exness

HackerOneView on HackerOne

RawAI Enhanced

14

In Scope

0

Out of Scope

In-Scope Assets (14)

Asset	Category	Bounty	Quick Links
Any subdomain application issue	OTHER	No	-
Any subdomain infrastructure issue	OTHER	No	-
Exness Investor	IOS	Yes	-
Exness Trade: Online Trading	IOS	Yes	-
External service data leakage	OTHER	No	-
api.excalls.mobi	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
com.exness.android.pa	ANDROID	Yes	Play Store APKPure APKMirror
exness.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
exnessaffiliates.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://my.exness.com/pa/pim/manager	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://my.exness.com/webtrading/	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
my.exness.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
pay.ibex.exchange	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
pwapi.ex2b.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Scope Changes (58)

May 22, 2026

Change	Asset	Category	Scope	Time
Removed	com.exness.investments	ANDROID	In Scope	12:26
Removed	https://my.exness.com/pa/socialtrading	URL	In Scope	12:26
Removed	social-trading.exness.com	URL	In Scope	12:26
Removed	exness social trading	IOS	In Scope	12:26

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	exnessaffiliates.com	URL	In Scope	19:09
Added	exness.com	URL	In Scope	19:09
Added	exness social trading	IOS	In Scope	19:09
Added	exness investor	IOS	In Scope	19:09
Added	com.exness.android.pa	ANDROID	In Scope	19:09
Added	any subdomain application issue	OTHER	In Scope	19:09
Added	any subdomain infrastructure issue	OTHER	In Scope	19:09
Added	api.excalls.mobi	URL	In Scope	19:09
Added	my.exness.com	URL	In Scope	19:09
Added	social-trading.exness.com	URL	In Scope	19:09
Added	pwapi.ex2b.com	URL	In Scope	19:09
Added	external service data leakage	OTHER	In Scope	19:09
Added	https://my.exness.com/webtrading	URL	In Scope	19:09
Added	https://my.exness.com/pa/socialtrading	URL	In Scope	19:09
Added	https://my.exness.com/pa/pim/manager	URL	In Scope	19:09
Added	exness trade: online trading	IOS	In Scope	19:09
Added	com.exness.investments	ANDROID	In Scope	19:09
Added	pay.ibex.exchange	URL	In Scope	19:09

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	pay.ibex.exchange	URL	In Scope	00:41
Added	com.exness.investments	ANDROID	In Scope	00:41
Added	exnessaffiliates.com	URL	In Scope	00:41
Added	exness.com	URL	In Scope	00:41
Added	api.excalls.mobi	URL	In Scope	00:41
Added	exness social trading	IOS	In Scope	00:41
Added	my.exness.com	URL	In Scope	00:41
Added	social-trading.exness.com	URL	In Scope	00:41
Added	exness trade: online trading	IOS	In Scope	00:41
Added	com.exness.android.pa	ANDROID	In Scope	00:41
Added	external service data leakage	OTHER	In Scope	00:41
Added	any subdomain infrastructure issue	OTHER	In Scope	00:41
Added	https://my.exness.com/pa/socialtrading	URL	In Scope	00:41
Added	https://my.exness.com/pa/pim/manager	URL	In Scope	00:41
Added	pwapi.ex2b.com	URL	In Scope	00:41
Added	any subdomain application issue	OTHER	In Scope	00:41
Added	https://my.exness.com/webtrading	URL	In Scope	00:41
Added	exness investor	IOS	In Scope	00:41

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	my.exness.com	URL	In Scope	21:38
Removed	pay.ibex.exchange	URL	In Scope	21:38
Removed	https://my.exness.com/webtrading	URL	In Scope	21:38
Removed	exnessaffiliates.com	URL	In Scope	21:38
Removed	social-trading.exness.com	URL	In Scope	21:38
Removed	https://my.exness.com/pa/socialtrading	URL	In Scope	21:38
Removed	https://my.exness.com/pa/pim/manager	URL	In Scope	21:38
Removed	pwapi.ex2b.com	URL	In Scope	21:38
Removed	exness.com	URL	In Scope	21:38
Removed	api.excalls.mobi	URL	In Scope	21:38
Removed	exness trade: online trading	IOS	In Scope	21:38
Removed	exness social trading	IOS	In Scope	21:38
Removed	exness investor	IOS	In Scope	21:38
Removed	com.exness.android.pa	ANDROID	In Scope	21:38
Removed	com.exness.investments	ANDROID	In Scope	21:38
Added	any subdomain infrastructure issue	OTHER	In Scope	19:11
Added	any subdomain application issue	OTHER	In Scope	19:11
Added	external service data leakage	OTHER	In Scope	19:11