TrendingGoogle and the Justice Department filed one ad tech judgment with two calendars.
Cover story · SEO

A rank tracker checked 27.5 million Google results pages. It says 8% came back swapped.

Nozzle has published a full dataset on what several vendors now report: Google answering suspected bots with a complete, normal-looking page whose results are wrong. Google has not confirmed it, and for one weekend the fallback, Search Console, ran more than 64 hours late.

MSMikołaj Salecki, portrait
Editor-in-chief
Oct 13, 2026·8 min read
Two gray plaster picture frames side by side. The left holds three shelves of identical small busts, the right holds three shelves of mismatched fragments, and a plaster hand between them raises a magnifying glass with a blue-violet lens.
The frame is the same. What hangs inside it is not.Illustration: Mediovsky · generated with AI
TL;DR
  • Nozzle analyzed 27.5 million Google results pages and classed 8.0% of those since September 13 as poisoned, against 0.17% before. [1]
  • A poisoned page is complete, with no error and no captcha. Its organic results keep 20.7% of the previous page’s sites, against 88.5% normally. [1]
  • Requests began failing on September 13, poisoned pages appear from September 20, and they peaked at about a quarter of pages on September 27 to 29. [1]
  • DemandSphere reports spurious results on about 11% of its daily pages and warns the number may change. [2]
  • A tracked site was missing from the top 10 on 58.6% of poisoned pages, and 77.9% of poisoned pages had their usual sites back within three days. [1]
  • Google has not confirmed serving altered results. Its one statement, from August, speaks of technical measures against abuse. [3]
  • Search Console records a position only when a link got an impression, which makes it the check. It ran more than 64 hours late on October 11. [4][5]
  • Google’s spam update ran from September 24 to October 8, inside the same window. [6]

Take one search, “white label local seo,” on a desktop in the United States. Nozzle, a rank tracking company, collected Google’s first page for it and collected it again three days later. The second page had the same template, no error, and no captcha. All nine sites on it had been replaced. [1]

A rank report reads that as a crash. Nozzle reads it as a decoy, and on October 12 it published the data to argue the point: 27.5 million results pages, collected for its customers across 49 countries from August 20 to October 9, with the method written out and the daily numbers offered for download. [1][7] It is the most detailed published account we could find of something several vendors have been saying for three weeks, and it changes how you should read any ranking chart that covers late September.

8%
of results pages since September 13 came back poisoned in Nozzle’s sample, against 0.17% in the three weeks before. On September 27 to 29 it was about a quarter. [1] Nozzle · Poisoned Google SERPs

What Nozzle counted

The definition matters, because it decides what the 8% can and cannot tell you. For each keyword, Nozzle took the sites that were in the top 10 on at least 60% of its pages between August 20 and September 9. A later page is poisoned when fewer than half of those usual sites appear anywhere on it and they come back on a later page. [1]

Two things follow. A page only counts once the usual sites return, so the measure misses pages that stay wrong. And it would catch a real ranking change that reversed within days. The baseline controls for that: before September 13, only 0.17% of pages met the definition. [1]

The sequence is the part Nozzle leans on. On September 13, requests to Google began failing in large numbers. Its daily count of collected pages fell from 1,098,064 on September 12 to 109,952 on September 17, about a tenth. The pages that did arrive were normal until September 20. Then the poisoned ones begin. [1]

September 13 0.17%
September 20 1.9%
September 25 11.1%
September 29 27.0%
October 1 8.0%
October 7 11.4%
October 9 4.2%

Those are Nozzle’s daily shares for selected days: 1.9% on September 20, 11.1% on September 25, 27.0% on September 29. [1]

One line in the study deserves more attention. Over ten days from September 30, one of the network routes Nozzle collects through returned 1 to 7% poisoned pages and another returned 9 to 30%. [1] The rate depends on how the page was requested, not on Google’s index, so every vendor has its own number. DemandSphere, another tracker, puts its own at about 11% of daily pages and adds: “Don’t take that 11% number as the final number because things could change rapidly.” [2] The two figures are different measurements and should not be averaged.

Two window frames in a plaster wall. The left holds nine small plaster heads on three shelves, and the right holds nine unrelated objects on the same shelves, one of them a blue-violet hand.
Same keyword, same device, three days apart. Nothing on the second page says it is different.Illustration: Mediovsky · generated with AI

Why a wrong page is worse than a blocked one

A blocked request

Fails, or returns a captcha. The tracker retries, and if it cannot get the page it shows a gap. You can see that something is missing.

A poisoned page

Returns a complete page in Google’s normal template. The tracker stores it. Your report shows a position, and the position is wrong.

Nozzle’s sentence for it: “A refused request tells a scraper to try again, while a poisoned one gets stored as real.” [1] A blocked request leaves a gap you can see. A poisoned page leaves a number you believe.

Most of the usual sites are gone, and social platforms and forums take more of the top 10: Reddit rises from 20.8% of pages to 28.8% and Facebook from 28.3% to 33.8%. [1] The parts of the page move by very different amounts.

Part of the page Kept from the previous page, normally Kept on a poisoned page
Organic results 88.5% 20.7%
People also search for 87.9% 30.7%
People also ask 87.4% 46.9%
AI Overview sources 68.8% 42.3%
Shopping 92.8% 92.2%
Ads 70.6% 83.7%

The last two rows are Nozzle’s sharpest observation: “Only the parts advertisers pay for hold steady.” [1]

What it does to a report

For keywords where a customer’s own site was one of the usual sites, that site was out of the top 10 on 58.6% of poisoned pages. In the baseline it was 2.7%. [1] On a chart that is a cliff, then a recovery nobody did anything to earn.

Most of it is brief. Four in five spells last a single collected page, and 77.9% of poisoned pages had the usual sites back within three days. [1] It is also uneven. Searches with “near me” were hit 11.4% of the time against 7.8% for the rest, and US legal keywords reached 51.3% on September 27. The United States ran at 8.5% overall, the United Kingdom at 3.0%. [1]

There is a second casualty. On poisoned pages an AI Overview appeared 34.9% of the time, against 54.2% in the baseline. [1] Charts of how often AI Overviews appear are built the same way, by loading results pages automatically. DemandSphere’s series for branded keywords climbs from 26.12% on September 1 to 82.06% on September 29, and on the way reads 57.43% on September 18 and 31.15% the next day. [8] The post does not say whether the collection problems touched those counts. Until a vendor says, treat September figures on AI Overviews as a trend inside one panel, as we argued for click data in our piece on AI Overviews traffic.

A torn paper line runs across a grid, drops into a deep blue-violet notch, and returns to its earlier level. A plaster hand points at the notch.
A drop that reverses in two days is a question about the measurement before it is a question about the site.Illustration: Mediovsky · generated with AI

What Google has said, and what it has not

Google has not commented on altered results. The only statement on the record is from August, when it confirmed it was wrapping result links in google.com/goto redirects. As quoted by DemandSphere, a spokesperson said: “We have a long history of deploying technical measures against evolving forms of abuse, and we regularly take steps to protect our services and users.” [3]

The vendors agree on who the target is, and it is not them. DemandSphere’s Ray Grieselhuber writes that “Google does not want the AI labs to use their SERPs as part of their live retrieval process to answer questions.” [9] Search Engine Roundtable, which has reported the story since September 18, assumes the aim is AI bots and the scraping company SerpApi, not SEO tools. [7][10] These are readings of Google’s motive by people Google is blocking. They may be right. They are not confirmation.

What is on the record is the escalation, and a court order fills in the early part.

January 2025
Google launches SearchGuard, which sends a JavaScript challenge to queries from unrecognized sources, according to its own complaint as recorded by the court. [11]
December 19, 2025
Google sues SerpApi under the Digital Millennium Copyright Act. [11]
July 20, 2026
The court dismisses the complaint: for good where results hold no copyrighted content, with leave to amend where they do. [11]
August 26
Google confirms the goto redirects on result links. [3]
September 13
Requests begin failing in large numbers in Nozzle’s data. SISTRIX posts a notice of reduced collection on September 16. [1][10]
September 20
First poisoned pages in Nozzle’s data. [1]
September 24 to October 8
Google’s September spam update rolls out, for 13 days and 16 hours. [6]
October 12
Nozzle publishes its study. [7]

The order states Google’s grievance in Google’s terms: automated queries impose “a deadweight loss,” because it earns nothing from them. [11] Whether the ruling led to what followed, the sequence alone does not show.

How to check a drop before you report it

Nozzle’s own advice ends with the simplest test: if a site seems to disappear and Search Console still shows impressions and clicks, nothing happened to the site. [1] That works because of how Search Console counts. Its help page says: “A link must get an impression for its position to be recorded.” [4]

It is a check, not a replacement. Search Console averages the topmost position of your property across the searches where you appeared, and Google warns that for a specific search “your position might be different than the average because of many variables, such as your search history, location, and so on.” [4] Compare the direction of clicks and impressions. Do not try to match the number.

And the check has its own bad days. On October 11 the Performance report was more than 64 hours behind, according to Search Engine Roundtable, and normal again the next morning. [5] Google’s log of Search Console data anomalies had no entry for it when we read it on October 13. [12]

  • Mark September 13 to October 9 on every ranking chart you publish, and say why.
  • For any keyword that fell, look at the next three days of collection. A fall that reversed on its own belongs in a footnote.
  • Compare a suspect page with the keyword’s usual page-one sites over several weeks, not with yesterday, because yesterday may have been poisoned too.
  • Open Search Console for that query and page. If clicks and impressions held, the site did not move.
  • If the fall stayed past October 8, treat it as possibly real and read it against the spam update, the same way we argued in our note on reacting to one.
  • Ask your vendor for its poisoned or spurious rate and its sampling rate by day. DemandSphere says it is adding both to its product. [13]

The honest summary is narrow. Two vendors have published numbers from their own traffic, one of them with its method and data, and Google has said nothing. What you can act on is smaller than the headline and more useful: a ranking that fell for a day in late September and came back is more likely a page Google served to a machine than a judgment it made about your site.

Sources

  1. Nozzle · Poisoned Google SERPsA rank tracking vendor’s study of its own collection, August 20 to October 9, 2026, with method and downloadable daily data. Not independently verified.
  2. DemandSphere · Spurious data in Google SERPsVendor post, October 7, 2026. No method published for the 11% figure.
  3. DemandSphere · An update from DemandSphere on Google’s goto redirectsVendor post, August 27, 2026. Source for the Google spokesperson’s statement as quoted.
  4. Google Search Console Help · What are impressions, position, and clicks?Primary.
  5. Search Engine Roundtable · Google Search Console Performance Report Extremely DelayedTrade press, October 11, 2026, updated October 12.
  6. Google Search Status Dashboard · Summary of incidentsPrimary. Read October 13, 2026.
  7. Search Engine Roundtable · Third-Party Google Rank Tracking Struggling NowTrade press, October 12, 2026.
  8. DemandSphere · AI Overviews on branded queries tripled in SeptemberVendor post, October 1, 2026, with daily figures.
  9. DemandSphere · Google’s Summer of LoveVendor post, September 24, 2026.
  10. Search Engine Roundtable · Google May Be More Successful In Blocking Scrapers & Tracking ToolsTrade press, September 18, 2026.
  11. US District Court, Northern District of California · Order granting motion to dismiss, Google LLC v. SerpApi, LLC, No. 4:25-cv-10826-YGRPrimary. Filed July 20, 2026; 21 pages. Via CourtListener. The background section recites Google’s allegations.
  12. Google Search Console Help · Data anomalies in Search ConsolePrimary. Read October 13, 2026.
  13. DemandSphere · Understanding Observability in the world of AI search dataVendor post, October 6, 2026.

Frequently asked questions

What is a poisoned SERP?

It is Nozzle’s term for a Google results page that loads completely, with no error and no captcha, but shows results that do not match the keyword’s history. In its study a page counts as poisoned when fewer than half of the keyword’s usual sites appear anywhere on it and those sites come back on a later page.

How common are poisoned results pages?

In Nozzle’s sample of 27.5 million pages collected from August 20 to October 9, 2026, 8.0% of the pages since September 13 were classed as poisoned, against 0.17% before. The share reached about a quarter on September 27 to 29 and has run at about 5 to 11% a day since October 1. DemandSphere separately reports about 11% of its daily pages. Both are one vendor’s own traffic, measured differently.

Has Google confirmed it is sending rank trackers wrong results?

No. Google has not commented on altered results. The one statement on the record, given in August about its goto redirects and quoted by DemandSphere, says Google has a long history of deploying technical measures against evolving forms of abuse.

Did my site really lose rankings in late September?

Check before you conclude that. In Nozzle’s data a tracked site was out of the top 10 on 58.6% of poisoned pages, 80% of poisoning spells lasted a single page, and 77.9% of poisoned pages had the usual sites back within three days. A drop that lasted one or two checks and reversed is more likely a collection problem. Google’s spam update also ran from September 24 to October 8, so a drop that stayed may be real.

Is Search Console’s average position the same as my rank tracker’s position?

No. Search Console records a position only when a link got an impression, takes the topmost position of your property for a query, and averages it. Google’s help page says your position for a specific search may differ from the average because of variables such as search history and location. Use it to confirm whether clicks and impressions moved, not to reproduce a tracker’s number.

Which searches were affected most?

In Nozzle’s data, searches containing near me were poisoned 11.4% of the time against 7.8% for everything else, long-tail phrases more than head terms, and navigational brand searches least. Among US industries, legal keywords ran highest at 15.9%, and reached 51.3% on September 27.

Does this affect AI Overview statistics?

It may. On Nozzle’s poisoned pages an AI Overview appeared 34.9% of the time, against 54.2% in the baseline. Any dataset on how often AI Overviews appear that was collected by loading Google results automatically in late September was gathered under the same conditions, so treat it as a trend inside that vendor’s panel until the vendor shows how it handled the problem.

Found this useful?
MSMikołaj Salecki, portrait
Editor-in-chief

Mikołaj Salecki

Writes about media, tech, and AI business for people who actually run digital. Former agency lead. Skeptic of frameworks that read better than they perform.

More articles →