Skip to content

Bug bounty program

Platform
HackerOne
Bounties
Pays
Assets in scope
7
Disclosed reports
0
Subdomains
267

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains267

Subdomains of SHEIN
NameScopeFirst seen
analytics.romwe.comIn scope2026-11-14
android.romwe.comIn scope2026-11-14
api-romwe.romwe.comapiIn scope2026-11-14
api-service.romwe.comapiIn scope2026-11-14
ar.romwe.comIn scope2026-11-14
au.romwe.comIn scope2026-11-14
ca.romwe.comIn scope2026-11-14
setup.icloud.comfr.romwe.comIn scope2026-11-14
count.romwe.comIn scope2026-11-14
de.romwe.comIn scope2026-11-14
image.email.romwe.comIn scope2026-11-14
link.emaila.romwe.comIn scope2026-11-14
erp.romwe.comIn scope2026-11-14
es.romwe.comIn scope2026-11-14
fr.romwe.comIn scope2026-11-14
fun.romwe.comIn scope2026-11-14
help.romwe.comIn scope2026-11-14
im-api-chat-eur.romwe.comapiIn scope2026-11-14
im-gateway-chat-us.romwe.comIn scope2026-11-14
image.romwe.comIn scope2026-11-14
img.romwe.comIn scope2026-11-14
it.romwe.comIn scope2026-11-14
link.romwe.comIn scope2026-11-14
link-edm-ca.romwe.comIn scope2026-11-14
link-edm-mx.romwe.commailIn scope2026-11-14
link-us.romwe.comIn scope2026-11-14
link2-edm-ca.romwe.comIn scope2026-11-14
link2-edm-mx.romwe.commailIn scope2026-11-14
m.romwe.comIn scope2026-11-14
mx.romwe.commailIn scope2026-11-14
cn3-mt170.notice.romwe.comIn scope2026-11-14
cn3-mt171.notice.romwe.comIn scope2026-11-14
piwik.romwe.comIn scope2026-11-14
plepv.romwe.comIn scope2026-11-14
sysmail.romwe.comIn scope2026-11-14
uk.romwe.comIn scope2026-11-14
us.romwe.comIn scope2026-11-14
www.romwe.comIn scope2026-11-14

241 names are covered by the program's own scope; 0 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-14.

Updated AboutDevelopersSign in