Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| kindlepreviewservice.amazon.co.jp | In scope | 2026-11-14 |
| kindlestore-sha-proxy.amazon.co.jp | In scope | 2026-11-14 |
| kindlesupport.amazon.co.jp | In scope | 2026-11-14 |
| kokoku.amazon.co.jp | In scope | 2026-11-14 |
| kuato.amazon.co.jp | In scope | 2026-11-14 |
| logistics.amazon.co.jp | In scope | 2026-11-14 |
| logistics-extern-preprod.amazon.co.jpstaging | In scope | 2026-11-14 |
| logistics-platform.amazon.co.jp | In scope | 2026-11-14 |
| www.logistics.amazon.co.jp | In scope | 2026-11-14 |
| luna.amazon.co.jp | In scope | 2026-11-14 |
| lwa.amazon.co.jp | In scope | 2026-11-14 |
| m.amazon.co.jp | In scope | 2026-11-14 |
| manga.amazon.co.jp | In scope | 2026-11-14 |
| marketing.amazon.co.jp | In scope | 2026-11-14 |
| marketplace.amazon.co.jp | In scope | 2026-11-14 |
| marketplacedeveloper.amazon.co.jp | In scope | 2026-11-14 |
| merchant-api.amazon.co.jpapi | In scope | 2026-11-14 |
| merchant-query.amazon.co.jp | In scope | 2026-11-14 |
| mlis.amazon.co.jp | In scope | 2026-11-14 |
| mms.amazon.co.jp | In scope | 2026-11-14 |
| mp3.amazon.co.jp | In scope | 2026-11-14 |
| mscis-v3-jp-agency-prod.amazon.co.jp | In scope | 2026-11-14 |
| mscisv3prod.amazon.co.jp | In scope | 2026-11-14 |
| msh.amazon.co.jp | In scope | 2026-11-14 |
| msh-tablet.amazon.co.jp | In scope | 2026-11-14 |
| mssubscription.amazon.co.jp | In scope | 2026-11-14 |
| mt.amazon.co.jp | In scope | 2026-11-14 |
| mt-temp.amazon.co.jp | In scope | 2026-11-14 |
| music.amazon.co.jp | In scope | 2026-11-14 |
| music-xray-service.amazon.co.jp | In scope | 2026-11-14 |
| dev.music.amazon.co.jpdev | In scope | 2026-11-14 |
| gamma.music.amazon.co.jp | In scope | 2026-11-14 |
| gql.music.amazon.co.jpapi | In scope | 2026-11-14 |
| beta.gql.music.amazon.co.jpapi, staging | In scope | 2026-11-14 |
| integ.music.amazon.co.jp | In scope | 2026-11-14 |
| local.music.amazon.co.jpdev | In scope | 2026-11-14 |
| pre-prod.music.amazon.co.jp | In scope | 2026-11-14 |
| musiccentral.amazon.co.jp | In scope | 2026-11-14 |
| myaccount.amazon.co.jp | In scope | 2026-11-14 |
| myi-gui.amazon.co.jp | In scope | 2026-11-14 |
| na-api-alexa.amazon.co.jpapi | In scope | 2026-11-14 |
| na-api-avs-idrs.amazon.co.jpapi | In scope | 2026-11-14 |
| na-bob-dispatch-gamma-alexa.amazon.co.jp | In scope | 2026-11-14 |
| na-bob-dispatch-prod-alexa.amazon.co.jp | In scope | 2026-11-14 |
| opf-sellercentral.amazon.co.jp | In scope | 2026-11-14 |
| opf-www.amazon.co.jp | In scope | 2026-11-14 |
| orders.amazon.co.jp | In scope | 2026-11-14 |
| origin.amazon.co.jp | In scope | 2026-11-14 |
| origin-abintegrations.amazon.co.jp | In scope | 2026-11-14 |
| origin-accesspoints-api.amazon.co.jpapi | In scope | 2026-11-14 |
| origin-alexa.amazon.co.jp | In scope | 2026-11-14 |
| origin-amztrack.amazon.co.jp | In scope | 2026-11-14 |
| origin-chat.amazon.co.jp | In scope | 2026-11-14 |
| origin-completion.amazon.co.jp | In scope | 2026-11-14 |
| origin-dl.amazon.co.jp | In scope | 2026-11-14 |
| origin-logistics.amazon.co.jp | In scope | 2026-11-14 |
| origin-marketplacedeveloper.amazon.co.jp | In scope | 2026-11-14 |
| origin-music.amazon.co.jp | In scope | 2026-11-14 |
| origin-pay.amazon.co.jp | In scope | 2026-11-14 |
| origin-read.amazon.co.jp | In scope | 2026-11-14 |
| origin-relay.amazon.co.jp | In scope | 2026-11-14 |
| origin-rtr-lp.amazon.co.jp | In scope | 2026-11-14 |
| origin-sellercentral.amazon.co.jp | In scope | 2026-11-14 |
| origin-sellerflex.amazon.co.jp | In scope | 2026-11-14 |
| origin-setup-firetv.amazon.co.jp | In scope | 2026-11-14 |
| origin-supplychainconnect.amazon.co.jp | In scope | 2026-11-14 |
| origin-transmitter.amazon.co.jp | In scope | 2026-11-14 |
| origin-transmitter-csm.amazon.co.jp | In scope | 2026-11-14 |
| origin-transmitter-csmv1.amazon.co.jp | In scope | 2026-11-14 |
| origin-vendorcentral.amazon.co.jp | In scope | 2026-11-14 |
| origin-watch.amazon.co.jp | In scope | 2026-11-14 |
| origin-www.amazon.co.jp | In scope | 2026-11-14 |
| origin1.amazon.co.jp | In scope | 2026-11-14 |
| origin2.amazon.co.jp | In scope | 2026-11-14 |
| origin2-www.amazon.co.jp | In scope | 2026-11-14 |
| origin4.amazon.co.jp | In scope | 2026-11-14 |
| p-nt-www-amazon-co-jp-kalias.amazon.co.jp | In scope | 2026-11-14 |
| p-y3-www-amazon-co-jp-kalias.amazon.co.jp | In scope | 2026-11-14 |
| p-yo-www-amazon-co-jp-kalias.amazon.co.jp | In scope | 2026-11-14 |
| pact-proxy.amazon.co.jp | In scope | 2026-11-14 |
| panel.amazon.co.jpadmin | In scope | 2026-11-14 |
| www.panel.amazon.co.jpadmin | In scope | 2026-11-14 |
| parents.amazon.co.jp | In scope | 2026-11-14 |
| partnercentral.amazon.co.jp | In scope | 2026-11-14 |
| pay.amazon.co.jp | In scope | 2026-11-14 |
| pay-preprod-v2.amazon.co.jpstaging | In scope | 2026-11-14 |
| pay-v2.amazon.co.jp | In scope | 2026-11-14 |
| payment-eu.amazon.co.jp | In scope | 2026-11-14 |
| payments.amazon.co.jp | In scope | 2026-11-14 |
| payments-na.amazon.co.jp | In scope | 2026-11-14 |
| payments-sandbox.amazon.co.jptest | In scope | 2026-11-14 |
| payments-us.amazon.co.jp | In scope | 2026-11-14 |
| payments-v2.amazon.co.jp | In scope | 2026-11-14 |
| pharmacy.amazon.co.jp | In scope | 2026-11-14 |
| photos.amazon.co.jp | In scope | 2026-11-14 |
| photosandvideos.amazon.co.jp | In scope | 2026-11-14 |
| pinnacle-api.amazon.co.jpapi | In scope | 2026-11-14 |
| ddee.preprod.amazon.co.jpstaging | In scope | 2026-11-14 |
| prime.amazon.co.jp | In scope | 2026-11-14 |
| primeday.amazon.co.jp | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.