Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
8
Disclosed reports
1
Subdomains
19,743

Most upvoted reports1

Most upvoted reports of Newegg
ReportWeaknessDisclosedBountyVotes
Endpoint disclosing user password#1986731No weakness recorded–$25064

Subdomains19,743

Subdomains of Newegg
NameScopeFirst seen
adfs.newegg.comauthIn scope2026-11-14
auth.newegg.comauthIn scope2026-11-14
auth-hack.newegg.comauthIn scope2026-11-14
radius.auth.newegg.comauthIn scope2026-11-14
auth1.newegg.comauthIn scope2026-11-14
auth2.newegg.comauthIn scope2026-11-14
auth3.newegg.comauthIn scope2026-11-14
cas.newegg.comauthIn scope2026-11-14
cas1.newegg.comauthIn scope2026-11-14
cas2.newegg.comauthIn scope2026-11-14
cas3.newegg.comauthIn scope2026-11-14
iam.newegg.comauthIn scope2026-11-14
identity.newegg.comauthIn scope2026-11-14
idp.newegg.comauthIn scope2026-11-14
idp-test.newegg.comauth, testIn scope2026-11-14
idp2.newegg.comauthIn scope2026-11-14
login.newegg.comauthIn scope2026-11-14
autoconfig.login.newegg.comauthIn scope2026-11-14
webdisk.login.newegg.comauthIn scope2026-11-14
www.login.newegg.comauthIn scope2026-11-14
login1.newegg.comauthIn scope2026-11-14
login2.newegg.comauthIn scope2026-11-14
oauth.newegg.comauthIn scope2026-11-14
signin.newegg.comauthIn scope2026-11-14
sso.newegg.comauthIn scope2026-11-14
www.sso.newegg.comauthIn scope2026-11-14
ws-lon-oauth1.newegg.comauthIn scope2026-11-14

19,688 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in