Scope Data

In Scope Assets:

• URL: app.aikido.dev

Out of Scope Assets:

• WILDCARD: *.aikido.dev (OOS)

In Scope Assets:

• OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability
• OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability
• OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass
• OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass
• OTHER: https://github.com/AikidoSec/firewall-node#False Positive
• OTHER: https://github.com/AikidoSec/firewall-python#False Positive

In Scope Assets:

• WILDCARD: *.allegro.cz.allegrosandbox.pl
• WILDCARD: *.allegro.pl.allegrosandbox.pl
• WILDCARD: *.allegro.sk.allegrosandbox.pl

Out of Scope Assets:

• WILDCARD: *.allegro.cz (OOS)
• WILDCARD: *.allegro.pl (OOS)
• WILDCARD: *.allegro.sk (OOS)
• WILDCARD: *.allegrogroup.com (OOS)
• OTHER: Any production website owned by Allegro not listed in Domains (OOS)

In Scope Assets:

• DEVICE: Firmware
• DEVICE: Hardware
• OTHER: FPGA Solution Development Tools and Utilities
• OTHER: Software

In Scope Assets:

• OTHER: Hardware
• OTHER: Firmware
• OTHER: Software

Out of Scope Assets:

• OTHER: Out of Scope (OOS)

In Scope Assets:

• URL: api-wallet.venly.io
• URL: api.arkane.network
• URL: connect.arkane.network
• URL: connect.venly.io
• URL: login.arkane.network
• URL: login.venly.io
• URL: wallet.venly.io
• URL: api-wallet-sandbox.venly.io

In Scope Assets:

• OTHER: Firmware: Mali Command Stream Frontend (CSF) Firmware
• OTHER: Software: Mali GPU Kernel Driver

In Scope Assets:

• URL: adtechnology.axelspringer.com
• WILDCARD: *.asadcdn.com
• URL: germany.politico.eu
• URL: bild.de
• URL: welt.de
• URL: epaper.welt.de
• URL: cancellation.prod.ps.welt.de
• URL: digital.welt.de
• URL: signin.auth.welt.de
• URL: m.bild.de
• WILDCARD: *.hey.bild.de
• URL: go.welt.de
• WILDCARD: *.auth.bild.de
• WILDCARD: *.sportbild.de
• URL: meinkonto.bild.de
• WILDCARD: *.bild.tv
• WILDCARD: *.computerbild.de
• CIDR: 18.184.198.198, 18.185.214.59, 18.194.109.179, 3.121.117.72, 3.121.138.10, 3.121.138.128, 3.121.138.134, 3.121.138.170, 3.121.138.33, 3.121.138.43, 3.124.248.208, 35.156.137.39
• WILDCARD: dealer.prod.ps.axelspringer.de/purchases/*
• WILDCARD: *.germany.politico.eu
• WILDCARD: *.welt.de
• WILDCARD: *.bild.de
• WILDCARD: *.autobild.de
• WILDCARD: *.bz-berlin.de
• WILDCARD: *.spring-media.de
• WILDCARD: *.springtools.de
• URL: editorial.one
• WILDCARD: *.as-nmt.de
• WILDCARD: *.ein-herz-fuer-kinder.de
• WILDCARD: *.fitbook.de
• WILDCARD: *.myhomebook.de
• WILDCARD: *.petbook-magazine.com/
• WILDCARD: *.petbook.de
• WILDCARD: *.stylebook.de
• WILDCARD: *.techbook.de
• WILDCARD: *.travelbook.de
• WILDCARD: *.wissen-sie-mehr.de
• URL: technik.autobild.de
• URL: technik.beta.autobild.de

Out of Scope Assets:

• WILDCARD: *.axelspringer.com (OOS)

In Scope Assets:

• DEVICE: Functions dealing with vehicle access and immobilizer
• IOS: 1519034860
• ANDROID: de.bmw.connected.mobile20.row
• DEVICE: Remaining functions

In Scope Assets:

• URL: www.bmw-motorrad.de
• URL: www.bmw.de
• URL: www.mini.de
• URL: configure.bmw.de
• URL: configure.mini.de
• URL: konfigurator.bmw-motorrad.de

Out of Scope Assets:

• OTHER: Automotive Security (OOS)
• OTHER: Domains from independent BMW Dealers, Resellers or Fanclubs (OOS)

In Scope Assets:

• URL: https://justonweb.be/fines/

In Scope Assets:

• URL: payment.backend-capital.com
• WILDCARD: *.backend-capital.com
• WILDCARD: capital.com/*
• IOS: com.capital.trading
• ANDROID: com.capital.trading
• URL: open-api.capital.com
• WILDCARD: *.capital.com
• WILDCARD: *.itcapital.io

Out of Scope Assets:

• WILDCARD: *affiliates.backend-capital.com (OOS)
• WILDCARD: *eduapp.backend-capital.com (OOS)
• WILDCARD: *education.backend-capital.com (OOS)
• URL: help.capital.com (OOS)
• URL: relocate-with-us.capital.com (OOS)
• URL: 3cxby.itcapital.io (OOS)
• URL: texis.itcapital.io (OOS)

In Scope Assets:

• URL: login.cm.com
• WILDCARD: *.ticketing.cm.com
• URL: api.cm.com
• URL: api.cmtelecom.com
• WILDCARD: cm.com/[locale]/app/*
• URL: cm.com/[locale]/register
• URL: appmiral.com
• URL: building-blocks.com
• URL: cm.com/app/messagingtrial/
• URL: cmcom.atlassian.net
• URL: www.cm.com

In Scope Assets:

• IOS: 1174047097
• ANDROID: eu.coolblue.shop
• OTHER: mobile-api.coolblue-production.eu
• URL: www.coolblue.be
• URL: www.coolblue.de
• URL: www.coolblue.nl
• URL: arbeitenbeicoolblue.de
• URL: careersatcoolblue.com
• URL: travaillerchezcoolblue.be
• URL: werkenbijcoolblue.be
• URL: werkenbijcoolblue.com
• URL: werkenbijcoolblue.nl

In Scope Assets:

• URL: app.datacamp.com/certification
• URL: app.datacamp.com/groups
• URL: app.datacamp.com/learn
• URL: assessment-api.datacamp.com
• URL: assessment-v2.datacamp.com
• URL: assessment.datacamp.com
• URL: campus.datacamp.com
• ANDROID: com.datacamp
• IOS: https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087
• URL: practice.datacamp.com
• URL: projects.datacamp.com
• URL: www.datacamp.com
• URL: www.datacamp.com/datalab
• WILDCARD: *.datacamp.com

Out of Scope Assets:

• WILDCARD: *.it.datacamp.com (OOS)
• URL: app.datacamp.com/recruit (OOS)
• URL: ast-viewer.datacamp.com (OOS)
• URL: confluence.datacamp.com (OOS)
• URL: dccertified.datacamp.com (OOS)
• URL: intranet.datacamp.com (OOS)
• URL: jira.datacamp.com (OOS)
• URL: links.datacamp.com (OOS)
• URL: rdocumentation.datacamp.com (OOS)
• URL: signature.datacamp.com (OOS)
• URL: status.datacamp.com (OOS)
• URL: support.datacamp.com (OOS)
• URL: talent-jobs-api.datacamp.com (OOS)

In Scope Assets:

• URL: api.digital.delen.be
• URL: api.digital.delen.lu
• URL: app.delen.be
• URL: app.delen.ch
• URL: app.delen.lu
• URL: auth.digital.delen.be
• URL: auth.digital.delen.lu
• ANDROID: be.delen.digital
• IOS: delen/id1064839588
• URL: login.delen.be
• URL: login.delen.ch
• URL: login.delen.lu
• URL: login.oyens.com
• URL: status.delen.be
• URL: sts.delen.be
• URL: www.cadelam.be
• URL: www.cadelux.lu/en
• URL: www.delen.bank
• URL: www.delen.be/en

In Scope Assets:

• WILDCARD: *.cloudways.com
• URL: api.cloudways.com
• URL: developers.cloudways.com
• URL: platform.cloudways.com
• URL: unified.cloudways.com
• URL: www.cloudways.com
• URL: css-tricks.com

In Scope Assets:

• WILDCARD: *.digitalocean.com
• CIDR: 169.254.169.254
• URL: api.digitalocean.com
• URL: cloud.digitalocean.com
• URL: amd.digitalocean.com
• URL: marketplace.digitalocean.com
• WILDCARD: *.snapshooter.com
• URL: www.digitalocean.com
• URL: digitaloceanmirrors.com
• URL: digitaloceanpartners.com
• URL: digitaloceanstatus.com
• URL: digitaloceantest.com
• URL: do.co
• URL: hackathon-tracker.digitalocean.com
• URL: hacktoberfest.com

Out of Scope Assets:

• WILDCARD: *.db.ondigitalocean.com (OOS)
• WILDCARD: *.digitaloceanspaces.com (OOS)
• WILDCARD: *.doserverless.co (OOS)
• WILDCARD: *.k8s.ondigitalocean.com (OOS)
• WILDCARD: *.ondigitalocean.app (OOS)
• OTHER: Assets created by other DigitalOcean customers (OOS)
• OTHER: Marketplace Apps and Add-Ons (OOS)
• OTHER: Other DigitalOcean open source projects not listed (OOS)
• WILDCARD: registry.digitalocean.com/* (OOS)

In Scope Assets:

• URL: myaccount.ad.nl
• URL: webwinkel.ad.nl
• URL: www.ad.nl
• URL: www.ad.nl/abonnementen
• WILDCARD: *.ad.nl

In Scope Assets:

• URL: myaccount.demorgen.be
• URL: shop.demorgen.be
• URL: www.demorgen.be
• URL: www.demorgen.be/abonnementen
• WILDCARD: *.demorgen.be

Out of Scope Assets:

• WILDCARD: * demorgen.be/inloggen (OOS)
• WILDCARD: * demorgen.be/login (OOS)
• WILDCARD: * demorgen.be/registreren (OOS)
• WILDCARD: * demorgen.be/service (OOS)
• URL: abonnement.demorgen.be (OOS)

In Scope Assets:

• URL: myaccount.volkskrant.nl
• URL: shop.volkskrant.nl
• URL: webwinkel.volkskrant.nl
• URL: www.volkskrant.nl
• URL: www.volkskrant.nl/abonnementen
• WILDCARD: *.volkskrant.nl

In Scope Assets:

• WILDCARD: *.dpgmedia.be
• WILDCARD: *.dpgmedia.nl
• OTHER: Any related DPG media domain

In Scope Assets:

• WILDCARD: * hln.be/inloggen
• WILDCARD: * hln.be/login
• WILDCARD: * hln.be/registreren
• URL: hln.be
• URL: myaccount.hln.be
• URL: www.hln.be
• WILDCARD: *.hln.be

Out of Scope Assets:

• WILDCARD: * hln.be/service (OOS)

In Scope Assets:

• URL: myaccount.parool.nl
• URL: shop.parool.nl
• URL: webwinkel.parool.nl
• URL: www.parool.nl
• URL: www.parool.nl/abonnementen
• WILDCARD: *.parool.nl

Out of Scope Assets:

• WILDCARD: * parool.nl/inloggen (OOS)
• WILDCARD: * parool.nl/login (OOS)
• WILDCARD: * parool.nl/registreren (OOS)
• WILDCARD: * parool.nl/service (OOS)
• URL: abonnement.parool.nl (OOS)

In Scope Assets:

• WILDCARD: * humo.be/registreren
• URL: myaccount.humo.be
• URL: shop.humo.be
• URL: www.humo.be
• URL: www.humo.be/abonnementen
• WILDCARD: *.humo.be

Out of Scope Assets:

• WILDCARD: * humo.be/inloggen (OOS)
• WILDCARD: * humo.be/login (OOS)
• WILDCARD: * humo.be/service (OOS)
• URL: abonnement.humo.be (OOS)

In Scope Assets:

• URL: www.libelle.nl
• WILDCARD: *.libelle.nl

Out of Scope Assets:

• WILDCARD: * libelle.nl/inloggen (OOS)
• WILDCARD: * libelle.nl/login (OOS)
• WILDCARD: * libelle.nl/registreren (OOS)
• WILDCARD: * libelle.nl/service (OOS)

In Scope Assets:

• URL: myaccount.trouw.nl
• URL: shop.trouw.nl
• URL: webwinkel.trouw.nl
• URL: www.trouw.nl
• URL: www.trouw.nl/abonnementen
• WILDCARD: *.trouw.nl

Out of Scope Assets:

• WILDCARD: * trouw.nl/inloggen (OOS)
• WILDCARD: * trouw.nl/login (OOS)
• WILDCARD: * trouw.nl/registreren (OOS)
• WILDCARD: * trouw.nl/service (OOS)
• URL: abonnement.trouw.nl (OOS)

In Scope Assets:

• WILDCARD: *.tweakblogs.net
• WILDCARD: *.tweakers.net
• WILDCARD: *.tweakimg.net

Out of Scope Assets:

• URL: elect.tweakers.net (OOS)

In Scope Assets:

• URL: myaccount.vtm.be
• URL: vtm.be/vtmgo
• URL: vtmgo.be
• WILDCARD: *.vtm.be
• WILDCARD: *.vtmgo.be

Out of Scope Assets:

• WILDCARD: * vtmgo.be/inloggen (OOS)
• WILDCARD: * vtmgo.be/login (OOS)
• WILDCARD: * vtmgo.be/registreren (OOS)
• WILDCARD: * vtmgo.be/service (OOS)
• URL: shop.vtm.be (OOS)

In Scope Assets:

• URL: Dropbox.com
• URL: sign.dropbox.com
• URL: HelloSign.com
• URL: dash.ai
• OTHER: dash.dropbox.com
• URL: api.dropbox.com
• URL: replay.dropbox.com
• OTHER: Dropbox Desktop Application
• IOS: 327630330
• IOS: 6450553960
• IOS: 1080074001
• ANDROID: com.dropbox.dash
• ANDROID: com.dropbox.android
• URL: HelloFax.com
• URL: docsend.com
• URL: app.Reclaim.ai
• URL: dropbox.com/paper
• WILDCARD: *.dropbox.com
• WILDCARD: *.dropboxer.net
• WILDCARD: *.dropboxforum.com
• WILDCARD: *.dropboxpartners.com
• WILDCARD: *.hellofax.com
• WILDCARD: *.docsend.com
• WILDCARD: *.reclaim.ai
• WILDCARD: *.helloworks.com
• WILDCARD: *.hellosign.com

Out of Scope Assets:

• OTHER: Boxcryptor (OOS)
• OTHER: Formswift (OOS)
• OTHER: Dropbox Passwords (OOS)
• OTHER: Dropbox Capture Windows Desktop App (OOS)
• OTHER: Dropbox Capture macOS Desktop App (OOS)
• ANDROID: com.dropbox.paper (OOS)
• IOS: 1126623662 (OOS)

In Scope Assets:

• OTHER: https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1208823298#gid=1208823298
• OTHER: https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1281087877#gid=1281087877
• OTHER: https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1767553194#gid=1767553194

Out of Scope Assets:

• OTHER: https://docs.google.com/spreadsheets/d/1CzscF67guNFMy-L_v79ng2mW36dQWb2rQSbK540j-ys/edit?gid=1370437389#gid=1370437389 (OOS)

In Scope Assets:

• URL: auth.embark.net
• URL: id.embark.games
• WILDCARD: *.observability.embark.net
• URL: asset-metadata-api.embark.net
• URL: grafana.embark.net
• URL: has.embark.net
• URL: p4-submit-service.embark.net
• URL: perforce.embark.net
• URL: swarm.embark.net
• URL: user-lookup-api.embark.net
• URL: vpn.embark.net
• URL: arcraiders.com
• URL: embark-studios.com
• URL: reachthefinals.com

In Scope Assets:

• URL: https://portal.exoscale.com/
• WILDCARD: https://api-*exoscale.com/v2
• WILDCARD: https://sos-*.exo.io
• WILDCARD: https://sks-*.exo.io
• WILDCARD: *.internal.exoscale.ch
• URL: https://www.exoscale.com/
• URL: https://community.exoscale.com/

Out of Scope Assets:

• URL: https://changelog.exoscale.com/ (OOS)
• URL: https://exoscalestatus.com/ (OOS)
• URL: https://academy.exoscale.com/ (OOS)
• URL: https://jobs.exoscale.com/ (OOS)
• OTHER: CDN service (OOS)
• OTHER: Marketplace products (OOS)

In Scope Assets:

• OTHER: Grafana Loki
• OTHER: Grafana Mimir
• OTHER: Grafana OSS
• OTHER: Grafana Pyroscope
• OTHER: Grafana Tempo
• WILDCARD: https://github.com/grafana/*

Out of Scope Assets:

• WILDCARD: *.grafana.com (OOS)
• WILDCARD: *.grafana.net (OOS)

In Scope Assets:

• WILDCARD: *.account.api.here.com
• WILDCARD: *.account.here.com
• WILDCARD: *.mobilitygraph.hereapi.com
• WILDCARD: *.router.hereapi.com
• WILDCARD: *.scbe.api.here.com
• WILDCARD: *.subp-router.hereapi.com
• IOS: 955837609
• ANDROID: com.here.app.maps
• URL: https://jaguar.here.com
• URL: https://landrover.here.com
• OTHER: Leaked/compromised employee accounts *.here.com
• WILDCARD: *.here.com
• WILDCARD: *.hereapi.com

In Scope Assets:

• OTHER: Backend/Non-Game
• OTHER: Elvenar
• OTHER: Forge of Empires
• OTHER: Grepolis
• OTHER: Tribal Wars

Out of Scope Assets:

• URL: autodiscover.innogames.de (OOS)
• URL: exchange.innogames.de (OOS)
• URL: igjam.eu (OOS)
• URL: jamf.innogames.com (OOS)
• URL: mail.innogames.com (OOS)
• URL: newsroom.innogames.com (OOS)
• URL: pn.innogames.com (OOS)
• URL: slack.innogames.de (OOS)
• URL: typingmind.innogames.de (OOS)

In Scope Assets:

• OTHER: Hardware
• OTHER: Firmware
• OTHER: Software
• OTHER: Services

In Scope Assets:

• IOS: 949829216
• IOS: 950680989
• IOS: 950693949
• ANDROID: be.gamma.app.android
• WILDCARD: kassa.gamma.be/*
• WILDCARD: kassa.gamma.nl/*
• WILDCARD: kassa.karwei.nl/*
• WILDCARD: mijn.gamma.be/*
• WILDCARD: mijn.gamma.nl/*
• WILDCARD: mijn.karwei.nl/*
• ANDROID: nl.gamma.app.android
• ANDROID: nl.karwei.app.android
• WILDCARD: www.gamma.be/*
• WILDCARD: www.gamma.nl/*
• WILDCARD: www.karwei.nl/*
• WILDCARD: *.gamma.be/*
• WILDCARD: *.gamma.nl/*
• WILDCARD: *.intergamma.cloud
• WILDCARD: *.intergamma.nl/*
• WILDCARD: *.karwei.nl/*
• WILDCARD: *.restintergamma.nl
• IOS: 1558129454
• WILDCARD: *.intergamma-test.nl
• WILDCARD: *.werkenbijgamma.be
• WILDCARD: *.werkenbijgamma.nl
• WILDCARD: *.werkenbijkarwei.nl

Out of Scope Assets:

• WILDCARD: *.configuratoren.nl/* (OOS)
• URL: afspraakmaken.gamma.nl (OOS)
• URL: api.afspraakmaken.gamma.be (OOS)
• URL: api.afspraakmaken.gamma.nl (OOS)
• URL: api.maakafspraak.karwei.nl (OOS)
• OTHER: Everything related to configurators, both on primary as other domains (OOS)
• URL: horrenconfigurator-fr.gamma.be (OOS)
• URL: horrenconfigurator-nl.gamma.be (OOS)
• URL: horrenconfigurator.karwei.nl (OOS)
• URL: karwei-2018.hetmooistegordijn.nl (OOS)
• URL: maakafspraak.karwei.nl (OOS)
• URL: mail.gamma.be (OOS)
• URL: mail.gamma.nl (OOS)
• URL: mail.karwei.nl (OOS)

In Scope Assets:

• WILDCARD: *.pwn.intigriti.rocks
• URL: www.intigriti.com

Out of Scope Assets:

• WILDCARD: *.intigriti.io (OOS)
• WILDCARD: *.intigriti.me (OOS)
• WILDCARD: *.intigriti.net (OOS)
• OTHER: any intigriti CTF or challenge (OOS)
• URL: api.intercom.io (OOS)
• URL: autodiscover.intigriti.com (OOS)
• URL: careers.intigriti.com (OOS)
• URL: click.intigriti.com (OOS)
• URL: go.intigriti.com (OOS)
• URL: kb.intigriti.com (OOS)
• URL: mail.intigriti.com (OOS)
• URL: newsletter.intigriti.com (OOS)
• OTHER: our hubspot pages (/hs-fs/, /hubfs/, /hs/, /_hcms/, landing/, report/, webinar/, /datasheet, /customer/, /video/...) (OOS)
• URL: status.intigriti.com (OOS)
• URL: swag.intigriti.com (OOS)
• URL: trust.intigriti.com (OOS)

In Scope Assets:

• WILDCARD: *.klubcinema.fr
• WILDCARD: *.megatix.be
• URL: booking.mjrtheatres.com
• URL: extras.landmarkcinemas.com
• URL: identityserver.landmarkcinemas.com
• URL: kinepolis.megatix.be
• URL: luxfilmfestfilms.megatix.be
• URL: luxfilmfestproducts.megatix.be
• URL: luxfilmfesttickets.megatix.be
• URL: movieapi.kinepolis.megatix.be
• URL: tickets.kinepolis.be
• URL: tickets.kinepolis.ch
• URL: tickets.kinepolis.es
• URL: tickets.kinepolis.fr
• URL: tickets.kinepolis.lu
• URL: tickets.kinepolis.nl
• URL: userprofile-ui.landmarkcinemas.com
• URL: www.kinepolis.be
• URL: www.kinepolis.ch
• URL: www.kinepolis.com
• URL: www.kinepolis.es
• URL: www.kinepolis.fr
• URL: www.kinepolis.lu
• URL: www.kinepolis.nl
• URL: www.landmarkcinemas.com
• URL: www.mjrtheatres.com
• URL: business.kinepolis.be
• URL: business.kinepolis.lu
• URL: business.kinepolis.nl
• ANDROID: com.inthepocket.kinepolis
• URL: extras-acc.landmarkcinemas.com
• URL: https://movieclub-int.kinepolis.com
• URL: https://movienow-int.kinepolis.be/admin
• URL: https://shop-acc.kinepolis.be/
• URL: identityserver-acc.landmarkcinemas.com
• URL: kinepolis-studio.be
• IOS: kinepolis/id368204284
• ANDROID: nz.co.vista.android.movie.mjrtheatres
• URL: stage.landmarkcinemas.com
• URL: userprofile-acc.landmarkcinemas.com
• URL: www.kinepolis.biz
• WILDCARD: *.kinepolis.be
• WILDCARD: *.kinepolis.ch
• WILDCARD: *.kinepolis.com
• WILDCARD: *.kinepolis.fr
• WILDCARD: *.kinepolis.lu
• WILDCARD: *.kinepolis.nl
• WILDCARD: *.landmarkcinemas.com
• WILDCARD: *.mjrtheatres.com
• IOS: 522089287

Out of Scope Assets:

• WILDCARD: *.cineramabios.nl (OOS)
• URL: dev.kinepolis.com (OOS)
• URL: helpdesk.landmarkcinemas.com (OOS)
• URL: jobs.kinepolis.com (OOS)
• URL: l.kinepolis.com (OOS)
• URL: openx.kinepolis.com (OOS)
• URL: shop.kinepolis.be (OOS)
• URL: shop.kinepolis.es (OOS)
• URL: shop.kinepolis.fr (OOS)
• URL: shop.kinepolis.lu (OOS)

In Scope Assets:

• WILDCARD: https://webwsp.aps.kuleuven.be/sap/bc/ui5_ui5/sap/zc_ad_appl/*
• WILDCARD: https://webwsp.aps.kuleuven.be/sap/opu/odata/sap/ ZC_AD_APPLICANT_SRV/*

Out of Scope Assets:

• URL: https://secure.ogone.com (OOS)
• URL: https://idp.kuleuven.be/idp/ (OOS)
• URL: https://account.kuleuven.be/ (OOS)

In Scope Assets:

• URL: https://www.kuleuven.be/sapredir/huisvesting

In Scope Assets:

• URL: https://associatie.kuleuven.be/inschrijvingen/oli_login_50000050
• URL: https://webwsp.aps.kuleuven.be/sap/bc/ui5_ui5/sap/zc_oi_appl/

In Scope Assets:

• URL: service.fing.com
• URL: app.fing.com
• URL: Fing desktop

In Scope Assets:

• URL: edge.lansweeper.com
• URL: api.lansweeper.com
• URL: app.lansweeper.com
• URL: backoffice.lansweeper.com
• URL: https://lsagentrelay.lansweeper.com/
• URL: Modernized Discovery
• URL: app.lansweeper.com/trial
• URL: autoupdateapi.lansweeper.com
• URL: docs.lansweeper.com
• URL: login.lansweeper.com
• URL: on-premises software
• URL: www.lansweeper.com

Out of Scope Assets:

• OTHER: lsrunase2.0 and lsencrypt2.0 (OOS)
• URL: careers.lansweeper.com (OOS)
• URL: www.lansweeper.com/forum (OOS)

In Scope Assets:

• URL: https://miro.com/
• URL: https://miro.com/app
• URL: static-website.miro.com
• URL: mirostatic.com
• URL: https://mirosite.com/
• WILDCARD: https://api.miro.com/*
• OTHER: Miro SDK
• URL: https://miro.com/insights/app
• URL: https://miro.com/blog/
• OTHER: eu01.miro.com
• OTHER: us01.miro.com
• OTHER: au01.miro.com
• OTHER: svc.eu01.miro.com
• OTHER: svc.us01.miro.com
• OTHER: svc.au01.miro.com
• OTHER: svg-convert.eu01.miro.com
• OTHER: svg-convert.us01.miro.com
• OTHER: svg-convert.au01.miro.com
• OTHER: r.eu01.miro.com, r01.eu01.miro.com, r02.eu01.miro.com
• OTHER: r.us01.miro.com, r01.us01.miro.com, r02.us01.miro.com
• OTHER: r.au01.miro.com, r01.a01.miro.com, r02.au01.miro.com
• OTHER: eventhub.eu01.miro.com
• OTHER: eventhub.us01.miro.com
• OTHER: eventhub.au01.miro.com
• OTHER: integrations.eu01.miro.com
• OTHER: integrations.us01.miro.com
• OTHER: integrations.au01.miro.com
• IOS: 1180074773
• ANDROID: com.realtimeboard
• OTHER: MacOs Desktop Application
• OTHER: Windows Desktop Application
• OTHER: Confluence Cloud Plugin for Miro
• OTHER: Jira Cards for Miro
• OTHER: Jira Cloud Plugin for Miro

Out of Scope Assets:

• WILDCARD: miro.com/contact/* (OOS)
• OTHER: MarketPlace Submission Process (OOS)
• OTHER: Feedback forms (OOS)
• URL: https://community.miro.com/ (OOS)
• URL: https://developers.miro.com/ (OOS)
• WILDCARD: https://help.miro.com/* (OOS)
• URL: https://status.miro.com (OOS)
• WILDCARD: miro.com/careers/vacancy/* (OOS)
• OTHER: trcksplt.miro.com (OOS)
• URL: https://uizard.io/ (OOS)
• URL: https://support.uizard.io/ (OOS)

In Scope Assets:

• WILDCARD: *.monzo.com
• WILDCARD: *.prod-ffs.io
• IOS: 1052238659
• ANDROID: co.uk.getmondo
• URL: www.monzo.com
• URL: monzo.com

Out of Scope Assets:

• WILDCARD: */p2p/* (OOS)
• WILDCARD: */contact-discovery/* (OOS)
• WILDCARD: */inbound-p2p/* (OOS)
• WILDCARD: *.monzo.me (OOS)
• URL: community.monzo.com (OOS)
• URL: login.internal.monzo.com (OOS)
• URL: monzo.me (OOS)

In Scope Assets:

• URL: mobilevikings.be
• URL: api.unleashed.be
• URL: jimmobile.be
• URL: uwa.mobilevikings.be
• URL: vpn.mobilevikings.be
• WILDCARD: *.mas.mobilevikings.be
• WILDCARD: *.mobilevikings.be
• WILDCARD: *.prd-pub.mobilevikings.be
• WILDCARD: *.prd.mobilevikings.be
• URL: mgm.mobilevikings.be
• URL: vikingco.be
• URL: vikingdeals.be

In Scope Assets:

• URL: analytics.ninjakiwi.com
• URL: api.ninjakiwi.com
• URL: guts.ninjakiwi.com
• WILDCARD: *.ninjakiwi.me
• WILDCARD: *.nkstatic.com
• URL: battles.tv
• URL: data.ninjakiwi.com
• URL: ninja.kiwi
• URL: ninjakiwi.com
• URL: alerts.ninjakiwi.com
• URL: boomer2.ninjakiwi.com
• URL: ct.ninjakiwi.com
• URL: mynk-dash.ninjakiwi.com
• URL: mynk.ninjakiwi.com

Out of Scope Assets:

• URL: store.ninjakiwi.com (OOS)
• URL: support.ninjakiwi.com (OOS)

In Scope Assets:

• IOS: 1076840480
• IOS: 1079537578
• URL: https://mathem.se
• URL: https://oda.com
• ANDROID: no.kolonial.tienda
• ANDROID: se.mathem.mathem
• WILDCARD: *.oda.com
• WILDCARD: *.prod.nube.tech