Original data · week of 2026-09-14
6547 suspicious rental domains this week
In the week of 2026-09-14, 6547 newly-certified domains matched vacation-rental fraud naming patterns, out of 71,255,574 certificates observed in public Certificate Transparency logs - one in every 10,883.
Weeks run Monday-Sunday, UTC. This page is the permanent record for the week of 2026-09-14. Aggregates only - patterns, not accusations; no domain is ever named.
Which patterns fired
| Pattern | Domains |
|---|---|
| vocab+tld | 5956 |
| brand | 579 |
| city+vocab | 12 |
Top-level domains of suspicious matches
| TLD | Domains |
|---|---|
| .shop | 2505 |
| .site | 1713 |
| .online | 857 |
| .top | 387 |
| .xyz | 367 |
| .com | 298 |
| .club | 104 |
| .dev | 41 |
| .icu | 32 |
| .org | 31 |
Rental vocabulary in matched names
| Keyword | Domains |
|---|---|
| rental | 2676 |
| villa | 1219 |
| stay | 595 |
| bnb | 402 |
| booking | 340 |
| vacation | 278 |
| holiday | 263 |
| apartment | 131 |
Methodology
Bikoosh monitors the public Certificate Transparency stream - the append-only log of all newly-issued HTTPS certificates. Each new domain name is tested against deterministic naming rules associated with rental fraud: rental vocabulary combined with destination city names, brand-lookalike patterns (typosquats, hyphen injection), and rental vocabulary on TLDs with high historical abuse rates. Matching is on names only; a name match is a statistical signal, not a verdict about any specific domain - which is why this report publishes only aggregates.
Cite this week
Bikoosh Vacation Rental Fraud Report, week of 2026-09-14. bikoosh.com/fraud-report/2026-09-14. Licensed CC BY 4.0 - reuse with attribution.
BibTeX
@misc{bikoosh_fraud_2026_09_14,
title = {Vacation Rental Fraud Report, week of 2026-09-14},
author = {{Bikoosh}},
year = {2026},
howpublished = {\url{https://bikoosh.com/fraud-report/2026-09-14}},
note = {Weekly aggregate counts of newly-certified domains matching
vacation-rental fraud naming patterns, from public Certificate
Transparency logs. Licensed CC BY 4.0.}
}
Booking a rental this week? Run the listing through the free checker first. Manage properties? Bikoosh watches your portfolio for clones behind numbers like these.
Questions or data requests: [email protected] · subscribe: RSS · JSON feed · email digest