Fake Domains for Delta, Hilton, and El Al Surge Amid Vacation Booking Scams

Israeli cybersecurity firm BrandShield has identified a sharp increase in fake domains impersonating major travel and hospitality brands, including Delta Airlines, Hilton Hotels, and Israel's El Al Airlines. Between August 2025 and July 2026, Delta-related domains rose by 77%, from 1,421 to 2,517, peaking at 2,815 in June 2026. Hilton saw an even steeper rise of 122%, from 156 to 347 domains in the same period. El Al experienced a 19% increase in just three months, from 892 domains in April 2026 to 1,059 in July 2026.

These fraudulent domains are often used to create fake websites and social media profiles designed to steal credit card and personal information from unsuspecting travelers. The scammers distribute these links via social media and SMS messages. A recent example involved a Facebook user who received a private message from someone impersonating an El Al representative after complaining about an issue in a Facebook group for El Al customers. The impersonator leveraged the timing and context to appear legitimate and potentially extract sensitive information.

BrandShield CEO Yoav Keren warned that while not all domain registrations containing brand names are malicious, the surge in such domains increases the risk of phishing attacks. He urged consumers to be vigilant, verifying website URLs carefully and avoiding clicking on unsolicited links. Fake sites often mimic the original closely, with minor changes in spelling, domain extensions, or added words like "booking" or "tickets." Users should also be cautious about offers that seem too good to be true and confirm they are communicating through official channels.

The rise in these scams coincides with increased demand for travel bookings, a period when consumers are more vulnerable due to urgency and price sensitivity. BrandShield's findings highlight the need for heightened awareness to prevent falling victim to these sophisticated phishing attempts.