vinted/vinted-bugbountyprogram
15
In Scope
6
Out of Scope
In-Scope Assets (15)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.vinted.com | WILDCARD | Yes | ||
| *.vinted.fr | WILDCARD | Yes | ||
| *.vinted.net | WILDCARD | Yes | ||
| *.vintedgo.com | WILDCARD | Yes | ||
| *badger.it.vinted.com | WILDCARD | Yes | ||
| *careers.vinted.com | WILDCARD | Yes | ||
| *company.vinted.com | WILDCARD | Yes | ||
| *news.vinted.com | WILDCARD | Yes | ||
| *old.vinted.com | WILDCARD | Yes | ||
| *sandbox*.vinted.com | WILDCARD | Yes | ||
| *sandbox*.vintedgo.com | WILDCARD | Yes | ||
| *test-escalations.vintedgo.com | WILDCARD | Yes | ||
| Scam | OTHER | Yes | - | |
| Vinted: Shop & sell pre-loved | IOS | Yes | - | |
| Vinted: Shop & sell pre-loved | ANDROID | Yes | - |
Out-of-Scope Assets (6)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.homerr.com | WILDCARD | Yes | |
| *.people.vinted.* | WILDCARD | Yes | |
| *.vinted.ca | WILDCARD | Yes | |
| *vintedpay.com | WILDCARD | Yes | |
| api.prod.svc.vintedpay.com | URL | Yes | |
| callbacks.prod.svc.vintedpay.com | URL | Yes |
Scope Changes (208)
Mar 5, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *sandbox*.vintedgo.com | WILDCARD | In Scope | 17:20 |
| Added | callbacks.prod.svc.vintedpay.com | URL | Out of Scope | 17:20 |
| Added | *company.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *news.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *old.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *.homerr.com | WILDCARD | Out of Scope | 17:20 |
| Added | scam | OTHER | In Scope | 17:20 |
| Added | *badger.it.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *.vinted.fr | WILDCARD | In Scope | 17:20 |
| Added | *.people.vinted.* | WILDCARD | Out of Scope | 17:20 |
| Added | *vintedpay.com | WILDCARD | Out of Scope | 17:20 |
| Added | *sandbox*.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *.homerr.com | WILDCARD | Out of Scope | 17:20 |
| Added | callbacks.prod.svc.vintedpay.com | URL | Out of Scope | 17:20 |
| Added | api.prod.svc.vintedpay.com | URL | Out of Scope | 17:20 |
| Added | scam | OTHER | In Scope | 17:20 |
| Added | *company.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *news.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *careers.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *badger.it.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *test-escalations.vintedgo.com | WILDCARD | In Scope | 17:20 |
| Added | *old.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *sandbox*.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *sandbox*.vintedgo.com | WILDCARD | In Scope | 17:20 |
| Added | *.vintedgo.com | WILDCARD | In Scope | 17:20 |
| Added | *.vinted.fr | WILDCARD | In Scope | 17:20 |
| Added | *.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *.vinted.net | WILDCARD | In Scope | 17:20 |
| Added | *.vintedgo.com | WILDCARD | In Scope | 17:20 |
| Added | *.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | api.prod.svc.vintedpay.com | URL | Out of Scope | 17:20 |
| Added | *careers.vinted.com | WILDCARD | In Scope | 17:20 |
| Added | *test-escalations.vintedgo.com | WILDCARD | In Scope | 17:20 |
| Added | *.vinted.net | WILDCARD | In Scope | 17:20 |
| Added | *.vinted.ca | WILDCARD | Out of Scope | 17:20 |
| Added | *.people.vinted.* | WILDCARD | Out of Scope | 17:20 |
| Added | *.vinted.ca | WILDCARD | Out of Scope | 17:20 |
| Added | *vintedpay.com | WILDCARD | Out of Scope | 17:20 |
| Program Removed | — | — | — | 16:30 |
| Program Removed | — | — | — | 15:30 |
| Program Removed | — | — | — | 14:30 |
| Program Removed | — | — | — | 13:30 |
| Program Removed | — | — | — | 12:30 |
| Program Removed | — | — | — | 11:30 |
| Program Removed | — | — | — | 10:30 |
| Program Removed | — | — | — | 09:30 |
| Program Removed | — | — | — | 08:30 |
| Program Removed | — | — | — | 07:30 |
| Program Removed | — | — | — | 06:30 |
| Program Removed | — | — | — | 05:30 |
| Program Removed | — | — | — | 04:30 |
| Program Removed | — | — | — | 03:30 |
| Program Removed | — | — | — | 02:30 |
| Program Removed | — | — | — | 01:30 |
| Added | *badger.it.vinted.com | WILDCARD | In Scope | 00:30 |
| Added | *.vinted.net | WILDCARD | In Scope | 00:30 |
| Added | *.vinted.com | WILDCARD | In Scope | 00:30 |
| Added | *.vinted.fr | WILDCARD | In Scope | 00:30 |
| Added | *.vintedgo.com | WILDCARD | In Scope | 00:30 |
| Added | *sandbox*.vintedgo.com | WILDCARD | In Scope | 00:30 |
| Added | *sandbox*.vinted.com | WILDCARD | In Scope | 00:30 |
| Added | *old.vinted.com | WILDCARD | In Scope | 00:30 |
| Added | *test-escalations.vintedgo.com | WILDCARD | In Scope | 00:30 |
| Added | *careers.vinted.com | WILDCARD | In Scope | 00:30 |
| Added | *news.vinted.com | WILDCARD | In Scope | 00:30 |
| Added | *company.vinted.com | WILDCARD | In Scope | 00:30 |
| Added | scam | OTHER | In Scope | 00:30 |
| Added | api.prod.svc.vintedpay.com | URL | Out of Scope | 00:30 |
| Added | callbacks.prod.svc.vintedpay.com | URL | Out of Scope | 00:30 |
| Added | *.homerr.com | WILDCARD | Out of Scope | 00:30 |
| Added | *vintedpay.com | WILDCARD | Out of Scope | 00:30 |
| Added | *.vinted.ca | WILDCARD | Out of Scope | 00:30 |
| Added | *.people.vinted.* | WILDCARD | Out of Scope | 00:30 |
Mar 4, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 23:30 |
| Program Removed | — | — | — | 22:30 |
| Program Removed | — | — | — | 21:30 |
| Program Removed | — | — | — | 20:30 |
| Program Removed | — | — | — | 19:30 |
| Program Removed | — | — | — | 18:30 |
| Program Removed | — | — | — | 17:30 |
| Program Removed | — | — | — | 16:30 |
| Program Removed | — | — | — | 15:30 |
| Program Removed | — | — | — | 14:30 |
| Program Removed | — | — | — | 13:30 |
| Program Removed | — | — | — | 12:30 |
| Program Removed | — | — | — | 11:30 |
| Program Removed | — | — | — | 10:30 |
| Program Removed | — | — | — | 09:30 |
| Program Removed | — | — | — | 08:30 |
| Program Removed | — | — | — | 07:30 |
| Program Removed | — | — | — | 06:30 |
| Program Removed | — | — | — | 05:30 |
| Program Removed | — | — | — | 04:30 |
| Program Removed | — | — | — | 03:30 |
| Program Removed | — | — | — | 02:30 |
| Program Removed | — | — | — | 01:30 |
| Program Removed | — | — | — | 00:30 |
Mar 3, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 23:30 |
| Program Removed | — | — | — | 22:30 |
| Program Removed | — | — | — | 21:30 |
| Program Removed | — | — | — | 20:30 |
| Program Removed | — | — | — | 19:30 |
| Program Removed | — | — | — | 18:30 |
| Program Removed | — | — | — | 17:30 |
| Program Removed | — | — | — | 16:30 |
| Program Removed | — | — | — | 15:30 |
| Program Removed | — | — | — | 14:15 |
| Program Removed | — | — | — | 14:06 |
| Program Removed | — | — | — | 13:54 |
| Program Removed | — | — | — | 12:54 |
| Program Removed | — | — | — | 11:54 |
| Program Removed | — | — | — | 10:54 |
| Program Removed | — | — | — | 09:54 |
| Program Removed | — | — | — | 08:54 |
| Program Removed | — | — | — | 07:54 |
| Program Removed | — | — | — | 06:54 |
| Program Removed | — | — | — | 05:54 |
| Program Removed | — | — | — | 04:54 |
| Program Removed | — | — | — | 03:54 |
| Program Removed | — | — | — | 02:54 |
| Program Removed | — | — | — | 01:54 |
| Program Removed | — | — | — | 00:54 |
Mar 2, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 23:54 |
| Program Removed | — | — | — | 22:54 |
| Program Removed | — | — | — | 21:54 |
| Program Removed | — | — | — | 20:54 |
| Program Removed | — | — | — | 19:54 |
| Program Removed | — | — | — | 18:39 |
| Program Removed | — | — | — | 18:28 |
Feb 26, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 19:28 |
Feb 24, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | scam | OTHER | In Scope | 10:17 |
Feb 23, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.vinted.net | WILDCARD | In Scope | 10:43 |
| Added | callbacks.prod.svc.vintedpay.com | URL | Out of Scope | 10:43 |
| Added | *.homerr.com | WILDCARD | Out of Scope | 10:43 |
| Added | *vintedpay.com | WILDCARD | Out of Scope | 10:43 |
| Added | *.vintedgo.com | WILDCARD | In Scope | 10:43 |
| Added | *.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | scam | OTHER | In Scope | 10:43 |
| Added | *news.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *test-escalations.vintedgo.com | WILDCARD | In Scope | 10:43 |
| Added | *sandbox*.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *.vinted.fr | WILDCARD | In Scope | 10:43 |
| Added | *company.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *careers.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *badger.it.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *sandbox*.vintedgo.com | WILDCARD | In Scope | 10:43 |
| Added | *.vinted.net | WILDCARD | In Scope | 10:43 |
| Added | *.vinted.ca | WILDCARD | Out of Scope | 10:43 |
| Added | *.people.vinted.* | WILDCARD | Out of Scope | 10:43 |
| Added | api.prod.svc.vintedpay.com | URL | Out of Scope | 10:43 |
| Added | *old.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *.vinted.ca | WILDCARD | Out of Scope | 10:43 |
| Added | *.people.vinted.* | WILDCARD | Out of Scope | 10:43 |
| Added | *.homerr.com | WILDCARD | Out of Scope | 10:43 |
| Added | *vintedpay.com | WILDCARD | Out of Scope | 10:43 |
| Added | api.prod.svc.vintedpay.com | URL | Out of Scope | 10:43 |
| Added | callbacks.prod.svc.vintedpay.com | URL | Out of Scope | 10:43 |
| Added | *.vintedgo.com | WILDCARD | In Scope | 10:43 |
| Added | *.vinted.fr | WILDCARD | In Scope | 10:43 |
| Added | *.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | scam | OTHER | In Scope | 10:43 |
| Added | *company.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *news.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *careers.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *badger.it.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *test-escalations.vintedgo.com | WILDCARD | In Scope | 10:43 |
| Added | *old.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *sandbox*.vinted.com | WILDCARD | In Scope | 10:43 |
| Added | *sandbox*.vintedgo.com | WILDCARD | In Scope | 10:43 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Program Removed | — | — | — | 22:43 |
| Added | *.vinted.net | WILDCARD | In Scope | 14:43 |
| Added | *.homerr.com | WILDCARD | Out of Scope | 14:43 |
| Added | *vintedpay.com | WILDCARD | Out of Scope | 14:43 |
| Added | *company.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *.people.vinted.* | WILDCARD | Out of Scope | 14:43 |
| Added | api.prod.svc.vintedpay.com | URL | Out of Scope | 14:43 |
| Added | *.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *news.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *badger.it.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *test-escalations.vintedgo.com | WILDCARD | In Scope | 14:43 |
| Added | *.vinted.ca | WILDCARD | Out of Scope | 14:43 |
| Added | *.vinted.fr | WILDCARD | In Scope | 14:43 |
| Added | scam | OTHER | In Scope | 14:43 |
| Added | callbacks.prod.svc.vintedpay.com | URL | Out of Scope | 14:43 |
| Added | *.vintedgo.com | WILDCARD | In Scope | 14:43 |
| Added | *careers.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *old.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *sandbox*.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *sandbox*.vintedgo.com | WILDCARD | In Scope | 14:43 |
| Added | *.vinted.net | WILDCARD | In Scope | 14:43 |
| Added | *.vinted.ca | WILDCARD | Out of Scope | 14:43 |
| Added | *.people.vinted.* | WILDCARD | Out of Scope | 14:43 |
| Added | *.homerr.com | WILDCARD | Out of Scope | 14:43 |
| Added | *vintedpay.com | WILDCARD | Out of Scope | 14:43 |
| Added | api.prod.svc.vintedpay.com | URL | Out of Scope | 14:43 |
| Added | callbacks.prod.svc.vintedpay.com | URL | Out of Scope | 14:43 |
| Added | *.vintedgo.com | WILDCARD | In Scope | 14:43 |
| Added | *.vinted.fr | WILDCARD | In Scope | 14:43 |
| Added | *.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | scam | OTHER | In Scope | 14:43 |
| Added | *company.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *news.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *careers.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *badger.it.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *test-escalations.vintedgo.com | WILDCARD | In Scope | 14:43 |
| Added | *old.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *sandbox*.vinted.com | WILDCARD | In Scope | 14:43 |
| Added | *sandbox*.vintedgo.com | WILDCARD | In Scope | 14:43 |