Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root
Scope
Name suggests
First seen
Text file90,563 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
local-sfis-integ.amazon.co.ukdevIn scope2026-11-14
www.local.amazon.co.ukdevIn scope2026-11-14
logistics.amazon.co.ukIn scope2026-11-14
logistics-extern-preprod.amazon.co.ukstagingIn scope2026-11-14
logistics-platform.amazon.co.ukIn scope2026-11-14
app.logistics.amazon.co.ukIn scope2026-11-14
www.ww.logistics.amazon.co.ukIn scope2026-11-14
www.logistics.amazon.co.ukIn scope2026-11-14
luna.amazon.co.ukIn scope2026-11-14
luna-staging.amazon.co.ukstagingIn scope2026-11-14
lwa.amazon.co.ukIn scope2026-11-14
m.amazon.co.ukIn scope2026-11-14
marketing.amazon.co.ukIn scope2026-11-14
marketplace.amazon.co.ukIn scope2026-11-14
marketplacedeveloper.amazon.co.ukIn scope2026-11-14
marksandspencer-isa-preview.amazon.co.ukstagingIn scope2026-11-14
marksandspencer-isa-prod.amazon.co.ukIn scope2026-11-14
marksandspencer-pca-prod.amazon.co.ukIn scope2026-11-14
mccs.amazon.co.ukIn scope2026-11-14
mccs-preview.amazon.co.ukstagingIn scope2026-11-14
membership.amazon.co.ukIn scope2026-11-14
merchant-api.amazon.co.ukapiIn scope2026-11-14
merchant-query.amazon.co.ukIn scope2026-11-14
mms.amazon.co.ukIn scope2026-11-14
motors-eu.amazon.co.ukIn scope2026-11-14
mp3.amazon.co.ukIn scope2026-11-14
mscis-v3-uk-agency-prod.amazon.co.ukIn scope2026-11-14
mscisv3prod.amazon.co.ukIn scope2026-11-14
msh.amazon.co.ukIn scope2026-11-14
msh-tablet.amazon.co.ukIn scope2026-11-14
mssubscription.amazon.co.ukIn scope2026-11-14
mt.amazon.co.ukIn scope2026-11-14
music.amazon.co.ukIn scope2026-11-14
dev.music.amazon.co.ukdevIn scope2026-11-14
eu-south-2.music.amazon.co.ukIn scope2026-11-14
gamma.music.amazon.co.ukIn scope2026-11-14
gql.music.amazon.co.ukapiIn scope2026-11-14
beta.gql.music.amazon.co.ukapi, stagingIn scope2026-11-14
integ.music.amazon.co.ukIn scope2026-11-14
local.music.amazon.co.ukdevIn scope2026-11-14
pre-prod.music.amazon.co.ukIn scope2026-11-14
myi-gui.amazon.co.ukIn scope2026-11-14
na-api-alexa.amazon.co.ukapiIn scope2026-11-14
na-api-avs-idrs.amazon.co.ukapiIn scope2026-11-14
na-bob-dispatch-gamma-alexa.amazon.co.ukIn scope2026-11-14
na-bob-dispatch-prod-alexa.amazon.co.ukIn scope2026-11-14
atssm1a.rcsntx.sbcglobal.ne.amazon.co.ukIn scope2026-11-14
nonprofit.amazon.co.ukIn scope2026-11-14
www.nonprofit.amazon.co.ukIn scope2026-11-14
nonprofitcentral.amazon.co.ukIn scope2026-11-14
www.nonprofitcentral.amazon.co.ukIn scope2026-11-14
nonprofits.amazon.co.ukIn scope2026-11-14
www.nonprofits.amazon.co.ukIn scope2026-11-14
ns4.amazon.co.ukIn scope2026-11-14
ti0017a400-0443.bb.onlineotos.amazon.co.ukIn scope2026-11-14
onsite.amazon.co.ukIn scope2026-11-14
opf-sellercentral.amazon.co.ukIn scope2026-11-14
opf-www.amazon.co.ukIn scope2026-11-14
orders.amazon.co.ukIn scope2026-11-14
org.amazon.co.ukIn scope2026-11-14
organization.amazon.co.ukIn scope2026-11-14
www.organization.amazon.co.ukIn scope2026-11-14
organizations.amazon.co.ukIn scope2026-11-14
www.organizations.amazon.co.ukIn scope2026-11-14
orgcentral.amazon.co.ukIn scope2026-11-14
www.orgcentral.amazon.co.ukIn scope2026-11-14
orgs.amazon.co.ukIn scope2026-11-14
www.orgs.amazon.co.ukIn scope2026-11-14
origin-a4k-gamma.amazon.co.ukIn scope2026-11-14
origin-dl.amazon.co.ukIn scope2026-11-14
origin-eusouth2-www.amazon.co.ukIn scope2026-11-14
origin-firetv-setup.amazon.co.ukIn scope2026-11-14
origin-freight.amazon.co.ukIn scope2026-11-14
origin-ie-logistics.amazon.co.ukIn scope2026-11-14
origin-logistics.amazon.co.ukIn scope2026-11-14
origin-marketplacedeveloper.amazon.co.ukIn scope2026-11-14
origin-msh.amazon.co.ukIn scope2026-11-14
origin-music.amazon.co.ukIn scope2026-11-14
origin-rtr-lp.amazon.co.ukIn scope2026-11-14
origin-sellercentral.amazon.co.ukIn scope2026-11-14
origin-setup-firetv.amazon.co.ukIn scope2026-11-14
origin-smile.amazon.co.ukIn scope2026-11-14
origin-supplychainconnect.amazon.co.ukIn scope2026-11-14
origin-vendorcentral.amazon.co.ukIn scope2026-11-14
origin-watch.amazon.co.ukIn scope2026-11-14
origin-www.amazon.co.ukIn scope2026-11-14
original-sharingservice.amazon.co.ukIn scope2026-11-14
p-nt-www-amazon-co-uk-kalias.amazon.co.ukIn scope2026-11-14
p-y3-www-amazon-co-uk-kalias.amazon.co.ukIn scope2026-11-14
p-yo-www-amazon-co-uk-kalias.amazon.co.ukIn scope2026-11-14
pads.amazon.co.ukIn scope2026-11-14
panel.amazon.co.ukadminIn scope2026-11-14
www.panel.amazon.co.ukadminIn scope2026-11-14
parent.amazon.co.ukIn scope2026-11-14
parents.amazon.co.ukIn scope2026-11-14
partnercentral.amazon.co.ukIn scope2026-11-14
account.partnercentral.amazon.co.ukIn scope2026-11-14
rental-account.partnercentral.amazon.co.ukIn scope2026-11-14
pay.amazon.co.ukIn scope2026-11-14
pay-preprod-v2.amazon.co.ukstagingIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated