h1domains

# h1domains
hackerone "in-scope" domains

`python3 hackerone.py`
## Domains with Bounties (Last Updated Mon Jan 19 11:08:58 UTC 2026)
```
www.visa.com.cy
*.vayama.com
access.remitly.com
taxis.booking.com
http://bumba.global
https://ebctest.cybersource.com/partner
*.varonis.io
www.kpharmacyllc.com
www.visa.com.tr
identity-dev.nba.com
sandbox.authorize.net
www.starbucks.com.cn/
www.wnba.com
*.mercadolibre.com.pe
mcdalerts-dev.nba.com
https://bugbounty-ctf.1password.com/
ablink.info.remitly.com
www.dyson.co.th
tax.audible.com
www.dyson.ch
api.remitly.io
mcd-uat.nba.com
worldcoin.org
www-ng.nba.com
www.dyson.com.ro
app.koho.ca
ews-fusion.my.site.com
app.frontapp.com
https://ebctest.cybersource.com/prefs
business.truecaller.com
www.yellowpepper.com
https://www.flipkart.com
*.worldcoin.org
my.visa.fr
www.dyson.com.ua
*.mercadolibre.com.uy
*.capitalone.com
firefox.settings.services.mozilla.com
api.dyson.co.uk
api.tideplatform.in
mercadoplay.pe
oauth-sandbox.gocardless.com
visa.com.bo
*.mlstatic.com
www.cybersource.com
stats.wnba.com
visa.com.jm
fusion.tradepmr.com
*.mercadolibre.com.co
shop.dyson.co.za
reach.hostinger.com
www.truecaller.com
seller.temu.com
cart.starbucks.co.jp
mercury.wnba.com
api.vault.chiatest.net
cares.nba.com
pay-sandbox.gocardless.com
em9457.team.bitstamp.net
research.23andme.com
*.tide.co
https://ebctest.cybersource.com/jobs
*.bybit.com
valkyries.wnba.com
sites.fareharbor.com
https://ebctest.cybersource.com/listmanager
manage-uat.nba.com
openfinance.unico.io
nbafedsvc-dev.nba.com
https://gcsm.oppoit.com/
*.gethypr.com
https://ebctest.cybersource.com/products/virtual-terminal
monitor.mozilla.org
cms.nba.com
www.mercadolibre.com.do
*.mercadolibre.com.mx
www.six-group.com
www.dyson.ie
*.mercadopago.com.br
https://ebctest.cybersource.com/casemanagement
eligibility.khealth.com
www.practicalmoneyskills.org
https://secure.newegg.com
treatments.khealth.com
https://ebctest.cybersource.com/sms
https://sdk-h1.unico.io/createprocess
ask.khealth.com
go.stripchat.com
mcd.nba.com
shop.whoop.com
rise-api.stg.inspectorio.com
alfred-uat-31.nonprod.syfe.com
zellepay.force.com
openapi.m-pesa.com
media.remitly.io
news.remitly.com
customerevents.netflix.com
tucarro.com.co
www.sheer.com
www.fi.dyson.com
gleague-qa.nba.com
meliplay.com.ar
content-api-prod.nba.com
core-api-dev.nba.com
cardpayments.remitly.io
www.visa.com.ge
*.mercadolibre.cl
aw.visa.com
kaccount.khealth.com
id.oppo.com
*.bybit.tr
connect.secure.wellsfargo.com
biolivre.com.br
cdn.nba.com
*.rhinternal.net
www-dev.nba.com
*.playtika.com
www.mercadolibre.com.gt
docs.redoxengine.com
*.platacard.mx
api.dyson.ch
*.mercadopago.com.co
www.visa.com.ph
https://console.neon.tech/api/v2/
shop.dyson.tw
mcd-dev.nba.com
meechum.netflix.com
https://ebctest.cybersource.com/processorconfigapi
*.zellepay.com
app.whoop.com
portal.taxi.booking.com
content-api-nextgen-prod.nba.com
https://console-stage.neon.build/
identity.nba.com
www.visa.com.hr
www.starbucks.co.jp
www.dyson.co.nz
www.tradepmr.com
account.booking.com
dream-qa.wnba.com
*.zelle.com
api.dyson.no
api.mergify.com
http://secure-iphone-xml.booking.com/json/
phone-validation.taxi.booking.com
api.au.frontegg.com
dream.wnba.com
sun-qa.wnba.com
ebctest.cybersource.com
*.varonis.net
https://ebctest.cybersource.com/cds/
*ripiotrade.co
https://pay.payzippy.com
zelleservice.my.site.com
api.robinhood.com
www.koho.ca
*.monopoly-poker.com
www.ddfcontent.com
www.dyson.pt
www.dyson.no
app3.rewire.to
lockervision.nba.com
api-uat-bugbounty.nonprod.syfe.com
lynx-dev.wnba.com
klarnacdn.net
readonly.fareharbor.com
m-pesa.africa
arc.net
http://auth.khealth.com/cedars/sign-up
*.dev.remitly.com
app.blueskytravelvietnam.com
profiler.firefox.com
firefox-ci-tc.services.mozilla.com
tumoto.com
education.23andme.com
id.nba.com
www.dyson.hk
push.services.mozilla.com
www.nba.com
http://wellsfargo.com
core-api-qa.nba.com
https://ebctest.cybersource.com/ums
tempo-dev.wnba.com
http://collaboration.rei.com
www.dyson.com
www.netflix.com
vote.nba.com
cweb-ott-devint.nba.com
sparks-dev.wnba.com
https://api.bykea.net
mercadoplay.com.pe
login.starbucks.co.jp
sustentabilidadmercadolibre.com/
pricerunner.com
secure.newegg.com
*.worldcoin.dev
www.zooplus.de
core-api-uc.nba.com
cars.booking.com
wallet.tg
https://www.oppo.com/th/store
*.slotomania.com
_16928ca3f53f40a48a751be40fa24e4c.bitstamp.net
dream-dev.wnba.com
cards.remitly.io
*.eu.floqast.app
rei.com
*.hubspotemail.net
yourdomain.freshcaller.com
fever-dev.wnba.com
*-asia-south1.truecaller.com
app.stg.inspectorio.com
manage-teams-dev.nba.com
sparks-qa.wnba.com
stats-trafficcop-prod.nba.com
*.gocardless.com
developer.visa.com
store.23andme.com
business-resources.truecaller.com
*.hs-sites(-eu1)?.com
furycloud.io
https://maps.bykea.net
api.khealth.com
www.mercadolivre.com
nmtracking.netflix.com
*.capitalone.ca
www.mercadolibre.com.ni
sparks.wnba.com
cpanel.hostinger.com
http://api.koho.ca/1.0
mcdalerts-qa.nba.com
www.dyson.fr
*.prod.ftl.netflix.com
www.visa.com.kh
http://testnet.bybit.eu
direct-demo.

... (truncated)