A home renovation company in Cincinnati hired me after their organic traffic dropped 55% over six weeks in the spring of 2023. The owner was baffled. He had not changed anything on his website. No redesign, no content removals, no technical errors showing in Google Search Console. The site looked identical to what had ranked well for three years.
When I pulled his backlink profile in Ahrefs, the problem was immediately visible. Between January and March of that year, 340 new links had appeared pointing to his site. He had not built them. A competitor, or possibly a disgruntled former employee, had run a negative SEO attack using a link blast tool. The links came from gambling sites, foreign-language directories, adult content platforms, and hundreds of identical low-quality blogs with spun content. His previously clean profile had been buried under a flood of toxic links.
The fix took three months. A full audit, a carefully constructed disavow file, a reconsideration request to Google, and a parallel campaign to build genuine links to dilute the remaining toxic profile. His traffic recovered to 80% of its pre-attack levels by month four and fully recovered by month seven. The total cost of not monitoring his backlink profile: seven months of suppressed rankings and an estimated $60,000 in lost leads.
If you want expert help with this, explore our Link Building Services and Guest Post Links — we work with service businesses across the UK, Dubai, and UAE.
That story is an extreme case. But the lesson applies to every business with a website: your backlink profile is an asset you need to monitor regularly, understand deeply, and protect actively. This guide walks you through exactly how to audit your backlink profile from scratch, what healthy links look like versus dangerous ones, and what to do when you find problems.
Why Your Backlink Profile Matters More Than You Probably Realize
Most business owners think of backlinks as something they actively build to improve rankings. That is true. What they rarely consider is that backlinks also accumulate passively whether they want them to or not, and not all of those passive acquisitions are beneficial.
Your backlink profile is the complete record of every website that links to yours. Google evaluates this profile constantly when determining how much trust and authority to assign your domain. A profile full of links from credible, relevant sources signals that the internet genuinely endorses your content. A profile contaminated with spammy, manipulative, or irrelevant links signals the opposite and can actively suppress rankings even for pages that would otherwise compete well.
The backlink profile also tells a story about your site's link building history. A profile with sudden spikes of low-quality links, unnatural anchor text patterns, or links from networks of near-identical sites raises algorithmic flags that can trigger both automatic ranking suppression and manual review by Google's quality team. Understanding what your profile looks like right now, and what it should look like, is the foundation of any serious SEO strategy.
Here is the part that surprises most business owners: even if you have never deliberately built a single backlink, you almost certainly have a backlink profile worth examining. People link to content they find useful, cite businesses they have dealt with, mention brands in forum discussions, and scrape content onto low-quality aggregator sites. All of those activities create backlinks you never asked for and may not want.
The Tools You Need to Check Your Backlink Profile
You cannot check your backlink profile accurately without a third-party SEO tool. Google Search Console shows you some linking sites but its data is intentionally incomplete. Google shows you a sample of links, not your full profile, and it prioritizes recently discovered links over your complete historical record. For a genuine audit you need one of the major crawl-based tools with comprehensive link indexes.
Ahrefs: The Most Comprehensive Link Index
Ahrefs is widely considered to have the most complete backlink index of any SEO tool, crawling the web continuously and updating link data faster than most competitors. Its Site Explorer tool shows your full referring domain list, individual backlink details, anchor text distribution, link type breakdown, and historical link acquisition charts. The Lite plan starts at $129 per month, which is significant for a small business running occasional audits. If you only need periodic access, consider a single month subscription timed to your audit cycle rather than maintaining a year-round subscription.
Semrush: Strong Data With Built-In Toxicity Scoring
Semrush offers a Backlink Audit tool that goes beyond raw link data to assign toxicity scores to individual links based on a combination of signals including domain spam patterns, anchor text manipulation, and link placement context. This built-in scoring makes the audit process faster for beginners because it provides a starting framework rather than requiring you to evaluate every link manually from scratch. Semrush plans start at $139 per month for the Pro tier. The Backlink Audit tool is available on all paid plans.
Moz Link Explorer: Solid for Smaller Budgets
Moz Link Explorer has a smaller link index than Ahrefs or Semrush but provides useful data at a lower price point. The free version allows limited queries per month, which is enough to run a basic audit on a small site. Paid plans start at $99 per month. Moz's Spam Score metric provides a rough toxicity signal for referring domains that helps identify the most obviously problematic links without requiring deep manual analysis.
Google Search Console: Free but Limited
Google Search Console's Links report is free and shows you which sites Google has identified as linking to yours. It is useful as a cross-reference tool and for identifying your most linked-to pages, but it is not comprehensive enough to serve as your primary audit tool. Use it alongside one of the paid tools above rather than instead of them. One specific use case where Search Console is essential: verifying that a disavow file has been processed and that previously flagged links are no longer appearing in your profile data.
How to Run a Backlink Audit Step by Step
A proper backlink audit follows a structured process. Rushing through it or skipping steps leads to incomplete findings and decisions based on partial information. Work through these steps in order and document your findings as you go.
Step One: Export Your Full Referring Domain List
Open your chosen tool and navigate to your site's backlink or referring domains report. Export the complete list as a CSV file. For most small to medium business websites this list will contain between 20 and 500 referring domains. For sites with active link building histories or that have been online for more than five years, the list may run to several thousand. Start with the referring domains list rather than the individual backlinks list because multiple links from the same domain count as one referring domain and domain-level assessment is faster and more meaningful than link-by-link review.
Step Two: Sort by domain rating and Review the Extremes
Sort your referring domain list by Domain Rating. Examine the top 20 highest-DR referring domains first. These are your most valuable links and confirming they are legitimate and still active is important baseline information. Then scroll to the bottom of the list and examine your lowest-DR referring domains. DR 0 to 10 sites require the most scrutiny because this is where the highest concentration of spam, link farms, and manipulative networks typically lives. Make a preliminary flag on any domain below DR 10 for deeper review.
Step Three: Check Organic Traffic on Flagged Domains
For every flagged domain, open it in Ahrefs or Semrush and check its estimated monthly organic traffic. A legitimate website, even a small one, has some organic traffic because its content ranks in Google for real queries. A site with DR 0 and zero organic traffic is almost certainly a link farm, a PBN node, or a scraped content site with no genuine audience. Flag every referring domain with fewer than 100 monthly organic visitors for closer inspection. The combination of low DR and near-zero traffic is the clearest reliable indicator of a problematic link.
Step Four: Visit Flagged Sites Directly
For every domain that fails the traffic check, visit it in a browser. What you see will usually confirm your suspicion quickly. Genuine red flags include: pages covered in unrelated advertisements with minimal content, identical or near-identical content appearing across multiple pages, content that appears machine-generated or scraped from other sources, navigation menus with dozens of unrelated category links pointing to different industries, foreign-language content linking to English-language sites in completely unrelated niches, and sites whose only apparent purpose is hosting outbound links to various commercial websites.
Step Five: Analyze Your Anchor Text Distribution
Pull your full anchor text report from your audit tool. This is one of the clearest places where manipulative link building leaves fingerprints. A natural anchor text profile is dominated by branded anchors (your business name, your domain), generic anchors (click here, this website, read more), and bare URL anchors. Exact-match keyword anchors (the precise keyword phrase you are trying to rank for) should represent no more than 5 to 15% of your total anchor text profile. If exact-match commercial keywords represent 40%, 60%, or more of your anchors, that is a significant manipulation signal that Google's algorithms are trained to detect and discount.
Backlink Profile Health: Good Signals vs. Warning Signs at a Glance
| Profile Element | Healthy Signal | Warning Sign | Action Required |
|---|---|---|---|
| Referring domain DR range | Mix of DR 20 to 80+, average above 25 | Heavy concentration below DR 10 | Audit low-DR domains individually |
| Organic traffic of linking sites | Most referring sites have 500+ monthly visitors | Many referring sites have zero organic traffic | Flag zero-traffic domains for disavow review |
| Anchor text distribution | Mostly branded, generic, and URL anchors | High % of exact-match commercial keywords | Investigate links with suspicious anchor text |
| Link acquisition pace | Gradual, consistent growth over time | Sudden spikes of 50+ links in days or weeks | Investigate spike sources immediately |
| Referring domain diversity | Links from many different industries and topics | Many links from same network or template sites | Check for PBN footprints across flagged domains |
| Link placement on page | Mostly in-content editorial links | Footer, sidebar, or widget links dominating | Deprioritize but not necessarily disavow |
| Geographic relevance | Primarily from same-language, relevant regions | Heavy foreign-language domains with no context | Flag for disavow if traffic and DR are both low |
| Content relevance | Linking pages discuss related topics | Linking pages have no thematic connection | Evaluate case by case based on DR and traffic |
What Bad Links Actually Look Like: A Practical Field Guide
Reading about bad links in the abstract is useful. Knowing what to look for when you are actually staring at a list of 400 referring domains is more useful. Here is a direct description of the most common toxic link types, what they look like in your audit tool, and why they are problematic.
Link Farm and Directory Spam
Link farms are websites created solely to host outbound links to other sites. They typically have hundreds of pages, each containing dozens of links to completely unrelated commercial websites across industries like gambling, pharmaceuticals, adult content, finance, and home services all coexisting on the same site with no editorial logic. In your audit tool, these sites show up with DR 0 to 15, zero or near-zero organic traffic, and anchor text that is stuffed with commercial keywords. Visit the linking page and you will see a wall of links with no genuine content surrounding them.
Hacked Site Injections
Some toxic links in your profile were not placed by anyone with any connection to you. Hackers inject links into legitimate websites by exploiting security vulnerabilities, adding hidden links in footers, sidebars, or within page code that are invisible to human readers but crawlable by search engines. These links often come from legitimate sites with real DR scores and real traffic, which makes them harder to spot in a raw audit. The signal is a link from an otherwise credible site on a page that makes no editorial sense, linking to your site from a page about a completely unrelated topic with anchor text that looks nothing like what that site's editors would ever write.
Expired Domain PBN Links
Private Blog Network links built on expired domains look superficially more legitimate than outright link farms. They have content, they have some DR from the expired domain's history, and they may even rank for a handful of keywords. But visit the site and the signals become clear: content that is generic and interchangeable with dozens of other sites on the network, publication dates clustered in a short window suggesting bulk content production, navigation structures that are identical or near-identical across multiple sites, and a linking page that contains your link alongside links to completely unrelated commercial sites in different industries. The lack of topical coherence across a site's outbound links is the clearest PBN fingerprint.
Irrelevant Foreign Language Links
A burst of links from sites in languages completely unrelated to your market, particularly from Eastern European, Asian, or South American domains that have no conceivable audience overlap with your business, is a strong spam signal. A plumber in Manchester receiving 40 links from Vietnamese-language gambling directories did not earn those links organically. Either a previous site owner pursued spam link building, a competitor launched a negative SEO attack, or the domain was acquired by a spammer at some point in its history. These links should be flagged and disavowed without hesitation.
Exact-Match Anchor Text Overload
This one is less about where a link comes from and more about how it is constructed. If you search for your target keyword, say "emergency plumber Chicago," in your anchor text report and find that 60 of your 150 backlinks use that exact phrase as anchor text, your profile has an unnatural anchor text pattern that Google's SpamBrain system is specifically trained to detect. Natural link profiles do not produce that kind of anchor uniformity. Real editorial links use varied, organic language to describe what they are linking to. An anchor text concentration this heavy almost always traces back to a deliberate link building campaign that over-optimized its anchor distribution.
How to Decide Which Bad Links to Disavow and Which to Ignore
This is where most people get the disavow process wrong. They either panic and disavow everything that looks remotely suspicious, accidentally disavowing legitimate links in the process, or they are so cautious about disavowing that they leave genuinely toxic links in their profile for years.
The correct approach is a tiered classification system that separates links into three categories before making any disavow decisions.
Category One: Disavow Without Hesitation
These are links from sites that have no plausible legitimate reason to link to your business and whose characteristics clearly indicate manipulative or spam origins. The criteria: DR below 10, zero or near-zero organic traffic, content that is clearly spam or scraped, and no topical relevance to your business whatsoever. If all four of those conditions are met, disavow the domain. Do not waste time trying to contact the site owner for link removal. These sites are not maintained by real people who respond to outreach. Add the domain to your disavow file and move on.
Category Two: Investigate Before Deciding
These are links that raise some flags but also have some characteristics of legitimate sites. A DR 18 site with 800 monthly organic visitors that published a genuine article linking to your business might be a legitimate niche blog with modest authority or might be a borderline quality site that is not worth worrying about. Visit the page, read the surrounding content, check whether the link makes editorial sense. If the content is genuine, the link makes contextual sense, and the site appears to serve a real audience, leave it alone. Google is very good at ignoring low-quality links without penalizing them. The disavow tool should be used for links that are clearly manipulative, not for every low-authority link in your profile.
Category Three: Leave Alone
The majority of the links in most backlink profiles fall into this category. Low-DR directories that are industry-specific citation sources, old links from no-longer-active but not spammy sites, academic or community organization pages with minimal traffic but genuine editorial content, forum links where your business was genuinely mentioned in a discussion. None of these require action. Google ignores links it does not trust without needing you to disavow them. Reserve your disavow file for the genuinely manipulative links that could trigger algorithmic suppression or that clearly came from a deliberate link scheme.
How to Build and Submit a Disavow File Correctly
If your audit identifies a meaningful number of genuinely toxic links, a disavow file submission through Google Search Console is the correct remediation tool. Done correctly, it tells Google to ignore specific links when assessing your site. Done incorrectly, it can accidentally neutralize legitimate links or signal to Google that you are aware of manipulative links in your profile, which can trigger additional scrutiny.
- Export your list of domains to disavow from your audit tool or your manual review spreadsheet
- Create a plain text file using a text editor (not Word, which adds hidden formatting)
- List each domain to disavow on its own line in the format: domain:example.com
- Add comment lines starting with # to document why specific domains are being disavowed (this is for your own records, not required by Google)
- Save the file as a .txt file with UTF-8 encoding
- Navigate to Google's Disavow Tool at search.google.com/search-console/disavow-links
- Select your property and upload the disavow file
- Allow four to eight weeks for Google to process the disavow submission before expecting ranking changes
Never rush a disavow submission. Spend at least two to three weeks on your audit before submitting anything. A hasty disavow file that incorrectly includes legitimate links can suppress rankings rather than improve them. When in doubt about a specific domain, leave it out of the disavow file. You can always submit an updated file later.
Frequently Asked Questions About Backlink Profile Audits
For most small to medium businesses with modest link building activity, a quarterly audit is sufficient. Check your referring domain count monthly in whatever tool you use to catch any sudden spikes that might indicate a negative SEO attack or an unexpected link blast. Run a full manual audit every three to four months to review new additions to your profile in detail. Businesses in highly competitive niches where negative SEO attacks are more common, such as legal services, finance, and e-commerce, should run monthly audits and set up automated alerts for unusual link acquisition spikes.
Yes, negative SEO attacks using toxic link blasts are real and do happen, particularly in highly competitive industries. The good news is that Google's algorithms have become significantly better at detecting and ignoring unnatural link spikes rather than penalizing the target site. The Cincinnati home renovation case I described at the start was an example where the attack was severe enough and the existing profile clean enough that the contrast was stark. For most sites, a modest negative SEO attack produces minimal real damage if the baseline profile is healthy. Monitor your profile monthly and be ready to disavow clearly toxic link batches if they appear.
Attempting to remove bad links by contacting site owners is generally not worth the effort for genuinely toxic sites. The sites hosting spam links are rarely maintained by real people who respond to removal requests, and Google's official guidance has shifted away from requiring removal attempts before disavowing. The disavow tool exists precisely because webmasters cannot always control what sites link to them. Focus your energy on the disavow file rather than outreach to low-quality sites that almost certainly will not respond. Save link removal outreach for situations where you have a genuine ongoing relationship with a site owner and the link in question is from a legitimate site that simply does not serve your profile anymore.
A natural backlink profile contains a mix of dofollow and nofollow links. Purely dofollow profiles look unnatural because real-world link acquisition always includes some nofollow links from social platforms, news sites, Wikipedia, and other sources that default to nofollow. A rough healthy range is 60 to 80% dofollow links and 20 to 40% nofollow links, though this varies significantly by industry and business type. An unusually high proportion of dofollow links, say 95% or above, can signal deliberate manipulation if the overall link volume is significant.
Not necessarily immediately. Google is increasingly good at ignoring toxic links passively without applying penalties. If your rankings are stable and your profile has a relatively small number of suspicious links compared to a larger volume of genuine links, doing nothing and monitoring the situation is a perfectly reasonable choice. Proactive disavowing of links that are not currently causing harm carries some risk of accidentally disavowing legitimate links. Reserve disavow submissions for situations where you have clear evidence of harm: a ranking drop that correlates with toxic link acquisition, a manual action notification in Search Console, or a profile where toxic links represent a genuinely significant proportion of your total referring domains.
Google notifies you directly in Google Search Console when a manual action is applied to your site. Navigate to Search Console, click on Security and Manual Actions in the left sidebar, and then click Manual Actions. If no manual actions are listed, your site has not received one. If a manual action for unnatural links is listed, you will see a description of the issue, the date it was applied, and guidance on how to submit a reconsideration request after addressing the problem. Manual actions are less common than algorithmic ranking suppression but more severe when they occur, requiring direct remediation and a formal reconsideration request to lift.
Absolutely, and this is one of the most underused benefits of a thorough audit. While reviewing your referring domains, you will often discover sites that link to you in ways you were not aware of, including relevant industry publications, local community sites, and niche blogs. These organic mentions are your warmest possible outreach prospects because they have already demonstrated interest in your business. Reach out to thank them, offer additional resources, and explore whether a deeper editorial relationship is possible. Your backlink audit is simultaneously a health check and a prospecting exercise when approached with that dual lens.
Your Backlink Profile Is a Living Asset That Needs Regular Attention
The Cincinnati home renovation owner monitored his backlink profile exactly never before the attack hit. He had no baseline, no alert system, and no process for catching the problem early. Seven months of recovery was the price of that oversight. After working through the recovery together, he now runs a monthly referring domain count check and a quarterly full audit. It takes him about two hours per quarter total. That two-hour investment protects an asset that took years to build.
Start your first audit this week using Ahrefs, Semrush, or even the free Moz Link Explorer for a smaller site. Export your referring domains, sort by DR, and spend two hours reviewing the bottom 20% of your list. That single session will tell you more about the real state of your SEO foundation than any keyword ranking report or traffic dashboard.
Most sites will find their backlink profile is healthier than they feared. A handful of low-quality links in an otherwise clean profile is normal and nothing to panic about. But for the sites that find genuine problems, catching them early, before an algorithm update amplifies their impact or a competitor escalates their negative SEO campaign, is the difference between a two-hour fix and a seven-month recovery.
Have you ever audited your backlink profile before? What did you find? Drop your biggest surprise in the comments and I will tell you whether it is something to act on or something to leave alone.
Want Results Like This for Your Business?
Get a free Local SEO audit — we will show you exactly what is holding your rankings back and the fastest path to the Google map pack.
Talk to a Local SEO Specialist →