Scope Updates

Recent changes to bug bounty program scopes.

	Asset / Change	Scope Type	Program URL	Platform	Timestamp
+	Program Added		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-15 18:00
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
+	Program Removed		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-15 17:30
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
	Asset Added: URL: https://ebctest.cybersource.com/cds/	In Scope	https://hackerone.com/visa	hackerone	2025-08-15 13:42
+	Program Added		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-08-15 13:00
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Added		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-15 13:00
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
+	Program Removed		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-15 09:30
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
+	Program Added		https://app.intigriti.c.../privatebankdelen/detail	intigriti	2025-08-15 09:00
Associated Assets: URL: api.digital.delen.be URL: api.digital.delen.lu URL: app.delen.be URL: app.delen.ch URL: app.delen.lu URL: auth.digital.delen.be URL: auth.digital.delen.lu ANDROID: be.delen.digital IOS: delen/id1064839588 URL: login.delen.be URL: login.delen.ch URL: login.delen.lu URL: login.oyens.com URL: status.delen.be URL: sts.delen.be URL: www.cadelam.be URL: www.cadelux.lu/en URL: www.delen.bank URL: www.delen.be/en
+	Program Added		https://app.intigriti.c...ido/aikidoruntime/detail	intigriti	2025-08-15 09:00
Associated Assets: OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-node#False Positive OTHER: https://github.com/AikidoSec/firewall-python#False Positive
+	Program Added		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-15 08:30
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
+	Program Removed		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-15 08:00
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
+	Program Added		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-14 20:30
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
+	Program Removed		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-14 20:00
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
	Asset Added: URL: visa.com.bo	In Scope	https://hackerone.com/visa	hackerone	2025-08-14 17:57
	Asset Removed: APPLE_STORE_APP_ID: com.zellepay.zelle	In Scope	https://hackerone.com/early_warning	hackerone	2025-08-14 17:37
	Asset Removed: GOOGLE_PLAY_APP_ID: com.zellepay.zelle	In Scope	https://hackerone.com/early_warning	hackerone	2025-08-14 17:37
+	Program Added		https://app.intigriti.c...ms/suivo/suivoweb/detail	intigriti	2025-08-14 17:30
Associated Assets: URL: aweb.suivo.com URL: asupport.suivo.com
+	Program Added		https://app.intigriti.c...hood/robinhoodbbp/detail	intigriti	2025-08-14 17:30
Associated Assets: WILDCARD: .rhinternal.net WILDCARD: .robinhood.com WILDCARD: *.robinhood.net IOS: 1634080733 IOS: 6462308655 IOS: 938003185 ANDROID: com.robinhood.android ANDROID: com.robinhood.gateway ANDROID: com.robinhood.money URL: fleet.infra.robinhood.net URL: content.research.robinhood.com URL: shop.robinhood.com URL: events.robinhood.com
+	Program Removed		https://app.intigriti.c...datacamp/datacamp/detail	intigriti	2025-08-14 17:00
Associated Assets: URL: app.datacamp.com/certification URL: app.datacamp.com/groups URL: app.datacamp.com/learn URL: assessment-api.datacamp.com URL: assessment-v2.datacamp.com URL: assessment.datacamp.com URL: campus.datacamp.com ANDROID: com.datacamp IOS: https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087 URL: practice.datacamp.com URL: projects.datacamp.com URL: www.datacamp.com URL: www.datacamp.com/datalab WILDCARD: .datacamp.com WILDCARD: .it.datacamp.com URL: app.datacamp.com/recruit URL: ast-viewer.datacamp.com URL: confluence.datacamp.com URL: dccertified.datacamp.com URL: intranet.datacamp.com URL: jira.datacamp.com URL: links.datacamp.com URL: rdocumentation.datacamp.com URL: signature.datacamp.com URL: status.datacamp.com URL: support.datacamp.com URL: talent-jobs-api.datacamp.com
+	Program Removed		https://app.intigriti.c...hood/robinhoodbbp/detail	intigriti	2025-08-14 16:30
Associated Assets: WILDCARD: .rhinternal.net WILDCARD: .robinhood.com WILDCARD: *.robinhood.net IOS: 1634080733 IOS: 6462308655 IOS: 938003185 ANDROID: com.robinhood.android ANDROID: com.robinhood.gateway ANDROID: com.robinhood.money URL: fleet.infra.robinhood.net URL: content.research.robinhood.com URL: shop.robinhood.com URL: events.robinhood.com
+	Program Removed		https://app.intigriti.c...ido/aikidoruntime/detail	intigriti	2025-08-14 16:00
Associated Assets: OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-node#False Positive OTHER: https://github.com/AikidoSec/firewall-python#False Positive
+	Program Added		https://app.intigriti.c...ido/aikidoruntime/detail	intigriti	2025-08-14 14:00
Associated Assets: OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass OTHER: https://github.com/AikidoSec/firewall-node#False Positive OTHER: https://github.com/AikidoSec/firewall-python#False Positive
+	Program Added		https://app.intigriti.c...es/ninjakiwigames/detail	intigriti	2025-08-14 14:00
Associated Assets: URL: analytics.ninjakiwi.com URL: api.ninjakiwi.com URL: guts.ninjakiwi.com WILDCARD: .ninjakiwi.me WILDCARD: .nkstatic.com URL: battles.tv URL: data.ninjakiwi.com URL: ninja.kiwi URL: ninjakiwi.com URL: alerts.ninjakiwi.com URL: boomer2.ninjakiwi.com URL: ct.ninjakiwi.com URL: mynk-dash.ninjakiwi.com URL: mynk.ninjakiwi.com URL: store.ninjakiwi.com URL: support.ninjakiwi.com
+	Program Removed		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-08-14 14:00
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl
+	Program Added		https://app.intigriti.c...s/dropbox/dropbox/detail	intigriti	2025-08-14 13:30
Associated Assets: URL: Dropbox.com URL: sign.dropbox.com URL: HelloSign.com URL: dash.ai OTHER: dash.dropbox.com URL: api.dropbox.com URL: replay.dropbox.com OTHER: Dropbox Desktop Application IOS: 327630330 IOS: 6450553960 IOS: 1080074001 ANDROID: com.dropbox.dash ANDROID: com.dropbox.android URL: HelloFax.com URL: docsend.com URL: app.Reclaim.ai URL: dropbox.com/paper WILDCARD: .dropbox.com WILDCARD: .dropboxer.net WILDCARD: .dropboxforum.com WILDCARD: .dropboxpartners.com WILDCARD: .hellofax.com WILDCARD: .docsend.com WILDCARD: .reclaim.ai WILDCARD: .helloworks.com WILDCARD: *.hellosign.com OTHER: Boxcryptor OTHER: Formswift OTHER: Dropbox Passwords OTHER: Dropbox Capture Windows Desktop App OTHER: Dropbox Capture macOS Desktop App ANDROID: com.dropbox.paper IOS: 1126623662
+	Program Added		https://app.intigriti.c...rgamma/intergamma/detail	intigriti	2025-08-14 13:30
Associated Assets: IOS: 949829216 IOS: 950680989 IOS: 950693949 ANDROID: be.gamma.app.android WILDCARD: kassa.gamma.be/* WILDCARD: kassa.gamma.nl/* WILDCARD: kassa.karwei.nl/* WILDCARD: mijn.gamma.be/* WILDCARD: mijn.gamma.nl/* WILDCARD: mijn.karwei.nl/* ANDROID: nl.gamma.app.android ANDROID: nl.karwei.app.android WILDCARD: www.gamma.be/* WILDCARD: www.gamma.nl/* WILDCARD: www.karwei.nl/* WILDCARD: .gamma.be/ WILDCARD: .gamma.nl/ WILDCARD: .intergamma.cloud WILDCARD: .intergamma.nl/* WILDCARD: .karwei.nl/ WILDCARD: .restintergamma.nl IOS: 1558129454 WILDCARD: .intergamma-test.nl WILDCARD: .werkenbijgamma.be WILDCARD: .werkenbijgamma.nl WILDCARD: .werkenbijkarwei.nl WILDCARD: .configuratoren.nl/* URL: afspraakmaken.gamma.nl URL: api.afspraakmaken.gamma.be URL: api.afspraakmaken.gamma.nl URL: api.maakafspraak.karwei.nl OTHER: Everything related to configurators, both on primary as other domains URL: horrenconfigurator-fr.gamma.be URL: horrenconfigurator-nl.gamma.be URL: horrenconfigurator.karwei.nl URL: karwei-2018.hetmooistegordijn.nl URL: maakafspraak.karwei.nl URL: mail.gamma.be URL: mail.gamma.nl URL: mail.karwei.nl

Scope Updates

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets: