Execute a lookalike search

Validin’s Lookalike search identifies domains that are visually or structurally similar to a specified keyword or domain. This feature helps analysts detect typosquatting, impersonation attempts, and related DNS infrastructure.

Prerequisites

Make sure you have:

A Validin Professional or Enterprise account
A keyword, brand name, or domain to search for

Execute a lookalike search

Select Lookalikes from the left navigation menu.
Enter a search term, keyword, domain, or regex pattern.

📘
Regex searches
To search using regex, wrap the pattern in two forward slashes, e.g.: /[0-9a-z]+/

Configure Search Filters:

Filter	Description	Notes
Excluded Domains	Excludes false-positive domains	Enter comma-separated list (e.g. `ups.com, usaa.com`)
Limit	Maximum number of domains returned	Higher values use up more results allocation
Lookback (days)	Limit results to a timeframe	Range: up to 180 (default: 90)
Maximum Similarity	How closely a result must match the input	Range: 0-4 using the Levenshtein distance
Depth	Domain depth to include in the search	Labels (e2LDs): example[.]com Subdomains (e3LDs): shop.example[.]com FQDNs (any depth): a.b.c.example[.]com

👍
Exclude trusted infrastructure
To narrow your search and cut down on platform usage, specify your organization or supply chain's trusted domains in the Excluded Domains field to eliminate false-positive results.

Click Search