Domain & Web Intelligence 10 Endpoints 12 Key Features

Tech Stack Detection API

Discover what powers a public website with fast HTTP inspection, sandboxed JavaScript rendering, and bounded same-origin multi-page analysis. Use synchronous bulk scans or durable asynchronous jobs for larger target lists.

Category Domain & Web Intelligence
Endpoints 10
Key Features 12
Frequently Asked Questions 3

Used by people at amazing companies

VercelLLM PulseOLXCasa ModernaPipeCal.comBeehiivSnykTogglRemoteSprigDeel

Trust signals before you integrate

Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.

Live Service status

Check live service health and documented failure responses before you integrate.

OpenAPI API artifacts

OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.

API keys Protected access

Authenticated endpoints use API keys with clear credit costs before you call them.

10,000 Free allowance

Start with 10,000 monthly credits and upgrade only when usage grows.

What this API helps you ship

Use this page as a production brief: endpoints, examples, response shape, and the workflow pieces needed to plug DomScan into your own product.

Product workflows

Embed domain checks, DNS intelligence, risk signals, or enrichment into onboarding, search, and internal tools.

Analyst automation

Replace repeated manual lookups with scheduled jobs, alerting, and reproducible investigation steps.

Clean JSON data

Use predictable fields, documented status codes, and credit costs instead of scraping provider pages.

AI and ops tooling

Feed agents, dashboards, SOAR playbooks, and CRMs through OpenAPI, SDK, Postman, or MCP.

Integration workflow

A simple path from first request to repeatable production usage.

1
Authenticate once

Send your API key with the documented header and keep requests consistent across services.

2
Query with examples

Start from the curl and HTTP samples, then map the parameters into your application code.

3
Operate and monitor

Use status codes, credit costs, and response fields to build retries, logs, and alerts.

Developer kit

Jump from this page into machine-readable docs, request collections, SDKs, or agent tooling.

Parameters and response map

Scan the inputs, output fields, and status codes before wiring the endpoint into your client.

Request parameters

Parameter

urldomainmodemax_pagestargetslimitcursorjob_iddomains
Response fields

Example Response

urltechnologiesdetection_summarydetection_summary.detected_countdetection_summary.category_countdetection_summary.categoriesdetection_summary.high_confidence_countdetection_summary.medium_confidence_countdetection_summary.low_confidence_countdetection_summary.versioned_countdetection_summary.evidence_sourcesdetection_summary.evidence_sources.header
Status coverage

HTTP Status Codes

200202400401402409429503

Endpoints

GET /v1/tech
Credits: 3-9Authentication: Authentication required
urldomainmodemax_pages
POST /v1/tech/bulk
Credits: 3/itemAuthentication: Authentication required
targets
POST /v1/tech/jobs
Credits: 3/itemAuthentication: Authentication required
targetsmodemax_pages
GET /v1/tech/jobs
Credits: 0Authentication: Authentication required
limitcursor
GET /v1/tech/jobs/:job_id
Credits: 0Authentication: Authentication required
job_id
GET /v1/tech/jobs/:job_id/results
Credits: 0Authentication: Authentication required
job_idlimitcursor
DELETE /v1/tech/jobs/:job_id
Credits: 0Authentication: Authentication required
job_id
GET /v1/hosting
Credits: 3Authentication: Authentication required
domain
POST /v1/hosting/bulk
Credits: 3/itemAuthentication: Authentication required
domains
GET /v1/parking
Credits: 2Authentication: Authentication required
domain

Trust signals before you integrate

Transparent docs, authenticated requests, and visible reliability details make it easier to evaluate DomScan before you ship.

Service status API artifacts

OpenAPI, Swagger, Postman, CLI, SDK, and MCP links are one click away.

API keys Protected access

Authenticated endpoints use API keys with clear credit costs before you call them.

Free allowance Sign Up for Free

Start with 10,000 monthly credits and upgrade only when usage grows.

Active Example Request

Start from the curl and HTTP samples, then map the parameters into your application code.

Key Features

CDN Detection

Identify Cloudflare, Fastly, AWS CloudFront, Akamai, and more.

Framework Detection

Detect Next.js, React, Vue, Angular, Svelte, and others.

CMS Detection

Identify WordPress, Shopify, Wix, Squarespace, Webflow, etc.

Analytics Tracking

Find Google Analytics, GTM, Mixpanel, Segment, and more.

Server Software

Detect nginx, Apache, IIS, LiteSpeed web servers.

Confidence Levels

Each match includes a numeric confidence score, a high/medium/low label, and caveats. These describe the observed signals, not a guarantee of accuracy.

Header Analysis

Observed response headers are included, with sensitive values redacted.

Security Research

Useful for vulnerability assessment and competitive analysis.

JavaScript Rendering

Observe declared runtime globals and requested network URLs in an isolated browser without exposing JavaScript values.

Multi-Page Detection

Deep mode analyzes up to five representative same-origin pages and attributes evidence to the page where it was observed.

Fast Bulk Scans

Scan up to 10 ordered targets synchronously with per-item validation, billing, errors, and refunds.

Durable Async Jobs

Process up to 100 targets with idempotent job creation, progress polling, signed pagination, cancellation, and expiring results.

Example Request

GET /v1/tech bash
curl -H "X-API-Key: $DOMSCAN_API_KEY" "https://domscan.net/v1/tech?url=https://wordpress.example/&mode=rendered"

Example Response

200 OK json
{
  "url": "https://wordpress.example/",
  "technologies": [
    {
      "id": "wordpress",
      "name": "WordPress",
      "category": "cms",
      "version": "6.8.2",
      "version_kind": "product",
      "confidence": "high",
      "confidence_score": 98,
      "evidence": "Meta: generator",
      "evidence_details": [
        {
          "source": "meta",
          "key": "generator",
          "matched": "WordPress 6.8.2"
        }
      ],
      "source_count": 1,
      "caveats": [
        "generator_can_be_removed_or_spoofed",
        "asset_paths_can_be_rewritten"
      ],
      "reference": {
        "website": "https://wordpress.org/",
        "source_url": "https://developer.wordpress.org/reference/functions/get_the_generator/",
        "source_owner": "WordPress.org",
        "source_kind": "official_docs",
        "access": "public",
        "access_method": "target_response_inspection",
        "cost": "none",
        "terms_status": "public_source_reviewed_factual_signature",
        "expected_freshness": "reverify_on_source_or_signature_change",
        "maintenance_risk": "medium",
        "runtime_rate_limits": "not_applicable_no_source_request",
        "fallback_behavior": "unmatched_or_unavailable_signal_is_not_detected",
        "last_verified": "2026-07-15"
      }
    }
  ],
  "detection_summary": {
    "detected_count": 1,
    "category_count": 1,
    "categories": [
      "cms"
    ],
    "high_confidence_count": 1,
    "medium_confidence_count": 0,
    "low_confidence_count": 0,
    "versioned_count": 1,
    "evidence_sources": {
      "header": 0,
      "html": 0,
      "asset_url": 0,
      "network_url": 0,
      "javascript": 0,
      "meta": 1,
      "cookie": 0,
      "url": 0
    },
    "catalog_size": 522,
    "catalog_category_count": 87,
    "summary_field_count": 1
  },
  "summary": {
    "cms": "WordPress"
  },
  "meta": {
    "title": "Example WordPress site",
    "description": "A reserved example response for the technology detection contract.",
    "canonical_url": "https://wordpress.example/",
    "language": "en",
    "favicon": "https://wordpress.example/favicon.ico",
    "open_graph": {
      "title": null,
      "description": null,
      "image": null,
      "url": null,
      "type": null,
      "site_name": null,
      "locale": null
    },
    "twitter_card": {
      "card": null,
      "site": null,
      "creator": null,
      "title": null,
      "description": null,
      "image": null
    },
    "author": null,
    "generator": "WordPress 6.8.2",
    "theme_color": null,
    "manifest_url": null,
    "robots": "index, follow"
  },
  "headers": {
    "content-type": "text/html; charset=UTF-8"
  },
  "ssl": {
    "enabled": true
  },
  "analysis": {
    "status": "complete",
    "requested_url": "https://wordpress.example/",
    "final_url": "https://wordpress.example/",
    "response_status": 200,
    "redirect_count": 0,
    "relay_used": false,
    "signals_checked": [
      "url",
      "header",
      "cookie",
      "html",
      "asset_url",
      "meta"
    ],
    "signals_unavailable": [],
    "html_characters_analyzed": 412,
    "html_bytes_analyzed": 412,
    "html_byte_limit": 1000000,
    "html_truncated": false,
    "response_body_truncated": false,
    "mode": "fast",
    "rendered": false,
    "javascript_executed": false,
    "pages_requested": 1,
    "pages_analyzed": 1,
    "page_limit": 1,
    "network_requests_observed": 0,
    "page_limit_reached": false,
    "resource_limit_reached": false,
    "redirected_to_different_host": false,
    "no_detection_reason": null,
    "recommended_mode": null,
    "pages": [
      {
        "url": "https://wordpress.example/",
        "status": 200,
        "html_truncated": false,
        "network_requests_observed": 0
      }
    ]
  },
  "total_time_ms": 128,
  "checked_at": "2026-07-15T10:30:00Z",
  "_meta": {
    "served_by": "pop=MAD country=ES",
    "analysis_status": "ok",
    "response_status": 200,
    "cache_status": "miss",
    "stale": false
  }
}

Frequently Asked Questions

How accurate is the detection?

Confidence is signal-specific. Results include a numeric score, sanitized evidence, caveats, and complete or partial analysis status. Technologies that hide or rewrite public signals may not be detected.

What technologies can you detect?

The verified catalog covers 500+ technologies in 80+ categories, including CMSs, frameworks, analytics, session replay, tag management, advertising, CDNs, hosting, payments, marketing, developer tools, and security services. Only publicly exposed signals can be detected.

Can I use this for competitive analysis?

Yes, this API is commonly used to understand what technologies competitors use, identify market trends, and inform technology decisions.

Related Tools & Resources

HTTP Status Codes

We document the HTTP status codes you should handle so you can distinguish successful responses, auth issues, credits, rate limits, missing data, and upstream failures.

OK 200

Request successful

Accepted 202

Cache-only subdomain miss accepted for background refresh. No credits are charged; retry after the Retry-After delay.

Bad Request 400

Invalid parameters

Unauthorized 401

Missing or invalid API key/session.

Payment Required 402

Not enough credits to run this request.

HTTP 409 409

We document the HTTP status codes you should handle so you can distinguish successful responses, auth issues, credits, rate limits, missing data, and upstream failures.

Too Many Requests 429

Rate limit exceeded

Service Unavailable 503

Upstream service unavailable or temporarily rate limited.

Detect Website Technologies