---
title: "GET /lookalikes"
method: GET
path: "/lookalikes"
tags: ["lookalike_domains"]
---

# GET /lookalikes

`GET /lookalikes`

## Request

- Base URL: `https://csp.infoblox.com/api/tdlad/v1`
- URL: `https://csp.infoblox.com/api/tdlad/v1/lookalikes`
- Auth: none declared
- TypeScript: <https://skmtc.dev/infoblox/apis/infoblox-lad-api/docs/lookalikes/get.ts> (a function with typed inputs; its response is checked against the schema)

## Query parameters

- `_filter` string
- `_fields` string
- `_offset` integer
- `_limit` integer
- `_page_token` string
- `_order_by` string

## Response `200`

GET operation response

- ServiceGetLookalikeDomainsResponse
  - `results` ServiceLookalikeDomain[]
    - `categories` string[]: The list of categories this lookalike detection is related to.
    - `lookalike_domain` string: The lookalike domain.
    - `lookalike_host` string: The lookalike domain's FQDN.
    - `malware` boolean: Indicates whether the detected lookalike domain is malware.
    - `phishing` boolean: Indicates whether the detected lookalike domain is phishing.
    - `reason` string: The reason this domain looks like the target domain.
    - `registration_date` string: The date this lookalike was first registered.
    - `suspicious` boolean: Indicates whether the detected lookalike domain is suspicious.
    - `target_domain` string: The target domain this lookalike domain is associated to.
    - `type` string: The type of the domain: custom or common.

---

[API](https://skmtc.dev/infoblox/apis/infoblox-lad-api.md) - [All operations](https://skmtc.dev/infoblox/apis/infoblox-lad-api/llms.txt) - [OpenAPI document](https://skmtc.dev/infoblox/apis/infoblox-lad-api/revisions/107d3dab2116?raw)