Bug bounty program
Etsy
- Platform
- Bugcrowd
- Bounties
- Pays
- Assets in scope
- 10
- Disclosed reports
- 0
- Subdomains
- 169,749
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains169,749
| Name | Scope | First seen |
|---|---|---|
| api.etsy.comapi | In scope | 2026-11-14 |
| api-ambassadors.etsy.comapi | In scope | 2026-11-14 |
| api-cdn-test.etsy.comapi, test | In scope | 2026-11-14 |
| api-creatorco.etsy.comapi | In scope | 2026-11-14 |
| api-creatorcollective.etsy.comapi | In scope | 2026-11-14 |
| api-edencovetreasures.etsy.comapi | In scope | 2026-11-14 |
| api-heroncovewoodcarving.etsy.comapi | In scope | 2026-11-14 |
| api-katncov.etsy.comapi | In scope | 2026-11-14 |
| api-origin.etsy.comapi | In scope | 2026-11-14 |
| api-urbancover.etsy.comapi | In scope | 2026-11-14 |
| www.api-urbancover.etsy.comapi | In scope | 2026-11-14 |
| api-viruset.etsy.comapi | In scope | 2026-11-14 |
| auth-api.etsy.comapi, auth | In scope | 2026-11-14 |
| beta-api.etsy.comapi, staging | In scope | 2026-11-14 |
| cabincovedesigns-api.etsy.comapi | In scope | 2026-11-14 |
| www.cabincovedesigns-api.etsy.comapi | In scope | 2026-11-14 |
| www-api.cabincovedesigns.etsy.comapi | In scope | 2026-11-14 |
| cozykitchencovers-api.etsy.comapi | In scope | 2026-11-14 |
| www.cozykitchencovers-api.etsy.comapi | In scope | 2026-11-14 |
| api.cozykitchencovers.etsy.comapi | In scope | 2026-11-14 |
| www.api.cozykitchencovers.etsy.comapi | In scope | 2026-11-14 |
| api.www.cozykitchencovers.etsy.comapi | In scope | 2026-11-14 |
| dev-auth-api.etsy.comapi, auth, dev | In scope | 2026-11-14 |
| dummy-api.etsy.comapi | In scope | 2026-11-14 |
| edencovetreasures-api.etsy.comapi | In scope | 2026-11-14 |
| api.edencovetreasures.etsy.comapi | In scope | 2026-11-14 |
| ewr-api.etsy.comapi | In scope | 2026-11-14 |
| api.heroncovewoodcarving.etsy.comapi | In scope | 2026-11-14 |
| openapi.etsy.comapi | In scope | 2026-11-14 |
| openapi-ak.etsy.comapi | In scope | 2026-11-14 |
| openapi-f.etsy.comapi | In scope | 2026-11-14 |
| openapi-h3.etsy.comapi | In scope | 2026-11-14 |
| openapi-origin.etsy.comapi | In scope | 2026-11-14 |
| openapi-staging.etsy.comapi, staging | In scope | 2026-11-14 |
| sandbox.openapi.etsy.comapi, test | In scope | 2026-11-14 |
| zone1.openapi.etsy.comapi | In scope | 2026-11-14 |
| origin-api.etsy.comapi | In scope | 2026-11-14 |
| origin-api-auth.etsy.comapi, auth | In scope | 2026-11-14 |
| petitviruset-api.etsy.comapi | In scope | 2026-11-14 |
| api.petitviruset.etsy.comapi | In scope | 2026-11-14 |
| scrapincovers-api.etsy.comapi | In scope | 2026-11-14 |
| www.scrapincovers-api.etsy.comapi | In scope | 2026-11-14 |
| api.scrapincovers.etsy.comapi | In scope | 2026-11-14 |
| www.api.scrapincovers.etsy.comapi | In scope | 2026-11-14 |
| www-api.scrapincovers.etsy.comapi | In scope | 2026-11-14 |
| api.www.scrapincovers.etsy.comapi | In scope | 2026-11-14 |
| sea-api.etsy.comapi | In scope | 2026-11-14 |
| soap.etsy.comapi | In scope | 2026-11-14 |
| www.soap4squares.etsy.comapi | In scope | 2026-11-14 |
169,743 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.