Magisto

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.magisto.com URL critical
**EXCEPTION** - Subdomains owned/controlled/managed/etc by a 3rd party.
486781045 APPLE_STORE_APP_ID critical
applause1.magisto.com URL critical
com.magisto GOOGLE_PLAY_APP_ID critical
magisto.com,www.magisto.com URL critical
staging.magisto.com URL critical

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.dev.magisto.com URL none
*.test.magisto.com URL none
Gamma.magisto.com URL none
applause2.magisto.com URL none
delta.magisto.com URL none
epsilon.magisto.com URL none
eta.magisto.com URL none
int001.vimeo.magisto.com URL none
int002.vimeo.magisto.com URL none
int003.vimeo.magisto.com URL none
int004.vimeo.magisto.com URL none
int005vimeo.magisto.com URL none
www.magisto.com/blog URL none
*.cdn.magisto.com URL none
This domain is out-of-scope for testing and bounty effective 6/26/2020 11:30 EDT
omega.magisto.com URL none
This domain is out-of-scope for testing and bounty effective 6/26/2020 11:30 EDT