swapcard

YesWeHackView on YesWeHack
RawAI Enhanced
12
In Scope
12
Out of Scope
In-Scope Assets (12)
AssetCategoryBountyQuick Links
api.swapcard.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
app.swapcard.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
chat-api.swapcard.com/graphqlURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
developer.swapcard.com/event-admin/graphqlURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
https://apps.apple.com/fr/app/swapcard/id879488719IOSYes-
https://play.google.com/store/apps/details?id=com.swapcard.apps.android&hl=frANDROIDYes
Play StoreAPKPureAPKMirror
img.swapcard.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
login.swapcard.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
studio-api.swapcard.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
studio.swapcard.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
t.swapcard.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
team.swapcard.comURLYes
crt.shGoogleShodanSecurityTrailsWaybackDNSdumpsterVirusTotalAlienVault OTXGitHubFofa
Out-of-Scope Assets (12)
AssetCategoryBounty
*dev.swapcard.comOTHERYes
By default all the endpoints that are not listed in the allowed scopes are out of scope of the program.OTHERYes
aide.swapcard.com (Zoho)OTHERYes
blog.swapcard.com (Hubspot)OTHERYes
books.swapcard.com (Zoho)OTHERYes
c.swapcard.comOTHERYes
help.swapcard.com (Zoho)OTHERYes
l.swapcard.comOTHERYes
page.swapcard.comOTHERYes
sentry.swapcard.com (Except if you notice a miss-configuration)OTHERYes
survey.swapcard.comOTHERYes
www.swapcard.com (static corporate website)OTHERYes
Scope Changes (84)
Feb 25, 2026
ChangeAssetCategoryScopeTime
Addedc.swapcard.comOTHEROut of Scope19:09
Addedsentry.swapcard.com (except if you notice a miss-configuration)OTHEROut of Scope19:09
Addedapi.swapcard.comURLIn Scope19:09
Addedchat-api.swapcard.com/graphqlURLIn Scope19:09
Addeddeveloper.swapcard.com/event-admin/graphqlURLIn Scope19:09
Addedstudio-api.swapcard.comURLIn Scope19:09
Addedstudio.swapcard.comURLIn Scope19:09
Addedt.swapcard.comURLIn Scope19:09
Added*dev.swapcard.comWILDCARDOut of Scope19:09
Addedblog.swapcard.com (hubspot)OTHEROut of Scope19:09
Addedteam.swapcard.comURLIn Scope19:09
Addedhttps://apps.apple.com/fr/app/swapcard/id879488719IOSIn Scope19:09
Addedaide.swapcard.com (zoho)OTHEROut of Scope19:09
Addedhelp.swapcard.com (zoho)OTHEROut of Scope19:09
Addedbooks.swapcard.com (zoho)OTHEROut of Scope19:09
Addedl.swapcard.comOTHEROut of Scope19:09
Addedwww.swapcard.com (static corporate website)OTHEROut of Scope19:09
Addedapp.swapcard.comURLIn Scope19:09
Addedimg.swapcard.comURLIn Scope19:09
Addedby default all the endpoints that are not listed in the allowed scopes are out of scope of the programOTHEROut of Scope19:09
Addedpage.swapcard.comOTHEROut of Scope19:09
Addedsurvey.swapcard.comOTHEROut of Scope19:09
Addedlogin.swapcard.comURLIn Scope19:09
Addedhttps://play.google.com/store/apps/details?id=com.swapcard.apps.android&hl=frANDROIDIn Scope19:09
Feb 22, 2026
ChangeAssetCategoryScopeTime
Addedpage.swapcard.comOTHEROut of Scope00:52
Addedchat-api.swapcard.com/graphqlURLIn Scope00:52
Addedstudio-api.swapcard.comURLIn Scope00:52
Addedapp.swapcard.comURLIn Scope00:52
Addedstudio.swapcard.comURLIn Scope00:52
Addedimg.swapcard.comURLIn Scope00:52
Addedblog.swapcard.com (hubspot)OTHEROut of Scope00:52
Addedhelp.swapcard.com (zoho)OTHEROut of Scope00:52
Addedc.swapcard.comOTHEROut of Scope00:52
Addeddeveloper.swapcard.com/event-admin/graphqlURLIn Scope00:52
Addedhttps://apps.apple.com/fr/app/swapcard/id879488719IOSIn Scope00:52
Addedaide.swapcard.com (zoho)OTHEROut of Scope00:52
Addedl.swapcard.comOTHEROut of Scope00:52
Added*dev.swapcard.comWILDCARDOut of Scope00:52
Addedlogin.swapcard.comURLIn Scope00:52
Addedteam.swapcard.comURLIn Scope00:52
Addedby default all the endpoints that are not listed in the allowed scopes are out of scope of the programOTHEROut of Scope00:52
Addedbooks.swapcard.com (zoho)OTHEROut of Scope00:52
Addedsentry.swapcard.com (except if you notice a miss-configuration)OTHEROut of Scope00:52
Addedsurvey.swapcard.comOTHEROut of Scope00:52
Addedwww.swapcard.com (static corporate website)OTHEROut of Scope00:52
Addedapi.swapcard.comURLIn Scope00:52
Addedhttps://play.google.com/store/apps/details?id=com.swapcard.apps.android&hl=frANDROIDIn Scope00:52
Addedt.swapcard.comURLIn Scope00:52
Feb 21, 2026
ChangeAssetCategoryScopeTime
Removedwww.swapcard.com (static corporate website)OTHEROut of Scope21:40
Removedt.swapcard.comURLIn Scope21:40
Removedby default all the endpoints that are not listed in the allowed scopes are out of scope of the programOTHEROut of Scope21:40
Removed*dev.swapcard.comOTHEROut of Scope21:40
Removedpage.swapcard.comOTHEROut of Scope21:40
Removedblog.swapcard.com (hubspot)OTHEROut of Scope21:40
Removedaide.swapcard.com (zoho)OTHEROut of Scope21:40
Removedhelp.swapcard.com (zoho)OTHEROut of Scope21:40
Removedbooks.swapcard.com (zoho)OTHEROut of Scope21:40
Removedl.swapcard.comOTHEROut of Scope21:40
Removedc.swapcard.comOTHEROut of Scope21:40
Removedsentry.swapcard.com (except if you notice a miss-configuration)OTHEROut of Scope21:40
Removedsurvey.swapcard.comOTHEROut of Scope21:40
Removedapi.swapcard.comURLIn Scope21:40
Removedchat-api.swapcard.com/graphqlURLIn Scope21:40
Removeddeveloper.swapcard.com/event-admin/graphqlURLIn Scope21:40
Removedlogin.swapcard.comURLIn Scope21:40
Removedstudio-api.swapcard.comURLIn Scope21:40
Removedapp.swapcard.comURLIn Scope21:40
Removedstudio.swapcard.comURLIn Scope21:40
Removedteam.swapcard.comURLIn Scope21:40
Removedhttps://apps.apple.com/fr/app/swapcard/id879488719IOSIn Scope21:40
Removedhttps://play.google.com/store/apps/details?id=com.swapcard.apps.android&hl=frANDROIDIn Scope21:40
Removedimg.swapcard.comURLIn Scope21:40
Added*dev.swapcard.comOTHEROut of Scope00:33
Addedpage.swapcard.comOTHEROut of Scope00:33
Addedblog.swapcard.com (hubspot)OTHEROut of Scope00:33
Addedaide.swapcard.com (zoho)OTHEROut of Scope00:33
Addedhelp.swapcard.com (zoho)OTHEROut of Scope00:33
Addedbooks.swapcard.com (zoho)OTHEROut of Scope00:33
Addedl.swapcard.comOTHEROut of Scope00:33
Addedc.swapcard.comOTHEROut of Scope00:33
Addedsentry.swapcard.com (except if you notice a miss-configuration)OTHEROut of Scope00:33
Addedsurvey.swapcard.comOTHEROut of Scope00:33
Addedwww.swapcard.com (static corporate website)OTHEROut of Scope00:33
Addedby default all the endpoints that are not listed in the allowed scopes are out of scope of the programOTHEROut of Scope00:33