An “ai girlfriend review” link on a university website: the AI spam slipping into trusted domains

By Tema EN · scams and deepfakes · October 13, 2026.

The material we received contains no news or analysis. All it has is an SEO-style title («ai girlfriend 30 day review… customer support long term»), a description that repeats that text, and a URL. No article content was downloaded, so we have no facts about any app to report.

The only thing we can check is the URL itself. It points to a virtual tour page of the Central Research Support Service (SCAI) at the University of Córdoba (uco.es). That page accepts an «xml» parameter containing base64-encoded data. Once decoded, the data appears to be an instruction to load an XML file hosted on a github.io subdomain that has nothing to do with the university. This is our own technical reading of the URL, and we have not tested it by running it.

Our take: this looks like a case of domain reputation abuse, a common spam practice. The people behind it exploit a poorly filtered parameter on a legitimate website so that search engines index third-party content under a prestigious academic .es domain. There is no sign that the university is involved. Most likely it is a victim of the technique, though this material doesn't let us say so for certain.

What matters here is the pattern. Searches for «AI companions» draw heavy traffic, and that traffic attracts people who set up fake reviews to sell subscriptions or harvest data. Be wary of any «30-day review» that reaches you through a link to a domain unrelated to the subject. We aren't publishing anything further because there is nothing more to analyze honestly.