mercadolibre

HackerOneView on HackerOne
RawAI Enhanced
67
In Scope
9
Out of Scope
In-Scope Assets (67)
AssetCategoryBountyQuick Links
*.adminml.comWILDCARDYes
*.mercadolibre.clWILDCARDYes
*.mercadolibre.comWILDCARDYes
*.mercadolibre.com.arWILDCARDYes
*.mercadolibre.com.coWILDCARDYes
*.mercadolibre.com.mxWILDCARDYes
*.mercadolibre.com.peWILDCARDYes
*.mercadolibre.com.uyWILDCARDYes
*.mercadolivre.com.brWILDCARDYes
*.mercadopago.clWILDCARDYes
*.mercadopago.comWILDCARDYes
*.mercadopago.com.arWILDCARDYes
*.mercadopago.com.brWILDCARDYes
*.mercadopago.com.coWILDCARDYes
*.mercadopago.com.mxWILDCARDYes
*.mercadopago.com.peWILDCARDYes
*.mercadopago.com.uyWILDCARDYes
*.mlstatic.comWILDCARDYes
CryptoOTHERYes-
Leaked CredentialsOTHERYes-
Point SmartHARDWAREYes-
api.mercadolibre.comURLYes
api.mercadopago.comURLYes
biolibre.arURLYes
biolibre.clURLYes
biolibre.coURLYes
biolibre.mxURLYes
biolivre.com.brURLYes
com.3mosquitos.MercadoLibreIOSYes-
com.mercadoenvios.crowdsourcingANDROIDYes
com.mercadoenvios.driverANDROIDYes
com.mercadoenvios.logisticsANDROIDYes
com.mercadolibreANDROIDYes
com.mercadolibre.android.mplay_tvANDROIDYes
com.mercadopago.MercadoPagoIOSYes-
com.mercadopago.walletANDROIDYes
furycloud.ioURLYes
furydocs.ioURLYes
logistica.redelcom.clURLYes
meliplay.com.arURLYes
meliplay.com.peURLYes
meliplay.com.uyURLYes
mercadolibreexperience.clURLYes
mercadolivreexperience.com.brURLYes
mercadoplay.coURLYes
mercadoplay.com.peURLYes
mercadoplay.com.uyURLYes
mercadoplay.peURLYes
mercadoplay.uyURLYes
portalinmobiliario.clURLYes
portalinmobiliario.comURLYes
sustentabilidadmercadolibre.comURLYes
tucarro.comURLYes
tucarro.com.coURLYes
tumoto.comURLYes
www.mercadolibre.co.crURLYes
www.mercadolibre.com.boURLYes
www.mercadolibre.com.doURLYes
www.mercadolibre.com.ecURLYes
www.mercadolibre.com.gtURLYes
www.mercadolibre.com.hnURLYes
www.mercadolibre.com.niURLYes
www.mercadolibre.com.paURLYes
www.mercadolibre.com.pyURLYes
www.mercadolibre.com.svURLYes
www.mercadolivre.comURLYes
www.mercadopago.com.ecURLYes
Out-of-Scope Assets (9)
AssetCategoryBounty
*.gokangu.clWILDCARDNo
*.gokangu.coWILDCARDNo
*.gokangu.mxWILDCARDNo
*.gokangu.uyWILDCARDNo
*.kangu.com.brWILDCARDNo
*.kangu.techWILDCARDNo
RedelcomOTHERNo
developersforumOTHERNo
wow-int.mercadolibre.comURLNo
Scope Changes (219)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedwww.mercadolibre.com.boURLIn Scope20:23
Addedbiolivre.com.brURLIn Scope20:23
Addedlogistica.redelcom.clURLIn Scope20:23
Addedmercadoplay.coURLIn Scope20:23
Addedwww.mercadolibre.com.hnURLIn Scope20:23
Addedwww.mercadolibre.com.paURLIn Scope20:23
Addedwww.mercadopago.com.ecURLIn Scope20:23
Addedmeliplay.com.peURLIn Scope20:23
Addedmeliplay.com.arURLIn Scope20:23
Addedmercadoplay.com.peURLIn Scope20:23
Addedwww.mercadolibre.com.doURLIn Scope20:23
Addedwww.mercadolibre.com.svURLIn Scope20:23
Addedwww.mercadolibre.com.gtURLIn Scope20:23
Addedwww.mercadolibre.com.niURLIn Scope20:23
Addedbiolibre.arURLIn Scope20:23
Addedbiolibre.coURLIn Scope20:23
Addedwww.mercadolibre.com.ecURLIn Scope20:23
Addedbiolibre.mxURLIn Scope20:23
Addedmeliplay.com.uyURLIn Scope20:23
Addedwww.mercadolivre.comURLIn Scope20:23
Addedwww.mercadolibre.co.crURLIn Scope20:23
Addedbiolibre.clURLIn Scope20:23
Addedwww.mercadolibre.com.pyURLIn Scope20:23
Addedportalinmobiliario.clURLIn Scope19:11
Addedpoint smartHARDWAREIn Scope19:11
Addedmercadolivreexperience.com.brURLIn Scope19:11
Addedportalinmobiliario.comURLIn Scope19:11
Addedcom.mercadolibreANDROIDIn Scope19:11
Added*.adminml.comWILDCARDIn Scope19:11
Addedcom.mercadoenvios.logisticsANDROIDIn Scope19:11
Added*.mercadopago.clWILDCARDIn Scope19:11
Added*.mercadopago.com.peWILDCARDIn Scope19:11
Addedapi.mercadolibre.comURLIn Scope19:11
Addedtucarro.comURLIn Scope19:11
Added*.gokangu.coWILDCARDOut of Scope19:11
Addedcom.mercadopago.walletANDROIDIn Scope19:11
Addedcom.mercadolibre.android.mplay_tvANDROIDIn Scope19:11
Addedmercadolibreexperience.clURLIn Scope19:11
Addedsustentabilidadmercadolibre.comURLIn Scope19:11
Added*.mercadolibre.com.peWILDCARDIn Scope19:11
Added*.mercadolibre.comWILDCARDIn Scope19:11
Added*.mercadopago.com.brWILDCARDIn Scope19:11
Addedtucarro.com.coURLIn Scope19:11
Addedcom.mercadoenvios.driverANDROIDIn Scope19:11
AddedredelcomOTHEROut of Scope19:11
Addedapi.mercadopago.comURLIn Scope19:11
Added*.mercadolibre.com.uyWILDCARDIn Scope19:11
Added*.mercadopago.com.coWILDCARDIn Scope19:11
Added*.kangu.com.brWILDCARDOut of Scope19:11
Added*.gokangu.mxWILDCARDOut of Scope19:11
Added*.mercadopago.com.arWILDCARDIn Scope19:11
AddeddevelopersforumOTHEROut of Scope19:11
Added*.gokangu.uyWILDCARDOut of Scope19:11
Added*.gokangu.clWILDCARDOut of Scope19:11
Addedcom.mercadopago.mercadopagoIOSIn Scope19:11
Addedcom.3mosquitos.mercadolibreIOSIn Scope19:11
Added*.mercadopago.com.mxWILDCARDIn Scope19:11
Addedtumoto.comURLIn Scope19:11
Addedfurycloud.ioURLIn Scope19:11
Addedleaked credentialsOTHERIn Scope19:11
Addedfurydocs.ioURLIn Scope19:11
Added*.mlstatic.comWILDCARDIn Scope19:11
Addedmercadoplay.uyURLIn Scope19:11
Added*.mercadopago.com.uyWILDCARDIn Scope19:11
Added*.mercadolibre.com.coWILDCARDIn Scope19:11
Added*.mercadolibre.com.mxWILDCARDIn Scope19:11
Addedmercadoplay.peURLIn Scope19:11
Added*.kangu.techWILDCARDOut of Scope19:11
Addedcom.mercadoenvios.crowdsourcingANDROIDIn Scope19:11
Addedwow-int.mercadolibre.comURLOut of Scope19:11
AddedcryptoOTHERIn Scope19:11
Added*.mercadolibre.com.arWILDCARDIn Scope19:11
Added*.mercadolivre.com.brWILDCARDIn Scope19:11
Added*.mercadolibre.clWILDCARDIn Scope19:11
Added*.mercadopago.comWILDCARDIn Scope19:11
Addedmercadoplay.com.uyURLIn Scope19:11
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedbiolibre.mxURLIn Scope00:42
Addedcom.mercadolibre.android.mplay_tvANDROIDIn Scope00:42
Addedmercadolibreexperience.clURLIn Scope00:42
AddedredelcomOTHEROut of Scope00:42
Addedcom.mercadolibreANDROIDIn Scope00:42
Added*.mercadolibre.com.mxWILDCARDIn Scope00:42
Added*.mercadopago.com.peWILDCARDIn Scope00:42
Addedwww.mercadolibre.co.crURLIn Scope00:42
Added*.mercadolibre.clWILDCARDIn Scope00:42
Added*.mercadolibre.com.uyWILDCARDIn Scope00:42
Added*.mercadopago.com.arWILDCARDIn Scope00:42
Addedwww.mercadolibre.com.hnURLIn Scope00:42
Addedbiolibre.clURLIn Scope00:42
Addedbiolivre.com.brURLIn Scope00:42
Addedmeliplay.com.arURLIn Scope00:42
Addedcom.mercadopago.mercadopagoIOSIn Scope00:42
Added*.adminml.comWILDCARDIn Scope00:42
Addedwww.mercadolibre.com.doURLIn Scope00:42
Addedsustentabilidadmercadolibre.comURLIn Scope00:42
Added*.gokangu.uyWILDCARDOut of Scope00:42
Added*.kangu.techWILDCARDOut of Scope00:42
Added*.mercadolibre.com.coWILDCARDIn Scope00:42
Addedtumoto.comURLIn Scope00:42
Added*.mercadopago.clWILDCARDIn Scope00:42
Addedwww.mercadolibre.com.pyURLIn Scope00:42
Addedwww.mercadolibre.com.svURLIn Scope00:42
Addedmercadoplay.coURLIn Scope00:42
Addedmercadoplay.peURLIn Scope00:42
Addedcom.mercadoenvios.crowdsourcingANDROIDIn Scope00:42
Added*.gokangu.mxWILDCARDOut of Scope00:42
Addedapi.mercadopago.comURLIn Scope00:42
Addedcom.mercadoenvios.logisticsANDROIDIn Scope00:42
Addedmeliplay.com.uyURLIn Scope00:42
Addedmercadoplay.uyURLIn Scope00:42
Added*.mercadopago.com.brWILDCARDIn Scope00:42
Added*.mlstatic.comWILDCARDIn Scope00:42
Addedportalinmobiliario.comURLIn Scope00:42
Addedmercadolivreexperience.com.brURLIn Scope00:42
AddeddevelopersforumOTHEROut of Scope00:42
Addedapi.mercadolibre.comURLIn Scope00:42
Added*.mercadolibre.com.peWILDCARDIn Scope00:42
Addedmeliplay.com.peURLIn Scope00:42
Addedcom.mercadoenvios.driverANDROIDIn Scope00:42
Added*.kangu.com.brWILDCARDOut of Scope00:42
Added*.mercadolibre.com.arWILDCARDIn Scope00:42
Added*.mercadopago.com.coWILDCARDIn Scope00:42
Addedtucarro.comURLIn Scope00:42
Addedmercadoplay.com.peURLIn Scope00:42
Addedmercadoplay.com.uyURLIn Scope00:42
Addedportalinmobiliario.clURLIn Scope00:42
Addedfurycloud.ioURLIn Scope00:42
Added*.mercadolivre.com.brWILDCARDIn Scope00:42
Addedwww.mercadolibre.com.boURLIn Scope00:42
Addedwww.mercadolibre.com.niURLIn Scope00:42
Addedleaked credentialsOTHERIn Scope00:42
Added*.gokangu.coWILDCARDOut of Scope00:42
Addedcom.mercadopago.walletANDROIDIn Scope00:42
Addedcom.3mosquitos.mercadolibreIOSIn Scope00:42
AddedcryptoOTHERIn Scope00:42
Added*.mercadopago.com.mxWILDCARDIn Scope00:42
Addedlogistica.redelcom.clURLIn Scope00:42
Addedwww.mercadolivre.comURLIn Scope00:42
Addedwow-int.mercadolibre.comURLOut of Scope00:42
Addedwww.mercadolibre.com.ecURLIn Scope00:42
Addedwww.mercadolibre.com.gtURLIn Scope00:42
Addedwww.mercadolibre.com.paURLIn Scope00:42
Addedwww.mercadopago.com.ecURLIn Scope00:42
Addedpoint smartHARDWAREIn Scope00:42
Addedfurydocs.ioURLIn Scope00:42
Added*.mercadolibre.comWILDCARDIn Scope00:42
Added*.mercadopago.com.uyWILDCARDIn Scope00:42
Addedbiolibre.arURLIn Scope00:42
Addedbiolibre.coURLIn Scope00:42
Addedtucarro.com.coURLIn Scope00:42
Added*.gokangu.clWILDCARDOut of Scope00:42
Added*.mercadopago.comWILDCARDIn Scope00:42
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedcom.mercadopago.walletANDROIDIn Scope21:38
Removedcom.mercadopago.mercadopagoIOSIn Scope21:38
Removedapi.mercadopago.comURLIn Scope21:38
Removedcom.mercadolibreANDROIDIn Scope21:38
Removedcom.3mosquitos.mercadolibreIOSIn Scope21:38
Removedapi.mercadolibre.comURLIn Scope21:38
RemovedcryptoOTHERIn Scope21:38
Removed*.adminml.comWILDCARDIn Scope21:38
Removed*.mercadolibre.clWILDCARDIn Scope21:38
Removed*.mercadolibre.comWILDCARDIn Scope21:38
Removed*.mercadolibre.com.arWILDCARDIn Scope21:38
Removed*.mercadolibre.com.coWILDCARDIn Scope21:38
Removed*.mercadolibre.com.mxWILDCARDIn Scope21:38
Removed*.mercadolibre.com.peWILDCARDIn Scope21:38
Removed*.mercadolibre.com.uyWILDCARDIn Scope21:38
Removed*.mercadolivre.com.brWILDCARDIn Scope21:38
Removed*.mercadopago.clWILDCARDIn Scope21:38
Removed*.mercadopago.comWILDCARDIn Scope21:38
Removed*.mercadopago.com.arWILDCARDIn Scope21:38
Removed*.mercadopago.com.brWILDCARDIn Scope21:38
Removed*.mercadopago.com.coWILDCARDIn Scope21:38
Removed*.mercadopago.com.mxWILDCARDIn Scope21:38
Removed*.mercadopago.com.peWILDCARDIn Scope21:38
Removed*.mercadopago.com.uyWILDCARDIn Scope21:38
Removed*.mlstatic.comWILDCARDIn Scope21:38
Removedlogistica.redelcom.clURLIn Scope21:38
Removedwww.mercadolibre.co.crURLIn Scope21:38
Removedwww.mercadolibre.com.boURLIn Scope21:38
Removedwww.mercadolibre.com.doURLIn Scope21:38
Removedwww.mercadolibre.com.ecURLIn Scope21:38
Removedwww.mercadolibre.com.gtURLIn Scope21:38
Removedwww.mercadolibre.com.hnURLIn Scope21:38
Removedwww.mercadolibre.com.niURLIn Scope21:38
Removedwww.mercadolibre.com.paURLIn Scope21:38
Removedwww.mercadolibre.com.pyURLIn Scope21:38
Removedwww.mercadolibre.com.svURLIn Scope21:38
Removedwww.mercadolivre.comURLIn Scope21:38
Removedwww.mercadopago.com.ecURLIn Scope21:38
Removedcom.mercadoenvios.logisticsANDROIDIn Scope21:38
Removedleaked credentialsOTHERIn Scope21:38
Removedbiolibre.arURLIn Scope21:38
Removedbiolibre.clURLIn Scope21:38
Removedbiolibre.coURLIn Scope21:38
Removedbiolibre.mxURLIn Scope21:38
Removedbiolivre.com.brURLIn Scope21:38
Removedmeliplay.com.arURLIn Scope21:38
Removedmeliplay.com.peURLIn Scope21:38
Removedmeliplay.com.uyURLIn Scope21:38
Removedmercadoplay.coURLIn Scope21:38
Removedmercadoplay.com.peURLIn Scope21:38
Removedmercadoplay.com.uyURLIn Scope21:38
Removedmercadoplay.peURLIn Scope21:38
Removedmercadoplay.uyURLIn Scope21:38
Removedportalinmobiliario.clURLIn Scope21:38
Removedportalinmobiliario.comURLIn Scope21:38
Removedtucarro.comURLIn Scope21:38
Removedtucarro.com.coURLIn Scope21:38
Removedtumoto.comURLIn Scope21:38
Removedcom.mercadolibre.android.mplay_tvANDROIDIn Scope21:38
Removedpoint smartHARDWAREIn Scope21:38
Removedcom.mercadoenvios.driverANDROIDIn Scope21:38
Removedcom.mercadoenvios.crowdsourcingANDROIDIn Scope21:38
Removedfurycloud.ioURLIn Scope21:38
Removedfurydocs.ioURLIn Scope21:38
Removedmercadolibreexperience.clURLIn Scope21:38
Removedmercadolivreexperience.com.brURLIn Scope21:38
Removedsustentabilidadmercadolibre.comURLIn Scope21:38