Execute a lookalike search

Validin’s Lookalike search identifies domains that are visually or structurally similar to a specified keyword or domain. This feature helps analysts detect typosquatting, impersonation attempts, and related DNS infrastructure. Lookalike searches are performed exclusively over Validin's new domain list and are configureable with lookback of up to 90 days.

Prerequisites

Make sure you have:

A Validin Professional or Enterprise account
A keyword, brand name, or domain to search for

Execute a lookalike search

Select Lookalikes from the left navigation menu.
Enter a search term, keyword, domain, or regex pattern.

📘
Regex searches
To search using regex, wrap the pattern in two forward slashes, e.g.: /[0-9a-z]+/

Configure Search Filters:

Filter	Description	Notes
Excluded Domains	Excludes false-positive domains	Enter comma-separated list (e.g. `ups.com, usaa.com`)
Limit	Maximum number of domains returned	Higher values use up more results allocation
Lookback (days)	Limit results to a timeframe	Range: up to 180 (default: 90)
Maximum Similarity	How closely a result must match the input	Range: 0-4 using the Levenshtein distance
Depth	Domain depth to include in the search	Labels (e2LDs): example[.]com Subdomains (e3LDs): shop.example[.]com FQDNs (any depth): a.b.c.example[.]com

👍
Exclude trusted infrastructure
To narrow your search and cut down on platform usage, specify your organization or supply chain's trusted domains in the Excluded Domains field to eliminate false-positive results.

Click Search