Skip to content
Connect AISign inSign up free

Bug bounty program

EV

Equifax-vdp

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
283
Disclosed reports
7
Subdomains
55,670
Vendor on CyberSIXT
Equifax (1 CVE, 0 exploited)

Most upvoted reports7

Most upvoted reports of Equifax-vdp
ReportWeaknessDisclosedBountyVotes
Important information leaked on GithubAnalysed#649322Authentication2019-08-22–98
reflected XSS in [www.equifax.com]Analysed#1818163Cross-site Scripting2023-04-23–47
Subdomain takeover at http://test.www.midigator.comAnalysed#1718371Access Control2022-11-12–32
Open SonarQube instance leaking internal source codeAnalysed#947946Information Disclosure2020-09-03–20
reflected XSS in [www.equifax.com]Analysed#1818172Cross-site Scripting2023-04-23–19
Information Leak (Github)Analysed#694931No weakness recorded2020-04-09–17
RXSS on https://equifax.gr8people.com on Password Reset page in the username parameter#1463638Cross-site Scripting2022-03-09–6

Subdomains55,670

Root:github.com
Scope
Name suggests
First seen
Text fileClear filters55,670 names
Subdomains of Equifax-vdp
NameScopeFirst seen
ddoghq.github.comNot in the scope2026-11-14
ddollar.github.comNot in the scope2026-11-14
ddouble.github.comNot in the scope2026-11-14
ddoxxo.github.comNot in the scope2026-11-14
ddp.github.comNot in the scope2026-11-14
ddr0.github.comNot in the scope2026-11-14
ddrboxman.github.comNot in the scope2026-11-14
dds.github.comNot in the scope2026-11-14
ddsc.github.comNot in the scope2026-11-14
dduportal.github.comNot in the scope2026-11-14
ddys.github.comNot in the scope2026-11-14
de.github.comNot in the scope2026-11-14
autoconfig.de.github.comNot in the scope2026-11-14
autodiscover.de.github.commailNot in the scope2026-11-14
mail.de.github.commailNot in the scope2026-11-14
www.de.github.comNot in the scope2026-11-14
de1.github.comNot in the scope2026-11-14
ws6pw.de2ab.github.comNot in the scope2026-11-14
dead-horse.github.comNot in the scope2026-11-14
deaddevil.github.comNot in the scope2026-11-14
deadlyelder.github.comNot in the scope2026-11-14
deadnight7.github.comNot in the scope2026-11-14
deaebeem.github.comNot in the scope2026-11-14
deal.github.comNot in the scope2026-11-14
deal-antivirus.github.comNot in the scope2026-11-14
dealer.github.comNot in the scope2026-11-14
dealers.github.comNot in the scope2026-11-14
deals.github.comNot in the scope2026-11-14
www.deals.github.comNot in the scope2026-11-14
dean.github.comNot in the scope2026-11-14
dean-coakley.github.comNot in the scope2026-11-14
deanchen.github.comNot in the scope2026-11-14
deanhume.github.comNot in the scope2026-11-14
deanm.github.comNot in the scope2026-11-14
deanmao.github.comNot in the scope2026-11-14
deanmark.github.comNot in the scope2026-11-14
deanriverson.github.comNot in the scope2026-11-14
dearcoin.github.comNot in the scope2026-11-14
dearprakash.github.comNot in the scope2026-11-14
deasciifier.github.comNot in the scope2026-11-14
death.github.comNot in the scope2026-11-14
deavid.github.comNot in the scope2026-11-14
deb.github.comNot in the scope2026-11-14
deba9398.github.comNot in the scope2026-11-14
debbbbie.github.comNot in the scope2026-11-14
debian.github.comNot in the scope2026-11-14
debility.github.comNot in the scope2026-11-14
debilski.github.comNot in the scope2026-11-14
debloper.github.comNot in the scope2026-11-14
deblopper.github.comNot in the scope2026-11-14
deborahgu.github.comNot in the scope2026-11-14
debrouwere.github.comNot in the scope2026-11-14
debrouxl.github.comNot in the scope2026-11-14
debug.github.comNot in the scope2026-11-14
debugerlu.github.comNot in the scope2026-11-14
debuggify.github.comNot in the scope2026-11-14
dec.github.comNot in the scope2026-11-14
dec-covid19.github.comNot in the scope2026-11-14
covid19.dec.github.comNot in the scope2026-11-14
sigmavirus24.dec.github.comNot in the scope2026-11-14
decaf.github.comNot in the scope2026-11-14
deccovid19.github.comNot in the scope2026-11-14
decioferreira.github.comNot in the scope2026-11-14
deckerego.github.comNot in the scope2026-11-14
decks-hearthstone-sigmavirus.github.comNot in the scope2026-11-14
declandewet.github.comNot in the scope2026-11-14
declandewetsigmavirus.github.comNot in the scope2026-11-14
deco.github.comNot in the scope2026-11-14
decors.github.comNot in the scope2026-11-14
decoupledcms.github.comNot in the scope2026-11-14
decs.github.comNot in the scope2026-11-14
dector.github.comNot in the scope2026-11-14
ded.github.comNot in the scope2026-11-14
dedi.github.comNot in the scope2026-11-14
dedicado.github.comNot in the scope2026-11-14
dedicated.github.comNot in the scope2026-11-14
dedomenon.github.comNot in the scope2026-11-14
deduce.github.comNot in the scope2026-11-14
deedee.github.comNot in the scope2026-11-14
deep.github.comNot in the scope2026-11-14
sub.deep.github.comNot in the scope2026-11-14
deepak.github.comNot in the scope2026-11-14
deepak2510.github.comNot in the scope2026-11-14
deepakjois.github.comNot in the scope2026-11-14
deepakjois-sigmavirus.github.comNot in the scope2026-11-14
deepakmodak.github.comNot in the scope2026-11-14
deepbit.github.comNot in the scope2026-11-14
deepblue.github.comNot in the scope2026-11-14
deepfriedmind.github.comNot in the scope2026-11-14
deepsweet.github.comNot in the scope2026-11-14
deer.github.comNot in the scope2026-11-14
deergate.github.comNot in the scope2026-11-14
deevus.github.comNot in the scope2026-11-14
abc.def.github.comNot in the scope2026-11-14
default.github.comNot in the scope2026-11-14
defavlt.github.comNot in the scope2026-11-14
defeated.github.comNot in the scope2026-11-14
defectingcat.github.comNot in the scope2026-11-14
defender.github.comNot in the scope2026-11-14
defiant.github.comNot in the scope2026-11-14

0 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated