Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
8
Disclosed reports
1
Subdomains
19,743

Most upvoted reports1

Most upvoted reports of Newegg
ReportWeaknessDisclosedBountyVotes
Endpoint disclosing user password#1986731No weakness recorded–$25064

Subdomains19,743

Subdomains of Newegg
NameScopeFirst seen
beta.admin.newegg.comadmin, stagingIn scope2026-11-14
alpha.newegg.comstagingIn scope2026-11-14
www.alpha.newegg.comstagingIn scope2026-11-14
alpha1.newegg.comstagingIn scope2026-11-14
alpha2.newegg.comstagingIn scope2026-11-14
alpha5.newegg.comstagingIn scope2026-11-14
beta.newegg.comstagingIn scope2026-11-14
autoconfig.beta.newegg.comstagingIn scope2026-11-14
autodiscover.beta.newegg.commail, stagingIn scope2026-11-14
m.beta.newegg.comstagingIn scope2026-11-14
webdisk.beta.newegg.comstagingIn scope2026-11-14
www.beta.newegg.comstagingIn scope2026-11-14
beta1.newegg.comstagingIn scope2026-11-14
beta2.newegg.comstagingIn scope2026-11-14
beta3.newegg.comstagingIn scope2026-11-14
beta4.newegg.comstagingIn scope2026-11-14
canary.newegg.comstagingIn scope2026-11-14
metrics-staging.newegg.commonitoring, stagingIn scope2026-11-14
metrics1-staging.newegg.commonitoring, stagingIn scope2026-11-14
preprod.newegg.comstagingIn scope2026-11-14
preview.newegg.comstagingIn scope2026-11-14
www.preview.newegg.comstagingIn scope2026-11-14
preview1.newegg.comstagingIn scope2026-11-14
preview2.newegg.comstagingIn scope2026-11-14
staging.shop.newegg.comstagingIn scope2026-11-14
stage.newegg.comstagingIn scope2026-11-14
autoconfig.stage.newegg.comstagingIn scope2026-11-14
autodiscover.stage.newegg.commail, stagingIn scope2026-11-14
home.stage.newegg.comstagingIn scope2026-11-14
m.stage.newegg.comstagingIn scope2026-11-14
webdisk.stage.newegg.comstagingIn scope2026-11-14
www.stage.newegg.comstagingIn scope2026-11-14
stage1.newegg.comstagingIn scope2026-11-14
stage2.newegg.comstagingIn scope2026-11-14
staging.newegg.comstagingIn scope2026-11-14
api.staging.newegg.comapi, stagingIn scope2026-11-14
autoconfig.staging.newegg.comstagingIn scope2026-11-14
autodiscover.staging.newegg.commail, stagingIn scope2026-11-14
ftp.staging.newegg.comdata, stagingIn scope2026-11-14
m.staging.newegg.comstagingIn scope2026-11-14
v6.staging.newegg.comstagingIn scope2026-11-14
www.staging.newegg.comstagingIn scope2026-11-14
staging1.newegg.comstagingIn scope2026-11-14
staging2.newegg.comstagingIn scope2026-11-14
stg.newegg.comstagingIn scope2026-11-14
www-staging.newegg.comstagingIn scope2026-11-14
www-stg.newegg.comstagingIn scope2026-11-14
e11stg.neweggbusiness.comstagingListed out of scope2026-11-14
e11stg-sec.neweggbusiness.comstagingListed out of scope2026-11-14

19,688 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.