Bug bounty program
AV
Amazon Vulnerability Research Program
Most upvoted reports0
No report of this program is publicly disclosed
Subdomains90,563
| Name | Scope | First seen |
|---|---|---|
| data-exchange.amazon.aemail | In scope | 2026-11-14 |
| retail-smtp-in.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-01.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-02.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-03.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-10.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-11.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-12.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-13.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-14.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-5.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-6.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-7.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-8.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-16-9.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-75.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-76.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-77.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-78.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-79.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-80.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-81.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-82.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-83.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-84.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-85.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-86.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-87.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-88.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-89.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-90.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-91.amazon.cnmail | In scope | 2026-11-14 |
| smtp-out-17-92.amazon.cnmail | In scope | 2026-11-14 |
| autodiscover.amazon.co.jpmail | In scope | 2026-11-14 |
| data-exchange.amazon.co.jpmail | In scope | 2026-11-14 |
| retail-smtp-in-fe.amazon.co.jpmail | In scope | 2026-11-14 |
| autodiscover.amazon.co.ukmail | In scope | 2026-11-14 |
| data-exchange.amazon.co.ukmail | In scope | 2026-11-14 |
| retail-smtp-in-eu.amazon.co.ukmail | In scope | 2026-11-14 |
| retail-smtp-in-eu-1.amazon.co.ukmail | In scope | 2026-11-14 |
| retail-smtp-in-eu-2.amazon.co.ukmail | In scope | 2026-11-14 |
| retail-smtp-in-eu-3.amazon.co.ukmail | In scope | 2026-11-14 |
| smtp-web-sp.kinghost.3-93.amazon.commail | In scope | 2026-11-14 |
| smtp.4ssmtp-out-105-177.amazon.commail | In scope | 2026-11-14 |
| smtp.absystemsmtp-out-105-172.amazon.commail | In scope | 2026-11-14 |
| account-kep-mx-master.amazon.commail | In scope | 2026-11-14 |
| mx-central-1.beta.acm-certificates.amazon.commail, staging | In scope | 2026-11-14 |
| mx-central-1.acm-certificates.amazon.commail | In scope | 2026-11-14 |
| smtp.acsmtp-out-127-102.amazon.commail | In scope | 2026-11-14 |
| smtp.advp-out-174-9.amazon.commail | In scope | 2026-11-14 |
| mta-sts.mail.2365332769.cname.4294208399.mta-sts.mail.4285649032.cname.3996188134.mail.4041861xis-service-prod-iad.aea.amazon.commail | In scope | 2026-11-14 |
| excellence-mx.aka.amazon.commail | In scope | 2026-11-14 |
| fcswat-mx.aka.amazon.commail | In scope | 2026-11-14 |
| goku-ops-mx-central-1.aka.amazon.commail | In scope | 2026-11-14 |
| mail-admin-test.aka.amazon.comadmin, mail, test | In scope | 2026-11-14 |
| mx-dccd.aka.amazon.commail | In scope | 2026-11-14 |
| roshi-ops-prod-mx-central-1.aka.amazon.commail | In scope | 2026-11-14 |
| roshi-ops-website-prod-mx-central-1.aka.amazon.commail | In scope | 2026-11-14 |
| amazon-1p-lending-credito-mx-axio-beta-encryption-key.amazon.commail, staging | In scope | 2026-11-14 |
| amazon-1p-lending-credito-mx-axio-prod-encryption-key.amazon.commail | In scope | 2026-11-14 |
| amazon-smtp.amazon.commail | In scope | 2026-11-14 |
| cornerstone.mx-central-1.amazonaws.amazon.commail | In scope | 2026-11-14 |
| mail.shipping.verification.page.support.app.amazon.commail | In scope | 2026-11-14 |
| webmail.shipping.verification.page.support.app.amazon.commail | In scope | 2026-11-14 |
| autodiscover.amazon.commail | In scope | 2026-11-14 |
| autodiscover-ext.amazon.commail | In scope | 2026-11-14 |
| mx-central-1.aws-signin-testing.amazon.comauth, mail, test | In scope | 2026-11-14 |
| wildcard.mx-central-1.aws-signin-testing.amazon.comauth, mail, test | In scope | 2026-11-14 |
| mx-central-1.awsc-integ.aws.amazon.commail | In scope | 2026-11-14 |
| wildcard.mx-central-1.awsc-integ.aws.amazon.commail | In scope | 2026-11-14 |
| mx-central-1.awsc-preprod.aws.amazon.commail, staging | In scope | 2026-11-14 |
| wildcard.mx-central-1.awsc-preprod.aws.amazon.commail, staging | In scope | 2026-11-14 |
| mx-central-1.gamma.api.console.aws.amazon.comadmin, api, mail | In scope | 2026-11-14 |
| mx-central-1.api.console.aws.amazon.comadmin, api, mail | In scope | 2026-11-14 |
| mx-central-1.console.aws.amazon.comadmin, mail | In scope | 2026-11-14 |
| wildcard.mx-central-1.console.aws.amazon.comadmin, mail | In scope | 2026-11-14 |
| mx-central-1.lightsail-devo.aws.amazon.commail | In scope | 2026-11-14 |
| mx-central-1.lightsail-preprod.aws.amazon.commail, staging | In scope | 2026-11-14 |
| mx-central-1.lightsail.aws.amazon.commail | In scope | 2026-11-14 |
| mail.aws.amazon.commail | In scope | 2026-11-14 |
| kovid-mail.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| kovid-mail2.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| kovid-mx.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| owa.kovid.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| webmail.kovid.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| kovid.mail.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| mx-kovid.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| owa-kovid.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| kovid.webmail.signin.aws.amazon.comauth, mail | In scope | 2026-11-14 |
| webmail.aws.amazon.commail | In scope | 2026-11-14 |
| autodiscover.borg.amazon.commail | In scope | 2026-11-14 |
| exchange.borg.amazon.commail | In scope | 2026-11-14 |
| buyingportal-mx.amazon.commail | In scope | 2026-11-14 |
| corp-mail-pdx.amazon.cominternal, mail | In scope | 2026-11-14 |
| account-hub-mx-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| account-hubportal-mx-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| account-p2k-mx-gamma.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| advertisingtools-beta-mx.corp.amazon.cominternal, mail, staging | In scope | 2026-11-14 |
| advertisingtools-gamma-mx.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
| advertisingtools-mx.corp.amazon.cominternal, mail | In scope | 2026-11-14 |
90,562 names are covered by the program's own scope; 2 were first seen this week. Names come from ProjectDiscovery's public Chaos dataset (passive sources: certificate logs, DNS and other public data), matched to the program by its listing and its own domain scope. A name being in a dataset is not permission to test it: only what the program's own scope says is in scope, and its policy decides. CyberSIXT does not resolve, probe or scan these names. Tags come from the name alone. Source: ProjectDiscovery Chaos. Subdomains on the Atlas, or search the subdomains of every program.
A name in a dataset is not permission to test it: the program's own scope and rules decide. Data as of 2026-11-15.