"AI girlfriend" spam on a university domain: SEO poisoning reaches a university website

By Universidad de Córdoba (UCO) · October 15, 2026.

The source material is not a news story. It is a link labeled "AI Girlfriend App Sign Up AI Companion Coins For Android", listed under the University of Córdoba's domain (uco.es), on the path of a virtual tour belonging to one of the university's services. There is no article text, and there are no figures or statements we can attribute.

The only verifiable information is in the URL itself. The "xml" parameter contains Base64-encoded data that, once decoded, forms an instruction to include an XML file hosted on a github.io subdomain unrelated to the university. The virtual tour viewer appears to accept that parameter. We have not been able to check what that file contains or what it actually does. Nor is there any record that the university has published or endorsed the content.

Our reading is cautious, because it is an inference and not a proven fact. The pattern fits search engine optimization (SEO) spam: someone exploits an institutional domain, which has a good reputation with search engines, to slip in commercial links. The chosen hook is "AI girlfriends" and the "coins" used in companion apps. That niche drives a lot of traffic and a lot of questionable monetization.

There are two lessons. In the short term, virtual companions attract people who want to sell without scruples, and poorly protected domains are cheap ammunition. In the long term, the serious part of that market, AI-assisted companionship and emotional health, will only earn trust if we tell the legitimate product apart from the noise. There is no product to evaluate here, only a warning: be wary of links with odd parameters, even if the domain looks trustworthy.