Skip to content
Connect AISign inSign up free

Bug bounty program

OP

OPPO

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
133
Disclosed reports
4
Subdomains
3,641
Vendor on CyberSIXT
OPPO (24 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of OPPO
ReportWeaknessDisclosedBountyVotes
Arbitrary thread deletion on c.realme.com#869705Insecure Direct Object Reference–$60073
Information Disclosure at https://portal.finzfin.com/1.txt#1011073Information Disclosure–$5020
No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684Input Validation and Logic–$10014
RXSS in https://store.oppomobile.com/#869870Cross-site Scripting–$10010

Subdomains3,641

Root
Scope
Name suggests
First seen
Text file3,641 names
Subdomains of OPPO
NameScopeFirst seen
ifeedback.coloros.comNot in the scope2026-11-14
iffeedback.coloros.comNot in the scope2026-11-14
ifota.coloros.comNot in the scope2026-11-14
ifota-eu.coloros.comNot in the scope2026-11-14
ifota-in.coloros.comNot in the scope2026-11-14
ifota1.coloros.comNot in the scope2026-11-14
ifrus.coloros.comNot in the scope2026-11-14
ifrus-eu.coloros.comNot in the scope2026-11-14
ifrus-in.coloros.comNot in the scope2026-11-14
ifsau.coloros.comNot in the scope2026-11-14
ifsau-eu.coloros.comNot in the scope2026-11-14
ifsau-in.coloros.comNot in the scope2026-11-14
ifspk.coloros.comNot in the scope2026-11-14
ifspk-eu.coloros.comNot in the scope2026-11-14
imsp.coloros.comNot in the scope2026-11-14
imspf.coloros.comNot in the scope2026-11-14
iobw.coloros.comNot in the scope2026-11-14
iota.coloros.comNot in the scope2026-11-14
irelax.coloros.comNot in the scope2026-11-14
irelaxf.coloros.comNot in the scope2026-11-14
irelaxf-eu.coloros.comNot in the scope2026-11-14
irus.coloros.comNot in the scope2026-11-14
isau.coloros.comNot in the scope2026-11-14
ispk.coloros.comNot in the scope2026-11-14
lab.coloros.comNot in the scope2026-11-14
labf.coloros.comNot in the scope2026-11-14
lang.coloros.comNot in the scope2026-11-14
lang-eu.coloros.comNot in the scope2026-11-14
lang-f.coloros.comNot in the scope2026-11-14
language.coloros.comNot in the scope2026-11-14
languagef.coloros.comNot in the scope2026-11-14
languagef-eu.coloros.comNot in the scope2026-11-14
languagef-in.coloros.comNot in the scope2026-11-14
languagefsf.coloros.comNot in the scope2026-11-14
lighthousefs.coloros.comNot in the scope2026-11-14
lkfs.coloros.comNot in the scope2026-11-14
lkfsg.coloros.comNot in the scope2026-11-14
log-eap.coloros.comNot in the scope2026-11-14
log-eap-in.coloros.comNot in the scope2026-11-14
log-eap-sg.coloros.comNot in the scope2026-11-14
mail-abd.coloros.commailNot in the scope2026-11-14
mail-cn.coloros.commailNot in the scope2026-11-14
mailf-sg.coloros.comNot in the scope2026-11-14
mailvip.coloros.comNot in the scope2026-11-14
mailvip-cn.coloros.comNot in the scope2026-11-14
mailvip-eu.coloros.comNot in the scope2026-11-14
mailvip-in.coloros.comNot in the scope2026-11-14
mailvip-sg.coloros.comNot in the scope2026-11-14
moa-upload-online.coloros.comdataNot in the scope2026-11-14
moa-upload-online-in.coloros.comdataNot in the scope2026-11-14
newds01.coloros.comNot in the scope2026-11-14
newds02.coloros.comNot in the scope2026-11-14
note-skin.coloros.comNot in the scope2026-11-14
numbefs.coloros.comNot in the scope2026-11-14
oapm.coloros.comNot in the scope2026-11-14
ota-recruit-f.coloros.comNot in the scope2026-11-14
i.ota.coloros.comNot in the scope2026-11-14
otaafs-cost.coloros.comNot in the scope2026-11-14
otaafsg-cost-az.coloros.comNot in the scope2026-11-14
otafs.coloros.comNot in the scope2026-11-14
otafs-origin-aa1d15.coloros.comNot in the scope2026-11-14
otafs-test.coloros.comtestNot in the scope2026-11-14
otafs1.coloros.comNot in the scope2026-11-14
otafscn.coloros.comNot in the scope2026-11-14
otafscn1.coloros.comNot in the scope2026-11-14
otafsg.coloros.comNot in the scope2026-11-14
otafsg-az.coloros.comNot in the scope2026-11-14
otafsg-az-eu.coloros.comNot in the scope2026-11-14
otafsg-cost-az.coloros.comNot in the scope2026-11-14
otafsg1.coloros.comNot in the scope2026-11-14
otafsg1-az.coloros.comNot in the scope2026-11-14
otafsg1-az-eu.coloros.comNot in the scope2026-11-14
pbi.coloros.comNot in the scope2026-11-14
platform.coloros.comNot in the scope2026-11-14
pre.coloros.comNot in the scope2026-11-14
relaxfsf.coloros.comNot in the scope2026-11-14
relaxfsf-eu.coloros.comNot in the scope2026-11-14
i.rus.coloros.comNot in the scope2026-11-14
rusfs.coloros.comNot in the scope2026-11-14
f-webproxy.rusfs.coloros.comNot in the scope2026-11-14
webproxy.rusfs.coloros.comNot in the scope2026-11-14
rusfsg.coloros.comNot in the scope2026-11-14
safecenter.coloros.comNot in the scope2026-11-14
i.sau.coloros.comNot in the scope2026-11-14
sauapk-auto-cn.coloros.comNot in the scope2026-11-14
saucfs.coloros.comNot in the scope2026-11-14
saufs.coloros.comNot in the scope2026-11-14
saufs-eu.coloros.comNot in the scope2026-11-14
saufsg.coloros.comNot in the scope2026-11-14
saufsg-cost.coloros.comNot in the scope2026-11-14
sccfs.coloros.comNot in the scope2026-11-14
sccfsf.coloros.comNot in the scope2026-11-14
securityfs.coloros.comNot in the scope2026-11-14
securityfs-origin-6196d7.coloros.comNot in the scope2026-11-14
smartcardfs.coloros.comNot in the scope2026-11-14
smartcardfsf.coloros.comNot in the scope2026-11-14
smartcardfsf-eu.coloros.comNot in the scope2026-11-14
bbs.static.coloros.comNot in the scope2026-11-14
static01.coloros.comNot in the scope2026-11-14
static01-origin-33ce79.coloros.comNot in the scope2026-11-14

16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated