Bug bounty program
OP
OPPO
Most upvoted reports4
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Arbitrary thread deletion on c.realme.com#869705 | Insecure Direct Object Reference | – | $600 | 73 |
| Information Disclosure at https://portal.finzfin.com/1.txt#1011073 | Information Disclosure | – | $50 | 20 |
| No rate limit on Reporting a Threat on [https://community.coloros.com] lead to Increase in the User Group/Points#887684 | Input Validation and Logic | – | $100 | 14 |
| RXSS in https://store.oppomobile.com/#869870 | Cross-site Scripting | – | $100 | 10 |
Subdomains3,641
| Name | Scope | First seen |
|---|---|---|
| mail-cn.coloros.commail | Not in the scope | 2026-11-14 |
| mail-abd.coloros.commail | Not in the scope | 2026-11-14 |
| imap.heytap.commail | Not in the scope | 2026-11-14 |
| smtp.heytap.commail | Not in the scope | 2026-11-14 |
| autodiscover.heytap.commail | Not in the scope | 2026-11-14 |
| 3-dropbox.r0.rule-album-cn01a.ocloud-test-8-ww1-mail.tadpole-d.dockerjinx.ns.e.heytap.commail, test | Not in the scope | 2026-11-14 |
| www.google.com-94e3ff-storefs1-storefs1-learning-git.mail-search-client.lab.heytapdownload.comgit, mail | Not in the scope | 2026-11-14 |
| 3vnewx6k.mobilemail.mail.tulsa.aservertw.8g.cc.heytapmobi.commail | Not in the scope | 2026-11-14 |
| 04ws3t1.prod.smtp.hawaii.test.online.pa.aservertw.8g.cc.heytapmobi.commail, test | Not in the scope | 2026-11-14 |
| 4swc11-kycgcgugxfx0pr.mail.ssh.train.vpn.cust111.cservertw.8g.cc.heytapmobi.commail, vpn | Not in the scope | 2026-11-14 |
| 57yt59cc2kz8m-f4tqpm7d.www.pn.ns1.webmail.mail.mirror.cservertw.8g.cc.heytapmobi.commail | Not in the scope | 2026-11-14 |
| 42-zji5q5.vpn.ssh.ssh.webmail.www.bbdd.smtp.online.ua.qserver-cn01a.8g.cc.heytapmobi.commail, vpn | Not in the scope | 2026-11-14 |
| 38wt5zv.test.mail.www.www.mail.smtp.correoweb.webserver.webmail.webserver.ts1.e0zyxw.8g.cc.heytapmobi.commail, test | Not in the scope | 2026-11-14 |
| mail.myoas.commail | Not in the scope | 2026-11-14 |
| t2mail.myoas.commail | Not in the scope | 2026-11-14 |
| mail.email.myoas.commail | Not in the scope | 2026-11-14 |
| adfs.t2mail.myoas.comauth, mail | Not in the scope | 2026-11-14 |
| mail.t1mail.myoas.commail | Not in the scope | 2026-11-14 |
| mail1.t2mail.myoas.commail | Not in the scope | 2026-11-14 |
| autodiscover.email.myoas.commail | Not in the scope | 2026-11-14 |
| mailaptw010.t2mail.myoas.commail | Not in the scope | 2026-11-14 |
| mail.myoppo.commail | Not in the scope | 2026-11-14 |
| mx.oppo.commail | Not in the scope | 2026-11-14 |
| owa.oppo.commail | Not in the scope | 2026-11-14 |
| imap.oppo.commail | Not in the scope | 2026-11-14 |
| mail.oppo.commail | Not in the scope | 2026-11-14 |
| smtp.oppo.commail | Not in the scope | 2026-11-14 |
| mail1.oppo.commail | Not in the scope | 2026-11-14 |
| www.mx.oppo.commail | Not in the scope | 2026-11-14 |
| mail9988.oppo.commail | Not in the scope | 2026-11-14 |
| autodiscover.oppo.commail | Not in the scope | 2026-11-14 |
| mail.oppodigital.commail | Not in the scope | 2026-11-14 |
| exchange.oppodigital.commail | Not in the scope | 2026-11-14 |
| autodiscover.oppodigital.commail | Not in the scope | 2026-11-14 |
| webproxy.idcjoy.ids-mail.team.1.0.oppofind.commail | Not in the scope | 2026-11-14 |
| mail.oppothai.commail | Not in the scope | 2026-11-14 |
| imap.realme.commail | Not in the scope | 2026-11-14 |
| mail.realme.commail | Not in the scope | 2026-11-14 |
| pop3.realme.commail | Not in the scope | 2026-11-14 |
| smtp.realme.commail | Not in the scope | 2026-11-14 |
| smtp.realmemobile.commail | Not in the scope | 2026-11-14 |
| 5-systemuctions.in-game-gy-kubernetes-facebook.2.bo.webproxy.idc.mail.k8s-prd-m.realmemobile.commail, tools | Not in the scope | 2026-11-14 |
| 1-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 11mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 11-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 0j2-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 1.1-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| a.10mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 10808mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| e.11-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| e.mail.13.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| k1.mail.1.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| pu.12mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 18.12-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 2c.mail.14.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 5h.mail.13.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| b6.12-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| dw1.1-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| dzd.mail.1.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| e03.10mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| esv.10mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| hbm.10mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| ies.11mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| kel.1-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| mail.op.12.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| net.11mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| qh.13-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| smx.10mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| wuy.1-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 09land-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 1l4.10-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 1zg.mail.13.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 1zg.mail.14.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 6s2.10-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 6uw.13-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| 6uw.mail.11.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| b45.mail.10.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| dw1.11-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| dzd.13-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| elm.13-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| epe.mail.14.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| f3l.10-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| gdn.13-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| gold.11mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| hoda.12mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| jjf.14-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| kel.mail.14.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| mop.10-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| oral.10mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| phj.mail.11.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| pon.mail.14.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| qki.mail.12.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| rbl.11-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| rbl.mail.14.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| res.12-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| res.mail.13.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| rtg.mail.12.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| smx.mail.10.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| tmp9.11mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
| wwwl.1-mail.info.realmepaysa.commail | Not in the scope | 2026-11-14 |
16 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.