A UCO virtual tour used as spam bait: no news about AI girlfriends, but a security lesson

By Universidad de Córdoba (UCO) · October 13, 2026.

There is no news to report. The feed headline, “ai girlfriend chat legit or not how to spot fake ai girlfriend apps 2026”, is a string of English keywords. The description repeats the same words and adds no information. It contains no figures, studies, companies or statements.

The URL doesn't lead to an article either. It points to a page in the virtual tour of UCO's Central Research Support Service (SCAI), with a long string in the “xml” parameter. That string looks like a base64-encoded payload that would make the virtual tour viewer load an XML file hosted on another domain. We have not downloaded or opened the link, so we can't confirm what it contains. Everything suggests that someone is using a legitimate website as a front to promote something else. There is no sign that UCO has published anything on the subject.

Our take: this is search engine optimization (SEO) spam that slips into topic-based feeds. The technique uses the authority of an institutional domain, such as a public university's, to plant outside links or content. A headline with the words “AI girlfriend” and “fake apps” is built to capture searches, not to inform. In general, .es and .edu domains are frequent targets of this kind of abuse because search engines trust them.

There is a useful irony here. The topic the bait tries to exploit, how to tell legitimate AI companion apps from fake ones, is a real problem. That's why results promising “how to spot fake apps” guides deserve the same caution. If you're interested in the topic, look for sources with identifiable authors and verifiable data.

In the short term, automated aggregators will need to get better at filtering URLs with encoded parameters. In the long term, this is part of the cost of an information ecosystem where producing noise is almost free. Systems that filter well will be worth more than those that simply publish faster.