vulns.co
/
GKData.io MCP

Bugcrowd · 4 min read

T-Mobile

Paid Bounty · Points - $133,700

Open current program Scope capture

What this record establishes

Scope capture

Published asset rows were captured. The full policy and eligibility were not individually reviewed.

Official directory card labeled Bug Bounty. Monetary reward displayed. Program policy and submission status not reviewed.

Published asset scope

Snapshot captured 2026-10-03. Scope status: Captured.

In scope · 76 published rows
AssetTypeGroup / eligibility
Self-Register Account on T-Mobile Microsoft Entra IDotherSpecial Target
Cellular Network Auth Bypass via Web App/T-Life (404-200-7239)networkSpecial Target
T&P Servers (Temporarily Out of Scope)networkSpecial Target
t-mobile.comPublished location: https://t-mobile.comwebsiteCore Assets
account.t-mobile.comPublished location: https://account.t-mobile.comwebsiteCore Assets
*.api.t-mobile.comPublished location: https://api.t-mobile.comapiCore Assets
metrobyt-mobile.comPublished location: https://metrobyt-mobile.comwebsiteCore Assets
sprint.comPublished location: https://sprint.comwebsiteCore Assets
tfb.t-mobile.comPublished location: https://tfb.t-mobile.comwebsiteCore Assets
devedge.t-mobile.comPublished location: https://devedge.t-mobile.comwebsiteCore Assets
tess.service-now.comPublished location: https://tess.service-now.comwebsiteCore Assets
DIGITS - Web, Desktop, MobilePublished location: https://digits.t-mobile.comwebsiteCore Assets
account.business.t-mobile.comPublished location: https://account.business.t-mobile.comwebsiteCore Assets
*.t-mobile.comPublished location: https://t-mobile.comwebsiteSupplemental Assets
*.metrobyt-mobile.comPublished location: https://metrobyt-mobile.comwebsiteSupplemental Assets
*.sprint.comPublished location: https://sprint.comwebsiteSupplemental Assets
api.vistarmedia.comPublished location: https://api.vistarmedia.comwebsiteSupplemental Assets
packages.cortexpowered.comPublished location: https://packages.cortexpowered.comwebsiteSupplemental Assets
api.vistarmedia.euPublished location: https://api.vistarmedia.euwebsiteSupplemental Assets
production-dynam-creative.vistarmedia.comPublished location: https://production-dynam-creative.vistarmedia.comwebsiteSupplemental Assets
storybook.vistarmedia.comPublished location: https://storybook.vistarmedia.comwebsiteSupplemental Assets
creatives.vistarmedia.comPublished location: https://creatives.vistarmedia.comwebsiteSupplemental Assets
sflower.cortexpowered.comPublished location: https://sflower.cortexpowered.comwebsiteSupplemental Assets
production-delivery-metrics-svc.vistarmedia.comPublished location: https://production-delivery-metrics-svc.vistarmedia.comwebsiteSupplemental Assets
maps.vistarmedia.comPublished location: https://maps.vistarmedia.comwebsiteSupplemental Assets
transcodes-cdn.vistarmedia.comPublished location: https://transcodes-cdn.vistarmedia.comwebsiteSupplemental Assets
assets-cdn.vistarmedia.comPublished location: https://assets-cdn.vistarmedia.comwebsiteSupplemental Assets
docker-staging.adstruc.comPublished location: https://docker-staging.adstruc.comwebsiteSupplemental Assets
staging-trafficking.vistarmedia.comPublished location: https://staging-trafficking.vistarmedia.comwebsiteSupplemental Assets
job-svc-b.vistarmedia.comPublished location: https://job-svc-b.vistarmedia.comwebsiteSupplemental Assets
docsite.vistarmedia.comPublished location: https://docsite.vistarmedia.comwebsiteSupplemental Assets
sfleet.cortexpowered.comPublished location: https://sfleet.cortexpowered.comwebsiteSupplemental Assets
audience-builder.vistarmedia.comPublished location: https://audience-builder.vistarmedia.comwebsiteSupplemental Assets
staging-login.vistarmedia.comPublished location: https://staging-login.vistarmedia.comwebsiteSupplemental Assets
clients.adstruc.comPublished location: https://clients.adstruc.comwebsiteSupplemental Assets
demo.adstruc.comPublished location: https://demo.adstruc.comwebsiteSupplemental Assets
*.uscc.netPublished location: https://*.uscc.netwebsiteSupplemental Assets
*.uscc.comPublished location: https://*.uscc.comwebsiteSupplemental Assets
*.uscellular.comPublished location: https://*.uscellular.comwebsiteSupplemental Assets
dashboard-101.moengage.comPublished location: https://dashboard-101.moengage.comwebsiteSupplemental Assets
assurancewireless.comPublished location: https://www.assurancewireless.comwebsiteSupplemental Assets
*.assurancewireless.comPublished location: https://*.assurancewireless.comwebsiteSupplemental Assets
assets.platform.blis.comPublished location: https://assets.platform.blis.comwebsiteSupplemental Assets
assets.development.amazon-tacticalplanner.comPublished location: https://assets.development.amazon-tacticalplanner.comwebsiteSupplemental Assets
assets.platform.development.blis.comPublished location: https://assets.platform.development.blis.comwebsiteSupplemental Assets
assets.platform.rc.blis.comPublished location: https://assets.platform.rc.blis.comwebsiteSupplemental Assets
audiencelogos.blis.comPublished location: https://audiencelogos.blis.comwebsiteSupplemental Assets
blis.comPublished location: https://blis.comwebsiteSupplemental Assets
creative.infinity.blismedia.comPublished location: https://creative.infinity.blismedia.comwebsiteSupplemental Assets
development.wmaudience.comPublished location: https://development.wmaudience.comwebsiteSupplemental Assets
imply-pivot.blis.comPublished location: https://imply-pivot.blis.comwebsiteSupplemental Assets
imply-pivot.test.blis.comPublished location: https://imply-pivot.test.blis.comwebsiteSupplemental Assets
imply.blis.comPublished location: https://imply.blis.comwebsiteSupplemental Assets
imply.internal.platform.blis.comPublished location: https://imply.internal.platform.blis.comwebsiteSupplemental Assets
imply.platform.blis.comPublished location: https://imply.platform.blis.comwebsiteSupplemental Assets
imply.platform.development.blis.comPublished location: https://imply.platform.development.blis.comwebsiteSupplemental Assets
imply.platform.rc.blis.comPublished location: https://imply.platform.rc.blis.comwebsiteSupplemental Assets
imply.test.blis.comPublished location: https://imply.test.blis.comwebsiteSupplemental Assets
imply.wmaudience.comPublished location: https://imply.wmaudience.comwebsiteSupplemental Assets
internal.platform.blis.comPublished location: https://internal.platform.blis.comwebsiteSupplemental Assets
jenkins-github.gcp.blis.comPublished location: https://jenkins-github.gcp.blis.comwebsiteSupplemental Assets
platform.blis.comPublished location: https://platform.blis.comwebsiteSupplemental Assets
platform.blismedia.comPublished location: https://platform.blismedia.comwebsiteSupplemental Assets
platform.development.blis.comPublished location: https://platform.development.blis.comwebsiteSupplemental Assets
platform.development2.blis.comPublished location: https://platform.development2.blis.comwebsiteSupplemental Assets
platform.rc.blis.comPublished location: https://platform.rc.blis.comwebsiteSupplemental Assets
privacy.blismedia.comPublished location: https://privacy.blismedia.comwebsiteSupplemental Assets
rc.wmaudience.comPublished location: https://rc.wmaudience.comwebsiteSupplemental Assets
signature.blis.comPublished location: https://signature.blis.comwebsiteSupplemental Assets
sitepixel.blis.comPublished location: https://sitepixel.blis.comwebsiteSupplemental Assets
sitepixel.dev.blis.comPublished location: https://sitepixel.dev.blis.comwebsiteSupplemental Assets
wiki.atom-lens.comPublished location: https://wiki.atom-lens.comwebsiteSupplemental Assets
wmaudience.comPublished location: https://wmaudience.comwebsiteSupplemental Assets
Subdomain TakeoverotherStatic Bug-Class Rewards
T-Life - iOSPublished location: https://apps.apple.com/us/app/t-life/id1111876388iosMobile Targets
T-Life - AndroidPublished location: https://play.google.com/store/apps/details?id=com.tmobile.tuesdays&hl=en_US&gl=USandroidMobile Targets
Out of scope · 9 published rows
AssetTypeGroup / eligibility
/self-service-*websiteRestricted Targets
http://10.72.218.66/flag.txtnetworkRestricted Targets
http://10.62.252.214/flag.txtnetworkRestricted Targets
*.sprint.netwebsiteRestricted Targets
*.mobile.uscc.netwebsiteRestricted Targets
*.mobile.uscc.comwebsiteRestricted Targets
*.moengage.comPublished location: https://*.moengage.comwebsiteRestricted Targets
appointments.uscellular.comPublished location: https://appointments.uscellular.comwebsiteRestricted Targets
Any domain, property, product, protocol, or service of the app/hardware/software version not explicitly listed in the In-Scope section is out of scope; submissions are welcome but not guaranteed for the bounty/bonus.otherCategorical Exclusions

Capture limits

  • Only the published asset table was captured; program rules and eligibility still require individual review.

Live policy and platform eligibility still require review.

Sources and collection identity

  1. Official program page Primary source · reviewed 2026-10-03
  2. Published scope source Primary source · reviewed 2026-10-03

Appears in Discovery, Bounty, Bugcrowd. No identity match is inferred from a shared company name.

GitHub snapshot 2026-10-04

53796974ace8 · JSON exports & schemas · CC BY 4.0 content / MIT software