FanDuel icon FanDuel HackerOne

Target Policy
https://hackerone.com/fanduel?type=team
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • *.numberfire.com
    WILDCARD
    critical
  • partners.fanduel.com
    URL
    none
  • myaccount.fanduel.com
    URL
    none
  • newsroom.fanduel.com
    URL
    none
  • myaccountmobile.fanduel.com
    URL
    none
  • *racing.fanduel.com
    WILDCARD
    critical
  • *.fanduel.com
    WILDCARD
    critical
  • okta.fanduel.com

    Not in scope.

    URL
    none
  • fanduel.design
    URL
    medium
  • fanduel.zendesk.com

    This is out of scope for testing and reward

    URL
    none
  • com.fanduel.sportsbook
    GOOGLE_PLAY_APP_ID
    critical
  • 1506229470
    APPLE_STORE_APP_ID
    critical
  • com.fanduel.casino
    GOOGLE_PLAY_APP_ID
    critical
  • 1485539253
    APPLE_STORE_APP_ID
    critical
  • *.prd.fndlsb.net
    WILDCARD
    critical
  • 4njbets.tvg.com
    URL
    critical
  • us.tvg.com
    URL
    critical
  • www.tvg.com
    URL
    critical
  • ia.tvg.com
    URL
    critical
  • 4njbets.us.betfair.com
    URL
    critical
  • *.canada.fanduel.com
    WILDCARD
    none
  • com.fanduel.racing
    GOOGLE_PLAY_APP_ID
    critical
  • support.fanduel.com

    This is out of scope and reward

    URL
    none
  • *inf.fndlsb.net
    WILDCARD
    critical
  • http://*.fanduel.com
    WILDCARD
    critical
  • http://*racing.fanduel.com
    WILDCARD
    critical
  • *.prod.fdbox.net
    WILDCARD
    none
  • fanduel.com
    URL
    critical
  • *.mgmt.fndlsb.net
    WILDCARD
    critical
  • tvg.com
    URL
    critical
  • login.tvg.com
    URL
    critical
  • login-4njbets.us.betfair.com
    URL
    critical
  • 6740879082
    APPLE_STORE_APP_ID
    critical
  • login-pabets.tvg.com
    URL
    critical
  • 1413721906
    APPLE_STORE_APP_ID
    critical
  • service.racing.fanduel.com
    URL
    critical
  • com.fanduel.flywheelnativecontainer.picks
    GOOGLE_PLAY_APP_ID
    critical
  • sportsbook.fanduel.com
    URL
    critical
  • fdbox.net

    Development or testing instances are not in scope for this asset. Submissions affecting such environments will be closed.

    URL
    none
  • 4njbets.com
    URL
    critical
  • 599664106
    APPLE_STORE_APP_ID
    critical
  • com.fanduel.android.live
    URL
    critical
  • com.fanduel.android.self
    GOOGLE_PLAY_APP_ID
    critical
  • 4njbets.tvgnetwork.com
    URL
    critical
  • b2b.tvgnetwork.com
    URL
    critical
  • login-4ngbets.us.betfair.com
    URL
    critical
  • login.pabets.tvg.com
    URL
    critical
  • login-ia.tvg.com
    URL
    critical
  • m.4njbets.tvg.com
    URL
    critical
  • mobile-prod.tvg.com
    URL
    critical
  • pabets.tvg.com
    URL
    critical
  • promos.tvg.com
    URL
    critical
  • service.tvg.com
    URL
    critical
  • www.4njbets.com
    URL
    critical
  • *.east.fdbox.net
    WILDCARD
    none
Target Scope Domains
  • 4njbets.com
  • 4njbets.tvg.com
  • 4njbets.tvgnetwork.com
  • 4njbets.us.betfair.com
  • b2b.tvgnetwork.com
  • com.fanduel.android.live
  • fanduel.com
  • fanduel.design
  • ia.tvg.com
  • inf.fndlsb.net
  • login-4ngbets.us.betfair.com
  • login-4njbets.us.betfair.com
  • login-ia.tvg.com
  • login-pabets.tvg.com
  • login.pabets.tvg.com
  • login.tvg.com
  • m.4njbets.tvg.com
  • mgmt.fndlsb.net
  • mobile-prod.tvg.com
  • numberfire.com
  • pabets.tvg.com
  • prd.fndlsb.net
  • promos.tvg.com
  • racing.fanduel.com
  • racing.fanduel.com
  • service.racing.fanduel.com
  • service.tvg.com
  • sportsbook.fanduel.com
  • tvg.com
  • us.tvg.com
  • www.4njbets.com
  • www.tvg.com
Tech Stack
Last Finished Scan:
Scan Name
Fleet
Finished
State
auto-gausubs-2-kor
allkxss
1 month ago
Finished
auto-gausubs-2-kor
  • Fleet: allkxss
  • Duration: 30 Seconds
  • Finished: 1 month ago