This is the $29 audit, in full.
Not a mock-up and not a redacted teaser: one complete Brand Impersonation Audit, produced on 20 Sep 2026 by the same code that runs when someone pays, and published with nothing removed. Every hostname, every dated reading, every risk rating, all 51 exhibits and the takedown request are below.
Where this document came from
It was generated, not written. SABO Skirt (saboskirt.com) went into the same pipeline a paying customer's domain goes into, and what came out was written straight to a source file and rendered here — the summary, the rows, the exhibit list and the request are the pipeline's own text, word for word. We did not re-word a finding, raise a rating or add a row.
The run took 26 seconds end to end, which is what a buyer waits: the checks run live when you pay, so there is no research queue in front of them.
We picked this brand because one of the hostnames it turns up — saboskirt.shop — is already in our own published corpus with its own dated record (checked 6 October 2026), so you can hold the report against something we published independently of it. SABO Skirt did not commission this audit and has not paid us for it: it is our own research, published on the same terms as the other 60 hostnames we document.
Every state below was true when it was read on 20 Sep 2026 and can change any day. A re-run produces a new dated capture; we do not edit this one to keep it looking current.
Since this report was run. Our own index has re-checked saboskirt.shop since 20 Sep 2026: on 6 October 2026 its observed state was “does not resolve”. The report is left exactly as it was generated — it is a dated record of what was read on 20 Sep 2026, and that does not stop being true — but nothing in it says this address is serving today. Its full dated record is here.
It is written to the buyer, and we have not re-pointed a single sentence of it for this page — so where it says your site or your domain below, it means saboskirt.com.
Summary
On 20 Sep 2026 we generated 134 lookalike and typosquat candidates from saboskirt.com — different endings, hyphenated forms, single-character swaps, drops and doublings, and the retail-word patterns ("shop", "store", "outlet", "sale", "official") that our own documented corpus is full of. We also read the public certificate-transparency logs for saboskirt.com on 20 Sep 2026: 1197 certificates came back and none named a hostname outside your own domain. That is what one public log service returned to one query on one day — its own search is demonstrably incomplete, so it is never a clean bill of health. We then resolved every one of the 134 candidates and fetched everything that resolved, with cache bypassed.
7 hostnames resolved and answered, and they are listed below with the readings behind each. 127 candidates do not resolve and are deliberately not listed — a name nobody has registered is not an impersonation, and padding the count with them would make the report longer and less true.
3 of them reproduce material from your own site — your hosted files, your image filenames, your catalogue handles or part numbers, or your title wording — and those are the rows to chase first. The rest resolved under a name close to yours without any of those markers; we list them as exactly that and do not describe them as copies.
What happens next is yours to do. This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform. We describe what each page serves; we make no assertion about any registrant’s intent or criminality, and nothing here is legal advice. Questions about anything in this report: scam-detective8@mail.acoco.ai.
Hostnames that resolved and answered (7)
Ordered by risk. A row rated high is one where the brand's own material was found reproduced on the page; a row rated medium answered under a name close to theirs with none of those markers found, which is worth knowing and is not the same as a copy. The 127 candidates with no DNS record are counted and deliberately not listed.
officialsaboskirt.shophigh riskretail prefixGenerated from saboskirt.com as your name with a retail word in front of it. Checked 20 Sep 2026, cache bypassed: live, HTTP 200, page title “Buy Women's Summer Fashion Online. | SABO”. What we found on the page itself: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/SABO_Logo_0dc337d3-11b3-4b3f-b03f-382659094035.svg?v=1760397195&width=500; reproduces 2 of the brand's own image filenames, e.g. sabo_logo_0dc337d3-11b3-4b3f-b03f-382659094035, sabo-favicon-32x32-01. Serving files from your own domain is file-level copying rather than an imitated look — it is the strongest class of evidence we record, and the easiest for a desk to verify for itself. Public registration data read 20 Sep 2026: officialsaboskirt.shop was registered on 19 Jul 2026, which is 62 days before this check. The registration runs to 19 Jul 2027. TLS handshake 20 Sep 2026: the certificate served for officialsaboskirt.shop became valid on 17 Sep 2026 and expires 16 Dec 2026, i.e. 3 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.
Asset-level proof: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/SABO_Logo_0dc337d3-11b3-4b3f-b03f-382659094035.svg?v=1760397195&width=500
saboskirt.shophigh riskother endingGenerated from saboskirt.com as the same name on a different ending. Checked 20 Sep 2026, cache bypassed: live, HTTP 200, page title “SABO | Shop Women's Summer Clothing Online Australia. | SABO”. What we found on the page itself: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/preview_images/bc5e3d8eeb774391be00ec34c4adedb8.thumbnail.0000000000_3840x.jpg?v=1773280067. Serving files from your own domain is file-level copying rather than an imitated look — it is the strongest class of evidence we record, and the easiest for a desk to verify for itself. We already publish a dated record for this hostname. Checked 15 September 2026: On 15 September 2026 we fetched saboskirt.shop with cache bypassed and the observed state was “live, HTTP 200” — it was serving when we looked. Observed state on that date: “live, HTTP 200”. Published at https://scam-detective8.acoco.ai/is-saboskirt-shop-legit. Public registration data read 20 Sep 2026: saboskirt.shop was registered on 20 Jun 2026, which is 91 days before this check. The registration runs to 20 Jun 2027. TLS handshake 20 Sep 2026: the certificate served for saboskirt.shop became valid on 19 Aug 2026 and expires 17 Nov 2026, i.e. 31 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.
Asset-level proof: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/preview_images/bc5e3d8eeb774391be00ec34c4adedb8.thumbnail.0000000000_3840x.jpg?v=1773280067
Our published record for this hostname — checked 15 September 2026, quoted verbatim in the report above.
saboskirtonline.shophigh riskretail suffixGenerated from saboskirt.com as your name with a retail word after it. Checked 20 Sep 2026, cache bypassed: live, HTTP 200, page title “Buy Women's Summer Fashion Online Australia. | SABO”. What we found on the page itself: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/SABO_Logo_0dc337d3-11b3-4b3f-b03f-382659094035.svg?v=1760397195&width=500; reproduces 2 of the brand's own image filenames, e.g. sabo_logo_0dc337d3-11b3-4b3f-b03f-382659094035, sabo-favicon-32x32-01. Serving files from your own domain is file-level copying rather than an imitated look — it is the strongest class of evidence we record, and the easiest for a desk to verify for itself. Public registration data read 20 Sep 2026: saboskirtonline.shop was registered on 15 Jul 2026, which is 66 days before this check. The registration runs to 15 Jul 2027. TLS handshake 20 Sep 2026: the certificate served for saboskirtonline.shop became valid on 13 Sep 2026 and expires 12 Dec 2026, i.e. 7 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.
Asset-level proof: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/SABO_Logo_0dc337d3-11b3-4b3f-b03f-382659094035.svg?v=1760397195&width=500
sabo-skirt.commedium riskhyphenatedGenerated from saboskirt.com as a hyphenated variant of your name. Checked 20 Sep 2026, cache bypassed: live, HTTP 200. We compared this page against your own site and found none of the four copying classes we grade for — no files of yours served, no image filenames, no catalogue handles or part numbers, and no reproduction of your title wording. It is a name close to yours that answers; that is all we observed, and we do not describe it as a copy. Public registration data read 20 Sep 2026: sabo-skirt.com was registered on 19 Dec 2013, which is 4658 days before this check. The registration runs to 19 Dec 2026. Attempted 20 Sep 2026: TLS handshake failed (error:10000438:SSL routines:OPENSSL_internal:TLSV1_ALERT_INTERNAL_ERROR). We report that as a fact about our own connection.
saboskirt.storemedium riskother endingGenerated from saboskirt.com as the same name on a different ending. Checked 20 Sep 2026, cache bypassed: live, HTTP 200, page title “Default page”. We compared this page against your own site and found none of the four copying classes we grade for — no files of yours served, no image filenames, no catalogue handles or part numbers, and no reproduction of your title wording. It is a name close to yours that answers; that is all we observed, and we do not describe it as a copy. Public registration data read 20 Sep 2026: saboskirt.store was registered on 24 Jan 2026, which is 239 days before this check. The registration runs to 24 Jan 2027. TLS handshake 20 Sep 2026: the certificate served for saboskirt.store became valid on 23 Jul 2026 and expires 21 Oct 2026, i.e. 59 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.
saboskirthq.shopmedium riskretail suffixGenerated from saboskirt.com as your name with a retail word after it. Checked 20 Sep 2026, cache bypassed: live, HTTP 200, page title “SABO | Shop Women's Summer Clothing Online Australia. | SABO”. We compared this page against your own site and found none of the four copying classes we grade for — no files of yours served, no image filenames, no catalogue handles or part numbers, and no reproduction of your title wording. It is a name close to yours that answers; that is all we observed, and we do not describe it as a copy. Public registration data read 20 Sep 2026: saboskirthq.shop was registered on 20 Jun 2026, which is 92 days before this check. The registration runs to 20 Jun 2027. TLS handshake 20 Sep 2026: the certificate served for saboskirthq.shop became valid on 18 Aug 2026 and expires 16 Nov 2026, i.e. 33 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.
saboskirtofficial.shopmedium riskretail suffixGenerated from saboskirt.com as your name with a retail word after it. Checked 20 Sep 2026, cache bypassed: live, HTTP 200, page title “Buy Women's Event Outfits & Resort Wear Online | SABO”. We compared this page against your own site and found none of the four copying classes we grade for — no files of yours served, no image filenames, no catalogue handles or part numbers, and no reproduction of your title wording. It is a name close to yours that answers; that is all we observed, and we do not describe it as a copy. Public registration data read 20 Sep 2026: saboskirtofficial.shop was registered on 18 May 2026, which is 125 days before this check. The registration runs to 18 May 2027. TLS handshake 20 Sep 2026: the certificate served for saboskirtofficial.shop became valid on 13 Sep 2026 and expires 12 Dec 2026, i.e. 6 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.
The takedown request, as delivered
Drafted for the brand owner to send. We do not file it, and we name no registrar or host in it — we did not look either up on this tier, and we do not guess.
HOW TO USE THIS: send one copy per desk. The domain's registrar and the hosting provider are two different
recipients and each wants its own request. We do not name either here — we did not look them up, and we do not
guess. The three lookups that find them are published, free, at https://scam-detective8.acoco.ai/someone-cloned-my-store.
Confirm your own trademark position before you send this; we do not advise on it.
---
To: [Abuse desk — registrar, or hosting provider, for the domain named below]
Subject: Trademark impersonation / abuse report — officialsaboskirt.shop
To whom it may concern,
I am [your full name], [your role] at SABO Skirt, the owner of the brand
"SABO Skirt" and of the domain saboskirt.com. [State your trademark registration
number and jurisdiction here, or the basis of your unregistered rights.]
I am reporting the following domain(s), which impersonate that brand:
officialsaboskirt.shop
Observed 20 Sep 2026 (cache bypassed): live, HTTP 200.
Page title as served: "Buy Women's Summer Fashion Online. | SABO"
Evidence: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/SABO_Logo_0dc337d3-11b3-4b3f-b03f-382659094035.svg?v=1760397195&width=500
Evidence: reproduces 2 of the brand's own image filenames, e.g. sabo_logo_0dc337d3-11b3-4b3f-b03f-382659094035, sabo-favicon-32x32-01
saboskirt.shop
Observed 20 Sep 2026 (cache bypassed): live, HTTP 200.
Page title as served: "SABO | Shop Women's Summer Clothing Online Australia. | SABO"
Evidence: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/preview_images/bc5e3d8eeb774391be00ec34c4adedb8.thumbnail.0000000000_3840x.jpg?v=1773280067
Independently documented: https://scam-detective8.acoco.ai/is-saboskirt-shop-legit (checked 15 September 2026).
saboskirtonline.shop
Observed 20 Sep 2026 (cache bypassed): live, HTTP 200.
Page title as served: "Buy Women's Summer Fashion Online Australia. | SABO"
Evidence: serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/SABO_Logo_0dc337d3-11b3-4b3f-b03f-382659094035.svg?v=1760397195&width=500
Evidence: reproduces 2 of the brand's own image filenames, e.g. sabo_logo_0dc337d3-11b3-4b3f-b03f-382659094035, sabo-favicon-32x32-01
The use of our brand at these addresses is not authorised by us and is likely to mislead our customers into
believing they are dealing with us.
I request that you take the action available to you under your own abuse policy — suspension of the domain, or
removal of the infringing content — and confirm in writing what action you have taken and when.
I have a good-faith belief that the use described above is not authorised by the trademark owner, its agent or
the law, and the information in this notice is accurate to the best of my knowledge.
[Your name]
[Your role], SABO Skirt
[Your email] · [Your telephone]
[saboskirt.com]
---
Attachments to include: the exhibit list from your audit (each row carries the date it was observed), and a
screenshot or saved copy of each page you are reporting, taken by you at the time of sending.Evidence index (51 dated exhibits)
One row per reading that actually happened, each with the date it was taken and what it supports. This is the list the request above tells the sender to attach.
| Ref | Hostname | What we read | Read on |
|---|---|---|---|
| A1 | officialsaboskirt.shop | the page as served, fetched with cache bypassed — live, HTTP 200, title “Buy Women's Summer Fashion Online. | SABO”Supports: That this hostname resolved and answered on the date stated. | 2026-09-20 |
| A1.1 | officialsaboskirt.shop | serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/SABO_Logo_0dc337d3-11b3-4b3f-b03f-382659094035.svg?v=1760397195&width=500Supports: That this page reproduces material from saboskirt.com, read off its own markup on that date. | 2026-09-20 |
| A1.2 | officialsaboskirt.shop | reproduces 2 of the brand's own image filenames, e.g. sabo_logo_0dc337d3-11b3-4b3f-b03f-382659094035, sabo-favicon-32x32-01Supports: That this page reproduces material from saboskirt.com, read off its own markup on that date. | 2026-09-20 |
| A1.spage_credentials | officialsaboskirt.shop | The page asks for credentials or card details — Read 20 Sep 2026 in the HTML served: a card security-code prompt. That is what the page collects, read off its own markup on this date.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A1.spage_payment | officialsaboskirt.shop | Irreversible payment methods named on the page — Read 20 Sep 2026 in the text served: Cash App, gift cards. A payment made this way carries no chargeback right, so it is the hardest kind to reverse.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A1.sregistration_age | officialsaboskirt.shop | Registered 62 days ago — Public registration data read 20 Sep 2026: officialsaboskirt.shop was registered on 19 Jul 2026, which is 62 days before this check. The registration runs to 19 Jul 2027.Supports: A dated registration reading taken by our own server. | 2026-09-20 |
| A1.stls_certificate | officialsaboskirt.shop | Certificate issued 17 Sep 2026 — TLS handshake 20 Sep 2026: the certificate served for officialsaboskirt.shop became valid on 17 Sep 2026 and expires 16 Dec 2026, i.e. 3 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.Supports: A dated tls reading taken by our own server. | 2026-09-20 |
| A1.spage_assets | officialsaboskirt.shop | Images served from another hostname — Read 20 Sep 2026: images on this page load from saboskirt.com rather than officialsaboskirt.shop itself. Where that hostname belongs to the brand being shown, the page is serving the brand's own files — which is file-level copying rather than an imitated look. Where it is an ordinary CDN or an image host, it is not a finding.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A1.sdns_mail | officialsaboskirt.shop | No mail records published — DNS read 20 Sep 2026: officialsaboskirt.shop publishes no MX record, so this name cannot receive email at the domain it asks you to trust. Plenty of legitimate sites route mail elsewhere, so read it alongside the rest.Supports: A dated dns reading taken by our own server. | 2026-09-20 |
| A1.spage_fetch | officialsaboskirt.shop | Fetched the page: HTTP 200 — Fetched 20 Sep 2026 with cache bypassed: HTTP 200, page title “Buy Women's Summer Fashion Online. | SABO”.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A2 | saboskirt.shop | the page as served, fetched with cache bypassed — live, HTTP 200, title “SABO | Shop Women's Summer Clothing Online Australia. | SABO”Supports: That this hostname resolved and answered on the date stated. | 2026-09-20 |
| A2.1 | saboskirt.shop | serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/preview_images/bc5e3d8eeb774391be00ec34c4adedb8.thumbnail.0000000000_3840x.jpg?v=1773280067Supports: That this page reproduces material from saboskirt.com, read off its own markup on that date. | 2026-09-20 |
| A2.sdocumented_record | saboskirt.shop | Already documented: copies SABO Skirt — Our own published record for saboskirt.shop, checked 15 September 2026: On 15 September 2026 we fetched saboskirt.shop with cache bypassed and the observed state was “live, HTTP 200” — it was serving when we looked. Observed state on that date: “live, HTTP 200”. Artefacts published for it: Serves the genuine brand’s own hosted files — the hero image, the favicon and a category image — directly from the real brand’s CDN. This is file-level copying, not an imitated look. Hero image: saboskirt.com/cdn/shop/files/preview_images/bc5e3d8eeb774391be00ec34c4adedb8.thumbnail.0000000000_3840x.jpg Favicon: saboskirt.com/cdn/shop/files/Sabo-Favicon-32x32-01.png A category image from cdn.shopify.com/s/files/1/0108/8959/2898/ — the real brand’s own Shopify asset path.Supports: A dated record reading taken by our own server. | 2026-09-20 |
| A2.sregistration_age | saboskirt.shop | Registered 91 days ago — Public registration data read 20 Sep 2026: saboskirt.shop was registered on 20 Jun 2026, which is 91 days before this check. The registration runs to 20 Jun 2027.Supports: A dated registration reading taken by our own server. | 2026-09-20 |
| A2.spage_payment | saboskirt.shop | Payment methods worth noting on the page — Read 20 Sep 2026 in the text served: gift cards. Ordinary stores sell these too — it is only worth weighing alongside the other readings.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A2.spage_assets | saboskirt.shop | Images served from another hostname — Read 20 Sep 2026: images on this page load from saboskirt.com, cdn.shopify.com rather than saboskirt.shop itself. Where that hostname belongs to the brand being shown, the page is serving the brand's own files — which is file-level copying rather than an imitated look. Where it is an ordinary CDN or an image host, it is not a finding.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A2.sdns_mail | saboskirt.shop | No mail records published — DNS read 20 Sep 2026: saboskirt.shop publishes no MX record, so this name cannot receive email at the domain it asks you to trust. Plenty of legitimate sites route mail elsewhere, so read it alongside the rest.Supports: A dated dns reading taken by our own server. | 2026-09-20 |
| A2.stls_certificate | saboskirt.shop | Certificate issued 19 Aug 2026 — TLS handshake 20 Sep 2026: the certificate served for saboskirt.shop became valid on 19 Aug 2026 and expires 17 Nov 2026, i.e. 31 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.Supports: A dated tls reading taken by our own server. | 2026-09-20 |
| A2.spage_fetch | saboskirt.shop | Fetched the page: HTTP 200 — Fetched 20 Sep 2026 with cache bypassed: HTTP 200, page title “SABO | Shop Women's Summer Clothing Online Australia. | SABO”.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A2.r | saboskirt.shop | our own published record for this hostname, quoted verbatim: On 15 September 2026 we fetched saboskirt.shop with cache bypassed and the observed state was “live, HTTP 200” — it was serving when we looked.Supports: That we documented this hostname independently, and published it at https://scam-detective8.acoco.ai/is-saboskirt-shop-legit. | — |
| A3 | saboskirtonline.shop | the page as served, fetched with cache bypassed — live, HTTP 200, title “Buy Women's Summer Fashion Online Australia. | SABO”Supports: That this hostname resolved and answered on the date stated. | 2026-09-20 |
| A3.1 | saboskirtonline.shop | serves 3 assets from the genuine brand's own domain (file-level copying), e.g. https://saboskirt.com/cdn/shop/files/SABO_Logo_0dc337d3-11b3-4b3f-b03f-382659094035.svg?v=1760397195&width=500Supports: That this page reproduces material from saboskirt.com, read off its own markup on that date. | 2026-09-20 |
| A3.2 | saboskirtonline.shop | reproduces 2 of the brand's own image filenames, e.g. sabo_logo_0dc337d3-11b3-4b3f-b03f-382659094035, sabo-favicon-32x32-01Supports: That this page reproduces material from saboskirt.com, read off its own markup on that date. | 2026-09-20 |
| A3.spage_credentials | saboskirtonline.shop | The page asks for credentials or card details — Read 20 Sep 2026 in the HTML served: a card security-code prompt. That is what the page collects, read off its own markup on this date.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A3.spage_payment | saboskirtonline.shop | Irreversible payment methods named on the page — Read 20 Sep 2026 in the text served: Cash App, gift cards. A payment made this way carries no chargeback right, so it is the hardest kind to reverse.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A3.sregistration_age | saboskirtonline.shop | Registered 66 days ago — Public registration data read 20 Sep 2026: saboskirtonline.shop was registered on 15 Jul 2026, which is 66 days before this check. The registration runs to 15 Jul 2027.Supports: A dated registration reading taken by our own server. | 2026-09-20 |
| A3.stls_certificate | saboskirtonline.shop | Certificate issued 13 Sep 2026 — TLS handshake 20 Sep 2026: the certificate served for saboskirtonline.shop became valid on 13 Sep 2026 and expires 12 Dec 2026, i.e. 7 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.Supports: A dated tls reading taken by our own server. | 2026-09-20 |
| A3.spage_assets | saboskirtonline.shop | Images served from another hostname — Read 20 Sep 2026: images on this page load from saboskirt.com rather than saboskirtonline.shop itself. Where that hostname belongs to the brand being shown, the page is serving the brand's own files — which is file-level copying rather than an imitated look. Where it is an ordinary CDN or an image host, it is not a finding.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A3.sdns_mail | saboskirtonline.shop | No mail records published — DNS read 20 Sep 2026: saboskirtonline.shop publishes no MX record, so this name cannot receive email at the domain it asks you to trust. Plenty of legitimate sites route mail elsewhere, so read it alongside the rest.Supports: A dated dns reading taken by our own server. | 2026-09-20 |
| A3.spage_fetch | saboskirtonline.shop | Fetched the page: HTTP 200 — Fetched 20 Sep 2026 with cache bypassed: HTTP 200, page title “Buy Women's Summer Fashion Online Australia. | SABO”.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A4 | sabo-skirt.com | the page as served, fetched with cache bypassed — live, HTTP 200Supports: That this hostname resolved and answered on the date stated. | 2026-09-20 |
| A4.stls_certificate | sabo-skirt.com | No usable HTTPS certificate read — Attempted 20 Sep 2026: TLS handshake failed (error:10000438:SSL routines:OPENSSL_internal:TLSV1_ALERT_INTERNAL_ERROR). We report that as a fact about our own connection.Supports: A dated tls reading taken by our own server. | 2026-09-20 |
| A4.spage_fetch | sabo-skirt.com | Fetched the page: HTTP 200 — Fetched 20 Sep 2026 with cache bypassed: HTTP 200, no page title in the HTML served.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A5 | saboskirt.store | the page as served, fetched with cache bypassed — live, HTTP 200, title “Default page”Supports: That this hostname resolved and answered on the date stated. | 2026-09-20 |
| A5.sregistration_age | saboskirt.store | Registered 239 days ago — Public registration data read 20 Sep 2026: saboskirt.store was registered on 24 Jan 2026, which is 239 days before this check. The registration runs to 24 Jan 2027.Supports: A dated registration reading taken by our own server. | 2026-09-20 |
| A5.stls_certificate | saboskirt.store | Certificate issued 23 Jul 2026 — TLS handshake 20 Sep 2026: the certificate served for saboskirt.store became valid on 23 Jul 2026 and expires 21 Oct 2026, i.e. 59 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.Supports: A dated tls reading taken by our own server. | 2026-09-20 |
| A5.spage_fetch | saboskirt.store | Fetched the page: HTTP 200 — Fetched 20 Sep 2026 with cache bypassed: HTTP 200, page title “Default page”.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A6 | saboskirthq.shop | the page as served, fetched with cache bypassed — live, HTTP 200, title “SABO | Shop Women's Summer Clothing Online Australia. | SABO”Supports: That this hostname resolved and answered on the date stated. | 2026-09-20 |
| A6.sregistration_age | saboskirthq.shop | Registered 92 days ago — Public registration data read 20 Sep 2026: saboskirthq.shop was registered on 20 Jun 2026, which is 92 days before this check. The registration runs to 20 Jun 2027.Supports: A dated registration reading taken by our own server. | 2026-09-20 |
| A6.spage_payment | saboskirthq.shop | Payment methods worth noting on the page — Read 20 Sep 2026 in the text served: gift cards. Ordinary stores sell these too — it is only worth weighing alongside the other readings.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A6.spage_assets | saboskirthq.shop | Images served from another hostname — Read 20 Sep 2026: images on this page load from cdn.shopify.com rather than saboskirthq.shop itself. Where that hostname belongs to the brand being shown, the page is serving the brand's own files — which is file-level copying rather than an imitated look. Where it is an ordinary CDN or an image host, it is not a finding.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A6.sdns_mail | saboskirthq.shop | No mail records published — DNS read 20 Sep 2026: saboskirthq.shop publishes no MX record, so this name cannot receive email at the domain it asks you to trust. Plenty of legitimate sites route mail elsewhere, so read it alongside the rest.Supports: A dated dns reading taken by our own server. | 2026-09-20 |
| A6.stls_certificate | saboskirthq.shop | Certificate issued 18 Aug 2026 — TLS handshake 20 Sep 2026: the certificate served for saboskirthq.shop became valid on 18 Aug 2026 and expires 16 Nov 2026, i.e. 33 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.Supports: A dated tls reading taken by our own server. | 2026-09-20 |
| A6.spage_fetch | saboskirthq.shop | Fetched the page: HTTP 200 — Fetched 20 Sep 2026 with cache bypassed: HTTP 200, page title “SABO | Shop Women's Summer Clothing Online Australia. | SABO”.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A7 | saboskirtofficial.shop | the page as served, fetched with cache bypassed — live, HTTP 200, title “Buy Women's Event Outfits & Resort Wear Online | SABO”Supports: That this hostname resolved and answered on the date stated. | 2026-09-20 |
| A7.spage_credentials | saboskirtofficial.shop | The page asks for credentials or card details — Read 20 Sep 2026 in the HTML served: a card security-code prompt. That is what the page collects, read off its own markup on this date.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A7.spage_payment | saboskirtofficial.shop | Irreversible payment methods named on the page — Read 20 Sep 2026 in the text served: Cash App, gift cards. A payment made this way carries no chargeback right, so it is the hardest kind to reverse.Supports: A dated page reading taken by our own server. | 2026-09-20 |
| A7.sregistration_age | saboskirtofficial.shop | Registered 125 days ago — Public registration data read 20 Sep 2026: saboskirtofficial.shop was registered on 18 May 2026, which is 125 days before this check. The registration runs to 18 May 2027.Supports: A dated registration reading taken by our own server. | 2026-09-20 |
| A7.stls_certificate | saboskirtofficial.shop | Certificate issued 13 Sep 2026 — TLS handshake 20 Sep 2026: the certificate served for saboskirtofficial.shop became valid on 13 Sep 2026 and expires 12 Dec 2026, i.e. 6 days old at this check. A certificate is issued when a site is set up or renewed, so its start date is a floor on how long this address has been serving under this name — not proof of anything on its own.Supports: A dated tls reading taken by our own server. | 2026-09-20 |
| A7.sdns_mail | saboskirtofficial.shop | No mail records published — DNS read 20 Sep 2026: saboskirtofficial.shop publishes no MX record, so this name cannot receive email at the domain it asks you to trust. Plenty of legitimate sites route mail elsewhere, so read it alongside the rest.Supports: A dated dns reading taken by our own server. | 2026-09-20 |
| A7.spage_fetch | saboskirtofficial.shop | Fetched the page: HTTP 200 — Fetched 20 Sep 2026 with cache bypassed: HTTP 200, page title “Buy Women's Event Outfits & Resort Wear Online | SABO”.Supports: A dated page reading taken by our own server. | 2026-09-20 |
Method and scope limits, as of 20 Sep 2026
Nothing in this pipeline drives a browser or takes a screenshot. Every reading is DNS, TLS, HTTP or a public registration record, taken by our own server on 20 Sep 2026, with caches bypassed.
- Generate. A deterministic generator produced 134 candidate names from saboskirt.com alone — the same name on a different ending, hyphenated forms, single characters swapped, dropped, doubled or transposed, and the retail-word patterns (shop, store, outlet, sale, official) our documented corpus is full of. The same domain always produces the same list.
- Ask the certificate logs. 1197 certificates logged against saboskirt.com were read on 20 Sep 2026; 3 hostnames named by those certificates carried no form of the brand's name at all — shared certificate and content-delivery infrastructure — and were counted rather than listed. A certificate log records that a certificate was issued, and nothing about what a hostname served — and one log service's answer is never a clean bill of health.
- Confirm. All 134 candidates were resolved. 7 resolved and were fetched; 127 have no DNS record at all and are counted, never listed — a name nobody registered is not an impersonation.
- Grade. saboskirt.com was fetched once as the reference page (HTTP 200) and every confirmed hostname was compared against it for the four copying classes: the brand's own hosted files being served, its image filenames, its catalogue handles or part numbers, and its title wording.
- Rate.The risk on each row is a pure function of what was observed — serving a page today with at least one copying class found is high; serving with none found is medium; resolving without serving, parked, or reading as the brand's own alias is low. No prose can raise or lower it.
What this report deliberately does not contain
- No registrar, host, network, IP owner or certificate authority. We do not look them up on this tier, so we do not name them — and we never guess. The request above tells the sender how to find the right desk with three free lookups instead.
- No claim about who registered a name, or why. We describe what each page serves; we make no assertion about any registrant’s intent or criminality, and nothing here is legal advice.
- No filing, and no outcome. We assemble the evidence and draft the request; on this tier you send it. We do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform.
- No monitoring. It is a point-in-time audit. Everything here describes 20 Sep 2026, and a hostname's state can change the next day.
- No completeness claim. The candidates are the patterns this generator produces plus what the certificate logs returned. A name we did not check is unchecked, not clean.
This audit was produced on 20 Sep 2026 from public information and our own live reads taken that day. It is a point-in-time assessment, not monitoring, and not legal advice. We assemble the evidence and draft the request; on this tier you send it — we do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised, because that decision belongs to each registrar, host and platform. We name no registrar, hosting provider, network or certificate authority, and we make no assertion about anyone's identity or intent. A hostname's state can change at any time after the date on this report.
Run the same thing on your own domain
The counts are free — put in your company name and the domain you own and the sweep runs here, no email and no card. $29, once, turns those counts into the document you have just read in full: every hostname, the dated readings, the copying evidence where we find it, the rating derived in code, and the request drafted with your details in square brackets.
How many lookalikes of your name are answering right now?
Free, no email and no card: we generate the lookalike and typosquat names for your domain, resolve them, fetch the ones that answer and grade them against your own page — then show you the counts, two of the rows in full, and the rest withheld. We generate the lookalike and typosquat names from your domain — different endings, hyphenated forms, single-character swaps and drops, and the shop / store / outlet / sale / official patterns our own documented corpus is full of. Only hostnames we confirm resolving are counted as resolving — a name nobody has registered is counted, never padded into a list.
No email, no card, no account. The sweep runs live and usually takes under a minute.
Know what you need already? The $29 report is right here. The $29 report names every hostname behind these counts, with the dated readings for each, the copying evidence where we found it, a risk rating derived in code, our own published record where we already hold one — and the takedown request drafted for you to send.
- Lookalike and typosquat candidates generated from your own domain — different endings, hyphenated forms, character swaps, drops and doublings, and the -shop/-outlet/-store/-sale/-official patterns our own documented corpus is full of
- Every candidate resolved, and everything that resolves fetched live with cache bypassed — only hostnames we confirm resolving are listed, so a name nobody registered is counted rather than padded into your report
- Per hostname: the date-stamped readings behind it — DNS, the HTTPS certificate served, the public registration record, and the page as served
- Per hostname: a risk rating derived in code from what was observed, and the copying evidence where we found it — your own hosted files being served, your image filenames, your catalogue handles or part numbers, or your title wording reproduced
- Where we already publish a dated record for a hostname, our own published finding, quoted verbatim
- A ready-to-send takedown request with your details in square brackets, plus the dated evidence index it refers to
- Delivered the moment the reads finish — the checks run live when you pay, so there is no research queue in front of it
What this is not: the Evidence Report is the researched tier — it adds the registrar and the true upstream host per domain, a filing drafted separately for every desk, and research beyond the patterns generated here. The audit is the deterministic sweep of your own name plus live reads, delivered without a research queue.
This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform.
This is a point-in-time audit of publicly observable information, not legal advice and not monitoring. We assemble the evidence and draft the request; on this tier you send it. We do not file on your behalf, we do not contact the registrant, and no outcome or timeline is promised — that decision belongs to each registrar, host and platform.
Every finding here is an assessment of publicly available information at the time of the check, and is not legal advice. We produce the evidence and the correctly addressed request; on a Takedown Engagement we submit it to the abuse desks as the customer’s authorized agent, which is an administrative act and not legal representation. We do not monitor continuously and never contact the registrant on a customer’s behalf, and no outcome or timeline is guaranteed. Confirm your own trademark position before sending anything adversarial.
Who we are, and exactly how we verify a copy: about Scam Detective.
Are you SABO Skirt, or any brand named on this page, and want this taken down or corrected? Write to scam-detective8@mail.acoco.ai and we will act on it.