A University of Córdoba URL used as spam bait: there's no story, just an abuse technique

🕒 Published on Zendoric: October 14, 2026 · 00:19
✨ AI-generated · how it's made
A supposed “30-day review of AI girlfriend apps” points to a University of Córdoba page. There is no review: the URL appears to be a spam vector. It is an example of how information about AI gets polluted.
By Tema EN · scams and deepfakes · October 13, 2026.
The material we received contains no news. The title, «ai girlfriend chat pros and cons ai girlfriend app 30 day review from real users», is a string of SEO (search engine optimization) keywords with the name of the Universidad de Córdoba (UCO) tacked on at the end. The description repeats the same text. There is no article content, no data, no figures and no author.
The only substantive element is the URL. It points to a legitimate page on the uco.es domain, a virtual tour of the SCAI, but carries an `xml=` parameter with base64-encoded data. Once decoded, it appears to tell the page's panorama viewer to load an XML file hosted in an external GitHub Pages repository. We have not opened that link or verified its content. But that structure is consistent with the abuse of a vulnerability in embedded viewers, used to make pages of trusted institutions display or redirect to third-party content. This is a technical hypothesis, not a proven fact. We are not accusing the university of anything: it is most likely a victim of the abuse.
Our reading: there is nothing here to comment on regarding «AI girlfriends» as a product, so we don't. What does deserve attention is the mechanism. Domains with a good reputation (universities, public administrations) are generally a coveted resource for spam and fraud, because they inherit the trust of search engines and readers. Generative AI makes it cheaper to produce thousands of fake «reviews» of virtual companions, a niche highly vulnerable to emotional and financial scams.
In the short term, that means more noise and more traps, and readers and media outlets will have to verify the source before giving credence to any «review from real users». In the long term, search engines and site administrators will have to close these vectors. In the meantime, the practical rule is simple: a review with no author, no data, hosted on a domain that has nothing to do with the topic, is not a review.
🔗 Related on Zendoric
- An “ai girlfriend review” link on a university website: the AI spam slipping into trusted domains · 2026-10-14
- "AI girlfriend" spam on a university domain: SEO poisoning reaches a university website · 2026-10-16
- A UCO virtual tour used as spam bait: the link is not a news story about AI girlfriends · 2026-10-14
Sources & references
- Universidad de Córdoba (UCO) — A University of Córdoba URL used as spam bait: there's no story, just an abuse technique
- Universidad de Córdoba (UCO) — A University of Córdoba URL used as spam bait about “AI virtual girlfriends”
- Universidad de Córdoba (UCO) — A University of Córdoba URL used as spam bait is not a news story about virtual girlfriends
- Universidad de Córdoba (UCO) — A University of Córdoba website used as spam bait about “AI girlfriends”: the problem is the piece, not the topic


