Bug bounty program
FA
FanDuel
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Passive mixed content issues on the site https://*.fanduel.comAnalysed#437800 | Cryptography | 2018-12-21 | $100 | 29 |
Subdomains953
| Name | Scope | First seen |
|---|---|---|
| sportsboosecure-viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| apply.sportsboosecure.assets.fanduel.com | In scope | 2026-11-14 |
| sportsboosecureviruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| apply.sportsboosecureviruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| sportsboostaging.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomix-www.sportsboostaging.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomix.www.sportsboostaging.assets.fanduel.com | In scope | 2026-11-14 |
| sportsboostagingviruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| www.sportsboostagingviruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| sportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| sportsboowww-viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| www.sportsboowww-viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| banweb.sportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| banwebviruscomix.sportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomix-www.sampling.sportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| www.sampling.sportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| www.viruscomix.sportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixsampling.sportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| staging-assets-zozoportsbookcdn.assets.fanduel.comstaging | In scope | 2026-11-14 |
| sportsbook.staging.assets.fanduel.comstaging | In scope | 2026-11-14 |
| stagingviruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| sportsbook.stagingviruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| sub-97-30-58loxiniaportsbook-secure.assets.fanduel.com | In scope | 2026-11-14 |
| svteb3762portsbook-secure.assets.fanduel.com | In scope | 2026-11-14 |
| telefonfreelyportsbook.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomix-secure.assets.fanduel.com | In scope | 2026-11-14 |
| www.bn.viruscomix-secure.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomix-sportsboostaging.assets.fanduel.com | In scope | 2026-11-14 |
| www.viruscomix-sportsboostaging.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomix-staging.assets.fanduel.comstaging | In scope | 2026-11-14 |
| sportsbook.viruscomix-staging.assets.fanduel.comstaging | In scope | 2026-11-14 |
| sportsbook.viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| www.sportsbooksecure.viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| sportsbookstaging.viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| sportsboostaging.viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| webpoint.viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| www.viruscomix.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixcdn.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixgraphql-secure.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixsportsboocdn.assets.fanduel.com | In scope | 2026-11-14 |
| www.webpoint.viruscomixsportsboocdn.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixsportsbook-www.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixsportsbooksecure.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixsportsbookwww.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixsportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| www.sampling.viruscomixsportsboowww.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixstaging.assets.fanduel.com | In scope | 2026-11-14 |
| sportsbook.viruscomixstaging.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomixswww.assets.fanduel.com | In scope | 2026-11-14 |
| web5781portsbookcdn.assets.fanduel.com | In scope | 2026-11-14 |
| web6019oregon-newsroomcdn.assets.fanduel.com | In scope | 2026-11-14 |
| www.assets.fanduel.com | In scope | 2026-11-14 |
| sportsbook.www.assets.fanduel.com | In scope | 2026-11-14 |
| sportsbookviruscomix.www.assets.fanduel.com | In scope | 2026-11-14 |
| viruscomix.www.assets.fanduel.com | In scope | 2026-11-14 |
| sportsbook.viruscomix.www.assets.fanduel.com | In scope | 2026-11-14 |
| ya-aliweb5811-staging.assets.fanduel.comstaging | In scope | 2026-11-14 |
| atr.fanduel.com | In scope | 2026-11-14 |
| autodiscover.fanduel.commail | In scope | 2026-11-14 |
| aw-dynamic-web-testing.fanduel.comtest | In scope | 2026-11-14 |
| baseballprops.fanduel.com | In scope | 2026-11-14 |
| www.baseballprops.fanduel.com | In scope | 2026-11-14 |
| blog.fanduel.com | In scope | 2026-11-14 |
| boxscore.fanduel.com | In scope | 2026-11-14 |
| www.boxscore.fanduel.com | In scope | 2026-11-14 |
| brand.fanduel.com | In scope | 2026-11-14 |
| branding-imgs.fanduel.com | In scope | 2026-11-14 |
| support.canada.fanduel.com | In scope | 2026-11-14 |
| www.support.canada.fanduel.com | In scope | 2026-11-14 |
| ablink.ma.cas.fanduel.comauth | In scope | 2026-11-14 |
| o2913.abmail.ma.cas.fanduel.comauth | In scope | 2026-11-14 |
| o2914.abmail.t.cas.fanduel.comauth | In scope | 2026-11-14 |
| casino.fanduel.com | In scope | 2026-11-14 |
| account.casino.fanduel.com | In scope | 2026-11-14 |
| achievements-manager.casino.fanduel.comadmin | In scope | 2026-11-14 |
| android-update.casino.fanduel.com | In scope | 2026-11-14 |
| animatedtrailer.casino.fanduel.com | In scope | 2026-11-14 |
| app-files.casino.fanduel.comdata | In scope | 2026-11-14 |
| canada.casino.fanduel.com | In scope | 2026-11-14 |
| on.canada.casino.fanduel.com | In scope | 2026-11-14 |
| redirect.canada.casino.fanduel.com | In scope | 2026-11-14 |
| casino-bannering-tool.casino.fanduel.com | In scope | 2026-11-14 |
| challenges.casino.fanduel.com | In scope | 2026-11-14 |
| clg.casino.fanduel.com | In scope | 2026-11-14 |
| account.co.casino.fanduel.com | In scope | 2026-11-14 |
| ct.casino.fanduel.com | In scope | 2026-11-14 |
| account.ct.casino.fanduel.com | In scope | 2026-11-14 |
| api.ct.casino.fanduel.comapi | In scope | 2026-11-14 |
| aristocratbridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| dgcbridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| everibridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| evobridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| flutter-studios-bridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| fusionbridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| gamecode-bridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| igtbridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| lnwbridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
| mds.ct.casino.fanduel.com | In scope | 2026-11-14 |
| playtechbridge.ct.casino.fanduel.com | In scope | 2026-11-14 |
780 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.