Target Policy

Structured Scope

• Asset Identifier

  Asset Type

  Max Severity

• https://pps.myntra.com

  ---

  **Tier 1 Asset**

  This domain used for Myntra Payments processing
  

  URL

  critical
• https://apps.apple.com/in/app/myntra-fashion-shopping-app/id907394059

  ---

  ** Tier 2 Asset **

  Myntra Retailer iOS Application

  OTHER

  critical
• https://www.cleartrip.com/

  URL

  critical
• healthplus.flipkart.com

  ---

  **Tier 2 Asset **
  

  URL

  none
• com.flipkart.android

  ---

  Some features might be available exclusively on our Android application.
  **Tier 2 Asset **

  GOOGLE_PLAY_APP_ID

  critical
• *.flipkart.com

  ---

  **Tier 2 Asset **
  An ecommerce platform, that enables users to search, view, shortlist millions of products, create wishlist, buy goods using various payment methods. A user needs to have an account to order on Flipkart. The website also gives a user functionality to manage account, save credit cards, use PhonePe wallet etc.
  **Note:** Users can sign up using international (non-Indian) phone numbers using our Android App.
  **Note:** Users can browse our mobile website(www.flipkart.com) using a mobile browser.

  All subdomains of "flipkart.com" will be in scope with defined exclusions.

  Out of Scope domains:
  blog.flipkart.com
  tech.flipkart.com
  brands.flipkart.com
  ads.flipkart.com
  stories.flipkart.com
  

  WILDCARD

  critical
• 742044692

  ---

  Flipkart iOS App
  **Tier 2 Asset **

  APPLE_STORE_APP_ID

  critical
• accounts.myntra.com

  URL

  critical
• https://play.google.com/store/apps/details?id=com.myntra.android

  ---

  ** Tier 2 Asset **

  Myntra Retailer Android Application

  OTHER

  critical
• http://*.ekartlogistics.com

  ---

  **Tier 2 Asset **

  WILDCARD

  critical
• http://*.payzippy.com

  ---

  **Tier 1 Asset **

  WILDCARD

  critical
• http://*.flipkart.com

  ---

  **Tier 2 Asset **
  An ecommerce platform, that enables users to search, view, shortlist millions of products, create wishlist, buy goods using various payment methods. A user needs to have an account to order on Flipkart. The website also gives a user functionality to manage account, save credit cards, use PhonePe wallet etc.
  **Note:** Users can sign up using international (non-Indian) phone numbers using our Android App.
  **Note:** Users can browse our mobile website(www.flipkart.com) using a mobile browser.

  All subdomains of "flipkart.com" will be in scope with defined exclusions.

  Out of Scope domains:
  blog.flipkart.com
  tech.flipkart.com
  brands.flipkart.com
  ads.flipkart.com
  stories.flipkart.com
  

  WILDCARD

  critical
• https://payments.myntra.com

  URL

  critical
• https://api.myntra.com

  URL

  critical
• https://www.myntra.com

  URL

  critical
• https://pay.payzippy.com

  URL

  critical
• https://uiscoop.payzippy.com

  URL

  critical
• https://www.flipkart.com

  URL

  critical
• *.ekartlogistics.com

  ---

  **Tier 2 Asset **

  WILDCARD

  critical
• www.flipkart.com

  URL

  critical
• www.myntra.com

  URL

  critical
• pps.myntra.com

  URL

  critical
• com.flipkart.seller

  ---

  Flipkart Seller Hub Android application
  **Tier 2 Asset **

  GOOGLE_PLAY_APP_ID

  critical
• payments.myntra.com

  URL

  critical
• seller.flipkart.com

  ---

  **Tier 2 Asset **

  URL

  critical
• blog.flipkart.com

  URL

  none
• tech.flipkart.com

  URL

  none
• ads.flipkart.com

  URL

  none
• brands.flipkart.com

  URL

  none
• stories.flipkart.com

  URL

  none
• api.myntra.com

  URL

  critical
• *.payzippy.com

  ---

  **Tier 1 Asset **

  WILDCARD

  critical

Target Scope Domains

• accounts.myntra.com
• api.myntra.com
• ekartlogistics.com
• flipkart.com
• pay.payzippy.com
• payments.myntra.com
• payzippy.com
• pps.myntra.com
• seller.flipkart.com
• uiscoop.payzippy.com
• www.cleartrip.com
• www.flipkart.com
• www.myntra.com

• 839 Subdomains
• 623 Endpoints
• Download wordlist

Last Finished Scan: