swapcard

YesWeHackView on YesWeHack

RawAI Enhanced

12

In Scope

12

Out of Scope

In-Scope Assets (12)

Asset	Category	Bounty	Quick Links
api.swapcard.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
app.swapcard.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
chat-api.swapcard.com/graphql	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
developer.swapcard.com/event-admin/graphql	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://apps.apple.com/fr/app/swapcard/id879488719	IOS	Yes	-
https://play.google.com/store/apps/details?id=com.swapcard.apps.android&hl=fr	ANDROID	Yes	Play Store APKPure APKMirror
img.swapcard.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
login.swapcard.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
studio-api.swapcard.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
studio.swapcard.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
t.swapcard.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
team.swapcard.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (12)

Asset	Category	Bounty
*dev.swapcard.com	OTHER	Yes
By default all the endpoints that are not listed in the allowed scopes are out of scope of the program.	OTHER	Yes
aide.swapcard.com (Zoho)	OTHER	Yes
blog.swapcard.com (Hubspot)	OTHER	Yes
books.swapcard.com (Zoho)	OTHER	Yes
c.swapcard.com	OTHER	Yes
help.swapcard.com (Zoho)	OTHER	Yes
l.swapcard.com	OTHER	Yes
page.swapcard.com	OTHER	Yes
sentry.swapcard.com (Except if you notice a miss-configuration)	OTHER	Yes
survey.swapcard.com	OTHER	Yes
www.swapcard.com (static corporate website)	OTHER	Yes

Scope Changes (24)

Apr 16, 2026

Change	Asset	Category	Scope	Time
Added	img.swapcard.com	URL	In Scope	18:33
Added	t.swapcard.com	URL	In Scope	18:33
Added	api.swapcard.com	URL	In Scope	18:33
Added	chat-api.swapcard.com/graphql	URL	In Scope	18:33
Added	developer.swapcard.com/event-admin/graphql	URL	In Scope	18:33
Added	login.swapcard.com	URL	In Scope	18:33
Added	studio-api.swapcard.com	URL	In Scope	18:33
Added	app.swapcard.com	URL	In Scope	18:33
Added	studio.swapcard.com	URL	In Scope	18:33
Added	team.swapcard.com	URL	In Scope	18:33
Added	https://apps.apple.com/fr/app/swapcard/id879488719	IOS	In Scope	18:33
Added	https://play.google.com/store/apps/details?id=com.swapcard.apps.android&hl=fr	ANDROID	In Scope	18:33
Added	by default all the endpoints that are not listed in the allowed scopes are out of scope of the program	OTHER	Out of Scope	18:33
Added	*dev.swapcard.com	OTHER	Out of Scope	18:33
Added	page.swapcard.com	OTHER	Out of Scope	18:33
Added	blog.swapcard.com (hubspot)	OTHER	Out of Scope	18:33
Added	aide.swapcard.com (zoho)	OTHER	Out of Scope	18:33
Added	help.swapcard.com (zoho)	OTHER	Out of Scope	18:33
Added	books.swapcard.com (zoho)	OTHER	Out of Scope	18:33
Added	l.swapcard.com	OTHER	Out of Scope	18:33
Added	c.swapcard.com	OTHER	Out of Scope	18:33
Added	sentry.swapcard.com (except if you notice a miss-configuration)	OTHER	Out of Scope	18:33
Added	survey.swapcard.com	OTHER	Out of Scope	18:33
Added	www.swapcard.com (static corporate website)	OTHER	Out of Scope	18:33