--- title: "Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector" url: https://daily.dev/posts/phantom-squatting-ai-hallucinated-domains-as-a-software-supply-chain-vector-tfozy1c4i source_url: https://unit42.paloaltonetworks.com/phantom-squatting-hallucinated-web-domains type: article source: "Unit 42" published: 2026-07-09T07:49:43.895Z updated: 2026-07-09T07:50:28.384Z tags: ["security", "ai-agents", "phishing"] reading_time: 27 upvotes: 0 comments: 0 language: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Phantom Squatting: AI-Hallucinated Domains as a Software Supply Chain Vector **[Unit 42](https://daily.dev/sources/unit42)** · 27 min read · 0 upvotes · 0 comments ## Summary Unit 42 researchers introduce 'phantom squatting' — a supply chain attack vector where adversaries register domains that LLMs consistently hallucinate for legitimate brands. Analyzing 913 global brands with 685,339 adversarial prompts across two LLM families, they generated 2.1 million URLs, finding 13,229 confirmed malicious URLs and ~250,000 unregistered hallucinated domains ripe for adversarial registration. Real-world cases include the Montana Empire phishing kit, where an attacker used an AI coding assistant to build a full phishing operation targeting a domain the researchers had flagged 23 days earlier. The attack exploits a zero-reputation bypass: newly registered phantom domains carry no threat intelligence history, evading conventional URL defenses. Higher LLM temperature settings amplify hallucination rates (43% NXD at T=1.5 vs 34% at T=0.1), though malicious URL rates remain stable across temperatures. Proactive hallucination mapping and registration event monitoring are proposed as the primary defensive countermeasure, offering up to 51 days of lead time before adversarial weaponization. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - ['Phantom Squatting': An Emerging AI-Driven Supply Chain Threat](https://daily.dev/posts/phantom-squatting-an-emerging-ai-driven-supply-chain-threat-8b1vv6jbi) · Dark Reading · 0 upvotes · 0 comments - [Slopsquatting, Phantom Domains, and HalluSquatting Are the Same AI Attack](https://daily.dev/posts/slopsquatting-phantom-domains-and-hallusquatting-are-the-same-ai-attack-h28tgivyd) · BleepingComputer · 2 upvotes · 0 comments - [‘HalluSquatting’ Compromises AI Coding Agents to Install Malware, Create Botnets](https://daily.dev/posts/hallusquatting-compromises-ai-coding-agents-to-install-malware-create-botnets-qkcjydbad) · DevOps.com · 2 upvotes · 1 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-agents](https://daily.dev/tags/ai-agents), [#phishing](https://daily.dev/tags/phishing) [View this post on daily.dev](https://daily.dev/posts/phantom-squatting-ai-hallucinated-domains-as-a-software-supply-chain-vector-tfozy1c4i)