Next →
Next edition coming soon
“Watch your altitude.” I was learning to fly in clouds, where a pilot depends strictly on their instruments to manage the plane.
Flight instructors likely get tired of saying those words because student pilots tend to look at one instrument and then lose track of all the others, fixating on one data source.
Instrument pilots don’t trust individual instruments. They trust the panel. The difference matters because no single gauge tells you everything. A pilot who fixates on one number at the expense of the others has set up the conditions for a bad outcome. The skill is scanning them all and integrating the information.
This week three separate updates arrived that change what your marketing metrics can tell you, and more importantly, what they can’t. If you’re running a small business or an agency, at least one of these will affect a number you look at every week.
This Week’s Finds
-
Story 1
Bots now account for 57.5% of all HTML web traffic — machines outnumber humans online for the first time
Tom's Hardware ↗
ALM Corp ↗
In early June, Cloudflare CEO Matthew Prince shared Radar data showing that automated requests now make up 57.5% of HTML traffic to websites, against 42.5% from humans. Machines have outnumbered humans online for the first time in internet history. The main driver is agentic AI: autonomous programs that browse the web on behalf of assistants like ChatGPT and Gemini, scanning thousands of pages to complete tasks a person would finish in a handful of clicks. Prince had told an audience at SXSW in March that the crossover would not arrive until 2027. Agentic traffic grew fast enough to pull that milestone forward by more than a year.
-
Story 2
Google launched AI performance reports in Search Console — impressions are visible, clicks are not
Google Search Central ↗
Search Engine Land ↗
On June 3, Google launched new Search Generative AI performance reports inside Search Console, giving eligible site owners a dedicated view of how their content appears in AI Overviews and AI Mode. The reports show impressions, which pages were included, countries, devices, and dates. They do not show clicks. You can see that AI systems are picking up your content and serving it in answers. You cannot measure whether that drives anyone to your site. The rollout started with a subset of UK-based site owners, with global expansion planned but no date announced.
-
Story 3
Google completed the June 2026 spam update targeting back button hijacking and AI-fabricated mentions
Google Search Central ↗
Stan Ventures ↗
Google completed the June 2026 spam update on June 26, a two-day global rollout covering all languages. The update arrived shortly after two new spam policies went live: one targeting back button hijacking, where a page interferes with the browser’s back button to trap visitors on the site, and one targeting inauthentic mentions, which covers AI-fabricated reviews, citations, and reputation signals inside AI-generated search features. Google published the back button hijacking policy in April, two months before enforcement, giving site owners a warning window that most missed.
-
Story 4
Brands on five or more content channels achieve 78% AI citation coverage versus 18% for single-channel publishers
LLMrefs ↗
Research from LLMrefs tracking AI citation coverage found that brands with content on five or more source types (blog, YouTube, podcast, third-party press, social media) achieve 78% average AI citation coverage. Brands publishing to a single source type average 18%. Adding a second source type moves the number to 35%. Adding a third takes it to 58%. The gap between one source and two is 17 percentage points, and you can close it without increasing your total content volume.
57.5%
of all HTML web traffic is now automated requests, according to Cloudflare Radar data. Machines outnumber humans online for the first time in internet history, arriving more than a year ahead of predictions.
These three stories are not a coincidence. They are the same pressure point showing up in different places.
Cloudflare’s data tells you that your Google Analytics dashboard is now a human-traffic-only report. More than half the requests hitting your server right now come from bots, crawlers, and AI agents. Analytics was never built to measure what that majority is doing, and the gap is now too large to treat as background noise. The machines landing on your site are deciding whether your content deserves to be cited in AI answers. That decision is happening in your server logs, not in your analytics dashboard.
The Search Console launch makes this concrete in a way that’s hard to dismiss. Google is now telling you how often your content appears in AI Overviews. That data exists. But they won’t give you the click data alongside it. You are reading one instrument without the other. The way to handle this is to pair AI impression trends against owned metrics. If AI impressions climb and your email list signups also climb over the same four-week period, the signal is real. If they diverge, you have a problem worth diagnosing. Your email list is the instrument Google can’t control.
The spam update is the most immediately actionable item. Back button hijacking is more common than most people expect. It shows up in certain popup builders and landing page tools that push extra states onto the browser history stack. The check takes two minutes. Open your top five pages, visit them, and press the back button. If the back button cycles through additional page states instead of returning you to the search results, your builder is doing this.
The inauthentic mentions policy has broader reach. Anyone using AI tools to generate review volume, mass-post reputation content, or build citation counts inside AI search features is now in spam territory. Google is treating that with the same enforcement weight it gave keyword stuffing in 2012.
The multi-source presence data closes the loop. If AI citation coverage jumps from 18% to 35% by adding one more distribution channel, the math changes for solo operators who have been focused on one platform. This is not a content volume argument. It is a distribution argument. For most small business owners, the highest-return move is blog plus YouTube. Both are independently crawled by different AI retrieval systems. Two videos per month on your core expertise topics, properly titled and described, is enough to make that first 17-point jump.
- Check your robots.txt for AI search bots. Open yourdomain.com/robots.txt and look for Disallow rules covering OAI-SearchBot, Claude-SearchBot, and PerplexityBot. These are the search retrieval bots for ChatGPT, Claude, and Perplexity, different user agents from GPTBot and ClaudeBot (the training crawlers). Blocking them removes your content from AI search results regardless of content quality.
- Bookmark the Generative AI Performance report in Search Console. If the report is available in your account, open it and start tracking weekly AI impressions. Even without click data, the trend line tells you whether your content is being picked up by AI systems.
- Test the back button on your five highest-traffic pages. Visit each page, then press back. If it cycles through additional states instead of returning you to search results, your page builder is doing back button hijacking and is now in violation of Google’s spam policy.
- Identify a second distribution channel if you are publishing to only one. Blog plus YouTube is the highest-return combination for most small business owners. Two videos per month on your core expertise topics is enough to move from 18% to 35% AI citation coverage.
IMG’s Take
The measurement story is not going to get cleaner before it gets more complicated. Google will add more impression categories before they add click data, because giving you click data creates optimization pressure they are not ready to absorb. The bot majority will keep growing. The dashboards most small businesses rely on were built for a web where humans were the majority, and that web is already gone.
The inauthentic mentions policy is the clearest signal of where this heads next. Google is not distinguishing between AI-generated content, which is still allowed if useful, and AI-manufactured reputation, which is now spam. A business that built genuine authority through consistent publishing, earned real citations from credible sources, and has verifiable credentials is exactly the kind of entity these systems are designed to surface. That is not an accident. That is the policy direction.
What matters most for the people reading this:
- Your email subscribers are the audience you own.
- Your repeat customers are the ones the algorithm can’t intercept.
- Your reputation inside a specific professional community is the citation signal hardest to manufacture.
- The AI search result is the top of the funnel. The owned relationship is the part that converts.
- Optimize for the layer underneath the platform, and the platform results follow.
Have you checked your robots.txt for AI search bots? What does your Search Console AI impressions trend look like? Compare notes in the IMG community — the more ground-level data we share, the clearer the picture gets for everyone.
Join the IMG Community →
— Tim Nichols & The IMG Team
Sources cited in this edition
- Tom's Hardware — Bots have now passed human traffic online, Cloudflare boss laments (June 2026): Tom's Hardware
- ALM Corp — Cloudflare: Bots account for 57% of webpage requests (June 2026): ALM Corp
- Google Search Central Blog — Generative AI performance reports in Search Console (June 2026): Google Search Central
- Search Engine Land — Google Search Console AI performance reports and controls to block content in AI responses: Search Engine Land
- Google Search Central — Back button hijacking spam policy (April 2026): Google Search Central
- Stan Ventures — Google June 2026 spam update analysis: Stan Ventures
- LLMrefs — Generative Engine Optimization: multi-source citation coverage data: LLMrefs
