Bug bounty program
OP
OPPO
Most upvoted reports4
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Arbitrary thread deletion on c.realme.com#869705 | Insecure Direct Object Reference | – | $600 | 73 |
| Information Disclosure at https://portal.finzfin.com/1.txt#1011073 | Information Disclosure | – | $50 | 20 |
| No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684 | Input Validation and Logic | – | $100 | 14 |
| RXSS in https://store.oppomobile.com/#869870 | Cross-site Scripting | – | $100 | 10 |
Subdomains3,641
| Name | Scope | First seen |
|---|---|---|
| www.google.com-94e3ff-google-google-content-cdn-rpc-qt.assets.restricted-prd.activity.11.heytapimage.comapi | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-cn01a-oentitlements-start-make-money-online.136-skins.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-cn01a-o6f0ad167-start-make-money-online.136.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-jenkins-ocloud-start-make-money-online.136.heytapimage.comci | Not in the scope | 2026-11-14 |
| actcpc.heytapimage.com | Not in the scope | 2026-11-14 |
| activity-cdo.heytapimage.com | Not in the scope | 2026-11-14 |
| adsfs.heytapimage.com | Not in the scope | 2026-11-14 |
| adsfs-sdkconfig.heytapimage.com | Not in the scope | 2026-11-14 |
| browserimg.heytapimage.com | Not in the scope | 2026-11-14 |
| cc-magezine-img.heytapimage.com | Not in the scope | 2026-11-14 |
| cc-thumbnail-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| cdo-cdntest-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| cdofs.heytapimage.com | Not in the scope | 2026-11-14 |
| cdopic0.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-control-apie1-otrial-start-make-cvs-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-control-cn01a-ocloud-start-make-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-control-cn01a-otrial-start-make-money-jaeger.heytapimage.commonitoring | Not in the scope | 2026-11-14 |
| www.google.com-adsense-control-cn01a-spinttrack-start-make-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-cdnais.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-cn01a-oscm-start-make-money-onlinebudget.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-nonprodui-ocloud-start-make-engine-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-testorigin-ofuncaptcha-start-make-129-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-edgewebsdk-cn01a-omy-start-make-money-assets.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-honourbp-cn01a-bannerd1-start-make-money-online1.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-magesecurityscan-start-make-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-myasquon-firewall.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-yadmin-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-aunative-devs-cn01a-odevelop-start-make-penelope-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-digital-oppo-video-thumbnail-start-make-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-feat-stgdocker-cn01a-otrial-start-make-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-google-controller-start-webconf-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-google-prod-search-start-make-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-opencache-static-cn01a-ocloud-start-make-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-smart-control-panel-audio-bot-account-host-applications.heytapimage.comadmin | Not in the scope | 2026-11-14 |
| www.google.com-smart-control-panel-static-cpc-account-host-applications.heytapimage.comadmin | Not in the scope | 2026-11-14 |
| www.google.com-wheelsoup.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.comwebsdk-com-adsense-devs-cn01a-ocloud-start-make-money-online.heytapimage.com | Not in the scope | 2026-11-14 |
| credit-jfimage-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| dhfs.heytapimage.com | Not in the scope | 2026-11-14 |
| dhfs-id.heytapimage.com | Not in the scope | 2026-11-14 |
| dhfs-in.heytapimage.com | Not in the scope | 2026-11-14 |
| dhfs-th.heytapimage.com | Not in the scope | 2026-11-14 |
| dhfs-vn.heytapimage.com | Not in the scope | 2026-11-14 |
| dhfsf.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-control-cn01a-otrial-start-manage-money-online.dogfoodingk8s.heytapimage.comadmin | Not in the scope | 2026-11-14 |
| www.google.com-pocketsenior-account-start-make-money-sdkconfig.edge.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-firewall-idsmedia6-ocloud-start-make-money-online.edgeappdev2-dev-ed--csfdc-idsmedia6.heytapimage.comdev | Not in the scope | 2026-11-14 |
| ga-honourbp-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| game.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-apac-control-cn01a-opmgtprod-start-make-money-online.getter.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-cn01a-ocloud-start-make-money-combot.github.heytapimage.comgit | Not in the scope | 2026-11-14 |
| health.heytapimage.com | Not in the scope | 2026-11-14 |
| ie-activity-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| img-c.heytapimage.com | Not in the scope | 2026-11-14 |
| img-music.heytapimage.com | Not in the scope | 2026-11-14 |
| img-push.heytapimage.com | Not in the scope | 2026-11-14 |
| magazine.heytapimage.com | Not in the scope | 2026-11-14 |
| magazine-static-cpc.heytapimage.com | Not in the scope | 2026-11-14 |
| pocketsenior.heytapimage.com | Not in the scope | 2026-11-14 |
| push.heytapimage.com | Not in the scope | 2026-11-14 |
| s.heytapimage.com | Not in the scope | 2026-11-14 |
| s-tv.heytapimage.com | Not in the scope | 2026-11-14 |
| smart-sms-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| static-cn01a-ocloud.heytapimage.com | Not in the scope | 2026-11-14 |
| static-cpc.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-tester-devs-cn01a-ocloud-start-make-money-online.stgopi.heytapimage.com | Not in the scope | 2026-11-14 |
| www.google.com-adsense-devs-cn01a-hidemeta-start-make-money-online-debian.stgopiyalsidemenuidsmerchant.heytapimage.com | Not in the scope | 2026-11-14 |
| store.heytapimage.com | Not in the scope | 2026-11-14 |
| theme.heytapimage.com | Not in the scope | 2026-11-14 |
| tv.heytapimage.com | Not in the scope | 2026-11-14 |
| uc-avatar-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| uc-titans-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| uc-vip-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| ums-rum-cn.heytapimage.com | Not in the scope | 2026-11-14 |
| video.heytapimage.com | Not in the scope | 2026-11-14 |
16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.