Scope Data

In Scope Assets:

• URL: app.aikido.dev

Out of Scope Assets:

• WILDCARD: *.aikido.dev (OOS)

In Scope Assets:

• OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability
• OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability
• OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass
• OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass
• OTHER: https://github.com/AikidoSec/firewall-node#False Positive
• OTHER: https://github.com/AikidoSec/firewall-python#False Positive

In Scope Assets:

• WILDCARD: *.allegro.cz.allegrosandbox.pl
• WILDCARD: *.allegro.pl.allegrosandbox.pl
• WILDCARD: *.allegro.sk.allegrosandbox.pl

Out of Scope Assets:

• WILDCARD: *.allegro.cz (OOS)
• WILDCARD: *.allegro.pl (OOS)
• WILDCARD: *.allegro.sk (OOS)
• WILDCARD: *.allegrogroup.com (OOS)
• OTHER: Any production website owned by Allegro not listed in Domains (OOS)

In Scope Assets:

• DEVICE: Firmware
• DEVICE: Hardware
• OTHER: FPGA Solution Development Tools and Utilities
• OTHER: Software

In Scope Assets:

• OTHER: Hardware
• OTHER: Firmware
• OTHER: Software

Out of Scope Assets:

• OTHER: Out of Scope (OOS)

In Scope Assets:

• URL: api-wallet.venly.io
• URL: api.arkane.network
• URL: connect.arkane.network
• URL: connect.venly.io
• URL: login.arkane.network
• URL: login.venly.io
• URL: wallet.venly.io
• URL: api-wallet-sandbox.venly.io

In Scope Assets:

• WILDCARD: *.bild.de
• WILDCARD: *.bild.tv
• WILDCARD: *.computerbild.de
• WILDCARD: *.welt.de
• CIDR: 18.184.198.198, 18.185.214.59, 18.194.109.179, 3.121.117.72, 3.121.138.10, 3.121.138.128, 3.121.138.134, 3.121.138.170, 3.121.138.33, 3.121.138.43, 3.124.248.208, 35.156.137.39
• URL: https://dealer.prod.ps.axelspringer.de/api/v1/partners/{partnerId}/activation
• WILDCARD: https://dealer.prod.ps.axelspringer.de/purchases/004/bild/*
• WILDCARD: https://dealer.prod.ps.axelspringer.de/purchases/004/welt/*
• WILDCARD: *.autobild.de
• WILDCARD: *.bz-berlin.de
• WILDCARD: *.spring-media.de
• WILDCARD: *.springtools.de
• URL: editorial.one
• WILDCARD: *.ein-herz-fuer-kinder.de
• WILDCARD: *.fitbook.de
• WILDCARD: *.myhomebook.de
• WILDCARD: *.petbook-magazine.com/
• WILDCARD: *.petbook.de
• WILDCARD: *.stylebook.de
• WILDCARD: *.techbook.de
• WILDCARD: *.travelbook.de
• WILDCARD: *.wissen-sie-mehr.de

Out of Scope Assets:

• WILDCARD: *.axelspringer.com (OOS)
• URL: technik.autobild.de (OOS)
• URL: technik.beta.autobild.de (OOS)

In Scope Assets:

• DEVICE: Functions dealing with vehicle access and immobilizer
• IOS: 1519034860
• ANDROID: de.bmw.connected.mobile20.row
• DEVICE: Remaining functions

In Scope Assets:

• URL: www.bmw-motorrad.de
• URL: www.bmw.de
• URL: www.mini.de
• URL: configure.bmw.de
• URL: configure.mini.de
• URL: konfigurator.bmw-motorrad.de

Out of Scope Assets:

• OTHER: Automotive Security (OOS)
• OTHER: Domains from independent BMW Dealers, Resellers or Fanclubs (OOS)

In Scope Assets:

• URL: https://justonweb.be/fines/

In Scope Assets:

• URL: www.bpost2.be
• URL: imove.bpost.cloud

In Scope Assets:

• URL: payment.backend-capital.com
• WILDCARD: *.backend-capital.com
• WILDCARD: capital.com/*
• IOS: com.capital.trading
• ANDROID: com.capital.trading
• URL: open-api.capital.com
• WILDCARD: *.capital.com
• WILDCARD: *.itcapital.io

Out of Scope Assets:

• WILDCARD: *affiliates.backend-capital.com (OOS)
• WILDCARD: *eduapp.backend-capital.com (OOS)
• WILDCARD: *education.backend-capital.com (OOS)
• URL: help.capital.com (OOS)
• URL: join-cyprus.capital.com (OOS)

In Scope Assets:

• URL: login.cm.com
• WILDCARD: *.ticketing.cm.com
• URL: api.cm.com
• URL: api.cmtelecom.com
• WILDCARD: cm.com/[locale]/app/*
• URL: cm.com/[locale]/register
• URL: appmiral.com
• URL: building-blocks.com
• URL: cm.com/app/messagingtrial/
• URL: cmcom.atlassian.net
• URL: www.cm.com

In Scope Assets:

• IOS: 1174047097
• ANDROID: eu.coolblue.shop
• OTHER: mobile-api.coolblue-production.eu
• URL: www.coolblue.be
• URL: www.coolblue.de
• URL: www.coolblue.nl
• URL: arbeitenbeicoolblue.de
• URL: careersatcoolblue.com
• URL: travaillerchezcoolblue.be
• URL: werkenbijcoolblue.be
• URL: werkenbijcoolblue.com
• URL: werkenbijcoolblue.nl

In Scope Assets:

• URL: app.datacamp.com/certification
• URL: app.datacamp.com/groups
• URL: app.datacamp.com/learn
• URL: assessment-api.datacamp.com
• URL: assessment-v2.datacamp.com
• URL: assessment.datacamp.com
• URL: campus.datacamp.com
• ANDROID: com.datacamp
• IOS: https://apps.apple.com/au/app/datacamp-learn-data-science/id1263413087
• URL: practice.datacamp.com
• URL: projects.datacamp.com
• URL: www.datacamp.com
• URL: www.datacamp.com/datalab
• WILDCARD: *.datacamp.com

Out of Scope Assets:

• WILDCARD: *.it.datacamp.com (OOS)
• URL: app.datacamp.com/recruit (OOS)
• URL: ast-viewer.datacamp.com (OOS)
• URL: confluence.datacamp.com (OOS)
• URL: dccertified.datacamp.com (OOS)
• URL: intranet.datacamp.com (OOS)
• URL: jira.datacamp.com (OOS)
• URL: links.datacamp.com (OOS)
• URL: rdocumentation.datacamp.com (OOS)
• URL: signature.datacamp.com (OOS)
• URL: status.datacamp.com (OOS)
• URL: support.datacamp.com (OOS)
• URL: talent-jobs-api.datacamp.com (OOS)

In Scope Assets:

• URL: api.digital.delen.be
• URL: api.digital.delen.lu
• URL: app.delen.be
• URL: app.delen.ch
• URL: app.delen.lu
• URL: auth.digital.delen.be
• URL: auth.digital.delen.lu
• ANDROID: be.delen.digital
• IOS: delen/id1064839588
• URL: login.delen.be
• URL: login.delen.ch
• URL: login.delen.lu
• URL: login.oyens.com
• URL: status.delen.be
• URL: sts.delen.be
• URL: www.cadelam.be
• URL: www.cadelux.lu/en
• URL: www.delen.bank
• URL: www.delen.be/en

In Scope Assets:

• WILDCARD: *.cloudways.com
• URL: api.cloudways.com
• URL: developers.cloudways.com
• URL: platform.cloudways.com
• URL: unified.cloudways.com
• URL: www.cloudways.com
• URL: css-tricks.com

In Scope Assets:

• WILDCARD: *.digitalocean.com
• CIDR: 169.254.169.254
• URL: api.digitalocean.com
• URL: cloud.digitalocean.com
• OTHER: https://github.com/digitalocean/do-agent
• OTHER: https://github.com/digitalocean/doctl
• OTHER: https://github.com/digitalocean/droplet-agent
• OTHER: https://github.com/digitalocean/go-nbd
• OTHER: https://github.com/digitalocean/terraform-provider-digitalocean
• URL: marketplace.digitalocean.com
• URL: snapshooter.com
• URL: www.digitalocean.com
• URL: digitaloceanmirrors.com
• URL: digitaloceanpartners.com
• URL: digitaloceanstatus.com
• URL: digitaloceantest.com
• URL: do.co
• URL: hackathon-tracker.digitalocean.com
• URL: hacktoberfest.com
• OTHER: https://github.com/digitalocean/do-markdownit

Out of Scope Assets:

• WILDCARD: *.db.ondigitalocean.com (OOS)
• WILDCARD: *.digitaloceanspaces.com (OOS)
• WILDCARD: *.doserverless.co (OOS)
• WILDCARD: *.k8s.ondigitalocean.com (OOS)
• WILDCARD: *.ondigitalocean.app (OOS)
• OTHER: Assets created by other DigitalOcean customers (OOS)
• OTHER: Marketplace Apps and Add-Ons (OOS)
• OTHER: Other DigitalOcean open source projects not listed (OOS)
• WILDCARD: registry.digitalocean.com/* (OOS)

In Scope Assets:

• URL: myaccount.ad.nl
• URL: webwinkel.ad.nl
• URL: www.ad.nl
• URL: www.ad.nl/abonnementen
• WILDCARD: *.ad.nl

In Scope Assets:

• URL: myaccount.demorgen.be
• URL: shop.demorgen.be
• URL: www.demorgen.be
• URL: www.demorgen.be/abonnementen
• WILDCARD: *.demorgen.be

Out of Scope Assets:

• WILDCARD: * demorgen.be/inloggen (OOS)
• WILDCARD: * demorgen.be/login (OOS)
• WILDCARD: * demorgen.be/registreren (OOS)
• WILDCARD: * demorgen.be/service (OOS)
• URL: abonnement.demorgen.be (OOS)

In Scope Assets:

• URL: myaccount.volkskrant.nl
• URL: shop.volkskrant.nl
• URL: webwinkel.volkskrant.nl
• URL: www.volkskrant.nl
• URL: www.volkskrant.nl/abonnementen
• WILDCARD: *.volkskrant.nl

In Scope Assets:

• WILDCARD: *.dpgmedia.be
• WILDCARD: *.dpgmedia.nl
• OTHER: Any related DPG media domain

In Scope Assets:

• WILDCARD: * hln.be/inloggen
• WILDCARD: * hln.be/login
• WILDCARD: * hln.be/registreren
• URL: hln.be
• URL: myaccount.hln.be
• URL: www.hln.be
• WILDCARD: *.hln.be

Out of Scope Assets:

• WILDCARD: * hln.be/service (OOS)

In Scope Assets:

• URL: myaccount.parool.nl
• URL: shop.parool.nl
• URL: webwinkel.parool.nl
• URL: www.parool.nl
• URL: www.parool.nl/abonnementen
• WILDCARD: *.parool.nl

Out of Scope Assets:

• WILDCARD: * parool.nl/inloggen (OOS)
• WILDCARD: * parool.nl/login (OOS)
• WILDCARD: * parool.nl/registreren (OOS)
• WILDCARD: * parool.nl/service (OOS)
• URL: abonnement.parool.nl (OOS)

In Scope Assets:

• WILDCARD: * humo.be/registreren
• URL: myaccount.humo.be
• URL: shop.humo.be
• URL: www.humo.be
• URL: www.humo.be/abonnementen
• WILDCARD: *.humo.be

Out of Scope Assets:

• WILDCARD: * humo.be/inloggen (OOS)
• WILDCARD: * humo.be/login (OOS)
• WILDCARD: * humo.be/service (OOS)
• URL: abonnement.humo.be (OOS)

In Scope Assets:

• URL: www.libelle.nl
• WILDCARD: *.libelle.nl

Out of Scope Assets:

• WILDCARD: * libelle.nl/inloggen (OOS)
• WILDCARD: * libelle.nl/login (OOS)
• WILDCARD: * libelle.nl/registreren (OOS)
• WILDCARD: * libelle.nl/service (OOS)

In Scope Assets:

• URL: myaccount.trouw.nl
• URL: shop.trouw.nl
• URL: webwinkel.trouw.nl
• URL: www.trouw.nl
• URL: www.trouw.nl/abonnementen
• WILDCARD: *.trouw.nl

Out of Scope Assets:

• WILDCARD: * trouw.nl/inloggen (OOS)
• WILDCARD: * trouw.nl/login (OOS)
• WILDCARD: * trouw.nl/registreren (OOS)
• WILDCARD: * trouw.nl/service (OOS)
• URL: abonnement.trouw.nl (OOS)

In Scope Assets:

• WILDCARD: *.tweakblogs.net
• WILDCARD: *.tweakers.net
• WILDCARD: *.tweakimg.net

Out of Scope Assets:

• URL: elect.tweakers.net (OOS)

In Scope Assets:

• URL: myaccount.vtm.be
• URL: vtm.be/vtmgo
• URL: vtmgo.be
• WILDCARD: *.vtm.be
• WILDCARD: *.vtmgo.be

Out of Scope Assets:

• WILDCARD: * vtmgo.be/inloggen (OOS)
• WILDCARD: * vtmgo.be/login (OOS)
• WILDCARD: * vtmgo.be/registreren (OOS)
• WILDCARD: * vtmgo.be/service (OOS)
• URL: shop.vtm.be (OOS)

In Scope Assets:

• WILDCARD: *.es-dis.net
• WILDCARD: *.es-pio.net
• URL: auth.embark.net
• URL: id.embark.games
• WILDCARD: *.observability.embark.net
• URL: asset-metadata-api.embark.net
• URL: github.com/EmbarkStudios/presser
• URL: grafana.embark.net
• URL: has.embark.net
• URL: p4-submit-service.embark.net
• URL: perforce.embark.net
• URL: swarm.embark.net
• URL: user-lookup-api.embark.net
• URL: vpn.embark.net
• URL: arcraiders.com
• URL: embark-studios.com
• URL: github.com/EmbarkStudios/cargo-about
• URL: github.com/EmbarkStudios/cargo-deny
• URL: github.com/EmbarkStudios/crash-handling
• URL: reachthefinals.com

In Scope Assets:

• OTHER: Grafana Loki
• OTHER: Grafana Mimir
• OTHER: Grafana OSS
• OTHER: Grafana Pyroscope
• OTHER: Grafana Tempo
• WILDCARD: https://github.com/grafana/*

Out of Scope Assets:

• WILDCARD: *.grafana.com (OOS)
• WILDCARD: *.grafana.net (OOS)

In Scope Assets:

• WILDCARD: *.account.api.here.com
• WILDCARD: *.account.here.com
• WILDCARD: *.mobilitygraph.hereapi.com
• WILDCARD: *.router.hereapi.com
• WILDCARD: *.scbe.api.here.com
• WILDCARD: *.subp-router.hereapi.com
• IOS: 955837609
• ANDROID: com.here.app.maps
• URL: https://jaguar.here.com
• URL: https://landrover.here.com
• OTHER: Leaked/compromised employee accounts *.here.com
• WILDCARD: *.here.com
• WILDCARD: *.hereapi.com

In Scope Assets:

• OTHER: Backend/Non-Game
• OTHER: Elvenar
• OTHER: Forge of Empires
• OTHER: Grepolis
• OTHER: Tribal Wars

Out of Scope Assets:

• URL: autodiscover.innogames.de (OOS)
• URL: exchange.innogames.de (OOS)
• URL: igjam.eu (OOS)
• URL: jamf.innogames.com (OOS)
• URL: mail.innogames.com (OOS)
• URL: newsroom.innogames.com (OOS)
• URL: pn.innogames.com (OOS)
• URL: slack.innogames.de (OOS)
• URL: typingmind.innogames.de (OOS)

In Scope Assets:

• OTHER: Hardware
• OTHER: Firmware
• OTHER: Software
• OTHER: Services

In Scope Assets:

• IOS: 949829216
• IOS: 950680989
• IOS: 950693949
• ANDROID: be.gamma.app.android
• WILDCARD: kassa.gamma.be/*
• WILDCARD: kassa.gamma.nl/*
• WILDCARD: kassa.karwei.nl/*
• WILDCARD: mijn.gamma.be/*
• WILDCARD: mijn.gamma.nl/*
• WILDCARD: mijn.karwei.nl/*
• ANDROID: nl.gamma.app.android
• ANDROID: nl.karwei.app.android
• WILDCARD: www.gamma.be/*
• WILDCARD: www.gamma.nl/*
• WILDCARD: www.karwei.nl/*
• WILDCARD: *.gamma.be/*
• WILDCARD: *.gamma.nl/*
• WILDCARD: *.intergamma.cloud
• WILDCARD: *.intergamma.nl/*
• WILDCARD: *.karwei.nl/*
• WILDCARD: *.restintergamma.nl
• IOS: 1558129454
• WILDCARD: *.intergamma-test.nl
• WILDCARD: *.werkenbijgamma.be
• WILDCARD: *.werkenbijgamma.nl
• WILDCARD: *.werkenbijkarwei.nl

Out of Scope Assets:

• WILDCARD: *.configuratoren.nl/* (OOS)
• URL: afspraakmaken.gamma.nl (OOS)
• URL: api.afspraakmaken.gamma.be (OOS)
• URL: api.afspraakmaken.gamma.nl (OOS)
• URL: api.maakafspraak.karwei.nl (OOS)
• OTHER: Everything related to configurators, both on primary as other domains (OOS)
• URL: horrenconfigurator-fr.gamma.be (OOS)
• URL: horrenconfigurator-nl.gamma.be (OOS)
• URL: horrenconfigurator.karwei.nl (OOS)
• URL: karwei-2018.hetmooistegordijn.nl (OOS)
• URL: maakafspraak.karwei.nl (OOS)
• URL: mail.gamma.be (OOS)
• URL: mail.gamma.nl (OOS)
• URL: mail.karwei.nl (OOS)

In Scope Assets:

• WILDCARD: *pwn.intigriti.rocks
• URL: www.intigriti.com

Out of Scope Assets:

• WILDCARD: *.intigriti.io (OOS)
• WILDCARD: *.intigriti.me (OOS)
• WILDCARD: *.intigriti.net (OOS)
• OTHER: any intigriti CTF or challenge (OOS)
• URL: api.intercom.io (OOS)
• URL: autodiscover.intigriti.com (OOS)
• URL: careers.intigriti.com (OOS)
• URL: click.intigriti.com (OOS)
• URL: go.intigriti.com (OOS)
• URL: kb.intigriti.com (OOS)
• URL: mail.intigriti.com (OOS)
• URL: newsletter.intigriti.com (OOS)
• OTHER: our hubspot pages (/hs-fs/, /hubfs/, /hs/, /_hcms/, landing/, report/, webinar/, /datasheet, /customer/, /video/...) (OOS)
• URL: status.intigriti.com (OOS)
• URL: swag.intigriti.com (OOS)
• URL: t.intigriti.com (OOS)
• URL: trust.intigriti.com (OOS)
• URL: welcome.intigriti.com (OOS)

In Scope Assets:

• WILDCARD: *.klubcinema.fr
• WILDCARD: *.megatix.be
• URL: booking.mjrtheatres.com
• URL: extras.landmarkcinemas.com
• URL: identityserver.landmarkcinemas.com
• URL: kinepolis.megatix.be
• URL: luxfilmfestfilms.megatix.be
• URL: luxfilmfestproducts.megatix.be
• URL: luxfilmfesttickets.megatix.be
• URL: movieapi.kinepolis.megatix.be
• URL: tickets.kinepolis.be
• URL: tickets.kinepolis.ch
• URL: tickets.kinepolis.es
• URL: tickets.kinepolis.fr
• URL: tickets.kinepolis.lu
• URL: tickets.kinepolis.nl
• URL: userprofile-ui.landmarkcinemas.com
• URL: www.kinepolis.be
• URL: www.kinepolis.ch
• URL: www.kinepolis.com
• URL: www.kinepolis.es
• URL: www.kinepolis.fr
• URL: www.kinepolis.lu
• URL: www.kinepolis.nl
• URL: www.landmarkcinemas.com
• URL: www.mjrtheatres.com
• URL: business.kinepolis.be
• URL: business.kinepolis.lu
• URL: business.kinepolis.nl
• ANDROID: com.inthepocket.kinepolis
• URL: extras-acc.landmarkcinemas.com
• URL: https://movieclub-int.kinepolis.com
• URL: https://movienow-int.kinepolis.be/admin
• URL: https://shop-acc.kinepolis.be/
• URL: identityserver-acc.landmarkcinemas.com
• URL: kinepolis-studio.be
• IOS: kinepolis/id368204284
• ANDROID: nz.co.vista.android.movie.mjrtheatres
• URL: stage.landmarkcinemas.com
• URL: userprofile-acc.landmarkcinemas.com
• URL: www.kinepolis.biz
• WILDCARD: *.kinepolis.be
• WILDCARD: *.kinepolis.ch
• WILDCARD: *.kinepolis.com
• WILDCARD: *.kinepolis.fr
• WILDCARD: *.kinepolis.lu
• WILDCARD: *.kinepolis.nl
• WILDCARD: *.landmarkcinemas.com
• WILDCARD: *.mjrtheatres.com
• IOS: 522089287

Out of Scope Assets:

• WILDCARD: *.cineramabios.nl (OOS)
• URL: dev.kinepolis.com (OOS)
• URL: helpdesk.landmarkcinemas.com (OOS)
• URL: jobs.kinepolis.com (OOS)
• URL: l.kinepolis.com (OOS)
• URL: openx.kinepolis.com (OOS)
• URL: shop.kinepolis.be (OOS)
• URL: shop.kinepolis.es (OOS)
• URL: shop.kinepolis.fr (OOS)
• URL: shop.kinepolis.lu (OOS)

In Scope Assets:

• WILDCARD: https://webwsp.aps.kuleuven.be/sap/bc/ui5_ui5/sap/zc_ad_appl/*
• WILDCARD: https://webwsp.aps.kuleuven.be/sap/opu/odata/sap/ ZC_AD_APPLICANT_SRV/*

Out of Scope Assets:

• URL: https://secure.ogone.com (OOS)
• URL: https://idp.kuleuven.be/idp/ (OOS)
• URL: https://account.kuleuven.be/ (OOS)

In Scope Assets:

• URL: https://www.kuleuven.be/sapredir/huisvesting

In Scope Assets:

• URL: https://associatie.kuleuven.be/inschrijvingen/oli_login_50000050
• URL: https://webwsp.aps.kuleuven.be/sap/bc/ui5_ui5/sap/zc_oi_appl/

In Scope Assets:

• URL: service.fing.com
• URL: app.fing.com
• URL: Fing desktop

In Scope Assets:

• URL: edge.lansweeper.com
• URL: api.lansweeper.com
• URL: app.lansweeper.com
• URL: backoffice.lansweeper.com
• URL: https://lsagentrelay.lansweeper.com/
• URL: Modernized Discovery
• URL: app.lansweeper.com/trial
• URL: autoupdateapi.lansweeper.com
• URL: docs.lansweeper.com
• URL: login.lansweeper.com
• URL: on-premises software
• URL: www.lansweeper.com

Out of Scope Assets:

• OTHER: lsrunase2.0 and lsencrypt2.0 (OOS)
• URL: careers.lansweeper.com (OOS)
• URL: www.lansweeper.com/forum (OOS)

In Scope Assets:

• WILDCARD: *.monzo.com
• WILDCARD: *.monzo.me
• WILDCARD: *.prod-ffs.io
• IOS: 1052238659
• ANDROID: co.uk.getmondo

Out of Scope Assets:

• URL: community.monzo.com (OOS)
• URL: login.internal.monzo.com (OOS)
• URL: monzo.me/ (OOS)

In Scope Assets:

• URL: mobilevikings.be
• URL: api.unleashed.be
• URL: jimmobile.be
• URL: uwa.mobilevikings.be
• URL: vpn.mobilevikings.be
• WILDCARD: *.mas.mobilevikings.be
• WILDCARD: *.mobilevikings.be
• WILDCARD: *.prd-pub.mobilevikings.be
• WILDCARD: *.prd.mobilevikings.be
• URL: mgm.mobilevikings.be
• URL: vikingco.be
• URL: vikingdeals.be

In Scope Assets:

• URL: analytics.ninjakiwi.com
• URL: api.ninjakiwi.com
• URL: guts.ninjakiwi.com
• WILDCARD: *.ninjakiwi.me
• WILDCARD: *.nkstatic.com
• URL: battles.tv
• URL: data.ninjakiwi.com
• URL: ninja.kiwi
• URL: ninjakiwi.com
• URL: alerts.ninjakiwi.com
• URL: boomer2.ninjakiwi.com
• URL: ct.ninjakiwi.com
• URL: mynk-dash.ninjakiwi.com
• URL: mynk.ninjakiwi.com

Out of Scope Assets:

• URL: store.ninjakiwi.com (OOS)
• URL: support.ninjakiwi.com (OOS)

In Scope Assets:

• IOS: 1076840480
• IOS: 1079537578
• URL: https://mathem.se
• URL: https://oda.com
• ANDROID: no.kolonial.tienda
• ANDROID: se.mathem.mathem
• WILDCARD: *.oda.com
• WILDCARD: *.prod.nube.tech

In Scope Assets:

• URL: https://a.simplemdm.com/
• URL: https://auth2.pdq.tools/
• URL: https://library-staging.pdq.tools/
• URL: https://detect.pdq.tools/
• URL: https://houston-staging.pdq.tools
• URL: https://portal-staging.pdq.tools/

Out of Scope Assets:

• WILDCARD: https://*.pdq.com/ (OOS)
• WILDCARD: https://*.simplemdm.com/ (OOS)
• WILDCARD: https://*.smartdeploy.com/ (OOS)

In Scope Assets:

• WILDCARD: *.app.personio-dev.com
• WILDCARD: *.app.personio.com
• WILDCARD: *.personio-internal.de
• WILDCARD: *.personio.tools
• URL: api.personio-dev.com
• URL: api.personio.com
• WILDCARD: https://*.personio.de
• WILDCARD: https://*.personiowhistleblowing.com
• URL: https://community.personio.com
• URL: https://hug.personio.com
• URL: https://sec-test-<intigriti handle>-<nn>.personio.de
• URL: https://www.personio.com/free-trial/
• URL: https://www.personio.de/kostenlos-testen/
• URL: Other assets owned by Personio

Out of Scope Assets:

• URL: www.personio.de (OOS)
• URL: personio.slack.com (OOS)
• URL: statuspage.personio.de (OOS)
• URL: support.personio.de (OOS)
• URL: www.personio.com (OOS)
• URL: www.personio.es (OOS)

In Scope Assets:

• CIDR: 188.118.8.0/25
• CIDR: 94.107.237.192/26
• URL: api-accpt.portofantwerp.com
• URL: api-accpt.portofantwerpbruges.com
• URL: api.portofantwerp.com
• URL: api.portofantwerpbruges.com
• URL: apps-accpt.portofantwerp.com
• URL: apps-accpt.portofantwerpbruges.com
• URL: apps.portofantwerp.com
• URL: apps.portofantwerpbruges.com
• URL: as2-accpt.portofantwerp.com
• URL: as2-accpt.portofantwerpbruges.com
• URL: as2.portofantwerp.com
• URL: as2.portofantwerpbruges.com
• URL: digitalspecs.portofantwerpbruges.com
• URL: login-accpt.portofantwerpbruges.com
• URL: login-test.portofantwerpbruges.com/poam/XUI/
• URL: login.portofantwerpbruges.com
• URL: maximo-accpt.portofantwerp.com
• URL: maximo-accpt.portofantwerpbruges.com
• URL: maximo.portofantwerp.com
• URL: maximo.portofantwerpbruges.com
• URL: maximo.portofantwerpbruges.com
• URL: my-accpt.portofantwerp.com
• URL: my-accpt.portofantwerpbruges.com
• URL: my.portofantwerp.com
• URL: my.portofantwerpbruges.com
• URL: notula-accpt.portofantwerpbruges.com
• URL: oprc.portofantwerpbruges.com
• URL: register-accpt.portofantwerp.com
• URL: register-accpt.portofantwerpbruges.com
• URL: servicedesk-accpt.portofantwerp.com
• URL: servicedesk-accpt.portofantwerpbruges.com
• URL: servicedesk.portofantwerp.com
• URL: servicedesk.portofantwerpbruges.com
• URL: share-accpt.portofantwerp.com
• URL: share-accpt.portofantwerpbruges.com
• URL: share.portofantwerp.com
• URL: share.portofantwerpbruges.com
• URL: webapps-accpt.portofantwerp.com
• URL: webapps-accpt.portofantwerpbruges.com
• URL: webapps-test.portofantwerpbruges.com/xui
• URL: webapps.portofantwerp.com
• URL: webapps.portofantwerpbruges.com
• URL: wiki-accpt.portofantwerp.com
• URL: wiki-accpt.portofantwerpbruges.com
• URL: wiki.portofantwerp.com
• URL: wiki.portofantwerpbruges.com
• URL: www.oursustainableport.com
• URL: www.portofantwerpbruges.com
• URL: erpx.unit4cloud.com/u4erx_pab_acp1
• URL: erpx.unit4cloud.com/u4erx_pab_prev
• URL: erpx.unit4cloud.com/u4erx_pab_prod

Out of Scope Assets:

• URL: future.portofantwerp.com (OOS)
• URL: future.portofantwerpbruges.com (OOS)
• URL: jobs.portofantwerp.com (OOS)
• URL: jobs.portofantwerpbruges.com (OOS)
• URL: media.portofantwerp.com (OOS)
• URL: media.portofantwerpbruges.com (OOS)
• URL: register.portofantwerp.com (OOS)
• URL: register.portofantwerpbruges.com (OOS)

In Scope Assets:

• URL: https://azuregateway.prato.be/RDWeb
• URL: https://dashboardintigrititestmt.earnieapp.be
• URL: https://earnie-bv.prato.be
• URL: https://earnie-dmfa.prato.be
• URL: https://earnie-dmfaui.prato.be/tenant/intigrititestmt
• URL: https://intigrititestmt.prato.be
• URL: https://reportinguiintigrititestmt.earnieapp.be/
• URL: https://testelviveasrintigrititestmtwa.azurewebsites.net
• URL: https://testelviveasruiintigrititestmtwa.azurewebsites.net
• URL: https://testelvivebelcotaxintigrititestmtwa.azurewebsites.net
• URL: https://testelviveboekhoudingintigrititestmtwa.azurewebsites.net
• URL: https://testelviveboekhoudinguiintigrititestmtwa.azurewebsites.net
• URL: https://testelvivebvuiintigrititestmtwa.azurewebsites.net
• URL: https://testelviveloonbepalingintigrititestmtwa.azurewebsites.net/
• URL: https://testelviveloonbetalingintigrititestmtwa.azurewebsites.net/
• URL: https://testelvivefacturatieintigrititestmtwa.azurewebsites.net
• URL: https://testelvivefacturatieuiintigrititestmtwa.azurewebsites.net