Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
8
Disclosed reports
1
Subdomains
19,743

Most upvoted reports1

Most upvoted reports of Newegg
ReportWeaknessDisclosedBountyVotes
Endpoint disclosing user password#1986731No weakness recorded–$25064

Subdomains19,743

Subdomains of Newegg
NameScopeFirst seen
www.banners.newegg.comIn scope2026-11-14
baobab.newegg.comIn scope2026-11-14
baobao.newegg.comIn scope2026-11-14
bap.newegg.comIn scope2026-11-14
bappeda.newegg.comIn scope2026-11-14
bar.newegg.comIn scope2026-11-14
bara.newegg.comIn scope2026-11-14
baran.newegg.comIn scope2026-11-14
barbados.newegg.comIn scope2026-11-14
barbara.newegg.comIn scope2026-11-14
barcelona.newegg.comIn scope2026-11-14
barcode.newegg.comIn scope2026-11-14
barlow.newegg.comIn scope2026-11-14
barnaul.newegg.comIn scope2026-11-14
www.barnaul.newegg.comIn scope2026-11-14
barney.newegg.comIn scope2026-11-14
baron.newegg.comIn scope2026-11-14
barra.newegg.comIn scope2026-11-14
barracuda.newegg.comIn scope2026-11-14
barracuda1.newegg.comIn scope2026-11-14
barracuda2.newegg.comIn scope2026-11-14
barrie.newegg.comIn scope2026-11-14
barry.newegg.comIn scope2026-11-14
bars.newegg.comIn scope2026-11-14
bart.newegg.comIn scope2026-11-14
barton.newegg.comIn scope2026-11-14
bas.newegg.comIn scope2026-11-14
base.newegg.comIn scope2026-11-14
www.base.newegg.comIn scope2026-11-14
base1.newegg.comIn scope2026-11-14
base2.newegg.comIn scope2026-11-14
baseball.newegg.comIn scope2026-11-14
basel.newegg.comIn scope2026-11-14
bash.newegg.comIn scope2026-11-14
basic.newegg.comIn scope2026-11-14
basij.newegg.comIn scope2026-11-14
basil.newegg.comIn scope2026-11-14
basket.newegg.comIn scope2026-11-14
bass.newegg.comIn scope2026-11-14
bastion.newegg.comIn scope2026-11-14
bat.newegg.comIn scope2026-11-14
batch.newegg.comIn scope2026-11-14
batman.newegg.comIn scope2026-11-14
battle.newegg.comIn scope2026-11-14
bauer.newegg.comIn scope2026-11-14
bauhaus.newegg.comIn scope2026-11-14
bay.newegg.comIn scope2026-11-14
bayern.newegg.comIn scope2026-11-14
baza.newegg.comIn scope2026-11-14
bazaar.newegg.comIn scope2026-11-14
bazar.newegg.comIn scope2026-11-14
bb.newegg.comIn scope2026-11-14
www.bb.newegg.comIn scope2026-11-14
bb1.newegg.comIn scope2026-11-14
bba.newegg.comIn scope2026-11-14
bbb.newegg.comIn scope2026-11-14
bbc.newegg.comIn scope2026-11-14
bbm.newegg.comIn scope2026-11-14
bbq.newegg.comIn scope2026-11-14
bbs.newegg.comIn scope2026-11-14
www.bbs.newegg.comIn scope2026-11-14
bbs1.newegg.comIn scope2026-11-14
bbs2.newegg.comIn scope2026-11-14
bbss.newegg.comIn scope2026-11-14
bbt.newegg.comIn scope2026-11-14
bbtest.newegg.comIn scope2026-11-14
bc.newegg.comIn scope2026-11-14
www.bc.newegg.comIn scope2026-11-14
bc1.newegg.comIn scope2026-11-14
bca.newegg.comIn scope2026-11-14
bcc.newegg.comIn scope2026-11-14
bck.newegg.comIn scope2026-11-14
bcm.newegg.comIn scope2026-11-14
bcp.newegg.comIn scope2026-11-14
bcs.newegg.comIn scope2026-11-14
bd.newegg.comIn scope2026-11-14
www.bd.newegg.comIn scope2026-11-14
bdc.newegg.comIn scope2026-11-14
bdog.newegg.comIn scope2026-11-14
bds.newegg.comIn scope2026-11-14
bdsm.newegg.comIn scope2026-11-14
be.newegg.comIn scope2026-11-14
bea.newegg.comIn scope2026-11-14
beach.newegg.comIn scope2026-11-14
beacon.newegg.comIn scope2026-11-14
beagle.newegg.comIn scope2026-11-14
beaker.newegg.comIn scope2026-11-14
beam.newegg.comIn scope2026-11-14
bean.newegg.comIn scope2026-11-14
bear.newegg.comIn scope2026-11-14
beast.newegg.comIn scope2026-11-14
beatles.newegg.comIn scope2026-11-14
beatrice.newegg.comIn scope2026-11-14
beautiful.newegg.comIn scope2026-11-14
beauty.newegg.comIn scope2026-11-14
www.beauty.newegg.comIn scope2026-11-14
bedroom.newegg.comIn scope2026-11-14
bee.newegg.comIn scope2026-11-14
beehive.newegg.comIn scope2026-11-14
beekeeping.newegg.comIn scope2026-11-14

19,688 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.