exness

HackerOneView on HackerOne

RawAI Enhanced

14

In Scope

1

Out of Scope

In-Scope Assets (14)

Asset	Category	Bounty	Quick Links
Any subdomain application issue	OTHER	No	-
Any subdomain infrastructure issue	OTHER	No	-
Exness Investor	IOS	Yes	-
Exness Trade: Online Trading	IOS	Yes	-
External service data leakage	OTHER	No	-
api.excalls.mobi	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
com.exness.android.pa	ANDROID	Yes	Play Store APKPure APKMirror
exness.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
exnessaffiliates.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://my.exness.com/pa/pim/manager	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://my.exness.com/webtrading/	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
my.exness.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
pay.ibex.exchange	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
pwapi.ex2b.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (1)

Asset	Category	Bounty
stat.* (e.g. stat.exnessaffiliates.com)	URL	No