Passive domain reconnaissance data for security research, automation, and scale.
Reconeer provides passive reconnaissance data for domains, subdomains, and IP addresses. All data is sourced from previously observed infrastructure — no brute-force, no DNS guessing, and no active probing.
Reconeer is designed for:
Get domain intelligence
GET /api/domain/{domain}
Returns passive subdomains, IPs, counts, and metadata.
curl https://reconeer.com/api/domain/example.com
Get IP intelligence
GET /api/ip/{ip}
curl https://reconeer.com/api/ip/8.8.8.8
Get subdomain details
GET /api/subdomain/{subdomain}
curl https://reconeer.com/api/subdomain/sub.example.com
Reconeer currently allows unauthenticated access for evaluation and testing.
An optional API key may be supplied:
X-API-Key: your_api_key_here
API keys are currently used for rate-limit isolation and automation workflows.
To ensure platform stability, fair-use rate limits are applied.
When exceeded, the API responds with:
HTTP 429 Too Many Requests
Reconeer subscriptions are designed for users who rely on continuous reconnaissance and automation.
If Reconeer becomes part of your workflow, a subscription ensures speed, consistency, and scale.
Reconeer is a passive-only data source and is safe for continuous use in automated tooling.
Source code & examples: GitHub Repository