VQV Signal

RESEARCH WATCH TECHNICAL

AIR's Web Hole research says expired domains still ranking in search can hijack AI agents

According to a post on X by @air__security, AI agent security company AIR published research called "Web Hole." The research says agents that search the web will trust pages on expired domains that still rank in results, so a buyer of one such domain for a few dollars could feed malicious instructions to every agent that lands there. In testing about 2,000 everyday agent searches, AIR found 36 expired domains still ranking, and it reports that live sites are already giving instructions to AI agents.

Source: Scobleizer News Pulse (X) · x.com Found via Robert Scoble’s Scobleizer News Pulse · a post on X, not independently verified Published 2026-10-25T07:57:00+00:00 Detected 2026-10-25T13:17:29+00:00
View original source

According to a post on X by @air__security, AI agent security company AIR published research called "Web Hole." The research says agents that search the web will trust pages on expired domains that still rank in results, so a buyer of one such domain for a few dollars could feed malicious instructions to every agent that lands there. In testing about 2,000 everyday agent searches, AIR found 36 expired domains still ranking, and it reports that live sites are already giving instructions to AI agents.

AI-assisted summary based on the listed source.

AI agent security company AIR published “Web Hole,” research finding that agents searching the web will trust pages on domains that have expired but still rank in results, so anyone who buys one for a few dollars can feed malicious instructions to every agent that lands there. Testing about 2,000 everyday agent...

Teams building or deploying AI agents that search or browse the web may be exposed to instructions placed on domains they do not control. The research suggests the risk comes from what agents trust in search results, not only from the agent itself. Watch whether AIR publishes the full Web Hole report with details on the affected sites.

Signal Strength 86% Technical label WATCH Public Interest 25 Category RESEARCH Reader Depth TECHNICAL

Signal Strength reflects source quality, relevance, freshness and evidence. Public Interest helps organize discovery; it is not proof of truth.

Public Interest components
Recognizable Entity Score 0 Practical Impact Score 0 Novelty Interest Score 70 Consequence Score 34 Curiosity Score 16 Shareability Score 41

VQV surfaced this signal because it is recent, relevant to AI Agents, connected to Scobleizer News Pulse (X).