mercadolibre

HackerOneView on HackerOne
RawAI Enhanced
67
In Scope
9
Out of Scope
In-Scope Assets (67)
AssetCategoryBountyQuick Links
*.adminml.comWILDCARDYes
*.mercadolibre.clWILDCARDYes
*.mercadolibre.comWILDCARDYes
*.mercadolibre.com.arWILDCARDYes
*.mercadolibre.com.coWILDCARDYes
*.mercadolibre.com.mxWILDCARDYes
*.mercadolibre.com.peWILDCARDYes
*.mercadolibre.com.uyWILDCARDYes
*.mercadolivre.com.brWILDCARDYes
*.mercadopago.clWILDCARDYes
*.mercadopago.comWILDCARDYes
*.mercadopago.com.arWILDCARDYes
*.mercadopago.com.brWILDCARDYes
*.mercadopago.com.coWILDCARDYes
*.mercadopago.com.mxWILDCARDYes
*.mercadopago.com.peWILDCARDYes
*.mercadopago.com.uyWILDCARDYes
*.mlstatic.comWILDCARDYes
CryptoOTHERYes-
Leaked CredentialsOTHERYes-
Point SmartHARDWAREYes-
api.mercadolibre.comURLYes
api.mercadopago.comURLYes
biolibre.arURLYes
biolibre.clURLYes
biolibre.coURLYes
biolibre.mxURLYes
biolivre.com.brURLYes
com.3mosquitos.MercadoLibreIOSYes-
com.mercadoenvios.crowdsourcingANDROIDYes
com.mercadoenvios.driverANDROIDYes
com.mercadoenvios.logisticsANDROIDYes
com.mercadolibreANDROIDYes
com.mercadolibre.android.mplay_tvANDROIDYes
com.mercadopago.MercadoPagoIOSYes-
com.mercadopago.walletANDROIDYes
furycloud.ioURLYes
furydocs.ioURLYes
logistica.redelcom.clURLYes
meliplay.com.arURLYes
meliplay.com.peURLYes
meliplay.com.uyURLYes
mercadolibreexperience.clURLYes
mercadolivreexperience.com.brURLYes
mercadoplay.coURLYes
mercadoplay.com.peURLYes
mercadoplay.com.uyURLYes
mercadoplay.peURLYes
mercadoplay.uyURLYes
portalinmobiliario.clURLYes
portalinmobiliario.comURLYes
sustentabilidadmercadolibre.comURLYes
tucarro.comURLYes
tucarro.com.coURLYes
tumoto.comURLYes
www.mercadolibre.co.crURLYes
www.mercadolibre.com.boURLYes
www.mercadolibre.com.doURLYes
www.mercadolibre.com.ecURLYes
www.mercadolibre.com.gtURLYes
www.mercadolibre.com.hnURLYes
www.mercadolibre.com.niURLYes
www.mercadolibre.com.paURLYes
www.mercadolibre.com.pyURLYes
www.mercadolibre.com.svURLYes
www.mercadolivre.comURLYes
www.mercadopago.com.ecURLYes
Out-of-Scope Assets (9)
AssetCategoryBounty
*.gokangu.clWILDCARDNo
*.gokangu.coWILDCARDNo
*.gokangu.mxWILDCARDNo
*.gokangu.uyWILDCARDNo
*.kangu.com.brWILDCARDNo
*.kangu.techWILDCARDNo
RedelcomOTHERNo
developersforumOTHERNo
wow-int.mercadolibre.comURLNo
Scope Changes (219)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedwww.mercadolibre.com.niURLIn Scope20:23
Addedwww.mercadolibre.com.gtURLIn Scope20:23
Addedwww.mercadolibre.com.svURLIn Scope20:23
Addedwww.mercadolibre.com.doURLIn Scope20:23
Addedmercadoplay.com.peURLIn Scope20:23
Addedmeliplay.com.arURLIn Scope20:23
Addedmeliplay.com.peURLIn Scope20:23
Addedwww.mercadopago.com.ecURLIn Scope20:23
Addedwww.mercadolibre.com.paURLIn Scope20:23
Addedwww.mercadolibre.com.hnURLIn Scope20:23
Addedmercadoplay.coURLIn Scope20:23
Addedlogistica.redelcom.clURLIn Scope20:23
Addedbiolivre.com.brURLIn Scope20:23
Addedwww.mercadolibre.com.boURLIn Scope20:23
Addedwww.mercadolibre.com.pyURLIn Scope20:23
Addedbiolibre.clURLIn Scope20:23
Addedwww.mercadolibre.co.crURLIn Scope20:23
Addedwww.mercadolivre.comURLIn Scope20:23
Addedmeliplay.com.uyURLIn Scope20:23
Addedbiolibre.mxURLIn Scope20:23
Addedwww.mercadolibre.com.ecURLIn Scope20:23
Addedbiolibre.coURLIn Scope20:23
Addedbiolibre.arURLIn Scope20:23
Addedcom.mercadoenvios.driverANDROIDIn Scope19:11
Addedtucarro.com.coURLIn Scope19:11
Added*.mercadopago.com.brWILDCARDIn Scope19:11
Added*.mercadolibre.comWILDCARDIn Scope19:11
Added*.mercadolibre.com.peWILDCARDIn Scope19:11
Addedsustentabilidadmercadolibre.comURLIn Scope19:11
Addedmercadolibreexperience.clURLIn Scope19:11
Addedcom.mercadolibre.android.mplay_tvANDROIDIn Scope19:11
Addedcom.mercadopago.walletANDROIDIn Scope19:11
Added*.gokangu.clWILDCARDOut of Scope19:11
Addedtucarro.comURLIn Scope19:11
Addedapi.mercadolibre.comURLIn Scope19:11
Added*.mercadopago.com.peWILDCARDIn Scope19:11
Added*.mercadopago.clWILDCARDIn Scope19:11
Addedcom.mercadoenvios.logisticsANDROIDIn Scope19:11
Added*.adminml.comWILDCARDIn Scope19:11
Addedcom.mercadolibreANDROIDIn Scope19:11
Addedportalinmobiliario.comURLIn Scope19:11
Addedmercadolivreexperience.com.brURLIn Scope19:11
Addedpoint smartHARDWAREIn Scope19:11
Addedportalinmobiliario.clURLIn Scope19:11
Addedmercadoplay.com.uyURLIn Scope19:11
Added*.mercadopago.comWILDCARDIn Scope19:11
Added*.mercadolibre.clWILDCARDIn Scope19:11
Added*.mercadolivre.com.brWILDCARDIn Scope19:11
Added*.mercadolibre.com.arWILDCARDIn Scope19:11
AddedcryptoOTHERIn Scope19:11
Addedwow-int.mercadolibre.comURLOut of Scope19:11
Addedcom.mercadoenvios.crowdsourcingANDROIDIn Scope19:11
Added*.kangu.techWILDCARDOut of Scope19:11
Addedmercadoplay.peURLIn Scope19:11
Added*.mercadolibre.com.mxWILDCARDIn Scope19:11
Added*.mercadolibre.com.coWILDCARDIn Scope19:11
Added*.mercadopago.com.uyWILDCARDIn Scope19:11
Added*.gokangu.coWILDCARDOut of Scope19:11
Addedcom.mercadopago.mercadopagoIOSIn Scope19:11
Addedcom.3mosquitos.mercadolibreIOSIn Scope19:11
Addedmercadoplay.uyURLIn Scope19:11
Added*.mercadopago.com.mxWILDCARDIn Scope19:11
Addedtumoto.comURLIn Scope19:11
Addedfurycloud.ioURLIn Scope19:11
Addedleaked credentialsOTHERIn Scope19:11
Addedfurydocs.ioURLIn Scope19:11
Added*.mlstatic.comWILDCARDIn Scope19:11
Added*.gokangu.uyWILDCARDOut of Scope19:11
AddeddevelopersforumOTHEROut of Scope19:11
Added*.mercadopago.com.arWILDCARDIn Scope19:11
Added*.gokangu.mxWILDCARDOut of Scope19:11
Added*.kangu.com.brWILDCARDOut of Scope19:11
Added*.mercadopago.com.coWILDCARDIn Scope19:11
Added*.mercadolibre.com.uyWILDCARDIn Scope19:11
Addedapi.mercadopago.comURLIn Scope19:11
AddedredelcomOTHEROut of Scope19:11
Feb 22, 2026
ChangeAssetCategoryScopeTime
Added*.mercadolibre.comWILDCARDIn Scope00:42
Addedbiolibre.mxURLIn Scope00:42
Addedcom.mercadolibre.android.mplay_tvANDROIDIn Scope00:42
Addedmercadolibreexperience.clURLIn Scope00:42
AddedredelcomOTHEROut of Scope00:42
Addedcom.mercadolibreANDROIDIn Scope00:42
Added*.mercadolibre.com.mxWILDCARDIn Scope00:42
Added*.mercadopago.com.peWILDCARDIn Scope00:42
Addedwww.mercadolibre.co.crURLIn Scope00:42
Added*.mercadolibre.clWILDCARDIn Scope00:42
Added*.mercadolibre.com.uyWILDCARDIn Scope00:42
Added*.mercadopago.com.arWILDCARDIn Scope00:42
Addedwww.mercadolibre.com.hnURLIn Scope00:42
Addedbiolibre.clURLIn Scope00:42
Addedbiolivre.com.brURLIn Scope00:42
Addedmeliplay.com.arURLIn Scope00:42
Addedcom.mercadopago.mercadopagoIOSIn Scope00:42
Added*.adminml.comWILDCARDIn Scope00:42
Addedwww.mercadolibre.com.doURLIn Scope00:42
Addedsustentabilidadmercadolibre.comURLIn Scope00:42
Added*.gokangu.uyWILDCARDOut of Scope00:42
Added*.kangu.techWILDCARDOut of Scope00:42
Added*.mercadolibre.com.coWILDCARDIn Scope00:42
Addedtumoto.comURLIn Scope00:42
Added*.mercadopago.clWILDCARDIn Scope00:42
Addedwww.mercadolibre.com.pyURLIn Scope00:42
Addedwww.mercadolibre.com.svURLIn Scope00:42
Addedmercadoplay.coURLIn Scope00:42
Addedmercadoplay.peURLIn Scope00:42
Addedcom.mercadoenvios.crowdsourcingANDROIDIn Scope00:42
Added*.gokangu.mxWILDCARDOut of Scope00:42
Addedapi.mercadopago.comURLIn Scope00:42
Addedcom.mercadoenvios.logisticsANDROIDIn Scope00:42
Addedmeliplay.com.uyURLIn Scope00:42
Addedmercadoplay.uyURLIn Scope00:42
Added*.mercadopago.com.brWILDCARDIn Scope00:42
Added*.mlstatic.comWILDCARDIn Scope00:42
Addedportalinmobiliario.comURLIn Scope00:42
Addedmercadolivreexperience.com.brURLIn Scope00:42
AddeddevelopersforumOTHEROut of Scope00:42
Addedapi.mercadolibre.comURLIn Scope00:42
Added*.mercadolibre.com.peWILDCARDIn Scope00:42
Addedmeliplay.com.peURLIn Scope00:42
Addedcom.mercadoenvios.driverANDROIDIn Scope00:42
Added*.kangu.com.brWILDCARDOut of Scope00:42
Added*.mercadolibre.com.arWILDCARDIn Scope00:42
Added*.mercadopago.com.coWILDCARDIn Scope00:42
Addedtucarro.comURLIn Scope00:42
Addedmercadoplay.com.peURLIn Scope00:42
Addedmercadoplay.com.uyURLIn Scope00:42
Addedportalinmobiliario.clURLIn Scope00:42
Addedfurycloud.ioURLIn Scope00:42
Added*.mercadolivre.com.brWILDCARDIn Scope00:42
Addedwww.mercadolibre.com.boURLIn Scope00:42
Addedwww.mercadolibre.com.niURLIn Scope00:42
Addedleaked credentialsOTHERIn Scope00:42
Added*.gokangu.coWILDCARDOut of Scope00:42
Addedcom.mercadopago.walletANDROIDIn Scope00:42
Addedcom.3mosquitos.mercadolibreIOSIn Scope00:42
AddedcryptoOTHERIn Scope00:42
Added*.mercadopago.com.mxWILDCARDIn Scope00:42
Addedlogistica.redelcom.clURLIn Scope00:42
Addedwww.mercadolivre.comURLIn Scope00:42
Addedwow-int.mercadolibre.comURLOut of Scope00:42
Addedwww.mercadolibre.com.ecURLIn Scope00:42
Addedwww.mercadolibre.com.gtURLIn Scope00:42
Addedwww.mercadolibre.com.paURLIn Scope00:42
Addedwww.mercadopago.com.ecURLIn Scope00:42
Addedpoint smartHARDWAREIn Scope00:42
Addedfurydocs.ioURLIn Scope00:42
Added*.mercadopago.com.uyWILDCARDIn Scope00:42
Addedbiolibre.arURLIn Scope00:42
Addedbiolibre.coURLIn Scope00:42
Addedtucarro.com.coURLIn Scope00:42
Added*.gokangu.clWILDCARDOut of Scope00:42
Added*.mercadopago.comWILDCARDIn Scope00:42
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedcom.mercadopago.walletANDROIDIn Scope21:38
Removedsustentabilidadmercadolibre.comURLIn Scope21:38
Removedmercadolivreexperience.com.brURLIn Scope21:38
Removedmercadolibreexperience.clURLIn Scope21:38
Removedfurydocs.ioURLIn Scope21:38
Removedfurycloud.ioURLIn Scope21:38
Removedcom.mercadoenvios.crowdsourcingANDROIDIn Scope21:38
Removedcom.mercadoenvios.driverANDROIDIn Scope21:38
Removedpoint smartHARDWAREIn Scope21:38
Removedcom.mercadolibre.android.mplay_tvANDROIDIn Scope21:38
Removedtumoto.comURLIn Scope21:38
Removedtucarro.com.coURLIn Scope21:38
Removedtucarro.comURLIn Scope21:38
Removedportalinmobiliario.comURLIn Scope21:38
Removedportalinmobiliario.clURLIn Scope21:38
Removedmercadoplay.uyURLIn Scope21:38
Removedmercadoplay.peURLIn Scope21:38
Removedmercadoplay.com.uyURLIn Scope21:38
Removedmercadoplay.com.peURLIn Scope21:38
Removedmercadoplay.coURLIn Scope21:38
Removedmeliplay.com.uyURLIn Scope21:38
Removedmeliplay.com.peURLIn Scope21:38
Removedmeliplay.com.arURLIn Scope21:38
Removedbiolivre.com.brURLIn Scope21:38
Removedbiolibre.mxURLIn Scope21:38
Removedbiolibre.coURLIn Scope21:38
Removedbiolibre.clURLIn Scope21:38
Removedbiolibre.arURLIn Scope21:38
Removedleaked credentialsOTHERIn Scope21:38
Removedcom.mercadoenvios.logisticsANDROIDIn Scope21:38
Removedwww.mercadopago.com.ecURLIn Scope21:38
Removedwww.mercadolivre.comURLIn Scope21:38
Removedwww.mercadolibre.com.svURLIn Scope21:38
Removedwww.mercadolibre.com.pyURLIn Scope21:38
Removedwww.mercadolibre.com.paURLIn Scope21:38
Removedwww.mercadolibre.com.niURLIn Scope21:38
Removedwww.mercadolibre.com.hnURLIn Scope21:38
Removedwww.mercadolibre.com.gtURLIn Scope21:38
Removedwww.mercadolibre.com.ecURLIn Scope21:38
Removedwww.mercadolibre.com.doURLIn Scope21:38
Removedwww.mercadolibre.com.boURLIn Scope21:38
Removedwww.mercadolibre.co.crURLIn Scope21:38
Removedlogistica.redelcom.clURLIn Scope21:38
Removed*.mlstatic.comWILDCARDIn Scope21:38
Removed*.mercadopago.com.uyWILDCARDIn Scope21:38
Removed*.mercadopago.com.peWILDCARDIn Scope21:38
Removed*.mercadopago.com.mxWILDCARDIn Scope21:38
Removed*.mercadopago.com.coWILDCARDIn Scope21:38
Removed*.mercadopago.com.brWILDCARDIn Scope21:38
Removed*.mercadopago.com.arWILDCARDIn Scope21:38
Removed*.mercadopago.comWILDCARDIn Scope21:38
Removed*.mercadopago.clWILDCARDIn Scope21:38
Removed*.mercadolivre.com.brWILDCARDIn Scope21:38
Removed*.mercadolibre.com.uyWILDCARDIn Scope21:38
Removed*.mercadolibre.com.peWILDCARDIn Scope21:38
Removed*.mercadolibre.com.mxWILDCARDIn Scope21:38
Removed*.mercadolibre.com.coWILDCARDIn Scope21:38
Removed*.mercadolibre.com.arWILDCARDIn Scope21:38
Removed*.mercadolibre.comWILDCARDIn Scope21:38
Removed*.mercadolibre.clWILDCARDIn Scope21:38
Removed*.adminml.comWILDCARDIn Scope21:38
RemovedcryptoOTHERIn Scope21:38
Removedapi.mercadolibre.comURLIn Scope21:38
Removedcom.3mosquitos.mercadolibreIOSIn Scope21:38
Removedcom.mercadolibreANDROIDIn Scope21:38
Removedapi.mercadopago.comURLIn Scope21:38
Removedcom.mercadopago.mercadopagoIOSIn Scope21:38