Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root
Scope
Name suggests
First seen
Text file90,563 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
domain.amazon.co.ukIn scope2026-11-14
download-photos.amazon.co.ukIn scope2026-11-14
dp-gw-na.amazon.co.ukIn scope2026-11-14
dp-gw-preprod.amazon.co.ukstagingIn scope2026-11-14
dropship.amazon.co.ukIn scope2026-11-14
drs-web-eu.amazon.co.ukIn scope2026-11-14
drs-web-gamma.amazon.co.ukIn scope2026-11-14
dtp.amazon.co.ukIn scope2026-11-14
dvd.amazon.co.ukIn scope2026-11-14
dynamicmctesting4.amazon.co.ukIn scope2026-11-14
ebookers.amazon.co.ukIn scope2026-11-14
www.ebookers.amazon.co.ukIn scope2026-11-14
ecs-wonderbod.amazon.co.ukIn scope2026-11-14
email.amazon.co.ukIn scope2026-11-14
endeavour.amazon.co.ukIn scope2026-11-14
eu-api-alexa.amazon.co.ukapiIn scope2026-11-14
eu-api-avs-idrs.amazon.co.ukapiIn scope2026-11-14
eu-bob-dispatch-gamma-alexa.amazon.co.ukIn scope2026-11-14
eu-bob-dispatch-prod-alexa.amazon.co.ukIn scope2026-11-14
eu-south-2-api-alexa.amazon.co.ukapiIn scope2026-11-14
expedia.amazon.co.ukIn scope2026-11-14
www.expedia.amazon.co.ukIn scope2026-11-14
faast.amazon.co.ukIn scope2026-11-14
fas-permissions.amazon.co.ukIn scope2026-11-14
fastly-www.amazon.co.ukIn scope2026-11-14
fba.amazon.co.ukIn scope2026-11-14
www.fba.amazon.co.ukIn scope2026-11-14
fe-api-alexa.amazon.co.ukapiIn scope2026-11-14
fe-api-avs-idrs.amazon.co.ukapiIn scope2026-11-14
fe-bob-dispatch-gamma-alexa.amazon.co.ukIn scope2026-11-14
fe-bob-dispatch-prod-alexa.amazon.co.ukIn scope2026-11-14
files.amazon.co.ukdataIn scope2026-11-14
fireforkids.amazon.co.ukIn scope2026-11-14
firetv-setup.amazon.co.ukIn scope2026-11-14
flex.amazon.co.ukIn scope2026-11-14
flex-telephony-eu.amazon.co.ukIn scope2026-11-14
smetrics.flex.amazon.co.ukIn scope2026-11-14
fls-eu.amazon.co.ukIn scope2026-11-14
fls-eu-opf.amazon.co.ukIn scope2026-11-14
fnes.amazon.co.ukIn scope2026-11-14
freight.amazon.co.ukIn scope2026-11-14
click.freight.amazon.co.ukIn scope2026-11-14
ship.freight.amazon.co.ukIn scope2026-11-14
freightpartner.amazon.co.ukIn scope2026-11-14
gaming.amazon.co.ukIn scope2026-11-14
glimpse-feed.amazon.co.ukIn scope2026-11-14
glimpse-publish.amazon.co.ukIn scope2026-11-14
help.amazon.co.ukIn scope2026-11-14
hh2.amazon.co.ukIn scope2026-11-14
hh2-beta.amazon.co.ukstagingIn scope2026-11-14
hh2-gamma.amazon.co.ukIn scope2026-11-14
hh2-sha-proxy.amazon.co.ukIn scope2026-11-14
hh2-sha-proxy-preprod.amazon.co.ukstagingIn scope2026-11-14
hub.amazon.co.ukIn scope2026-11-14
hubportal.amazon.co.ukIn scope2026-11-14
account.hubportal.amazon.co.ukIn scope2026-11-14
rental-account.hubportal.amazon.co.ukIn scope2026-11-14
identity-browserapps.amazon.co.ukauthIn scope2026-11-14
idenwserapps.amazon.co.ukIn scope2026-11-14
ie-logistics.amazon.co.ukIn scope2026-11-14
ie-logistics-extern-preprod.amazon.co.ukstagingIn scope2026-11-14
www.ie-logistics.amazon.co.ukIn scope2026-11-14
internal-campfire-eu.amazon.co.ukinternalIn scope2026-11-14
isapca.amazon.co.ukIn scope2026-11-14
jobs.amazon.co.ukIn scope2026-11-14
kathak.amazon.co.ukIn scope2026-11-14
kcw.amazon.co.ukIn scope2026-11-14
kcw-preprod.amazon.co.ukstagingIn scope2026-11-14
kdp.amazon.co.ukIn scope2026-11-14
kep.amazon.co.ukIn scope2026-11-14
kep-eu.amazon.co.ukIn scope2026-11-14
account.kep.amazon.co.ukIn scope2026-11-14
key.amazon.co.ukIn scope2026-11-14
kids.amazon.co.ukIn scope2026-11-14
beta.eu-west-1.kids-bordering.amazon.co.ukstagingIn scope2026-11-14
border.beta.eu-west-1.kids-bordering.amazon.co.ukstagingIn scope2026-11-14
border.gamma.eu-west-1.kids-bordering.amazon.co.ukIn scope2026-11-14
border.prod.eu-west-1.kids-bordering.amazon.co.ukIn scope2026-11-14
alpha.eu-west-1.kids-play.amazon.co.ukstagingIn scope2026-11-14
musicmaker.kids-play.amazon.co.ukIn scope2026-11-14
alpha-eu-west-1.musicmaker.kids-play.amazon.co.ukstagingIn scope2026-11-14
beta-eu-west-1.musicmaker.kids-play.amazon.co.ukstagingIn scope2026-11-14
alpha.eu-west-1.musicmaker.kids-play.amazon.co.ukstagingIn scope2026-11-14
gamma-eu-west-1.musicmaker.kids-play.amazon.co.ukIn scope2026-11-14
kindle.amazon.co.ukIn scope2026-11-14
kindle-g7g.amazon.co.ukIn scope2026-11-14
kindle-help.amazon.co.ukIn scope2026-11-14
kindle-store-proxy-endpoint.amazon.co.ukIn scope2026-11-14
kindledirectpublishing.amazon.co.ukIn scope2026-11-14
kindlehelp.amazon.co.ukIn scope2026-11-14
kindlestore-g7g.amazon.co.ukIn scope2026-11-14
kindlestore-sha-proxy.amazon.co.ukIn scope2026-11-14
kindlesupport.amazon.co.ukIn scope2026-11-14
klite-services.amazon.co.ukIn scope2026-11-14
kuato.amazon.co.ukIn scope2026-11-14
layla.amazon.co.ukIn scope2026-11-14
leadsmanager.amazon.co.ukIn scope2026-11-14
local.amazon.co.ukdevIn scope2026-11-14
local-mobile.amazon.co.ukdevIn scope2026-11-14
local-sfis.amazon.co.ukdevIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated