Skip to content
Connect AISign inSign up free

Bug bounty program

JE

JetBlue

Open on HackerOneAtlas
Platform
HackerOne
Bounties
None
Assets in scope
16
Disclosed reports
7
Subdomains
938

Most upvoted reports7

Most upvoted reports of JetBlue
ReportWeaknessDisclosedBountyVotes
Sensitive information disclosure on grafanaAnalysed#1448218No weakness recorded2024-02-26–45
Dom-Based XSS on parameter ?vsid=Analysed#1452149Cross-site Scripting2022-12-30–27
Access to tomcat-manager with default credsAnalysed#1267174Authentication2023-02-05–24
Open RedirectionAnalysed#1267176Open Redirect2023-02-05–21
Open Redirect - https://████████.jetblue.com/███?url=Analysed#1851969Open Redirect2023-03-13–21
Open RedirectAnalysed#1457736Open Redirect2023-01-29–13
XSS via Vuln Rendertron Instance At `██████████.jetblue.com/render/*`Analysed#1853061Cross-site Scripting2023-06-20–13

Subdomains938

Root
Scope
Name suggests
First seen
Text file938 names
Subdomains of JetBlue
NameScopeFirst seen
ordermaker.paisly.jetblue.comIn scope2026-11-14
orderretrieve-carrental.paisly.jetblue.comIn scope2026-11-14
pe-prodeng-jtpsdk-pci.paisly.jetblue.comIn scope2026-11-14
pe-react-web-components.paisly.jetblue.comIn scope2026-11-14
pi-b6-fit-events.paisly.jetblue.comIn scope2026-11-14
pi-c-abg-carloc.paisly.jetblue.comIn scope2026-11-14
pi-c-abg-order.paisly.jetblue.comIn scope2026-11-14
pi-c-allianz-updates.paisly.jetblue.comIn scope2026-11-14
pi-c-expedia-content.paisly.jetblue.comIn scope2026-11-14
pi-c-expedia-order.paisly.jetblue.comIn scope2026-11-14
pi-c-hbeds-cont.paisly.jetblue.comIn scope2026-11-14
pi-exp-prop-srch.paisly.jetblue.comIn scope2026-11-14
pi-hotel-order.paisly.jetblue.comIn scope2026-11-14
pi-mytrip-url.paisly.jetblue.comIn scope2026-11-14
pi-offer-b6-xsell.paisly.jetblue.comIn scope2026-11-14
pi-offer-car.paisly.jetblue.comIn scope2026-11-14
pi-offer-ecomm.paisly.jetblue.comIn scope2026-11-14
pi-offer-hotel.paisly.jetblue.comIn scope2026-11-14
pi-offer-insure-jb.paisly.jetblue.comIn scope2026-11-14
pi-order-insure-jb.paisly.jetblue.comIn scope2026-11-14
pi-property-content.paisly.jetblue.comIn scope2026-11-14
sdk.paisly.jetblue.comIn scope2026-11-14
pay.jetblue.comIn scope2026-11-14
pbs.jetblue.comIn scope2026-11-14
perspective.jetblue.comIn scope2026-11-14
perspective5.jetblue.comIn scope2026-11-14
www.perspective5.jetblue.comIn scope2026-11-14
photos.jetblue.comIn scope2026-11-14
pilots.jetblue.comIn scope2026-11-14
la3ek9znbnb3nj98k4tl.pilots.jetblue.comIn scope2026-11-14
www.pilots.jetblue.comIn scope2026-11-14
prd-cua-orgeng.jetblue.comIn scope2026-11-14
prd-egw-orgeng.jetblue.comIn scope2026-11-14
prd-orgeng.jetblue.comIn scope2026-11-14
prdase.jetblue.comIn scope2026-11-14
prismcentral.jetblue.comIn scope2026-11-14
promo-app.jetblue.comIn scope2026-11-14
promo-link.jetblue.comIn scope2026-11-14
pvbm.jetblue.comIn scope2026-11-14
qa-orgeng.jetblue.comtestIn scope2026-11-14
qws.jetblue.comIn scope2026-11-14
www.qws.jetblue.comIn scope2026-11-14
rapid7.jetblue.comIn scope2026-11-14
www.rapid7.jetblue.comIn scope2026-11-14
rcv.jetblue.comIn scope2026-11-14
rcvprdc.jetblue.comIn scope2026-11-14
rcvprde.jetblue.comIn scope2026-11-14
rcvqa2.jetblue.comIn scope2026-11-14
rcvstgc.jetblue.comIn scope2026-11-14
reimbursements.jetblue.comIn scope2026-11-14
www.reimbursements.jetblue.comIn scope2026-11-14
reports.jetblue.comIn scope2026-11-14
reports2.jetblue.comIn scope2026-11-14
reportsinternal.jetblue.comIn scope2026-11-14
reportsstg.jetblue.comIn scope2026-11-14
responsibilityreport.jetblue.comIn scope2026-11-14
mail.responsibilityreport.jetblue.commailIn scope2026-11-14
mta-sts.mail.responsibilityreport.jetblue.commailIn scope2026-11-14
www.responsibilityreport.jetblue.comIn scope2026-11-14
sabre-sso-manager.jetblue.comadmin, authIn scope2026-11-14
sandboxagentdesktop.jetblue.comIn scope2026-11-14
elastic-admin.sandboxagentdesktop.jetblue.comadmin, dataIn scope2026-11-14
sclae.jetblue.comIn scope2026-11-14
sclfewebext.jetblue.comIn scope2026-11-14
sclwacext.jetblue.comIn scope2026-11-14
sclwc.jetblue.comIn scope2026-11-14
secureftp.jetblue.comIn scope2026-11-14
securemail.jetblue.comIn scope2026-11-14
www.securemail.jetblue.comIn scope2026-11-14
securenet-pppoe-01ureftp.jetblue.comIn scope2026-11-14
servicedesk.jetblue.comIn scope2026-11-14
shop.jetblue.comIn scope2026-11-14
shoptrue.jetblue.comIn scope2026-11-14
sip.jetblue.comIn scope2026-11-14
sipocs.jetblue.comIn scope2026-11-14
sites.jetblue.comIn scope2026-11-14
sites-ibp.jetblue.comIn scope2026-11-14
sites2.jetblue.comIn scope2026-11-14
sites2-ibp.jetblue.comIn scope2026-11-14
smartsuitecloud-prod.jetblue.comIn scope2026-11-14
smartsuitecloud-qa.jetblue.comtestIn scope2026-11-14
smartsuitecloud-stg.jetblue.comstagingIn scope2026-11-14
smartsuiteprod.jetblue.comIn scope2026-11-14
www.smartsuiteprod.jetblue.comIn scope2026-11-14
smartsuitestg.jetblue.comIn scope2026-11-14
www.smartsuitestg.jetblue.comIn scope2026-11-14
smetrics.jetblue.comIn scope2026-11-14
somnistats.jetblue.comIn scope2026-11-14
spf1.jetblue.comIn scope2026-11-14
spf2.jetblue.comIn scope2026-11-14
spf3.jetblue.comIn scope2026-11-14
spf4.jetblue.comIn scope2026-11-14
spf6.jetblue.comIn scope2026-11-14
sponsoredportal.jetblue.comIn scope2026-11-14
spsearch.jetblue.comIn scope2026-11-14
ssckskmgr01.jetblue.comIn scope2026-11-14
stg-atcslotoptimizer.jetblue.comstagingIn scope2026-11-14
stg-cua-orgeng.jetblue.comstagingIn scope2026-11-14
stg-egw-orgeng.jetblue.comstagingIn scope2026-11-14
stg-kioskcheckin.jetblue.comstagingIn scope2026-11-14

933 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated