.gov websites appear to be hosting nudes/movies

9•justbeingbored•8mo ago

Check for yourself using variations of this search query: "hot milf" site:.gov "123movies" site:.gov

Every time I change the query I seem to get more results from a bunch of US government websites.

Look at this one site in particular hosting a bunch of links to nudes: https://testla.doa.louisiana.gov/

I thought .gov websites were about hosting government related business and not nudes.

Comments

mtlsnk•8mo ago

These subdomains/sites are most likely misconfigured in such a way that malicious actors are able to redirect to/host anything they wish.

There was a blogpost here on HN about this, showing that (Roblox/Robux) scams were also seemingly hosted on .gov sites. I can't find that post anymore.

Here is a publication related to what you've found: https://cofense.com/blog/threat-actors-exploit-government-we...

justbeingbored•8mo ago

I think you are right. A bunch of them appear to be some sort of redirect attack (I'll have to read that link you posted). In other cases I see the just upload files directly such as: https://www.rld.nm.gov/wp-content/uploads/2025/06/z7ot3u38jf... or in that original link I posted it looks like they took over the entire subdomain somehow.

I have quite a few more examples but they are too explicit to post.

My thought on this matter is, if we can't get this contained now on .gov websites then how will we be able to handle malicious spammers when they fully realize the power of AI driven spam attacks? I think things will get out of control real fast very soon.

baobun•8mo ago

I guess at least the EU are lining up to put up an iron curtain once they get all the locals KYCd for EUnet.

https://news.ycombinator.com/item?id=44168134

Show HN: Minecraft Creeper meets 90s Tamagotchi

Show HN: Termiteam – Control center for multiple AI agent terminals

The only U.S. particle collider shuts down

Ask HN: Why do purchased B2B email lists still have such poor deliverability?

Show HN: Remotion directory (videos and prompts)

Portable C Compiler

Show HN: Kokki – A "Dual-Core" System Prompt to Reduce LLM Hallucinations

Software Engineering Transformation 2026

Microsoft purges Win11 printer drivers, devices on borrowed time

Lunch with the FT: Tarek Mansour

Old Mexico and her lost provinces (1883)

'AI' is a dick move, redux

The source code was the moat. But not anymore

Does anyone else feel like their inbox has become their job?

An AI model that can read and diagnose a brain MRI in seconds

Dev with 5 of experience switched to Rails, what should I be careful about?

AlphaFace: High Fidelity and Real-Time Face Swapper Robust to Facial Pose

Scientists discover “levitating” time crystals that you can hold in your hand

Rammstein – Deutschland (C64 Cover, Real SID, 8-bit – 2019) [video]

Tell HN: Yet Another Round of Zendesk Spam

Postgres Message Queue (PGMQ)

Show HN: Django-rclone: Database and media backups for Django, powered by rclone

NY lawmakers proposed statewide data center moratorium

OpenClaw AI chatbots are running amok – these scientists are listening in

Show HN: AI agent forgets user preferences every session. This fixes it

Introduce the Vouch/Denouncement Contribution Model

Show HN: SSHcode – Always-On Claude Code/OpenCode over Tailscale and Hetzner

Microsoft appointed a quality czar. He has no direct reports and no budget

Multi-agent coordination on Claude Code: 8 production pain points and patterns

Washington Post CEO Will Lewis Steps Down After Stormy Tenure