Google’s September spam update is still rolling out. Here’s what it targets, why copy-paste city pages are risky, and what to check if traffic dropped.