-
Notifications
You must be signed in to change notification settings - Fork 0
Scope Management
Serg edited this page May 25, 2026
·
2 revisions
This page explains how ReconSR uses configs/scope.txt to exclude domains, IP addresses, and ASNs from processing.
The scope file defines entities that ReconSR treats as out of scope. If a domain, IP address, subnet, or ASN matches an entry in this file, ReconSR ignores it unless a higher-priority exception is configured.
Caution
ReconSR is intended for authorized security auditing, infrastructure monitoring, and legitimate security research. You are responsible for ensuring that all scanning and enrichment activity is legal, ethical, and explicitly authorized. Scanning targets without prior authorization may violate laws, third-party Terms of Service, or Acceptable Use Policies.
The scope configuration file is located at:
configs/scope.txt
The file contains separate sections for different entity types:
[domain]
# Domain names, suffixes, and zones
[ip]
# IP addresses and CIDR ranges
[asn]
# Autonomous system numbersAll entries are case-insensitive.
Any entry listed in configs/scope.txt is considered out of scope.
Examples:
[domain]
example.comThis excludes example.com and matching domain results from processing.
[ip]
10.0.0.0/8This excludes the 10.0.0.0/8 subnet.
[asn]
AS16509This excludes the listed ASN.
Use ! to create an exception that brings a specific entity back into scope.
Exceptions always take priority over blocked entries.
Domain example:
[domain]
example.com, !api.example.comThis blocks example.com, but allows api.example.com.
IP example:
[ip]
10.0.0.0/8, !10.0.1.0/24This blocks 10.0.0.0/8, but allows 10.0.1.0/24.
If ReconSR is started with a target that matches configs/scope.txt, it may return:
Error: target is out of scope (check scope.txt).
To allow that target, edit configs/scope.txt and add a higher-priority exception with !.
Example:
[domain]
gov, !example.govThis keeps gov out of scope but allows example.gov.
If you want to exclude additional domains, IP ranges, or ASNs from processing, add them to the appropriate section without !.
You can edit configs/scope.txt to match your authorized engagement, monitoring environment, or research scope.
Before removing default exclusions or adding exceptions, confirm that you have explicit authorization to process the target. This is especially important for government, military, educational, cloud provider, CDN, email, social media, and shared infrastructure ranges.
Warning
ReconSR can interact with external APIs, public registries, and third-party datasets. Those providers may enforce their own Terms of Service, Acceptable Use Policies, data licenses, rate limits, API termination rules, or IP-based blocking. You are responsible for complying with those provider rules.
The following example shows the default configs/scope.txt content.
# ==============================================================================
# ReconSR Scope Configuration
# ==============================================================================
# This file defines the entities (domains, IPs, etc.) that should be considered
# "Out of Scope" (ignored) by the application.
# All entries are case-insensitive.
#
# WHITELISTING (EXCEPTIONS):
# You can allow specific subdomains or IPs by prefixing them with '!'.
# Allowed items ALWAYS take precedence over blocked ones.
#
# Examples:
# [domain]
# example.com, !api.example.com # Blocks all example.com EXCEPT api.example.com
#
# [ip]
# 10.0.0.0/8, !10.0.1.0/24 # Blocks the 10.0.0.0/8 subnet EXCEPT 10.0.1.0/24
# ==============================================================================
[domain]
gov, mil, fed.us
gc.ca, gob.mx, gov.br, jus.br, leg.br, gob.ar, gov.ar, gob.cl, gov.co, gob.pe, gob.ve, gob.ec, gub.uy, gob.cu
europa.eu, gv.at, gov.al, gov.by, fgov.be, government.bg, gov.ba, gov.uk, mod.uk, police.uk, gov.scot, gov.wales, gov.hu, bund.de, gov.gr, gov.ie, stjr.is, gob.es, gov.it, gov.cy, gov.lv, lrv.lt, gov.mt, gov.md, overheid.nl, dep.no, kommune.no, fylkeskommune.no, gov.pl, gov.pt, gov.ro, gov.mk, gov.rs, gov.sk, gov.si, gov.ua, gov.fi, gouv.fr, gov.hr, gov.me, gov.cz, admin.ch, gov.se, riik.ee
gov.cn, gov.in, nic.in, go.jp, go.kr, gov.tw, go.id, gov.vn, go.th, gov.my, gov.sg, gov.ph, gov.pk, gov.bd, gov.lk
gov.il, gov.sa, gov.ae, gov.tr, bel.tr, pol.tr, gov.ir, gov.eg, gov.qa, gov.jo, gov.lb
gov.au, govt.nz, gov.fj
gov.za, gov.ng, go.ke, gov.ma, gov.gh, go.ug, go.tz, gov.dz, gouv.sn
# educational
edu, ac.uk, ac.at, edu.ba, ac.be, edu.by, ac.cy, edu.es, edu.ee, edu.gr, edu.it, edu.lv, edu.mt, edu.pl, edu.pt, edu.ro, ac.rs, edu.sk, edu.ua, ac.me, edu.ru, ac.ru
edu.cn, edu.hk, ac.in, edu.in, ac.jp, ac.kr, edu.tw, ac.id, edu.vn, ac.th, edu.my, edu.sg, edu.ph, edu.pk, ac.bd, ac.lk
ac.il, edu.sa, ac.ae, edu.tr, ac.ir, edu.eg, edu.qa, edu.jo, edu.lb
edu.ar, edu.br, edu.co, edu.mx, edu.pe, edu.ve, edu.ec, edu.uy, edu.cu
edu.au, ac.nz
ac.za, edu.ng, ac.ke, ac.ma, edu.gh, ac.ug, ac.tz, edu.dz, edu.sn
# Infrastructure and Cloud Providers
google.com, gmail.com, googleapis.com, googleusercontent.com, googlevideo.com, gstatic.com, goo.gl, google-analytics.com
amazon.com, amazonaws.com, awsstatic.com, media-amazon.com, awsglobalaccelerator.com
cloudflare.com, cloudflare.net, cf-ipfs.com
microsoft.com, azure.com, windows.net, onmicrosoft.com, office.com, windows.com, microsoftonline.com
apple.com, icloud.com, apple-dns.net
digitalocean.com, digitaloceanspaces.com
github.com, github.io, githubusercontent.com
# CDNs and Edge Networks
# -- Tier-1 CDNs --
akamai.com, akamai.net, akamaiedge.net, akamaihd.net, akamaicdn.net, akamaitechnologies.com
fastly.com, fastly.net, fastlylb.net
cloudfront.net
cdn77.net, cdn77org.net
maxcdn.com, maxcdn.net
stackpath.com, stackpathcdn.com
# -- JS/Asset delivery --
cdn.jsdelivr.net, cdnjs.cloudflare.com, unpkg.com
cdn.cloudflare.com, cloudflare-nginx.com
# -- Budget / Regional Hosting & CDN --
bun.net, buncdn.com
quadranet.com, quadranet.net
leaseweb.com, leasewebcdn.com
ovh.net, ovhcloud.com
vultr.com, vultr.net
linode.com, linode.net
edgio.com, llnwd.net, gcore.com, gcorelabs.com, cdnetworks.com
# Cloud Infrastructure Extensions (AWS, Azure, GCP)
awsdns.com, awsdns.net, awsdns.org, awsdns.co.uk, route53.com, route53.net, route53.org, elasticbeanstalk.com
azureedge.net, trafficmanager.net, cloudapp.net, azurewebsites.net, azure-api.net
1e100.net, appspot.com, googlehosted.com, gcp.net
# WAF & Security
impervadns.net, imperva.com, imprv.com, incapdns.net, sucuri.net
# PaaS & SaaS Hosting
herokuapp.com, herokudns.com, netlify.app, vercel.app, wpengine.com, wpenginepowered.com, myshopify.com, pantheonsite.io, firebaseapp.com, fly.dev, pages.dev, squarespace.com, wixdns.net, webflow.io, workers.dev, deno.dev
# Enterprise E-Commerce & API Gateways
demandware.net, bigcommerce.com, myvtex.com, apigee.net
# Enterprise SaaS, CRM & Email Gateways
zendesk.com, force.com, hubspot.net, sendgrid.net, mailgun.org, pphosted.com, ppe-hosted.com, mimecast.com, barracudanetworks.com, mailcontrol.com, messagelabs.com
# Enterprise Security, WAF & Zero Trust
iphmx.com, zscaler.net, zscaler.com, zscalerone.net, trendmicro.com, trendmicro.eu, sophos.com, fireeye.com, auth.mcafee.com
# Marketing Landing Pages, Surveys & A/B Testing
unbouncepages.com, leadpages.net, instapage.com, typeform.com, qualtrics.com, surveymonkey.com, optimizely.com, vwo.com, createsend.com, constantcontact.com
# Enterprise Video Hosting
wistia.com, brightcove.net, kaltura.com, vimeocdn.com
# B2B Chatbots & Customer Success
drift.com, livechatinc.com, helpscout.net, crisp.chat
# Financial & Payment Gateways
stripe.com, paypal.com, adyen.com, checkout.com
# APAC CDNs (Alibaba, Tencent, Baidu)
kunlunpi.com, alikunlun.com, cdntip.com, yunjiasu-cdn.net
# Identity & Access Management (SSO)
okta.com, oktacdn.com, auth0.com, onelogin.com, pingidentity.com, b2clogin.com, powerappsportals.com
# ITSM, Helpdesk & Status Pages
service-now.com, freshdesk.com, intercom.io, atlassian.net, jira.com, statuspage.io
# Marketing Automation & Additional Email Infra
marketo.com, pardot.com, protection.outlook.com, mandrillapp.com, amazonses.com, sparkpostmail.com
# Additional Global Cloud Providers (Oracle, IBM, Alibaba)
oraclecloud.com, appdomain.cloud, aliyun.com, aliyuncs.com, tencentcloudapi.com
# DNS Infrastructure & Registrars
domaincontrol.com, secureserver.net, registrar-servers.com, nsone.net, ns1.com, dynect.net, ultradns.net, ultradns.com, name-services.com
# Certificate Authorities
letsencrypt.org, ca.letsencrypt.org, acme-v01.api.letsencrypt.org, acme-v02.api.letsencrypt.org
digicert.com, digicertcloud.com, digicerttrust.com, omaha.digicert.com
godaddy.com, gdns1.godaddy.com, gdns2.godaddy.com
globalsign.com, globalsign.net, globalsign.com.mx
comodo.com, comodo.net, security.comodo.com
certum.pl, certum.com, utn.pl
Entrust.com, entrust.net, entrust.com.mx, certificates.entrust.com
thawte.com, thawte.net, thawte.org
geotrust.com, geotrust.net
rapidssl.com, rapidssl.net
symantec.com, verisign.com, verisign.net
sectigo.com, sectigo.net, trust-provider.com
identrust.com, identrust.net
chambersign.org, chambersign.net
startcom.org, startssl.com
wosign.com, wowssl.com
ssl.com, ssls.com
namecheap.com, namecheap.net
namesilo.com, namesilo.net
register.com, register.net
network solutions.com, networksolutions.com
cscglobal.com, cscglobal.net
# Email Services
yahoo.com, outlook.com, hotmail.com, live.com, aol.com, proton.me, protonmail.com, zoho.com, mail.com, gmx.com, fastmail.com, tutanota.com, tuta.com, hey.com
gmx.de, web.de, t-online.de, freenet.de, mail.fr, laposte.net, orange.fr, libero.it, virgilio.it, alice.it, onet.pl, wp.pl, o2.pl, seznam.cz, centrum.cz, i.ua, ukr.net, meta.ua
qq.com, 163.com, 126.com, sina.com, sina.com.cn, sohu.com, rediffmail.com, naver.com, daum.net, hanmail.net, yahoo.co.jp, ymail.ne.jp
mail.ru, yandex.ru, ya.ru, bk.ru, inbox.ru, list.ru, rambler.ru, tut.by
# Social Networks and Shorteners
facebook.com, fb.com, fb.me, m.me, instagram.com, ig.me, whatsapp.com, wa.me, truthsocial.com, reddit.com, redd.it
twitter.com, x.com, t.co, twimg.com, linkedin.com, lnkd.in, telegram.org, telegram.me, t.me
youtube.com, youtu.be, pinterest.com, pin.it, tiktok.com, t.tiktok.com, discord.com, discord.gg, discord.media, discordapp.com, discordapp.net
snapchat.com, snap.com, tumblr.com, tmblr.co, vk.com, vk.cc, vkontakte.ru, ok.ru, odnoklassniki.ru, wechat.com, weixin.qq.com, line.me, twitch.tv, viber.com, mastodon.social
# Communication / VoIP
twilio.com, vonage.com, fullstory.com, heap.io, contentsquare.com, mouseflow.com
# DMARC & Email Security Analytics
dmarcian.com, dmarcian.eu, agari.com, valimail.com, ondmarc.com, returnpath.net, postmarkapp.com
# HR, ATS & Recruiting Platforms
workday.com, myworkday.com, myworkdayjobs.com, taleo.net, bamboohr.com, greenhouse.io, lever.co
# Web Analytics & CNAME Cloaking
2o7.net, omtrdc.net, segment.com, segment.io, amplitude.com
# Enterprise Storage & Collaboration
box.com, box.net, sharepoint.com, sharepointonline.com, dropbox.com, zoom.us, webex.com
# Specialized Media CDNs
cloudinary.com, imgix.net, bunny.net, b-cdn.net, keycdn.com
# Reverse proxy / tunneling
ngrok.io, ngrok.com, tunnel.pyjam.as, localtunnel.me, serveo.net
# Monitoring & APM
datadog.com, newrelic.com, dynatrace.com, sentry.io, pagerduty.com, elastic.co, splunk.com, sumologic.com, rollbar.com, honeycomb.io
# Source code / Artifact hosting
gitlab.com, gitlab.io, bitbucket.org, bitbucket.io, sourceforge.net, npmjs.com, pypi.org, rubygems.org, packagist.org, nuget.org, hub.docker.com
# CI/CD
circleci.com, travis-ci.com, travis-ci.org, teamcity.com, drone.io
# Privacy / Cookie consent & Tag management
onetrust.com, cookiebot.com, trustarc.com, cookiehub.com, tealiumiq.Commerce
# Search-as-a-Service
algolia.com, algolia.net
# Bug Bounty platforms
hackerone.com, bugcrowd.com, intigriti.com, yeswehack.com
[ip]
# Public DNS
8.8.8.8, 8.8.4.4, 1.1.1.1, 1.0.0.1, 9.9.9.9, 149.112.112.112, 208.67.222.222, 208.67.220.220
2001:4860:4860::8888, 2001:4860:4860::8844, 2606:4700:4700::1111, 2606:4700:4700::1001
# Private and Local Networks
127.0.0.1, ::1
10.0.0.0/8, 172.16.0.0/12, 192.168.0.0/16
169.254.0.0/16, fe80::/10
# Cloudflare
173.245.48.0/20, 103.21.244.0/22, 103.22.200.0/22, 103.31.4.0/22, 141.101.64.0/18, 108.162.192.0/18, 190.93.240.0/20, 188.114.96.0/20
197.234.240.0/22, 198.41.128.0/17, 162.158.0.0/15, 104.16.0.0/13, 104.24.0.0/14, 172.64.0.0/13, 131.0.72.0/22
2400:cb00::/32, 2606:4700::/32, 2803:f800::/32, 2405:b500::/32, 2405:8100::/32, 2a06:98c0::/29, 2c0f:f248::/32
# Google
8.8.4.0/24, 8.8.8.0/24, 8.34.208.0/20, 8.35.192.0/20, 8.228.0.0/14, 8.232.0.0/14, 8.236.0.0/15, 23.236.48.0/20, 23.251.128.0/19, 34.0.0.0/15
34.2.0.0/16, 34.3.0.0/23, 34.3.3.0/24, 34.3.4.0/24, 34.3.8.0/21, 34.3.16.0/20, 34.3.32.0/19, 34.3.64.0/18, 34.4.0.0/14, 34.8.0.0/13, 34.16.0.0/12
34.32.0.0/11, 34.64.0.0/10, 34.128.0.0/10, 35.184.0.0/13, 35.192.0.0/14, 35.196.0.0/15, 35.198.0.0/16, 35.199.0.0/17, 35.199.128.0/18, 35.200.0.0/13
35.208.0.0/12, 35.224.0.0/12, 35.240.0.0/13, 35.252.0.0/14, 64.15.112.0/20, 64.233.160.0/19, 66.102.0.0/20, 66.249.64.0/19, 70.32.128.0/19, 72.14.192.0/18
74.114.24.0/21, 74.125.0.0/16, 104.154.0.0/15, 104.196.0.0/14, 104.237.160.0/19, 107.167.160.0/19, 107.178.192.0/18, 108.59.80.0/20, 108.170.192.0/18
108.177.0.0/17, 130.211.0.0/16, 136.22.2.0/23, 136.22.4.0/23, 136.22.8.0/22, 136.22.160.0/20, 136.22.176.0/21, 136.22.184.0/23, 136.22.186.0/24, 136.23.48.0/20
136.23.64.0/18, 136.64.0.0/11, 136.107.0.0/16, 136.108.0.0/14, 136.112.0.0/13, 136.120.0.0/22, 136.124.0.0/15, 142.250.0.0/15, 146.148.0.0/17, 162.120.128.0/17
162.216.148.0/22, 162.222.176.0/21, 172.110.32.0/21, 172.217.0.0/16, 172.253.0.0/16, 173.194.0.0/16, 173.255.112.0/20, 192.104.160.0/23, 192.158.28.0/22
192.178.0.0/15, 193.186.4.0/24, 199.36.154.0/23, 199.36.156.0/24, 199.192.112.0/22, 199.223.232.0/21, 207.175.0.0/16, 207.223.160.0/20, 208.65.152.0/22
208.68.108.0/22, 208.81.188.0/22, 208.117.224.0/19, 209.85.128.0/17, 216.58.192.0/19, 216.73.80.0/20, 216.239.32.0/19, 216.252.220.0/22
2001:4860::/32, 2404:6800::/32, 2404:f340::/32, 2600:1900::/28, 2605:ef80::/32, 2606:40::/32, 2606:73c0::/32, 2607:1c0:241:40::/60, 2607:1c0:300::/40
2607:f8b0::/32, 2620:11a:a000::/40, 2620:120:e000::/40, 2800:3f0::/32, 2a00:1450::/32, 2c0f:fb50::/32
[asn]
# Major Cloud Providers (AWS, Google GCP, Microsoft Azure)
AS16509, AS14618, AS8987, AS39111, AS41224, AS16591 # Amazon AWS
AS15169, AS396982, AS36492, AS139070, AS139190, AS36384, AS43515 # Google
AS8075, AS8068, AS8071, AS8070, AS8069, AS12076, AS23468, AS6584 # Microsoft
# Content Delivery Networks (CDNs) and DDoS Protection
AS13335, AS132892, AS209242, AS394536, AS395747 # Cloudflare
AS20940, AS16625, AS22207, AS35994, AS35993, AS31377 # Akamai
AS54113, AS396356 # Fastly
AS22822, AS33522 # Limelight (Edgio)
AS20446, AS30036 # StackPath
# Top-Tier Global Transit Providers (Tier-1)
AS174 # Cogent
AS3356 # Lumen (Level 3)
AS1299 # Arelion (Telia)
AS2914 # NTT
AS3257 # GTT
AS6453 # Arelion/Tata
AS6762 # Telecom Italia Sparkle
AS6830 # Liberty Global
AS7018 # AT&T
AS5511 # Orange
AS3491 # PCCW
AS1239 # Sprint
AS6939 # Hurricane Electric
AS36351 # SoftLayer/IBM
# Security & Zero Trust Networks
AS394711, AS22616 # Zscaler
AS32098 # Palo Alto Networks