superhuman

RawAI Enhanced

In Scope

Out of Scope

In-Scope Assets (24)

Asset	Category	Bounty	Quick Links
*.coda.io	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.grammarly.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.grammarly.io	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.grammarlyaws.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
*.superhuman.com	WILDCARD	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
Capture the Flag	OTHER	Yes	-
Coda Chrome Extension	OTHER	Yes	-
Grammarly Browser Extensions	OTHER	Yes	-
Grammarly Desktop for Windows	BINARY	Yes	-
Grammarly Desktop for macOS	BINARY	Yes	-
Superhuman Go	OTHER	Yes	-
app.grammarly.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
coda.grammarly.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
coda.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
codacontent.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
codahosted.io	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
com.grammarly.android.keyboard	ANDROID	Yes	Play Store APKPure APKMirror
com.grammarly.keyboard	IOS	Yes	-
gateway.superhuman.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
id.superhuman.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
io.coda	IOS	Yes	-
io.coda.codaapp	ANDROID	Yes	Play Store APKPure APKMirror
settings.superhuman.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
superhuman.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (3)

Asset	Category	Bounty
Superhuman Mail	OTHER	No
Third party external services	OTHER	No
status.coda.io	URL	No

Scope Changes (100)

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	superhuman.com	URL	In Scope	19:10
Added	*.grammarly.com	WILDCARD	In Scope	19:10
Added	app.grammarly.com	URL	In Scope	19:10
Added	id.superhuman.com	URL	In Scope	19:10
Added	coda chrome extension	OTHER	In Scope	19:10
Added	io.coda.codaapp	ANDROID	In Scope	19:10
Added	*.coda.io	WILDCARD	In Scope	19:10
Added	superhuman mail	OTHER	Out of Scope	19:10
Added	com.grammarly.keyboard	IOS	In Scope	19:10
Added	com.grammarly.android.keyboard	ANDROID	In Scope	19:10
Added	superhuman go	OTHER	In Scope	19:10
Added	io.coda	IOS	In Scope	19:10
Added	third party external services	OTHER	Out of Scope	19:10
Added	status.coda.io	URL	Out of Scope	19:10
Added	*.grammarly.io	WILDCARD	In Scope	19:10
Added	grammarly browser extensions	OTHER	In Scope	19:10
Added	grammarly desktop for windows	URL	In Scope	19:10
Added	grammarly desktop for macos	URL	In Scope	19:10
Added	*.superhuman.com	WILDCARD	In Scope	19:10
Added	*.grammarlyaws.com	WILDCARD	In Scope	19:10
Added	capture the flag	OTHER	In Scope	19:10
Added	gateway.superhuman.com	URL	In Scope	19:10
Added	settings.superhuman.com	URL	In Scope	19:10
Added	codacontent.io	URL	In Scope	19:10
Added	codahosted.io	URL	In Scope	19:10
Added	coda.grammarly.com	URL	In Scope	19:10
Added	coda.io	URL	In Scope	19:10

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	settings.superhuman.com	URL	In Scope	00:41
Added	coda chrome extension	OTHER	In Scope	00:41
Added	codacontent.io	URL	In Scope	00:41
Added	io.coda	IOS	In Scope	00:41
Added	*.coda.io	WILDCARD	In Scope	00:41
Added	third party external services	OTHER	Out of Scope	00:41
Added	third party external services	OTHER	Out of Scope	00:41
Added	third party external services	OTHER	Out of Scope	00:41
Added	third party external services	OTHER	Out of Scope	00:41
Added	third party external services	OTHER	Out of Scope	00:41
Added	third party external services	OTHER	Out of Scope	00:41
Added	third party external services	OTHER	Out of Scope	00:41
Added	third party external services	OTHER	Out of Scope	00:41
Added	superhuman go	OTHER	In Scope	00:41
Added	gateway.superhuman.com	URL	In Scope	00:41
Added	*.grammarlyaws.com	WILDCARD	In Scope	00:41
Added	app.grammarly.com	URL	In Scope	00:41
Added	io.coda.codaapp	ANDROID	In Scope	00:41
Added	coda.io	URL	In Scope	00:41
Added	grammarly desktop for macos	OTHER	In Scope	00:41
Added	status.coda.io	URL	Out of Scope	00:41
Added	coda.grammarly.com	URL	In Scope	00:41
Added	codahosted.io	URL	In Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman mail	WILDCARD	Out of Scope	00:41
Added	superhuman.com	URL	In Scope	00:41
Added	grammarly browser extensions	URL	In Scope	00:41
Added	grammarly browser extensions	URL	In Scope	00:41
Added	grammarly browser extensions	URL	In Scope	00:41
Added	grammarly browser extensions	URL	In Scope	00:41
Added	grammarly desktop for windows	OTHER	In Scope	00:41
Added	com.grammarly.keyboard	IOS	In Scope	00:41
Added	com.grammarly.android.keyboard	ANDROID	In Scope	00:41
Added	*.grammarly.com	WILDCARD	In Scope	00:41
Added	capture the flag	OTHER	In Scope	00:41
Added	id.superhuman.com	URL	In Scope	00:41
Added	*.grammarly.io	WILDCARD	In Scope	00:41
Added	*.superhuman.com	WILDCARD	In Scope	00:41

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	*.grammarly.io	WILDCARD	In Scope	21:38
Removed	grammarly browser extensions	OTHER	In Scope	21:38
Removed	grammarly desktop for windows	BINARY	In Scope	21:38
Removed	*.grammarlyaws.com	WILDCARD	In Scope	21:38
Removed	grammarly desktop for macos	BINARY	In Scope	21:38
Removed	com.grammarly.keyboard	IOS	In Scope	21:38
Removed	com.grammarly.android.keyboard	ANDROID	In Scope	21:38
Removed	*.grammarly.com	WILDCARD	In Scope	21:38
Removed	capture the flag	OTHER	In Scope	21:38
Removed	app.grammarly.com	URL	In Scope	21:38
Removed	superhuman go	OTHER	In Scope	21:38
Removed	superhuman.com	URL	In Scope	21:38
Removed	*.superhuman.com	WILDCARD	In Scope	21:38
Removed	gateway.superhuman.com	URL	In Scope	21:38
Removed	id.superhuman.com	URL	In Scope	21:38
Removed	settings.superhuman.com	URL	In Scope	21:38
Removed	coda chrome extension	OTHER	In Scope	21:38
Removed	codacontent.io	URL	In Scope	21:38
Removed	codahosted.io	URL	In Scope	21:38
Removed	io.coda	IOS	In Scope	21:38
Removed	io.coda.codaapp	ANDROID	In Scope	21:38
Removed	coda.grammarly.com	URL	In Scope	21:38
Removed	coda.io	URL	In Scope	21:38
Removed	*.coda.io	WILDCARD	In Scope	21:38