Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
0
Subdomains
267

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains267

Subdomains of SHEIN
NameScopeFirst seen
www.dams.romwe.co.inNot in the scope2026-11-14
m.romwe.co.inNot in the scope2026-11-14
virtual40.romwe.co.inNot in the scope2026-11-14
www.romwe.co.inNot in the scope2026-11-14
analytics.romwe.comIn scope2026-11-14
android.romwe.comIn scope2026-11-14
api-romwe.romwe.comapiIn scope2026-11-14
api-service.romwe.comapiIn scope2026-11-14
ar.romwe.comIn scope2026-11-14
au.romwe.comIn scope2026-11-14
ca.romwe.comIn scope2026-11-14
setup.icloud.comfr.romwe.comIn scope2026-11-14
count.romwe.comIn scope2026-11-14
de.romwe.comIn scope2026-11-14
image.email.romwe.comIn scope2026-11-14
link.emaila.romwe.comIn scope2026-11-14
erp.romwe.comIn scope2026-11-14
es.romwe.comIn scope2026-11-14
fr.romwe.comIn scope2026-11-14
fun.romwe.comIn scope2026-11-14
help.romwe.comIn scope2026-11-14
im-api-chat-eur.romwe.comapiIn scope2026-11-14
im-gateway-chat-us.romwe.comIn scope2026-11-14
image.romwe.comIn scope2026-11-14
img.romwe.comIn scope2026-11-14
it.romwe.comIn scope2026-11-14
link.romwe.comIn scope2026-11-14
link-edm-ca.romwe.comIn scope2026-11-14
link-edm-mx.romwe.commailIn scope2026-11-14
link-us.romwe.comIn scope2026-11-14
link2-edm-ca.romwe.comIn scope2026-11-14
link2-edm-mx.romwe.commailIn scope2026-11-14
m.romwe.comIn scope2026-11-14
mx.romwe.commailIn scope2026-11-14
cn3-mt170.notice.romwe.comIn scope2026-11-14
cn3-mt171.notice.romwe.comIn scope2026-11-14
piwik.romwe.comIn scope2026-11-14
plepv.romwe.comIn scope2026-11-14
sysmail.romwe.comIn scope2026-11-14
uk.romwe.comIn scope2026-11-14
us.romwe.comIn scope2026-11-14
www.romwe.comIn scope2026-11-14
link.shein.co.ukNot in the scope2026-11-14
m.shein.co.ukNot in the scope2026-11-14
onelink.shein.co.ukNot in the scope2026-11-14
www.shein.co.ukNot in the scope2026-11-14
analytics.shein.comIn scope2026-11-14
api.shein.comapiIn scope2026-11-14
api-gateway-central-dc.shein.comapiIn scope2026-11-14
www.api-gateway-central-dc.shein.comapiIn scope2026-11-14
api-offline.shein.comapiIn scope2026-11-14
api-sensors.shein.comapiIn scope2026-11-14
api-sensors-us.shein.comapiIn scope2026-11-14
api-service.shein.comapiIn scope2026-11-14
api-shein.shein.comapiIn scope2026-11-14
app.shein.comIn scope2026-11-14
ar.shein.comIn scope2026-11-14
arg.shein.comIn scope2026-11-14
asia.shein.comIn scope2026-11-14
tracking.news.asia.shein.comIn scope2026-11-14
tracking-us.news.asia.shein.comIn scope2026-11-14
at.shein.comIn scope2026-11-14
au.shein.comIn scope2026-11-14
auth.shein.comauthIn scope2026-11-14
bankltd-test01.shein.comtestIn scope2026-11-14
www.bankltd-test01.shein.comtestIn scope2026-11-14
br.shein.comIn scope2026-11-14
ca.shein.comIn scope2026-11-14
callback-api.shein.comapiIn scope2026-11-14
careers.shein.comIn scope2026-11-14
jobs.careers.shein.comIn scope2026-11-14
www.jobs.careers.shein.comIn scope2026-11-14
ccc-store.shein.comIn scope2026-11-14
ch.shein.comIn scope2026-11-14
tracking.news.ch.shein.comIn scope2026-11-14
cl.shein.comIn scope2026-11-14
tracking.news.cl.shein.comIn scope2026-11-14
tracking-us.news.cl.shein.comIn scope2026-11-14
co.shein.comIn scope2026-11-14
count.shein.comIn scope2026-11-14
csd.shein.comIn scope2026-11-14
de.shein.comIn scope2026-11-14
ec.shein.comIn scope2026-11-14
ecrm.shein.comIn scope2026-11-14
edm.shein.comIn scope2026-11-14
link.edm.shein.comIn scope2026-11-14
tracking.news.edmmarket.shein.comIn scope2026-11-14
tracking-us.news.edmmarket.shein.comIn scope2026-11-14
image.email.shein.comIn scope2026-11-14
link.emaila.shein.comIn scope2026-11-14
tracking.news.emailmarket.shein.comIn scope2026-11-14
tracking-us.news.emailmarket.shein.comIn scope2026-11-14
es.shein.comIn scope2026-11-14
euqs.shein.comIn scope2026-11-14
eur.shein.comIn scope2026-11-14
www.eur.shein.comIn scope2026-11-14
euvpn.shein.comIn scope2026-11-14
exchange.shein.commailIn scope2026-11-14
fr.shein.comIn scope2026-11-14
gateway.shein.comIn scope2026-11-14

241 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in