H1 HackerOne LIVE
Ferrero
no bountyVDP
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://www.ferrero.com
- managed triage
- yes
- response efficiency
- 79%
- first response
- 6h avg
345 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
backtoschool2024.ferreropromo.it | domain | no | critical | 2026-09-20 |
caraffa2024.ferreropromo.it | domain | no | critical | 2026-09-20 |
figurine2024.ferreropromo.it | domain | no | critical | 2026-09-20 |
fulfil-promo.de | domain | no | critical | 2026-09-20 |
ge63-ferreropp.web.oxv.fr | domain | no | critical | 2026-09-20 |
http://backtoschool25.ru | domain | no | critical | 2026-09-20 |
http://duplo-chocnut.de/gratistesten | domain | no | critical | 2026-09-20 |
http://estathe.it/ | domain | no | critical | 2026-09-20 |
http://fandom.kinder.com/strangerthings | domain | no | critical | 2026-09-20 |
http://kinder.com/de/de/xp/magische-bescherung | domain | no | critical | 2026-09-20 |
http://kinderkarnawal.pl/admin_bn5cz9k4/login | domain | no | critical | 2026-09-20 |
http://quality-songsmitherz-de-2026.ipaasferrero.com/de/de/xp/songsmitherz | domain | no | critical | 2026-09-20 |
http://testy.kinderdziendziecka.pl | domain | no | critical | 2026-09-20 |
http://testy.kinderdziendziecka.pl/admin_dakr82swp | domain | no | critical | 2026-09-20 |
http://www.eatnatural.com/de/de/xp/gratistesten/ | domain | no | critical | 2026-09-20 |
http://www.ferrero-cashback.de | domain | no | critical | 2026-09-20 |
http://www.k-joy.de/strangerthings | domain | no | critical | 2026-09-20 |
http://www.kindercreamypromo.com/in/en/xp/freegiftwitheverypack | domain | no | critical | 2026-09-20 |
http://www.kinderjoyindiapromo.com/in/en/xp/triptoaustralia | domain | no | critical | 2026-09-20 |
http://www.kinderschokobons.de/strangerthings | domain | no | critical | 2026-09-20 |
https://5cc1659edaa8.hosting.myjino.ru/ | domain | no | critical | 2026-09-20 |
https://accendilefesteestatheedamici.estathe.it | domain | no | critical | 2026-09-20 |
https://admin.loteria.ferrerorocher.pl | domain | no | critical | 2026-09-20 |
https://admin.t.blask.ferrerorocher.pl | domain | no | critical | 2026-09-20 |
https://admin.tictacph.com | domain | no | critical | 2026-09-20 |
https://aldomain1.raffaello.hu/hu/hu/xp/dobozbazartszeretet/ | domain | no | critical | 2026-09-20 |
https://apd-talking-ap-southeast-1.applaydu.com/bff/ | domain | no | critical | 2026-09-20 |
https://apd-talking-eu-west-1.applaydu.com/bff/ | domain | no | critical | 2026-09-20 |
https://apd-talking-staging-ap-southeast-1.applaydu.com/bff/ | domain | no | critical | 2026-09-20 |
https://apd-talking-staging-eu-west-1.applaydu.com/bff | domain | no | critical | 2026-09-20 |
https://baltic.ferrerorocher.com/lv/lv/xp/aygt25 | domain | no | critical | 2026-09-20 |
https://baltic.ferrerorocher.com/lv/lv/xp/gold | domain | no | critical | 2026-09-20 |
https://baltic.kinder.com/lv/lv/xp/karnevals/ | domain | no | critical | 2026-09-20 |
https://baltic.kinder.com/lv/lv/xp/loterija/ | domain | no | critical | 2026-09-20 |
https://baltic.kinder.com/regs/ | domain | no | critical | 2026-09-20 |
https://baltic.nutella.com/bc/lv/edit/ | domain | no | critical | 2026-09-20 |
https://baltic.nutella.com/bc/lv/xp/labrit/ | domain | no | critical | 2026-09-20 |
https://baltic.nutella.com/bc/lv/xp/loterija/ | domain | no | critical | 2026-09-20 |
https://beta.nutellaxmas.4ourclient.com/pl/pl/xp/dzielsiemiloscianaswieta2025/ | domain | no | critical | 2026-09-20 |
https://beta.tictac.4ourclient.com/admin_p3bav5a1b | domain | no | critical | 2026-09-20 |
https://beta.tictac.4ourclient.com/pl/pl/xp/znajdzswojsmak2025 | domain | no | critical | 2026-09-20 |
https://clubferreropro.com | domain | no | critical | 2026-09-20 |
https://cms-aygt-fr-2025.ferrerorocherpromo.com/fr/fr/xp/ajoutez-votre-touche-de-magie | domain | no | critical | 2026-09-20 |
https://cms-aygt-it-2025.ferrerorocherpromo.com/it/it/xp/natale2025/ | domain | no | critical | 2026-09-20 |
https://cms-aygt-master-2025.ferrerorocherpromo.com/ | domain | no | critical | 2026-09-20 |
https://cms-aygt-mx-2025.ferrerorocherpromo.com/mx/es/xp/que-tus-momentos-brillen/ | domain | no | critical | 2026-09-20 |
https://cms-kinderriegel-love-de-2025.ipaasferrero.com/de/de/xp/kinderriegel-love/admin/ | domain | no | critical | 2026-09-20 |
https://cms-kinderviaggiesercenti2025-ferreroprofessional-it-2025.ipaasferrero.com/user/login | domain | no | critical | 2026-09-20 |
https://cms-kjeldsens-com-2025.ipaasferrero.com/ | domain | no | critical | 2026-09-20 |
https://cms-nutella-academy-fr-2025.ferreropromo.com/fr/fr/xp/academy-event | domain | no | critical | 2026-09-20 |
https://cms-personalised-nutella-jar-int-2025.ipaasferrero.com/uk/en/xp/personalised-nutella-jar/ | domain | no | critical | 2026-09-20 |
https://cms-wonka-com-2026.ipaasferrero.com/ | domain | no | critical | 2026-09-20 |
https://cms.tennistrophy.com/ | domain | no | critical | 2026-09-20 |
https://cms.tennistrophy.it/ | domain | no | critical | 2026-09-20 |
https://cmsquality-wonka-com-2026.ipaasferrero.com/ | domain | no | critical | 2026-09-20 |
https://development.winwiththorntons.co.uk/ | domain | no | critical | 2026-09-20 |
https://estathecanoa26.estathe.it | domain | no | critical | 2026-09-20 |
https://estathefornopizza26.estathe.it/ | domain | no | critical | 2026-09-20 |
https://ferrero-aygt.vercel.app/ | domain | no | critical | 2026-09-20 |
https://ferrero-egypt.vercel.app/ | domain | no | critical | 2026-09-20 |
https://ferrero-egypt.vercel.app/secure-ops-98423 | domain | no | critical | 2026-09-20 |
https://ferrero-hom.comuniclick.com.br/ | domain | no | critical | 2026-09-20 |
https://ferrero-hom.comuniclick.com.br/_/admin/login | domain | no | critical | 2026-09-20 |
https://ferrero-palette-2025-netlify-app.ferrero.fr/status/_id/uid | domain | no | critical | 2026-09-20 |
https://ferrero.somese.lv/lv/edit/ | domain | no | critical | 2026-09-20 |
https://ferrero.somese.lv/lv/lv/xp/pavasaris | domain | no | critical | 2026-09-20 |
https://ferrerorocher-aygt.ogilvy.it/ca/en/xp/add-your-golden-touch/ | domain | no | critical | 2026-09-20 |
https://ferrerorocher-aygt.ogilvy.it/de/de/xp/vergolde-dein-weihnachten/ | domain | no | critical | 2026-09-20 |
https://ferrerorocher-aygt.ogilvy.it/jp/ja/xp/add-your-golden-touch/ | domain | no | critical | 2026-09-20 |
https://ferrerorocher-aygt.ogilvy.it/za/en/xp/add-your-golden-touch | domain | no | critical | 2026-09-20 |
https://ferrerorocher.ro/ro/ro/xp/lumineaza-clipele-speciale-inscriere/ | domain | no | critical | 2026-09-20 |
https://ferrerorochergoldengift.com/roadshow/login.html | domain | no | critical | 2026-09-20 |
https://ferrerorochergoldentouch.com/us/en/xp/add-your-golden-touch/berlin-beta/ | domain | no | critical | 2026-09-20 |
https://ferrerorocherpromo.ro/ro/ro/xp/cadoul-mai-presus-de-cuvinte/ | domain | no | critical | 2026-09-20 |
https://ferrerorocherpromo.ro/ro/ro/xp/clipa-de-aur/ | domain | no | critical | 2026-09-20 |
https://ferrerorocherpromo.ro/ro/ro/xp/lumineaza-clipele-speciale-inscriere/ | domain | no | critical | 2026-09-20 |
https://findyourmatch25.strategie.agency/be/fr/xp/findyourmatch/ | domain | no | critical | 2026-09-20 |
https://fulfilborsoni.ferreropromo.it/ | domain | no | critical | 2026-09-20 |
https://gewinnspiel.mein-ferrero.de/loyalty-gewinnspiel/ | domain | no | critical | 2026-09-20 |
https://gewinnspiel.mein-ferrero.de/nutella-donut | domain | no | critical | 2026-09-20 |
https://gewinnspiel.mein-ferrero.de/rocher-winterhighlights | domain | no | critical | 2026-09-20 |
https://giotto.couponinghouse.de/xp/potluck/ | domain | no | critical | 2026-09-20 |
https://goldenexperience.ferrero-campaigns.com/bg/bg/xp/goldenexperience/ | domain | no | critical | 2026-09-20 |
https://jarpecarpromo.theofferclub.in/administrator/auth | domain | no | critical | 2026-09-20 |
https://jarpecarpromo.tictac.com | domain | no | critical | 2026-09-20 |
https://jd2025admindemo.ferrero.com.cn/default/login.html | domain | no | critical | 2026-09-20 |
https://kids.kinder.ro/ro/ro/xp/lets-story/ | domain | no | critical | 2026-09-20 |
https://kinder.somese.lv/lv/edit/ | domain | no | critical | 2026-09-20 |
https://kinder.somese.lv/lv/lv/xp/kidsday2024/ | domain | no | critical | 2026-09-20 |
https://kinder.somese.lv/lv/lv/xp/kinder-surprise-2024/ | domain | no | critical | 2026-09-20 |
https://kinder.somese.lv/lv/lv/xp/kindertime2024/ | domain | no | critical | 2026-09-20 |
https://kinder.whitecat.ro/ro/ro/xp/country-break/ | domain | no | critical | 2026-09-20 |
https://kinderbuenogamedaysweeps.com/us/en/xp/game-day-sweeps/berlin-beta/ | domain | no | critical | 2026-09-20 |
https://kinderchocolateoffer.com/us/en/xp/kinder-chocolate-offer/berlin-beta/ | domain | no | critical | 2026-09-20 |
https://kinderjoy.tlccloud.net/ | domain | no | critical | 2026-09-20 |
https://kinderletsstory.uglobal.com.cn/ | domain | no | critical | 2026-09-20 |
https://kinderviaggi2025esercenti.ferreroprofessional.it | domain | no | critical | 2026-09-20 |
https://leto-zavtrak.ru/ | domain | no | critical | 2026-09-20 |
https://live.nutella.com/pl/pl/xp/nutelladodajeusmiechu2026/ | domain | no | critical | 2026-09-20 |
https://multi.somese.lv/raffaello/2024/lv/ | domain | no | critical | 2026-09-20 |
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.