Target Policy

https://hackerone.com/kayak?type=team

---

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• kayak.ai

  URL

  critical
• www.checkfelix.com

  URL

  critical
• com.kayak.android

  ---

  The most recent version of this app is in scope

  GOOGLE_PLAY_APP_ID

  critical
• kayak.com/moira/ehoe/*

  ---

  including local versions

  URL

  none
• klassereise.checkfelix.com

  URL

  none
• www.kayak.com

  ---

  including localised versions: e.g. www.kayak.de, www.kayak.fr and www.kayak.co.uk, etc. Please check https://www.kayak.com/global for full list of domains that belong to us.

  URL

  critical
• *.kayak.com

  WILDCARD

  critical
• com.kayak.travel

  ---

  The most recent version of this app is in scope

  APPLE_STORE_APP_ID

  critical
• business.kayak.com

  URL

  critical
• www.mundi.com.br

  URL

  critical
• kayak.com/hotelowner/*

  ---

  Including local versions

  URL

  none
• www.swoodoo.com

  URL

  critical
• www.hotelscombined.com

  ---

  including local versions: e.g. www.hotelscombined.com.au, www.hotelscombined.co.kr, etc. Please check https://www.kayak.com/global for full list of domains that belong to us.

  URL

  critical
• kayak.com/guides/*

  ---

  Anything related to /guides/ on any domain is ineligible for submission since this feature will be removed soon.

  URL

  none
• www.momondo.com

  ---

  including localised versions: e.g. www.momondo.dk, www.momondo.se, etc.

  URL

  critical
• www.cheapflights.com

  ---

  including local versions: e.g. www.cheapflights.co.uk, www.cheapflights.com.au, etc. Please check https://www.kayak.com/global for full list of domains that belong to us.

  URL

  critical

Target Scope Domains

• business.kayak.com
• kayak.ai
• kayak.com
• www.cheapflights.com
• www.checkfelix.com
• www.hotelscombined.com
• www.kayak.com
• www.momondo.com
• www.mundi.com.br
• www.swoodoo.com

• 410 Subdomains
• 768 Endpoints
• Download wordlist

---

Last Finished Scan:

---