Generative Engines Are Breaking Web Analytics and Hurting Their Future
Search is moving from traditional search engines to generative engines, but traffic from many of these sites isn’t being tracked properly in analytics. It’s their fault, not yours.
I was looking at our LLM filter in Ahrefs Web Analytics and noticed some common generative engines missing from the list. They’re in our filters, but we aren’t seeing any data from them for sites.
This invisible traffic problem comes from these systems stripping the referral value. I first noticed this problem with AI Mode in Google, but it’s a common problem for generative engines.
This is most likely a mistake on their part, but in some cases may be intentional. Some of these tools probably want more market share and just made a mistake, while others may not want you to be able to measure traffic from the systems. Google has said the clicks from AI Search are higher quality, but we have no way to verify that.
If you have a website that sends traffic to other sites, you should want it to be tracked properly. In the case of generative engines, I warned that these AI bots need to send that info in order to fulfill their social contract, where they provide traffic to websites, and websites allow these bots to crawl and their data to be used.
There’s a cost to bots crawling your websites and there’s a social contract between search engines and website owners, where search engines add value by sending referral traffic to websites. This is what keeps most websites from blocking search engines like Google, even as Google seems intent on taking more of that traffic for themselves. This social contract extends to generative engines.
I think many site owners want to let these bots learn about their brand, their business, and their products and offerings. But while many people are betting that these systems are the future, they currently run the risk of not adding enough value for website owners.
The first LLM to add more value to users by showing impressions and clicks to website owners will likely have a big advantage. Companies will report on the metrics from that LLM, which will likely increase adoption and prevent more websites from blocking their bot.
The same sentiment is true for attribution. If these generative engines want to win market share, they need to be present in reporting to companies. So far, many are not doing a great job.
noreferrer attribute on the link. This would prevent the referral value from being sent.
As expected, there is no referrer shown in the Chrome Dev Tools Console. It comes back empty.
document.referrer
''
In Ahrefs Web Analytics, this is recorded as Unknown, but in Google Analytics it would be classified as Direct. Google lumps traffic from unknown sources and internal website traffic together as Direct, whereas we separate them into Unknown and Internal.
What’s interesting is that when I looked at the same type of link in a free account, it did not have the noreferrer attribute. It’s tracked properly.
For lists of links, they were also tracked properly.
The linkes to Sources in the content and at the bottom of the response are also tracked properly, and they add a URL parameter “?utm_source=chatgpt.com” to the URLs as well.
Web Search
Most of the links in Web Search mode had the referrer. I did run into an interesting example when there are multiple references. The top one had a referrer, the other 2 did not.
DeepResearch
For DeepResearch mode, in-content links were attributed properly, but the sources at the end were marked with noreferrer.
HTTP Headers
If you look at the HTTP Headers, you’ll sometimes find a Referrer-Policy header to specify what and how much information gets passed in the referrer. You can use the Ahrefs SEO Toolbar to view this information by going to the HTTP headers tab.
For ChatGPT, they’ve set a referrer-policy value of “strict-origin-when-cross-origin”. In this case, the downgrade from HTTPS to HTTP would drop the referrer. Any links to pages using HTTP wouldn’t be attributed properly.
AI Mode is marked with noreferrer.
John Mueller from Google has since confirmed it’s a bug and that they will likely fix it.
Louise Linehan mentioned that we may be underestimating AI traffic. She specifically mentioned how Copilot disappeared from our analytics tracking system. Since that time, the traffic has returned.
What I suspect is that these links were marked as noreferrer during that time period. This shows how code changes can impact your global tracking.
Everything here seemed to be tracked properly now.
That’s not the case with Copilot in Windows. I found no cases where the referrer was passed.
Apr 27, 2025Ravie LakshmananKubernetes / Cloud Security Microsoft has revealed that a threat actor it tracks as Storm-1977 has conducted password spraying attacks against cloud tenants in the education sector over the past year. “The attack involves the use of AzureChecker.exe, a Command Line Interface (CLI) tool that is being used by a wide range…
Text animation is more than decoration. It controls pace, holds attention, and adds rhythm to the edit. A well-timed word hitting the screen can do more than a fancy transition. Whether you’re making YouTube content, detailed tutorials, product promos, reels, vlogs, or title sequences, good animated typography can make the difference between flat and finished….
Blogging is still at the heart of WordPress’s strengths. The content management system (CMS) started as a blogging platform and continues to shine. Its goal is to democratize publishing, after all. Those old-school roots are still evident. However, new technologies are here to help you take your blog to the next level. We’re talking (of…
Hosting providers are becoming more competitive in their electricity consumption. This is measured by the amount of data centre power consumption versus how much of the total Kwh is being used by the actual computing power of the data centre, known as the PUE (Power Usage Effectiveness). At a recent customer supplier day I learnt…
Sep 20, 2025Ravie LakshmananSoftware Security / Malware LastPass is warning of an ongoing, widespread information stealer campaign targeting Apple macOS users through fake GitHub repositories that distribute malware-laced programs masquerading as legitimate tools. “In the case of LastPass, the fraudulent repositories redirected potential victims to a repository that downloads the Atomic infostealer malware,” researchers Alex…
Artificial intelligence (AI) has entered the mainstream. We’re finding more and more products that integrate with the technology. WordPress plugins are a prime example. These plugins add a variety of AI-powered features to websites. Some are there to spur creativity, while others are all about saving you time. The trend is helping to spawn new…