Quickstart — make your first DomainScan API call in under a minute.
You don't need an account to test the API. The first cURL below is a real, anonymous, public-tier request — paste it into a terminal and it returns a WHOIS-equivalent record for google.com. Once you're sure you want to integrate, create a free account for 100 API credits/month plus higher rate limits and per-key analytics.
Anonymous WHOIS lookup — works right now
Run this from anywhere. No setup, no key, no signup. Anonymous traffic is rate-limited per IP at 20 req/min / 200 req/day.
curl 'https://api.domainscan.in/api/v1/domain/lookup?domain=google.com'{
"success": true,
"data": {
"domain": "google.com",
"tld": "com",
"details": {
"dates": { "creationDate": "1997-09-15T04:00:00.000Z", "expiryDate": "2028-09-14T04:00:00.000Z" },
"registrar": { "name": "MarkMonitor Inc.", "ianaId": "292" },
"nameServers": [ { "name": "ns1.google.com" }, { "name": "ns2.google.com" } ]
}
}
}Add authentication for higher quotas
Anonymous works for evaluation. For production, create a free account and use a bearer token — quotas scale to the plan and you get per-key usage analytics.
curl 'https://api.domainscan.in/api/v1/security/ssl-info?domain=github.com' \
-H 'Authorization: Bearer ds_live_YOUR_KEY'const res = await fetch(
'https://api.domainscan.in/api/v1/domain/dns?domain=cloudflare.com&type=MX',
{ headers: { Authorization: 'Bearer ds_live_YOUR_KEY' } }
);
if (!res.ok) {
const err = await res.json();
throw new Error(`${err.error.code}: ${err.error.message}`);
}
const { data } = await res.json();
console.log(data);import requests
res = requests.get(
'https://api.domainscan.in/api/v1/domain/lookup',
params={'domain': 'github.com'},
headers={'Authorization': 'Bearer ds_live_YOUR_KEY'},
timeout=30,
)
res.raise_for_status()
print(res.json()['data'])Where to go from here
Three reading paths depending on what you're building:
27 endpoints across Domain, Network/IP, Security. Each page shows params, response schema, errors, best practices and a try-it panel.
Multi-key isolation, key rotation, anonymous fallback, secret management best practices.
Per-plan caps, burst behavior, X-RateLimit-* headers, retry strategy.
Every error code with the right client-side reaction.