telenor-sweden-public-bug-bounty-program
9
In Scope
11
Out of Scope
In-Scope Assets (9)
| Asset | Category | Bounty | Quick Links | |
|---|---|---|---|---|
| *.bredbandsbolaget.se | WILDCARD | Yes | ||
| *.europolitan.se | WILDCARD | Yes | ||
| *.inpli.se | WILDCARD | Yes | ||
| *.ownit.se | WILDCARD | Yes | ||
| *.telenor.se | WILDCARD | Yes | ||
| *.telenorinpli.se | WILDCARD | Yes | ||
| *.vimla.io | WILDCARD | Yes | ||
| *.vimla.se | WILDCARD | Yes | ||
| *.vimla.work | WILDCARD | Yes |
Out-of-Scope Assets (11)
| Asset | Category | Bounty | |
|---|---|---|---|
| *.bbcust.telenor.se | OTHER | Yes | |
| *.cust.bredbandsbolaget.se | OTHER | Yes | |
| *.cust.ownit.se | OTHER | Yes | |
| *.cust.telenor.se | OTHER | Yes | |
| *.customers.ownit.se | OTHER | Yes | |
| *.sme.telenor.se | OTHER | Yes | |
| Any domain that looks like it's owned by a third party or customer due customer's privacy | OTHER | Yes | |
| Mobile services and devices provided by Telenor Sweden and subsidiaries not reachable from Internet | OTHER | Yes | |
| Other business units of the Telenor Group - including *.telenor.com | OTHER | Yes | |
| Telenor ID | OTHER | Yes | |
| stage-vimla-se.vimla.io | OTHER | Yes |
Scope Changes (20)
Apr 16, 2026
| Change | Asset | Category | Scope | Time |
|---|---|---|---|---|
| Added | *.telenor.se | WILDCARD | In Scope | 18:33 |
| Added | *.bredbandsbolaget.se | WILDCARD | In Scope | 18:33 |
| Added | *.europolitan.se | WILDCARD | In Scope | 18:33 |
| Added | *.ownit.se | WILDCARD | In Scope | 18:33 |
| Added | *.vimla.se | WILDCARD | In Scope | 18:33 |
| Added | *.vimla.work | WILDCARD | In Scope | 18:33 |
| Added | *.vimla.io | WILDCARD | In Scope | 18:33 |
| Added | *.inpli.se | WILDCARD | In Scope | 18:33 |
| Added | *.telenorinpli.se | WILDCARD | In Scope | 18:33 |
| Added | *.bbcust.telenor.se | OTHER | Out of Scope | 18:33 |
| Added | *.cust.telenor.se | OTHER | Out of Scope | 18:33 |
| Added | *.sme.telenor.se | OTHER | Out of Scope | 18:33 |
| Added | *.cust.bredbandsbolaget.se | OTHER | Out of Scope | 18:33 |
| Added | *.customers.ownit.se | OTHER | Out of Scope | 18:33 |
| Added | *.cust.ownit.se | OTHER | Out of Scope | 18:33 |
| Added | stage-vimla-se.vimla.io | OTHER | Out of Scope | 18:33 |
| Added | any domain that looks like it's owned by a third party or customer due customer's privacy | OTHER | Out of Scope | 18:33 |
| Added | mobile services and devices provided by telenor sweden and subsidiaries not reachable from internet | OTHER | Out of Scope | 18:33 |
| Added | telenor id | OTHER | Out of Scope | 18:33 |
| Added | other business units of the telenor group - including *.telenor.com | OTHER | Out of Scope | 18:33 |