H1 HackerOne LIVE
Trip.com
pays bountiesTABLE ↗
Open on HackerOne ↗
- listed
- before tracking
- tracked since
- 2026-09-20
- website
- http://trip.com
- managed triage
- yes
- response efficiency
- 91%
- first response
- 6h avg
- time to bounty
- 217h avg
16 targets in scope
| asset | type | bounty | max sev | seen |
|---|---|---|---|---|
com.trip.android | mobile | yes | critical | 2026-09-20 |
com.trip.ios | mobile | yes | critical | 2026-09-20 |
*.staging.travix.com | other | no | critical | 2026-09-20 |
<locale>.trip.com | other | yes | critical | 2026-09-20 |
*.budgetair.com | wildcard | yes | critical | 2026-09-20 |
*.cheaptickets.nl | wildcard | yes | critical | 2026-09-20 |
*.flugladen.de | wildcard | yes | critical | 2026-09-20 |
*.trainpal.com,*.mytrainpal.com | wildcard | yes | critical | 2026-09-20 |
*.travix.com | wildcard | yes | critical | 2026-09-20 |
*.travix.io | wildcard | yes | critical | 2026-09-20 |
*.trip.biz | wildcard | yes | critical | 2026-09-20 |
*.trip.com | wildcard | yes | critical | 2026-09-20 |
*.triplinkintl.com | wildcard | yes | critical | 2026-09-20 |
*.tyo-masters.co.jp | wildcard | yes | critical | 2026-09-20 |
*.vayama.com | wildcard | yes | critical | 2026-09-20 |
*.vliegwinkel.nl | wildcard | yes | critical | 2026-09-20 |
4 out of scope — black ICE, don't touch
*.dev.travix.comwildcard*.development.travix.comwildcard*.playground.travix.comwildcard*.stg.travix.comwildcard
Change log
get alerts ↗No changes since we started tracking on 2026-09-20.