Toxic backlink audits

Toxic backlinks are links that harm your site, from spammy, irrelevant, or penalized sources. They come from link schemes you bought into, negative SEO attacks, or just organic web rot. Knowing what's actually toxic (vs, just ugly) prevents over-reaction.

The short version

Most sites overestimate how many toxic links they have. Google has gotten good at ignoring low-quality links silently rather than penalizing. Aggressive disavowing often does more harm than good.

What counts as toxic

Definitely toxic

• Links from sites explicitly flagged by Google for link schemes
• Links from sites in languages you don't serve (random foreign-language directories)
• Links from adult, gambling, or pharmaceutical spam sites (unless you're in those verticals)
• Links from sites with 100% commercial exact-match anchors pointing at you
• Links explicitly sold to you by a link-building service (whether you knew it or not)
• Links from PBNs (Private Blog Networks), detectable patterns include all sites with matching WHOIS, same hosting, thin content, same theme

Probably harmless (stop worrying)

• Low-DR links from legitimate but obscure blogs
• Links from directories that aren't blatant spam
• Scraper sites that copy legitimate content + link to source
• Links from comments/forums, auto-nofollowed
• Unfamiliar foreign-language sites (if they exist naturally in your profile)

Google's position

Google has said repeatedly: most low-quality links are ignored, not penalized. They don't transfer authority, but they don't actively harm. The only true "toxic" links are those from scheme participation, where Google has identified the pattern.

How to spot real toxicity

Step 1: Pull your backlink profile

Ahrefs, SEMrush, Search Console → Links report → Top linking sites.

Step 2: Sort by volume

Which domains link to you most? Are any of them sketchy?

Step 3: Spot-check the top 100 domains

Visit them. Do they look real? Do they have real content? Would you be embarrassed if a human investigator asked you why they link to you?

Step 4: Look for patterns

• Many sites with the same template or hosting
• Many sites linking with the same exact-match anchor
• Large volume from a single country where you don't operate
• Sudden spike in cheap-looking backlinks (negative SEO attack)

When to take action

Actually disavow only if:

• You received a manual action notice in GSC
• You can see a clear algorithmic drop coinciding with bad-link acquisition
• You participated in a link scheme you need to publicly disavow
• You're being actively attacked with negative SEO (thousands of clearly spam links appear suddenly)

The disavow file

A text file submitted via GSC telling Google "ignore these links when evaluating my site." Format:

# Comments start with #
domain:spam-example.com
http://specific-bad-url.example.com/page

Disavow by domain (not URL) when possible, catches all URLs from that domain in one line.

Risks of disavowing

• Disavowing legitimate links (borderline cases) loses ranking signal
• Over-aggressive disavows signal Google you've been in link schemes
• Reversing a disavow takes time (Google has to re-discover and re-count the links)

Modern advice

Before disavowing: try to get the link removed by contacting the site owner. Disavow is last resort. For most sites that haven't received a manual action, don't disavow at all, let Google ignore the bad links silently.

Negative SEO

Attacks where a competitor points thousands of spam links at your site to trigger penalties. Rare but real. Spot:

• Sudden, massive increase in low-quality links (visible in backlink tools)
• All with commercial exact-match anchors
• From sites you've never heard of, usually foreign

Response: disavow en-masse. This is the legitimate use case for aggressive disavowing.