.gov websites appear to be hosting nudes/movies

[justbeingbored]

Check for yourself using variations of this search query: "hot milf" site:.gov "123movies" site:.gov

Every time I change the query I seem to get more results from a bunch of US government websites.

Look at this one site in particular hosting a bunch of links to nudes: https://testla.doa.louisiana.gov/

I thought .gov websites were about hosting government related business and not nudes.

[mtlsnk]

These subdomains/sites are most likely misconfigured in such a way that malicious actors are able to redirect to/host anything they wish.

There was a blogpost here on HN about this, showing that (Roblox/Robux) scams were also seemingly hosted on .gov sites. I can't find that post anymore.

Here is a publication related to what you've found: https://cofense.com/blog/threat-actors-exploit-government-we...

[justbeingbored]

I think you are right. A bunch of them appear to be some sort of redirect attack (I'll have to read that link you posted). In other cases I see the just upload files directly such as: https://www.rld.nm.gov/wp-content/uploads/2025/06/z7ot3u38jf... or in that original link I posted it looks like they took over the entire subdomain somehow.

I have quite a few more examples but they are too explicit to post.

My thought on this matter is, if we can't get this contained now on .gov websites then how will we be able to handle malicious spammers when they fully realize the power of AI driven spam attacks? I think things will get out of control real fast very soon.

[baobun]

I guess at least the EU are lining up to put up an iron curtain once they get all the locals KYCd for EUnet.

https://news.ycombinator.com/item?id=44168134