Execute a lookalike search
Learn how to execute Lookalike searches that locate brand impersonation infrastructure..
Validin’s Lookalike search identifies domains that are visually or structurally similar to a specified keyword or domain. This feature helps analysts detect typosquatting, impersonation attempts, and related DNS infrastructure. Lookalike searches are performed exclusively over Validin's new domain list and are configureable with lookback of up to 90 days.
Prerequisites
Make sure you have:
- A Validin Professional or Enterprise account
- A keyword, brand name, or domain to search for
Execute a lookalike search
- Select Lookalikes from the left navigation menu.
- Enter a search term, keyword, domain, or regex pattern.
Regex searchesTo search using regex, wrap the pattern in two forward slashes, e.g.:
/[0-9a-z]+/
- Configure Search Filters:
| Filter | Description | Notes |
|---|---|---|
| Excluded Domains | Excludes false-positive domains | Enter comma-separated list (e.g. ups.com, usaa.com) |
| Limit | Maximum number of domains returned | Higher values use up more results allocation |
| Lookback (days) | Limit results to a timeframe | Range: up to 180 (default: 90) |
| Maximum Similarity | How closely a result must match the input | Range: 0-4 using the Levenshtein distance |
| Depth | Domain depth to include in the search |
|
Exclude trusted infrastructureTo narrow your search and cut down on platform usage, specify your organization or supply chain's trusted domains in the Excluded Domains field to eliminate false-positive results.
- Click Search
Updated 4 months ago
Did this page help you?