Bug bounty program
NE
Newegg
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Endpoint disclosing user password#1986731 | No weakness recorded | – | $250 | 64 |
Subdomains19,743
| Name | Scope | First seen |
|---|---|---|
| dev.admin.newegg.comadmin, dev | In scope | 2026-11-14 |
| api-dev.newegg.comapi, dev | In scope | 2026-11-14 |
| blog-dev.newegg.comdev | In scope | 2026-11-14 |
| localhost.blog.newegg.comdev | In scope | 2026-11-14 |
| crm-dev.newegg.comdev | In scope | 2026-11-14 |
| dev.newegg.comdev | In scope | 2026-11-14 |
| dev-admin.newegg.comadmin, dev | In scope | 2026-11-14 |
| dev-api.newegg.comapi, dev | In scope | 2026-11-14 |
| dev-www.newegg.comdev | In scope | 2026-11-14 |
| admin.dev.newegg.comadmin, dev | In scope | 2026-11-14 |
| api.dev.newegg.comapi, dev | In scope | 2026-11-14 |
| autoconfig.dev.newegg.comdev | In scope | 2026-11-14 |
| autodiscover.dev.newegg.comdev, mail | In scope | 2026-11-14 |
| blogx.dev.newegg.comdev | In scope | 2026-11-14 |
| ftp.dev.newegg.comdata, dev | In scope | 2026-11-14 |
| m.dev.newegg.comdev | In scope | 2026-11-14 |
| mail.dev.newegg.comdev, mail | In scope | 2026-11-14 |
| mobile.dev.newegg.comdev | In scope | 2026-11-14 |
| secure.dev.newegg.comdev | In scope | 2026-11-14 |
| webdisk.dev.newegg.comdev | In scope | 2026-11-14 |
| wiki.dev.newegg.comdev, tools | In scope | 2026-11-14 |
| www.dev.newegg.comdev | In scope | 2026-11-14 |
| dev0.newegg.comdev | In scope | 2026-11-14 |
| dev01.newegg.comdev | In scope | 2026-11-14 |
| dev02.newegg.comdev | In scope | 2026-11-14 |
| dev1.newegg.comdev | In scope | 2026-11-14 |
| dev10.newegg.comdev | In scope | 2026-11-14 |
| dev2.newegg.comdev | In scope | 2026-11-14 |
| autoconfig.dev2.newegg.comdev | In scope | 2026-11-14 |
| autodiscover.dev2.newegg.comdev, mail | In scope | 2026-11-14 |
| webdisk.dev2.newegg.comdev | In scope | 2026-11-14 |
| www.dev2.newegg.comdev | In scope | 2026-11-14 |
| dev3.newegg.comdev | In scope | 2026-11-14 |
| www.dev3.newegg.comdev | In scope | 2026-11-14 |
| dev4.newegg.comdev | In scope | 2026-11-14 |
| dev5.newegg.comdev | In scope | 2026-11-14 |
| dev6.newegg.comdev | In scope | 2026-11-14 |
| dev7.newegg.comdev | In scope | 2026-11-14 |
| devel.newegg.comdev | In scope | 2026-11-14 |
| www.devel.newegg.comdev | In scope | 2026-11-14 |
| devel2.newegg.comdev | In scope | 2026-11-14 |
| develop.newegg.comdev | In scope | 2026-11-14 |
| www.develop.newegg.comdev | In scope | 2026-11-14 |
| development.newegg.comdev | In scope | 2026-11-14 |
| webdisk.development.newegg.comdev | In scope | 2026-11-14 |
| www.development.newegg.comdev | In scope | 2026-11-14 |
| local.newegg.comdev | In scope | 2026-11-14 |
| www.local.newegg.comdev | In scope | 2026-11-14 |
| localhost.newegg.comdev | In scope | 2026-11-14 |
| m-dev.newegg.comdev | In scope | 2026-11-14 |
| dev.shop.newegg.comdev | In scope | 2026-11-14 |
| www-dev.newegg.comdev | In scope | 2026-11-14 |
19,688 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.