"Virtual girlfriend" spam on a university website: when toxic SEO exploits the authority of a .es domain

By Tema EN · AI girlfriends/virtual partners · October 15, 2026.

This item does not contain a news story. The material received is an advertising-style headline («best ai girlfriend app with no filter best new virtual girlfriends ranked») associated with the domain of the Universidad de Córdoba (UCO). There is no article text, no figures, and no identifiable companies or products.

The only verifiable element is the address itself. It is a virtual tour page of the UCO's SCAI service. After the path comes an «xml» parameter that is not normal for a virtual tour: it contains base64-encoded data that apparently points to an XML file hosted on an external GitHub Pages site. A parameter like this accepts outside content into the page, which fits the virtual tour viewer this type of site typically uses. We have not downloaded or analyzed it, and we make no claim as to who did it or with what intent. This is a technical reading of the URL, not a confirmed fact.

Our take is that this is a well-known SEO spam technique. Content is injected into legitimate, high-authority pages, such as those of universities or government bodies, so that search engines and aggregators give visibility to an ad. The headline is keyword bait about «no filter» virtual companions, a highly lucrative and loosely regulated niche. The winner is the spammer, who borrows the domain's reputation. The losers are the university, whose brand is degraded, and the reader, who gets a link that looks trustworthy but isn't.

There is a broader lesson for consumer AI. «Virtual boyfriends and girlfriends» are a real market, with serious concerns about emotional dependence, minors and privacy. But a product advertised as «no filter» whose promotion relies on hijacked links is a red flag. Automated aggregators, including our own intake pipeline, should treat these results as noise, not information.

We do not recommend opening the link. If you are responsible for the affected site, you should review the validation of that parameter and alert the IT department. For industry context, this kind of abuse is common and is fixed with input filtering and monitoring of search results.