Skip to main content

Documentation Index

Fetch the complete documentation index at: https://api.docs.flare.io/llms.txt

Use this file to discover all available pages before exploring further.

The domain type represents lookalike or typosquatted domains identified by Flare’s detection engines, often leveraging tools such as dnstwist. These records capture information about suspicious domains that closely resemble legitimate organizations’ domains and could be used in phishing, brand impersonation, or malware campaigns.
Lookalike Domain
{
    "event_type": "lookalike",
    "data": {
        "domain": "importante.com",
        "registered_at": "2025-01-01T00:00:00",
        "identifier_domains": [
            "important.co"
        ],
        "feed": null,
        "cert_data": null,
        "subject": null,
        "issuer": "/C=US/CN=R3/O=Let's Encrypt"
    },
    "metadata": {
        "estimated_created_at": "2025-01-01T00:00:00",
        "flare_url": "https://app.flare.io/#/uid",
        "matched_at": null,
        "severity": "info",
        "uid": "index/source/id"
    }
}