Output format

The Typosquatting API returns data as a JSON array of records. The fields included depend on the endpoint used.

checkDomain

Returns basic group membership information for the queried domain.

[
    {
        "date": "2022-05-10",
        "groupNumber": 1,
        "totalNoOfGrpMembers": 13
    }
]

getGroup (basic)

Returns all members of a typosquatting group with basic fields.

[
    {
        "date": "2022-05-10",
        "groupNumber": 1,
        "groupMemberNumber": 1,
        "totalNoOfGrpMembers": 13,
        "domain": "example1.com",
        "domainUtf": "example1.com"
    },
    {
        "date": "2022-05-10",
        "groupNumber": 1,
        "groupMemberNumber": 2,
        "totalNoOfGrpMembers": 13,
        "domain": "example2.net",
        "domainUtf": "example2.net"
    }
]

Enriched endpoints

The enriched endpoints (checkDomainEnriched, getGroupEnriched) return all basic fields plus the following additional WHOIS and registration data:

[
    {
        "date": "2022-05-10",
        "groupNumber": 1,
        "groupMemberNumber": 1,
        "totalNoOfGrpMembers": 13,
        "domain": "example1.com",
        "domainUtf": "example1.com",
        "registrantName": "John Doe",
        "registrantOrganization": "Example Corp",
        "registrantCountry": "US",
        "registrantState": "California",
        "registrantCity": "Los Angeles",
        "registrantEmail": "[email protected]",
        "registrarName": "Example Registrar Inc.",
        "registrarIANAID": "1234",
        "whoisServer": "whois.example-registrar.com",
        "nameServers": "ns1.example.com,ns2.example.com",
        "status": "clientTransferProhibited",
        "createdDate": "2022-05-09",
        "updatedDate": "2022-05-09",
        "expiresDate": "2023-05-09",
        "standardRegCreatedDate": "2022-05-09 12:00:00",
        "standardRegUpdatedDate": "2022-05-09 12:00:00",
        "standardRegExpiresDate": "2023-05-09 12:00:00",
        "ips": "93.184.216.34"
    }
]

Output parameters

date
The detection date of the typosquatting group, in YYYY-MM-DD format.
groupNumber
The typosquatting group identifier for the given date.
groupMemberNumber
The member's position within the group (not returned by checkDomain).
totalNoOfGrpMembers
The total number of domains in the typosquatting group.
domain
The domain name in ASCII encoding.
domainUtf
The domain name in UTF-8 encoding, useful for internationalized domain names (IDNs).
registrantName
The name of the domain registrant from WHOIS data. Enriched endpoints only.
registrantOrganization
The organization of the domain registrant. Enriched endpoints only.
registrantCountry
The registrant's country. Enriched endpoints only.
registrantState
The registrant's state or province. Enriched endpoints only.
registrantCity
The registrant's city. Enriched endpoints only.
registrantEmail
The registrant's email address. Enriched endpoints only.
registrarName
The name of the domain registrar. Enriched endpoints only.
registrarIANAID
The IANA ID of the domain registrar. Enriched endpoints only.
whoisServer
The WHOIS server for the domain's TLD. Enriched endpoints only.
nameServers
The name servers associated with the domain. Enriched endpoints only.
status
The domain status codes (e.g., clientTransferProhibited, serverDeleteProhibited). Enriched endpoints only.
createdDate
The domain creation date as reported by the registrar. Enriched endpoints only.
updatedDate
The domain last-updated date as reported by the registrar. Enriched endpoints only.
expiresDate
The domain expiration date as reported by the registrar. Enriched endpoints only.
standardRegCreatedDate
The standardized creation date in YYYY-MM-DD HH:MM:SS format. Enriched endpoints only.
standardRegUpdatedDate
The standardized last-updated date in YYYY-MM-DD HH:MM:SS format. Enriched endpoints only.
standardRegExpiresDate
The standardized expiration date in YYYY-MM-DD HH:MM:SS format. Enriched endpoints only.
ips
The IP addresses associated with the domain. Enriched endpoints only.