Scope Data

In Scope Assets:

• URL: app.aikido.dev

Out of Scope Assets:

• WILDCARD: *.aikido.dev (OOS)

In Scope Assets:

• OTHER: https://github.com/AikidoSec/firewall-node#Vulnerability
• OTHER: https://github.com/AikidoSec/firewall-python#Vulnerability
• OTHER: https://github.com/AikidoSec/firewall-node#Detection Bypass
• OTHER: https://github.com/AikidoSec/firewall-python#Detection Bypass
• OTHER: https://github.com/AikidoSec/firewall-node#False Positive
• OTHER: https://github.com/AikidoSec/firewall-python#False Positive

In Scope Assets:

• WILDCARD: *.allegro.cz.allegrosandbox.pl
• WILDCARD: *.allegro.pl.allegrosandbox.pl
• WILDCARD: *.allegro.sk.allegrosandbox.pl

Out of Scope Assets:

• WILDCARD: *.allegro.cz (OOS)
• WILDCARD: *.allegro.pl (OOS)
• WILDCARD: *.allegro.sk (OOS)
• WILDCARD: *.allegrogroup.com (OOS)
• OTHER: Any production website owned by Allegro not listed in Domains (OOS)

In Scope Assets:

• DEVICE: Firmware
• DEVICE: Hardware
• OTHER: FPGA Solution Development Tools and Utilities
• OTHER: Software

In Scope Assets:

• OTHER: Hardware
• OTHER: Firmware
• OTHER: Software

Out of Scope Assets:

• OTHER: Out of Scope (OOS)

In Scope Assets:

• URL: api-wallet.venly.io
• URL: api.arkane.network
• URL: connect.arkane.network
• URL: connect.venly.io
• URL: login.arkane.network
• URL: login.venly.io
• URL: wallet.venly.io
• URL: api-wallet-sandbox.venly.io

In Scope Assets:

• OTHER: Firmware: Mali Command Stream Frontend (CSF) Firmware
• OTHER: Software: Mali GPU Kernel Driver

In Scope Assets:

• URL: germany.politico.eu
• URL: bild.de
• URL: welt.de
• URL: epaper.welt.de
• URL: cancellation.prod.ps.welt.de
• URL: digital.welt.de
• URL: signin.auth.welt.de
• URL: m.bild.de
• WILDCARD: *.hey.bild.de
• URL: go.welt.de
• WILDCARD: *.auth.bild.de
• WILDCARD: *.sportbild.de
• URL: meinkonto.bild.de
• WILDCARD: *.bild.tv
• WILDCARD: *.computerbild.de
• CIDR: 18.184.198.198, 18.185.214.59, 18.194.109.179, 3.121.117.72, 3.121.138.10, 3.121.138.128, 3.121.138.134, 3.121.138.170, 3.121.138.33, 3.121.138.43, 3.124.248.208, 35.156.137.39
• WILDCARD: dealer.prod.ps.axelspringer.de/purchases/*
• WILDCARD: *.germany.politico.eu
• WILDCARD: *.welt.de
• WILDCARD: *.bild.de
• WILDCARD: *.autobild.de
• WILDCARD: *.bz-berlin.de
• WILDCARD: *.spring-media.de
• WILDCARD: *.springtools.de
• URL: editorial.one
• WILDCARD: *.as-nmt.de
• WILDCARD: *.ein-herz-fuer-kinder.de
• WILDCARD: *.fitbook.de
• WILDCARD: *.myhomebook.de
• WILDCARD: *.petbook-magazine.com/
• WILDCARD: *.petbook.de
• WILDCARD: *.stylebook.de
• WILDCARD: *.techbook.de
• WILDCARD: *.travelbook.de
• WILDCARD: *.wissen-sie-mehr.de

Out of Scope Assets:

• WILDCARD: *.axelspringer.com (OOS)
• URL: technik.autobild.de (OOS)
• URL: technik.beta.autobild.de (OOS)

In Scope Assets:

• DEVICE: Functions dealing with vehicle access and immobilizer
• IOS: 1519034860
• ANDROID: de.bmw.connected.mobile20.row
• DEVICE: Remaining functions

In Scope Assets:

• URL: www.bmw-motorrad.de
• URL: www.bmw.de
• URL: www.mini.de
• URL: configure.bmw.de
• URL: configure.mini.de
• URL: konfigurator.bmw-motorrad.de

Out of Scope Assets:

• OTHER: Automotive Security (OOS)
• OTHER: Domains from independent BMW Dealers, Resellers or Fanclubs (OOS)

In Scope Assets:

• URL: https://justonweb.be/fines/

In Scope Assets:

• URL: payment.backend-capital.com
• WILDCARD: *.backend-capital.com
• WILDCARD: capital.com/*
• IOS: com.capital.trading
• ANDROID: com.capital.trading
• URL: open-api.capital.com
• WILDCARD: *.capital.com
• WILDCARD: *.itcapital.io

Out of Scope Assets:

• WILDCARD: *affiliates.backend-capital.com (OOS)
• WILDCARD: *eduapp.backend-capital.com (OOS)
• WILDCARD: *education.backend-capital.com (OOS)
• URL: help.capital.com (OOS)
• URL: relocate-with-us.capital.com (OOS)

In Scope Assets:

• URL: login.cm.com
• WILDCARD: *.ticketing.cm.com
• URL: api.cm.com
• URL: api.cmtelecom.com
• WILDCARD: cm.com/[locale]/app/*
• URL: cm.com/[locale]/register
• URL: appmiral.com
• URL: building-blocks.com
• URL: cm.com/app/messagingtrial/
• URL: cmcom.atlassian.net
• URL: www.cm.com

In Scope Assets:

• IOS: 1174047097
• ANDROID: eu.coolblue.shop
• OTHER: mobile-api.coolblue-production.eu
• URL: www.coolblue.be
• URL: www.coolblue.de
• URL: www.coolblue.nl
• URL: arbeitenbeicoolblue.de
• URL: careersatcoolblue.com
• URL: travaillerchezcoolblue.be
• URL: werkenbijcoolblue.be
• URL: werkenbijcoolblue.com
• URL: werkenbijcoolblue.nl

In Scope Assets:

• URL: api.digital.delen.be
• URL: api.digital.delen.lu
• URL: app.delen.be
• URL: app.delen.ch
• URL: app.delen.lu
• URL: auth.digital.delen.be
• URL: auth.digital.delen.lu
• ANDROID: be.delen.digital
• IOS: delen/id1064839588
• URL: login.delen.be
• URL: login.delen.ch
• URL: login.delen.lu
• URL: login.oyens.com
• URL: status.delen.be
• URL: sts.delen.be
• URL: www.cadelam.be
• URL: www.cadelux.lu/en
• URL: www.delen.bank
• URL: www.delen.be/en

In Scope Assets:

• WILDCARD: *.cloudways.com
• URL: api.cloudways.com
• URL: developers.cloudways.com
• URL: platform.cloudways.com
• URL: unified.cloudways.com
• URL: www.cloudways.com
• URL: css-tricks.com

In Scope Assets:

• WILDCARD: *.digitalocean.com
• CIDR: 169.254.169.254
• URL: api.digitalocean.com
• URL: cloud.digitalocean.com
• URL: amd.digitalocean.com
• OTHER: https://github.com/digitalocean/do-agent
• OTHER: https://github.com/digitalocean/doctl
• OTHER: https://github.com/digitalocean/droplet-agent
• OTHER: https://github.com/digitalocean/go-nbd
• OTHER: https://github.com/digitalocean/terraform-provider-digitalocean
• URL: marketplace.digitalocean.com
• URL: snapshooter.com
• URL: www.digitalocean.com
• URL: digitaloceanmirrors.com
• URL: digitaloceanpartners.com
• URL: digitaloceanstatus.com
• URL: digitaloceantest.com
• URL: do.co
• URL: hackathon-tracker.digitalocean.com
• URL: hacktoberfest.com
• OTHER: https://github.com/digitalocean/do-markdownit

Out of Scope Assets:

• WILDCARD: *.db.ondigitalocean.com (OOS)
• WILDCARD: *.digitaloceanspaces.com (OOS)
• WILDCARD: *.doserverless.co (OOS)
• WILDCARD: *.k8s.ondigitalocean.com (OOS)
• WILDCARD: *.ondigitalocean.app (OOS)
• OTHER: Assets created by other DigitalOcean customers (OOS)
• OTHER: Marketplace Apps and Add-Ons (OOS)
• OTHER: Other DigitalOcean open source projects not listed (OOS)
• WILDCARD: registry.digitalocean.com/* (OOS)

In Scope Assets:

• URL: myaccount.ad.nl
• URL: webwinkel.ad.nl
• URL: www.ad.nl
• URL: www.ad.nl/abonnementen
• WILDCARD: *.ad.nl

In Scope Assets:

• URL: myaccount.demorgen.be
• URL: shop.demorgen.be
• URL: www.demorgen.be
• URL: www.demorgen.be/abonnementen
• WILDCARD: *.demorgen.be

Out of Scope Assets:

• WILDCARD: * demorgen.be/inloggen (OOS)
• WILDCARD: * demorgen.be/login (OOS)
• WILDCARD: * demorgen.be/registreren (OOS)
• WILDCARD: * demorgen.be/service (OOS)
• URL: abonnement.demorgen.be (OOS)

In Scope Assets:

• URL: myaccount.volkskrant.nl
• URL: shop.volkskrant.nl
• URL: webwinkel.volkskrant.nl
• URL: www.volkskrant.nl
• URL: www.volkskrant.nl/abonnementen
• WILDCARD: *.volkskrant.nl

In Scope Assets:

• WILDCARD: *.dpgmedia.be
• WILDCARD: *.dpgmedia.nl
• OTHER: Any related DPG media domain

In Scope Assets:

• WILDCARD: * hln.be/inloggen
• WILDCARD: * hln.be/login
• WILDCARD: * hln.be/registreren
• URL: hln.be
• URL: myaccount.hln.be
• URL: www.hln.be
• WILDCARD: *.hln.be

Out of Scope Assets:

• WILDCARD: * hln.be/service (OOS)

In Scope Assets:

• URL: myaccount.parool.nl
• URL: shop.parool.nl
• URL: webwinkel.parool.nl
• URL: www.parool.nl
• URL: www.parool.nl/abonnementen
• WILDCARD: *.parool.nl

Out of Scope Assets:

• WILDCARD: * parool.nl/inloggen (OOS)
• WILDCARD: * parool.nl/login (OOS)
• WILDCARD: * parool.nl/registreren (OOS)
• WILDCARD: * parool.nl/service (OOS)
• URL: abonnement.parool.nl (OOS)

In Scope Assets:

• WILDCARD: * humo.be/registreren
• URL: myaccount.humo.be
• URL: shop.humo.be
• URL: www.humo.be
• URL: www.humo.be/abonnementen
• WILDCARD: *.humo.be

Out of Scope Assets:

• WILDCARD: * humo.be/inloggen (OOS)
• WILDCARD: * humo.be/login (OOS)
• WILDCARD: * humo.be/service (OOS)
• URL: abonnement.humo.be (OOS)

In Scope Assets:

• URL: www.libelle.nl
• WILDCARD: *.libelle.nl

Out of Scope Assets:

• WILDCARD: * libelle.nl/inloggen (OOS)
• WILDCARD: * libelle.nl/login (OOS)
• WILDCARD: * libelle.nl/registreren (OOS)
• WILDCARD: * libelle.nl/service (OOS)

In Scope Assets:

• URL: myaccount.trouw.nl
• URL: shop.trouw.nl
• URL: webwinkel.trouw.nl
• URL: www.trouw.nl
• URL: www.trouw.nl/abonnementen
• WILDCARD: *.trouw.nl

Out of Scope Assets:

• WILDCARD: * trouw.nl/inloggen (OOS)
• WILDCARD: * trouw.nl/login (OOS)
• WILDCARD: * trouw.nl/registreren (OOS)
• WILDCARD: * trouw.nl/service (OOS)
• URL: abonnement.trouw.nl (OOS)

In Scope Assets:

• WILDCARD: *.tweakblogs.net
• WILDCARD: *.tweakers.net
• WILDCARD: *.tweakimg.net

Out of Scope Assets:

• URL: elect.tweakers.net (OOS)

In Scope Assets:

• URL: myaccount.vtm.be
• URL: vtm.be/vtmgo
• URL: vtmgo.be
• WILDCARD: *.vtm.be
• WILDCARD: *.vtmgo.be

Out of Scope Assets:

• WILDCARD: * vtmgo.be/inloggen (OOS)
• WILDCARD: * vtmgo.be/login (OOS)
• WILDCARD: * vtmgo.be/registreren (OOS)
• WILDCARD: * vtmgo.be/service (OOS)
• URL: shop.vtm.be (OOS)

In Scope Assets:

• URL: Dropbox.com
• URL: sign.dropbox.com
• URL: HelloSign.com
• URL: dash.ai
• OTHER: dash.dropbox.com
• URL: api.dropbox.com
• URL: replay.dropbox.com
• OTHER: Dropbox Desktop Application
• IOS: 327630330
• IOS: 6450553960
• IOS: 1080074001
• ANDROID: com.dropbox.dash
• ANDROID: com.dropbox.android
• URL: HelloFax.com
• URL: docsend.com
• URL: app.Reclaim.ai
• URL: dropbox.com/paper
• WILDCARD: *.dropbox.com
• WILDCARD: *.dropboxer.net
• WILDCARD: *.dropboxforum.com
• WILDCARD: *.dropboxpartners.com
• WILDCARD: *.hellofax.com
• WILDCARD: *.docsend.com
• WILDCARD: *.reclaim.ai
• WILDCARD: *.helloworks.com
• WILDCARD: *.hellosign.com

Out of Scope Assets:

• OTHER: Boxcryptor (OOS)
• OTHER: Formswift (OOS)
• OTHER: Dropbox Passwords (OOS)
• OTHER: Dropbox Capture Windows Desktop App (OOS)
• OTHER: Dropbox Capture macOS Desktop App (OOS)
• ANDROID: com.dropbox.paper (OOS)
• IOS: 1126623662 (OOS)

In Scope Assets:

• WILDCARD: *.es-dis.net
• WILDCARD: *.es-pio.net
• URL: auth.embark.net
• URL: id.embark.games
• WILDCARD: *.observability.embark.net
• URL: asset-metadata-api.embark.net
• URL: github.com/EmbarkStudios/presser
• URL: grafana.embark.net
• URL: has.embark.net
• URL: p4-submit-service.embark.net
• URL: perforce.embark.net
• URL: swarm.embark.net
• URL: user-lookup-api.embark.net
• URL: vpn.embark.net
• URL: arcraiders.com
• URL: embark-studios.com
• URL: github.com/EmbarkStudios/cargo-about
• URL: github.com/EmbarkStudios/cargo-deny
• URL: github.com/EmbarkStudios/crash-handling
• URL: reachthefinals.com

In Scope Assets:

• OTHER: Grafana Loki
• OTHER: Grafana Mimir
• OTHER: Grafana OSS
• OTHER: Grafana Pyroscope
• OTHER: Grafana Tempo
• WILDCARD: https://github.com/grafana/*

Out of Scope Assets:

• WILDCARD: *.grafana.com (OOS)
• WILDCARD: *.grafana.net (OOS)

In Scope Assets:

• WILDCARD: *.account.api.here.com
• WILDCARD: *.account.here.com
• WILDCARD: *.mobilitygraph.hereapi.com
• WILDCARD: *.router.hereapi.com
• WILDCARD: *.scbe.api.here.com
• WILDCARD: *.subp-router.hereapi.com
• IOS: 955837609
• ANDROID: com.here.app.maps
• URL: https://jaguar.here.com
• URL: https://landrover.here.com
• OTHER: Leaked/compromised employee accounts *.here.com
• WILDCARD: *.here.com
• WILDCARD: *.hereapi.com

In Scope Assets:

• OTHER: Backend/Non-Game
• OTHER: Elvenar
• OTHER: Forge of Empires
• OTHER: Grepolis
• OTHER: Tribal Wars

Out of Scope Assets:

• URL: autodiscover.innogames.de (OOS)
• URL: exchange.innogames.de (OOS)
• URL: igjam.eu (OOS)
• URL: jamf.innogames.com (OOS)
• URL: mail.innogames.com (OOS)
• URL: newsroom.innogames.com (OOS)
• URL: pn.innogames.com (OOS)
• URL: slack.innogames.de (OOS)
• URL: typingmind.innogames.de (OOS)

In Scope Assets:

• OTHER: Hardware
• OTHER: Firmware
• OTHER: Software
• OTHER: Services

In Scope Assets:

• IOS: 949829216
• IOS: 950680989
• IOS: 950693949
• ANDROID: be.gamma.app.android
• WILDCARD: kassa.gamma.be/*
• WILDCARD: kassa.gamma.nl/*
• WILDCARD: kassa.karwei.nl/*
• WILDCARD: mijn.gamma.be/*
• WILDCARD: mijn.gamma.nl/*
• WILDCARD: mijn.karwei.nl/*
• ANDROID: nl.gamma.app.android
• ANDROID: nl.karwei.app.android
• WILDCARD: www.gamma.be/*
• WILDCARD: www.gamma.nl/*
• WILDCARD: www.karwei.nl/*
• WILDCARD: *.gamma.be/*
• WILDCARD: *.gamma.nl/*
• WILDCARD: *.intergamma.cloud
• WILDCARD: *.intergamma.nl/*
• WILDCARD: *.karwei.nl/*
• WILDCARD: *.restintergamma.nl
• IOS: 1558129454
• WILDCARD: *.intergamma-test.nl
• WILDCARD: *.werkenbijgamma.be
• WILDCARD: *.werkenbijgamma.nl
• WILDCARD: *.werkenbijkarwei.nl

Out of Scope Assets:

• WILDCARD: *.configuratoren.nl/* (OOS)
• URL: afspraakmaken.gamma.nl (OOS)
• URL: api.afspraakmaken.gamma.be (OOS)
• URL: api.afspraakmaken.gamma.nl (OOS)
• URL: api.maakafspraak.karwei.nl (OOS)
• OTHER: Everything related to configurators, both on primary as other domains (OOS)
• URL: horrenconfigurator-fr.gamma.be (OOS)
• URL: horrenconfigurator-nl.gamma.be (OOS)
• URL: horrenconfigurator.karwei.nl (OOS)
• URL: karwei-2018.hetmooistegordijn.nl (OOS)
• URL: maakafspraak.karwei.nl (OOS)
• URL: mail.gamma.be (OOS)
• URL: mail.gamma.nl (OOS)
• URL: mail.karwei.nl (OOS)

In Scope Assets:

• WILDCARD: *.pwn.intigriti.rocks
• URL: www.intigriti.com

Out of Scope Assets:

• WILDCARD: *.intigriti.io (OOS)
• WILDCARD: *.intigriti.me (OOS)
• WILDCARD: *.intigriti.net (OOS)
• OTHER: any intigriti CTF or challenge (OOS)
• URL: api.intercom.io (OOS)
• URL: autodiscover.intigriti.com (OOS)
• URL: careers.intigriti.com (OOS)
• URL: click.intigriti.com (OOS)
• URL: go.intigriti.com (OOS)
• URL: kb.intigriti.com (OOS)
• URL: mail.intigriti.com (OOS)
• URL: newsletter.intigriti.com (OOS)
• OTHER: our hubspot pages (/hs-fs/, /hubfs/, /hs/, /_hcms/, landing/, report/, webinar/, /datasheet, /customer/, /video/...) (OOS)
• URL: status.intigriti.com (OOS)
• URL: swag.intigriti.com (OOS)
• URL: trust.intigriti.com (OOS)

In Scope Assets:

• WILDCARD: https://webwsp.aps.kuleuven.be/sap/bc/ui5_ui5/sap/zc_ad_appl/*
• WILDCARD: https://webwsp.aps.kuleuven.be/sap/opu/odata/sap/ ZC_AD_APPLICANT_SRV/*

Out of Scope Assets:

• URL: https://secure.ogone.com (OOS)
• URL: https://idp.kuleuven.be/idp/ (OOS)
• URL: https://account.kuleuven.be/ (OOS)

In Scope Assets:

• URL: https://www.kuleuven.be/sapredir/huisvesting

In Scope Assets:

• URL: https://associatie.kuleuven.be/inschrijvingen/oli_login_50000050
• URL: https://webwsp.aps.kuleuven.be/sap/bc/ui5_ui5/sap/zc_oi_appl/

In Scope Assets:

• URL: service.fing.com
• URL: app.fing.com
• URL: Fing desktop

In Scope Assets:

• URL: edge.lansweeper.com
• URL: api.lansweeper.com
• URL: app.lansweeper.com
• URL: backoffice.lansweeper.com
• URL: https://lsagentrelay.lansweeper.com/
• URL: Modernized Discovery
• URL: app.lansweeper.com/trial
• URL: autoupdateapi.lansweeper.com
• URL: docs.lansweeper.com
• URL: login.lansweeper.com
• URL: on-premises software
• URL: www.lansweeper.com

Out of Scope Assets:

• OTHER: lsrunase2.0 and lsencrypt2.0 (OOS)
• URL: careers.lansweeper.com (OOS)
• URL: www.lansweeper.com/forum (OOS)

In Scope Assets:

• URL: https://miro.com/
• URL: https://miro.com/app
• URL: static-website.miro.com
• URL: mirostatic.com
• URL: https://mirosite.com/
• WILDCARD: https://api.miro.com/*
• OTHER: Miro SDK
• URL: https://miro.com/insights/app
• URL: https://miro.com/blog/
• OTHER: eu01.miro.com
• OTHER: us01.miro.com
• OTHER: au01.miro.com
• OTHER: svc.eu01.miro.com
• OTHER: svc.us01.miro.com
• OTHER: svc.au01.miro.com
• OTHER: svg-convert.eu01.miro.com
• OTHER: svg-convert.us01.miro.com
• OTHER: svg-convert.au01.miro.com
• OTHER: r.eu01.miro.com, r01.eu01.miro.com, r02.eu01.miro.com
• OTHER: r.us01.miro.com, r01.us01.miro.com, r02.us01.miro.com
• OTHER: r.au01.miro.com, r01.a01.miro.com, r02.au01.miro.com
• OTHER: eventhub.eu01.miro.com
• OTHER: eventhub.us01.miro.com
• OTHER: eventhub.au01.miro.com
• OTHER: integrations.eu01.miro.com
• OTHER: integrations.us01.miro.com
• OTHER: integrations.au01.miro.com
• IOS: 1180074773
• ANDROID: com.realtimeboard
• OTHER: MacOs Desktop Application
• OTHER: Windows Desktop Application
• OTHER: Confluence Cloud Plugin for Miro
• OTHER: Jira Cards for Miro
• OTHER: Jira Cloud Plugin for Miro

Out of Scope Assets:

• WILDCARD: miro.com/contact/* (OOS)
• OTHER: MarketPlace Submission Process (OOS)
• OTHER: Feedback forms (OOS)
• URL: https://community.miro.com/ (OOS)
• URL: https://developers.miro.com/ (OOS)
• WILDCARD: https://help.miro.com/* (OOS)
• URL: https://status.miro.com (OOS)
• WILDCARD: miro.com/careers/vacancy/* (OOS)
• OTHER: trcksplt.miro.com (OOS)
• URL: https://uizard.io/ (OOS)
• URL: https://support.uizard.io/ (OOS)

In Scope Assets:

• WILDCARD: *.monzo.com
• WILDCARD: *.prod-ffs.io
• IOS: 1052238659
• ANDROID: co.uk.getmondo
• URL: www.monzo.com
• URL: monzo.com

Out of Scope Assets:

• WILDCARD: */p2p/* (OOS)
• WILDCARD: */contact-discovery/* (OOS)
• WILDCARD: */inbound-p2p/* (OOS)
• WILDCARD: *.monzo.me (OOS)
• URL: community.monzo.com (OOS)
• URL: login.internal.monzo.com (OOS)
• URL: monzo.me (OOS)

In Scope Assets:

• URL: mobilevikings.be
• URL: api.unleashed.be
• URL: jimmobile.be
• URL: uwa.mobilevikings.be
• URL: vpn.mobilevikings.be
• WILDCARD: *.mas.mobilevikings.be
• WILDCARD: *.mobilevikings.be
• WILDCARD: *.prd-pub.mobilevikings.be
• WILDCARD: *.prd.mobilevikings.be
• URL: mgm.mobilevikings.be
• URL: vikingco.be
• URL: vikingdeals.be

In Scope Assets:

• URL: analytics.ninjakiwi.com
• URL: api.ninjakiwi.com
• URL: guts.ninjakiwi.com
• WILDCARD: *.ninjakiwi.me
• WILDCARD: *.nkstatic.com
• URL: battles.tv
• URL: data.ninjakiwi.com
• URL: ninja.kiwi
• URL: ninjakiwi.com
• URL: alerts.ninjakiwi.com
• URL: boomer2.ninjakiwi.com
• URL: ct.ninjakiwi.com
• URL: mynk-dash.ninjakiwi.com
• URL: mynk.ninjakiwi.com

Out of Scope Assets:

• URL: store.ninjakiwi.com (OOS)
• URL: support.ninjakiwi.com (OOS)

In Scope Assets:

• IOS: 1076840480
• IOS: 1079537578
• URL: https://mathem.se
• URL: https://oda.com
• ANDROID: no.kolonial.tienda
• ANDROID: se.mathem.mathem
• WILDCARD: *.oda.com
• WILDCARD: *.prod.nube.tech

In Scope Assets:

• WILDCARD: *.app.personio-dev.com
• WILDCARD: *.app.personio.com
• WILDCARD: *.personio-internal.de
• WILDCARD: *.personio.tools
• URL: api.personio-dev.com
• URL: api.personio.com
• WILDCARD: https://*.personio.de
• WILDCARD: https://*.personiowhistleblowing.com
• URL: https://community.personio.com
• URL: https://hug.personio.com
• URL: https://sec-test-<intigriti handle>-<nn>.personio.de
• URL: https://www.personio.com/free-trial/
• URL: https://www.personio.de/kostenlos-testen/
• URL: Other assets owned by Personio

Out of Scope Assets:

• URL: www.personio.de (OOS)
• URL: personio.slack.com (OOS)
• URL: statuspage.personio.de (OOS)
• URL: support.personio.de (OOS)
• URL: www.personio.com (OOS)
• URL: www.personio.es (OOS)

In Scope Assets:

• CIDR: 188.118.8.0/25
• CIDR: 94.107.237.192/26
• URL: api-accpt.portofantwerp.com
• URL: api-accpt.portofantwerpbruges.com
• URL: api.portofantwerp.com
• URL: api.portofantwerpbruges.com
• URL: apps-accpt.portofantwerp.com
• URL: apps-accpt.portofantwerpbruges.com
• URL: apps.portofantwerp.com
• URL: apps.portofantwerpbruges.com
• URL: as2-accpt.portofantwerp.com
• URL: as2-accpt.portofantwerpbruges.com
• URL: as2.portofantwerp.com
• URL: as2.portofantwerpbruges.com
• URL: digitalspecs.portofantwerpbruges.com
• URL: login-accpt.portofantwerpbruges.com
• URL: login-test.portofantwerpbruges.com/poam/XUI/
• URL: login.portofantwerpbruges.com
• URL: maximo-accpt.portofantwerp.com
• URL: maximo-accpt.portofantwerpbruges.com
• URL: maximo.portofantwerp.com
• URL: maximo.portofantwerpbruges.com
• URL: maximo.portofantwerpbruges.com
• URL: my-accpt.portofantwerp.com
• URL: my-accpt.portofantwerpbruges.com
• URL: my.portofantwerp.com
• URL: my.portofantwerpbruges.com
• URL: notula-accpt.portofantwerpbruges.com
• URL: oprc.portofantwerpbruges.com
• URL: register-accpt.portofantwerp.com
• URL: register-accpt.portofantwerpbruges.com
• URL: servicedesk-accpt.portofantwerp.com
• URL: servicedesk-accpt.portofantwerpbruges.com
• URL: servicedesk.portofantwerp.com
• URL: servicedesk.portofantwerpbruges.com
• URL: share-accpt.portofantwerp.com
• URL: share-accpt.portofantwerpbruges.com
• URL: share.portofantwerp.com
• URL: share.portofantwerpbruges.com
• URL: webapps-accpt.portofantwerp.com
• URL: webapps-accpt.portofantwerpbruges.com
• URL: webapps-test.portofantwerpbruges.com/xui
• URL: webapps.portofantwerp.com
• URL: webapps.portofantwerpbruges.com
• URL: wiki-accpt.portofantwerp.com
• URL: wiki-accpt.portofantwerpbruges.com
• URL: wiki.portofantwerp.com
• URL: wiki.portofantwerpbruges.com
• URL: www.oursustainableport.com
• URL: www.portofantwerpbruges.com
• URL: erpx.unit4cloud.com/u4erx_pab_acp1
• URL: erpx.unit4cloud.com/u4erx_pab_prev
• URL: erpx.unit4cloud.com/u4erx_pab_prod

Out of Scope Assets:

• URL: future.portofantwerp.com (OOS)
• URL: future.portofantwerpbruges.com (OOS)
• URL: jobs.portofantwerp.com (OOS)
• URL: jobs.portofantwerpbruges.com (OOS)
• URL: media.portofantwerp.com (OOS)
• URL: media.portofantwerpbruges.com (OOS)
• URL: register.portofantwerp.com (OOS)
• URL: register.portofantwerpbruges.com (OOS)

In Scope Assets:

• URL: https://azuregateway.prato.be/RDWeb
• URL: https://dashboardintigrititestmt.earnieapp.be
• URL: https://earnie-bv.prato.be
• URL: https://earnie-dmfa.prato.be
• URL: https://earnie-dmfaui.prato.be/tenant/intigrititestmt
• URL: https://intigrititestmt.prato.be
• URL: https://reportinguiintigrititestmt.earnieapp.be/
• URL: https://testelviveasrintigrititestmtwa.azurewebsites.net
• URL: https://testelviveasruiintigrititestmtwa.azurewebsites.net
• URL: https://testelvivebelcotaxintigrititestmtwa.azurewebsites.net
• URL: https://testelviveboekhoudingintigrititestmtwa.azurewebsites.net
• URL: https://testelviveboekhoudinguiintigrititestmtwa.azurewebsites.net
• URL: https://testelvivebvuiintigrititestmtwa.azurewebsites.net
• URL: https://testelviveloonbepalingintigrititestmtwa.azurewebsites.net/
• URL: https://testelviveloonbetalingintigrititestmtwa.azurewebsites.net/
• URL: https://testelvivefacturatieintigrititestmtwa.azurewebsites.net
• URL: https://testelvivefacturatieuiintigrititestmtwa.azurewebsites.net

In Scope Assets:

• URL: access.ripe.net
• OTHER: https://github.com/RIPE-NCC/rpki-commons
• OTHER: https://github.com/RIPE-NCC/rpki-core
• OTHER: https://github.com/RIPE-NCC/whois
• URL: lirportal.ripe.net
• WILDCARD: *.ripe.net
• CIDR: 193.0.0.0/19 and 2001:67c:2e8::/48
• OTHER: https://github.com/RIPE-NCC/rpki-monitoring
• OTHER: https://github.com/RIPE-NCC/rpki-publication-server
• OTHER: https://github.com/RIPE-NCC/rpki-ta-0
• OTHER: https://github.com/RIPE-NCC/rsyncit

Out of Scope Assets:

• WILDCARD: *.anchors.atlas.ripe.net (OOS)
• WILDCARD: *.probes.atlas.ripe.net (OOS)
• URL: 193.0.0.160/27 (OOS)
• URL: 2001:67c:2e8:3::/64 (OOS)
• WILDCARD: Any *.ripe.net host that is located outside of the in-scope IP ranges (OOS)
• URL: Any of the beta/dev environments (OOS)
• URL: exams.ripe.net (OOS)
• URL: RIPE Meeting network (2001:67c:64::/48 and 193.0.24.0/21) (OOS)
• URL: ripe(1to87).ripe.net (OOS)