H1 HackerOne LIVE
Alshaya
no bountyVDP
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://alshaya.com
- managed triage
- yes
- response efficiency
- 83%
- first response
- 2h avg
184 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
ae.boots.com | domain | no | critical | 2026-09-20 |
ae.charlottetilbury.com | domain | no | critical | 2026-09-20 |
ae.cos.com | domain | no | critical | 2026-09-20 |
ae.cosstores.com | domain | no | critical | 2026-09-20 |
ae.hm.com | domain | no | critical | 2026-09-20 |
ae.shopjustice.me | domain | no | critical | 2026-09-20 |
apigw.dev.alshaya.com | domain | no | critical | 2026-09-20 |
apps.havelockone.com | domain | no | critical | 2026-09-20 |
bakimonarim.shaya.com.tr | domain | no | critical | 2026-09-20 |
bn.boots.com | domain | no | critical | 2026-09-20 |
boysweb.shaya.com.tr | domain | no | critical | 2026-09-20 |
boyswebtest.shaya.com.tr | domain | no | critical | 2026-09-20 |
card.starbucks.com.kz | domain | no | critical | 2026-09-20 |
ccareapuat.alshaya.com | domain | no | critical | 2026-09-20 |
cloud.havelockone.com | domain | no | critical | 2026-09-20 |
cloudconnect.havelockone.com | domain | no | critical | 2026-09-20 |
coms.carrier.alshaya.com | domain | no | critical | 2026-09-20 |
comsuat.carrier.alshaya.com | domain | no | critical | 2026-09-20 |
customercare.alshaya.com | domain | no | critical | 2026-09-20 |
dev.alshaya.com | domain | no | critical | 2026-09-20 |
devimages.alshaya.com | domain | no | critical | 2026-09-20 |
eg.hm.com | domain | no | critical | 2026-09-20 |
gtmsservice.alshaya.com | domain | no | critical | 2026-09-20 |
internaljobs.alshaya.com | domain | no | critical | 2026-09-20 |
jenkins.alshaya.com | domain | no | critical | 2026-09-20 |
jobsearch.alshaya.com | domain | no | critical | 2026-09-20 |
kuwait.kidzania.com | domain | no | critical | 2026-09-20 |
kw.boots.com | domain | no | critical | 2026-09-20 |
kw.charlottetilbury.com | domain | no | critical | 2026-09-20 |
kw.cos.com | domain | no | critical | 2026-09-20 |
kw.cosstores.com | domain | no | critical | 2026-09-20 |
kw.hm.com | domain | no | critical | 2026-09-20 |
kw.shopjustice.me | domain | no | critical | 2026-09-20 |
media.bathandbodyworks.ro | domain | no | critical | 2026-09-20 |
media.victoriassecret.cz | domain | no | critical | 2026-09-20 |
mft.dev.alshaya.com | domain | no | critical | 2026-09-20 |
odi.dev.alshaya.com | domain | no | critical | 2026-09-20 |
onlinepos.shaya.com.tr | domain | no | critical | 2026-09-20 |
onlinestaffstore.alshaya.com | domain | no | critical | 2026-09-20 |
opsassistbrandedsolutions.shaya.com.tr | domain | no | critical | 2026-09-20 |
parallels.havelockone.com | domain | no | critical | 2026-09-20 |
pmp.shaya.com.tr | domain | no | critical | 2026-09-20 |
prodimages.alshaya.com | domain | no | critical | 2026-09-20 |
qa.charlottetilbury.com | domain | no | critical | 2026-09-20 |
qa.hm.com | domain | no | critical | 2026-09-20 |
qt.boots.com | domain | no | critical | 2026-09-20 |
sa.boots.com | domain | no | critical | 2026-09-20 |
sa.charlottetilbury.com | domain | no | critical | 2026-09-20 |
sa.cos.com | domain | no | critical | 2026-09-20 |
sa.cosstores.com | domain | no | critical | 2026-09-20 |
sa.hm.com | domain | no | critical | 2026-09-20 |
sa.shopjustice.me | domain | no | critical | 2026-09-20 |
sbuxopsassist.shaya.com.tr | domain | no | critical | 2026-09-20 |
soa.dev.alshaya.com | domain | no | critical | 2026-09-20 |
starbucks.az | domain | no | critical | 2026-09-20 |
suppliertraining.alshaya.com | domain | no | critical | 2026-09-20 |
tracking.victoriassecret.cz | domain | no | critical | 2026-09-20 |
victoriassecret.cz | domain | no | critical | 2026-09-20 |
victoriassecret.ro/ | domain | no | critical | 2026-09-20 |
victoriassecretbeauty.ro | domain | no | critical | 2026-09-20 |
vpn.shaya.com.tr | domain | no | critical | 2026-09-20 |
www.ahwetzeitounakuwait.com | domain | no | critical | 2026-09-20 |
www.amitinoura.com | domain | no | critical | 2026-09-20 |
www.babelkwt.com | domain | no | critical | 2026-09-20 |
www.bathandbodyworks.ro | domain | no | critical | 2026-09-20 |
www.bebabelkuwait.com | domain | no | critical | 2026-09-20 |
www.bouchonbakeryme.com | domain | no | critical | 2026-09-20 |
www.customercare.alshaya.com | domain | no | critical | 2026-09-20 |
www.dev.alshaya.com | domain | no | critical | 2026-09-20 |
www.havelockone.com | domain | no | critical | 2026-09-20 |
www.lepainquotidienme.com | domain | no | critical | 2026-09-20 |
www.pfchangsme.com | domain | no | critical | 2026-09-20 |
www.pinkberryme.com | domain | no | critical | 2026-09-20 |
www.pizzaexpresskw.com | domain | no | critical | 2026-09-20 |
www.raisingcanesme.com | domain | no | critical | 2026-09-20 |
www.shayakahve.com.tr | domain | no | critical | 2026-09-20 |
www.shayakahve.com.tr/ | domain | no | critical | 2026-09-20 |
www.starbucks.az | domain | no | critical | 2026-09-20 |
www.victoriassecretbeauty.ro | domain | no | critical | 2026-09-20 |
6472633752 | mobile | no | critical | 2026-09-20 |
AE + Aerie Middle East_MENA_ANDROID_com.aeo.mena | mobile | no | critical | 2026-09-20 |
AE + Aerie Middle East_MENA_IOS_1547602361 | mobile | no | critical | 2026-09-20 |
Alo GCC_GCC_ANDROID_com.aloyoga.mena | mobile | no | critical | 2026-09-20 |
Alo GCC_GCC_IOS_1664702687 | mobile | no | critical | 2026-09-20 |
Aura MENA - Rewarding Loyalty_MENA_ANDRIOD_com.alshaya.aura | mobile | no | critical | 2026-09-20 |
Aura MENA - Rewarding Loyalty_MENA_IOS_1532694353 | mobile | no | critical | 2026-09-20 |
Bath&BodyWorks_MENA_ANDROID_com.bbw.mena | mobile | no | critical | 2026-09-20 |
Bath&BodyWorks_MENA_IOS_1541576878 | mobile | no | critical | 2026-09-20 |
Boots Middle East_MENA_IOS_1537064114 | mobile | no | critical | 2026-09-20 |
Debenhams MENA_MENA_IOS_1603834040 | mobile | no | critical | 2026-09-20 |
Foot Locker MENA_MENA_ANDROID_com.footlocker.mena | mobile | no | critical | 2026-09-20 |
Foot Locker MENA_MENA_IOS_1563808574 | mobile | no | critical | 2026-09-20 |
H&M MENA - Shop Fashion Online_MENA_ANDROID_com.hm.mena | mobile | no | critical | 2026-09-20 |
H&M MENA - Shop Fashion Online_MENA_IOS_1445040108 | mobile | no | critical | 2026-09-20 |
Mothercare MENA Baby/Kids Shop_MENA_IOS_1563370517 | mobile | no | critical | 2026-09-20 |
Mothercare MENA_MENA_ANDROID_com.mothercare.mena | mobile | no | critical | 2026-09-20 |
Victoria's Secret MENA_MENA_ANDROID_com.vs.mena | mobile | no | critical | 2026-09-20 |
Victoria's Secret MENA_MENA_IOS_1559906965 | mobile | no | critical | 2026-09-20 |
com.chipotle.mena | mobile | no | critical | 2026-09-20 |
com.starbucks.tr | mobile | no | critical | 2026-09-20 |
7 out of scope — black ICE, don't touch
crm.alshayamarketing.comdomainthebodyshop.czdomain*.thebodyshop.com.bhwildcard*.thebodyshop.com.kwwildcard*.thebodyshop.com.trwildcard*.thebodyshop.plwildcard*.thebodyshop.qawildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.