docs / domain-intel

Domain Intelligence

Domain, DNS and WHOIS lookups.

base /domain-intel/v112 endpoints

post/domain-intel/v1/whois1 credit

Domain registration (WHOIS) via RDAP: registrar (+ IANA id), reseller, status flags, created/updated/expires dates, nameservers, DNSSEC flag, abuse contact, and registrant (org-only unless include_pii). Legacy-WHOIS-only TLDs (.io/.de) return NOT_FOUND — see tld_detail.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
raw = false	optional	—	If true, also attach the raw upstream RDAP JSON under whois.raw_rdap.
include_pii = false	optional	—	If true, return the full WHOIS/RDAP registrant contact (vCard). Default false → personal data is dropped (GDPR), organization kept.

Try in playground →

post/domain-intel/v1/dns1 credit

DNS records over DNS-over-HTTPS: A/AAAA/MX/TXT/NS/CNAME/SOA/CAA by default; PTR/SRV/DS/DNSKEY/TLSA and any RR type on request via the 'types' param.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
types	optional	A · AAAA · MX · TXT · NS · CNAME · SOA · CAA · PTR · SRV · DS · DNSKEY · TLSA	Which DNS record types to query (comma-separated string or array). Defaults to A,AAAA,MX,TXT,NS,CNAME,SOA,CAA. PTR/SRV/DS/DNSKEY/TLSA and any other RR type are accepted and passed through to the resolver.

Try in playground →

post/domain-intel/v1/reverse_dns1 credit

Reverse DNS (PTR): the hostname each of the domain's A/AAAA IPs resolves back to, or pass an explicit IPv4/IPv6 to PTR that single address. Missing PTR is a common mail-rejection cause.

Parameter		Allowed / range	Description
domain	required	—	A domain (PTR each of its A/AAAA IPs) OR an explicit IPv4/IPv6 address (PTR that single address).

Try in playground →

post/domain-intel/v1/hosting1 credit

Hosting / ASN / IP-owner: resolves the domain's A+AAAA IPs and looks up each via Team Cymru — ASN, announced prefix, country, RIR, AS-name (network owner) + reverse DNS. Tells you who hosts a domain and on what network.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).

Try in playground →

post/domain-intel/v1/dnssec1 credit

DNSSEC signing status: the DoH AD (Authenticated-Data) flag (the resolver cryptographically validated the answer), the DS record at the parent (delegation signed), and DNSKEY presence — plus a broken-chain warning (DS without DNSKEY).

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).

Try in playground →

post/domain-intel/v1/ssl_certs1 credit

SSL/TLS certificates from Certificate Transparency (CT) logs (certspotter primary, crt.sh deep fallback): issuer, common name, SANs, validity window, serial, expired flag.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
limit = 50	optional	1–	Max certificates to return (newest first). Default 50.
deep = false	optional	—	If true, query the full crt.sh CT-log history first (slower, deeper, more subdomains) instead of the fast certspotter source.

Try in playground →

post/domain-intel/v1/subdomains1 credit

Subdomain discovery via Certificate-Transparency-log cert SANs (the standard passive method; pass deep=true for full crt.sh history = more results).

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
deep = false	optional	—	If true, query the full crt.sh CT-log history first (slower, deeper, more subdomains) instead of the fast certspotter source.

Try in playground →

post/domain-intel/v1/availability1 credit

Domain registration availability via RDAP (registered ⇔ an RDAP record exists). Caveat: legacy-WHOIS-only TLDs report 'available' falsely — surfaced in the note.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).

Try in playground →

post/domain-intel/v1/tld_listfree

The IANA list of all delegated top-level domains (optionally substring-filtered).

Parameter		Allowed / range	Description
search	optional	—	Case-insensitive substring filter over the IANA TLD list (e.g. 'shop' → shop, shopping).
limit	optional	1–	Max TLDs to return (0/unset = all ~1450).

Try in playground →

post/domain-intel/v1/tld_detailfree

Per-TLD metadata: ccTLD vs gTLD and its IANA RDAP server(s) (or a note that it is legacy-WHOIS-only, which explains why whois/availability 404 for that TLD).

Parameter		Allowed / range	Description
tld	required	—	A top-level domain, with or without a leading dot (e.g. com, io, co.uk). Returns its type + IANA RDAP server(s).

Try in playground →

post/domain-intel/v1/tech_detect1 credit

Tech-stack fingerprint from the homepage response headers + HTML: web server, CDN, and frameworks/CMS (WordPress, Next.js, Shopify, React, …).

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).

Try in playground →

post/domain-intel/v1/full_report3 credits

One-call merge: whois + dns + dnssec + ssl_certs + subdomains (and optionally tech + hosting). meta.sections shows per-part status.

Parameter		Allowed / range	Description
domain	required	—	The domain to inspect (a bare host like github.com; a full URL, a leading www., or a full email address are accepted and normalized to the registrable domain).
include_tech = false	optional	—	If true, also run the tech-stack fingerprint section in full_report.
include_hosting = false	optional	—	If true, also run the hosting/ASN/IP-owner section in full_report.
include_pii = false	optional	—	If true, return the full WHOIS/RDAP registrant contact (vCard). Default false → personal data is dropped (GDPR), organization kept.
deep = false	optional	—	If true, query the full crt.sh CT-log history first (slower, deeper, more subdomains) instead of the fast certspotter source.

Try in playground →

Example request · whois

curl -X POST https://api.reefapi.com/domain-intel/v1/whois \
  -H "x-api-key: $REEF_KEY" \
  -H "content-type: application/json" \
  -d '{"domain":"github.com"}'

Response shape

{
  "ok": true,
  "data": { /* the result */ },
  "meta": {
    "latency_ms": 240,
    "record_count": 12,
    "completeness_pct": 100
  },
  "error": null
}