{"id":55676,"date":"2026-07-16T10:38:11","date_gmt":"2026-07-16T10:38:11","guid":{"rendered":"https:\/\/ebrand.com\/?p=55676"},"modified":"2026-10-21T08:50:08","modified_gmt":"2026-10-21T08:50:08","slug":"phantom-squatting","status":"publish","type":"post","link":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/","title":{"rendered":"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0"},"content":{"rendered":"\n
\n
\n

Key Takeaway:<\/p>\n

Phantom squatting lets scammers register the fake web addresses that AI chatbots invent for real brands. That turns AI assistants into a tool for phishing and fraud. And these mistakes repeat: in a 2025 study of AI coding tools, 43% of made-up software package names came back every time researchers ran the same prompt.<\/p>\n<\/div>\n<\/div>\n\n\n\n

Ask an AI assistant for your bank’s login portal, your insurer’s claims page, or a retailer’s returns policy, and it might confidently hand back a domain that sounds exactly right. The problem: that domain often does not exist. Large language models regularly invent plausible web addresses for real brands, filling gaps in their training data with names that feel structurally correct even though nobody registered them. Security researchers now call this phenomenon phantom squatting, and it represents one of the more unsettling supply chain risks to emerge from enterprise AI adoption. <\/strong><\/p>\n\n\n\n

\"This<\/figure>\n\n\n\n

This blog unpacks how phantom squatting works, why it hits banking and retail brands especially hard, and what EBRAND’s cyber threat intelligence team does to catch these phantom domains before criminals weaponize them. We will also look at how phantom llm cybersquatting fits into the wider pattern of AI-driven cyberattacks reshaping enterprise risk. If your brand relies on AI visibility, and today almost every brand does, understanding this threat matters. Get started with a free threat intelligence report<\/a> to see which phantom domains already threaten your organization. <\/p>\n\n\n\n

What phantom squatting actually means<\/strong> <\/h2>\n\n\n\n

Phantom squatting describes the practice of cybercriminals registering the nonexistent domains that AI models hallucinate for legitimate brands, then loading those domains with phishing kits, malware, or credential-harvesting forms. The mechanism differs meaningfully from classic typosquatting. Typosquatting exploits human error: someone fat-fingers a URL and lands on a lookalike page. Phantom squatting exploits machine error instead. The AI assistant invents a domain that never existed, presents it as fact, and a person or an increasingly autonomous agent follows that recommendation straight into attacker-controlled territory. <\/p>\n\n\n\n

What makes phantom AI attacks so dangerous is their repeatability. Researchers have found that LLMs do not produce random noise when they hallucinate a domain. They generate the same fictitious address again and again across queries, because the model draws on consistent patterns in brand naming, industry conventions, and regional TLDs. That predictability cuts both ways. It gives attackers a roadmap for which phantom domains to register first, but it also gives defenders the exact same roadmap, which we cover further down. <\/p>\n\n\n\n

AI coding tools regularly recommend software that doesn\u2019t exist. In a 2025 study<\/a>, researchers from the University of Texas at San Antonio, the University of Oklahoma, and Virginia Tech put 16 popular AI models to the test across 576,000 code samples. Nearly one in five recommended packages (19.7%) turned out to be fake<\/strong>, and the models invented 205,474 package names in total.<\/p>\n\n\n\n

Worse, these mistakes repeat. When the researchers ran the same prompts ten times, 43% of the made-up names came back every single time<\/strong>. Only 13% looked like simple typos, so tools that hunt for typos would miss most of them.<\/p>\n\n\n\n

The study focused on software, but the same risk hits web addresses. A scammer can ask a chatbot where to log in to your brand\u2019s site, grab any address it makes up, and register it first. Typo monitoring won\u2019t catch it, because nobody made a typo. A Domain Block: Get Ahead of Cybersquatting<\/a> shows one way to stay ahead of new domain registrations.<\/p>\n\n\n\n

Phantom squatting in practice<\/h2>\n\n\n\n

Let’s explore an example of what a current phantom squatting threat might look like, if you’re a banking organization with an active online presence. Imagine, for instance, that you’re a regional bank called Local Bank Group, with a real support page at localbankgroup.com\/support. A customer struggling to reset their online banking password opens ChatGPT and asks for a link to Local Bank Group’s customer support page. The model, drawing on common naming patterns it has seen across hundreds of financial institutions, confidently returns something like localbankgrouponline.com or support.localbankgroup-online.com. Neither domain belongs to the bank. Neither ever did. The AI simply generated the address that felt statistically correct given how similar brands structure their support portals, and it delivered that fabricated link with the same confident tone it would use for a verified fact.<\/p>\n\n\n\n

This scenario is exactly where phantom squatting turns dangerous. A cybercriminal who has already probed AI models for Local Bank Group’s name spots that same hallucinated domain surfacing again and again across queries. They register it, stand up a page that mirrors the bank’s real login screen down to the logo and color scheme, and wait. The next customer who receives that same AI-generated link lands on a convincing fake, enters their username and password, and hands their banking credentials straight to an attacker who never had to send a single phishing email. The AI assistant did the recruiting for free. This dynamic explains why banking and retail brands, where customers constantly ask AI tools for login pages and account support, face the sharpest edge of this threat.<\/p>\n\n\n\n

\"This<\/figure>\n\n\n\n

Why banking and retail carry the biggest target<\/strong> <\/h2>\n\n\n\n

Phantom typosquatting does not distribute risk evenly across industries. Banking and financial services face outsized exposure because customers routinely ask AI tools for login portals, branch locators, and account support pages, all scenarios where a hallucinated domain can capture real credentials. Retail and e-commerce brands face a parallel risk, since shoppers increasingly ask AI assistants for storefronts, tracking pages, and customer service links, each one a potential phantom domain waiting to be squatted. <\/p>\n\n\n\n

The financial sector’s regulators have taken notice. The European Central Bank recently told significant banking institutions to submit a formal action plan addressing AI-driven cyberattacks, with a submission deadline of October 31, 2026, according to a KPMG analysis<\/a> of the ECB’s directive. The letter singles out six focus areas, including accelerated vulnerability management, AI-powered detection, and third-party risk governance, treating AI-enabled threats like phantom squatting as a board-level compliance matter rather than a purely technical one. <\/p>\n\n\n\n

That regulatory pressure lines up with a broader shift in how security leaders think about AI risk. For example, one recent Forbes Technology Council analysis<\/a> argues that the real danger of AI-powered cyberattacks lies less in machines outsmarting human defenders and more in AI collapsing the traditional constraints of time, staffing, and effort that once limited attackers. Phantom squatting fits this pattern precisely: an attacker no longer needs to guess which fake domain might work. The AI model already tested it repeatedly and handed over a validated target. <\/p>\n\n\n\n

How a phantom squatting attack chain plays out<\/strong> <\/h2>\n\n\n\n

A phantom squatting campaign typically follows a simple sequence. An attacker probes multiple AI models with brand-related queries, tracking which hallucinated domains reappear consistently. Once a pattern emerges, the attacker registers the highest-value phantom domains and builds phishing infrastructure behind them, sometimes using an AI coding assistant to accelerate that build. The domain then sits quietly until an AI assistant recommends it to an unsuspecting customer or, increasingly, to an autonomous agent acting on a person’s behalf. <\/p>\n\n\n\n

This last point deserves attention. As AI agents take on more tasks without direct human review, a phantom domain baked into an agent’s recommendation no longer requires a human click to cause damage. An agent that fetches a hallucinated API endpoint or submits data to a fabricated portal can complete an entire supply chain compromise on its own, which raises the stakes for any organization that has integrated AI tools into customer-facing or internal workflows. <\/p>\n\n\n\n

Turning predictability into defense<\/strong> <\/h2>\n\n\n\n

The same repeatability that makes phantom squatting exploitable also makes it defensible. Because LLMs tend to hallucinate the same domains<\/a> for a given brand across repeated queries, an organization can run its own systematic queries against major AI models, enumerate which fictitious domains keep surfacing, and register or monitor those domains before an attacker gets there first. This turns the vulnerability inside out: instead of waiting for a phishing report, defenders proactively map the exact phantom domains a criminal would also find and shut down the opportunity in advance. <\/p>\n\n\n\n

EBRAND’s cyber threat intelligence analysts run this discovery process against your brand names across the AI models customers and prospects actually use. Combined with our Digital Risk Protection<\/a> platform, we identify the phantom domains most likely to attract cybercriminals, flag early registration activity, and support takedown action before a phishing kit ever goes live. For banking, retail, and any brand where customers lean on AI assistants for basic navigation, this proactive monitoring closes a gap that traditional domain protection was never built to cover. <\/p>\n\n\n\n

\"This<\/figure>\n\n\n\n

Get ahead of phantom squatting domains<\/strong> <\/h2>\n\n\n\n

Phantom squatting will only grow more common as AI assistants become the default way people search for brands online. Waiting for a customer complaint or a fraud report means reacting after the damage starts. To take control of these growing threats, you can get a free threat intelligence report<\/a> from EBRAND. Together, we’ll detect any phantom domains that cybercriminals might use to hijack your website visitors, and get proactive about ghost domains and digital spectres. Let’s protect your brand’s AI footprint before someone else steps in.<\/p>\n\n\n\n



Sources<\/strong><\/p>\n\n\n\n

Spracklen, J., et al. (2025). We Have a Package for You! A Comprehensive Analysis of Package Hallucinations by Code Generating LLMs<\/em><\/a>. USENIX Security Symposium 2025.<\/em><\/p>\n","protected":false},"excerpt":{"rendered":"

Key Takeaway: Phantom squatting lets scammers register the fake web addresses that AI chatbots invent for real brands. That turns AI assistants into a tool for phishing and fraud. And these mistakes repeat: in a 2025 study of AI coding tools, 43% of made-up software package names came back every time researchers ran the same […]<\/p>\n","protected":false},"author":41,"featured_media":55680,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[837],"tags":[],"class_list":["post-55676","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-digital-risk-protection"],"yoast_head":"\nPhantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0 - EBRAND<\/title>\n<meta name=\"description\" content=\"Ever clicked on a chatbot link that leads nowhere? Scammers register these hallucinated domains to target you with phantom squatting attacks.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/\" \/>\n<meta property=\"og:locale\" content=\"it_IT\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0\" \/>\n<meta property=\"og:description\" content=\"Ever clicked on a chatbot link that leads nowhere? Scammers register these hallucinated domains to target you with phantom squatting attacks.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/\" \/>\n<meta property=\"og:site_name\" content=\"EBRAND\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-16T10:38:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-10-21T08:50:08+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/ebrand.com\/wp-content\/uploads\/2026\/07\/Phantom-Thumbnail-1.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"627\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"author\" content=\"Asmae Amahrouk\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Scritto da\" \/>\n\t<meta name=\"twitter:data1\" content=\"Asmae Amahrouk\" \/>\n\t<meta name=\"twitter:label2\" content=\"Tempo di lettura stimato\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minuti\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/\"},\"author\":{\"name\":\"Asmae Amahrouk\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#\\\/schema\\\/person\\\/a9d6b5913858163c034a45b94b14c8da\"},\"headline\":\"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0\",\"datePublished\":\"2026-07-16T10:38:11+00:00\",\"dateModified\":\"2026-10-21T08:50:08+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/\"},\"wordCount\":1630,\"publisher\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ebrand.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Phantom-Thumbnail-1.webp\",\"articleSection\":[\"Digital Risk Protection\"],\"inLanguage\":\"it-IT\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/\",\"url\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/\",\"name\":\"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0 - EBRAND\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/ebrand.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Phantom-Thumbnail-1.webp\",\"datePublished\":\"2026-07-16T10:38:11+00:00\",\"dateModified\":\"2026-10-21T08:50:08+00:00\",\"description\":\"Ever clicked on a chatbot link that leads nowhere? Scammers register these hallucinated domains to target you with phantom squatting attacks.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/#breadcrumb\"},\"inLanguage\":\"it-IT\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/#primaryimage\",\"url\":\"https:\\\/\\\/ebrand.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Phantom-Thumbnail-1.webp\",\"contentUrl\":\"https:\\\/\\\/ebrand.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/Phantom-Thumbnail-1.webp\",\"width\":1200,\"height\":627,\"caption\":\"This image of a spooky ghost illustrates our discussion topic about phantom squatting, how hackers use AI hallucinations to hijack your traffic, and how to fight back.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/blog\\\/phantom-squatting\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/ebrand.com\\\/it\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#website\",\"url\":\"https:\\\/\\\/ebrand.com\\\/it\\\/\",\"name\":\"EBRAND\",\"description\":\"Boost and protect your brands. Mitigate risks, Optimize revenues.\",\"publisher\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/ebrand.com\\\/it\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"it-IT\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#organization\",\"name\":\"EBRAND\",\"url\":\"https:\\\/\\\/ebrand.com\\\/it\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/ebrand.com\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/EBRAND-logo.png\",\"contentUrl\":\"https:\\\/\\\/ebrand.com\\\/wp-content\\\/uploads\\\/2024\\\/07\\\/EBRAND-logo.png\",\"width\":1134,\"height\":1027,\"caption\":\"EBRAND\"},\"image\":{\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/204986\\\/\"],\"description\":\"EBRAND provides expert technical guidance, strategic consultancy, and tailored software solutions for Online Brand Protection, Digital Risk Protection, and Corporate Domain Management,\",\"email\":\"contact@ebrand.com\",\"telephone\":\"+352 20 20 31 00\",\"legalName\":\"EBRAND Holdings S.A.\",\"foundingDate\":\"2007-01-01\",\"vatID\":\"LU22551072\",\"numberOfEmployees\":{\"@type\":\"QuantitativeValue\",\"minValue\":\"201\",\"maxValue\":\"500\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/ebrand.com\\\/it\\\/#\\\/schema\\\/person\\\/a9d6b5913858163c034a45b94b14c8da\",\"name\":\"Asmae Amahrouk\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"it-IT\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/907b962b81944d439c070a07b27a67967aae3379319ed0897725d42e54c0470f?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/907b962b81944d439c070a07b27a67967aae3379319ed0897725d42e54c0470f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/907b962b81944d439c070a07b27a67967aae3379319ed0897725d42e54c0470f?s=96&d=mm&r=g\",\"caption\":\"Asmae Amahrouk\"},\"description\":\"As a Cybersecurity Analyst, Asmae plays a vital part of EBRAND's cybersecurity team. She leads threat detection and takedown projects for international brands and VIP clients, from EBRAND's North African hub in Morocco.\",\"sameAs\":[\"http:\\\/\\\/aamahrouk@ebrand.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0 - EBRAND","description":"Ever clicked on a chatbot link that leads nowhere? Scammers register these hallucinated domains to target you with phantom squatting attacks.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/","og_locale":"it_IT","og_type":"article","og_title":"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0","og_description":"Ever clicked on a chatbot link that leads nowhere? Scammers register these hallucinated domains to target you with phantom squatting attacks.","og_url":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/","og_site_name":"EBRAND","article_published_time":"2026-07-16T10:38:11+00:00","article_modified_time":"2026-10-21T08:50:08+00:00","og_image":[{"width":1200,"height":627,"url":"https:\/\/ebrand.com\/wp-content\/uploads\/2026\/07\/Phantom-Thumbnail-1.webp","type":"image\/webp"}],"author":"Asmae Amahrouk","twitter_card":"summary_large_image","twitter_misc":{"Scritto da":"Asmae Amahrouk","Tempo di lettura stimato":"8 minuti"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/#article","isPartOf":{"@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/"},"author":{"name":"Asmae Amahrouk","@id":"https:\/\/ebrand.com\/it\/#\/schema\/person\/a9d6b5913858163c034a45b94b14c8da"},"headline":"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0","datePublished":"2026-07-16T10:38:11+00:00","dateModified":"2026-10-21T08:50:08+00:00","mainEntityOfPage":{"@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/"},"wordCount":1630,"publisher":{"@id":"https:\/\/ebrand.com\/it\/#organization"},"image":{"@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/#primaryimage"},"thumbnailUrl":"https:\/\/ebrand.com\/wp-content\/uploads\/2026\/07\/Phantom-Thumbnail-1.webp","articleSection":["Digital Risk Protection"],"inLanguage":"it-IT"},{"@type":"WebPage","@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/","url":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/","name":"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0 - EBRAND","isPartOf":{"@id":"https:\/\/ebrand.com\/it\/#website"},"primaryImageOfPage":{"@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/#primaryimage"},"image":{"@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/#primaryimage"},"thumbnailUrl":"https:\/\/ebrand.com\/wp-content\/uploads\/2026\/07\/Phantom-Thumbnail-1.webp","datePublished":"2026-07-16T10:38:11+00:00","dateModified":"2026-10-21T08:50:08+00:00","description":"Ever clicked on a chatbot link that leads nowhere? Scammers register these hallucinated domains to target you with phantom squatting attacks.","breadcrumb":{"@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/#breadcrumb"},"inLanguage":"it-IT","potentialAction":[{"@type":"ReadAction","target":["https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/"]}]},{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/#primaryimage","url":"https:\/\/ebrand.com\/wp-content\/uploads\/2026\/07\/Phantom-Thumbnail-1.webp","contentUrl":"https:\/\/ebrand.com\/wp-content\/uploads\/2026\/07\/Phantom-Thumbnail-1.webp","width":1200,"height":627,"caption":"This image of a spooky ghost illustrates our discussion topic about phantom squatting, how hackers use AI hallucinations to hijack your traffic, and how to fight back."},{"@type":"BreadcrumbList","@id":"https:\/\/ebrand.com\/it\/blog\/phantom-squatting\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/ebrand.com\/it\/"},{"@type":"ListItem","position":2,"name":"Phantom Squatting: When Scammers Hijack LLMs\u00a0\u00a0"}]},{"@type":"WebSite","@id":"https:\/\/ebrand.com\/it\/#website","url":"https:\/\/ebrand.com\/it\/","name":"EBRAND","description":"Boost and protect your brands. Mitigate risks, Optimize revenues.","publisher":{"@id":"https:\/\/ebrand.com\/it\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/ebrand.com\/it\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"it-IT"},{"@type":"Organization","@id":"https:\/\/ebrand.com\/it\/#organization","name":"EBRAND","url":"https:\/\/ebrand.com\/it\/","logo":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/ebrand.com\/it\/#\/schema\/logo\/image\/","url":"https:\/\/ebrand.com\/wp-content\/uploads\/2024\/07\/EBRAND-logo.png","contentUrl":"https:\/\/ebrand.com\/wp-content\/uploads\/2024\/07\/EBRAND-logo.png","width":1134,"height":1027,"caption":"EBRAND"},"image":{"@id":"https:\/\/ebrand.com\/it\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/204986\/"],"description":"EBRAND provides expert technical guidance, strategic consultancy, and tailored software solutions for Online Brand Protection, Digital Risk Protection, and Corporate Domain Management,","email":"contact@ebrand.com","telephone":"+352 20 20 31 00","legalName":"EBRAND Holdings S.A.","foundingDate":"2007-01-01","vatID":"LU22551072","numberOfEmployees":{"@type":"QuantitativeValue","minValue":"201","maxValue":"500"}},{"@type":"Person","@id":"https:\/\/ebrand.com\/it\/#\/schema\/person\/a9d6b5913858163c034a45b94b14c8da","name":"Asmae Amahrouk","image":{"@type":"ImageObject","inLanguage":"it-IT","@id":"https:\/\/secure.gravatar.com\/avatar\/907b962b81944d439c070a07b27a67967aae3379319ed0897725d42e54c0470f?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/907b962b81944d439c070a07b27a67967aae3379319ed0897725d42e54c0470f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/907b962b81944d439c070a07b27a67967aae3379319ed0897725d42e54c0470f?s=96&d=mm&r=g","caption":"Asmae Amahrouk"},"description":"As a Cybersecurity Analyst, Asmae plays a vital part of EBRAND's cybersecurity team. She leads threat detection and takedown projects for international brands and VIP clients, from EBRAND's North African hub in Morocco.","sameAs":["http:\/\/aamahrouk@ebrand.com"]}]}},"_links":{"self":[{"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/posts\/55676","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/comments?post=55676"}],"version-history":[{"count":4,"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/posts\/55676\/revisions"}],"predecessor-version":[{"id":59228,"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/posts\/55676\/revisions\/59228"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/media\/55680"}],"wp:attachment":[{"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/media?parent=55676"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/categories?post=55676"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ebrand.com\/it\/wp-json\/wp\/v2\/tags?post=55676"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}