Bug bounty program
NE
Newegg
Most upvoted reports1
| Report | Weakness | Disclosed | Bounty | Votes |
|---|---|---|---|---|
| Endpoint disclosing user password#1986731 | No weakness recorded | – | $250 | 64 |
Subdomains19,743
| Name | Scope | First seen |
|---|---|---|
| beta.admin.newegg.comadmin, staging | In scope | 2026-11-14 |
| alpha.newegg.comstaging | In scope | 2026-11-14 |
| www.alpha.newegg.comstaging | In scope | 2026-11-14 |
| alpha1.newegg.comstaging | In scope | 2026-11-14 |
| alpha2.newegg.comstaging | In scope | 2026-11-14 |
| alpha5.newegg.comstaging | In scope | 2026-11-14 |
| beta.newegg.comstaging | In scope | 2026-11-14 |
| autoconfig.beta.newegg.comstaging | In scope | 2026-11-14 |
| autodiscover.beta.newegg.commail, staging | In scope | 2026-11-14 |
| m.beta.newegg.comstaging | In scope | 2026-11-14 |
| webdisk.beta.newegg.comstaging | In scope | 2026-11-14 |
| www.beta.newegg.comstaging | In scope | 2026-11-14 |
| beta1.newegg.comstaging | In scope | 2026-11-14 |
| beta2.newegg.comstaging | In scope | 2026-11-14 |
| beta3.newegg.comstaging | In scope | 2026-11-14 |
| beta4.newegg.comstaging | In scope | 2026-11-14 |
| canary.newegg.comstaging | In scope | 2026-11-14 |
| metrics-staging.newegg.commonitoring, staging | In scope | 2026-11-14 |
| metrics1-staging.newegg.commonitoring, staging | In scope | 2026-11-14 |
| preprod.newegg.comstaging | In scope | 2026-11-14 |
| preview.newegg.comstaging | In scope | 2026-11-14 |
| www.preview.newegg.comstaging | In scope | 2026-11-14 |
| preview1.newegg.comstaging | In scope | 2026-11-14 |
| preview2.newegg.comstaging | In scope | 2026-11-14 |
| staging.shop.newegg.comstaging | In scope | 2026-11-14 |
| stage.newegg.comstaging | In scope | 2026-11-14 |
| autoconfig.stage.newegg.comstaging | In scope | 2026-11-14 |
| autodiscover.stage.newegg.commail, staging | In scope | 2026-11-14 |
| home.stage.newegg.comstaging | In scope | 2026-11-14 |
| m.stage.newegg.comstaging | In scope | 2026-11-14 |
| webdisk.stage.newegg.comstaging | In scope | 2026-11-14 |
| www.stage.newegg.comstaging | In scope | 2026-11-14 |
| stage1.newegg.comstaging | In scope | 2026-11-14 |
| stage2.newegg.comstaging | In scope | 2026-11-14 |
| staging.newegg.comstaging | In scope | 2026-11-14 |
| api.staging.newegg.comapi, staging | In scope | 2026-11-14 |
| autoconfig.staging.newegg.comstaging | In scope | 2026-11-14 |
| autodiscover.staging.newegg.commail, staging | In scope | 2026-11-14 |
| ftp.staging.newegg.comdata, staging | In scope | 2026-11-14 |
| m.staging.newegg.comstaging | In scope | 2026-11-14 |
| v6.staging.newegg.comstaging | In scope | 2026-11-14 |
| www.staging.newegg.comstaging | In scope | 2026-11-14 |
| staging1.newegg.comstaging | In scope | 2026-11-14 |
| staging2.newegg.comstaging | In scope | 2026-11-14 |
| stg.newegg.comstaging | In scope | 2026-11-14 |
| www-staging.newegg.comstaging | In scope | 2026-11-14 |
| www-stg.newegg.comstaging | In scope | 2026-11-14 |
| e11stg.neweggbusiness.comstaging | Listed out of scope | 2026-11-14 |
| e11stg-sec.neweggbusiness.comstaging | Listed out of scope | 2026-11-14 |
19,688 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.