Flutter UK&I icon Flutter UK&I HackerOne


Target Policy
https://hackerone.com/flutteruki?type=team
Structured Scope
  • Asset Identifier
    Asset Type
    Max Severity
  • http://*.plateng.io
    WILDCARD
    critical
  • *.core-gaming.io

    This domain is out of scope.

    URL
    none
  • *.coregaming.co.uk

    This domain is out of scope.

    WILDCARD
    none
  • com.skybet.app.skybet
    GOOGLE_PLAY_APP_ID
    critical
  • *.tombola.se

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    WILDCARD
    none
  • *.tombola.com

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    URL
    none
  • *.ads.betfair.com

    This domain is temporarily out of scope.

    WILDCARD
    none
  • *.bingoservices.io
    URL
    critical
  • *.casinochecker.*

    This domain is out of scope.

    WILDCARD
    none
  • *.casinosmash.com

    This domain is out of scope.

    WILDCARD
    none
  • *.tradingmodels.io

    This domain is out of scope.

    WILDCARD
    none
  • *.betting.betfair.com

    This domain is temporarily out of scope.

    URL
    none
  • *.content.betfair.*

    This domain is temporarily out of scope.

    WILDCARD
    none
  • *.content-cache.betfair.com

    This domain is temporarily out of scope.

    WILDCARD
    none
  • *.vegasportal.io

    This domain is no longer owned of managed by Flutter UK&I

    WILDCARD
    none
  • *.responsiblegaming.paddypower.*

    This domain is temporarily out of scope.

    WILDCARD
    none
  • *.promos.betfair.*

    This domain is temporarily out of scope.

    WILDCARD
    none
  • *.bonuschecker.*

    This domain is out of scope.

    WILDCARD
    none
  • *.assopoker.com

    This domain is out of scope.

    WILDCARD
    none
  • *.whoscored.com

    This domain is out of scope.

    WILDCARD
    none
  • *.mrcasinotti.*

    This domain is out of scope.

    WILDCARD
    none
  • *.tombola.dk

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    WILDCARD
    none
  • *.casinoservices.io
    URL
    critical
  • *.hestview.com
    WILDCARD
    critical
  • *.gamingtechnology.io
    URL
    critical
  • *.datops.io
    WILDCARD
    critical
  • *.bsidesleedsctf.com

    This domain is out of scope.

    WILDCARD
    none
  • *.tombola.es

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    WILDCARD
    none
  • *.super6.it

    This domain is out of scope.

    WILDCARD
    none
  • *.italiapokerforum.com

    This domain is out of scope.

    URL
    none
  • *.cyanbidco.com

    This domain is out of scope.

    WILDCARD
    none
  • skybet-com.mail.protection.outlook.com

    This domain is out of scope.

    URL
    none
  • *.italiapokerclub.com

    This domain is out of scope.

    WILDCARD
    none
  • *.responsiblegambling.betfair.*

    This domain is temporarily out of scope.

    URL
    none
  • *.tg-event.co.uk

    This domain is out of scope.

    WILDCARD
    none
  • *asp.betfair.com

    This domain is temporarily out of scope.

    URL
    none
  • *.sigcasinotti.com

    This domain is out of scope.

    WILDCARD
    none
  • *.whobetting.com

    This domain is out of scope.

    WILDCARD
    none
  • *.betstars.com

    This domain is out of scope.

    URL
    none
  • *.purplefuzzyybear.com

    This domain is out of scope.

    URL
    none
  • *.confrontaquote.it

    This domain is out of scope.

    WILDCARD
    none
  • *.ogmgroup.com

    This domain is out of scope.

    WILDCARD
    none
  • *.whoscored.co.uk

    This domain is out of scope.

    URL
    none
  • *.tombola.nl

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    URL
    none
  • *.sbggraduates.com

    This domain is out of scope.

    WILDCARD
    none
  • *.plateng.io
    WILDCARD
    critical
  • *.aams.it

    This domain is out of scope.

    URL
    none
  • *.pokerstars.*

    This domain is out of scope.

    URL
    none
  • *.sbgcdn.com
    WILDCARD
    critical
  • *.foxbet.com

    This domain is out of scope.

    WILDCARD
    none
  • *.pokerstarssports.*

    This domain is out of scope.

    WILDCARD
    none
  • *.smorfia.it

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    WILDCARD
    none
  • *.skybet.net
    WILDCARD
    critical
  • *.skybettingandgamingresearch.com

    This domain is out of scope.

    WILDCARD
    none
  • com.betfair.sportsbook

    Betfair Sports Betting
    https://play.google.com/store/apps/details?id=com.betfair.sportsbook&gl=uk
    https://assets.cdnbf.net/static/android/betfair-wrapper-sportsbook.apk

    OTHER_APK
    high
  • sbagmail.skybettingandgaming.com
    URL
    none
  • https://play.google.com/store/apps/dev?id=5503565801970655430&gl=gb
    GOOGLE_PLAY_APP_ID
    critical
  • *.betstarsnj.com

    This domain is out of scope.

    WILDCARD
    none
  • *.skycasino.com
    WILDCARD
    critical
  • *.skybetgraduates.com

    This domain is out of scope.

    WILDCARD
    none
  • community.staging.skypoker.com

    This domain is out of scope.

    URL
    none
  • *.s6.sbgservices.com

    This domain is out of scope.

    WILDCARD
    none
  • *.skyvegas.com
    WILDCARD
    critical
  • *.skybet-it.info

    This domain is out of scope.

    WILDCARD
    none
  • *.tombolaarcade.co.uk

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    WILDCARD
    none
  • *.sbgcore.com
    WILDCARD
    critical
  • *.sbgmail.skybettingandgaming.com

    This domain is out of scope.

    WILDCARD
    none
  • *.sbg.life

    This domain is out of scope.

    WILDCARD
    none
  • *.sbpartner.it

    This domain is out of scope.

    WILDCARD
    none
  • *.securityservices.io
    WILDCARD
    critical
  • *.tombola.co.uk

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    WILDCARD
    none
  • *.betviewapi.com
    WILDCARD
    critical
  • *.skybet.it

    This domain is out of scope.

    WILDCARD
    none
  • skymail.sky.com

    This domain is out of scope.

    URL
    none
  • *.skybet.co.uk
    WILDCARD
    critical
  • *.oddscheckerglobalmedia.*

    This domain is out of scope.

    WILDCARD
    none
  • *.freebetlottery.com

    This domain is out of scope.

    WILDCARD
    none
  • *.occloud.io

    This domain is out of scope.

    WILDCARD
    none
  • *.pokernews.com

    This domain is out of scope.

    WILDCARD
    none
  • *.skybettingandgaming.design
    WILDCARD
    critical
  • *.email.skybet.com

    This domain is out of scope.

    WILDCARD
    none
  • technology.skybettingandgaming.com

    This domain is out of scope.

    URL
    none
  • *.tombola.it

    Whilst Tombola has recently joined the Flutter UK&I group, their systems are not yet in scope for the Bug Bounty programme and permission can not be granted to test their hosts, nor can any bounties be paid.

    WILDCARD
    none
  • skyrgs.blueprintgaming.com

    This domain is out of scope.

    URL
    none
  • http://*.betfair.com
    WILDCARD
    critical
  • http://*.paddypower.com
    WILDCARD
    critical
  • http://*.betfair.es
    WILDCARD
    critical
  • http://*.betfair.it
    WILDCARD
    critical
  • http://*.betfair.ro
    WILDCARD
    critical
  • http://*.betfair.se
    WILDCARD
    critical
  • http://*.paddypower.it
    WILDCARD
    critical
  • http://*.skygamingcontent.com
    WILDCARD
    critical
  • http://*.skycasino.com
    WILDCARD
    critical
  • http://*.sbgcdn.com
    WILDCARD
    critical
  • http://*.skybet.com
    WILDCARD
    critical
  • http://*.betviewapi.com
    WILDCARD
    critical
  • http://*.skypoker.com
    WILDCARD
    critical
  • http://*.skyvegas.com
    WILDCARD
    critical
  • http://*.skybingo.com
    WILDCARD
    critical
  • http://*.sbgcore.com
    WILDCARD
    critical
  • http://*.platformservices.io
    WILDCARD
    critical
  • http://*.skybetservices.com
    WILDCARD
    critical
  • http://*.sbgorigin.com
    WILDCARD
    critical
  • http://*.sbgservices.com
    WILDCARD
    critical
  • http://*.bonne-terre-data-layer.com
    WILDCARD
    critical
  • http://*.skybettingandgaming.com
    WILDCARD
    critical
  • http://*.msgsvc.io
    WILDCARD
    critical
  • http://*.operationstechnology.io
    WILDCARD
    critical
  • http://*.securityservices.io
    WILDCARD
    critical
  • http://*.skybet.net
    WILDCARD
    critical
  • http://*.skybet.co.uk
    WILDCARD
    critical
  • http://*.datops.io
    WILDCARD
    critical
  • http://*.hestview.com
    WILDCARD
    critical
  • http://*.sbgtest.net
    WILDCARD
    critical
  • http://*.skybettest.net
    WILDCARD
    critical
  • http://*.skybettingandgaming.design
    WILDCARD
    critical
  • http://*.skybettingandgaming.info
    WILDCARD
    critical
  • http://*.betsharedservices.io
    WILDCARD
    critical
  • *.betsharedservices.io
    WILDCARD
    critical
  • https://play.google.com/store/apps/dev?id=9151483005769461618&gl=GB
    GOOGLE_PLAY_APP_ID
    critical
  • affiliatehub.skybet.com

    This domain is out of scope.

    URL
    none
  • https://play.google.com/store/apps/developer?id=Sky+Betting+and+Gaming+Apps&gl=uk
    GOOGLE_PLAY_APP_ID
    critical
  • *.sbgorigin.com
    WILDCARD
    critical
  • *.skybetpartner.de

    This domain is out of scope.

    WILDCARD
    none
  • *.us.betfair.com

    Betfair US is not part of the Flutter UK&I division

    WILDCARD
    none
  • *.platformservices.io
    WILDCARD
    critical
  • *.skybetcareers.com

    This domain is out of scope.

    WILDCARD
    none
  • *.sbgpeople.com

    This domain is out of scope.

    WILDCARD
    none
  • *.sbgtest.net
    WILDCARD
    critical
  • *.skygamingcontent.com
    WILDCARD
    critical
  • *.skybettest.net
    WILDCARD
    critical
  • *.skybettingandgaming.info
    WILDCARD
    critical
  • *.paddypower.com
    WILDCARD
    critical
  • *.betfair.com.au

    Betfair Australia is not part of Flutter UK&I division

    WILDCARD
    none
  • *.sbga.me

    This domain is out of scope.

    WILDCARD
    none
  • partners.skybet.com

    This domain is out of scope.

    URL
    none
  • *.bonne-terre-data-layer.com
    WILDCARD
    critical
  • *.operationstechnology.io
    WILDCARD
    critical
  • community.skypoker.com

    This domain is out of scope.

    URL
    none
  • email1.skybet.com

    This domain is out of scope.

    URL
    none
  • *.msgsvc.io
    WILDCARD
    critical
  • *.skybetchiusuraconto.it

    This domain is out of scope.

    WILDCARD
    none
  • *.skybet.de

    This domain is out of scope.

    WILDCARD
    none
  • *.skybusinessemail.com

    This domain is not is not owned or managed by Flutter UK&I division

    WILDCARD
    none
  • https://play.google.com/store/apps/dev?id=8912907283039023448&gl=GB
    GOOGLE_PLAY_APP_ID
    critical
  • *.sbgdataintl.com

    This domain is out of scope.

    WILDCARD
    none
  • *.sbgcolab.com

    This domain is out of scope.

    WILDCARD
    none
  • *.betfair.it
    WILDCARD
    critical
  • *.betfair.se
    WILDCARD
    critical
  • *.paddypower.it
    WILDCARD
    critical
  • community.betfair.com

    This domain is temporarily out of scope.

    URL
    none
  • com.flutter.bem.release
    GOOGLE_PLAY_APP_ID
    critical
  • *.dibz.co.uk
    WILDCARD
    critical
  • *.betfair.ro
    WILDCARD
    critical
  • super6.skysports.com
    URL
    critical
  • *.skypoker.com
    WILDCARD
    critical
  • *.ppbdev.com
    WILDCARD
    medium
  • itv7.itv.com
    URL
    critical
  • *.paddypartners.com
    WILDCARD
    critical
  • *.skybettingandgaming.com
    WILDCARD
    critical
  • *.skybetservices.com
    WILDCARD
    critical
  • *.skybingo.com
    WILDCARD
    critical
  • *.skybet.com
    WILDCARD
    critical
  • *.betfair.es
    WILDCARD
    critical
  • *.sportinglife.com
    WILDCARD
    critical
  • com.paddypower.sportsbook.u.inhouse

    Paddy Power Sports Betting: https://play.google.com/store/apps/details?id=com.paddypower.sportsbook.u.inhouse&gl=uk

    OTHER_APK
    high
  • com.betfair.exchange

    Betfair Exchange Betting
    https://play.google.com/store/apps/details?id=com.betfair.exchange&gl=uk
    https://assets.cdnbf.net/static/android/betfair-wrapper-exchange.apk

    OTHER_APK
    high
  • *.sbgservices.com
    WILDCARD
    critical
  • *.betfair.com
    WILDCARD
    critical
Target Scope Domains
  • betfair.com
  • betfair.es
  • betfair.it
  • betfair.ro
  • betfair.se
  • betsharedservices.io
  • betviewapi.com
  • bingoservices.io
  • bonne-terre-data-layer.com
  • casinoservices.io
  • datops.io
  • dibz.co.uk
  • gamingtechnology.io
  • hestview.com
  • itv7.itv.com
  • msgsvc.io
  • operationstechnology.io
  • paddypartners.com
  • paddypower.com
  • paddypower.it
  • plateng.io
  • platformservices.io
  • ppbdev.com
  • sbgcdn.com
  • sbgcore.com
  • sbgorigin.com
  • sbgservices.com
  • sbgtest.net
  • securityservices.io
  • skybet.co.uk
  • skybet.com
  • skybet.net
  • skybetservices.com
  • skybettest.net
  • skybettingandgaming.com
  • skybettingandgaming.design
  • skybettingandgaming.info
  • skybingo.com
  • skycasino.com
  • skygamingcontent.com
  • skypoker.com
  • skyvegas.com
  • sportinglife.com
  • super6.skysports.com
Tech Stack

Last Finished Scan:
Scan Name
Fleet
Finished
State
allkxss
1 month, 2 weeks ago
Finished
  • Fleet: allkxss
  • Duration: 25 Seconds
  • Finished: 1 month, 2 weeks ago