ReputeX
[ Developer Platform ]

REST API & Live Playground

Integrate high-speed multi-engine IP reputation intelligence directly into your firewalls, mail transfer agents (Postfix/Exim), SIEM, or security pipelines with sub-second latency.

Active Base URL http://localhost:8080
Total Threat Feeds 47 Active DNSBL Feeds
Response Formats JSON • Server-Sent Events

Authentication & Headers

Public RBL queries (Spamhaus, Barracuda, SpamCop, etc.) require no authentication. If you wish to query the Google Safe Browsing v4 Threat Intelligence API, you can supply your Google API Key via query param or HTTP Header:

# Method 1: HTTP Header (Recommended) X-Google-Api-Key: AIzaSyCrvg6EXAMPLEKEY1234567890 # Method 2: URL Query Parameter GET http://localhost:8080/api/check?ip=8.8.8.8&google_key=AIzaSyCrvg6EXAMPLEKEY1234567890
GET /api/check
Synchronous Full Audit

Executes a full multi-threaded reputation audit across all 47 DNSBL feeds, Reverse DNS PTR, GeoIP, ASN metadata, and Google Safe Browsing heuristics.

Try It Out Console Live In-Browser Execution
Presets:
Live Server Response:
Click "Execute Request" above to test this endpoint live.
SSE /api/stream
Server-Sent Events

Streams real-time progress events per DNSBL query as they resolve in parallel, emitting init, item, and complete payload frames.

Real-Time SSE Stream Runner Idle
⚡ SSE Event stream ready. Click "Connect SSE Stream" to start live subscription.
GET /api/rbls
Feed Catalog

Returns the full database catalog of all 47 supported DNSBL / RBL providers, including zone hosts, threat categories, risk weights, and official delist URLs.

No parameters required.
Click "Fetch RBL Database" to view the complete provider catalog.
GET /api/myip
IP Resolver

Resolves the caller's public IP address with full support for X-Forwarded-For and X-Real-IP reverse proxy headers.

No parameters required.
Click "Detect My IP" to execute query.
GET /api/email-auth
Email Authentication Suite

Audits comprehensive email authentication and domain deliverability protocols including SPF (RFC 7208), DMARC (RFC 7489), DKIM (RFC 6376), MX Routing, BIMI, and MTA-STS (RFC 8461). Computes an overall deliverability score (0 - 100) and actionable remediation checklist.

Parameter Type Required Description
domain string required Target domain name (e.g. google.com, paypal.com) or email address (e.g. admin@domain.com).
ip string optional Sender IP address to test for SPF authorization match (e.g. 1.2.3.4).
selector string optional Specific DKIM selector name (e.g. google, k1, s1, default). If omitted, 20+ top selectors are probed automatically.
Interactive API Playground
Queries live DNS records directly across global root resolvers.
Click "Validate Domain Authentication" to view live JSON response.
GET /api/test-google-key
API Validation

Performs a real-time verification handshake with Google Cloud Safe Browsing v4 API to confirm credentials validity.

Key is verified against Google Cloud endpoints.
Input key and click "Verify Google API Key".