Skip to content

Bug bounty program

AV

Amazon Vulnerability Research Program

Platform
HackerOne
Bounties
Pays
Assets in scope
120
Disclosed reports
0
Subdomains
90,563
Vendor on CyberSIXT
Amazon (140 CVEs, 0 exploited)

Most upvoted reports0

No report of this program is publicly disclosed

Subdomains90,563

Subdomains of Amazon Vulnerability Research Program
NameScopeFirst seen
fapiao-proxy-service-cn-north-1-prod.amazon.cnIn scope2026-11-14
fas-permissions.amazon.cnIn scope2026-11-14
fe-api-avs-idrs.amazon.cnapiIn scope2026-11-14
fips-cn.amazon.cnIn scope2026-11-14
fips-cn-preprod.amazon.cnstagingIn scope2026-11-14
fls-cn.amazon.cnIn scope2026-11-14
fls-cn-new.amazon.cnIn scope2026-11-14
geotrace-cn-extern.amazon.cnIn scope2026-11-14
geotrace-cn-master-extern.amazon.cnIn scope2026-11-14
globalstore.amazon.cnIn scope2026-11-14
api.globalstore.amazon.cnapiIn scope2026-11-14
web.globalstore.amazon.cnIn scope2026-11-14
grablist.amazon.cnIn scope2026-11-14
gs.amazon.cnIn scope2026-11-14
gtp-cn.amazon.cnIn scope2026-11-14
guipitan.amazon.cnIn scope2026-11-14
hailstone-service-cn-amazon.amazon.cnIn scope2026-11-14
haimai.amazon.cnIn scope2026-11-14
harborservice-cn.amazon.cnIn scope2026-11-14
help.amazon.cnIn scope2026-11-14
https-sedi.amazon.cnIn scope2026-11-14
images.amazon.cnIn scope2026-11-14
ips-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
isengard-retail-proxy-bjs-prod.amazon.cnIn scope2026-11-14
jobs.amazon.cnIn scope2026-11-14
kaidian.amazon.cnIn scope2026-11-14
kars-ats.amazon.cnIn scope2026-11-14
kdp.amazon.cnIn scope2026-11-14
kep.amazon.cnIn scope2026-11-14
kep-eu.amazon.cnIn scope2026-11-14
account.kep.amazon.cnIn scope2026-11-14
kepler-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
kimi.amazon.cnIn scope2026-11-14
kindle.amazon.cnIn scope2026-11-14
kindle-help.amazon.cnIn scope2026-11-14
kindle-mysn.amazon.cnIn scope2026-11-14
kindle-store-proxy-endpoint.amazon.cnIn scope2026-11-14
kindle-wechat.amazon.cnIn scope2026-11-14
kindledirectpublishing.amazon.cnIn scope2026-11-14
kindlehelp.amazon.cnIn scope2026-11-14
kindlestore-sha-proxy.amazon.cnIn scope2026-11-14
kindlesupport.amazon.cnIn scope2026-11-14
kuato.amazon.cnIn scope2026-11-14
logistics.amazon.cnIn scope2026-11-14
m.amazon.cnIn scope2026-11-14
mag-cn.amazon.cnIn scope2026-11-14
mag-cn-gamma.amazon.cnIn scope2026-11-14
mai.amazon.cnIn scope2026-11-14
marketplacedeveloper.amazon.cnIn scope2026-11-14
mas-ext-cn.amazon.cnIn scope2026-11-14
mas-sdk-cn.amazon.cnIn scope2026-11-14
mas-ssr.amazon.cnIn scope2026-11-14
mas-ssr-ac.amazon.cnIn scope2026-11-14
mas-ssr-ad.amazon.cnIn scope2026-11-14
mas-ssr-staging.amazon.cnstagingIn scope2026-11-14
match-visualsearch-cn.amazon.cnIn scope2026-11-14
membership.amazon.cnIn scope2026-11-14
miniapp.amazon.cnIn scope2026-11-14
mm-out-101.amazon.cnIn scope2026-11-14
mm-out-102.amazon.cnIn scope2026-11-14
mm-out-103.amazon.cnIn scope2026-11-14
mm-out-104.amazon.cnIn scope2026-11-14
mm-out-105.amazon.cnIn scope2026-11-14
mm-out-106.amazon.cnIn scope2026-11-14
mm-out-107.amazon.cnIn scope2026-11-14
mm-out-201.amazon.cnIn scope2026-11-14
mm-out-202.amazon.cnIn scope2026-11-14
mm-out-203.amazon.cnIn scope2026-11-14
mm-out-204.amazon.cnIn scope2026-11-14
mobile.amazon.cnIn scope2026-11-14
mobile-app-expan.amazon.cnIn scope2026-11-14
moment.amazon.cnIn scope2026-11-14
monitor-api-public-cn.amazon.cnapi, monitoringIn scope2026-11-14
msh.amazon.cnIn scope2026-11-14
msh-tablet.amazon.cnIn scope2026-11-14
mt.amazon.cnIn scope2026-11-14
mycdservice-cn.amazon.cnIn scope2026-11-14
na-api-avs-idrs.amazon.cnapiIn scope2026-11-14
gamma.nautilus.amazon.cnIn scope2026-11-14
prod.nautilus.amazon.cnIn scope2026-11-14
nuvemservice.amazon.cnIn scope2026-11-14
omwees-cn-extern.amazon.cnIn scope2026-11-14
omwees-cn-master-extern.amazon.cnIn scope2026-11-14
operatornet-retail-proxy-cn-north-1-prod.amazon.cnIn scope2026-11-14
opfcaptcha.amazon.cnIn scope2026-11-14
orders.amazon.cnIn scope2026-11-14
origin-marketplacedeveloper.amazon.cnIn scope2026-11-14
origin-supplychainconnect.amazon.cnIn scope2026-11-14
origin-www.amazon.cnIn scope2026-11-14
oss-cn-extern.amazon.cnIn scope2026-11-14
oss-cn-master-extern.amazon.cnIn scope2026-11-14
otsms-cn-extern.amazon.cnIn scope2026-11-14
otsms-cn-master-extern.amazon.cnIn scope2026-11-14
p1.amazon.cnIn scope2026-11-14
payease-harbor.amazon.cntoolsIn scope2026-11-14
paystation-frontend.amazon.cnIn scope2026-11-14
pda-as.amazon.cnIn scope2026-11-14
pda-bes.amazon.cnIn scope2026-11-14
tas-cn-extern.pek.amazon.cnIn scope2026-11-14
tas-preprod-cn-extern.pek.amazon.cnstagingIn scope2026-11-14

90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.

A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.