Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| smtp-web-sp.kinghost.3-93.amazon.commail | In scope | 2026-11-14 |
| smtp.4ssmtp-out-105-177.amazon.commail | In scope | 2026-11-14 |
| smtp.absystemsmtp-out-105-172.amazon.commail | In scope | 2026-11-14 |
| account-kep-mx-master.amazon.commail | In scope | 2026-11-14 |
| mx-central-1.beta.acm-certificates.amazon.commail, staging | In scope | 2026-11-14 |
| mx-central-1.acm-certificates.amazon.commail | In scope | 2026-11-14 |
| smtp.acsmtp-out-127-102.amazon.commail | In scope | 2026-11-14 |
| smtp.advp-out-174-9.amazon.commail | In scope | 2026-11-14 |
| mta-sts.mail.2365332769.cname.4294208399.mta-sts.mail.4285649032.cname.3996188134.mail.4041861xis-service-prod-iad.aea.amazon.commail | In scope | 2026-11-14 |
| excellence-mx.aka.amazon.commail | In scope | 2026-11-14 |
| fcswat-mx.aka.amazon.commail | In scope | 2026-11-14 |
| goku-ops-mx-central-1.aka.amazon.commail | In scope | 2026-11-14 |
| mail-admin-test.aka.amazon.comadmin, mail, test | In scope | 2026-11-14 |
| mx-dccd.aka.amazon.commail | In scope | 2026-11-14 |
| roshi-ops-prod-mx-central-1.aka.amazon.commail | In scope | 2026-11-14 |
| roshi-ops-website-prod-mx-central-1.aka.amazon.commail | In scope | 2026-11-14 |
| amazon-1p-lending-credito-mx-axio-beta-encryption-key.amazon.commail, staging | In scope | 2026-11-14 |
| amazon-1p-lending-credito-mx-axio-prod-encryption-key.amazon.commail | In scope | 2026-11-14 |
| amazon-smtp.amazon.commail | In scope | 2026-11-14 |
| cornerstone.mx-central-1.amazonaws.amazon.commail | In scope | 2026-11-14 |
| mail.shipping.verification.page.support.app.amazon.commail | In scope | 2026-11-14 |
| webmail.shipping.verification.page.support.app.amazon.commail | In scope | 2026-11-14 |
| autodiscover.amazon.commail | In scope | 2026-11-14 |
| autodiscover-ext.amazon.commail | In scope | 2026-11-14 |
| mx-central-1.aws-signin-testing.amazon.comauth, mail, test | In scope | 2026-11-14 |
| wildcard.mx-central-1.aws-signin-testing.amazon.comauth, mail, test | In scope | 2026-11-14 |
| mx-central-1.awsc-integ.aws.amazon.commail | In scope | 2026-11-14 |
| wildcard.mx-central-1.awsc-integ.aws.amazon.commail | In scope | 2026-11-14 |
| mx-central-1.awsc-preprod.aws.amazon.commail, staging | In scope | 2026-11-14 |
| wildcard.mx-central-1.awsc-preprod.aws.amazon.commail, staging | In scope | 2026-11-14 |
| mx-central-1.gamma.api.console.aws.amazon.comadmin, api, mail | In scope | 2026-11-14 |
| mx-central-1.api.console.aws.amazon.comadmin, api, mail | In scope | 2026-11-14 |
| mx-central-1.console.aws.amazon.comadmin, mail | In scope | 2026-11-14 |
| wildcard.mx-central-1.console.aws.amazon.comadmin, mail | In scope | 2026-11-14 |
| mx-central-1.lightsail-devo.aws.amazon.commail | In scope | 2026-11-14 |
| mx-central-1.lightsail-preprod.aws.amazon.commail, staging | In scope | 2026-11-14 |
| mx-central-1.lightsail.aws.amazon.commail | In scope | 2026-11-14 |
| mail.aws.amazon.commail | In scope | 2026-11-14 |
| kovid-mail.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| kovid-mail2.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| kovid-mx.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| owa.kovid.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| webmail.kovid.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| kovid.mail.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| mx-kovid.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| owa-kovid.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| kovid.webmail.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| webmail.aws.amazon.commail | In scope | 2026-11-14 |
| autodiscover.borg.amazon.commail | In scope | 2026-11-14 |
| exchange.borg.amazon.commail | In scope | 2026-11-14 |
| buyingportal-mx.amazon.commail | In scope | 2026-11-14 |
| corp-mail-pdx.amazon.cominternal, mail | In scope | 2026-11-14 |
| account-hub-mx-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| account-hubportal-mx-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| account-p2k-mx-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| advertisingtools-beta-mx.corp.amazon.cominternal, mail, staging | In scope | 2026-11-14 |
| advertisingtools-gamma-mx.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| advertisingtools-mx.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| athena-opsconsole-gamma-mx-central-1.aka.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| athena-opsconsole-mx-central-1.aka.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| brandregistry-marketing-mx.aka.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| ddb-mechanic-prod-mx-central-1.aka.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| ddb-mechanic-prod-mx-central-1-pod01.aka.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| ddb-mechanic-prod-mx-central-1-pod02.aka.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| brandregistry-marketing-mx.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| exchange-store.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| mail-certificate-mapper.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| mail-certificate-mapper-beta.corp.amazon.cominternal, mail, staging | In scope | 2026-11-14 |
| mail-certificate-mapper-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| mail-moderation.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| mail-moderation-beta.corp.amazon.cominternal, mail, staging | In scope | 2026-11-14 |
| mail-moderation-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| rental-account-hub-mx-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| rental-account-hubportal-mx-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| data-exchange.amazon.commail | In scope | 2026-11-14 |
| api.data-exchange.amazon.comapi, mail | In scope | 2026-11-14 |
| api-sandbox.data-exchange.amazon.comapi, mail, test | In scope | 2026-11-14 |
| mx.dev-business.amazon.comdev, mail | In scope | 2026-11-14 |
| retail-smtp-in-eu-gamma.dub.amazon.commail | In scope | 2026-11-14 |
| exchange.eas-iad.amazon.commail | In scope | 2026-11-14 |
| autodiscover.exchbeta.wm.email.amazon.commail | In scope | 2026-11-14 |
| mail.et-105-108.amazon.commail | In scope | 2026-11-14 |
| exchange.amazon.commail | In scope | 2026-11-14 |
| exchange-eas.amazon.commail | In scope | 2026-11-14 |
| exchange-eas-eu.amazon.commail | In scope | 2026-11-14 |
| exchange-eas-pek.amazon.commail | In scope | 2026-11-14 |
| kdh-home-sharded-mx-central-1-ob-wan.iad.amazon.commail | In scope | 2026-11-14 |
| retail-smtp-in-na-gamma.iad.amazon.commail | In scope | 2026-11-14 |
| aat-mx-beta-ca.integ.amazon.commail, staging | In scope | 2026-11-14 |
| account-hub-mx.integ.amazon.commail | In scope | 2026-11-14 |
| account-hubportal-mx.integ.amazon.commail | In scope | 2026-11-14 |
| account-kep-mx.integ.amazon.commail | In scope | 2026-11-14 |
| account-kep-mx-alpha.integ.amazon.commail, staging | In scope | 2026-11-14 |
| account-p2k-mx.integ.amazon.commail | In scope | 2026-11-14 |
| billing-kep-mx.integ.amazon.commail | In scope | 2026-11-14 |
| billing-p2k-mx.integ.amazon.commail | In scope | 2026-11-14 |
| logistics-mx.integ.amazon.commail | In scope | 2026-11-14 |
| mx-assoc.integ.amazon.commail | In scope | 2026-11-14 |
| rainier-mx.integ.amazon.commail | In scope | 2026-11-14 |
| rental-account-hub-mx.integ.amazon.commail | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.