YWH YesWeHack LIVE

Telenor Sweden Public Bug Bounty Program

€50 –€6,000 Open on YesWeHack ↗

24 targets in scope

asset	type	bounty	max sev	seen
`*.api-app.telenor.se`	api	·	·	2026-09-20
`*.api.vimla.se`	api	·	·	2026-09-20
`*.apis.telenor.se`	api	·	·	2026-09-20
`ownit.se`	domain	·	·	2026-09-20
`telenor.se`	domain	·	·	2026-09-20
`vimla.se`	domain	·	·	2026-09-20
`https://apps.apple.com/se/app/vimla/id1233271881 https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en`	mobile	·	·	2026-09-20
`https://play.google.com/store/apps/details?id=com.vimlaapp&hl=en`	mobile	·	·	2026-09-20
`*.bredbandsbolaget.se`	wildcard	·	·	2026-09-20
`*.europolitan.se`	wildcard	·	·	2026-09-20
`*.foretagsportalen.telenor.se`	wildcard	·	·	2026-09-20
`*.inpli.se`	wildcard	·	·	2026-09-20
`*.mitt.vimla.se`	wildcard	·	·	2026-09-20
`*.mittforetag.telenor.se`	wildcard	·	·	2026-09-20
`*.ownit.se`	wildcard	·	·	2026-09-20
`*.play.ownit.se`	wildcard	·	·	2026-09-20
`*.profile.telenor.se`	wildcard	·	·	2026-09-20
`*.signin.telenor.se`	wildcard	·	·	2026-09-20
`*.stream.telenor.se`	wildcard	·	·	2026-09-20
`*.telenor.se`	wildcard	·	·	2026-09-20
`*.telenorinpli.se`	wildcard	·	·	2026-09-20
`*.vimla.io`	wildcard	·	·	2026-09-20
`*.vimla.se`	wildcard	·	·	2026-09-20
`*.vimla.work`	wildcard	·	·	2026-09-20

15 out of scope — black ICE, don't touch

*.bbcust.telenor.se other
*.cust.bredbandsbolaget.se other
*.cust.ownit.se other
*.cust.telenor.se other
*.customers.ownit.se other
*.ownit.nu other
*.sme.telenor.se other
Any domain that looks like it's owned by a third party or customer due to customer's privacy other
Mobile services and devices provided by Telenor Sweden and subsidiaries not reachable from Internet other
Other business units of the Telenor Group - including *.telenor.com other
admin-stage.tv.telenor.se other
faq.vimla.se other
stage-vimla-se.vimla.io other
status.vimla.se other
tc.ownit.se other

No changes since we started tracking on 2026-09-20.