← fraud report overview

Original data · week of 2026-09-21 · current

100 suspicious rental domains this week

Weeks run Monday-Sunday, UTC. This page is the permanent record for the week of 2026-09-21 and is also served at the stable address bikoosh.com/fraud-report/latest. Aggregates only - patterns, not accusations; no domain is ever named.

Which patterns fired

Top-level domains of suspicious matches

Rental vocabulary in matched names

Methodology

Bikoosh monitors the public Certificate Transparency stream - the append-only log of all newly-issued HTTPS certificates. Each new domain name is tested against deterministic naming rules associated with rental fraud: rental vocabulary combined with destination city names, brand-lookalike patterns (typosquats, hyphen injection), and rental vocabulary on TLDs with high historical abuse rates. Matching is on names only; a name match is a statistical signal, not a verdict about any specific domain - which is why this report publishes only aggregates.

Cite this week

@misc{bikoosh_fraud_2026_09_21,
  title        = {Vacation Rental Fraud Report, week of 2026-09-21},
  author       = {{Bikoosh}},
  year         = {2026},
  howpublished = {\url{https://bikoosh.com/fraud-report/2026-09-21}},
  note         = {Weekly aggregate counts of newly-certified domains matching
                  vacation-rental fraud naming patterns, from public Certificate
                  Transparency logs. Licensed CC BY 4.0.}
}

← week of 2026-09-14

Questions or data requests: [email protected] · subscribe: RSS · JSON feed · email digest