Featured on
Featured on
how we sort the index, not an estimate of what you’ll earn
Attack surface
77 in-scope
*.expedia.bizscope· critical*.abritel.frscope· critical*.bookabach.co.nzscope· critical*.carrentals.comscope· critical*.cheaptickets.comscope· critical*.ean.comscope· critical*.expedia-aarp.comscope· critical*.expedia.comscope· critical*.expediagroup.comscope· critical*.expediapartnercentral.comscope· critical*.expediapartnersolutions.comscope· critical*.expediataap.comscope· critical*.expediataaprewards.comscope· critical*.fewo-direkt.descope· critical*.flights.comscope· critical*.hotels.comscope· critical*.hotwire.comscope· critical*.hotwirepartnercentral.comscope· critical*.lastminute.co.nzscope· critical*.lastminute.com.auscope· critical*.orbitz.comscope· critical*.stayz.com.auscope· critical*.tiqets.comscope· critical*.travelocity.cascope· critical*.travelocity.comscope· critical*.vrbo.comscope· critical*.wotif.comscope· criticalwww.abritel.fr· criticalwww.bookabach.co.nz· criticalwww.carrentals.com· criticalwww.cheaptickets.com· criticalwww.ebookers.com· criticalwww.ebookers.fi· criticalwww.expedia-aarp.com· criticalwww.expedia.com· criticalwww.expediagroup.com· criticalwww.expediapartnercentral.com· criticalwww.expediataap.com· highwww.fewo-direkt.de· criticalwww.hotels.com· criticalwww.hotwire.com· criticalwww.lastminute.co.nz· criticalwww.lastminute.com.au· criticalwww.mrjet.se· criticalwww.orbitz.com· criticalwww.stayz.com.au· criticalwww.tiqets.com· criticalwww.travelocity.ca· criticalwww.travelocity.com· criticalwww.vrbo.com· criticalwww.wotif.com· criticalapps.apple.com/in/app/expedia-group-partner-central/id987675995· critical1245772818· critical284803487· critical284971959· critical403546234· critical427916203· critical483394780· critical506426310· critical531549799· critical566635048· critical642441300· critical880759727· critical987675995· criticalplay.google.com/store/apps/datasaf…m.expediapartnercentral&hl=en· criticalcom.carrentals· criticalcom.cheaptickets· criticalcom.ebookers· criticalcom.expedia.bookings· criticalcom.expediapartnercentral· criticalcom.hcom.android· criticalcom.homeaway.android· criticalcom.hotwire.hotels· criticalcom.orbitz· criticalcom.travelocity.android· criticalcom.vrbo.android· criticalcom.wotif.android· critical− removed 3 scopes · *.expediaagents.com, *.expediacruises.com, www.expediacruises.com
15d ago
+ added 1 scope · *.expedia.biz
21d ago
+ added 2 scopes · https://apps.apple.com/in/app/expedia-group-partner-central/id987675995, https://play.google.com/store/apps/datasafety?id=com.expediapartnercentral&hl=en
22d ago
+ added 2 scopes · *.expediataap.com, *.expediataaprewards.com
36d ago
+ added 2 scopes · 506426310, 642441300
− removed 2 scopes · www.flights.com, www.hotwirepartnercentral.com
56d ago
+ added 22 scopes
57d ago
first indexed
92d ago · 53 in-scope assets
No reports yet. Be the first to share your triage timing for Expedia Group Bug Bounty.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": 0,
"url": "https://hackerone.com/expediagroup_bbp",
"name": "Expedia Group Bug Bounty",
"handle": "expediagroup_bbp",
"targets": {
"in_scope": [
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.abritel.fr",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.bookabach.co.nz",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "Third-party subdomains are out of scope and not eligible for bounties. Please review the out-of-scope list below:\ndbmanalytics.carrentals.com",
"max_severity": "critical",
"asset_identifier": "*.carrentals.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "Third-party subdomains are out of scope and not eligible for bounties. Please review the out-of-scope list below:\nfaq-lab.cheaptickets.com, faq.cheaptickets.com, groups.cheaptickets.com, link.mailer.cheaptickets.com, login.cheaptickets.com, mi.cheaptickets.com, refer.cheaptickets.com, secure.cheaptickets.com, and track.cheaptickets.com.",
"max_severity": "critical",
"asset_identifier": "*.cheaptickets.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.ean.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.expedia-aarp.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.expedia.biz",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.expedia.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.expediagroup.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": ".",
"max_severity": "critical",
"asset_identifier": "*.expediapartnercentral.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "Third-party subdomains are out of scope and not eligible for bounties. Please review the out-of-scope list below:\n\ndiscoveryhub.expediapartnersolutions.com, gco-get.expediapartnersolutions.com, gco.expediapartnersolutions.com, info.expediapartnersolutions.com, status.expediapartnersolutions.com, support.expediapartnersolutions.com, sure.expediapartnersolutions.com, taap-ui-bundles-test.expediapartnersolutions.com, taap-ui-bundles.expediapartnersolutions.com, and taapacademy.expediapartnersolutions.com.",
"max_severity": "critical",
"asset_identifier": "*.expediapartnersolutions.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.expediataap.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.expediataaprewards.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.fewo-direkt.de",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.flights.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.hotels.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.hotwire.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.hotwirepartnercentral.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for a bounty. Before submitting your report, please confirm that the asset you are testing does not appear in the Out of Scope list below.\n\n **Out of scope subdomains:** - res.ac.lastminute.co.nz\n\nPlease note *.lastminute.com is NOT owned by Expedia Group and is out of scope.",
"max_severity": "critical",
"asset_identifier": "*.lastminute.co.nz",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for a bounty. Before submitting your report, please confirm that the asset you are testing does not appear in the Out of Scope list below.\n *Out of scope subdomains:* - mi.lastminute.com.au, mtx.lastminute.com.au, smtx.lastminute.com.au\n\n\nPlease note *.lastminute.com is NOT owned by Expedia Group and is out of scope.",
"max_severity": "critical",
"asset_identifier": "*.lastminute.com.au",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.orbitz.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.stayz.com.au",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "*.tiqets.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for bounties. Please review the out-of-scope list below:\n\nclick.e.travelocity.ca, fr.groups.travelocity.ca, groups.travelocity.ca, om.travelocity.ca, and oms.travelocity.ca.",
"max_severity": "critical",
"asset_identifier": "*.travelocity.ca",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for bounties. Please review the out-of-scope list below:\n\nbr.ac.travelocity.com, groups.travelocity.com, mi.travelocity.com, om.travelocity.com, oms.travelocity.com, thingstodo.travelocity.com, track.travelocity.com, and view.e.travelocity.com.",
"max_severity": "critical",
"asset_identifier": "*.travelocity.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for bounties. Please review the out-of-scope list below:\n\nli.vrbo.com, media.vrbo.com, om.vrbo.com, community.vrbo.com, and trk.vrbo.com.",
"max_severity": "critical",
"asset_identifier": "*.vrbo.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "WILDCARD",
"instruction": "Some subdomains are owned by third parties and are therefore out of scope and ineligible for bounties. Please review the out-of-scope list below:\n\ngroups.wotif.com, link.wotif.com, res.ac.wotif.com, smobile.wotif.com, and w.smobile.wotif.com.",
"max_severity": "critical",
"asset_identifier": "*.wotif.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Vrbo iOS app](https://apps.apple.com/us/app/vrbo-vacation-rentals/id1245772818)",
"max_severity": "critical",
"asset_identifier": "1245772818",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Travelocity iOS app](https://apps.apple.com/us/app/travelocity-hotels-flights/id284803487)",
"max_severity": "critical",
"asset_identifier": "284803487",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Hotels.com iOS app](https://apps.apple.com/us/app/hotels-com-book-your-hotel/id284971959)",
"max_severity": "critical",
"asset_identifier": "284971959",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Orbitz iOS app](https://apps.apple.com/us/app/orbitz-hotels-flights/id403546234)",
"max_severity": "critical",
"asset_identifier": "403546234",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Expedia iOS app](https://apps.apple.com/us/app/expedia-hotels-flights-car/id427916203)",
"max_severity": "critical",
"asset_identifier": "427916203",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "This is the ebookers iOS app \n\nhttps://apps.apple.com/us/app/ebookers-hotels-flights/id483394780",
"max_severity": "critical",
"asset_identifier": "483394780",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[CarRentals iOS App](https://apps.apple.com/us/app/carrentals-com-rental-car-app/id506426310)",
"max_severity": "critical",
"asset_identifier": "506426310",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Wotif iOS app](https://apps.apple.com/au/app/wotif-hotels-flights/id531549799)",
"max_severity": "critical",
"asset_identifier": "531549799",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Hotwire iOS App](https://apps.apple.com/us/app/hotwire-last-minute-hotels/id566635048)",
"max_severity": "critical",
"asset_identifier": "566635048",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[HomeAway / Stayz & Bookabach iOS App](https://apps.apple.com/us/app/homeaway-holiday-rentals/id642441300)",
"max_severity": "critical",
"asset_identifier": "642441300",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "[Cheaptickets iOS app](https://apps.apple.com/us/app/cheaptickets-hotels-flights/id880759727)",
"max_severity": "critical",
"asset_identifier": "880759727",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "987675995",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[CarRentals Android App](https://play.google.com/store/apps/details?id=com.carrentals&hl=en_CA)",
"max_severity": "critical",
"asset_identifier": "com.carrentals",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[CheapTickets Android app](https://play.google.com/store/apps/details?id=com.cheaptickets)",
"max_severity": "critical",
"asset_identifier": "com.cheaptickets",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "This is the ebookers Android app \n\nhttps://play.google.com/store/apps/details?id=com.ebookers",
"max_severity": "critical",
"asset_identifier": "com.ebookers",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[Expedia Android App](https://play.google.com/store/apps/details?id=com.expedia.bookings)\n\n",
"max_severity": "critical",
"asset_identifier": "com.expedia.bookings",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "com.expediapartnercentral",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[Hotels Android App](https://play.google.com/store/apps/details?id=com.hcom.android) ",
"max_severity": "critical",
"asset_identifier": "com.hcom.android",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[HomeAway Android app](https://play.google.com/store/apps/details?id=com.vacationrentals.homeaway&hl=en)",
"max_severity": "critical",
"asset_identifier": "com.homeaway.android",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[Hotwire Android App](https://play.google.com/store/apps/details?id=com.hotwire.hotels) ",
"max_severity": "critical",
"asset_identifier": "com.hotwire.hotels",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[Orbitz Android app](https://play.google.com/store/apps/details?id=com.orbitz)",
"max_severity": "critical",
"asset_identifier": "com.orbitz",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[Travelocity Android app](https://play.google.com/store/apps/details?id=com.travelocity.android)",
"max_severity": "critical",
"asset_identifier": "com.travelocity.android",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[VRBO Android App](https://play.google.com/store/apps/details?id=com.vrbo.android) ",
"max_severity": "critical",
"asset_identifier": "com.vrbo.android",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "[Wotif Android app](https://play.google.com/store/apps/details?id=com.wotif.android)",
"max_severity": "critical",
"asset_identifier": "com.wotif.android",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "APPLE_STORE_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://apps.apple.com/in/app/expedia-group-partner-central/id987675995",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "GOOGLE_PLAY_APP_ID",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "https://play.google.com/store/apps/datasafety?id=com.expediapartnercentral&hl=en",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "www.abritel.fr/api/track is out of scope. Please do not test this endpoint or submit reports related to it.",
"max_severity": "critical",
"asset_identifier": "www.abritel.fr",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.bookabach.co.nz",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.carrentals.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.cheaptickets.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.ebookers.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.ebookers.fi",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.expedia-aarp.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Only point-of-sale assets under www.expedia.com are in scope, including regional versions such as www.expedia.co.in and www.expedia.co.uk.\n\nAll other subdomains are out of scope for Tier 0.",
"max_severity": "critical",
"asset_identifier": "www.expedia.com",
"eligible_for_bounty": true,
"integrity_requirement": "high",
"eligible_for_submission": true,
"availability_requirement": "high",
"confidentiality_requirement": "high"
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.expediagroup.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.expediapartnercentral.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "high",
"asset_identifier": "www.expediataap.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.fewo-direkt.de",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Only point-of-sale assets under www.hotels.com are in scope, including regional versions such as www.in.hotels.com, www.uk.hotels.com, and www.fr.hotels.com.\n\nAll other subdomains are out of scope for Tier 0.",
"max_severity": "critical",
"asset_identifier": "www.hotels.com",
"eligible_for_bounty": true,
"integrity_requirement": "medium",
"eligible_for_submission": true,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.hotwire.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.lastminute.co.nz",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.lastminute.com.au",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.mrjet.se",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.orbitz.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "",
"max_severity": "critical",
"asset_identifier": "www.stayz.com.au",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.tiqets.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.travelocity.ca",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.travelocity.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": "Only point-of-sale assets under www.vrbo.com are in scope. All other subdomains are out of scope for Tier 0.",
"max_severity": "critical",
"asset_identifier": "www.vrbo.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "critical",
"asset_identifier": "www.wotif.com",
"eligible_for_bounty": true,
"integrity_requirement": null,
"eligible_for_submission": true,
"availability_requirement": null,
"confidentiality_requirement": null
}
],
"out_of_scope": [
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "none",
"asset_identifier": "*.expediaagents.com",
"eligible_for_bounty": false,
"integrity_requirement": "medium",
"eligible_for_submission": false,
"availability_requirement": "medium",
"confidentiality_requirement": "medium"
},
{
"asset_type": "WILDCARD",
"instruction": null,
"max_severity": "none",
"asset_identifier": "*.expediacruises.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
},
{
"asset_type": "URL",
"instruction": null,
"max_severity": "none",
"asset_identifier": "www.expediacruises.com",
"eligible_for_bounty": false,
"integrity_requirement": null,
"eligible_for_submission": false,
"availability_requirement": null,
"confidentiality_requirement": null
}
]
},
"website": "https://www.expediagroup.com/",
"offers_swag": false,
"managed_program": true,
"offers_bounties": true,
"submission_state": "open",
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 153,
"response_efficiency_percentage": 67,
"average_time_to_report_resolved": 5683,
"average_time_to_first_program_response": 3
}