-14 |
| telegram.delta.app | Not in the scope | 2026-11-14 |
| twitter.delta.app | Not in the scope | 2026-11-14 |
| web.delta.app | Not in the scope | 2026-11-14 |
| web-api-docs.delta.appapi | Not in the scope | 2026-11-14 |
| web-images.delta.app | Not in the scope | 2026-11-14 |
| web-images-staging.delta.appstaging | Not in the scope | 2026-11-14 |
| webflow.delta.app | Not in the scope | 2026-11-14 |
| webflow-staging.delta.appstaging | Not in the scope | 2026-11-14 |
| wechat.delta.app | Not in the scope | 2026-11-14 |
| www.delta.app | Not in the scope | 2026-11-14 |
| x.delta.app | Not in the scope | 2026-11-14 |
| youtube.delta.app | Not in the scope | 2026-11-14 |
| 007.etoro.com | In scope | 2026-11-14 |
| 1.etoro.com | In scope | 2026-11-14 |
| 2fcontent.etoro.com | In scope | 2026-11-14 |
| 2fopenbook.etoro.com | In scope | 2026-11-14 |
| 2fwww.etoro.com | In scope | 2026-11-14 |
| 2ww.etoro.com | In scope | 2026-11-14 |
| 3dpages.etoro.com | In scope | 2026-11-14 |
| 3ww.etoro.com | In scope | 2026-11-14 |
| 7ww.etoro.com | In scope | 2026-11-14 |
| accountstat.etoro.com | In scope | 2026-11-14 |
| affiliates.etoro.com | In scope | 2026-11-14 |
| aggregator.etoro.com | In scope | 2026-11-14 |
| akcn.etoro.com | In scope | 2026-11-14 |
| akhk.etoro.com | In scope | 2026-11-14 |
| alerts.etoro.com | In scope | 2026-11-14 |
| amir-antivirus.etoro.com | In scope | 2026-11-14 |
| antivirus.etoro.com | In scope | 2026-11-14 |
| antivirus-2018.etoro.com | In scope | 2026-11-14 |
| antivirus-38b65.etoro.com | In scope | 2026-11-14 |
| antivirus-extension.etoro.com | In scope | 2026-11-14 |
| painel.antivirus.etoro.com | In scope | 2026-11-14 |
| api.etoro.comapi | In scope | 2026-11-14 |
| api-portal.etoro.comapi | In scope | 2026-11-14 |
| apptest.etoro.com | In scope | 2026-11-14 |
| arrow.etoro.com | In scope | 2026-11-14 |
| www.arrow.etoro.com | In scope | 2026-11-14 |
| arrowmask8.etoro.com | In scope | 2026-11-14 |
| asdf.etoro.com | In scope | 2026-11-14 |
| basics-moving-averages.aspxwww.etoro.com | In scope | 2026-11-14 |
| assets-prod-005.etoro.com | In scope | 2026-11-14 |
| assets-prod-006.etoro.com | In scope | 2026-11-14 |
577 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.