bookingcom

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (49)

Asset	Category	Bounty	Quick Links
*.booking.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.fareharbor.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.fareharbor.engineering	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
*.rentalcars.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
accommodations.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
account.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
admin.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
autocomplete.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
careers.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
cars.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
chat.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
compass.fareharbor.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
demo.fareharbor.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
distribution-xml.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
experiences.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
fareharborsites.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
fhdn.fareharbor.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
flights.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
http://secure-iphone-xml.booking.com/json/	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://apps.apple.com/us/app/booking-com-hotels-travel/id367003839	IOS	Yes	-
https://apps.apple.com/us/app/pulse-for-booking-com-partners/id992795726	IOS	Yes	-
https://iphone-xml.booking.com/json/	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
https://play.google.com/store/apps/details?id=com.booking&hl=en	ANDROID	Yes	Play Store
https://play.google.com/store/apps/details?id=com.booking.hotelmanager&hl=en	ANDROID	Yes	Play Store
https://secure-iphone-xml.booking.com/json/	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
indicative-pricing.taxi.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
kyc-onboarding.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
marketing.fareharbor.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
metasearch-api.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
paybridge.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
paymentcomponent.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
paynotifications.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
phone-validation.taxi.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
portal.taxi.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
readonly.fareharbor.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
secure-supply-xml.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
secure.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
sites.fareharbor.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
spark.fareharbor.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
supplier.auth.toag.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
supply-xml.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
tableau.fareharbor.engineering	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
taxi.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
taxis.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
teleport.fareharbor.engineering	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
webhooks.booking.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
widget.rentalcars.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal
www.fareharbor.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal

Out-of-Scope Assets (23)

Asset	Category	Bounty
ams.merchandise.booking.com	URL	No
awscpasslab.booking.com	URL	No
business.booking.com/	URL	No
cpass.booking.com	URL	No
desk-demo-api.fareharbor.engineering	URL	No
desk-demo.fareharbor.engineering	URL	No
https://fareharbor.com/demo/	URL	No
https://secure.booking.com/companyjoin.html	URL	No
https://secure.booking.com/enterprise/signon.en-gb.html	URL	No
https://ugcupload.booking.com/upload_bbtool_company_logo	URL	No
https://www.booking.com/bbm.html	URL	No
jobs.booking.com	URL	No
medialibrary.booking.com	URL	No
partnerfeedback.booking.com	URL	No
procurement.booking.com	URL	No
recruitmentsurveys.booking.com	URL	No
secure.booking.com/company/*	WILDCARD	No
secure.booking.com/orgnode/*	WILDCARD	No
spadmin.booking.com/	URL	No
welcomekit.booking.com/	URL	No
www.booking.com/bbmanage/*	WILDCARD	No
www.booking.com/bbmanage/data/*	WILDCARD	No
www.sustainability.booking.com	URL	No