Research / July 2026
9
government and university domains hosting adult-AI spam, documented
The Parasite Files: Spam PDFs on Government and University Sites Are Gaming Adult AI Search
During routine daily monitoring of adult AI search results, Sindexed documented a network of spam PDFs hosted on United States military, university, and government websites — including West Point, UC San Diego, the University of Kentucky, and the State of California — ranking in Google for queries like “best AI porn generator.” The PDFs are uploaded through unsecured public web forms whose attachment directories are publicly crawlable. The institutions are victims, not participants: their domain authority is being hijacked to rank affiliate content that outranks legitimate results.
How the scheme works
Every observed host runs a public-facing form (contact, application, or submission forms built on WordPress plugins like Contact Form 7, WPForms, Forminator, and Ninja Forms, or Drupal webforms) that accepts file attachments and stores them in a web-accessible directory. Spammers upload keyword-stuffed PDF listicles as “attachments,” the files inherit the institution’s domain authority, and Google indexes and ranks them — sometimes in the top 10 — for commercial adult AI queries. The PDFs funnel readers to affiliate links. The same template appears across hosts, indicating a single coordinated operation.
Documented observations
| Host | Institution type | Upload vector | Ranking for | Observed |
|---|---|---|---|---|
| band.westpoint.edu | .edu (US Military Academy) | wp-content/.../wpcf7-files/ | best NSFW AI chatbot queries | Jul 12-17, 2026 |
| catalog.westpoint.edu | .edu (US Military Academy) | form-upload directory | AI porn queries | Jul 13, 2026 |
| ktc.uky.edu | .edu (University of Kentucky) | wp-content/uploads/forminator/temp/ | AI porn generator queries | Jul 13-17, 2026 |
| cih.ucsd.edu | .edu (UC San Diego) | sites/default/files/webform/ | AI porn consumer-report queries | Jul 17, 2026 |
| publicart.northeastern.edu | .edu (Northeastern University) | form-upload directory | AI porn queries | Jul 13, 2026 |
| calrecycle.ca.gov | .gov (State of California) | wp-content/uploads/.../wpforms/tmp/ | AI porn creator queries | Jul 17, 2026 |
| santaclarautah.gov | .gov (City of Santa Clara, UT) | wp-content/uploads/wpforms/tmp/ | best AI porn generator | Jul 17, 2026 |
| tenterfield.nsw.gov.au | .gov.au (Tenterfield Shire Council) | ninja-forms upload | best ai porn generator (ranked #9) | Jul 15, 2026 |
| humanokologia.tatk.elte.hu | .hu (ELTE University, Budapest) | compromised page (not PDF) | best cam sites (ranked #8) | Jul 13-17, 2026 |
A ResearchGate-hosted PDF from the same template family was also observed at #4 for “best ai porn generator” (July 15). We retain dated URL records for every observation and will share them with affected institutions, researchers, or reporters: support@sindexed.com.
Why it matters
For the institutions, it is a security and reputation failure that is trivial to fix (restrict or de-index form-upload directories). For users, it means top search results for adult AI queries are frequently undisclosed affiliate spam wearing a .gov or .edu badge. For the industry, it means legitimate platforms and reviewers are being outranked by content that no one stands behind. We re-check these hosts as part of daily monitoring and will update this page as the network moves or is purged.
Responsible disclosure and citation
We name hosts because the files are already public, indexed, and ranking — the harm is ongoing and visibility accelerates cleanup. Affected institutions can reach us for full URL lists at support@sindexed.com. All findings free to cite with attribution to Sindexed and a link (CC BY 4.0).