.gov websites appear to be hosting nudes/movies

9•justbeingbored•8mo ago

Check for yourself using variations of this search query: "hot milf" site:.gov "123movies" site:.gov

Every time I change the query I seem to get more results from a bunch of US government websites.

Look at this one site in particular hosting a bunch of links to nudes: https://testla.doa.louisiana.gov/

I thought .gov websites were about hosting government related business and not nudes.

Comments

mtlsnk•8mo ago

These subdomains/sites are most likely misconfigured in such a way that malicious actors are able to redirect to/host anything they wish.

There was a blogpost here on HN about this, showing that (Roblox/Robux) scams were also seemingly hosted on .gov sites. I can't find that post anymore.

Here is a publication related to what you've found: https://cofense.com/blog/threat-actors-exploit-government-we...

justbeingbored•8mo ago

I think you are right. A bunch of them appear to be some sort of redirect attack (I'll have to read that link you posted). In other cases I see the just upload files directly such as: https://www.rld.nm.gov/wp-content/uploads/2025/06/z7ot3u38jf... or in that original link I posted it looks like they took over the entire subdomain somehow.

I have quite a few more examples but they are too explicit to post.

My thought on this matter is, if we can't get this contained now on .gov websites then how will we be able to handle malicious spammers when they fully realize the power of AI driven spam attacks? I think things will get out of control real fast very soon.

baobun•8mo ago

I guess at least the EU are lining up to put up an iron curtain once they get all the locals KYCd for EUnet.

https://news.ycombinator.com/item?id=44168134

Was going to share my work

Pitchfork: A devilishly good process manager for developers

You Are Here

Why social apps need to become proactive, not reactive

How patient are AI scrapers, anyway? – Random Thoughts

Vouch: A contributor trust management system

I built a terminal monitoring app and custom firmware for a clock with Claude

Tiny C Compiler

Y Combinator Founder Organizes 'March for Billionaires'

Ask HN: Need feedback on the idea I'm working on

OpenClaw Addresses Security Risks

Apple finalizes Gemini / Siri deal

Italy Railways Sabotaged

Emacs-tramp-RPC: high-performance TRAMP back end using MsgPack-RPC

Nintendo Wii Themed Portfolio

"There must be something like the opposite of suicide "

Ask HN: Why doesn't Netflix add a “Theater Mode” that recreates the worst parts?

Show HN: Engineering Perception with Combinatorial Memetics

Show HN: Steam Daily – A Wordle-like daily puzzle game for Steam fans

The Anthropic Hive Mind

Just Started Using AmpCode

LLM as an Engineer vs. a Founder?

Crosstalk inside cells helps pathogens evade drugs, study finds

Show HN: Design system generator (mood to CSS in <1 second)

Show HN: 26/02/26 – 5 songs in a day

Toroidal Logit Bias – Reduce LLM hallucinations 40% with no fine-tuning

Top AI models fail at >96% of tasks

The Science of the Perfect Second (2023)

Bob Beck (OpenBSD) on why vi should stay vi (2006)

Show HN: a glimpse into the future of eye tracking for multi-agent use