Alibaba BBP

target_in_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.1688.com URL critical
*.alibaba-inc.com URL critical
*.alibaba.com URL critical
*.alibabacloud.com URL critical
*.aliexpress.com URL critical
*.alimama.com URL critical
*.aliyun-inc.com URL critical
*.aliyun.com URL critical
*.cainiao.com URL critical
*.dingtalk.com URL critical
*.taobao.com URL critical
*.tmall.com URL critical
www.alibabagroup.com URL critical
*.lazada.sg URL critical
Lazada scope has a given subdomain lists. Only the following subdomains are in scope: - www.lazada.sg - pages.lazada.sg - checkout.lazada.sg - store.lazada.sg - cart.lazada.sg - member.lazada.sg - member-m.lazada.sg - my.lazada.sg - my-m.lazada.sg All other lazada.sg subdomains and other country sites *.lazada.[vn|co.id|co.th|com.ph|com.my] are out of scope and will not be rewarded.

target_out_of_scope

asset_identifier asset_type availability requirement confidentiality requirement eligible for bounty eligible for submission integrity requirement max_severity
*.lazada.com URL none
Hi, *.lazada.[six countries] has been removed from this BBP program temporarily. Thanks.