The playground

Try any of 919 endpoints — live.

Pick an endpoint, load a working example, tweak the params, and send — no signup to try. Results render the way the data deserves; raw JSON, headers & code are one tab away.

Playground demo key · api.reefapi.com

post/passive-osint/v1/domain3 credits

One-call unified passive report: subdomains + DNS summary + SSL summary + archive first/last-seen + threat blocklist flags, each section degrading independently

Working example

Parameters

domainrequired

The registrable domain to enrich (a bare host like example.com; a full URL or leading www. is accepted and normalized). NOT a person.

sourcesoptional

Which passive sources to query (comma-separated string or array). Defaults to all five. Unknown names are ignored.

include_piioptional

If true, reveal the RDAP abuse mailbox / contact email. Default false → contact emails are masked (R17 privacy hygiene).

request preview

curl -X POST https://api.reefapi.com/passive-osint/v1/domain \
  -H "x-api-key: $REEF_KEY" \
  -H "content-type: application/json" \
  -d '{"domain":"github.com"}'

Hit Send to run this endpoint live.