Looking for the overview — what this API returns, what it costs, and a call you can run without a key? See the Domain Intelligence API page →

docs / domain-intel

Domain Intelligence

Domain, DNS and WHOIS lookups.

base /domain-intel/v112 endpoints

post/domain-intel/v1/whois1 credit

Domain registration (WHOIS) via RDAP: registrar (+ IANA id), reseller, status flags, created/updated/expires dates, nameservers, DNSSEC flag, abuse contact, and registrant (org-only unless include_pii). Legacy-WHOIS-only TLDs (.io/.de) return NOT_FOUND — see tld_detail.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
raw = false	optional	—	If true, also attach the raw upstream RDAP JSON under whois.raw_rdap.
include_pii = false	optional	—	If true, return the full WHOIS/RDAP registrant contact (vCard). Default false → personal data is dropped (GDPR), organization kept.

Try in playground →

post/domain-intel/v1/dns1 credit

DNS records over DNS-over-HTTPS: A/AAAA/MX/TXT/NS/CNAME/SOA/CAA by default; PTR/SRV/DS/DNSKEY/TLSA and any RR type on request via the 'types' param.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
types	optional	A · AAAA · MX · TXT · NS · CNAME · SOA · CAA · PTR · SRV · DS · DNSKEY · TLSA	Which DNS record types to query (comma-separated string or array). Defaults to A,AAAA,MX,TXT,NS,CNAME,SOA,CAA. PTR/SRV/DS/DNSKEY/TLSA and any other RR type are accepted and passed through to the resolver.

Try in playground →

post/domain-intel/v1/reverse_dns1 credit

Reverse DNS (PTR): the hostname each of the domain's A/AAAA IPs resolves back to, or pass an explicit IPv4/IPv6 to PTR that single address. Missing PTR is a common mail-rejection cause.

Parameter		Allowed / range	Description
domain	required	—	A domain (PTR each of its A/AAAA IPs) OR an explicit IPv4/IPv6 address (PTR that single address).

Try in playground →

post/domain-intel/v1/hosting1 credit

Hosting / ASN / IP-owner: resolves the domain's A+AAAA IPs and looks up each via Team Cymru — ASN, announced prefix, country, RIR, AS-name (network owner) + reverse DNS. Tells you who hosts a domain and on what network.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).

Try in playground →

post/domain-intel/v1/dnssec1 credit

DNSSEC signing status: the DoH AD (Authenticated-Data) flag (the resolver cryptographically validated the answer), the DS record at the parent (delegation signed), and DNSKEY presence — plus a broken-chain warning (DS without DNSKEY).

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).

Try in playground →

post/domain-intel/v1/ssl_certs1 credit

SSL/TLS certificates from Certificate Transparency (CT) logs (certspotter primary, crt.sh deep fallback): issuer, common name, SANs, validity window, serial, expired flag.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
limit = 50	optional	1–	Max certificates to return (newest first). Default 50.
deep = false	optional	—	If true, query the full crt.sh CT-log history first (slower, deeper, more subdomains) instead of the fast certspotter source.

Try in playground →

post/domain-intel/v1/subdomains1 credit

Subdomain discovery via Certificate-Transparency-log cert SANs (the standard passive method; pass deep=true for full crt.sh history = more results).

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
deep = false	optional	—	If true, query the full crt.sh CT-log history first (slower, deeper, more subdomains) instead of the fast certspotter source.

Try in playground →

post/domain-intel/v1/availability1 credit

Domain registration availability via RDAP (registered ⇔ an RDAP record exists). Caveat: legacy-WHOIS-only TLDs report 'available' falsely — surfaced in the note.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).

Try in playground →

post/domain-intel/v1/tld_list1 credit

The IANA list of all delegated top-level domains (optionally substring-filtered).

Parameter		Allowed / range	Description
search	optional	—	Case-insensitive substring filter over the IANA TLD list (e.g. 'shop' → shop, shopping).
limit	optional	1–	Max TLDs to return (0/unset = all ~1450).

Try in playground →

post/domain-intel/v1/tld_detail1 credit

Per-TLD metadata: ccTLD vs gTLD and its IANA RDAP server(s) (or a note that it is legacy-WHOIS-only, which explains why whois/availability 404 for that TLD).

Parameter		Allowed / range	Description
tld	required	—	A top-level domain, with or without a leading dot (e.g. com, io, co.uk). Returns its type + IANA RDAP server(s).

Try in playground →

post/domain-intel/v1/tech_detect1 credit

Tech-stack fingerprint from the homepage response headers + HTML: web server, CDN/WAF, and frameworks/CMS/analytics (WordPress, Next.js, Shopify, React, Bitrix, Tilda, Yandex.Metrica, …). Tries https, then plain http, then the www host, so HTTP-only and www-only-certificate sites are fingerprinted instead of reported as blocked; `https_available` tells you which it was.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).

Try in playground →

post/domain-intel/v1/full_report3 credits

One-call merge: whois + dns + dnssec + ssl_certs + subdomains (and optionally tech + hosting). meta.sections shows per-part status.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
include_tech = false	optional	—	If true, also run the tech-stack fingerprint section in full_report.
include_hosting = false	optional	—	If true, also run the hosting/ASN/IP-owner section in full_report.
include_pii = false	optional	—	If true, return the full WHOIS/RDAP registrant contact (vCard). Default false → personal data is dropped (GDPR), organization kept.
deep = false	optional	—	If true, query the full crt.sh CT-log history first (slower, deeper, more subdomains) instead of the fast certspotter source.

Try in playground →

Example request · whois

curl -X POST https://api.reefapi.com/domain-intel/v1/whois \
  -H "x-api-key: $REEF_KEY" \
  -H "content-type: application/json" \
  -d '{"domain":"github.com"}'

Response shape

{
  "ok": true,
  "data": { /* the result */ },
  "meta": {
    "latency_ms": 240,
    "record_count": 12,
    "completeness_pct": 100
  },
  "error": null
}

Built for volume

5M+ requests a day

Measured at 60 requests a second across the fleet, with no central bottleneck. Volume pricing is on request, and per-key limits are raised for high-volume accounts.

Missing a source?

We build it

Tell us a site we do not cover yet and it becomes an engine. A customer asked for bestprice.gr on a Sunday and it was in the catalog the next day.

Support

2 minute median reply

Median time from a question in the live chat to the first answer, measured across every answered conversation. Setup help included, no support tier to buy.

One key, one balance

Every API included

No per-site plans and no separate subscriptions. One key and one credit pool across the whole catalog, so adding a source costs nothing up front.

Planning something large? Tell us the volume and the sources and we will come back with what it costs and what we would have to build.

Comparing scraping APIs?ReefAPI vs DataForSEO ReefAPI vs Octoparse ReefAPI vs ParseHub