Developer Reference

IP Geolocation

Explore IP Geolocation API documentation, request parameters, response fields, code examples, and error handling for DomScan integrations.

IP Geolocation

Comprehensive IP intelligence including geolocation, ASN/network info, and security signals. Supports both direct IP lookups and domain resolution. Enriched with Tor exit node detection, cloud provider identification, and datacenter detection for fraud prevention and security analysis.

GET /v1/ip

Query Parameters

Parameter	Type	required
ip	string	optional
domain	string	optional

Response Fields

Field	Type
`ip`	string
`domain`	string \| null
`geolocation`	object
`geolocation.country`	string \| null
`geolocation.country_name`	string \| null
`geolocation.region`	string \| null
`geolocation.region_name`	string \| null
`geolocation.city`	string \| null
`geolocation.postal`	string \| null
`geolocation.latitude`	number \| null
`geolocation.longitude`	number \| null
`geolocation.timezone`	string \| null
`geolocation.precision`	string
`network`	object
`network.asn`	integer \| null
`network.asn_name`	string \| null
`network.asn_org`	string \| null
`network.isp`	string \| null
`network.connection_type`	string \| null
`security`	object
`security.is_proxy`	boolean
`security.is_vpn`	boolean
`security.is_tor`	boolean
`security.is_tor_exit`	boolean
`security.is_datacenter`	boolean
`security.is_cloud`	boolean
`security.cloud_provider`	string \| null
`security.threat_score`	integer
`security.is_vpn_suspected`	boolean
`security.vpn_suspected_provider`	string \| null
`security.type_classification`	object
`security.type_classification.type`	string
`security.type_classification.confidence`	string
`security.fcrdns`	object
`security.fcrdns.ptr`	string \| null
`security.fcrdns.fcrdns_valid`	boolean \| null
`intelligence_summary`	object
`intelligence_summary.query_type`	string
`intelligence_summary.domain_resolved`	boolean
`intelligence_summary.cache_status`	string
`intelligence_summary.data_source`	string
`intelligence_summary.confidence`	string
`intelligence_summary.confidence_score`	integer
`intelligence_summary.asn_present`	boolean
`intelligence_summary.organization_present`	boolean
`intelligence_summary.country_present`	boolean
`intelligence_summary.security_signal_count`	integer
`intelligence_summary.risk_flags[]`	string[]
`intelligence_summary.hosting_category`	string
`meta`	object
`meta.query_time_ms`	integer
`meta.cached`	boolean
`meta.source`	string
`meta.warning_code`	string \| null

Example Request

curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/ip?ip=8.8.8.8&domain=status.openai.com"

Example Response

{
  "ip": "8.8.8.8",
  "domain": null,
  "geolocation": {
    "country": "US",
    "country_name": "United States",
    "region": null,
    "region_name": null,
    "city": null,
    "postal": null,
    "latitude": null,
    "longitude": null,
    "timezone": null,
    "precision": "country"
  },
  "network": {
    "asn": 15169,
    "asn_name": "AS15169",
    "asn_org": "Google LLC",
    "isp": "Google LLC",
    "connection_type": "hosting"
  },
  "security": {
    "is_proxy": false,
    "is_vpn": false,
    "is_tor": false,
    "is_tor_exit": false,
    "is_datacenter": true,
    "is_cloud": true,
    "cloud_provider": "Google Cloud",
    "threat_score": 0,
    "type_classification": {
      "type": "datacenter",
      "confidence": "high"
    },
    "fcrdns": {
      "ptr": "dns.google",
      "fcrdns_valid": true
    }
  },
  "intelligence_summary": {
    "query_type": "ip",
    "domain_resolved": false,
    "cache_status": "miss",
    "data_source": "cloudflare-intel+enrichment",
    "confidence": "high",
    "confidence_score": 100,
    "asn_present": true,
    "organization_present": true,
    "country_present": true,
    "security_signal_count": 2,
    "risk_flags": [
      "cloud",
      "datacenter"
    ],
    "hosting_category": "cloud"
  },
  "meta": {
    "query_time_ms": 118,
    "cached": false,
    "source": "cloudflare-intel+enrichment"
  }
}