{"id":86864,"date":"2026-08-04T09:05:45","date_gmt":"2026-08-04T09:05:45","guid":{"rendered":"https:\/\/www.cryptocabaret.com\/?p=86864"},"modified":"2026-08-04T09:05:45","modified_gmt":"2026-08-04T09:05:45","slug":"european-space-agency-website-exploited-to-advertise-shady-iptv-services","status":"publish","type":"post","link":"https:\/\/www.cryptocabaret.com\/?p=86864","title":{"rendered":"European Space Agency Website Exploited to Advertise Shady IPTV Services"},"content":{"rendered":"<p><img fetchpriority=\"high\" decoding=\"async\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2026\/08\/esalogo-600x379.png\" alt=\"esa logo\" width=\"300\" height=\"189\" class=\"alignright size-large wp-image-279921\" srcset=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2026\/08\/esalogo-600x379.png 600w, https:\/\/torrentfreak.com\/images\/esalogo-300x189.png 300w, https:\/\/torrentfreak.com\/images\/esalogo-150x95.png 150w, https:\/\/torrentfreak.com\/images\/esalogo.png 1149w\" sizes=\"(max-width: 300px) 100vw, 300px\">The Cosmos portal is one of the most active corners of the European Space Agency\u2019s website. <\/p>\n<p>Run by ESA\u2019s Science Program, it hosts mission-support pages and public data archives for Gaia, Euclid, XMM-Newton, and dozens of other missions, backed by a science archive that now runs to more than a petabyte of data.<\/p>\n<h2>European Space IPTV Recommendations<\/h2>\n<p>This valuable archive provides key information for researchers and, more recently, it also started to appeal to people who are looking for a cheap pirate IPTV subscription. This clearly isn\u2019t official ESA material, but an exploit by scammers who uploaded hundreds of scammy PDF files to the site\u2019s repository. <\/p>\n<p>A simple site:cosmos.esa.int search shows the scope of the problem. In addition to genuine results, such as a notice that the Gaia satellite was switched off in March 2025, Google returns a series of documents with titles including \u201cTop 10 IPTV Providers Right Now: The Definitive 2026 Rankings\u201d and \u201cBest IPTV Service Provider in the USA 2026\u2026\u201d<\/p>\n<\/p>\n<p><center><em>Scammy PDFs on ESA\u2019s website<\/em><\/center><br \/><center><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2026\/08\/esascam.png\" alt=\"ESA swcam\" width=\"600\" height=\"465\" class=\"alignnone size-full wp-image-279927\" srcset=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2026\/08\/esascam.png 1449w, https:\/\/torrentfreak.com\/images\/esascam-300x233.png 300w, https:\/\/torrentfreak.com\/images\/esascam-600x465.png 600w, https:\/\/torrentfreak.com\/images\/esascam-150x116.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\"><\/center><\/p>\n<p>Because ESA\u2019s .int domain has a good reputation and high authority, these scammy PDF files also rank well in regular search results. Those who search for the best premium IPTV subscriptions for Android will get the ESA domain as the first result through a featured Google snippet. <\/p>\n<\/p>\n<p><center><em>Best premium IPTV subscriptions for android<\/em><\/center><br \/><center><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2026\/08\/bestandroid.png\" alt=\"best android\" width=\"600\" height=\"331\" class=\"alignnone size-full wp-image-279932\" srcset=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2026\/08\/bestandroid.png 1362w, https:\/\/torrentfreak.com\/images\/bestandroid-300x166.png 300w, https:\/\/torrentfreak.com\/images\/bestandroid-600x331.png 600w, https:\/\/torrentfreak.com\/images\/bestandroid-150x83.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\"><\/center><\/p>\n<p>Google\u2019s AI Overview is also <a href=\"https:\/\/torrentfreak.com\/images\/googleai.png\">picking up ESA\u2019s recommendations<\/a> for the top IPTV services, with information that comes straight from the scammers\u2019 PDFs.<\/p>\n<h2>IPTV, Instagram Followers, and Free Robux<\/h2>\n<p>There are hundreds of these results, with many new ones being added while we write this article. The PDFs we checked don\u2019t appear to be malicious. They function as advertisements for pirate IPTV services. Whether these indeed offer what they promise is unknown, but visiting these hyperlinked URLs is not advised.<\/p>\n<\/p>\n<p><center><em>One of the PDFs<\/em><\/center><br \/><center><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2026\/08\/top10.png\" alt=\"top 10 iptv\" width=\"600\" height=\"512\" class=\"alignnone size-full wp-image-279929\" srcset=\"https:\/\/www.cryptocabaret.com\/wp-content\/uploads\/2026\/08\/top10.png 1197w, https:\/\/torrentfreak.com\/images\/top10-300x256.png 300w, https:\/\/torrentfreak.com\/images\/top10-600x512.png 600w, https:\/\/torrentfreak.com\/images\/top10-150x128.png 150w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\"><\/center><\/p>\n<p>The IPTV ads are only part of the problem. The same corner of ESA\u2019s portal also hosts unrelated scam content, including a \u201cFree Coin Master Spins Guide\u201d aimed at mobile-game players, \u201c<a href=\"https:\/\/torrentfreak.com\/images\/tiktokinsta.png\">Free Instagram Followers<\/a>,\u201d and \u201c<a href=\"https:\/\/torrentfreak.com\/images\/robbux.png\">Free Robux codes.<\/a>\u201d These free offerings undoubtedly come at a cost and should be avoided too.<\/p>\n<p>The broad mix of scammy offers shows that ESA\u2019s website is being exploited more broadly. How these people gained access to the server is unknown. According to ESA\u2019s documentation, uploading requires site-editor access to the Cosmos portal, but there might be a weakness in the system. <\/p>\n<h2>Known SEO Exploit<\/h2>\n<p>The goal of these PDFs is to rank high in Google search results for popular terms. This is a known SEO hack that we have seen numerous times before.<\/p>\n<p>Last year, for example, the European Commission\u2019s <a href=\"https:\/\/torrentfreak.com\/official-eu-website-exploited-to-advertise-shady-iptv-services-250701\/\">Eurostat portal was exploited<\/a> in the same way, with scam PDFs climbing to the top spot for terms like \u201cbest IPTV providers of 2025.\u201d<\/p>\n<p>To find out more, TorrentFreak reached out to ESA yesterday, asking whether it was aware of the documents, how they were uploaded, and how long they had been online. We will update this article if we hear back.<\/p>\n<p>At the time of writing, the IPTV documents remain live on the Cosmos portal. If history is any guide, cleaning them up won\u2019t be the end of it. They will either come back, or they will resurface on another website, repeating the same trick.<\/p>\n<p>From: <a href=\"https:\/\/torrentfreak.com\/\">TF<\/a>, for the latest news on copyright battles, piracy and more.<\/p>\n<p class=\"wpematico_credit\"><small>Powered by <a href=\"http:\/\/www.wpematico.com\" target=\"_blank\">WPeMatico<\/a><\/small><\/p>\n","protected":false},"excerpt":{"rendered":"<p>The Cosmos portal is one of the most active corners of the European Space Agency\u2019s website. Run by ESA\u2019s Science Program, it hosts mission-support pages and public data archives for Gaia, Euclid, XMM-Newton, and dozens of other missions, backed by a science archive that now runs to more than a petabyte of data. European Space [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":86865,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[308],"tags":[],"class_list":["post-86864","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-torrent"],"_links":{"self":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/86864","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=86864"}],"version-history":[{"count":0,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/posts\/86864\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=\/wp\/v2\/media\/86865"}],"wp:attachment":[{"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=86864"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=86864"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.cryptocabaret.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=86864"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}