- Digital Surfer
- Posts
- The ranking was missing. The citation wasn’t.
The ranking was missing. The citation wasn’t.
No Manual Actions in EEA; Spam Update Hits Hard; Google goto URLs; Google Demotes Listicles?; No AI Content Penalties; No OpenAI on Cursor; and Much More!
FIRST …
AI engines cite the websites ranking for the query they’re answering. Right?
That’s one of the assumptions I tested in a study I’m releasing next week.
The study analyzes 42 topical maps, 29,319 queries, 535,239 top-20 Google positions, 110,169 ranking websites, and 354,955 AI citations across Google AI Overviews, AI Mode, ChatGPT, and Gemini.
So we checked every AI citation for a query against that query’s top 20. Here’s what we found:
ChatGPT - 71.9% of citations went to websites that did not rank in the top 20 for the query being answered.
AI Mode - 52.4%.
Gemini - 41.1%
AI Overviews - 40.2%.
Don’t take it as “rankings don’t matter” though.
Across the four engines, most of those off-query citations went to websites that ranked somewhere else in the same topical map.
Why is that?
Fan-out queries may explain some of that. AI engines search related subqueries to give a fuller answer, so a cited website might rank for one of those queries instead.
Lots more interesting findings incoming.

AD
Get certified in digital marketing — for free.
Most marketers learn digital marketing by doing it — trial, error, and hoping it sticks. But when your pipeline depends on it, there's no room for guesswork.
HubSpot Academy's Digital Marketing Certification covers everything that moves the needle: SEO that actually gets you found, email strategies that convert, social media and paid ads that reach the right audience, and AI tools that make your team faster without adding headcount.
3 hours and 24 minutes. 10 lessons. 30 videos. Free.
Join 200,000+ certified professionals who have built sharper strategies — and the skills to prove ROI to leadership — with HubSpot Academy.
Get certified today. No cost. No credit card.
SEO + GEO
Google Search Quality team says site reputation manual actions will change across European Economic Area search results from August 30. Outside the EEA, an action will still directly affect the targeted part of a site. Within the EEA, the manual action will not apply, and Google may separate that section so it can rank independently over time. Owners will still receive Search Console notices and can request reconsideration or, when eligible, mediation.
Barry Schwartz explains that Google has three separate controls that are often treated as one. They shape what people see across Search products, but they work at different levels:
Preferred sources: Lets a person choose sites they want to see more often in Top Stories. Google also shows these choices in AI Mode and other areas.
Tailor your feed: Lets a person tune Google Discover by content category rather than by publisher.
Search profiles: Gives publishers a shareable Search page with a header image, social profiles, recent articles, and a follow option.
Danny Goodwin reports that 16.71% of URLs in Google's top 10 fell beyond position 100 during the August spam update, compared with 9.2% in a comparable July period without a confirmed update. SE Ranking tracked the same 100,000 US keywords across 20 industries and found an 82% increase in top-10 URLs dropping out of the top 100. The disruption reached every niche in the data, though it doesn't identify which site types, pages, or spam tactics were hit.
Matt G. Southern says that WebMCP has moved from browser experiment to live deployment. Shopify now provides 10 agent tools on every Liquid storefront, Cloudflare can add a bridge at the edge, and ChatGPT's desktop browser can use site-provided tools. A page can expose a named action and structured inputs, so an agent doesn't have to depend on visual clicks and typing.
My Take: Treat this as product infrastructure for conversions, not an SEO tactic. WebMCP doesn't improve ranking, indexing, or citations, and the published sources don't yet show task-completion, conversion, or attribution results. Start with the agent journey that removes real friction after a visitor arrives, then define a narrow tool with clear permissions. A tool description is part of your conversion path, so it needs the same ownership as your forms, checkout, and internal application logic.
Matt G. Southern reports that ChatGPT's desktop browser can use WebMCP Site tools supplied by the page a person has open. Those tools can search documents, edit files, work through dashboards, compare travel options, or update a shopping cart, and they disappear when the page closes. The feature is separate from server-based MCP connections. It works in the latest ChatGPT desktop app for eligible Work and Codex users on GPT-5.6 Sol or Terra, with account rollout and site support still determining availability.
Barry Schwartz reports that Google has confirmed it is rolling out a google.com/goto?url= redirect between a search result link and its destination. Google says the technical measure protects its services against evolving abuse. The visible result URL remains under the snippet, but tracking tools, scrapers, and AI systems that depend on the direct link may need to adapt.
My Take: Watch your rank trackers, SERP exporters, and any workflow that passes Google result URLs downstream. /goto has been in the wild for the last couple of months, so maybe the tools you use accounted for it already. When we first saw it in Floyi, we resolved the redirects, so users would see the end URLs because it affected measurement pipelines.
Kevin Indig's 60,000-query analysis found no universal penalty for listicles. At least one appeared in the top 10 for 55.1% of queries and in the top three for 32.3%. But the presence of listicles in position one and the top three declined from January to August, even as 62% of vendor-authored listicles in the study gained estimated organic traffic.
The gap is intent. Google showed 4.5 times more listicles when a query explicitly asked for options, yet 92% of SERPs with a top-10 listicle also contained Reddit or YouTube, and AI Overviews were common in B2B results. The study is observational, so it shows patterns rather than a confirmed rule.
My Take: Don't publish a listicle because a template says it can win AI citations. Publish one when the query needs a real comparison and you can back every recommendation with evidence. The format still works for the right intent. The lazy, self-serving version is the risk.
Dan Petrovic says detecting machine-written text and deciding whether a page deserves visibility are separate jobs. He describes a quality pipeline that looks beyond origin at information density, page structure, and post-click behavior, while warning that a blanket origin filter would create collateral damage for useful machine-assisted work.
Glen Allsopp and Xibeijia Guan analyzed 145 million US Google results and found the Discussions and forums feature in 16.93 million of them. Reddit appeared in 83.9% of the feature worldwide, while three sites accounted for 76.75% of all links and Facebook surpassed Quora in prominence during January 2026. The feature is overwhelmingly informational, with 98.7% of appearances tied to informational queries. Ahrefs found no correlation between backlinks to individual threads and how often those threads appeared, which makes platform authority and the query’s need for lived experience more important signals than thread-level link building.
Kyle Risley reports that AI-referred sessions to Shopify storefronts grew 197% year over year in Q2, while organic-search sessions grew 12% on a much larger base. AI-referred shoppers converted about 80% better after reaching a product page, and roughly twice as well in specification-led categories where they need to compare compatibility, use cases, reviews, and tradeoffs.
Organic search still sent more sessions than all tracked AI platforms combined. Shopify also found that AI shoppers referred from structured Shopify Catalog data converted twice as well as those referred from scraped or third-party feeds, and 50% of AI-referred sessions landed directly on product pages.
SEO + GEO Ripples
Google Search Now Lists The Supported Favicon File Formats: Barry Schwartz reports that Google's favicon documentation now explicitly lists the supported formats: BMP, GIF, ICO, PNG, JPEG, PPM, and TIFF. Google says it added the list to remove ambiguity, and SVG is not on it.
Bing Tests Renaming Copilot Search Answer To AI Overviews: Barry Schwartz reports that Microsoft is testing the label “AI Overviews” for the Copilot Search answer box at the top of Bing results, while retaining the Copilot logo. The test borrows the name Google uses for its own AI-generated answer feature.
Google Search Showing Fewer PDF Files. But Why? SEOs saw sharp drops in PDF impressions and clicks during August, including PDFs from government sites. John Mueller said Google would investigate, and some IRS PDFs began returning near the top of results on August 27, suggesting the issue may be recovering.
Google Says Google's Crawlers Don't Parse JSON: Gary Illyes said Google crawlers download JSON files but do not parse them. Parsing happens later in systems such as indexing, and he said the shared infrastructure also applies to Merchant Center.
Google Aware Of Reviews Missing After Google Business Profile Reinstatement: Google is working on an issue that can leave reviews missing after a suspended Business Profile is reinstated. There is no repair timeline. If you have the original support ticket, reply to its email thread so the missing reviews are documented on the case.
AI
Gemini Omni 1.1 Flash is now available through the Gemini API in Google AI Studio. It can extend a clip in 10-second increments to a cumulative 40 seconds, use first and last frames to generate a transition, and take up to three seconds of video reference. Google says 360p previews can generate up to 60% faster and cost one-third as much as standard 720p output, while final output can reach 1080p or 4K.

Greg Jarboe reports that ChatGPT leads AI-tool preference in every generation surveyed by YouGov, but the brand split underneath is sharp. Claude is preferred by 10.6% of Gen Z AI users and 1.4% of Boomers+, while Gemini performs best with Gen X and Copilot is strongest with Boomers+.
Usage patterns differ too. Web search use sits near 38% to 40% across age groups, but Gen Z uses AI for ideas at more than three times the Boomer rate, 33.6% versus 10.5%.
My Take: Knowing your audience and the tools they use is important, so you can choose the AI engines and content formats to prioritize.
OpenAI explains how its AI hacked Hugging Face. They say that an internal research model running with reduced safeguards during cybersecurity evaluations used Artifactory as an unauthorized message board, found a path to internet access, and helped compromise parts of Hugging Face in July. The company says 93% of the tasks discussed on that board came from 198 ExploitGym tasks that none of its models had previously solved. OpenAI has paused its largest planned frontier reinforcement-learning run and now requires chain-of-thought monitoring for tool-using training and evaluations involving models at GPT-5.6 Sol capability or higher.
OpenAI says it intends to wind down Cursor’s access to OpenAI models after SpaceX acquired the coding platform, with a proposed shutoff date of November 12, 2026. They say past contract and terms-of-service violations by Elon Musk’s companies are the reason it cannot be confident SpaceX will comply. This will also keep future models, including Astra, out of the Cursor integration.
Barry Schwartz reports that Google is rolling out link carousels for developing topics in AI Mode, after adding the same feature to AI Overviews. Google says trending-topic answers can put relevant articles, webpages, and Preferred Sources front and center. The new links may make AI Mode answers more clickable, but Search Console still does not report click data for Google's generative AI results. Publishers can see the feature, but not yet a clean referral number for it.
Connie Loizos reports that Nvidia has reportedly agreed to buy Hugging Face for $12.9 billion. Business Insider says the deal is not signed and could still collapse. Hugging Face was valued at $4.5 billion in its 2023 funding round. The Information reported that Hugging Face was generating about $150 million in annual revenue, up from roughly $100 million two months earlier.
AI Ripples
Intelligent transcription with Gemini 3.5 Transcribe: Google’s new speech-to-text model is now in public preview through the Gemini API and Enterprise Agent Platform. Google reports a 4.0% word error rate for streaming, 2.6% for non-streaming, support for more than 85 languages, and speaker attribution for up to three people in recorded audio.
OpenAI Pins Shopping To ChatGPT Sidebar: Barry Schwartz reports that OpenAI has pinned Shopping to ChatGPT’s left sidebar. The tab opens a shopping landing page and a dedicated search page, with an observed EU rollout that does not include in-app checkout.
Surprise: Z.ai is the AI lab behind the mysterious Ox Alpha model: Rebecca Bellan reports that Z.ai confirmed it created Ox Alpha, the anonymous open-weight model standing in for GLM 5.3-Flash on OpenRouter and climbed benchmark leaderboards. Z.ai says it will release the model’s weights, positioning Ox Alpha for coding, sustained agent work, and production workflows that combine text with visual context.
We’re partnering with the State of Delaware to provide free AI and career training. This is for you if you live in Delaware. Google says Delaware residents can receive no-cost licenses for Google AI courses and Career Certificates through the Delaware Department of Labor and Delaware Libraries. The self-paced training covers prompt writing and app building, plus fields such as cybersecurity, data analytics, digital marketing, IT support, project management, and UX design. Google says more than 70% of Career Certificate graduates report a positive career outcome within six months.
MARKETING
Wix reviewed nearly a million domain registrations from Premium users with connected domains between 2025 and 2026. The report keeps .com as the default, but its data gives founders useful exceptions and market signals:
.com remains the safe default: 82% of Wix sites in the United States use it, and people are 13 times more likely to choose it than another extension.
.org is strong: .org sites were 34% more likely to generate ecommerce revenue and received 3% more sessions than .com sites.
.store stands out for ecommerce: Sites using .store earned 10% more revenue than .com sites and twice as much as .shop or .net sites.
Trend and local fit matter: .ai grew 20% from January to May, while local extensions beat .com in Germany, Switzerland, and the Netherlands.
My Take: Don't change domains to chase a correlation. But if your exact .com is unavailable, other TLDs might be a good alternative. The .org stats surprised me.
CONTENT
Si Quan Ong explains that Ahrefs uses AI in every article but moves human work upstream into the reader, promise, point of view, evidence, and information gain. The team saves research, gap analysis, outlines, and drafts as separate stages so a writer can inspect decisions before publication. It puts the time AI saves into fresher data, interactive content, and editorial review instead of more low-value pages.
My Take: This is similar to Floyi’s closed loop content strategy, but we go further with our content flywheel. Brand Foundation, audience personas, Content Guide rules, Knowledge Base material, topical map position, and an internal-link/anchor text plan flow into each brief and draft, so AI does not begin from a blank prompt or decide where a page belongs. Each user still owns the strategy and final publishing decision.
Adam Gnuse compared year-over-year organic traffic estimates across 30 major publishers in nine industries and found that top-of-funnel performance depended more on industry than funnel stage. Every finance, healthcare, legal, and consumer-tech domain in the sample lost traffic. Cybersecurity and marketing or sales software improved, and top-of-funnel and middle-of-funnel pages largely moved in the same direction within each industry.
Generic how-to pages are easy for AI summaries to replace, while local guides, interactive tools, and content built on real subject-matter expertise still give people a reason to visit.
Matt G. Southern reports that Pew Research Center ran nearly half a million webpages through an AI detector and found signs of AI authorship or editing on about 10% of them. The share reached 35% among pages with a post-ChatGPT publication date. Pew found 9.35% of .com pages showed these signs, versus 1.03% of .edu pages and 0.76% of .gov pages in its six-month average. Its threshold also counts AI-assisted editing, so it cannot separate a fully generated article from a human-written draft cleaned up with a writing tool.
SOCIAL MEDIA
Pinterest says people are using the platform to find hands-on hobbies, and 51% of Gen Z respondents say having a hobby contributes to their joy. The report points to search growth for projects with an output, including “crochet parandi” at 5,265%, “birthday magazine template” at 1,713%, and “sashiko ideas” at 1,509%.
The opportunity for brands is not the hobby label itself. Pinterest’s examples are specific, practical ideas people can save and make, from a coffee recipe to a craft project or display idea.
Anu Adegbola reports that Google now puts a number on YouTube creative quality. Nielsen data credits creative with 49% of campaign ROI, while Ekimetrics found that improving creative can more than double YouTube ROI. In US Demand Gen in-stream skippable ads measured in July 2026, a human voice was associated with 12% higher conversions, a text overlay with 3% higher conversions, and visible branding in the first five seconds with 4% higher conversions.
Google also recommends removing fake buttons and arrows that compete with real calls to action. Full-bleed imagery, visible people, and an ad that fits the YouTube feed can outperform generic assets repurposed from another channel.
Social Ripples
Reply to Keywords Meta Ads Feature: Jon Loomer reports that Meta is testing a Conversations setting that automatically sends an Instagram private message when a person comments with one of up to five chosen keywords or phrases on an ad. The reply can include a link, phone number, or email. It appears limited to Instagram placements for now and uses one message rather than keyword-specific replies.
X launches API for business chatbot accounts: Andrew Hutchinson reports that X has opened an API for automated X Chat task accounts. Brands can build a bot with its own handle to handle bookings, order queries, and service updates. X says profiles will carry an “automated by @owner” label, but it supplies examples rather than a complete bot framework, so brands still need to build the underlying workflow.
Start tagging Amazon products with the YouTube Shopping Affiliate Program: Eligible US creators can tag Amazon products in videos, Shorts, and live streams after connecting an active Amazon Influencer or Associates account. YouTube says its July 14 to 29 internal experiment found product tags alone generated more than 110% more product clicks than description links alone. Aggregate daily earnings appear in Studio, while finalized Amazon earnings are paid through AdSense each month.
Our Agreement With Bipartisan Attorneys General: Calling on TikTok and YouTube to Join Us in Supporting Teens: Meta says its agreement with 52 US state and territory attorneys general will apply default teen controls to Facebook and Instagram, including a two-hour combined daily limit, a midnight-to-6 AM block, muted school-hour notifications, and optional non-algorithmic feeds. The judge approved the agreement on August 27. Meta says most terms run for 10 years, while part of the roughly $18 billion payment depends on TikTok and YouTube adopting specified protections and contributing matching payments.
Scoop: DOJ, TikTok settle for $400 million in children's privacy suit: Ashley Gold reports that TikTok and parent company ByteDance will pay $400 million to resolve the Justice Department's children’s privacy case without admitting wrongdoing. The 2024 suit accused TikTok of letting children create regular accounts and collecting or retaining their personal information. The settlement includes stronger youth safeguards, age-related controls, and more parental oversight, according to DOJ.
Meta adds new AI subscription packages: Andrew Hutchinson reports that Meta has introduced Meta AI Core and Meta AI Premium packages with more image and video generation capacity. Both also bundle Facebook Plus, Instagram Plus, and WhatsApp Plus verification benefits. The new middle tier gives Meta another way to charge for its AI tools beyond the premium plan.
X launches MCP server: X’s Ads Model Context Protocol server lets advertisers connect X campaign data and analytics to an MCP-capable client such as Grok, Claude Code, or a custom agent. The connection supports natural-language guidance for building and refining X ad campaigns.
X adds video overlays: X has added text and emoji overlays for video uploads in its iOS app. The update is small but gives X creators a native editing control that has long been standard in competing video apps.
WHAT I'VE BUILT FOR YOU
Floyi - Build Topical Authority that wins in Google and AI Search. Don’t just plan your content strategy - make it unstoppable.
ReplyDeck - Be active on Reddit without living on Reddit. Schedule replies, stay present in the threads that matter, and get your time back.
TopicalMap.com Service - Let us do the heavy lifting. We handle the research, structure, and strategy. You get a custom topical map designed to boost authority and dominate your niche and industry.
Topical Maps Unlocked 2.0 - Unlock the blueprint to ranking success. Master the art of structuring content that search engines (and your audience) love - and watch your rankings soar.
AD
Own Your Brand's AI Voice
The only platform that designs, licenses, and captures a Branded AI Voice from real, consenting actors—not from scraped data. Trusted by BMW, Superbloom, and Cresta.
What Did You Think of This Week's Wave? |
LIKE DIGITAL SURFER?
Find me and others in the Digital Surfer Discord community.
I’d also love to know what you think and if you have any ideas for the newsletter. Reply or email me at [email protected].
I’d also appreciate it if you shared it with fellow digital surfers.
You currently have 0 referrals, only 3 away from receiving LinkedIn Shout-out.
Have a great week taking your SEO and digital marketing to another level!
And don’t forget to drag the Digital Surfer emails to your Primary Inbox 🌊









Reply