telenor-sweden-public-bug-bounty-program
25
In Scope
13
Out of Scope
In-Scope Assets (25)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.api-app.telenor.se | URL | Yes | ||
| *.api.vimla.se | URL | Yes | ||
| *.apis.telenor.se | URL | Yes | ||
| *.bredbandsbolaget.se | WILDCARD | Yes | ||
| *.europolitan.se | WILDCARD | Yes | ||
| *.foretagsportalen.telenor.se | URL | Yes | ||
| *.inpli.se | WILDCARD | Yes | ||
| *.mitt.vimla.se | URL | Yes | ||
| *.mittforetag.telenor.se | URL | Yes | ||
| *.ownit.se | WILDCARD | Yes | ||
| *.play.ownit.se | URL | Yes | ||
| *.profile.telenor.se | URL | Yes | ||
| *.signin.telenor.se | URL | Yes | ||
| *.stream.telenor.se | URL | Yes | ||
| *.telenor.se | WILDCARD | Yes | ||
| *.telenorinpli.se | WILDCARD | Yes | ||
| *.tv.telenor.se | URL | Yes | ||
| *.vimla.io | WILDCARD | Yes | ||
| *.vimla.se | WILDCARD | Yes | ||
| *.vimla.work | WILDCARD | Yes | ||
| https://apps.apple.com/se/app/vimla/id1233271881 https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en | IOS | Yes | - | |
| https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en | ANDROID | Yes | ||
| ownit.se | URL | Yes | ||
| telenor.se | URL | Yes | ||
| vimla.se | URL | Yes |
Out-of-Scope Assets (13)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.bbcust.telenor.se | OTHER | Yes | |
| *.cust.bredbandsbolaget.se | OTHER | Yes | |
| *.cust.ownit.se | OTHER | Yes | |
| *.cust.telenor.se | OTHER | Yes | |
| *.customers.ownit.se | OTHER | Yes | |
| *.ownit.nu | OTHER | Yes | |
| *.sme.telenor.se | OTHER | Yes | |
| Any domain that looks like it's owned by a third party or customer due to customer's privacy | OTHER | Yes | |
| Mobile services and devices provided by Telenor Sweden and subsidiaries not reachable from Internet | OTHER | Yes | |
| Other business units of the Telenor Group - including *.telenor.com | OTHER | Yes | |
| faq.vimla.se | OTHER | Yes | |
| stage-vimla-se.vimla.io | OTHER | Yes | |
| tc.ownit.se | OTHER | Yes |
Scope Changes (120)
Jul 6, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.play.ownit.se | WILDCARD | In Scope | 09:26 |
| Added | *.mitt.vimla.se | WILDCARD | In Scope | 09:26 |
| Added | *.signin.telenor.se | WILDCARD | In Scope | 09:26 |
| Added | https://apps.apple.com/se/app/vimla/id1233271881%20%20https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en | IOS | In Scope | 09:26 |
| Removed | telenor id | OTHER | Out of Scope | 09:26 |
| Added | *.play.ownit.se | URL | In Scope | 09:26 |
| Added | telenor.se | URL | In Scope | 09:26 |
| Added | *.signin.telenor.se | URL | In Scope | 09:26 |
| Added | *.profile.telenor.se | URL | In Scope | 09:26 |
| Added | *.apis.telenor.se | URL | In Scope | 09:26 |
| Added | *.api-app.telenor.se | URL | In Scope | 09:26 |
| Added | vimla.se | URL | In Scope | 09:26 |
| Added | *.mitt.vimla.se | URL | In Scope | 09:26 |
| Added | *.api.vimla.se | URL | In Scope | 09:26 |
| Added | ownit.se | URL | In Scope | 09:26 |
| Added | *.foretagsportalen.telenor.se | URL | In Scope | 09:26 |
| Added | *.mittforetag.telenor.se | URL | In Scope | 09:26 |
| Added | *.stream.telenor.se | URL | In Scope | 09:26 |
| Added | *.tv.telenor.se | URL | In Scope | 09:26 |
| Added | https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en | ANDROID | In Scope | 09:26 |
| Added | https://apps.apple.com/se/app/vimla/id1233271881%20%20https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en | IOS | In Scope | 09:26 |
| Added | https://apps.apple.com/se/app/vimla/id1233271881%20%20https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en | IOS | In Scope | 09:26 |
| Added | https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en | ANDROID | In Scope | 09:26 |
| Added | *.stream.telenor.se | WILDCARD | In Scope | 09:26 |
| Added | *.foretagsportalen.telenor.se | WILDCARD | In Scope | 09:26 |
| Added | ownit.se | URL | In Scope | 09:26 |
| Added | vimla.se | URL | In Scope | 09:26 |
| Added | *.mittforetag.telenor.se | WILDCARD | In Scope | 09:26 |
| Added | *.apis.telenor.se | WILDCARD | In Scope | 09:26 |
| Added | telenor.se | URL | In Scope | 09:26 |
| Added | *.api-app.telenor.se | WILDCARD | In Scope | 09:26 |
| Added | *.api.vimla.se | WILDCARD | In Scope | 09:26 |
| Added | *.profile.telenor.se | WILDCARD | In Scope | 09:26 |
| Added | *.tv.telenor.se | WILDCARD | In Scope | 09:26 |
Apr 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | webmail.ownit.nu | URL | In Scope | 12:21 |
| Removed | hosting.ownit.nu | URL | In Scope | 12:21 |
Apr 17, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | hosting.ownit.nu | URL | In Scope | 10:21 |
| Added | any domain that looks like it's owned by a third party or customer due to customer's privacy | OTHER | Out of Scope | 10:21 |
| Added | webmail.ownit.nu | URL | In Scope | 10:21 |
| Added | faq.vimla.se | URL | Out of Scope | 10:21 |
| Added | faq.vimla.se | OTHER | Out of Scope | 10:21 |
| Added | tc.ownit.se | URL | Out of Scope | 10:21 |
| Removed | any domain that looks like it's owned by a third party or customer due customer's privacy | OTHER | Out of Scope | 10:21 |
| Added | webmail.ownit.nu | URL | In Scope | 10:21 |
| Added | hosting.ownit.nu | URL | In Scope | 10:21 |
| Added | *.ownit.nu | OTHER | Out of Scope | 10:21 |
| Added | any domain that looks like it's owned by a third party or customer due to customer's privacy | OTHER | Out of Scope | 10:21 |
| Added | tc.ownit.se | OTHER | Out of Scope | 10:21 |
| Added | *.ownit.nu | WILDCARD | Out of Scope | 10:21 |
Feb 25, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.sme.telenor.se | OTHER | Out of Scope | 19:08 |
| Added | *.cust.bredbandsbolaget.se | OTHER | Out of Scope | 19:08 |
| Added | *.vimla.se | WILDCARD | In Scope | 19:08 |
| Added | *.bbcust.telenor.se | OTHER | Out of Scope | 19:08 |
| Added | stage-vimla-se.vimla.io | OTHER | Out of Scope | 19:08 |
| Added | any domain that looks like it's owned by a third party or customer due customer's privacy | OTHER | Out of Scope | 19:08 |
| Added | mobile services and devices provided by telenor sweden and subsidiaries not reachable from internet | OTHER | Out of Scope | 19:08 |
| Added | other business units of the telenor group - including *.telenor.com | OTHER | Out of Scope | 19:08 |
| Added | *.bredbandsbolaget.se | WILDCARD | In Scope | 19:08 |
| Added | *.vimla.work | WILDCARD | In Scope | 19:08 |
| Added | *.telenorinpli.se | WILDCARD | In Scope | 19:08 |
| Added | *.telenor.se | WILDCARD | In Scope | 19:08 |
| Added | *.europolitan.se | WILDCARD | In Scope | 19:08 |
| Added | *.ownit.se | WILDCARD | In Scope | 19:08 |
| Added | *.vimla.io | WILDCARD | In Scope | 19:08 |
| Added | *.inpli.se | WILDCARD | In Scope | 19:08 |
| Added | *.cust.telenor.se | OTHER | Out of Scope | 19:08 |
| Added | *.cust.ownit.se | OTHER | Out of Scope | 19:08 |
| Added | *.customers.ownit.se | OTHER | Out of Scope | 19:08 |
| Added | telenor id | OTHER | Out of Scope | 19:08 |
Feb 22, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.cust.ownit.se | OTHER | Out of Scope | 00:51 |
| Added | telenor id | OTHER | Out of Scope | 00:51 |
| Added | *.telenor.se | WILDCARD | In Scope | 00:51 |
| Added | *.telenorinpli.se | WILDCARD | In Scope | 00:51 |
| Added | mobile services and devices provided by telenor sweden and subsidiaries not reachable from internet | OTHER | Out of Scope | 00:51 |
| Added | *.europolitan.se | WILDCARD | In Scope | 00:51 |
| Added | *.vimla.work | WILDCARD | In Scope | 00:51 |
| Added | *.cust.telenor.se | OTHER | Out of Scope | 00:51 |
| Added | *.sme.telenor.se | OTHER | Out of Scope | 00:51 |
| Added | *.cust.bredbandsbolaget.se | OTHER | Out of Scope | 00:51 |
| Added | stage-vimla-se.vimla.io | OTHER | Out of Scope | 00:51 |
| Added | *.vimla.se | WILDCARD | In Scope | 00:51 |
| Added | *.vimla.io | WILDCARD | In Scope | 00:51 |
| Added | any domain that looks like it's owned by a third party or customer due customer's privacy | OTHER | Out of Scope | 00:51 |
| Added | other business units of the telenor group - including *.telenor.com | OTHER | Out of Scope | 00:51 |
| Added | *.bredbandsbolaget.se | WILDCARD | In Scope | 00:51 |
| Added | *.ownit.se | WILDCARD | In Scope | 00:51 |
| Added | *.inpli.se | WILDCARD | In Scope | 00:51 |
| Added | *.bbcust.telenor.se | OTHER | Out of Scope | 00:51 |
| Added | *.customers.ownit.se | OTHER | Out of Scope | 00:51 |
Feb 21, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Removed | *.telenor.se | WILDCARD | In Scope | 21:40 |
| Removed | other business units of the telenor group - including *.telenor.com | OTHER | Out of Scope | 21:40 |
| Removed | telenor id | OTHER | Out of Scope | 21:40 |
| Removed | mobile services and devices provided by telenor sweden and subsidiaries not reachable from internet | OTHER | Out of Scope | 21:40 |
| Removed | any domain that looks like it's owned by a third party or customer due customer's privacy | OTHER | Out of Scope | 21:40 |
| Removed | stage-vimla-se.vimla.io | OTHER | Out of Scope | 21:40 |
| Removed | *.cust.ownit.se | OTHER | Out of Scope | 21:40 |
| Removed | *.customers.ownit.se | OTHER | Out of Scope | 21:40 |
| Removed | *.cust.bredbandsbolaget.se | OTHER | Out of Scope | 21:40 |
| Removed | *.sme.telenor.se | OTHER | Out of Scope | 21:40 |
| Removed | *.cust.telenor.se | OTHER | Out of Scope | 21:40 |
| Removed | *.bbcust.telenor.se | OTHER | Out of Scope | 21:40 |
| Removed | *.telenorinpli.se | WILDCARD | In Scope | 21:40 |
| Removed | *.inpli.se | WILDCARD | In Scope | 21:40 |
| Removed | *.vimla.io | WILDCARD | In Scope | 21:40 |
| Removed | *.vimla.work | WILDCARD | In Scope | 21:40 |
| Removed | *.vimla.se | WILDCARD | In Scope | 21:40 |
| Removed | *.ownit.se | WILDCARD | In Scope | 21:40 |
| Removed | *.europolitan.se | WILDCARD | In Scope | 21:40 |
| Removed | *.bredbandsbolaget.se | WILDCARD | In Scope | 21:40 |
| Added | *.bbcust.telenor.se | OTHER | Out of Scope | 00:33 |
| Added | other business units of the telenor group - including *.telenor.com | OTHER | Out of Scope | 00:33 |
| Added | telenor id | OTHER | Out of Scope | 00:33 |
| Added | mobile services and devices provided by telenor sweden and subsidiaries not reachable from internet | OTHER | Out of Scope | 00:33 |
| Added | any domain that looks like it's owned by a third party or customer due customer's privacy | OTHER | Out of Scope | 00:33 |
| Added | stage-vimla-se.vimla.io | OTHER | Out of Scope | 00:33 |
| Added | *.cust.ownit.se | OTHER | Out of Scope | 00:33 |
| Added | *.customers.ownit.se | OTHER | Out of Scope | 00:33 |
| Added | *.cust.bredbandsbolaget.se | OTHER | Out of Scope | 00:33 |
| Added | *.sme.telenor.se | OTHER | Out of Scope | 00:33 |
| Added | *.cust.telenor.se | OTHER | Out of Scope | 00:33 |