Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| customerservice.amazon.co.jp | In scope | 2026-11-14 |
| d16gars-fe.amazon.co.jp | In scope | 2026-11-14 |
| d16gars-jp.amazon.co.jp | In scope | 2026-11-14 |
| data.amazon.co.jp | In scope | 2026-11-14 |
| data-exchange.amazon.co.jpmail | In scope | 2026-11-14 |
| dcp.amazon.co.jp | In scope | 2026-11-14 |
| ddee.amazon.co.jp | In scope | 2026-11-14 |
| ddee-preprod.amazon.co.jpstaging | In scope | 2026-11-14 |
| ddee-preprod-jp.amazon.co.jpstaging | In scope | 2026-11-14 |
| dev-business.amazon.co.jpdev | In scope | 2026-11-14 |
| digprjsurvey.amazon.co.jp | In scope | 2026-11-14 |
| dl.amazon.co.jp | In scope | 2026-11-14 |
| dl-adobe.amazon.co.jp | In scope | 2026-11-14 |
| documents.amazon.co.jp | In scope | 2026-11-14 |
| download-photos.amazon.co.jp | In scope | 2026-11-14 |
| dp-gw-na.amazon.co.jp | In scope | 2026-11-14 |
| dp-gw-preprod.amazon.co.jpstaging | In scope | 2026-11-14 |
| dpgw.amazon.co.jp | In scope | 2026-11-14 |
| harambe.dpgw.amazon.co.jp | In scope | 2026-11-14 |
| dropship.amazon.co.jp | In scope | 2026-11-14 |
| drs-web.amazon.co.jp | In scope | 2026-11-14 |
| drs-web-gamma.amazon.co.jp | In scope | 2026-11-14 |
| dtp.amazon.co.jp | In scope | 2026-11-14 |
| dyk-ext-jp.amazon.co.jp | In scope | 2026-11-14 |
| dynamicmctesting.amazon.co.jp | In scope | 2026-11-14 |
| dynamicmctesting1.amazon.co.jp | In scope | 2026-11-14 |
| dynamicmctesting2.amazon.co.jp | In scope | 2026-11-14 |
| ec1.amazon.co.jp | In scope | 2026-11-14 |
| awseb-e-m-awsebloa-1ktl12dj9gliz-1739923227.us-east-1.elb.amazon.co.jp | In scope | 2026-11-14 |
| email.amazon.co.jp | In scope | 2026-11-14 |
| endeavour.amazon.co.jp | In scope | 2026-11-14 |
| eu-api-alexa.amazon.co.jpapi | In scope | 2026-11-14 |
| eu-api-avs-idrs.amazon.co.jpapi | In scope | 2026-11-14 |
| eu-bob-dispatch-gamma-alexa.amazon.co.jp | In scope | 2026-11-14 |
| eu-bob-dispatch-prod-alexa.amazon.co.jp | In scope | 2026-11-14 |
| eu-south-2-api-alexa.amazon.co.jpapi | In scope | 2026-11-14 |
| faast.amazon.co.jp | In scope | 2026-11-14 |
| fas-permissions.amazon.co.jp | In scope | 2026-11-14 |
| fastly-www.amazon.co.jp | In scope | 2026-11-14 |
| fba.amazon.co.jp | In scope | 2026-11-14 |
| www.fba.amazon.co.jp | In scope | 2026-11-14 |
| fe-api-alexa.amazon.co.jpapi | In scope | 2026-11-14 |
| fe-api-avs-idrs.amazon.co.jpapi | In scope | 2026-11-14 |
| fe-bob-dispatch-gamma-alexa.amazon.co.jp | In scope | 2026-11-14 |
| fe-bob-dispatch-prod-alexa.amazon.co.jp | In scope | 2026-11-14 |
| file.amazon.co.jp | In scope | 2026-11-14 |
| files.amazon.co.jpdata | In scope | 2026-11-14 |
| flex.amazon.co.jp | In scope | 2026-11-14 |
| smetrics.flex.amazon.co.jp | In scope | 2026-11-14 |
| fls-fe.amazon.co.jp | In scope | 2026-11-14 |
| fls-fe-opf.amazon.co.jp | In scope | 2026-11-14 |
| fls-gamma-fe.amazon.co.jp | In scope | 2026-11-14 |
| fnes.amazon.co.jp | In scope | 2026-11-14 |
| gaming.amazon.co.jp | In scope | 2026-11-14 |
| gamma-fe-rescue-exception.amazon.co.jp | In scope | 2026-11-14 |
| guipitan.amazon.co.jp | In scope | 2026-11-14 |
| harambe.amazon.co.jp | In scope | 2026-11-14 |
| harambe-integration.amazon.co.jp | In scope | 2026-11-14 |
| help.amazon.co.jp | In scope | 2026-11-14 |
| helpforums.amazon.co.jp | In scope | 2026-11-14 |
| hh2.amazon.co.jp | In scope | 2026-11-14 |
| hub.amazon.co.jp | In scope | 2026-11-14 |
| account.hub.amazon.co.jp | In scope | 2026-11-14 |
| rental-account.hub.amazon.co.jp | In scope | 2026-11-14 |
| hubportal.amazon.co.jp | In scope | 2026-11-14 |
| account.hubportal.amazon.co.jp | In scope | 2026-11-14 |
| rental-account.hubportal.amazon.co.jp | In scope | 2026-11-14 |
| identity-browserapps.amazon.co.jpauth | In scope | 2026-11-14 |
| solutions-fe.integ.amazon.co.jp | In scope | 2026-11-14 |
| internal-campfire-fe.amazon.co.jpinternal | In scope | 2026-11-14 |
| kaiju.amazon.co.jp | In scope | 2026-11-14 |
| kdp.amazon.co.jp | In scope | 2026-11-14 |
| kdp-eu.amazon.co.jp | In scope | 2026-11-14 |
| account.kdp.amazon.co.jp | In scope | 2026-11-14 |
| kdpreports.amazon.co.jp | In scope | 2026-11-14 |
| kep.amazon.co.jp | In scope | 2026-11-14 |
| kep-eu.amazon.co.jp | In scope | 2026-11-14 |
| account.kep.amazon.co.jp | In scope | 2026-11-14 |
| key.amazon.co.jp | In scope | 2026-11-14 |
| kids.amazon.co.jp | In scope | 2026-11-14 |
| border.alpha.us-west-2.kids-bordering.amazon.co.jpstaging | In scope | 2026-11-14 |
| border.beta.us-west-2.kids-bordering.amazon.co.jpstaging | In scope | 2026-11-14 |
| gamma.us-west-2.kids-bordering.amazon.co.jp | In scope | 2026-11-14 |
| border.gamma.us-west-2.kids-bordering.amazon.co.jp | In scope | 2026-11-14 |
| prod.us-west-2.kids-bordering.amazon.co.jp | In scope | 2026-11-14 |
| border.prod.us-west-2.kids-bordering.amazon.co.jp | In scope | 2026-11-14 |
| musicmaker.kids-play.amazon.co.jp | In scope | 2026-11-14 |
| alpha-us-west-2.musicmaker.kids-play.amazon.co.jpstaging | In scope | 2026-11-14 |
| beta-us-west-2.musicmaker.kids-play.amazon.co.jpstaging | In scope | 2026-11-14 |
| gamma-us-west-2.musicmaker.kids-play.amazon.co.jp | In scope | 2026-11-14 |
| alpha.us-west-2.musicmaker.kids-play.amazon.co.jpstaging | In scope | 2026-11-14 |
| alpha.us-west-2.kids-play.amazon.co.jpstaging | In scope | 2026-11-14 |
| kindle.amazon.co.jp | In scope | 2026-11-14 |
| kindle-help.amazon.co.jp | In scope | 2026-11-14 |
| kindle-images.amazon.co.jp | In scope | 2026-11-14 |
| kindle-store-proxy-endpoint.amazon.co.jp | In scope | 2026-11-14 |
| kindlecreate.amazon.co.jp | In scope | 2026-11-14 |
| kindledirectpublishing.amazon.co.jp | In scope | 2026-11-14 |
| kindlehelp.amazon.co.jp | In scope | 2026-11-14 |
| kindlepreview.amazon.co.jp | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.