Phantom Squatting - Montana Empire Phishing Kit

Georg Lauenstein@gsec

•updated Jul 1, 2026•1•0•11

Detects connections to domains associated with the Montana Empire phishing kit, which leverages AI-hallucinated postal service domains for credential harvesting. This kit targets phantom domains identified through LLM hallucination prediction and exploits AI-generated domain suggestions.