Mail.ru: [sf.my.com] Reflected XSS

Browser-specific reflected XSS via URI parameters in sf.my.com. sf.my.com is not covered by bug bounty scope...