Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| primenow.amazon.co.jp | In scope | 2026-11-14 |
| ssofaast.private.amazon.co.jpinternal | In scope | 2026-11-14 |
| puptrack-fe.amazon.co.jp | In scope | 2026-11-14 |
| r.amazon.co.jp | In scope | 2026-11-14 |
| r-preprod.amazon.co.jpstaging | In scope | 2026-11-14 |
| ramp-api.amazon.co.jpapi | In scope | 2026-11-14 |
| rampapi.amazon.co.jp | In scope | 2026-11-14 |
| rcm.amazon.co.jp | In scope | 2026-11-14 |
| rcm-jp.amazon.co.jp | In scope | 2026-11-14 |
| read.amazon.co.jp | In scope | 2026-11-14 |
| reinstate.amazon.co.jp | In scope | 2026-11-14 |
| relay.amazon.co.jp | In scope | 2026-11-14 |
| retail-smtp-in-fe.amazon.co.jpmail | In scope | 2026-11-14 |
| rtn.amazon.co.jp | In scope | 2026-11-14 |
| rtr-lp.amazon.co.jp | In scope | 2026-11-14 |
| s1.amazon.co.jp | In scope | 2026-11-14 |
| sandbox.amazon.co.jptest | In scope | 2026-11-14 |
| api.sandbox.amazon.co.jpapi, test | In scope | 2026-11-14 |
| sdu.amazon.co.jp | In scope | 2026-11-14 |
| se-cde-ta-g7g.amazon.co.jp | In scope | 2026-11-14 |
| secure.amazon.co.jp | In scope | 2026-11-14 |
| secure-fields.amazon.co.jp | In scope | 2026-11-14 |
| sell.amazon.co.jp | In scope | 2026-11-14 |
| seller-central-pilot.amazon.co.jp | In scope | 2026-11-14 |
| sellercentral.amazon.co.jp | In scope | 2026-11-14 |
| sellercentral-akamai.amazon.co.jp | In scope | 2026-11-14 |
| sellercentral-jp1.amazon.co.jp | In scope | 2026-11-14 |
| sellercentral-jp2.amazon.co.jp | In scope | 2026-11-14 |
| sellercentral-jp3.amazon.co.jp | In scope | 2026-11-14 |
| rr19.sellercentral.amazon.co.jp | In scope | 2026-11-14 |
| rr3.sellercentral.amazon.co.jp | In scope | 2026-11-14 |
| rr31.sellercentral.amazon.co.jp | In scope | 2026-11-14 |
| sellerflex.amazon.co.jp | In scope | 2026-11-14 |
| services.amazon.co.jp | In scope | 2026-11-14 |
| sesblog.amazon.co.jp | In scope | 2026-11-14 |
| setup-firetv.amazon.co.jp | In scope | 2026-11-14 |
| shigoto.amazon.co.jp | In scope | 2026-11-14 |
| alb.shigoto.amazon.co.jp | In scope | 2026-11-14 |
| alb-v2.shigoto.amazon.co.jp | In scope | 2026-11-14 |
| wildcard.shigoto.amazon.co.jp | In scope | 2026-11-14 |
| shm.amazon.co.jp | In scope | 2026-11-14 |
| sierra-discovery.amazon.co.jp | In scope | 2026-11-14 |
| signin.amazon.co.jpauth | In scope | 2026-11-14 |
| skills-store.amazon.co.jp | In scope | 2026-11-14 |
| skills-store-eu.amazon.co.jp | In scope | 2026-11-14 |
| skills-store-fe.amazon.co.jp | In scope | 2026-11-14 |
| skills-store-na.amazon.co.jp | In scope | 2026-11-14 |
| smile.amazon.co.jp | In scope | 2026-11-14 |
| smocentral.amazon.co.jp | In scope | 2026-11-14 |
| snowcentral.amazon.co.jp | In scope | 2026-11-14 |
| soap.amazon.co.jpapi | In scope | 2026-11-14 |
| solutions.amazon.co.jp | In scope | 2026-11-14 |
| sp.amazon.co.jp | In scope | 2026-11-14 |
| sponsored-ads.amazon.co.jp | In scope | 2026-11-14 |
| ssofaast.amazon.co.jp | In scope | 2026-11-14 |
| ssofaast-aftx.amazon.co.jp | In scope | 2026-11-14 |
| ssofaast-wms.amazon.co.jp | In scope | 2026-11-14 |
| stage-business.amazon.co.jpstaging | In scope | 2026-11-14 |
| static.amazon.co.jp | In scope | 2026-11-14 |
| storyplayer-photos.amazon.co.jp | In scope | 2026-11-14 |
| storyplayerbeta-photos.amazon.co.jp | In scope | 2026-11-14 |
| supplychain.amazon.co.jp | In scope | 2026-11-14 |
| supplychainconnect.amazon.co.jp | In scope | 2026-11-14 |
| support.amazon.co.jp | In scope | 2026-11-14 |
| t1-completion.amazon.co.jp | In scope | 2026-11-14 |
| terrier.amazon.co.jp | In scope | 2026-11-14 |
| test-www.amazon.co.jptest | In scope | 2026-11-14 |
| thumbnails-photos.amazon.co.jp | In scope | 2026-11-14 |
| transient.amazon.co.jp | In scope | 2026-11-14 |
| appx.transient.amazon.co.jp | In scope | 2026-11-14 |
| transmitter.amazon.co.jp | In scope | 2026-11-14 |
| transmitter-csm.amazon.co.jp | In scope | 2026-11-14 |
| transmitter-csmv1.amazon.co.jp | In scope | 2026-11-14 |
| transportation.amazon.co.jp | In scope | 2026-11-14 |
| twitch.amazon.co.jp | In scope | 2026-11-14 |
| uk.amazon.co.jp | In scope | 2026-11-14 |
| unagi.amazon.co.jp | In scope | 2026-11-14 |
| unagi-fe.amazon.co.jp | In scope | 2026-11-14 |
| upload-photos.amazon.co.jpdata | In scope | 2026-11-14 |
| cnt-03.upload-photos.amazon.co.jpdata | In scope | 2026-11-14 |
| vdp.amazon.co.jp | In scope | 2026-11-14 |
| vendorcentral.amazon.co.jp | In scope | 2026-11-14 |
| vendorexpress.amazon.co.jp | In scope | 2026-11-14 |
| vendornet.amazon.co.jp | In scope | 2026-11-14 |
| vibhavdnstesting102.amazon.co.jp | In scope | 2026-11-14 |
| video.amazon.co.jp | In scope | 2026-11-14 |
| videocentral.amazon.co.jp | In scope | 2026-11-14 |
| account.videocentral.amazon.co.jp | In scope | 2026-11-14 |
| vcaccount.videocentral.amazon.co.jp | In scope | 2026-11-14 |
| videochat.amazon.co.jp | In scope | 2026-11-14 |
| videochatdemo.amazon.co.jp | In scope | 2026-11-14 |
| videodirect.amazon.co.jp | In scope | 2026-11-14 |
| account.videodirect.amazon.co.jp | In scope | 2026-11-14 |
| www.videodirect.amazon.co.jp | In scope | 2026-11-14 |
| videodirectpublishing.amazon.co.jp | In scope | 2026-11-14 |
| videodistribution.amazon.co.jp | In scope | 2026-11-14 |
| videopublishing.amazon.co.jp | In scope | 2026-11-14 |
| videos.amazon.co.jp | In scope | 2026-11-14 |
| vine.amazon.co.jp | In scope | 2026-11-14 |
| watch.amazon.co.jp | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.