telefonica-germany-web-applications
21
In Scope
11
Out of Scope
In-Scope Assets (21)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| apps.blau.de | URL | Yes | ||
| blau.de | URL | Yes | ||
| dev-library.telefonica.de | URL | Yes | ||
| https://apps.apple.com/de/app/o-business/id1219356865 | IOS | Yes | - | |
| https://play.google.com/store/apps/details?id=telefonica.de.o2business | ANDROID | Yes | ||
| https://www.blau.de | URL | Yes | ||
| https://www.o2business.de | URL | Yes | ||
| https://www.o2online.de | URL | Yes | ||
| https://www.telefonica.de | URL | Yes | ||
| library.telefonica.de | URL | Yes | ||
| login-ciam.blau.de | URL | Yes | ||
| login.o2online.de | URL | Yes | ||
| o2business.de | URL | Yes | ||
| o2online.de | URL | Yes | ||
| one.o9.de | URL | Yes | ||
| servicemanager.o2business.de | URL | Yes | ||
| static-blau.o9.de | URL | Yes | ||
| static.o2business.de | URL | Yes | ||
| static.o9.de | URL | Yes | ||
| static2-blau.o9.de | URL | Yes | ||
| static2.o9.de | URL | Yes |
Out-of-Scope Assets (11)
| Asset | Category | Bounty | |
|---|---|---|---|
| 3rd party systems (any system or service not operated by Telefónica, e.g. vulnerabilities in social media services which might lead to account compromise) | OTHER | Yes | |
| All domains or subdomains not listed in the above list of 'Scopes' | OTHER | Yes | |
| Subdomains owned by Telefónica but obviously operated by third parties (e.g. the imprint states a company other than Telefónica Germany or its subsidiaries) | OTHER | Yes | |
| admin.digitalphone.o2business.de | OTHER | Yes | |
| api-v4.trbo.com | OTHER | Yes | |
| easyaccess.o2business.de | OTHER | Yes | |
| o2online-de.app.baqend.com | OTHER | Yes | |
| sim-aktivieren.blau.de | OTHER | Yes | |
| static-v2.trbo.com | OTHER | Yes | |
| telefonica-business--c.eu17.content.force.com | OTHER | Yes | |
| telefonica-business.file.force.com | OTHER | Yes |
Scope Changes (32)
Apr 16, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | https://www.telefonica.de | URL | In Scope | 18:33 |
| Added | https://www.o2online.de | URL | In Scope | 18:33 |
| Added | https://www.o2business.de | URL | In Scope | 18:33 |
| Added | https://www.blau.de | URL | In Scope | 18:33 |
| Added | https://apps.apple.com/de/app/o-business/id1219356865 | IOS | In Scope | 18:33 |
| Added | https://play.google.com/store/apps/details?id=telefonica.de.o2business | ANDROID | In Scope | 18:33 |
| Added | library.telefonica.de | URL | In Scope | 18:33 |
| Added | apps.blau.de | URL | In Scope | 18:33 |
| Added | one.o9.de | URL | In Scope | 18:33 |
| Added | blau.de | URL | In Scope | 18:33 |
| Added | static2-blau.o9.de | URL | In Scope | 18:33 |
| Added | static-blau.o9.de | URL | In Scope | 18:33 |
| Added | o2online.de | URL | In Scope | 18:33 |
| Added | static2.o9.de | URL | In Scope | 18:33 |
| Added | static.o9.de | URL | In Scope | 18:33 |
| Added | dev-library.telefonica.de | URL | In Scope | 18:33 |
| Added | login.o2online.de | URL | In Scope | 18:33 |
| Added | static.o2business.de | URL | In Scope | 18:33 |
| Added | o2business.de | URL | In Scope | 18:33 |
| Added | servicemanager.o2business.de | URL | In Scope | 18:33 |
| Added | login-ciam.blau.de | URL | In Scope | 18:33 |
| Added | all domains or subdomains not listed in the above list of 'scopes' | OTHER | Out of Scope | 18:33 |
| Added | subdomains owned by telefónica but obviously operated by third parties (e.g. the imprint states a company other than telefónica germany or its subsidiaries) | OTHER | Out of Scope | 18:33 |
| Added | 3rd party systems (any system or service not operated by telefónica, e.g. vulnerabilities in social media services which might lead to account compromise) | OTHER | Out of Scope | 18:33 |
| Added | o2online-de.app.baqend.com | OTHER | Out of Scope | 18:33 |
| Added | easyaccess.o2business.de | OTHER | Out of Scope | 18:33 |
| Added | admin.digitalphone.o2business.de | OTHER | Out of Scope | 18:33 |
| Added | telefonica-business.file.force.com | OTHER | Out of Scope | 18:33 |
| Added | telefonica-business--c.eu17.content.force.com | OTHER | Out of Scope | 18:33 |
| Added | static-v2.trbo.com | OTHER | Out of Scope | 18:33 |
| Added | api-v4.trbo.com | OTHER | Out of Scope | 18:33 |
| Added | sim-aktivieren.blau.de | OTHER | Out of Scope | 18:33 |