Bug bounty program
EG
Expedia Group VDP
- Platform
- HackerOne
- Bounties
- None
- Assets in scope
- 33
- Disclosed reports
- 0
- Subdomains
- 7,454
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains7,454
| Name | Scope | First seen |
|---|---|---|
| api.carrentals.comapi | In scope | 2026-11-14 |
| perf-static-okapi-api.aws.carrentals.comapi, test | In scope | 2026-11-14 |
| api.spinnaker.prod.carrentals.comapi, ci | In scope | 2026-11-14 |
| api.ean.comapi | In scope | 2026-11-14 |
| b2b-bml.api.ean.comapi | In scope | 2026-11-14 |
| book.api.ean.comapi | In scope | 2026-11-14 |
| dev.api.ean.comapi, dev | In scope | 2026-11-14 |
| origin-book.api.ean.comapi | In scope | 2026-11-14 |
| prodpc.api.ean.comapi | In scope | 2026-11-14 |
| testpc.api.ean.comapi | In scope | 2026-11-14 |
| api.ch.ean.comapi | In scope | 2026-11-14 |
| origin-api.ch.ean.comapi | In scope | 2026-11-14 |
| origin-api.ean.comapi | In scope | 2026-11-14 |
| api.ph.ean.comapi | In scope | 2026-11-14 |
| origin-api.ph.ean.comapi | In scope | 2026-11-14 |
| api.expedia.comapi | In scope | 2026-11-14 |
| travelconnect-lab.apis.expedia.comapi | In scope | 2026-11-14 |
| rpc.expedia.biz.ar.expedia.comapi | In scope | 2026-11-14 |
| spinnaker-api.kmc-default.us-west-2.test.cicddev.expedia.comapi, ci, test | In scope | 2026-11-14 |
| spinnaker-api.kmc-maljolani.us-west-2.test.cicddev.expedia.comapi, ci, test | In scope | 2026-11-14 |
| spinnaker-api.kmc-default.us-west-2.prod.cicdtools.expedia.comapi, ci | In scope | 2026-11-14 |
| whoami-multi-api.kmc-default.us-west-2.prod.cicdtools.expedia.comapi | In scope | 2026-11-14 |
| dts-api.prod.doppler.expedia.comapi | In scope | 2026-11-14 |
| dts-api.test.doppler.expedia.comapi, test | In scope | 2026-11-14 |
| analytics-api-external.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| analytics-api-external-v2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| analytics-api-internal.prod.epsdecaf.expedia.comapi, internal | In scope | 2026-11-14 |
| analytics-api-internal-v2.prod.epsdecaf.expedia.comapi, internal | In scope | 2026-11-14 |
| api-keys-api-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| commercial-terms-service-fe-api.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| commercial-terms-service-fe-api-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| commission-tiers-api-smoke-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| data-access-management-api-us-west-2.prod.epsdecaf.expedia.comadmin, api, vpn | In scope | 2026-11-14 |
| eps-console-ldap-api-us-west-2.prod.epsdecaf.expedia.comadmin, api | In scope | 2026-11-14 |
| eps-notification-api-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| eps-offline-support-api-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| eps-payment-setups-api-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| eps-subscription-api-us-east-1.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| eps-subscription-api-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| notifications-api-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| partner-management-api-us-west-2.prod.epsdecaf.expedia.comadmin, api | In scope | 2026-11-14 |
| partner-users-api-us-west-2-main.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| plp-commissions-calculator-api.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| taap-loyalty-points-api-us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| plp-commissions-calculator-api.us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| taap-quotation-api.us-west-2.prod.epsdecaf.expedia.comapi | In scope | 2026-11-14 |
| analytics-api-external.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| analytics-api-external-v2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| analytics-api-internal.test.epsdecaf.expedia.comapi, internal, test | In scope | 2026-11-14 |
| analytics-api-internal-v2.test.epsdecaf.expedia.comapi, internal, test | In scope | 2026-11-14 |
| api-experimentation-platform-survey-main-infra-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| api-keys-api-punk-13741-us-east-1.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| api-keys-api-punk-13741-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| api-keys-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| b2b-oppy-rec-api-main-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| commercial-terms-service-fe-api.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| commercial-terms-service-fe-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| commercial-terms-service-fe-api-us-west-2-flavor1.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| commercial-terms-service-fe-api-us-west-2-flavor2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| eps-console-ldap-api-us-west-2.test.epsdecaf.expedia.comadmin, api, test | In scope | 2026-11-14 |
| eps-notification-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| eps-offline-support-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| eps-payment-setups-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| eps-promo-api.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| eps-subscription-api-us-east-1.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| eps-subscription-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| notifications-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| partner-management-api-us-west-2.test.epsdecaf.expedia.comadmin, api, test | In scope | 2026-11-14 |
| partner-users-api-us-west-2-canary.test.epsdecaf.expedia.comapi, staging, test | In scope | 2026-11-14 |
| partner-users-api-us-west-2-main.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| plp-commissions-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| plp-commissions-calculator-api.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| plp-commissions-calculator-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| portal-api-gql-default-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| taap-loyalty-points-api-us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| b2b-servicing-api.us-east-1.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| eps-taap-quotation-api.us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| plp-commissions-api.us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| plp-commissions-calculator-api.us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| taap-quotation-api.us-west-2.test.epsdecaf.expedia.comapi, test | In scope | 2026-11-14 |
| api-ext-dev.test.fspdcl.expedia.comapi, dev, test | In scope | 2026-11-14 |
| api-ext-int.test.fspdcl.expedia.comapi, test | In scope | 2026-11-14 |
| api-ext-maui.test.fspdcl.expedia.comapi, test | In scope | 2026-11-14 |
| api-ext.fspdecaf.expedia.comapi | In scope | 2026-11-14 |
| api-ext-shadow.fspdecaf.expedia.comapi | In scope | 2026-11-14 |
| lx-pc-api.us-west-2.test.localexpert.expedia.comapi, test | In scope | 2026-11-14 |
| partner-api-preview.test.lodgingpartner.expedia.comapi, staging, test | In scope | 2026-11-14 |
| wildcard.partner-api-preview.test.lodgingpartner.expedia.comapi, staging, test | In scope | 2026-11-14 |
| api-prr-tracing.test.monitoring.expedia.comapi, monitoring, test | In scope | 2026-11-14 |
| api.haystack-int-k8s.test.monitoring.expedia.comapi, monitoring, test, tools | In scope | 2026-11-14 |
| api.haystack-test-k8s.test.monitoring.expedia.comapi, monitoring, test, tools | In scope | 2026-11-14 |
| partner-api-site.prod-p.expedia.comapi | In scope | 2026-11-14 |
| partner-api-site.us-west-1.prod-p.expedia.comapi | In scope | 2026-11-14 |
| partner-api-site.us-west-2.prod-p.expedia.comapi | In scope | 2026-11-14 |
| lobot-api.prod.expedia.comapi | In scope | 2026-11-14 |
| bex-api-loom.us-east-1.prod.expedia.comapi | In scope | 2026-11-14 |
| lobot-api-java.us-east-1.prod.expedia.comapi | In scope | 2026-11-14 |
| bex-api-loom.us-west-2.prod.expedia.comapi | In scope | 2026-11-14 |
| test-tiering-assessment-api.test.reliability.expedia.comapi, test | In scope | 2026-11-14 |
| tiering-assessment-api.test.reliability.expedia.comapi, test | In scope | 2026-11-14 |
7,377 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.