Bug bounty program
SHEIN
- Platform
- HackerOne
- Bounties
- Pays
- Assets in scope
- 7
- Disclosed reports
- 0
- Subdomains
- 267
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains267
| Name | Scope | First seen |
|---|---|---|
| analytics.romwe.com | In scope | 2026-11-14 |
| android.romwe.com | In scope | 2026-11-14 |
| api-romwe.romwe.comapi | In scope | 2026-11-14 |
| api-service.romwe.comapi | In scope | 2026-11-14 |
| ar.romwe.com | In scope | 2026-11-14 |
| au.romwe.com | In scope | 2026-11-14 |
| ca.romwe.com | In scope | 2026-11-14 |
| setup.icloud.comfr.romwe.com | In scope | 2026-11-14 |
| count.romwe.com | In scope | 2026-11-14 |
| de.romwe.com | In scope | 2026-11-14 |
| image.email.romwe.com | In scope | 2026-11-14 |
| link.emaila.romwe.com | In scope | 2026-11-14 |
| erp.romwe.com | In scope | 2026-11-14 |
| es.romwe.com | In scope | 2026-11-14 |
| fr.romwe.com | In scope | 2026-11-14 |
| fun.romwe.com | In scope | 2026-11-14 |
| help.romwe.com | In scope | 2026-11-14 |
| im-api-chat-eur.romwe.comapi | In scope | 2026-11-14 |
| im-gateway-chat-us.romwe.com | In scope | 2026-11-14 |
| image.romwe.com | In scope | 2026-11-14 |
| img.romwe.com | In scope | 2026-11-14 |
| it.romwe.com | In scope | 2026-11-14 |
| link.romwe.com | In scope | 2026-11-14 |
| link-edm-ca.romwe.com | In scope | 2026-11-14 |
| link-edm-mx.romwe.commail | In scope | 2026-11-14 |
| link-us.romwe.com | In scope | 2026-11-14 |
| link2-edm-ca.romwe.com | In scope | 2026-11-14 |
| link2-edm-mx.romwe.commail | In scope | 2026-11-14 |
| m.romwe.com | In scope | 2026-11-14 |
| mx.romwe.commail | In scope | 2026-11-14 |
| cn3-mt170.notice.romwe.com | In scope | 2026-11-14 |
| cn3-mt171.notice.romwe.com | In scope | 2026-11-14 |
| piwik.romwe.com | In scope | 2026-11-14 |
| plepv.romwe.com | In scope | 2026-11-14 |
| sysmail.romwe.com | In scope | 2026-11-14 |
| uk.romwe.com | In scope | 2026-11-14 |
| us.romwe.com | In scope | 2026-11-14 |
| www.romwe.com | In scope | 2026-11-14 |
241 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.