basecamp

HackerOneView on HackerOne

RawAI Enhanced

16

In Scope

3

Out of Scope

In-Scope Assets (16)

Asset	Category	Bounty	Quick Links
*.hey.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
3.basecamp.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
Basecamp.app	BINARY	Yes	-
HEY.app	BINARY	Yes	-
HEY.exe	BINARY	Yes	-
basecamp3.exe	BINARY	Yes	-
com.basecamp.bc3	ANDROID	Yes	Play Store APKPure APKMirror
com.basecamp.bc3-ios	IOS	Yes	-
com.basecamp.hey	ANDROID	Yes	Play Store APKPure APKMirror
com.hey.app.ios	IOS	Yes	-
fizzy.do	URL	No	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
hey-mail	BINARY	Yes	-
https://github.com/basecamp/once-campfire	CODE	No	-
https://github.com/basecamp/writebook	CODE	No	-
launchpad.37signals.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
world.hey.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (3)

Asset	Category	Bounty
*.basecamphq.com	WILDCARD	No
*.highrisehq.com	WILDCARD	No
basecamp.com	URL	No

Scope Changes (57)

Mar 17, 2026

Change	Asset	Category	Scope	Time
Added	https://github.com/basecamp/once-campfire	CODE	In Scope	09:39
Removed	once: campfire	CODE	In Scope	09:39
Added	https://github.com/basecamp/once-campfire	CODE	In Scope	09:39
Added	https://github.com/basecamp/writebook	CODE	In Scope	09:39
Removed	fizzy.do	URL	In Scope	09:39
Added	https://github.com/basecamp/writebook	CODE	In Scope	09:39

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	com.basecamp.bc3-ios	IOS	In Scope	19:08
Added	hey.exe	BINARY	In Scope	19:08
Added	fizzy.do	URL	In Scope	19:08
Added	*.highrisehq.com	WILDCARD	Out of Scope	19:08
Added	launchpad.37signals.com	URL	In Scope	19:08
Added	com.basecamp.bc3	ANDROID	In Scope	19:08
Added	*.hey.com	WILDCARD	In Scope	19:08
Added	hey.app	BINARY	In Scope	19:08
Added	once: campfire	CODE	In Scope	19:08
Added	world.hey.com	URL	In Scope	19:08
Added	*.basecamphq.com	WILDCARD	Out of Scope	19:08
Added	basecamp.app	BINARY	In Scope	19:08
Added	com.hey.app.ios	IOS	In Scope	19:08
Added	basecamp.com	URL	Out of Scope	19:08
Added	3.basecamp.com	URL	In Scope	19:08
Added	basecamp3.exe	BINARY	In Scope	19:08
Added	com.basecamp.hey	ANDROID	In Scope	19:08
Added	hey-mail	BINARY	In Scope	19:08

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	hey-mail	BINARY	In Scope	00:59
Added	hey.exe	BINARY	In Scope	00:59
Added	basecamp3.exe	BINARY	In Scope	00:59
Added	once: campfire	CODE	In Scope	00:59
Added	hey.app	IOS	In Scope	00:59
Added	basecamp.app	IOS	In Scope	00:59
Added	world.hey.com	URL	In Scope	00:40
Added	*.highrisehq.com	WILDCARD	Out of Scope	00:40
Added	3.basecamp.com	URL	In Scope	00:40
Added	com.basecamp.bc3	ANDROID	In Scope	00:40
Added	fizzy.do	URL	In Scope	00:40
Added	com.basecamp.hey	ANDROID	In Scope	00:40
Added	*.basecamphq.com	WILDCARD	Out of Scope	00:40
Added	basecamp.com	URL	Out of Scope	00:40
Added	launchpad.37signals.com	URL	In Scope	00:40
Added	com.basecamp.bc3-ios	IOS	In Scope	00:40
Added	*.hey.com	WILDCARD	In Scope	00:40
Added	com.hey.app.ios	IOS	In Scope	00:40

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	hey-mail	BINARY	In Scope	21:38
Removed	world.hey.com	URL	In Scope	21:38
Removed	fizzy.do	URL	In Scope	21:38
Removed	3.basecamp.com	URL	In Scope	21:38
Removed	launchpad.37signals.com	URL	In Scope	21:38
Removed	basecamp3.exe	BINARY	In Scope	21:38
Removed	basecamp.app	BINARY	In Scope	21:38
Removed	com.basecamp.bc3-ios	IOS	In Scope	21:38
Removed	com.basecamp.bc3	ANDROID	In Scope	21:38
Removed	*.hey.com	WILDCARD	In Scope	21:38
Removed	com.hey.app.ios	IOS	In Scope	21:38
Removed	com.basecamp.hey	ANDROID	In Scope	21:38
Removed	hey.app	BINARY	In Scope	21:38
Removed	hey.exe	BINARY	In Scope	21:38
Added	once: campfire	CODE	In Scope	19:11