how we sort the index, not an estimate of what you’ll earn
Attack surface
12 in-scope
*.backend-capital.comscope· Tier 2capital.com/*· Tier 2*.capital.comscope· Tier 3*.itcapital.ioscope· Tier 3payment.backend-capital.com· Tier 1open-api.capital.com· Tier 2aff.capital.com· No Bountygo.capital.com· No Bountyregister.capital.com· No Bountycareers.capital.com· No Bountycom.capital.trading· Tier 2com.capital.trading· Tier 2*affiliates.backend-capital.com*eduapp.backend-capital.com*education.backend-capital.comfirst indexed
92d ago · 12 in-scope assets
// only one snapshot on record, changes appear from the next ingest onward
No reports yet. Be the first to share your triage timing for Capital.com.
// peer-sourced response times. platforms won’t publish this, hunters can. anonymized in aggregate.
{
"id": "48853273-690a-4555-8ac5-821a1c464312",
"url": "https://www.intigriti.com/programs/capitalcom/capitalcom/detail",
"name": "Capital.com",
"handle": "capitalcom",
"status": "open",
"targets": {
"in_scope": [
{
"type": "url",
"impact": "Tier 1",
"endpoint": "payment.backend-capital.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 2",
"endpoint": "*.backend-capital.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 2",
"endpoint": "capital.com/*",
"description": null
},
{
"type": "ios",
"impact": "Tier 2",
"endpoint": "com.capital.trading",
"description": "https://apps.apple.com/ie/app/capital-com-trading-finance/id1230088754"
},
{
"type": "android",
"impact": "Tier 2",
"endpoint": "com.capital.trading",
"description": "https://play.google.com/store/apps/details?id=com.capital.trading&hl=en"
},
{
"type": "url",
"impact": "Tier 2",
"endpoint": "open-api.capital.com",
"description": "The Capital.com API allows direct access to the latest version of our trading engine."
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.capital.com",
"description": null
},
{
"type": "wildcard",
"impact": "Tier 3",
"endpoint": "*.itcapital.io",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "aff.capital.com",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "go.capital.com",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "register.capital.com",
"description": null
},
{
"type": "url",
"impact": "No Bounty",
"endpoint": "careers.capital.com",
"description": null
}
],
"out_of_scope": [
{
"type": "wildcard",
"impact": "Out of scope",
"endpoint": "*affiliates.backend-capital.com",
"description": null
},
{
"type": "wildcard",
"impact": "Out of scope",
"endpoint": "*eduapp.backend-capital.com",
"description": null
},
{
"type": "wildcard",
"impact": "Out of scope",
"endpoint": "*education.backend-capital.com",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "help.capital.com",
"description": "CNAME to Zendesk"
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "relocate-with-us.capital.com",
"description": "CNAME to Webflow"
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "3cxby.itcapital.io",
"description": null
},
{
"type": "url",
"impact": "Out of scope",
"endpoint": "texis.itcapital.io",
"description": null
}
]
},
"max_bounty": {
"value": 15000,
"currency": "EUR"
},
"min_bounty": {
"value": 0,
"currency": "EUR"
},
"tacRequired": false,
"company_handle": "capitalcom",
"twoFactorRequired": false,
"confidentiality_level": "public"
}