Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
8
Disclosed reports
1
Subdomains
19,743

Most upvoted reports1

Most upvoted reports of Newegg
ReportWeaknessDisclosedBountyVotes
Endpoint disclosing user password#1986731No weakness recorded–$25064

Subdomains19,743

Subdomains of Newegg
NameScopeFirst seen
backup.newegg.comdataIn scope2026-11-14
www.backup.newegg.comdataIn scope2026-11-14
backup01.newegg.comdataIn scope2026-11-14
backup02.newegg.comdataIn scope2026-11-14
backup1.newegg.comdataIn scope2026-11-14
backup2.newegg.comdataIn scope2026-11-14
backup3.newegg.comdataIn scope2026-11-14
backup5.newegg.comdataIn scope2026-11-14
backup6.newegg.comdataIn scope2026-11-14
backups.newegg.comdataIn scope2026-11-14
ftp.blog.newegg.comdataIn scope2026-11-14
ftp.cp.newegg.comdataIn scope2026-11-14
database.newegg.comdataIn scope2026-11-14
database1.newegg.comdataIn scope2026-11-14
database2.newegg.comdataIn scope2026-11-14
db.newegg.comdataIn scope2026-11-14
www.db.newegg.comdataIn scope2026-11-14
ftp.demo.newegg.comdata, testIn scope2026-11-14
ftp.dev.newegg.comdata, devIn scope2026-11-14
dump.newegg.comdataIn scope2026-11-14
elastic.newegg.comdataIn scope2026-11-14
files.newegg.comdataIn scope2026-11-14
autoconfig.files.newegg.comdataIn scope2026-11-14
autodiscover.files.newegg.comdata, mailIn scope2026-11-14
webdisk.files.newegg.comdataIn scope2026-11-14
files1.newegg.comdataIn scope2026-11-14
files2.newegg.comdataIn scope2026-11-14
files3.newegg.comdataIn scope2026-11-14
files4.newegg.comdataIn scope2026-11-14
ftp.forum.newegg.comdataIn scope2026-11-14
ftp.newegg.comdataIn scope2026-11-14
ftp-eu.newegg.comdataIn scope2026-11-14
www.ftp.newegg.comdataIn scope2026-11-14
ftp01.newegg.comdataIn scope2026-11-14
www.ftp01.newegg.comdataIn scope2026-11-14
ftp02.newegg.comdataIn scope2026-11-14
ftp03.newegg.comdataIn scope2026-11-14
ftp09.newegg.comdataIn scope2026-11-14
ftp1.newegg.comdataIn scope2026-11-14
ftp10.newegg.comdataIn scope2026-11-14
ftp12.newegg.comdataIn scope2026-11-14
ftp13.newegg.comdataIn scope2026-11-14
ftp14.newegg.comdataIn scope2026-11-14
ftp15.newegg.comdataIn scope2026-11-14
ftp2.newegg.comdataIn scope2026-11-14
ftp3.newegg.comdataIn scope2026-11-14
ftp4.newegg.comdataIn scope2026-11-14
ftp5.newegg.comdataIn scope2026-11-14
ftp6.newegg.comdataIn scope2026-11-14
ftp7.newegg.comdataIn scope2026-11-14
ftp8.newegg.comdataIn scope2026-11-14
ftp9.newegg.comdataIn scope2026-11-14
mongo.newegg.comdataIn scope2026-11-14
mongodb.newegg.comdataIn scope2026-11-14
mysql.newegg.comdataIn scope2026-11-14
mysql01.newegg.comdataIn scope2026-11-14
mysql02.newegg.comdataIn scope2026-11-14
mysql03.newegg.comdataIn scope2026-11-14
mysql1.newegg.comdataIn scope2026-11-14
mysql10.newegg.comdataIn scope2026-11-14
mysql11.newegg.comdataIn scope2026-11-14
mysql2.newegg.comdataIn scope2026-11-14
mysql3.newegg.comdataIn scope2026-11-14
mysql4.newegg.comdataIn scope2026-11-14
mysql41.newegg.comdataIn scope2026-11-14
mysql5.newegg.comdataIn scope2026-11-14
mysql6.newegg.comdataIn scope2026-11-14
mysql7.newegg.comdataIn scope2026-11-14
mysql8.newegg.comdataIn scope2026-11-14
mysql9.newegg.comdataIn scope2026-11-14
ftp.new.newegg.comdataIn scope2026-11-14
s3.newegg.comdataIn scope2026-11-14
www.s3.newegg.comdataIn scope2026-11-14
sftp.newegg.comdataIn scope2026-11-14
sftp3.newegg.comdataIn scope2026-11-14
ftp.shop.newegg.comdataIn scope2026-11-14
sierra-db.newegg.comdataIn scope2026-11-14
solr.newegg.comdataIn scope2026-11-14
ora-placeholder-ps-db.srv.newegg.comdataIn scope2026-11-14
ftp.staging.newegg.comdata, stagingIn scope2026-11-14
ftp.test.newegg.comdata, testIn scope2026-11-14
upload.newegg.comdataIn scope2026-11-14
webdisk.upload.newegg.comdataIn scope2026-11-14
www.upload.newegg.comdataIn scope2026-11-14
upload2.newegg.comdataIn scope2026-11-14
uploads.newegg.comdataIn scope2026-11-14
www-backup.newegg.comdataIn scope2026-11-14

19,688 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in