# phantom-squatting-attackers-register-the-domains-that-models-hallucinate: Phantom Squatting: Attackers Register the Domains That Models Hallucinate

> Phantom Squatting: Attackers Register the Domains That Models Hallucinate is a medium-severity security issue in Attackers Register the Domains That Models Hallucinate, an AI agent. Affected: 2.1 million URLs across 913 brands; ~250,000 hallucinated domains unregistered at publication.

- **Canonical URL:** https://catalog.anomity.ai/vuln/phantom-squatting-attackers-register-the-domains-that-models-hallucinate
- **Aliases:** ti-086
- **Severity:** medium
- **Attack type:** Other
- **Component:** Attackers Register the Domains That Models Hallucinate (AI agent)
- **Exploited in the wild:** no known exploitation
- **Published:** 2026-06-30
- **Last verified:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/vuln/phantom-squatting-attackers-register-the-domains-that-models-hallucinate

## Summary

Unit 42 ran 685,339 adversarial prompts across 913 brands and collected 2.1 million unique URLs, finding that models routinely invent plausible domains for real companies and that roughly 250,000 of those hallucinated domains sit unregistered and available for anyone to claim. Of the URLs examined, 13,229 were already confirmed malicious and a further 41,313 were high risk, with malware accounting for 67.2 percent of threats and phishing 16.2 percent. A freshly registered hallucinated domain carries no reputation history, which is exactly what lets it pass URL filtering built on reputation, and an agent that browses or fetches on its own will follow the link without a human ever reading the address.

## Affected versions

| Affected | Fixed in |
| --- | --- |
| 2.1 million URLs across 913 brands; ~250,000 hallucinated domains unregistered at publication | no fixed version listed |

## Am I affected by this vulnerability?

You are affected if you run 2.1 million URLs across 913 brands; ~250,000 hallucinated domains unregistered at publication.

## How do I fix it?

Reputation-based URL filtering is the wrong control here by construction, because these domains are new by design and have no history to score. Monitor registrations of the domains your own brand attracts in model output, and constrain what agents may fetch: an allowlist of domains an agent is permitted to reach beats trying to score the ones it invents.

## How do I find every machine running Attackers Register the Domains That Models Hallucinate?

Anomity inventories the AI agents, MCP servers, IDE extensions and skills on each developer device, so you can see which machines run Attackers Register the Domains That Models Hallucinate and which version, then enforce a policy on it.

## References

- article: https://unit42.paloaltonetworks.com/phantom-squatting-hallucinated-web-domains/

## Related vulnerabilities

- [CVE-2026-35616](https://catalog.anomity.ai/vuln/cve-2026-35616) — high
- [openai-two-internal-gpt-6-coding-agents-weakened-misalignment](https://catalog.anomity.ai/vuln/openai-two-internal-gpt-6-coding-agents-weakened-misalignment) — medium
- [pixelleak-coding-agents-posted-13-000-internal-screenshots-to-public](https://catalog.anomity.ai/vuln/pixelleak-coding-agents-posted-13-000-internal-screenshots-to-public) — high
- [claude-code-mods-function-hooks-preview-gives-plugin-and-skills-folder](https://catalog.anomity.ai/vuln/claude-code-mods-function-hooks-preview-gives-plugin-and-skills-folder) — medium
- [a-repo-defined-claude-code-subagent-downgraded-its-own-security-review](https://catalog.anomity.ai/vuln/a-repo-defined-claude-code-subagent-downgraded-its-own-security-review) — medium
- [owasp-publishes-the-2026-llm-top-10-and-an-agent-control-standard-for](https://catalog.anomity.ai/vuln/owasp-publishes-the-2026-llm-top-10-and-an-agent-control-standard-for) — low

---

Source: Anomity Security Database (https://catalog.anomity.ai/vuln). Detect affected AI tools on developer devices: https://anomity.ai/?utm_source=catalog&utm_medium=vuln-md&utm_campaign=phantom-squatting-attackers-register-the-domains-that-models-hallucinate