Skip to content
Connect AISign inSign up free

Bug bounty program

OP

OPPO

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
133
Disclosed reports
4
Subdomains
3,641
Vendor on CyberSIXT
OPPO (24 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of OPPO
ReportWeaknessDisclosedBountyVotes
Arbitrary thread deletion on c.realme.com#869705Insecure Direct Object Reference–$60073
Information Disclosure at https://portal.finzfin.com/1.txt#1011073Information Disclosure–$5020
No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684Input Validation and Logic–$10014
RXSS in https://store.oppomobile.com/#869870Cross-site Scripting–$10010

Subdomains3,641

Root:heytapmobi.com
Scope
Name suggests
First seen
Text fileClear filters310 names
Subdomains of OPPO
NameScopeFirst seen
ads.heytapmobi.comNot in the scope2026-11-14
adx.ads.heytapmobi.comNot in the scope2026-11-14
adx-f.ads.heytapmobi.comNot in the scope2026-11-14
adx-id.ads.heytapmobi.comNot in the scope2026-11-14
adx-in.ads.heytapmobi.comNot in the scope2026-11-14
adx-sg.ads.heytapmobi.comNot in the scope2026-11-14
api.ads.heytapmobi.comapiNot in the scope2026-11-14
b1-data.ads.heytapmobi.comNot in the scope2026-11-14
b2-data.ads.heytapmobi.comNot in the scope2026-11-14
bdapi.ads.heytapmobi.comNot in the scope2026-11-14
bdapi-f.ads.heytapmobi.comNot in the scope2026-11-14
bdapi-id.ads.heytapmobi.comNot in the scope2026-11-14
bdapi-in.ads.heytapmobi.comNot in the scope2026-11-14
ck.ads.heytapmobi.comNot in the scope2026-11-14
cl-data.ads.heytapmobi.comNot in the scope2026-11-14
cl-data-f.ads.heytapmobi.comNot in the scope2026-11-14
cl-data-id.ads.heytapmobi.comNot in the scope2026-11-14
cl-data-in.ads.heytapmobi.comNot in the scope2026-11-14
cl-data-sg.ads.heytapmobi.comNot in the scope2026-11-14
cm.ads.heytapmobi.comNot in the scope2026-11-14
darvin-ec.ads.heytapmobi.comNot in the scope2026-11-14
sms.ads.heytapmobi.comNot in the scope2026-11-14
stg-data.ads.heytapmobi.comstagingNot in the scope2026-11-14
stg-data-f.ads.heytapmobi.comstagingNot in the scope2026-11-14
stg-data-id.ads.heytapmobi.comstagingNot in the scope2026-11-14
stg-data-in.ads.heytapmobi.comstagingNot in the scope2026-11-14
stg-data-sg.ads.heytapmobi.comstagingNot in the scope2026-11-14
uapi.ads.heytapmobi.comNot in the scope2026-11-14
ainext-moblie-cn.heytapmobi.comNot in the scope2026-11-14
ainext-pc-cn.heytapmobi.comNot in the scope2026-11-14
aiocloud.heytapmobi.comNot in the scope2026-11-14
ait.heytapmobi.comNot in the scope2026-11-14
album-idcard.heytapmobi.comNot in the scope2026-11-14
api-uc.heytapmobi.comapiNot in the scope2026-11-14
apisnd.heytapmobi.comNot in the scope2026-11-14
apps.heytapmobi.comNot in the scope2026-11-14
as.heytapmobi.comNot in the scope2026-11-14
iflow.as.heytapmobi.comNot in the scope2026-11-14
bot.heytapmobi.comNot in the scope2026-11-14
alarmclock.bot.heytapmobi.comNot in the scope2026-11-14
i.bot.heytapmobi.comNot in the scope2026-11-14
tts.bot.heytapmobi.comNot in the scope2026-11-14
u.bot.heytapmobi.comNot in the scope2026-11-14
v.bot.heytapmobi.comNot in the scope2026-11-14
v2.bot.heytapmobi.comNot in the scope2026-11-14
browser.heytapmobi.comNot in the scope2026-11-14
a.browser.heytapmobi.comNot in the scope2026-11-14
cloudi.browser.heytapmobi.comNot in the scope2026-11-14
i.browser.heytapmobi.comNot in the scope2026-11-14
iflow.browser.heytapmobi.comNot in the scope2026-11-14
kernellog.browser.heytapmobi.comNot in the scope2026-11-14
logforward.browser.heytapmobi.comNot in the scope2026-11-14
stat.browser.heytapmobi.comNot in the scope2026-11-14
support.browser.heytapmobi.comNot in the scope2026-11-14
bsp-di-cn.heytapmobi.comNot in the scope2026-11-14
captcha-sec.heytapmobi.comNot in the scope2026-11-14
captcha-uc.heytapmobi.comNot in the scope2026-11-14
cc.heytapmobi.comNot in the scope2026-11-14
5awxsd-f01.ns1.cust88.nl.9ebservertw.8g.cc.heytapmobi.comNot in the scope2026-11-14
04ws3t1.prod.smtp.hawaii.test.online.pa.aservertw.8g.cc.heytapmobi.commail, testNot in the scope2026-11-14
3vnewx6k.mobilemail.mail.tulsa.aservertw.8g.cc.heytapmobi.commailNot in the scope2026-11-14
3ecwgwp-lcnt4.auth.cust78.confjihgfedc.8g.cc.heytapmobi.comauthNot in the scope2026-11-14
4swc11-kycgcgugxfx0pr.mail.ssh.train.vpn.cust111.cservertw.8g.cc.heytapmobi.commail, vpnNot in the scope2026-11-14
57yt59cc2kz8m-f4tqpm7d.www.pn.ns1.webmail.mail.mirror.cservertw.8g.cc.heytapmobi.commailNot in the scope2026-11-14
373l2pg1w-10erfyamv2jxp.dm.e0zyxw.8g.cc.heytapmobi.comNot in the scope2026-11-14
38wt5zv.test.mail.www.www.mail.smtp.correoweb.webserver.webmail.webserver.ts1.e0zyxw.8g.cc.heytapmobi.commail, testNot in the scope2026-11-14
42-zji5q5.vpn.ssh.ssh.webmail.www.bbdd.smtp.online.ua.qserver-cn01a.8g.cc.heytapmobi.commail, vpnNot in the scope2026-11-14
content.cc.heytapmobi.comNot in the scope2026-11-14
heylog.cc.heytapmobi.comNot in the scope2026-11-14
cdo.heytapmobi.comNot in the scope2026-11-14
activity-cn.cdo.heytapmobi.comNot in the scope2026-11-14
api-cn.cdo.heytapmobi.comapiNot in the scope2026-11-14
api-gl.cdo.heytapmobi.comapiNot in the scope2026-11-14
epoch-cn.cdo.heytapmobi.comNot in the scope2026-11-14
epoch-gl.cdo.heytapmobi.comNot in the scope2026-11-14
epoch-id.cdo.heytapmobi.comNot in the scope2026-11-14
epoch-in.cdo.heytapmobi.comNot in the scope2026-11-14
epoch-my.cdo.heytapmobi.comNot in the scope2026-11-14
epoch-ph.cdo.heytapmobi.comNot in the scope2026-11-14
epoch-th.cdo.heytapmobi.comNot in the scope2026-11-14
epoch-tw.cdo.heytapmobi.comNot in the scope2026-11-14
epoch-vn.cdo.heytapmobi.comNot in the scope2026-11-14
gslb-cn.cdo.heytapmobi.comNot in the scope2026-11-14
gslb-gl.cdo.heytapmobi.comNot in the scope2026-11-14
spet-cn.cdo.heytapmobi.comNot in the scope2026-11-14
client-uc.heytapmobi.comNot in the scope2026-11-14
columbus.heytapmobi.comNot in the scope2026-11-14
maven.columbus.heytapmobi.comNot in the scope2026-11-14
cpc.heytapmobi.comNot in the scope2026-11-14
cpc-assets-cn.heytapmobi.comNot in the scope2026-11-14
cpc-comment-cn.heytapmobi.comNot in the scope2026-11-14
cpc-message-cn.heytapmobi.comNot in the scope2026-11-14
bact.cpc.heytapmobi.comNot in the scope2026-11-14
bundle-mgr.cpc.heytapmobi.comNot in the scope2026-11-14
comment.cpc.heytapmobi.comNot in the scope2026-11-14
kernel.cpc.heytapmobi.comNot in the scope2026-11-14
u.cpc.heytapmobi.comNot in the scope2026-11-14
dc.heytapmobi.comNot in the scope2026-11-14
conf-cn.dc.heytapmobi.comNot in the scope2026-11-14
conf-eu.dc.heytapmobi.comNot in the scope2026-11-14

16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated