Skip to content
Connect AISign inSign up free

Bug bounty program

AV

Amazon Vulnerability Research Program

Open on HackerOneAtlas
Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Root
Scope
Name suggests
First seen
Text file90,563 names
Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
supply.amazon.caIn scope2026-11-14
supplychain.amazon.caIn scope2026-11-14
supplychainconnect.amazon.caIn scope2026-11-14
support.amazon.caIn scope2026-11-14
tax-exemption.amazon.caIn scope2026-11-14
tempo.amazon.caIn scope2026-11-14
terrier.amazon.caIn scope2026-11-14
thumbnails-photos.amazon.caIn scope2026-11-14
toronto.amazon.caIn scope2026-11-14
transient.amazon.caIn scope2026-11-14
appx.transient.amazon.caIn scope2026-11-14
twitch.amazon.caIn scope2026-11-14
unagi.amazon.caIn scope2026-11-14
unagi-na.amazon.caIn scope2026-11-14
upload-photos.amazon.cadataIn scope2026-11-14
cnt-03.upload-photos.amazon.cadataIn scope2026-11-14
gamma-apigateway-fips.us-east-1.amazon.caapiIn scope2026-11-14
vancouver.amazon.caIn scope2026-11-14
vendorcentral.amazon.caIn scope2026-11-14
vibhavdnstesting102.amazon.caIn scope2026-11-14
vine.amazon.caIn scope2026-11-14
vitestingfunc.amazon.caIn scope2026-11-14
vsdtestingafteroauth.amazon.caIn scope2026-11-14
webservices.amazon.caapiIn scope2026-11-14
sha256.webservices.amazon.caapiIn scope2026-11-14
website-g7g.amazon.caIn scope2026-11-14
wholefoods.amazon.caIn scope2026-11-14
wholefoodsmarket.amazon.caIn scope2026-11-14
widgets.amazon.caIn scope2026-11-14
ws.amazon.caIn scope2026-11-14
www.amazon.caIn scope2026-11-14
www1.amazon.caIn scope2026-11-14
www14.amazon.caIn scope2026-11-14
www15.amazon.caIn scope2026-11-14
www15348u.amazon.caIn scope2026-11-14
www22.amazon.caIn scope2026-11-14
www23.amazon.caIn scope2026-11-14
www3.amazon.caIn scope2026-11-14
xml.amazon.caIn scope2026-11-14
your-account.amazon.caIn scope2026-11-14
your-orders.amazon.caIn scope2026-11-14
youraccount.amazon.caIn scope2026-11-14
yourorders.amazon.caIn scope2026-11-14
3ffc8-gs.amazon.cnIn scope2026-11-14
50824-gs.amazon.cnIn scope2026-11-14
aan.amazon.cnIn scope2026-11-14
aax-cn.amazon.cnIn scope2026-11-14
aba.amazon.cnIn scope2026-11-14
accelerator.amazon.cnIn scope2026-11-14
account.amazon.cnIn scope2026-11-14
accounts-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
ads.amazon.cnIn scope2026-11-14
advertising.amazon.cnIn scope2026-11-14
advertising-api.amazon.cnapiIn scope2026-11-14
advertising-api-test.amazon.cnapi, testIn scope2026-11-14
s.advertising.amazon.cnIn scope2026-11-14
dev.fe.s.advertising.amazon.cndevIn scope2026-11-14
dev.hub.s.advertising.amazon.cndevIn scope2026-11-14
img02.s.advertising.amazon.cnIn scope2026-11-14
dev.m.s.advertising.amazon.cndevIn scope2026-11-14
dev.ma.s.advertising.amazon.cndevIn scope2026-11-14
dev.static.s.advertising.amazon.cndevIn scope2026-11-14
alexa.amazon.cnIn scope2026-11-14
alexa-comms-mobile-service.amazon.cnIn scope2026-11-14
alexa-comms-mobile-service-gamma.amazon.cnIn scope2026-11-14
alfbus-director.amazon.cnIn scope2026-11-14
alipay-harbor.amazon.cntoolsIn scope2026-11-14
alx-inbound.amazon.cnIn scope2026-11-14
ams.amazon.cnIn scope2026-11-14
api.amazon.cnapiIn scope2026-11-14
api-amazondevices.amazon.cnapiIn scope2026-11-14
api-amazondevices-cn.amazon.cnapiIn scope2026-11-14
api-cslp-emt.amazon.cnapiIn scope2026-11-14
api-prime.amazon.cnapiIn scope2026-11-14
apx-security.amazon.cnIn scope2026-11-14
ara.amazon.cnIn scope2026-11-14
arap.amazon.cnIn scope2026-11-14
argileto.amazon.cnIn scope2026-11-14
as2-sedi.amazon.cnIn scope2026-11-14
assoc-datafeeds.amazon.cnIn scope2026-11-14
associates.amazon.cnIn scope2026-11-14
atcs-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
atpw-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
avs-idrs.amazon.cnIn scope2026-11-14
aws-ccnw-rp-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-cp-entity-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
a.cdn.console-alpha.aws-dev.amazon.cnadmin, dev, stagingIn scope2026-11-14
aws-fcs-retail-proxy-bjs-gamma.amazon.cnIn scope2026-11-14
aws-fcs-retail-proxy-bjs-prod.amazon.cnIn scope2026-11-14
aws-finx-fda-retail-proxy-cn-north-1-gamma.amazon.cnIn scope2026-11-14
aws-finx-fda-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-finx-frs-retail-proxy-cn-north-1-gamma.amazon.cnIn scope2026-11-14
aws-finx-frs-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-finx-prp-cn-north-1-gamma.amazon.cnIn scope2026-11-14
aws-finx-prp-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-fms-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-jigsaw-service-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-orgs-opxs-preprod.amazon.cnstagingIn scope2026-11-14
aws-p2s-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
aws-retail-proxy-cn.amazon.cnIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.

CyberSIXTSignal over noise
Sign inSign up free

Updated