H1 HackerOne LIVE
Alshaya
no bountyVDP
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- https://alshaya.com
- managed triage
- yes
- response efficiency
- 83%
- first response
- 2h avg
184 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
id6472633752 | mobile | no | critical | 2026-09-20 |
starbucks-t%C3%BCrkiye/id1100698915?l=tr | mobile | no | critical | 2026-09-20 |
*.ahwetzeitounakuwait.com | wildcard | no | critical | 2026-09-20 |
*.aloyoga.ae | wildcard | no | critical | 2026-09-20 |
*.aloyoga.com.kw | wildcard | no | critical | 2026-09-20 |
*.aloyoga.com.qa | wildcard | no | critical | 2026-09-20 |
*.alshaya.com | wildcard | no | critical | 2026-09-20 |
*.alshayaenterprises.com | wildcard | no | critical | 2026-09-20 |
*.americaneagle.ae | wildcard | no | critical | 2026-09-20 |
*.americaneagle.com.bh | wildcard | no | critical | 2026-09-20 |
*.americaneagle.com.eg | wildcard | no | critical | 2026-09-20 |
*.americaneagle.com.jo | wildcard | no | critical | 2026-09-20 |
*.americaneagle.com.kw | wildcard | no | critical | 2026-09-20 |
*.americaneagle.com.qa | wildcard | no | critical | 2026-09-20 |
*.americaneagle.com.sa | wildcard | no | critical | 2026-09-20 |
*.amitinoura.com | wildcard | no | critical | 2026-09-20 |
*.aura-mena-uat.alshaya.com | wildcard | no | critical | 2026-09-20 |
*.aura-mena.com | wildcard | no | critical | 2026-09-20 |
*.babelkwt.com | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.ae | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.com.bh | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.com.eg | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.com.kw | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.com.qa | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.com.sa | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.com.tr | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.jo | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.pl | wildcard | no | critical | 2026-09-20 |
*.bathandbodyworks.ro | wildcard | no | critical | 2026-09-20 |
*.bebabelkuwait.com/ | wildcard | no | critical | 2026-09-20 |
*.bouchonbakeryme.com | wildcard | no | critical | 2026-09-20 |
*.bouchonbakeryme.com/ | wildcard | no | critical | 2026-09-20 |
*.carrier.alshaya.com | wildcard | no | critical | 2026-09-20 |
*.debenhams.ae | wildcard | no | critical | 2026-09-20 |
*.debenhams.com.kw | wildcard | no | critical | 2026-09-20 |
*.debenhams.sa | wildcard | no | critical | 2026-09-20 |
*.footlocker.ae | wildcard | no | critical | 2026-09-20 |
*.footlocker.com.bh | wildcard | no | critical | 2026-09-20 |
*.footlocker.com.eg | wildcard | no | critical | 2026-09-20 |
*.footlocker.qa | wildcard | no | critical | 2026-09-20 |
*.kidzaniakuwait-tickets.com | wildcard | no | critical | 2026-09-20 |
*.lepainquotidienme.com | wildcard | no | critical | 2026-09-20 |
*.mothercare.ae | wildcard | no | critical | 2026-09-20 |
*.mothercare.com.eg | wildcard | no | critical | 2026-09-20 |
*.mothercare.com.kw | wildcard | no | critical | 2026-09-20 |
*.mothercare.com.sa | wildcard | no | critical | 2026-09-20 |
*.mothercare.qa | wildcard | no | critical | 2026-09-20 |
*.muji.ae | wildcard | no | critical | 2026-09-20 |
*.muji.bh | wildcard | no | critical | 2026-09-20 |
*.muji.com.kw | wildcard | no | critical | 2026-09-20 |
*.muji.com.sa | wildcard | no | critical | 2026-09-20 |
*.muji.qa | wildcard | no | critical | 2026-09-20 |
*.payless.com.kw | wildcard | no | critical | 2026-09-20 |
*.paylessshoes.ae | wildcard | no | critical | 2026-09-20 |
*.pfchangsme.com | wildcard | no | critical | 2026-09-20 |
*.pinkberryme.com | wildcard | no | critical | 2026-09-20 |
*.pizzaexpresskw.com | wildcard | no | critical | 2026-09-20 |
*.potterybarn.ae | wildcard | no | critical | 2026-09-20 |
*.potterybarn.com.kw | wildcard | no | critical | 2026-09-20 |
*.potterybarn.com.sa | wildcard | no | critical | 2026-09-20 |
*.potterybarnkids.ae | wildcard | no | critical | 2026-09-20 |
*.potterybarnkids.com.kw | wildcard | no | critical | 2026-09-20 |
*.potterybarnkids.com.sa | wildcard | no | critical | 2026-09-20 |
*.raisingcanesme.com | wildcard | no | critical | 2026-09-20 |
*.shakeshack.co.uk | wildcard | no | critical | 2026-09-20 |
*.shaya.com.tr | wildcard | no | critical | 2026-09-20 |
*.shayakahve.com.tr | wildcard | no | critical | 2026-09-20 |
*.starbucks.az | wildcard | no | critical | 2026-09-20 |
*.starbucks.com.kz | wildcard | no | critical | 2026-09-20 |
*.starbucks.com.tr | wildcard | no | critical | 2026-09-20 |
*.starbuckscardtr.com | wildcard | no | critical | 2026-09-20 |
*.supplier.alshaya.com | wildcard | no | critical | 2026-09-20 |
*.tamanna.com | wildcard | no | critical | 2026-09-20 |
*.tekzone.me | wildcard | no | critical | 2026-09-20 |
*.victoriassecret.ae | wildcard | no | critical | 2026-09-20 |
*.victoriassecret.com.kw | wildcard | no | critical | 2026-09-20 |
*.victoriassecret.com.qa | wildcard | no | critical | 2026-09-20 |
*.victoriassecret.com.sa | wildcard | no | critical | 2026-09-20 |
*.victoriassecret.com.tr | wildcard | no | critical | 2026-09-20 |
*.victoriassecret.pl | wildcard | no | critical | 2026-09-20 |
*.visionexpress.me | wildcard | no | critical | 2026-09-20 |
*.westelm.ae | wildcard | no | critical | 2026-09-20 |
*.westelm.com.kw | wildcard | no | critical | 2026-09-20 |
*.westelm.com.sa | wildcard | no | critical | 2026-09-20 |
7 out of scope — black ICE, don't touch
crm.alshayamarketing.comdomainthebodyshop.czdomain*.thebodyshop.com.bhwildcard*.thebodyshop.com.kwwildcard*.thebodyshop.com.trwildcard*.thebodyshop.plwildcard*.thebodyshop.qawildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.