Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| personaldashboard-prod-cn.amazon.cn | In scope | 2026-11-14 |
| pistachio.amazon.cn | In scope | 2026-11-14 |
| pots-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| prime.amazon.cn | In scope | 2026-11-14 |
| primevideo.amazon.cn | In scope | 2026-11-14 |
| profile.amazon.cn | In scope | 2026-11-14 |
| ptras-cn-extern.amazon.cn | In scope | 2026-11-14 |
| ptras-cn-master-extern.amazon.cn | In scope | 2026-11-14 |
| ptrs-cn-extern.amazon.cn | In scope | 2026-11-14 |
| ptrs-cn-master-extern.amazon.cn | In scope | 2026-11-14 |
| push.amazon.cn | In scope | 2026-11-14 |
| r.amazon.cn | In scope | 2026-11-14 |
| rabbit-cn.amazon.cn | In scope | 2026-11-14 |
| rcm-adsystem.amazon.cn | In scope | 2026-11-14 |
| rcm-assoc.amazon.cn | In scope | 2026-11-14 |
| rcm-cn.amazon.cn | In scope | 2026-11-14 |
| rcs-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| read.amazon.cn | In scope | 2026-11-14 |
| retail-proxy-first-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| retail-proxy-instrument-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| retail-proxy-policy-cn-north-1-fe-gamma.amazon.cn | In scope | 2026-11-14 |
| retail-proxy-policy-cn-north-1-onebox.amazon.cn | In scope | 2026-11-14 |
| retail-proxy-policy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| retail-proxy-preference-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| retail-proxy-yunmeng-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| retail-smtp-in.amazon.cnmail | In scope | 2026-11-14 |
| rewrite-cn.amazon.cn | In scope | 2026-11-14 |
| rexp-auth-proxy.amazon.cnauth | In scope | 2026-11-14 |
| roadbook.amazon.cn | In scope | 2026-11-14 |
| rte-out-101.amazon.cn | In scope | 2026-11-14 |
| rte-out-102.amazon.cn | In scope | 2026-11-14 |
| rte-out-103.amazon.cn | In scope | 2026-11-14 |
| rte-out-104.amazon.cn | In scope | 2026-11-14 |
| rte-out-105.amazon.cn | In scope | 2026-11-14 |
| rte-out-106.amazon.cn | In scope | 2026-11-14 |
| rte-out-107.amazon.cn | In scope | 2026-11-14 |
| rte-out-201.amazon.cn | In scope | 2026-11-14 |
| rte-out-202.amazon.cn | In scope | 2026-11-14 |
| rte-out-203.amazon.cn | In scope | 2026-11-14 |
| rte-out-204.amazon.cn | In scope | 2026-11-14 |
| rte-out-205.amazon.cn | In scope | 2026-11-14 |
| rte-out-206.amazon.cn | In scope | 2026-11-14 |
| sars-cn.amazon.cn | In scope | 2026-11-14 |
| sdu.amazon.cn | In scope | 2026-11-14 |
| se-cde-ta-g7g.amazon.cn | In scope | 2026-11-14 |
| se-kindle.amazon.cn | In scope | 2026-11-14 |
| sellertools.amazon.cn | In scope | 2026-11-14 |
| sendtokindle.amazon.cn | In scope | 2026-11-14 |
| ship.amazon.cn | In scope | 2026-11-14 |
| shippingapi.amazon.cn | In scope | 2026-11-14 |
| sandbox.shippingapi.amazon.cntest | In scope | 2026-11-14 |
| shm.amazon.cn | In scope | 2026-11-14 |
| siege-canary-cn.amazon.cnstaging | In scope | 2026-11-14 |
| smsportal.amazon.cn | In scope | 2026-11-14 |
| smtp-out-01.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-02.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-03.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-10.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-11.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-12.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-13.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-14.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-5.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-6.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-7.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-8.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-9.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-75.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-76.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-77.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-78.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-79.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-80.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-81.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-82.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-83.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-84.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-85.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-86.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-87.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-88.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-89.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-90.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-91.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-92.amazon.cnmail | In scope | 2026-11-14 |
| soap.amazon.cnapi | In scope | 2026-11-14 |
| ssl-images.amazon.cn | In scope | 2026-11-14 |
| ssofaast.amazon.cn | In scope | 2026-11-14 |
| st.amazon.cn | In scope | 2026-11-14 |
| static.amazon.cn | In scope | 2026-11-14 |
| supplychainconnect.amazon.cn | In scope | 2026-11-14 |
| support.amazon.cn | In scope | 2026-11-14 |
| swa.amazon.cn | In scope | 2026-11-14 |
| switchyard-cn.amazon.cn | In scope | 2026-11-14 |
| switchyard-cn-preprod.amazon.cnstaging | In scope | 2026-11-14 |
| t1-completion.amazon.cn | In scope | 2026-11-14 |
| tas-cn-extern.amazon.cn | In scope | 2026-11-14 |
| tas-preprod-cn-extern.amazon.cnstaging | In scope | 2026-11-14 |
| tcs-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
| tns-retail-proxy-cn-north-1-prod.amazon.cn | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.