Skip to content
BackEsc
Sign in

Flutter UK&I · in scope

Wildcard domains

36 assets in scope

Out of date: the sync last ran 5 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is an asset the program lists in scope. The first 32 are named here; the program's own page has the full scope.

Open Flutter UK&I on HackerOne

Every one of the 36 is a mark on the map. Named now: 1 to 26, as listed first.

  1. *.betfair.comWildcard domains
  2. *.betfair.esWildcard domains
  3. *.betfair.itWildcard domains
  4. *.betfair.roWildcard domains
  5. *.betfair.seWildcard domains
  6. *.betsharedservices.ioWildcard domains
  7. *.betviewapi.comWildcard domains
  8. *.dibz.co.ukWildcard domains
  9. *.msgsvc.ioWildcard domains
  10. *.operationstechnology.ioWildcard domains
  11. *.paddypartners.comWildcard domains
  12. *.paddypower.comWildcard domains
  13. *.paddypower.itWildcard domains
  14. *.platformservices.ioWildcard domains
  15. *.ppb.comWildcard domains
  16. *.ppbdev.comWildcard domains
  17. *.sbgcdn.comWildcard domains
  18. *.sbgcore.comWildcard domains
  19. *.sbgorigin.comWildcard domains
  20. *.sbgservices.comWildcard domains
  21. *.sbgtest.netWildcard domains
  22. *.securityservices.ioWildcard domains
  23. *.skybet.co.ukWildcard domains
  24. *.skybet.comWildcard domains
  25. *.skybet.netWildcard domains
  26. *.skybetservices.comWildcard domains

paid a bounty

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in