Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root:amazon.com.mx
Scope
Name suggests
First seen
Text fileClear filters218 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
freetime.amazon.com.mxIn scope2026-11-14
gaming.amazon.com.mxIn scope2026-11-14
gaming-api.amazon.com.mxapiIn scope2026-11-14
guipitan.amazon.com.mxIn scope2026-11-14
logistik-lernen.hamburgtics.amazon.com.mxIn scope2026-11-14
horizonte-browserapps.amazon.com.mxIn scope2026-11-14
hub.amazon.com.mxIn scope2026-11-14
account.hub.amazon.com.mxIn scope2026-11-14
rental-account.hub.amazon.com.mxIn scope2026-11-14
hubportal.amazon.com.mxIn scope2026-11-14
account.hubportal.amazon.com.mxIn scope2026-11-14
rental-account.hubportal.amazon.com.mxIn scope2026-11-14
identity-browserapps.amazon.com.mxauthIn scope2026-11-14
jwo.amazon.com.mxIn scope2026-11-14
kdp.amazon.com.mxIn scope2026-11-14
kep.amazon.com.mxIn scope2026-11-14
kep-eu.amazon.com.mxIn scope2026-11-14
account.kep.amazon.com.mxIn scope2026-11-14
border.beta.us-east-1.kids-bordering.amazon.com.mxstagingIn scope2026-11-14
border.gamma.us-east-1.kids-bordering.amazon.com.mxIn scope2026-11-14
border.prod.us-east-1.kids-bordering.amazon.com.mxIn scope2026-11-14
kindle-store-proxy-endpoint.amazon.com.mxIn scope2026-11-14
kindledirectpublishing.amazon.com.mxIn scope2026-11-14
kindlestore-sha-proxy.amazon.com.mxIn scope2026-11-14
leer.amazon.com.mxIn scope2026-11-14
logistics.amazon.com.mxIn scope2026-11-14
logistics-extern-preprod.amazon.com.mxstagingIn scope2026-11-14
app.logistics.amazon.com.mxIn scope2026-11-14
www.logistics.amazon.com.mxIn scope2026-11-14
luna.amazon.com.mxIn scope2026-11-14
luna-staging.amazon.com.mxstagingIn scope2026-11-14
lwa.amazon.com.mxIn scope2026-11-14
msh.amazon.com.mxIn scope2026-11-14
msh-tablet.amazon.com.mxIn scope2026-11-14
mt.amazon.com.mxIn scope2026-11-14
music.amazon.com.mxIn scope2026-11-14
dev.music.amazon.com.mxdevIn scope2026-11-14
gamma.music.amazon.com.mxIn scope2026-11-14
gql.music.amazon.com.mxapiIn scope2026-11-14
beta.gql.music.amazon.com.mxapi, stagingIn scope2026-11-14
egitelma.beta.gql.music.amazon.com.mxapi, stagingIn scope2026-11-14
sophap.beta.gql.music.amazon.com.mxapi, stagingIn scope2026-11-14
integ.music.amazon.com.mxIn scope2026-11-14
local.music.amazon.com.mxdevIn scope2026-11-14
pre-prod.music.amazon.com.mxIn scope2026-11-14
na-api-alexa.amazon.com.mxapiIn scope2026-11-14
na-api-avs-idrs.amazon.com.mxapiIn scope2026-11-14
na-bob-dispatch-gamma-alexa.amazon.com.mxIn scope2026-11-14
na-bob-dispatch-prod-alexa.amazon.com.mxIn scope2026-11-14
onsite.amazon.com.mxIn scope2026-11-14
opf-sellercentral.amazon.com.mxIn scope2026-11-14
opf-www.amazon.com.mxIn scope2026-11-14
orders.amazon.com.mxIn scope2026-11-14
origin-dl.amazon.com.mxIn scope2026-11-14
origin-leer.amazon.com.mxIn scope2026-11-14
origin-logistics.amazon.com.mxIn scope2026-11-14
origin-logistics-extern-preprod.amazon.com.mxstagingIn scope2026-11-14
origin-music.amazon.com.mxIn scope2026-11-14
origin-sellercentral.amazon.com.mxIn scope2026-11-14
origin-setup-firetv.amazon.com.mxIn scope2026-11-14
origin-supplychainconnect.amazon.com.mxIn scope2026-11-14
origin-www.amazon.com.mxIn scope2026-11-14
p-nt-www-amazon-com-mx-kalias.amazon.com.mxmailIn scope2026-11-14
p-y3-www-amazon-com-mx-kalias.amazon.com.mxmailIn scope2026-11-14
p-yo-www-amazon-com-mx-kalias.amazon.com.mxmailIn scope2026-11-14
panel.amazon.com.mxadminIn scope2026-11-14
www.panel.amazon.com.mxadminIn scope2026-11-14
parent.amazon.com.mxIn scope2026-11-14
parents.amazon.com.mxIn scope2026-11-14
partnercentral.amazon.com.mxIn scope2026-11-14
pinnacle-api.amazon.com.mxapiIn scope2026-11-14
product-browserapps.amazon.com.mxIn scope2026-11-14
ramp-api.amazon.com.mxapiIn scope2026-11-14
rampapi.amazon.com.mxIn scope2026-11-14
read.amazon.com.mxIn scope2026-11-14
reinstate.amazon.com.mxIn scope2026-11-14
relay.amazon.com.mxIn scope2026-11-14
renewed.amazon.com.mxIn scope2026-11-14
reporter-browserapps.amazon.com.mxIn scope2026-11-14
sdu.amazon.com.mxIn scope2026-11-14
se-cde-ta-g7g.amazon.com.mxIn scope2026-11-14
sell.amazon.com.mxIn scope2026-11-14
sellercentral.amazon.com.mxIn scope2026-11-14
sellerflex.amazon.com.mxIn scope2026-11-14
services.amazon.com.mxIn scope2026-11-14
setup-firetv.amazon.com.mxIn scope2026-11-14
shm.amazon.com.mxIn scope2026-11-14
skills-store.amazon.com.mxIn scope2026-11-14
skills-store-eu.amazon.com.mxIn scope2026-11-14
skills-store-fe.amazon.com.mxIn scope2026-11-14
skills-store-na.amazon.com.mxIn scope2026-11-14
smarthub.amazon.com.mxIn scope2026-11-14
sponsored-ads.amazon.com.mxIn scope2026-11-14
storage-browserapps.amazon.com.mxIn scope2026-11-14
supplierconnect.amazon.com.mxIn scope2026-11-14
supply.amazon.com.mxIn scope2026-11-14
supplychain.amazon.com.mxIn scope2026-11-14
supplychainconnect.amazon.com.mxIn scope2026-11-14
terrier.amazon.com.mxIn scope2026-11-14
test-www.amazon.com.mxtestIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated