Subdomain Finder API reference

Operations

GET /v1/subdomains View API reference

POST /v1/subdomains/bulk View API reference

GET `/v1/subdomains`

Operation: getSubdomains Credits and authentication: 4-5 Authentication required

GET /v1/subdomains

Query Parameters

Parameter	Type	required
domain	string	required
sources	string Allowed values `ct` Default `ct`	optional
verify	string Allowed values `truefalse10yesno` Default `false`	optional
include_wildcards	string Allowed values `truefalse10yesno` Default `false`	optional
limit	integer Default `500`	optional
prefer_cache	string Allowed values `truefalse10yesno` Default `false`	optional

Response Fields

Field	Type
`domain`	string
`subdomains[]`	object[]
`subdomains[]`	object
`subdomains[].name`	string
`subdomains[].source`	string
`subdomains[].first_seen`	string \| null
`subdomains[].verified`	boolean
`subdomains[].dns_records`	object
`subdomains[].dns_records.A[]`	string[]
`subdomains[].dns_records.CNAME`	string \| null
`wildcards[]`	object[]
`wildcards[]`	object
`wildcards[].pattern`	string
`wildcards[].source`	string
`wildcards[].first_seen`	string \| null
`summary`	object
`summary.total_found`	integer
`summary.returned`	integer
`summary.verified_count`	integer
`summary.unverified_count`	integer
`summary.sources_used[]`	string[]
`summary.apex_included`	boolean
`summary.wildcard_suppressed_count`	integer
`summary.wildcard_returned_count`	integer
`intelligence_summary`	object
`intelligence_summary.data_sources[]`	string[]
`intelligence_summary.source_count`	integer
`intelligence_summary.cache_status`	string
`intelligence_summary.returned_count`	integer
`intelligence_summary.total_found`	integer
`intelligence_summary.truncated`	boolean
`intelligence_summary.limit`	integer
`intelligence_summary.verification_requested`	boolean
`intelligence_summary.include_wildcards`	boolean
`intelligence_summary.verified_count`	integer
`intelligence_summary.verified_ratio`	number \| null
`intelligence_summary.live_dns_record_count`	integer
`intelligence_summary.apex_included`	boolean
`intelligence_summary.wildcard_suppressed_count`	integer
`intelligence_summary.wildcard_returned_count`	integer
`intelligence_summary.first_seen_oldest`	string \| null
`intelligence_summary.first_seen_newest`	string \| null
`intelligence_summary.warning_count`	integer
`warnings[]`	string[]
`meta`	object
`meta.query_time_ms`	integer
`meta.cached`	boolean
`meta.stale`	boolean

Example Request

curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/subdomains?domain=example.com&sources=example.com&verify=yes&include_wildcards=1&limit=500&prefer_cache=false"

Example Response

{
  "domain": "example.com",
  "subdomains": [
    {
      "name": "api.example.com",
      "source": "crtsh",
      "first_seen": "2025-01-15T00:00:00Z",
      "verified": true,
      "dns_records": {
        "A": [
          "string"
        ],
        "CNAME": "string"
      }
    }
  ],
  "wildcards": [
    {
      "pattern": "*.example.com",
      "source": "ct",
      "first_seen": "string"
    }
  ],
  "summary": {
    "total_found": 1,
    "returned": 1,
    "verified_count": 1,
    "unverified_count": 1,
    "sources_used": [
      "ct"
    ],
    "apex_included": true,
    "wildcard_suppressed_count": 1,
    "wildcard_returned_count": 1
  },
  "intelligence_summary": {
    "data_sources": [
      "ct"
    ],
    "source_count": 1,
    "cache_status": "live",
    "returned_count": 1,
    "total_found": 1,
    "truncated": true,
    "limit": 1,
    "verification_requested": true,
    "include_wildcards": true,
    "verified_count": 1,
    "verified_ratio": 1,
    "live_dns_record_count": 1,
    "apex_included": true,
    "wildcard_suppressed_count": 1,
    "wildcard_returned_count": 1,
    "first_seen_oldest": "string",
    "first_seen_newest": "string",
    "warning_count": 1
  },
  "warnings": [
    "string"
  ],
  "meta": {
    "query_time_ms": "2026-04-15T12:00:00Z",
    "cached": true,
    "stale": true
  }
}

POST `/v1/subdomains/bulk`

Operation: bulkGetSubdomains Credits and authentication: 4-5 Authentication required

POST /v1/subdomains/bulk

Body Parameters

Parameter	Type	required
domains	string[]	required
verify	boolean Default `false`	optional
include_wildcards	boolean Default `false`	optional
limit	integer Default `500`	optional

Response Fields

Field	Type
`results[]`	unknown[]
`meta`	object
`meta.total`	integer
`meta.succeeded`	integer
`meta.failed`	integer
`meta.max_items`	integer
`meta.credits_per_item`	integer
`meta.duration_ms`	integer

Example Request

curl -X POST "https://domscan.net/v1/subdomains/bulk" \
  -H "Content-Type: application/json" \
  -H "X-API-Key: $DOMSCAN_API_KEY" \
  -d '{
  "domains": [
    "example.com",
    "cloudflare.com"
  ],
  "verify": false,
  "limit": 500
}'

Example Response

{
  "results": [
    null
  ],
  "meta": {
    "total": 1,
    "succeeded": 1,
    "failed": 1,
    "max_items": 10,
    "credits_per_item": 1,
    "duration_ms": 1
  }
}

Reference resources

OpenAPI 3.0 Postman MCP