Fake Domains for Delta, Hilton, and El Al Surge Amid Vacation Booking Scams

Israeli cybersecurity firm BrandShield has identified a sharp increase in fake internet domains impersonating major travel and hospitality brands, including Delta Airlines, Hilton Hotels, and Israel's El Al Airlines. Between August 2025 and July 2026, Delta-related domains rose by 77%, from 1,421 to 2,517, peaking at 2,815 in June 2026. Hilton saw a 122% increase, from 156 to 347 domains in the same period. El Al domains grew by 19% from April to July 2026, reaching 1,059. These fraudulent domains are often used in phishing attempts to steal credit card and personal information from vacationers.

The scams extend beyond fake websites to social media impersonations. For example, a Facebook user reported receiving a private message from someone posing as an El Al representative after complaining about an issue in a public Facebook group. The impersonator, aware of the user's complaint, attempts to gain trust and lure victims into sharing sensitive data or clicking malicious links. This tactic exploits the timing when customers expect legitimate service responses, making the deception more convincing.

BrandShield warns that while not all domain registrations containing brand names are fraudulent, the proliferation of such domains increases the risk of phishing attacks. Yoav Keren, CEO of BrandShield, emphasized that high-demand travel periods are prime opportunities for scammers who create nearly identical websites to lure consumers seeking good deals under time pressure. He advises consumers to verify website URLs carefully, avoid clicking unsolicited links, and confirm they are dealing with official company channels.

Common signs of fake sites include subtle changes in domain names, such as swapped letters, added hyphens, or different domain extensions, even when the site’s design and logos appear authentic. Users are urged to be cautious, especially when offers seem unusually cheap, and to rely on official apps or websites rather than links received via SMS, WhatsApp, or private messages.

This surge in fraudulent domains and social media impersonations highlights the growing sophistication of cybercriminals targeting travelers, underscoring the need for heightened vigilance during online holiday bookings.