Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| adaservice-kibana-legacy-beta-pdx.aka.amazon.comlegacy, monitoring, staging | In scope | 2026-11-14 |
| adaservice-kibana-legacy-gamma-pdx.aka.amazon.comlegacy, monitoring | In scope | 2026-11-14 |
| dogfish-beta-old.aka.amazon.comlegacy, staging | In scope | 2026-11-14 |
| dogfish-old.aka.amazon.comlegacy | In scope | 2026-11-14 |
| fclearning-legacy.aka.amazon.comlegacy | In scope | 2026-11-14 |
| is-ops-old-stack.aka.amazon.comlegacy | In scope | 2026-11-14 |
| legacy-selection-gamma.aka.amazon.comlegacy | In scope | 2026-11-14 |
| legacy-selection-prod.aka.amazon.comlegacy | In scope | 2026-11-14 |
| aax-dtb-legacy.amazon-adsystem.amazon.comlegacy | In scope | 2026-11-14 |
| arn-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| bjs-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| bom-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| client.legacy-app.games.a2z.com.cdn.amazon.comlegacy | In scope | 2026-11-14 |
| beta.client.legacy-app.games.a2z.com.cdn.amazon.comlegacy, staging | In scope | 2026-11-14 |
| gamma.client.legacy-app.games.a2z.com.cdn.amazon.comlegacy | In scope | 2026-11-14 |
| chinook-legacy.amazon.comlegacy | In scope | 2026-11-14 |
| cmh-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| iae26.weipingceramic.co-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| aws-secops-maps-beta-legacy.corp.amazon.cominternal, legacy, staging | In scope | 2026-11-14 |
| aws-secops-maps-gamma-legacy.corp.amazon.cominternal, legacy | In scope | 2026-11-14 |
| aws-secops-maps-legacy.corp.amazon.cominternal, legacy | In scope | 2026-11-14 |
| gitfarm-alpha-legacy.corp.amazon.cominternal, legacy, staging | In scope | 2026-11-14 |
| gitfarm-beta-legacy.corp.amazon.cominternal, legacy, staging | In scope | 2026-11-14 |
| gitfarm-legacy.corp.amazon.cominternal, legacy | In scope | 2026-11-14 |
| list-archive-redirect.corp.amazon.cominternal, legacy | In scope | 2026-11-14 |
| list-archive-redirect-test.corp.amazon.cominternal, legacy, test | In scope | 2026-11-14 |
| phonetool-classic-cdn.corp.amazon.cominternal, legacy | In scope | 2026-11-14 |
| phonetool-classic-cdn-beta.corp.amazon.cominternal, legacy, staging | In scope | 2026-11-14 |
| phonetool-classic-cdn-gamma.corp.amazon.cominternal, legacy | In scope | 2026-11-14 |
| phonetool-classic-cdn-seniukov.corp.amazon.cominternal, legacy | In scope | 2026-11-14 |
| playfair-legacy.corp.amazon.cominternal, legacy | In scope | 2026-11-14 |
| rbx-legacy-jenkins-beta.corp.amazon.comci, internal, legacy, staging | In scope | 2026-11-14 |
| rbx-legacy-jenkins-gamma.corp.amazon.comci, internal, legacy | In scope | 2026-11-14 |
| cpt-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| dexter-ui-ap-northeast-1-classic-prod.amazon.comlegacy | In scope | 2026-11-14 |
| dexter-ui-ap-southeast-1-classic-prod.amazon.comlegacy | In scope | 2026-11-14 |
| dexter-ui-ap-southeast-2-classic-prod.amazon.comlegacy | In scope | 2026-11-14 |
| dexter-ui-eu-west-1-classic-prod.amazon.comlegacy | In scope | 2026-11-14 |
| dexter-ui-sa-east-1-classic-prod.amazon.comlegacy | In scope | 2026-11-14 |
| dexter-ui-us-east-1-classic-preprod-prod.amazon.comlegacy, staging | In scope | 2026-11-14 |
| dexter-ui-us-east-1-classic-prod.amazon.comlegacy | In scope | 2026-11-14 |
| dexter-ui-us-west-1-classic-prod.amazon.comlegacy | In scope | 2026-11-14 |
| dexter-ui-us-west-2-classic-prod.amazon.comlegacy | In scope | 2026-11-14 |
| dub-n-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| dub-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| fra-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| gru-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| https-eu-bak.amazon.comlegacy | In scope | 2026-11-14 |
| hyd-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| iad-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| legacy.ssm-facade-beta.iad.amazon.comlegacy, staging | In scope | 2026-11-14 |
| tier0-propagator-classic-a-gamma.iad.amazon.comlegacy | In scope | 2026-11-14 |
| tier05-propagator-classic.iad.amazon.comlegacy | In scope | 2026-11-14 |
| tiern-propagator-classic.iad.amazon.comlegacy | In scope | 2026-11-14 |
| tiern-propagator-classic-gamma.iad.amazon.comlegacy | In scope | 2026-11-14 |
| tiern-propagator-classic-gamma-tmp.iad.amazon.comlegacy | In scope | 2026-11-14 |
| tiern-propagator-classic-prod-dataverification.iad.amazon.comlegacy | In scope | 2026-11-14 |
| ias-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| icn-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| gcs-legacy-tools.integ.amazon.comlegacy | In scope | 2026-11-14 |
| gcs-legacy-tools-tcp.integ.amazon.comlegacy | In scope | 2026-11-14 |
| is-ops-old-stack.integ.amazon.comlegacy | In scope | 2026-11-14 |
| legacy-selection-alpha.integ.amazon.comlegacy, staging | In scope | 2026-11-14 |
| legacy-selection-alpha-tcp.integ.amazon.comlegacy, staging | In scope | 2026-11-14 |
| legacy-selection-beta.integ.amazon.comlegacy, staging | In scope | 2026-11-14 |
| legacy-selection-beta-tcp.integ.amazon.comlegacy, staging | In scope | 2026-11-14 |
| issues-archive.amazon.comlegacy | In scope | 2026-11-14 |
| legacy-kindle-digital-delivery.amazon.comlegacy | In scope | 2026-11-14 |
| legacy-kindle-digital-delivery-integ.amazon.comlegacy | In scope | 2026-11-14 |
| legacy-kindle-digital-delivery-preprod.amazon.comlegacy, staging | In scope | 2026-11-14 |
| list-archive.amazon.comlegacy | In scope | 2026-11-14 |
| list-archive-integ.amazon.comlegacy | In scope | 2026-11-14 |
| list-archive-preprod.amazon.comlegacy, staging | In scope | 2026-11-14 |
| maa-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| meetings-legacy.amazon.comlegacy | In scope | 2026-11-14 |
| nrt-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| tier1-propagator-classic.pdt.amazon.comlegacy | In scope | 2026-11-14 |
| pdx-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| pek-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| andromeda-eu-old-dub.dub.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| sim-classic-integ-dub.dub.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| sim-classic-preprod-dub.dub.proxy.amazon.comlegacy, staging | In scope | 2026-11-14 |
| sim-classic-prod-dub.dub.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| aws-billrun-legacy-gamma-iad.iad.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| aws-billrun-legacy-iad.iad.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| gcs-legacy-tools-iad.iad.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| sim-classic-integ-iad.iad.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| sim-classic-preprod-iad.iad.proxy.amazon.comlegacy, staging | In scope | 2026-11-14 |
| sim-classic-prod-iad.iad.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| tiern-propagator-classic-gamma-iad.iad.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| tiern-propagator-classic-gamma-tmp-iad.iad.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| tiern-propagator-classic-iad.iad.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| sim-classic-integ-pdx.pdx.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| sim-classic-preprod-pdx.pdx.proxy.amazon.comlegacy, staging | In scope | 2026-11-14 |
| sim-classic-prod-pdx.pdx.proxy.amazon.comlegacy | In scope | 2026-11-14 |
| sea-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| sfo-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| sin-orca-bak.amazon.comlegacy | In scope | 2026-11-14 |
| slps-fms-legacy-na.amazon.comlegacy | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.