Original data · week of 2026-08-03

280 suspicious rental domains this week

In the week of 2026-08-03, 280 newly-certified domains matched vacation-rental fraud naming patterns, out of 3,095,475 certificates observed in public Certificate Transparency logs — one in every 11,055.

Weeks run Monday–Sunday, UTC. This page is the permanent record for the week of 2026-08-03. Aggregates only — patterns, not accusations; no domain is ever named.

Which patterns fired

Pattern	Domains
vocab+tld	244
brand	30
city+vocab	6

Top-level domains of suspicious matches

TLD	Domains
.xyz	82
.online	72
.site	49
.com	22
.shop	14
.top	12
.icu	7
.ph	6
.rest	4
.club	4

Rental vocabulary in matched names

Keyword	Domains
stay	70
rental	45
villa	35
holiday	35
bnb	34
booking	14
vacation	10
apartment	9

Methodology

Bikoosh monitors the public Certificate Transparency stream — the append-only log of all newly-issued HTTPS certificates. Each new domain name is tested against deterministic naming rules associated with rental fraud: rental vocabulary combined with destination city names, brand-lookalike patterns (typosquats, hyphen injection), and rental vocabulary on TLDs with high historical abuse rates. Matching is on names only; a name match is a statistical signal, not a verdict about any specific domain — which is why this report publishes only aggregates.

Cite this week

Bikoosh Vacation Rental Fraud Report, week of 2026-08-03. bikoosh.com/fraud-report/2026-08-03. Licensed CC BY 4.0 — reuse with attribution.

BibTeX

@misc{bikoosh_fraud_2026_08_03,
  title        = {Vacation Rental Fraud Report, week of 2026-08-03},
  author       = {{Bikoosh}},
  year         = {2026},
  howpublished = {\url{https://bikoosh.com/fraud-report/2026-08-03}},
  note         = {Weekly aggregate counts of newly-certified domains matching
                  vacation-rental fraud naming patterns, from public Certificate
                  Transparency logs. Licensed CC BY 4.0.}
}

week of 2026-08-10 →

Booking a rental this week? Run the listing through the free checker first. Manage properties? Bikoosh watches your portfolio for clones behind numbers like these.

Questions or data requests: [email protected] · subscribe: RSS · JSON feed · email digest