eternal

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (34)

Asset	Category	Bounty	Quick Links
*.district.in	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.edition.in	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.eternal.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.hyperpure.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.insider.in	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.runnr.in	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.ticketnew.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.tktnew.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.zdev.net	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.zomans.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.zomato.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
434613896	IOS	Yes	-
6670203019	IOS	Yes	-
6670536058	IOS	Yes	-
960335206	IOS	Yes	-
All Assets (other than Blinkit)	OTHER	Yes	-
Data Protection Program	OTHER	Yes	-
Scope Questions: Items not explicitly listed here	OTHER	No	-
Tier 1	OTHER	Yes	-
Tier 2	OTHER	Yes	-
Tier 3	OTHER	Yes	-
api.grofers.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
api2.grofers.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
bistro-api.blinkit.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
blinkit.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
com.application.zomato	ANDROID	Yes	Play Store APKPure APKMirror
com.application.zomato.district	ANDROID	Yes	Play Store APKPure APKMirror
com.application.zomatomerchant	ANDROID	No	Play Store APKPure APKMirror
com.blinkit.bistro	ANDROID	Yes	Play Store APKPure APKMirror
com.grofers.customerapp	ANDROID	Yes	Play Store APKPure APKMirror
http://*.grofer.io	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
http://*.grofers.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
https://mcp-server.zomato.com/mcp	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
winecellar.zomato.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (15)

Asset	Category	Bounty
*.ali.zomans.com	WILDCARD	No
*.bstro.io	WILDCARD	No
*.zomatoportugal.com	WILDCARD	No
blog.zomato.com	URL	No
business-blog.zomato.com	URL	No
com.application.zomato.ordering	ANDROID	No
community.zomato.com	URL	No
dev.hyperpure.com	URL	No
devapi.hyperpure.com	URL	No
devpod.hyperpure.com	URL	No
http://*.blinkit.support	WILDCARD	No
send.zomato.com	URL	No
staging*.runnr.in	WILDCARD	No
success.zomato.com	URL	No
www.zomatobook.com	URL	No

Scope Changes (132)

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	success.zomato.com	URL	Out of Scope	19:09
Added	434613896	IOS	In Scope	19:09
Added	tier 2	OTHER	In Scope	19:09
Added	bistro-api.blinkit.com	URL	In Scope	19:09
Added	6670203019	IOS	In Scope	19:09
Added	blinkit.com	URL	In Scope	19:09
Added	com.application.zomatomerchant	ANDROID	In Scope	19:09
Added	*.hyperpure.com	WILDCARD	In Scope	19:09
Added	*.edition.in	WILDCARD	In Scope	19:09
Added	tier 1	OTHER	In Scope	19:09
Added	*.tktnew.com	WILDCARD	In Scope	19:09
Added	com.application.zomato.district	ANDROID	In Scope	19:09
Added	*.zdev.net	WILDCARD	In Scope	19:09
Added	*.zomato.com	WILDCARD	In Scope	19:09
Added	*.grofers.com	WILDCARD	In Scope	19:09
Added	*.insider.in	WILDCARD	In Scope	19:09
Added	com.application.zomato.ordering	ANDROID	Out of Scope	19:09
Added	community.zomato.com	URL	Out of Scope	19:09
Added	*.bstro.io	WILDCARD	Out of Scope	19:09
Added	winecellar.zomato.com	URL	In Scope	19:09
Added	960335206	IOS	In Scope	19:09
Added	api2.grofers.com	URL	In Scope	19:09
Added	*.district.in	WILDCARD	In Scope	19:09
Added	com.blinkit.bistro	ANDROID	In Scope	19:09
Added	6670536058	IOS	In Scope	19:09
Added	blog.zomato.com	URL	Out of Scope	19:09
Added	*.grofer.io	WILDCARD	In Scope	19:09
Added	data protection program	OTHER	In Scope	19:09
Added	business-blog.zomato.com	URL	Out of Scope	19:09
Added	staging*.runnr.in	WILDCARD	Out of Scope	19:09
Added	all assets (other than blinkit)	OTHER	In Scope	19:09
Added	api.grofers.com	URL	In Scope	19:09
Added	*.runnr.in	WILDCARD	In Scope	19:09
Added	*.ticketnew.com	WILDCARD	In Scope	19:09
Added	https://mcp-server.zomato.com/mcp	URL	In Scope	19:09
Added	devpod.hyperpure.com	URL	Out of Scope	19:09
Added	com.application.zomato	ANDROID	In Scope	19:09
Added	tier 3	OTHER	In Scope	19:09
Added	*.eternal.com	WILDCARD	In Scope	19:09
Added	devapi.hyperpure.com	URL	Out of Scope	19:09
Added	*.zomans.com	WILDCARD	In Scope	19:09
Added	www.zomatobook.com	URL	Out of Scope	19:09
Added	*.blinkit.support	WILDCARD	Out of Scope	19:09
Added	dev.hyperpure.com	URL	Out of Scope	19:09
Added	send.zomato.com	URL	Out of Scope	19:09
Added	*.ali.zomans.com	WILDCARD	Out of Scope	19:09
Added	com.grofers.customerapp	ANDROID	In Scope	19:09
Added	scope questions: items not explicitly listed here	OTHER	In Scope	19:09
Added	*.zomatoportugal.com	WILDCARD	Out of Scope	19:09

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	*.zomato.com	WILDCARD	In Scope	00:40
Added	*.grofer.io	WILDCARD	In Scope	00:40
Added	com.grofers.customerapp	ANDROID	In Scope	00:40
Added	*.zomans.com	WILDCARD	In Scope	00:40
Added	*.district.in	WILDCARD	In Scope	00:40
Added	*.edition.in	WILDCARD	In Scope	00:40
Added	*.blinkit.support	WILDCARD	Out of Scope	00:40
Added	dev.hyperpure.com	URL	Out of Scope	00:40
Added	com.application.zomatomerchant	ANDROID	In Scope	00:40
Added	434613896	IOS	In Scope	00:40
Added	*.ticketnew.com	WILDCARD	In Scope	00:40
Added	*.zomatoportugal.com	WILDCARD	Out of Scope	00:40
Added	devpod.hyperpure.com	URL	Out of Scope	00:40
Added	send.zomato.com	URL	Out of Scope	00:40
Added	*.ali.zomans.com	WILDCARD	Out of Scope	00:40
Added	tier 1	OTHER	In Scope	00:40
Added	*.tktnew.com	WILDCARD	In Scope	00:40
Added	com.application.zomato.district	ANDROID	In Scope	00:40
Added	community.zomato.com	URL	Out of Scope	00:40
Added	*.bstro.io	WILDCARD	Out of Scope	00:40
Added	com.application.zomato	ANDROID	In Scope	00:40
Added	*.runnr.in	WILDCARD	In Scope	00:40
Added	*.eternal.com	WILDCARD	In Scope	00:40
Added	www.zomatobook.com	URL	Out of Scope	00:40
Added	business-blog.zomato.com	URL	Out of Scope	00:40
Added	all assets (other than blinkit)	OTHER	In Scope	00:40
Added	*.grofers.com	WILDCARD	In Scope	00:40
Added	960335206	IOS	In Scope	00:40
Added	api2.grofers.com	URL	In Scope	00:40
Added	blinkit.com	URL	In Scope	00:40
Added	bistro-api.blinkit.com	URL	In Scope	00:40
Added	api.grofers.com	URL	In Scope	00:40
Added	tier 2	OTHER	In Scope	00:40
Added	com.blinkit.bistro	ANDROID	In Scope	00:40
Added	com.application.zomato.ordering	ANDROID	Out of Scope	00:40
Added	blog.zomato.com	URL	Out of Scope	00:40
Added	devapi.hyperpure.com	URL	Out of Scope	00:40
Added	*.zdev.net	WILDCARD	In Scope	00:40
Added	winecellar.zomato.com	URL	In Scope	00:40
Added	scope questions: items not explicitly listed here	OTHER	In Scope	00:40
Added	*.insider.in	WILDCARD	In Scope	00:40
Added	https://mcp-server.zomato.com/mcp	URL	In Scope	00:40
Added	success.zomato.com	URL	Out of Scope	00:40
Added	*.hyperpure.com	WILDCARD	In Scope	00:40
Added	tier 3	OTHER	In Scope	00:40
Added	6670203019	IOS	In Scope	00:40
Added	6670536058	IOS	In Scope	00:40
Added	data protection program	OTHER	In Scope	00:40
Added	staging*.runnr.in	WILDCARD	Out of Scope	00:40

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	data protection program	OTHER	In Scope	21:38
Removed	*.eternal.com	WILDCARD	In Scope	21:38
Removed	https://mcp-server.zomato.com/mcp	URL	In Scope	21:38
Removed	*.zdev.net	WILDCARD	In Scope	21:38
Removed	*.zomato.com	WILDCARD	In Scope	21:38
Removed	winecellar.zomato.com	URL	In Scope	21:38
Removed	com.application.zomato	ANDROID	In Scope	21:38
Removed	all assets (other than blinkit)	OTHER	In Scope	21:38
Removed	*.grofer.io	WILDCARD	In Scope	21:38
Removed	*.grofers.com	WILDCARD	In Scope	21:38
Removed	960335206	IOS	In Scope	21:38
Removed	com.grofers.customerapp	ANDROID	In Scope	21:38
Removed	api.grofers.com	URL	In Scope	21:38
Removed	api2.grofers.com	URL	In Scope	21:38
Removed	blinkit.com	URL	In Scope	21:38
Removed	434613896	IOS	In Scope	21:38
Removed	*.zomans.com	WILDCARD	In Scope	21:38
Removed	*.hyperpure.com	WILDCARD	In Scope	21:38
Removed	*.runnr.in	WILDCARD	In Scope	21:38
Removed	*.district.in	WILDCARD	In Scope	21:38
Removed	*.edition.in	WILDCARD	In Scope	21:38
Removed	*.ticketnew.com	WILDCARD	In Scope	21:38
Removed	*.insider.in	WILDCARD	In Scope	21:38
Removed	tier 2	OTHER	In Scope	21:38
Removed	tier 1	OTHER	In Scope	21:38
Removed	*.tktnew.com	WILDCARD	In Scope	21:38
Removed	tier 3	OTHER	In Scope	21:38
Removed	com.blinkit.bistro	ANDROID	In Scope	21:38
Removed	6670203019	IOS	In Scope	21:38
Removed	bistro-api.blinkit.com	URL	In Scope	21:38
Removed	com.application.zomato.district	ANDROID	In Scope	21:38
Removed	6670536058	IOS	In Scope	21:38
Added	scope questions: items not explicitly listed here	OTHER	In Scope	19:11
Added	com.application.zomatomerchant	ANDROID	In Scope	19:11