Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root
Scope
Name suggests
First seen
Text file90,563 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
opf-kuru-cname111-testing011.amazon.catestIn scope2026-11-14
opf-kuru-cname2-protesting002.amazon.caIn scope2026-11-14
opf-kuru-cname2-retesting006.amazon.caIn scope2026-11-14
opf-kuru-cname3-protesting002.amazon.caIn scope2026-11-14
opf-kuru-cname3-retesting006.amazon.caIn scope2026-11-14
opf-kuru-cname4-retesting006.amazon.caIn scope2026-11-14
opf-kuru-cname888-testing011.amazon.catestIn scope2026-11-14
opf-kuru-protesting001.amazon.caIn scope2026-11-14
opf-kuru-protesting002.amazon.caIn scope2026-11-14
opf-kuru-protesting004.amazon.caIn scope2026-11-14
opf-kuru-retesting001.amazon.caIn scope2026-11-14
opf-kuru-retesting003.amazon.caIn scope2026-11-14
opf-kuru-retesting004.amazon.caIn scope2026-11-14
opf-kuru-retesting005.amazon.caIn scope2026-11-14
opf-kuru-retesting006.amazon.caIn scope2026-11-14
opf-kuru-testing001.amazon.catestIn scope2026-11-14
opf-kuru-testing002.amazon.catestIn scope2026-11-14
opf-kuru-testing003.amazon.catestIn scope2026-11-14
opf-kuru-testing004.amazon.catestIn scope2026-11-14
opf-kuru-testing008.amazon.catestIn scope2026-11-14
opf-kuru-testing009.amazon.catestIn scope2026-11-14
opf-kuru-testing011.amazon.catestIn scope2026-11-14
opf-kuru-testing98.amazon.catestIn scope2026-11-14
opf-onboardingz-test-v10.amazon.catestIn scope2026-11-14
opf-onboardingz-test-v9.amazon.catestIn scope2026-11-14
opf-sellercentral.amazon.caIn scope2026-11-14
opf-www.amazon.caIn scope2026-11-14
opfcaptcha.amazon.caIn scope2026-11-14
orders.amazon.caIn scope2026-11-14
origin-aero-non-standard-testing234.amazon.catestIn scope2026-11-14
origin-aero-non-standard-testing238.amazon.catestIn scope2026-11-14
origin-aero-non-standard-testing239.amazon.catestIn scope2026-11-14
origin-delegate-weblab-stesting1.amazon.caIn scope2026-11-14
origin-delegate-weblab-stesting67.amazon.caIn scope2026-11-14
origin-dl.amazon.caIn scope2026-11-14
origin-eucentral1-defaultroutetest.amazon.caIn scope2026-11-14
origin-frontier-aero-tsting.amazon.caIn scope2026-11-14
origin-logistics.amazon.caIn scope2026-11-14
origin-music.amazon.caIn scope2026-11-14
origin-sellercentral.amazon.caIn scope2026-11-14
origin-setup-firetv.amazon.caIn scope2026-11-14
origin-supplychainconnect.amazon.caIn scope2026-11-14
origin-www.amazon.caIn scope2026-11-14
p-nt-www-amazon-ca-kalias.amazon.caIn scope2026-11-14
p-y3-www-amazon-ca-kalias.amazon.caIn scope2026-11-14
p-yo-www-amazon-ca-kalias.amazon.caIn scope2026-11-14
panel.amazon.caadminIn scope2026-11-14
www.panel.amazon.caadminIn scope2026-11-14
parents.amazon.caIn scope2026-11-14
partnercentral.amazon.caIn scope2026-11-14
rental-account.partnercentral.amazon.caIn scope2026-11-14
photos.amazon.caIn scope2026-11-14
pinnacle-api.amazon.caapiIn scope2026-11-14
play.amazon.caIn scope2026-11-14
preview-business-agents.amazon.castagingIn scope2026-11-14
wf.prime.amazon.caIn scope2026-11-14
wfm.prime.amazon.caIn scope2026-11-14
wholefoods.prime.amazon.caIn scope2026-11-14
wholefoodsmarket.prime.amazon.caIn scope2026-11-14
primenow.amazon.caIn scope2026-11-14
primenow-preprod-dev.amazon.cadev, stagingIn scope2026-11-14
www.primenow.amazon.caIn scope2026-11-14
ramp-api.amazon.caapiIn scope2026-11-14
rampapi.amazon.caIn scope2026-11-14
rcm-ca.amazon.caIn scope2026-11-14
read.amazon.caIn scope2026-11-14
reinstate.amazon.caIn scope2026-11-14
relay.amazon.caIn scope2026-11-14
renewed.amazon.caIn scope2026-11-14
rush.amazon.caIn scope2026-11-14
s1.amazon.caIn scope2026-11-14
sandbox-business-agents.amazon.catestIn scope2026-11-14
sdu.amazon.caIn scope2026-11-14
se-cde-ta-g7g.amazon.caIn scope2026-11-14
secure.amazon.caIn scope2026-11-14
secure-fields.amazon.caIn scope2026-11-14
securepayment.amazon.caIn scope2026-11-14
sell.amazon.caIn scope2026-11-14
seller-central-pilot.amazon.caIn scope2026-11-14
sellercentral.amazon.caIn scope2026-11-14
setup-firetv.amazon.caIn scope2026-11-14
shm.amazon.caIn scope2026-11-14
sierra-discovery.amazon.caIn scope2026-11-14
skills-store.amazon.caIn scope2026-11-14
skills-store-eu.amazon.caIn scope2026-11-14
skills-store-fe.amazon.caIn scope2026-11-14
skills-store-na.amazon.caIn scope2026-11-14
smile.amazon.caIn scope2026-11-14
soap.amazon.caapiIn scope2026-11-14
social.amazon.caIn scope2026-11-14
api.social.amazon.caapiIn scope2026-11-14
app.social.amazon.caIn scope2026-11-14
api.app.social.amazon.caapiIn scope2026-11-14
shop.social.amazon.caIn scope2026-11-14
sponsored-ads.amazon.caIn scope2026-11-14
stage-business.amazon.castagingIn scope2026-11-14
static.amazon.caIn scope2026-11-14
storyplayer-photos.amazon.caIn scope2026-11-14
storyplayerbeta-photos.amazon.caIn scope2026-11-14
supplierconnect.amazon.caIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated