Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| aws-signup-service-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| console.aws.amazon.cnadmin | In scope | 2026-11-14 |
| awsmpdisbursementworkflowsretailproxy-bjs-prod.amazon.cn | In scope | 2026-11-14 |
| basilisk-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| bcp-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| bcs-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| beta-ecs.amazon.cnstaging | In scope | 2026-11-14 |
| billing-kep.amazon.cn | In scope | 2026-11-14 |
| billing-kep-eu.amazon.cn | In scope | 2026-11-14 |
| billing-p2k.amazon.cn | In scope | 2026-11-14 |
| brandanalytics.amazon.cn | In scope | 2026-11-14 |
| brandregistry.amazon.cn | In scope | 2026-11-14 |
| brandservices.amazon.cn | In scope | 2026-11-14 |
| cookie.browserapps.amazon.cn | In scope | 2026-11-14 |
| dossier.browserapps.amazon.cn | In scope | 2026-11-14 |
| feed.browserapps.amazon.cn | In scope | 2026-11-14 |
| gateway.browserapps.amazon.cn | In scope | 2026-11-14 |
| horizonte.browserapps.amazon.cn | In scope | 2026-11-14 |
| identity.browserapps.amazon.cnauth | In scope | 2026-11-14 |
| mobile-identity.browserapps.amazon.cnauth | In scope | 2026-11-14 |
| product.browserapps.amazon.cn | In scope | 2026-11-14 |
| reporter.browserapps.amazon.cn | In scope | 2026-11-14 |
| storage.browserapps.amazon.cn | In scope | 2026-11-14 |
| wishlist.browserapps.amazon.cn | In scope | 2026-11-14 |
| bts-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| c2c.amazon.cn | In scope | 2026-11-14 |
| carriercentral.amazon.cn | In scope | 2026-11-14 |
| cas-retail-proxy-cn-north-1-gamma.amazon.cnauth | In scope | 2026-11-14 |
| cas-retail-proxy-cn-north-1-prod.amazon.cnauth | In scope | 2026-11-14 |
| catalog-mapper-cn.amazon.cn | In scope | 2026-11-14 |
| catalog-retail.amazon.cn | In scope | 2026-11-14 |
| catalog-sc.amazon.cn | In scope | 2026-11-14 |
| cde-ta-g7g.amazon.cn | In scope | 2026-11-14 |
| cde-ta-g7g-preprod.amazon.cnstaging | In scope | 2026-11-14 |
| cde-ta-g7g-sha-proxy.amazon.cn | In scope | 2026-11-14 |
| cde-ta-g7g-sha-proxy-preprod.amazon.cnstaging | In scope | 2026-11-14 |
| www.cde-ta-g7g.amazon.cn | In scope | 2026-11-14 |
| chat.amazon.cn | In scope | 2026-11-14 |
| chat1.amazon.cn | In scope | 2026-11-14 |
| client-log.amazon.cn | In scope | 2026-11-14 |
| cmu-receiver-cn.amazon.cn | In scope | 2026-11-14 |
| www.cn-amazon-creturns.amazon.cn | In scope | 2026-11-14 |
| apollo-vip-workflow-router-gamma.cn-amazon.amazon.cn | In scope | 2026-11-14 |
| apollo-vip-workflow-router-prod.cn-amazon.amazon.cn | In scope | 2026-11-14 |
| net-locality.cn-amazon.amazon.cn | In scope | 2026-11-14 |
| net-locality-gamma.cn-amazon.amazon.cn | In scope | 2026-11-14 |
| cn-login-aws-training.amazon.cnauth | In scope | 2026-11-14 |
| aws-orgs-opxs-preprod.cn-north-1.amazon.cnstaging | In scope | 2026-11-14 |
| aws-orgs-opxs-prod.cn-north-1.amazon.cn | In scope | 2026-11-14 |
| alpha.northstar.cn-north-1.amazon.cnstaging | In scope | 2026-11-14 |
| turtle-prod-pek-portal.cn-north-1.amazon.cn | In scope | 2026-11-14 |
| cn-ns1.amazon.cn | In scope | 2026-11-14 |
| cn-ns2.amazon.cn | In scope | 2026-11-14 |
| completion.amazon.cn | In scope | 2026-11-14 |
| ec2-52-80-219-173.cn-north-1.compute.amazon.cn | In scope | 2026-11-14 |
| ec2-52-80-248-3.cn-north-1.compute.amazon.cn | In scope | 2026-11-14 |
| ec2-52-81-206-72.cn-north-1.compute.amazon.cn | In scope | 2026-11-14 |
| ec2-52-83-92-208.cn-northwest-1.compute.amazon.cn | In scope | 2026-11-14 |
| www.alexa.comwww.amazon.cn | In scope | 2026-11-14 |
| copilot.amazon.cn | In scope | 2026-11-14 |
| coppacl-datastore.amazon.cn | In scope | 2026-11-14 |
| advertisingtools-cn.corp.amazon.cninternal | In scope | 2026-11-14 |
| credential-locker-service.amazon.cn | In scope | 2026-11-14 |
| cs.amazon.cn | In scope | 2026-11-14 |
| cs-assistant-cn.amazon.cn | In scope | 2026-11-14 |
| cs-ext.amazon.cn | In scope | 2026-11-14 |
| csapp-contactus.amazon.cn | In scope | 2026-11-14 |
| cscentral-al2-sandbox-cn.amazon.cntest | In scope | 2026-11-14 |
| cscentral-cn.amazon.cn | In scope | 2026-11-14 |
| cscentral-gamma-cn-external.amazon.cn | In scope | 2026-11-14 |
| cslp-pay.amazon.cn | In scope | 2026-11-14 |
| csos-client-services.amazon.cn | In scope | 2026-11-14 |
| csos-client-updates.amazon.cn | In scope | 2026-11-14 |
| cupdebit-harbor.amazon.cntools | In scope | 2026-11-14 |
| customer-service.amazon.cn | In scope | 2026-11-14 |
| customerservice.amazon.cn | In scope | 2026-11-14 |
| data.amazon.cn | In scope | 2026-11-14 |
| datavisualization-awsmarketplace.amazon.cn | In scope | 2026-11-14 |
| daxue.amazon.cn | In scope | 2026-11-14 |
| dcp.amazon.cn | In scope | 2026-11-14 |
| ddee.amazon.cn | In scope | 2026-11-14 |
| ddee-preprod.amazon.cnstaging | In scope | 2026-11-14 |
| deliver.amazon.cn | In scope | 2026-11-14 |
| devicebackupandrestore.amazon.cn | In scope | 2026-11-14 |
| digprjsurvey.amazon.cn | In scope | 2026-11-14 |
| dl.amazon.cn | In scope | 2026-11-14 |
| kindlefarm.dle-store-proxy-endpoint.amazon.cn | In scope | 2026-11-14 |
| dp-contacts-cn.amazon.cn | In scope | 2026-11-14 |
| dp-contacts-cn-tcp.amazon.cn | In scope | 2026-11-14 |
| dp-contacts-opf.amazon.cn | In scope | 2026-11-14 |
| dp-gw-na.amazon.cn | In scope | 2026-11-14 |
| dp-gw-preprod.amazon.cnstaging | In scope | 2026-11-14 |
| dpgw.amazon.cn | In scope | 2026-11-14 |
| dropship.amazon.cn | In scope | 2026-11-14 |
| beta.ecs.amazon.cnstaging | In scope | 2026-11-14 |
| mvc-elb01-414295115.ap-northeast-1.elb.amazon.cn | In scope | 2026-11-14 |
| email.amazon.cn | In scope | 2026-11-14 |
| erp.amazon.cn | In scope | 2026-11-14 |
| erps.amazon.cn | In scope | 2026-11-14 |
| eu-api-avs-idrs.amazon.cnapi | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.