Bug bounty program · HackerOne
Most upvoted reports5
- #824433ValidReflected XSS in https://blocked.myndr.netMyndr · Cross-site Scripting · 2020–46votes
- #840736ValidOpen Redirect filter bypass through '\' character via URL parameterMyndr · Open Redirect · 2020–39votes
- #3930957ValidMyndr CORS MisconfigurationMyndr · Access Control · 2026–36votes
- #3930102ValidCORS Misconfiguration / Broken Access ControlMyndr · Access Control · 2026–22votes
- #1065128ValidNo Rate Limit On dashboard.myndr.net/authMyndr · Authentication · 2021–8votes
Subdomains102
99 covered by the program's own scope · 0 first seen this week
102 names
| Name | Scope | First seen |
|---|---|---|
| admin.myndr.netadmin | In scope | 2026-11-14 |
| admin-us.myndr.netadmin | In scope | 2026-11-14 |
| anomaly-dashboard.myndr.netadmin | In scope | 2026-11-14 |
| api.myndr.netapi | In scope | 2026-11-14 |
| blocked.myndr.net | In scope | 2026-11-14 |
| core-api.myndr.netapi | In scope | 2026-11-14 |
| dashboard.myndr.netadmin | In scope | 2026-11-14 |
| dns.myndr.net | In scope | 2026-11-14 |
| edu-v.myndr.net | In scope | 2026-11-14 |
| edu-v-acceptance.myndr.net | In scope | 2026-11-14 |
| admin.local.myndr.netadmin, dev | In scope | 2026-11-14 |
| admin-extra.local.myndr.netadmin, dev | In scope | 2026-11-14 |
| api.local.myndr.netapi, dev | In scope | 2026-11-14 |
| api-extra.local.myndr.netapi, dev | In scope | 2026-11-14 |
| assemble.local.myndr.netdev | In scope | 2026-11-14 |
| order.local.myndr.netdev | In scope | 2026-11-14 |
| wildcard.local.myndr.netdev | In scope | 2026-11-14 |
| meta.myndr.net | In scope | 2026-11-14 |
| mqtt.myndr.net | Listed out of scope | 2026-11-14 |
| mqtt-acceptance-test.myndr.nettest | In scope | 2026-11-14 |
| mqtt-new.myndr.net | In scope | 2026-11-14 |
| mqtt-us.myndr.net | In scope | 2026-11-14 |
| mqtt-ws.myndr.net | In scope | 2026-11-14 |
| mqtt-ws-test.myndr.nettest | In scope | 2026-11-14 |
| mqtt2.myndr.net | Listed out of scope | 2026-11-14 |
| ns1.myndr.net | In scope | 2026-11-14 |
| ns2.myndr.net | In scope | 2026-11-14 |
| permalink.myndr.net | In scope | 2026-11-14 |
| pki.myndr.net | In scope | 2026-11-14 |
| pki-acceptance.myndr.net | In scope | 2026-11-14 |
| pnp.myndr.net | Listed out of scope | 2026-11-14 |
| preparsed.myndr.net | In scope | 2026-11-14 |
| pub.myndr.net | In scope | 2026-11-14 |
| public.myndr.net | In scope | 2026-11-14 |
| public2.myndr.net | In scope | 2026-11-14 |
| push.myndr.net | In scope | 2026-11-14 |
| sales-dashboard.myndr.netadmin | In scope | 2026-11-14 |
| status.myndr.netmonitoring | In scope | 2026-11-14 |
| tickets.myndr.net | In scope | 2026-11-14 |
| www.myndr.net | In scope | 2026-11-14 |
| 253abibliotheek.myndr.nl | In scope | 2026-11-14 |
| 253aosd.myndr.nl | In scope | 2026-11-14 |
| 253awww.myndr.nl | In scope | 2026-11-14 |
| 2fbibliotheek.myndr.nl | In scope | 2026-11-14 |
| 2fwww.myndr.nl | In scope | 2026-11-14 |
| 3abibliotheek.myndr.nl | In scope | 2026-11-14 |
| 3aosd.myndr.nl | In scope | 2026-11-14 |
| 3awww.myndr.nl | In scope | 2026-11-14 |
| antivirus.myndr.nl | In scope | 2026-11-14 |
| antivirus-c.myndr.nl | In scope | 2026-11-14 |
| antivirus-pro-date.myndr.nl | In scope | 2026-11-14 |
| www.antivirus-pro-date.myndr.nl | In scope | 2026-11-14 |
| antivirus2.myndr.nl | In scope | 2026-11-14 |
| antivirusadmin.myndr.nl | In scope | 2026-11-14 |
| bibliotheek.antivirusadmin.myndr.nl | In scope | 2026-11-14 |
| bibliotheek.myndr.nl | In scope | 2026-11-14 |
| www.bibliotheek.myndr.nl | In scope | 2026-11-14 |
| com.myndr.nl | In scope | 2026-11-14 |
| core-api.dev.myndr.nlapi, dev | In scope | 2026-11-14 |
| dashboard.dev.myndr.nladmin, dev | In scope | 2026-11-14 |
| domaintech.myndr.nl | In scope | 2026-11-14 |
| doncovim-ime.myndr.nl | In scope | 2026-11-14 |
| fluvaccines.myndr.nl | In scope | 2026-11-14 |
| forum.myndr.nl | In scope | 2026-11-14 |
| www.forum.myndr.nl | In scope | 2026-11-14 |
| help.myndr.nl | In scope | 2026-11-14 |
| infovirus.myndr.nl | In scope | 2026-11-14 |
| www.infovirus.myndr.nl | In scope | 2026-11-14 |
| kb.myndr.nl | In scope | 2026-11-14 |
| loncov3.myndr.nl | In scope | 2026-11-14 |
| loncov9.myndr.nl | In scope | 2026-11-14 |
| mc.myndr.nl | In scope | 2026-11-14 |
| mob-dev.myndr.nldev | In scope | 2026-11-14 |
| my.myndr.nl | In scope | 2026-11-14 |
| nortonantiviruscustomersupportnumber.myndr.nl | In scope | 2026-11-14 |
| www.nortonantiviruscustomersupportnumber.myndr.nl | In scope | 2026-11-14 |
| odincovo.myndr.nl | In scope | 2026-11-14 |
| osd.myndr.nl | In scope | 2026-11-14 |
| osd1.myndr.nl | In scope | 2026-11-14 |
| retrovirus.myndr.nl | In scope | 2026-11-14 |
| scan.myndr.nl | In scope | 2026-11-14 |
| antivirus.scan.myndr.nl | In scope | 2026-11-14 |
| status.myndr.nlmonitoring | In scope | 2026-11-14 |
| support.myndr.nl | In scope | 2026-11-14 |
| links.support.myndr.nl | In scope | 2026-11-14 |
| suspicious-virus-detected.myndr.nl | In scope | 2026-11-14 |
| tracking.myndr.nl | In scope | 2026-11-14 |
| uat-vaccines.myndr.nltest | In scope | 2026-11-14 |
| vaccine.myndr.nl | In scope | 2026-11-14 |
| www.vaccine.myndr.nl | In scope | 2026-11-14 |
| vaccineiq.myndr.nl | In scope | 2026-11-14 |
| www.vaccineiq.myndr.nl | In scope | 2026-11-14 |
| virus-design.myndr.nl | In scope | 2026-11-14 |
| virus0316.myndr.nl | In scope | 2026-11-14 |
| virusarnold6.myndr.nl | In scope | 2026-11-14 |
| www.virusarnold6.myndr.nl | In scope | 2026-11-14 |
| virusnex.myndr.nl | In scope | 2026-11-14 |
| viruspolku.myndr.nl | In scope | 2026-11-14 |
| virust.myndr.nl | In scope | 2026-11-14 |
| www.myndr.nl | In scope | 2026-11-14 |
Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. See the subdomains on the Atlas or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.