This host is apps.expediapartnercentral.com.triageables.site — the app treats it as an internal Expedia Partner Central domain because its hostname merely *contains* the string "apps.expediapartnercentral.com".
Your partner API bearer token was just sent to this server in the Authorization header.
PoC — Expedia Partner Central Android