01

About

Subdomain intelligence for external attack surface research.

PugRecon provides a searchable dataset and API workflow for discovering subdomains and reviewing public cloud bucket names.

02

Built by

Daniel Matsumoto

Daniel Matsumoto

@c3l3si4n

Security researcher and developer.

03

Product scope

Subdomain search

Query domains and export discovered names.

Bucket search

Search supported public cloud storage providers.

API access

Generate keys and use bearer-token requests.

04

Dataset facts

A few numbers from the corpus

3.26B tracked names

The current index contains 3,260,267,818 observed DNS names available for search.

50.9% end in .com

.com accounts for 1,657,876,568 tracked names, making it the largest familiar ending in the dataset.

63.6% use .com, .net, or .org

Together, those three endings cover 2,073,309,882 tracked names.

6.4M point to localhost

The DNS value index includes 6,396,770 records pointing at 127.0.0.1, ::1, or localhost.