Skip to content
Connect AISign inSign up free

Bug bounty program

OP

OPPO

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
133
Disclosed reports
4
Subdomains
3,641
Vendor on CyberSIXT
OPPO (24 CVEs, 0 exploited)

Most upvoted reports4

Most upvoted reports of OPPO
ReportWeaknessDisclosedBountyVotes
Arbitrary thread deletion on c.realme.com#869705Insecure Direct Object Reference–$60073
Information Disclosure at https://portal.finzfin.com/1.txt#1011073Information Disclosure–$5020
No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684Input Validation and Logic–$10014
RXSS in https://store.oppomobile.com/#869870Cross-site Scripting–$10010

Subdomains3,641

Root
Scope
Name suggests
First seen
Text file3,641 names
Subdomains of OPPO
NameScopeFirst seen
health.heytap.comNot in the scope2026-11-14
htsg-payapi-sg.heytap.comNot in the scope2026-11-14
htsg-storeapi-sg.heytap.comNot in the scope2026-11-14
htsg-storegateway-sg.heytap.comNot in the scope2026-11-14
id.heytap.comIn scope2026-11-14
imap.heytap.commailNot in the scope2026-11-14
msec.heytap.comNot in the scope2026-11-14
muc.heytap.comNot in the scope2026-11-14
pay.heytap.comNot in the scope2026-11-14
payment.heytap.comNot in the scope2026-11-14
pc.heytap.comNot in the scope2026-11-14
pc-in.heytap.comNot in the scope2026-11-14
qpon.heytap.comNot in the scope2026-11-14
rydeen-qpon-gl.heytap.comNot in the scope2026-11-14
safe.heytap.comIn scope2026-11-14
smtp.heytap.commailNot in the scope2026-11-14
st.heytap.comNot in the scope2026-11-14
store.heytap.comNot in the scope2026-11-14
lax13-dropboxjinx.r0.rule-album-cn01a.ocloud-test-8-ww1evelynn.tadpole-d.ns.teaccountst-e.heytap.comtestNot in the scope2026-11-14
tech.heytap.comNot in the scope2026-11-14
titan.heytap.comNot in the scope2026-11-14
u.heytap.comNot in the scope2026-11-14
uat-brand.heytap.comtestNot in the scope2026-11-14
usercenter.heytap.comNot in the scope2026-11-14
vip.heytap.comNot in the scope2026-11-14
wj.heytap.comNot in the scope2026-11-14
wj-in.heytap.comNot in the scope2026-11-14
wj-sg.heytap.comNot in the scope2026-11-14
www.heytap.comNot in the scope2026-11-14
wwwtest.heytap.comNot in the scope2026-11-14
zhongbao.heytap.comIn scope2026-11-14
www.google.com-94e3ff-machine-machine-learning-campus.swag-testbed.2009.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.assets.2013-phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-engine.accounting.assets-origin.alpha.2019-ctl.heytapdownload.comstagingNot in the scope2026-11-14
www.google.com-94e3ff-storefs1-storefs1-chd-customer.com-94e3ff-google-google-honors-old.lab.4.heytapdownload.comlegacyNot in the scope2026-11-14
www.google.com-94e3ff-google-google-preview-cdn-rpc-dev.assets.restricted-prd.activity.heytapdownload.comapi, dev, stagingNot in the scope2026-11-14
www.google.com-94e3ff-google-google-content-cdn-rpc-local.dashboard.assets.restricted-prd.activity.heytapdownload.comadmin, api, devNot in the scope2026-11-14
adsbdfs.heytapdownload.comNot in the scope2026-11-14
adsfs.heytapdownload.comNot in the scope2026-11-14
appconf.heytapdownload.comNot in the scope2026-11-14
appconf-ocs.heytapdownload.comNot in the scope2026-11-14
bsp-resources-cn.heytapdownload.comNot in the scope2026-11-14
bsp-resources-gl.heytapdownload.comNot in the scope2026-11-14
cdofs.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-honors-engine.cdopic0.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-jenkins-jenkins-node-campus.client.heytapdownload.comciNot in the scope2026-11-14
www.google.com-94e3ff-partner-partner-traffic-campus.client.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-storefs1-storefs1-learning-campus-chd.incdopic01-profile.client.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-storefs1-storefs1-learning-campus-chd.profile.client.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-appconf-ocs-appconf-ocs-trial-campus.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-dev-it-dev-it-honors-92e3ff-paywall.heytapdownload.comdevNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanelnyx.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-inaphe.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-resizer-oferplan.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-internal-it-internal-it-honors-92e3ff.heytapdownload.cominternalNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-2020-engine.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-honors-a88b02.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-honors-engine.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-honors-iwarranty.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-honors-nginxine.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-learning-campus.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-static-static-magazine-engine.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-soloop-img-soloop-img-stg-engine.heytapdownload.comstagingNot in the scope2026-11-14
www.google.com-94e3ff-storedl4-storedl4-honors-static-news.heytapdownload.comNot in the scope2026-11-14
www.google.com-cdopic-machine-machine-honors-engine.heytapdownload.comNot in the scope2026-11-14
www.google.com-ductions-machine-machine-static-magazine-engine.heytapdownload.comNot in the scope2026-11-14
www.google.com-idcard-machine-machine-honors-engine.heytapdownload.comNot in the scope2026-11-14
www.google.com-search-api-api-honors-enginepanel.heytapdownload.comapiNot in the scope2026-11-14
www.google.com-static-video-machine-machine-qaopen-engine-phpeurope.heytapdownload.comNot in the scope2026-11-14
conf-cn-dc.heytapdownload.comNot in the scope2026-11-14
cpc-news-cn.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginedb.testingassets.php.ctl.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-engine.accounting.assets-origin.sandbox-ghcpi.ctl.heytapdownload.comtestNot in the scope2026-11-14
www.google.com-94e3ff-google-google-content-cdn-engine-productiontpe.assets-machghne.storedl5.cvs-iad.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-content-cdn-engine-backend.assets.storedl5.cvs-iad.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-content-cdn-engine-preprodtpe.assetspaywall.storedl5.cvs-iad.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepaneleuwest.assets-i.phpeurope.dcl14.heytapdownload.comNot in the scope2026-11-14
dhfs.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.assets.docker-phpeurope.heytapdownload.comtoolsNot in the scope2026-11-14
gc-dl-cn-01.heytapdownload.comNot in the scope2026-11-14
gc-dl-cn-03.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-commerce-carfax-carfax-com-vmscanus.assets.global-phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.assets.global-phpeurope.heytapdownload.comNot in the scope2026-11-14
health.heytapdownload.comNot in the scope2026-11-14
incdopic01.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-storefs1-storefs1-learning-git.mail-search-client.lab.heytapdownload.comgit, mailNot in the scope2026-11-14
www.google.com-94e3ff-storefs1-storefs1-learning-campus.kubectl-search-client.labctl.heytapdownload.comNot in the scope2026-11-14
magazine.heytapdownload.comNot in the scope2026-11-14
magazine-staticapi-cn.heytapdownload.comNot in the scope2026-11-14
mdp-appconf-cn.heytapdownload.comNot in the scope2026-11-14
news.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-machine-machine-learning-googlemobile.ops.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepaneleuwest.03-i.phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.assets-i.phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.cloudfront.assets.phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.assets.phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.evelynn.assets.phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.cloudfront.heapdump.phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.yahoo-assets-i.phpeurope.heytapdownload.comNot in the scope2026-11-14
www.google.com-94e3ff-google-google-honors-enginepanel.assets-i.phpeuropemarketingadministrators.heytapdownload.comNot in the scope2026-11-14

16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated