H1 HackerOne LIVE
SIX Group
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://six-group.com
- managed triage
- yes
- response efficiency
- 82%
- time to bounty
- 4475h avg
59 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
146.109.1.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.140.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.141.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.142.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.143.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.148.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.149.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.150.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.151.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.161.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.2.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.3.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.4.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.64.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.65.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.66.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.67.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.68.0/24 | cidr | yes | critical | 2026-09-20 |
146.109.8.0/21 | cidr | yes | critical | 2026-09-20 |
146.109.8.0/22 | cidr | yes | critical | 2026-09-20 |
153.46.0.0/16 | cidr | yes | critical | 2026-09-20 |
153.46.104.0/22 | cidr | yes | critical | 2026-09-20 |
153.46.108.0/22 | cidr | yes | critical | 2026-09-20 |
153.46.111.0/24 | cidr | yes | critical | 2026-09-20 |
153.46.162.0/23 | cidr | yes | critical | 2026-09-20 |
153.46.176.0/22 | cidr | yes | critical | 2026-09-20 |
153.46.240.0/20 | cidr | yes | critical | 2026-09-20 |
153.46.30.0/23 | cidr | yes | critical | 2026-09-20 |
153.46.32.0/23 | cidr | yes | critical | 2026-09-20 |
153.46.34.0/23 | cidr | yes | critical | 2026-09-20 |
153.46.48.0/22 | cidr | yes | critical | 2026-09-20 |
153.46.96.0/20 | cidr | yes | critical | 2026-09-20 |
174.44.253.152/29 | cidr | yes | critical | 2026-09-20 |
185.210.32.0/22 | cidr | yes | critical | 2026-09-20 |
193.109.229.0/24 | cidr | yes | critical | 2026-09-20 |
193.110.154.0/24 | cidr | yes | critical | 2026-09-20 |
193.5.66.0/23 | cidr | yes | critical | 2026-09-20 |
193.8.251.0/24 | cidr | yes | critical | 2026-09-20 |
194.209.121.0/24 | cidr | yes | critical | 2026-09-20 |
194.35.79.0/24 | cidr | yes | critical | 2026-09-20 |
212.95.227.64/26 | cidr | yes | critical | 2026-09-20 |
62.192.20.16/29 | cidr | yes | critical | 2026-09-20 |
http://ibt-test.six-group.com | domain | yes | critical | 2026-09-20 |
https://disclosure-test.six-exchange-regulation.com/ | domain | yes | critical | 2026-09-20 |
https://fx-qa.np.bolsasymercados.es/ | domain | yes | critical | 2026-09-20 |
https://secure-test.six-swiss-exchange.com/ | domain | yes | critical | 2026-09-20 |
https://web3.sdx.com | domain | yes | high | 2026-09-20 |
https://www.sdx.com/ | domain | yes | critical | 2026-09-20 |
www.bolsasymercados.es | domain | yes | critical | 2026-09-20 |
www.six-group.com | domain | yes | critical | 2026-09-20 |
https://apps.apple.com/ch/app/debix/id1581440132?l=en-GB | mobile | yes | critical | 2026-09-20 |
https://apps.apple.com/mx/app/debix/id1581440132 | mobile | yes | critical | 2026-09-20 |
https://apps.apple.com/mx/app/schweizer-finanzmuseum/id1225222871 | mobile | yes | critical | 2026-09-20 |
https://apps.apple.com/mx/app/six-id/id1620496931 | mobile | yes | critical | 2026-09-20 |
https://apps.apple.com/us/app/bme-conecta/id6443938949 | mobile | yes | critical | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.sixgroup.debixplus | mobile | yes | critical | 2026-09-20 |
https://play.google.com/store/apps/details?id=com.sixgroup.id&hl=en_US&pli=1 | mobile | yes | critical | 2026-09-20 |
https://play.google.com/store/apps/details?id=es.grupobme.bmeconecta | mobile | yes | critical | 2026-09-20 |
https://play.google.com/store/search?q=Schweizer+Finanzmuseum&c=apps | mobile | yes | critical | 2026-09-20 |
11 out of scope — black ICE, don't touch
194.98.112.0/24cidr213.41.106.0/24cidr193.109.229.71domainhttp://ibt.six-group.comdomainhttps://bmefx.es/domainhttps://disclosure.six-exchange-regulation.com/domainhttps://providerhub.six-group.com/domainhttps://www.six-structured-products.com/domainsaferpay.comdomain153.46.254.150ip*.sixidmobile.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.