Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root
Scope
Name suggests
First seen
Text file90,563 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
eu-bob-dispatch-gamma-alexa.amazon.caIn scope2026-11-14
eu-bob-dispatch-prod-alexa.amazon.caIn scope2026-11-14
eu-south-2-api-alexa.amazon.caapiIn scope2026-11-14
extranet.amazon.cainternalIn scope2026-11-14
fastly-www.amazon.caIn scope2026-11-14
fe-api-alexa.amazon.caapiIn scope2026-11-14
fe-api-avs-idrs.amazon.caapiIn scope2026-11-14
fe-bob-dispatch-gamma-alexa.amazon.caIn scope2026-11-14
fe-bob-dispatch-prod-alexa.amazon.caIn scope2026-11-14
flex.amazon.caIn scope2026-11-14
smetrics.flex.amazon.caIn scope2026-11-14
fls-gamma-na.amazon.caIn scope2026-11-14
fls-na.amazon.caIn scope2026-11-14
fls-na-opf.amazon.caIn scope2026-11-14
frontier-aero-tsting.amazon.caIn scope2026-11-14
gaming.amazon.caIn scope2026-11-14
gaming-api.amazon.caapiIn scope2026-11-14
guipitan.amazon.caIn scope2026-11-14
help.amazon.caIn scope2026-11-14
help-forums.amazon.caIn scope2026-11-14
helpforums.amazon.caIn scope2026-11-14
hiring.amazon.caIn scope2026-11-14
164.3a0674792.hiring.amazon.caIn scope2026-11-14
alb.hiring.amazon.caIn scope2026-11-14
alb-v2.hiring.amazon.caIn scope2026-11-14
wildcard.hiring.amazon.caIn scope2026-11-14
hub.amazon.caIn scope2026-11-14
hubportal.amazon.caIn scope2026-11-14
rental-account.hubportal.amazon.caIn scope2026-11-14
identity-browserapps.amazon.caauthIn scope2026-11-14
img.amazon.caIn scope2026-11-14
jwo.amazon.caIn scope2026-11-14
kdp.amazon.caIn scope2026-11-14
kep.amazon.caIn scope2026-11-14
kep-eu.amazon.caIn scope2026-11-14
account.kep.amazon.caIn scope2026-11-14
key.amazon.caIn scope2026-11-14
kids.amazon.caIn scope2026-11-14
border.beta.us-east-1.kids-bordering.amazon.castagingIn scope2026-11-14
border.gamma.us-east-1.kids-bordering.amazon.caIn scope2026-11-14
prod.us-east-1.kids-bordering.amazon.caIn scope2026-11-14
border.prod.us-east-1.kids-bordering.amazon.caIn scope2026-11-14
musicmaker.kids-play.amazon.caIn scope2026-11-14
alpha-us-east-1.musicmaker.kids-play.amazon.castagingIn scope2026-11-14
beta-us-east-1.musicmaker.kids-play.amazon.castagingIn scope2026-11-14
gamma-us-east-1.musicmaker.kids-play.amazon.caIn scope2026-11-14
alpha.us-east-1.musicmaker.kids-play.amazon.castagingIn scope2026-11-14
alpha.us-east-1.kids-play.amazon.castagingIn scope2026-11-14
kindle.amazon.caIn scope2026-11-14
kindle-help.amazon.caIn scope2026-11-14
kindle-helpforums.amazon.caIn scope2026-11-14
kindle-store-proxy-endpoint.amazon.caIn scope2026-11-14
kindledirectpublishing.amazon.caIn scope2026-11-14
kindlehelp.amazon.caIn scope2026-11-14
kindlehelpforums.amazon.caIn scope2026-11-14
kindlestore-sha-proxy.amazon.caIn scope2026-11-14
kindlesupport.amazon.caIn scope2026-11-14
l7amr-testing-102.amazon.catestIn scope2026-11-14
leadsmanager.amazon.caIn scope2026-11-14
logistics.amazon.caIn scope2026-11-14
logistics-extern-preprod.amazon.castagingIn scope2026-11-14
app.logistics.amazon.caIn scope2026-11-14
www.logistics.amazon.caIn scope2026-11-14
luna.amazon.caIn scope2026-11-14
luna-staging.amazon.castagingIn scope2026-11-14
lwa.amazon.caIn scope2026-11-14
hunter.lwa.amazon.caIn scope2026-11-14
m.amazon.caIn scope2026-11-14
marketing.amazon.caIn scope2026-11-14
membership.amazon.caIn scope2026-11-14
merchant-query.amazon.caIn scope2026-11-14
mscisv3prod.amazon.caIn scope2026-11-14
mscisv3test.amazon.catestIn scope2026-11-14
msh.amazon.caIn scope2026-11-14
msh-tablet.amazon.caIn scope2026-11-14
mt.amazon.caIn scope2026-11-14
music.amazon.caIn scope2026-11-14
dev.music.amazon.cadevIn scope2026-11-14
gateway.alpha.fan.music.amazon.castagingIn scope2026-11-14
purchase.alpha.fan.music.amazon.castagingIn scope2026-11-14
gateway.beta.fan.music.amazon.castagingIn scope2026-11-14
purchase.beta.fan.music.amazon.castagingIn scope2026-11-14
gateway.fan.music.amazon.caIn scope2026-11-14
purchase.fan.music.amazon.caIn scope2026-11-14
gamma.music.amazon.caIn scope2026-11-14
gql.music.amazon.caapiIn scope2026-11-14
beta.gql.music.amazon.caapi, stagingIn scope2026-11-14
egitelma.beta.gql.music.amazon.caapi, stagingIn scope2026-11-14
sophap.beta.gql.music.amazon.caapi, stagingIn scope2026-11-14
integ.music.amazon.caIn scope2026-11-14
local.music.amazon.cadevIn scope2026-11-14
pre-prod.music.amazon.caIn scope2026-11-14
myi-gui.amazon.caIn scope2026-11-14
na-api-alexa.amazon.caapiIn scope2026-11-14
na-api-avs-idrs.amazon.caapiIn scope2026-11-14
na-bob-dispatch-gamma-alexa.amazon.caIn scope2026-11-14
na-bob-dispatch-prod-alexa.amazon.caIn scope2026-11-14
opf-kuru-cname1-protesting002.amazon.caIn scope2026-11-14
opf-kuru-cname1-retesting006.amazon.caIn scope2026-11-14
opf-kuru-cname110-testing011.amazon.catestIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated