zeasm_list_lookalike_domains
Identify lookalike domains impersonating your organization. Returns triage rows with risk, registration state, and deception methods for each detected domain.
Instructions
List EASM lookalike domains for an organization.
Read-only. Returns one triage row per detected lookalike/impersonation
domain (the lookalike, the domain it impersonates, risk, registration
state, deception methods). Use the returned lookalike_raw with
zeasm_get_lookalike_domain for full detail.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Optional JMESPath expression applied to the results after the API call, for client-side filtering and projection. Field names are exactly what the Zscaler API returns. Examples: "[?enabled==`true`]", "[*].{name: name, id: id}", "length(@)". Omit to get the full records. | |
| org_id | Yes |