Skip to content

Bug bounty program

Platform
HackerOne
Bounties
None
Assets in scope
28
Disclosed reports
0
Subdomains
934,471
Vendor on CyberSIXT
Alibaba (13 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains934,471

Subdomains of Alibaba VDP
NameScopeFirst seen
0.amap.comIn scope2026-11-14
130-232-lbsedm.amap.comIn scope2026-11-14
2012.amap.comIn scope2026-11-14
2014lbs.amap.comIn scope2026-11-14
3dlab.amap.comIn scope2026-11-14
3dst.amap.comIn scope2026-11-14
51-94-lbsedm.amap.comIn scope2026-11-14
a.amap.comIn scope2026-11-14
aaid.amap.comIn scope2026-11-14
aas-ehp-data-service.amap.comIn scope2026-11-14
abs.amap.comIn scope2026-11-14
abs-auth.amap.comauthIn scope2026-11-14
abs-sign.amap.comIn scope2026-11-14
acis.amap.comIn scope2026-11-14
act.amap.comIn scope2026-11-14
act8.amap.comIn scope2026-11-14
activity.amap.comIn scope2026-11-14
adiu.amap.comIn scope2026-11-14
aes.amap.comIn scope2026-11-14
aflow.amap.comIn scope2026-11-14
airflow.amap.comtoolsIn scope2026-11-14
aisle.amap.comIn scope2026-11-14
ajx3.amap.comIn scope2026-11-14
aloc.amap.comIn scope2026-11-14
aloc-control-plus.amap.comIn scope2026-11-14
aloc-gnss-eph.amap.comIn scope2026-11-14
aloc-msr-s.amap.comIn scope2026-11-14
aloc-offline.amap.comIn scope2026-11-14
amap-aos.amap.comIn scope2026-11-14
amap-aos-info-nogw.amap.comIn scope2026-11-14
amap-aos-mom-aos.amap.comIn scope2026-11-14
amap-ocpx-online.amap.comIn scope2026-11-14
amap-rta-online.amap.comIn scope2026-11-14
amaps.amap.comIn scope2026-11-14
angeo.amap.comIn scope2026-11-14
aos.amap.comIn scope2026-11-14
aos-cdn-carowners-img.amap.comIn scope2026-11-14
aos-cdn-image.amap.comIn scope2026-11-14
aos-comment.amap.comIn scope2026-11-14
aos-file.amap.comIn scope2026-11-14
aos-file-base.amap.comIn scope2026-11-14
aos-file-base-private.amap.cominternalIn scope2026-11-14
aos-funtrip.amap.comIn scope2026-11-14
aoscdn.amap.comIn scope2026-11-14
aosdev.amap.comIn scope2026-11-14
sentry.aosdev.amap.commonitoringIn scope2026-11-14
api.amap.comapiIn scope2026-11-14
api-ggc-grayv2.amap.comapiIn scope2026-11-14
apiinit.amap.comIn scope2026-11-14
apilocate.amap.comIn scope2026-11-14
abroad.apilocate.amap.comIn scope2026-11-14
alipay.apilocate.amap.comIn scope2026-11-14
dualstack.apilocate.amap.comIn scope2026-11-14
taobao.apilocate.amap.comIn scope2026-11-14
ucmobile.apilocate.amap.comIn scope2026-11-14
apistore.amap.comIn scope2026-11-14
aplus.amap.comIn scope2026-11-14
app.amap.comIn scope2026-11-14
driver.appeal.amap.comIn scope2026-11-14
apps.amap.comIn scope2026-11-14
apps-pre.amap.comIn scope2026-11-14
wildcard.apps-pre.amap.comIn scope2026-11-14
assist.apps.amap.comIn scope2026-11-14
wildcard.apps.amap.comIn scope2026-11-14
aps.amap.comIn scope2026-11-14
control.aps.amap.comIn scope2026-11-14
offline.aps.amap.comIn scope2026-11-14
apsctl.amap.comIn scope2026-11-14
apsrgeo.amap.comIn scope2026-11-14
arch.amap.comIn scope2026-11-14
arsenal-api.amap.comapiIn scope2026-11-14
asbp.amap.comIn scope2026-11-14
audi-mib3-prelive.amap.comIn scope2026-11-14
audi-mib3-test.amap.comtestIn scope2026-11-14
auditpeg.amap.comIn scope2026-11-14
auth.amap.comauthIn scope2026-11-14
auto.amap.comIn scope2026-11-14
auto-edd.amap.comIn scope2026-11-14
auto-passport.amap.comIn scope2026-11-14
auto-rtti.amap.comIn scope2026-11-14
autoapi.amap.comIn scope2026-11-14
autoapk.amap.comIn scope2026-11-14
autoeddapistore.amap.comIn scope2026-11-14
autolr.amap.comIn scope2026-11-14
autosdk.amap.comIn scope2026-11-14
autosdk-server.amap.comIn scope2026-11-14
autosdk-server-pre.amap.comIn scope2026-11-14
autosdk-server-test.amap.comtestIn scope2026-11-14
autosdk-video.amap.comIn scope2026-11-14
autosdkstaging.amap.comIn scope2026-11-14
autoworks.amap.comIn scope2026-11-14
awaken.amap.comIn scope2026-11-14
b.amap.comIn scope2026-11-14
backend.amap.comIn scope2026-11-14
basic.amap.comIn scope2026-11-14
bbs.amap.comIn scope2026-11-14
bbspre.amap.comIn scope2026-11-14
beta.amap.comstagingIn scope2026-11-14
bfe-pro.amap.comIn scope2026-11-14
bgc.amap.comIn scope2026-11-14

710,334 names are covered by the program's own scope; 22 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.