Fake Domains for Delta, Hilton, and El Al Surge Amid Vacation Booking Scams
Translated & summarized from N12 by baba
Israeli cybersecurity firm BrandShield reports a significant rise in fake domains impersonating Delta, Hilton, and El Al Airlines, used in phishing scams targeting vacationers. The increase includes a 77% rise in Delta-related domains and a 122% jump for Hilton, with El Al domains also growing. Scammers also impersonate company representatives on social media to steal personal and payment information. Consumers are urged to verify official channels and be cautious with links and offers.
The story in 6 lines · by baba
- BrandShield reports a 77% rise in fake Delta domains and 122% increase for Hilton since 2025.
- El Al-related fake domains grew 19% between April and July 2026.
- Scammers impersonate airline reps on Facebook to trick customers into sharing data.
- Fake sites mimic real ones closely, with minor domain name changes and authentic logos.
- Consumers should verify URLs, avoid unsolicited links, and use official company channels.
- Low prices and unexpected messages should raise suspicion during online bookings.
Israeli cybersecurity firm BrandShield has identified a sharp increase in fake internet domains impersonating major travel and hospitality brands, including Delta Airlines, Hilton Hotels, and Israel's El Al Airlines. Between August 2025 and July 2026, Delta-related domains rose by 77%, from 1,421 to 2,517, peaking at 2,815 in June 2026. Hilton saw a 122% increase, from 156 to 347 domains in the same period. El Al domains grew by 19% from April to July 2026, reaching 1,059. These fraudulent domains are often used in phishing attempts to steal credit card and personal information from vacationers.
The scams extend beyond fake websites to social media impersonations. For example, a Facebook user reported receiving a private message from someone posing as an El Al representative after complaining about an issue in a public Facebook group. The impersonator, aware of the user's complaint, attempts to gain trust and lure victims into sharing sensitive data or clicking malicious links. This tactic exploits the timing when customers expect legitimate service responses, making the deception more convincing.
BrandShield warns that while not all domain registrations containing brand names are fraudulent, the proliferation of such domains increases the risk of phishing attacks. Yoav Keren, CEO of BrandShield, emphasized that high-demand travel periods are prime opportunities for scammers who create nearly identical websites to lure consumers seeking good deals under time pressure. He advises consumers to verify website URLs carefully, avoid clicking unsolicited links, and confirm they are dealing with official company channels.
Common signs of fake sites include subtle changes in domain names, such as swapped letters, added hyphens, or different domain extensions, even when the site’s design and logos appear authentic. Users are urged to be cautious, especially when offers seem unusually cheap, and to rely on official apps or websites rather than links received via SMS, WhatsApp, or private messages.
This surge in fraudulent domains and social media impersonations highlights the growing sophistication of cybercriminals targeting travelers, underscoring the need for heightened vigilance during online holiday bookings.
Mentioned
