Scope Updates

Recent changes to bug bounty program scopes.

	Asset / Change	Scope Type	Program URL	Platform	Timestamp
+	Program Added		https://app.intigriti.c...es/ninjakiwigames/detail	intigriti	2025-06-05 05:30
Associated Assets: URL: analytics.ninjakiwi.com URL: api.ninjakiwi.com URL: guts.ninjakiwi.com WILDCARD: .ninjakiwi.me WILDCARD: .nkstatic.com URL: battles.tv URL: data.ninjakiwi.com URL: ninja.kiwi URL: ninjakiwi.com URL: alerts.ninjakiwi.com URL: boomer2.ninjakiwi.com URL: ct.ninjakiwi.com URL: mynk-dash.ninjakiwi.com URL: mynk.ninjakiwi.com URL: store.ninjakiwi.com URL: support.ninjakiwi.com
+	Program Removed		https://app.intigriti.c...es/ninjakiwigames/detail	intigriti	2025-06-05 05:00
Associated Assets: URL: analytics.ninjakiwi.com URL: api.ninjakiwi.com URL: guts.ninjakiwi.com WILDCARD: .ninjakiwi.me WILDCARD: .nkstatic.com URL: battles.tv URL: data.ninjakiwi.com URL: ninja.kiwi URL: ninjakiwi.com URL: alerts.ninjakiwi.com URL: boomer2.ninjakiwi.com URL: ct.ninjakiwi.com URL: mynk-dash.ninjakiwi.com URL: mynk.ninjakiwi.com URL: store.ninjakiwi.com URL: support.ninjakiwi.com
+	Program Added		https://bugcrowd.com/engagements/indeed	bugcrowd	2025-06-05 01:07
Associated Assets: WEBSITE: https://indeed.com WEBSITE: https://.indeedflex.com API: https://apis.indeed.com/graphql ANDROID: https://play.google.com/store/apps/details?id=com.indeed.android.jobsearch IOS: https://apps.apple.com/us/app/indeed-job-search/id309735670 ANDROID: https://play.google.com/store/apps/details?id=com.syftapp.android IOS: https://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731 WEBSITE: Career Scout WEBSITE: https://.indeed.tech WEBSITE: https://*.indeed.net WEBSITE: https://resume.com WEBSITE: https://wowjobs.ca IOS: https://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230 ANDROID: https://play.google.com/store/apps/details?id=com.indeed.resume IOS: https://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731 WEBSITE: https://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef OTHER: Any host/web property/mobile app verified to be owned by Indeed
+	Program Added		https://bugcrowd.com/engagements/canva	bugcrowd	2025-06-05 00:37
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
+	Program Removed		https://bugcrowd.com/engagements/indeed	bugcrowd	2025-06-05 00:37
Associated Assets: WEBSITE: https://indeed.com WEBSITE: https://.indeedflex.com API: https://apis.indeed.com/graphql ANDROID: https://play.google.com/store/apps/details?id=com.indeed.android.jobsearch IOS: https://apps.apple.com/us/app/indeed-job-search/id309735670 ANDROID: https://play.google.com/store/apps/details?id=com.syftapp.android IOS: https://apps.apple.com/gb/app/indeed-flex-job-search/id1013812731 WEBSITE: Career Scout WEBSITE: https://.indeed.tech WEBSITE: https://*.indeed.net WEBSITE: https://resume.com WEBSITE: https://wowjobs.ca IOS: https://apps.apple.com/us/app/%E5%B1%A5%E6%AD%B4%E6%9B%B8%E4%BD%9C%E6%88%90-%E3%82%A4%E3%83%B3%E3%83%87%E3%82%A3%E3%83%BC%E3%83%89/id1484451230 ANDROID: https://play.google.com/store/apps/details?id=com.indeed.resume IOS: https://apps.apple.com/us/app/indeed-connect-for-employers/id6443822731 WEBSITE: https://chromewebstore.google.com/detail/indeed-recruiter-extensio/kiodpphbmnmcmnfgpnmkkhmkllnlflef OTHER: Any host/web property/mobile app verified to be owned by Indeed
+	Program Removed		https://bugcrowd.com/engagements/canva	bugcrowd	2025-06-05 00:07
Associated Assets: WEBSITE: https://www.canva.com WEBSITE: https://www.canva.com/developers/ OTHER: Apps SDK Sandboxing API: https://api.canva.com WEBSITE: .canva.com WEBSITE: .canva-apps.com WEBSITE: https://.canva.tech WEBSITE: https://www.canva.com/en_au/help/chatgpt-templates/ WEBSITE: https://www.canva.com/integrations/slack/ OTHER: Canva Desktop (macOS / Windows) IOS: Canva (iOS) ANDROID: Canva (Android) OTHER: Canva (Chrome Extension) WEBSITE: .canva.cn WEBSITE: *.canva-apps.cn OTHER: Leaked Credentials and Secrets (Canva Employee/Contractor) OTHER: Leaked Credentials and Secrets (Canva User) OTHER: 3rd-Party Provider Vulnerability
+	Program Added		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 23:08
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Removed		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 22:38
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Added		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 22:08
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
	Asset Added: URL: connect.com	Out of Scope	https://hackerone.com/hubspot	hackerone	2025-06-04 22:07
	Asset Removed: URL: connect.com	In Scope	https://hackerone.com/hubspot	hackerone	2025-06-04 22:07
+	Program Removed		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 21:08
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Added		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 19:37
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Removed		https://bugcrowd.com/engagements/afterpay	bugcrowd	2025-06-04 19:08
Associated Assets: IOS: https://apps.apple.com/au/app/afterpay-shop-now-pay-later/id1230286588 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.us&hl=en_US&gl=US WEBSITE: https://portal.afterpay.com WEBSITE: https://afterpay.com API: https://mobileapi.afterpay.com API: https://portalapi.us.afterpay.com WEBSITE: https://developers.afterpay.com IOS: https://apps.apple.com/gb/app/clearpay-buy-now-pay-later/id1474022186 ANDROID: https://play.google.com/store/apps/details?id=com.afterpaymobile.uk WEBSITE: https://clearpay.co.uk WEBSITE: https://clearpay.com WEBSITE: https://portal.clearpay.com WEBSITE: https://portal.clearpay.co.uk API: https://mobileapi.clearpay.com API: https://portalapi.eu.clearpay.co.uk API: https://api.clearpay.com WEBSITE: https://afterpaytechblog.com WEBSITE: https://genderfree.afterpay.com WEBSITE: https://www.moneybyafterpay.com/
+	Program Added		https://bugcrowd.com/engagements/quintoandar	bugcrowd	2025-06-04 18:38
Associated Assets: WEBSITE: https://www.quintoandar.com.br/* WEBSITE: https://www.user.quintoandar.com.br/admin/* WEBSITE: https://www.financeiro.quintoandar.com.br/* API: https://apigw.prod.quintoandar.com.br/pixar-api/* WEBSITE: https://finance.quintoandar.com.br/* API: https://trato-feito-api.quintoandar.com.br/* API: https://apigw.prod.quintoandar.com.br/checkout-api/* API: https://apigw.prod.quintoandar.com.br/docx-api/* API: https://apigw.prod.quintoandar.com.br/sales-flow-api/* API: https://apigw.prod.quintoandar.com.br/nazare-api/* API: https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*
+	Program Removed		https://bugcrowd.com/engagements/quintoandar	bugcrowd	2025-06-04 18:09
Associated Assets: WEBSITE: https://www.quintoandar.com.br/* WEBSITE: https://www.user.quintoandar.com.br/admin/* WEBSITE: https://www.financeiro.quintoandar.com.br/* API: https://apigw.prod.quintoandar.com.br/pixar-api/* WEBSITE: https://finance.quintoandar.com.br/* API: https://trato-feito-api.quintoandar.com.br/* API: https://apigw.prod.quintoandar.com.br/checkout-api/* API: https://apigw.prod.quintoandar.com.br/docx-api/* API: https://apigw.prod.quintoandar.com.br/sales-flow-api/* API: https://apigw.prod.quintoandar.com.br/nazare-api/* API: https://apigw.prod.quintoandar.com.br/rental-guarantee-api/*
+	Program Added		https://bugcrowd.com/engagements/CCData-mbb-og	bugcrowd	2025-06-04 14:08
Associated Assets: API: http://data-api.coindesk.com/ WEBSITE: https://www.coindesk.com/ WEBSITE: https://uat.coindesk.com/ WEBSITE: https://events.coindesk.com WEBSITE: https://consensus2025.coindesk.com/ WEBSITE: https://consensus-hongkong2025.coindesk.com/ WEBSITE: https://data.coindesk.com/ WEBSITE: https://developers.coindesk.com
	Asset Added: WILDCARD: *.cyral.com	Out of Scope	https://hackerone.com/varonis	hackerone	2025-06-04 13:27
+	Program Added		https://bugcrowd.com/engagements/bolt-og	bugcrowd	2025-06-04 10:07
Associated Assets: ANDROID: https://bugcrowd.com/engagements/bolt-og/attachments/f30f56a1-8727-491b-85c4-914467daa09c IOS: https://bugcrowd.com/engagements/bolt-og/attachments/568e20f8-2915-4c28-80ba-93e14aa3a1d1 IOS: https://apps.apple.com/ee/app/bolt-fast-affordable-rides/id675033630 ANDROID: https://play.google.com/store/apps/details?id=ee.mtakso.client IOS: https://apps.apple.com/ee/app/bolt-food/id1451492388 ANDROID: https://play.google.com/store/apps/details?id=com.bolt.deliveryclient WEBSITE: .taxify.eu WEBSITE: https://bolt.eu/ ANDROID: https://play.google.com/store/apps/details?id=ee.mtakso.driver IOS: https://apps.apple.com/ee/app/bolt-driver/id897442736 WEBSITE: .test.bolt.eu WEBSITE: *.test.taxify.eu WEBSITE: business-old.bolt.eu
+	Program Added		https://app.intigriti.c...ane/arkanenetwork/detail	intigriti	2025-06-04 08:00
Associated Assets: URL: api-wallet.venly.io URL: api.arkane.network URL: connect.arkane.network URL: connect.venly.io URL: login.arkane.network URL: login.venly.io URL: wallet.venly.io URL: api-wallet-sandbox.venly.io
	Asset Added: OTHER: Mobile Apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 07:27
	Asset Removed: OTHER: Avtoelon mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 07:27
	Asset Removed: OTHER: Kolesa mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 07:27
	Asset Removed: OTHER: Krisha mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 07:27
	Asset Added: OTHER: Kolesa mobile apps	Out of Scope	https://hackerone.com/kolesagroup	hackerone	2025-06-04 06:17

Scope Updates

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets:

Associated Assets: