airbnb

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (27)

Asset	Category	Bounty	Quick Links
*.airbnb-aws.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.airbnb.org	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.airbnbcitizen.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.airbnbpayments.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.atairbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.byairbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.hoteltonight-test.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.hoteltonight.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.luxuryretreats.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.muscache.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.musta.ch	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.withairbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
Localized airbnb sites listed at the link below:	OTHER	Yes	-
api.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
assets.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
callbacks.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
com.airbnb.android	ANDROID	Yes	Play Store APKPure APKMirror
com.airbnb.app	IOS	Yes	-
com.luxuryretreats.ios	IOS	Yes	-
m.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
next.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
one.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
open.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
support-api.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
www.airbnb.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
www.hoteltonight.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (8)

Asset	Category	Bounty
admin.demo.urbandoor.com	URL	No
demo.urbandoor.com	URL	No
luckey.app	URL	No
luckey.fr	URL	No
luckey.in	URL	No
luckey.partners	URL	No
luckeyhomes.com	URL	No
provider.demo.urbandoor.com	URL	No

Scope Changes (97)

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	*.byairbnb.com	WILDCARD	In Scope	19:08
Added	luckey.app	URL	Out of Scope	19:08
Added	luckey.in	URL	Out of Scope	19:08
Added	provider.demo.urbandoor.com	URL	Out of Scope	19:08
Added	com.airbnb.app	IOS	In Scope	19:08
Added	*.atairbnb.com	WILDCARD	In Scope	19:08
Added	*.withairbnb.com	WILDCARD	In Scope	19:08
Added	www.hoteltonight.com	URL	In Scope	19:08
Added	*.hoteltonight.com	WILDCARD	In Scope	19:08
Added	demo.urbandoor.com	URL	Out of Scope	19:08
Added	luckey.partners	URL	Out of Scope	19:08
Added	www.airbnb.com	URL	In Scope	19:08
Added	next.airbnb.com	URL	In Scope	19:08
Added	api.airbnb.com	URL	In Scope	19:08
Added	*.airbnb-aws.com	WILDCARD	In Scope	19:08
Added	*.airbnbpayments.com	WILDCARD	In Scope	19:08
Added	luckey.fr	URL	Out of Scope	19:08
Added	*.hoteltonight-test.com	WILDCARD	In Scope	19:08
Added	luckeyhomes.com	URL	Out of Scope	19:08
Added	admin.demo.urbandoor.com	URL	Out of Scope	19:08
Added	*.musta.ch	WILDCARD	In Scope	19:08
Added	*.airbnb.com	WILDCARD	In Scope	19:08
Added	localized airbnb sites listed at the link below:	OTHER	In Scope	19:08
Added	com.airbnb.android	ANDROID	In Scope	19:08
Added	callbacks.airbnb.com	URL	In Scope	19:08
Added	open.airbnb.com	URL	In Scope	19:08
Added	*.airbnbcitizen.com	WILDCARD	In Scope	19:08
Added	support-api.airbnb.com	URL	In Scope	19:08
Added	com.luxuryretreats.ios	IOS	In Scope	19:08
Added	*.airbnb.org	WILDCARD	In Scope	19:08
Added	*.luxuryretreats.com	WILDCARD	In Scope	19:08
Added	*.muscache.com	WILDCARD	In Scope	19:08
Added	assets.airbnb.com	URL	In Scope	19:08
Added	m.airbnb.com	URL	In Scope	19:08
Added	one.airbnb.com	URL	In Scope	19:08

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	*.airbnbcitizen.com	WILDCARD	In Scope	00:40
Added	com.airbnb.android	ANDROID	In Scope	00:40
Added	admin.demo.urbandoor.com	URL	Out of Scope	00:40
Added	www.airbnb.com	URL	In Scope	00:40
Added	com.airbnb.app	IOS	In Scope	00:40
Added	*.airbnb-aws.com	WILDCARD	In Scope	00:40
Added	com.luxuryretreats.ios	IOS	In Scope	00:40
Added	*.musta.ch	WILDCARD	In Scope	00:40
Added	provider.demo.urbandoor.com	URL	Out of Scope	00:40
Added	luckey.partners	URL	Out of Scope	00:40
Added	next.airbnb.com	URL	In Scope	00:40
Added	open.airbnb.com	URL	In Scope	00:40
Added	demo.urbandoor.com	URL	Out of Scope	00:40
Added	localized airbnb sites listed at the link below:	OTHER	In Scope	00:40
Added	*.muscache.com	WILDCARD	In Scope	00:40
Added	*.luxuryretreats.com	WILDCARD	In Scope	00:40
Added	*.airbnbpayments.com	WILDCARD	In Scope	00:40
Added	support-api.airbnb.com	URL	In Scope	00:40
Added	*.withairbnb.com	WILDCARD	In Scope	00:40
Added	*.byairbnb.com	WILDCARD	In Scope	00:40
Added	*.hoteltonight-test.com	WILDCARD	In Scope	00:40
Added	luckey.in	URL	Out of Scope	00:40
Added	luckeyhomes.com	URL	Out of Scope	00:40
Added	api.airbnb.com	URL	In Scope	00:40
Added	assets.airbnb.com	URL	In Scope	00:40
Added	one.airbnb.com	URL	In Scope	00:40
Added	www.hoteltonight.com	URL	In Scope	00:40
Added	*.airbnb.org	WILDCARD	In Scope	00:40
Added	luckey.fr	URL	Out of Scope	00:40
Added	luckey.app	URL	Out of Scope	00:40
Added	callbacks.airbnb.com	URL	In Scope	00:40
Added	*.airbnb.com	WILDCARD	In Scope	00:40
Added	*.atairbnb.com	WILDCARD	In Scope	00:40
Added	*.hoteltonight.com	WILDCARD	In Scope	00:40
Added	m.airbnb.com	URL	In Scope	00:40

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	www.airbnb.com	URL	In Scope	21:38
Removed	next.airbnb.com	URL	In Scope	21:38
Removed	api.airbnb.com	URL	In Scope	21:38
Removed	support-api.airbnb.com	URL	In Scope	21:38
Removed	assets.airbnb.com	URL	In Scope	21:38
Removed	m.airbnb.com	URL	In Scope	21:38
Removed	one.airbnb.com	URL	In Scope	21:38
Removed	open.airbnb.com	URL	In Scope	21:38
Removed	callbacks.airbnb.com	URL	In Scope	21:38
Removed	*.airbnb.com	URL	In Scope	21:38
Removed	localized airbnb sites listed at the link below:	OTHER	In Scope	21:38
Removed	*.airbnbcitizen.com	URL	In Scope	21:38
Removed	com.airbnb.app	IOS	In Scope	21:38
Removed	com.airbnb.android	ANDROID	In Scope	21:38
Removed	*.atairbnb.com	URL	In Scope	21:38
Removed	*.withairbnb.com	URL	In Scope	21:38
Removed	*.byairbnb.com	URL	In Scope	21:38
Removed	*.muscache.com	URL	In Scope	21:38
Removed	*.airbnb-aws.com	URL	In Scope	21:38
Removed	*.luxuryretreats.com	URL	In Scope	21:38
Removed	com.luxuryretreats.ios	IOS	In Scope	21:38
Removed	www.hoteltonight.com	URL	In Scope	21:38
Removed	*.hoteltonight-test.com	URL	In Scope	21:38
Removed	*.hoteltonight.com	WILDCARD	In Scope	21:38
Removed	*.airbnb.org	WILDCARD	In Scope	21:38
Removed	*.musta.ch	WILDCARD	In Scope	21:38
Removed	*.airbnbpayments.com	WILDCARD	In Scope	21:38