airbnb

HackerOneView on HackerOne
RawAI Enhanced
27
In Scope
8
Out of Scope
In-Scope Assets (27)
AssetCategoryBountyQuick Links
*.airbnb-aws.comURLYes
*.airbnb.comURLYes
*.airbnb.orgWILDCARDYes
*.airbnbcitizen.comURLYes
*.airbnbpayments.comWILDCARDYes
*.atairbnb.comURLYes
*.byairbnb.comURLYes
*.hoteltonight-test.comURLYes
*.hoteltonight.comWILDCARDYes
*.luxuryretreats.comURLYes
*.muscache.comURLYes
*.musta.chWILDCARDYes
*.withairbnb.comURLYes
Localized airbnb sites listed at the link below:OTHERYes-
api.airbnb.comURLYes
assets.airbnb.comURLYes
callbacks.airbnb.comURLYes
com.airbnb.androidANDROIDYes
com.airbnb.appIOSYes-
com.luxuryretreats.iosIOSYes-
m.airbnb.comURLYes
next.airbnb.comURLYes
one.airbnb.comURLYes
open.airbnb.comURLYes
support-api.airbnb.comURLYes
www.airbnb.comURLYes
www.hoteltonight.comURLYes
Out-of-Scope Assets (8)
AssetCategoryBounty
admin.demo.urbandoor.comURLNo
demo.urbandoor.comURLNo
luckey.appURLNo
luckey.frURLNo
luckey.inURLNo
luckey.partnersURLNo
luckeyhomes.comURLNo
provider.demo.urbandoor.comURLNo
Scope Changes (97)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Added*.byairbnb.comWILDCARDIn Scope19:08
Addedluckey.appURLOut of Scope19:08
Addedluckey.inURLOut of Scope19:08
Addedprovider.demo.urbandoor.comURLOut of Scope19:08
Addedcom.airbnb.appIOSIn Scope19:08
Added*.atairbnb.comWILDCARDIn Scope19:08
Added*.withairbnb.comWILDCARDIn Scope19:08
Addedwww.hoteltonight.comURLIn Scope19:08
Added*.hoteltonight.comWILDCARDIn Scope19:08
Addeddemo.urbandoor.comURLOut of Scope19:08
Addedluckey.partnersURLOut of Scope19:08
Addedwww.airbnb.comURLIn Scope19:08
Addednext.airbnb.comURLIn Scope19:08
Addedapi.airbnb.comURLIn Scope19:08
Added*.airbnb-aws.comWILDCARDIn Scope19:08
Added*.airbnbpayments.comWILDCARDIn Scope19:08
Addedluckey.frURLOut of Scope19:08
Added*.hoteltonight-test.comWILDCARDIn Scope19:08
Addedluckeyhomes.comURLOut of Scope19:08
Addedadmin.demo.urbandoor.comURLOut of Scope19:08
Added*.musta.chWILDCARDIn Scope19:08
Added*.airbnb.comWILDCARDIn Scope19:08
Addedlocalized airbnb sites listed at the link below:OTHERIn Scope19:08
Addedcom.airbnb.androidANDROIDIn Scope19:08
Addedcallbacks.airbnb.comURLIn Scope19:08
Addedopen.airbnb.comURLIn Scope19:08
Added*.airbnbcitizen.comWILDCARDIn Scope19:08
Addedsupport-api.airbnb.comURLIn Scope19:08
Addedcom.luxuryretreats.iosIOSIn Scope19:08
Added*.airbnb.orgWILDCARDIn Scope19:08
Added*.luxuryretreats.comWILDCARDIn Scope19:08
Added*.muscache.comWILDCARDIn Scope19:08
Addedassets.airbnb.comURLIn Scope19:08
Addedm.airbnb.comURLIn Scope19:08
Addedone.airbnb.comURLIn Scope19:08
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.airbnbcitizen.comWILDCARDIn Scope00:40
Addedcom.airbnb.androidANDROIDIn Scope00:40
Addedadmin.demo.urbandoor.comURLOut of Scope00:40
Addedwww.airbnb.comURLIn Scope00:40
Addedcom.airbnb.appIOSIn Scope00:40
Added*.airbnb-aws.comWILDCARDIn Scope00:40
Addedcom.luxuryretreats.iosIOSIn Scope00:40
Added*.musta.chWILDCARDIn Scope00:40
Addedprovider.demo.urbandoor.comURLOut of Scope00:40
Addedluckey.partnersURLOut of Scope00:40
Addednext.airbnb.comURLIn Scope00:40
Addedopen.airbnb.comURLIn Scope00:40
Addeddemo.urbandoor.comURLOut of Scope00:40
Addedlocalized airbnb sites listed at the link below:OTHERIn Scope00:40
Added*.muscache.comWILDCARDIn Scope00:40
Added*.luxuryretreats.comWILDCARDIn Scope00:40
Added*.airbnbpayments.comWILDCARDIn Scope00:40
Addedsupport-api.airbnb.comURLIn Scope00:40
Added*.withairbnb.comWILDCARDIn Scope00:40
Added*.byairbnb.comWILDCARDIn Scope00:40
Added*.hoteltonight-test.comWILDCARDIn Scope00:40
Addedluckey.inURLOut of Scope00:40
Addedluckeyhomes.comURLOut of Scope00:40
Addedapi.airbnb.comURLIn Scope00:40
Addedassets.airbnb.comURLIn Scope00:40
Addedone.airbnb.comURLIn Scope00:40
Addedwww.hoteltonight.comURLIn Scope00:40
Added*.airbnb.orgWILDCARDIn Scope00:40
Addedluckey.frURLOut of Scope00:40
Addedluckey.appURLOut of Scope00:40
Addedcallbacks.airbnb.comURLIn Scope00:40
Added*.airbnb.comWILDCARDIn Scope00:40
Added*.atairbnb.comWILDCARDIn Scope00:40
Added*.hoteltonight.comWILDCARDIn Scope00:40
Addedm.airbnb.comURLIn Scope00:40
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedwww.airbnb.comURLIn Scope21:38
Removednext.airbnb.comURLIn Scope21:38
Removedapi.airbnb.comURLIn Scope21:38
Removedsupport-api.airbnb.comURLIn Scope21:38
Removedassets.airbnb.comURLIn Scope21:38
Removedm.airbnb.comURLIn Scope21:38
Removedone.airbnb.comURLIn Scope21:38
Removedopen.airbnb.comURLIn Scope21:38
Removedcallbacks.airbnb.comURLIn Scope21:38
Removed*.airbnb.comURLIn Scope21:38
Removedlocalized airbnb sites listed at the link below:OTHERIn Scope21:38
Removed*.airbnbcitizen.comURLIn Scope21:38
Removedcom.airbnb.appIOSIn Scope21:38
Removedcom.airbnb.androidANDROIDIn Scope21:38
Removed*.atairbnb.comURLIn Scope21:38
Removed*.withairbnb.comURLIn Scope21:38
Removed*.byairbnb.comURLIn Scope21:38
Removed*.muscache.comURLIn Scope21:38
Removed*.airbnb-aws.comURLIn Scope21:38
Removed*.luxuryretreats.comURLIn Scope21:38
Removedcom.luxuryretreats.iosIOSIn Scope21:38
Removedwww.hoteltonight.comURLIn Scope21:38
Removed*.hoteltonight-test.comURLIn Scope21:38
Removed*.hoteltonight.comWILDCARDIn Scope21:38
Removed*.airbnb.orgWILDCARDIn Scope21:38
Removed*.musta.chWILDCARDIn Scope21:38
Removed*.airbnbpayments.comWILDCARDIn Scope21:38