fix(sources): replace clearbit_enrich and tines_breach with seon_email and flare_leaksdb

build_sources.py

@@ -913,14 +913,17 @@ AUTHENTICATED_PREMIUM_SOURCES += [
           tags=["passive", "stealth"],
           health_check_url="https://api.breachaware.com", reliability_score=3, is_volatile=True),
 
-    _auth("tines_breach", "breaches",
-          "https://api.tines.com/breaches/{target}", "GET",
-          {"breaches": "$.breaches"},
-          headers={"Authorization": "Bearer {TINES_API_KEY}"},
-          api_key_slots=["{TINES_API_KEY}"],
-          input_type="email", output_type=["email"],
-          tags=["passive"],
-          health_check_url="https://api.tines.com", reliability_score=3),
+    _auth("flare_leaksdb", "breaches",
+          "https://api.flare.io/leaksdb/v2/credentials/email/{target}", "GET",
+          {"items": "$.items"},
+          headers={"Authorization": "Bearer {FLARE_API_KEY}"},
+          api_key_slots=["{FLARE_API_KEY}"],
+          input_type="email", output_type=["email", "username"],
+          normalization_map={"email": "email_address", "username": "username",
+                             "password": "plaintext_password", "hash": "password_hash",
+                             "source": "breach_name"},
+          tags=["passive", "stealth"],
+          health_check_url="https://api.flare.io", reliability_score=4),
 
     _base("leak_lookup", "breaches",
           "https://leak-lookup.com/api/search", "POST",
@@ -1042,15 +1045,17 @@ AUTHENTICATED_PREMIUM_SOURCES += [
 
     # ── Enrichment ────────────────────────────────────────────────────────────
 
-    _auth("clearbit_enrich", "enrichment",
-          "https://person.clearbit.com/v2/people/find?email={target}", "GET",
-          {"full_name": "$.name.fullName"},
-          headers={"Authorization": "Bearer {CLEARBIT_API_KEY}"},
-          api_key_slots=["{CLEARBIT_API_KEY}"],
-          input_type="email", output_type=["username", "domain"],
-          normalization_map={"fullName": "full_name"},
+    _auth("seon_email", "enrichment",
+          "https://api.seon.io/SeonRestService/email-api/v3", "POST",
+          {"data": "$.data"},
+          headers={"X-API-KEY": "{SEON_API_KEY}", "Content-Type": "application/json"},
+          api_key_slots=["{SEON_API_KEY}"],
+          input_type="email", output_type=["email", "domain", "username"],
+          payload_template={"email": "{target}"},
+          normalization_map={"email": "email_address", "domain": "domain",
+                             "full_name": "full_name", "phone_number": "phone"},
           tags=["passive"],
-          health_check_url="https://person.clearbit.com", reliability_score=4),
+          health_check_url="https://api.seon.io", reliability_score=4),
 
     _auth("fullcontact", "enrichment",
           "https://api.fullcontact.com/v3/person.enrich", "POST",