A report finds that AI chatbots are frequently directing users to phishing sites when asked for login URLs to major services.
Security firm Netcraft tested GPT-4.1-based models with natural language queries for 50 major brands and found that 34% of the suggested login links were either inactive, unrelated, or potentially dangerous.
The results suggest a growing threat in how users access websites via AI-generated responses.
Key Findings
Of 131 unique hostnames generated during the test:
- 29% were unregistered, inactive, or parked—leaving them open…








