LinkGuard cover — Backlink donor evaluation checklist: what to check before you pay

You're staring at a guest-post pitch in your inbox. DR 56, "niche- relevant", $450. The salesperson sent you the Ahrefs screenshot showing organic traffic of 12,000/month. You're about to send a deposit.

Lily Ray published a 220-site dataset in 2025 looking at what happened to sites running on bought-link strategies after the spam- update cycle. 54% lost at least 30% of their traffic. 39% lost at least 50%. 22% lost at least 75%. The DR-56 donor the salesperson is pitching isn't outside that distribution — it's inside it. The 2018 "DR ≥40 and topical" rule is folk wisdom that hasn't kept up with two regime shifts: Penguin 4.0 in 2016 (devalue, not demote) and SpamBrain in December 2022 (cluster-level neutralization at AI scale). Buy on DR alone in 2026 and you're paying $200-$2,000 per link for inclusion in Ray's distribution.

The honest 2026 donor evaluation is a five-dimension audit. None of the five is exotic; most operators check one or two and skip the rest. The five together are the gate that survives SpamBrain:

The donor's own outbound link patterns — single best predictive signal, per 44,000-site operator data on link-seller sites. If the donor sells links, their outbound profile shows it before any other signal does.
Content-sale fingerprint — "write for us" pages, sponsored-tag patterns, every-post-has-an-outbound-commercial links footprint.
Traffic reality vs Ahrefs vanity — Collaborator 2024 study of 7,500 sites: Ahrefs organic-traffic estimate differs from real Google traffic with a 49.5% median deviation. DR + traffic is a vanity pair; only verified Search Console data tells you what Google sends.
Wayback continuity — was this domain always this site? Expired-domain rebuilds, niche pivots, and recent "flipped" sites all flag here. Aged-into-spam donors will sit at the top of a marketplace.
Cluster membership — is this donor part of a network that's already neutralized or about to be? SpamBrain operates at cluster granularity; one donor's individual quality doesn't matter if the cluster is on the way out.

This checklist is 22 items across 5 stages: get the mental model right (pre-flight), audit the donor across the 5 dimensions (audit), pricing reality and red flags (pricing), how to acquire safely (mechanics), three anti-patterns (what NOT to do). Tier filter, browser-saved progress. Most readers will spend their real time in the audit category — that's where the qualification work lives.

Vocabulary

If you've read our anchor text portfolio checklist or disavow checklist, you already have most of these. New terms in italics.

DR (Domain Rating): Ahrefs's 0-100 score for a domain's backlink authority. Used as a cheap pre-filter, not a ranking signal Google uses.
PBN (private blog network): a set of sites under one operator, built or bought (often from expired domains) to sell backlinks. The operator controls the network; SpamBrain's job is to detect and devalue them.
DA (Domain Authority): Moz's equivalent score. Has fallen out of operator use since ~2020.
Trust Flow / Citation Flow: Majestic's twin metrics for link-equity quality (TF) and quantity (CF). Still useful for the TF/CF ratio as a spam tell.
SpamBrain: Google's AI link-spam classifier deployed December 2022. Operates at donor-cluster granularity, not individual link.
Donor cluster: a group of inbound link sources treated together by ownership pattern, IP, or content fingerprint. The unit SpamBrain devalues.
"Write for us" page: a public landing page soliciting guest-post submissions. Pure content-marketing sites don't have one; sites running guest-post-for-link operations always do.
rel="sponsored": HTML attribute that tells Google the link is paid. Google now treats it as a hint, not a directive (Search Central, 2024).
Wayback Machine: archive.org's historical web snapshots. The single best free tool for donor-history evaluation.

What success looks like

You qualify three out of every ten pitched donors. The seven you reject didn't take any of your budget. The three you bought from survive the next spam update because the audit caught the donors that wouldn't. A year from now, when Lily Ray's next dataset comes out, your sites are in the 46% that didn't lose 30%+ of traffic.

Related reading: before you weigh a donor's outbound links, get clear on what the attributes actually mean — dofollow vs nofollow links: what they are and when each matters.

0 / 22 · 0%

Critical Important Nice to have

Show only undone

Three concept checks before you waste 90 minutes auditing the wrong dimensions. Most operators skip these and audit DR + traffic + topical fit (the three dimensions that don't predict survival).

Critical Use DR/DA only as a free pre-filter, never as a qualifier Lily Ray's 2025 dataset of 220 sites running bought-link strategies shows DR doesn't predict survival — 54% lost ≥30% of traffic regardless of donor DR. DR works for one purpose: cheaply skipping the bottom 50% of pitched donors. DR <25 is marketplace junk because Ahrefs's own backlink index gets too sparse to read the donor's outbound profile (a-02) — data-availability floor, not quality threshold. DR ≥25 still has to pass the five-dimension audit below.

How to do this

Use DR as a binary ≥25 / <25 gate. If ≥25, mark the donor as audit-eligible in your tracker and move to a-01. If <25, decline. Past the gate, stop looking at the DR number entirely.
Critical Treat Ahrefs traffic estimates as estimates, not ground truth — verify against Search Console Ahrefs's own help-center documentation concedes a ~49.5% median deviation between its traffic estimates and real GA/GSC data. Collaborator.pro's separate 7,500-site study found Ahrefs↔GSC correlation of only 0.67. Two different statistics, same direction: "DR 56 with 12,000 organic/month" can be a real DR 56 with actual 6,000/month, or with 800/month. Without donor-shared Search Console data, the traffic number is marketing copy.

How to do this

Ask the donor to share live Search Console data covering the last 3 months. Either: (a) a screenshot of Performance → total clicks + impressions + top queries + top pages, (b) a CSV export, or (c) view-only Search Console access. Set GSC to "Last 3 months" because Ahrefs estimates a 30-day rolling window — this is the closest match for comparison. Expect ≤50% deviation between the two. If the donor refuses all three options, the audit ends — you have no evidence the site gets real Google traffic.
Critical Internalize the cluster model — one donor's quality doesn't matter if the cluster is dying SpamBrain neutralizes at cluster granularity. Joy Hawkins's August 2025 case study showed donor clusters going from contributing to ignored without any visible signal on the donor sites themselves. If the donor is part of a network of 50 sites under the same ownership or content-marketing pattern, individual donor quality stops mattering.

How to do this

For the deep mechanism reference: see pf-02 in our anchor portfolio checklist. Operationalized in this checklist as a-08 below.

Eight items across the five dimensions. Most operators do dimension 1 (DR, already rejected) and dimension 5 (topical fit, useful but not sufficient). The middle three are where the real qualification work lives. Budget 60-90 minutes for the full eight-item audit; a-02 alone runs 15-20 minutes for a trained junior.

Important Check whether the donor has a public guest-post surface — presence is a weaker signal in 2026 A public "write for us" page used to be the cheapest content-sale fingerprint. In 2026 the sophisticated operators have moved off public pages onto private channels (inbox-only via Pitchbox, hidden contact forms, Slack/Discord communities like Superpath or SaaSCollective). Presence of a public page still tells you the donor is in the bottom-half marketplace (Adsy / OutreachZ tier). Absence tells you nothing — ~60% of donors operators end up paying for in 2026 have no public guest-post surface.
How to do this
Check four URL patterns + a Google search:
donor.com/write-for-us
donor.com/contribute
donor.com/guest-post-guidelines
donor.com/contact?topic=editorial
Google: site:donor.com ("write for us" OR "contributor" OR "sponsored" OR "guest post"). Any hit = donor is in the open marketplace (audit harder). No hit doesn't mean editorial — many marketplace-tier donors run inbox-only in 2026. Move on to a-02 (outbound profile) regardless of result.
Critical Audit the donor's own outbound link profile — the single best 2026 signal Per 44,000-site link-seller analysis, the donor's own outbound anchor profile predicts neutralization better than any single donor-internal metric. If 30%+ of the donor's outbound links are exact-match commercial anchors pointing to unrelated money pages, the donor is a link-seller regardless of how editorial their content reads. SpamBrain reads this footprint.
How to do this
Workflow:
Ahrefs → Site Explorer → the donor URL → Outgoing links → Anchors. Export.
Categorize the top 50 outbound anchors into the 5 buckets (branded / naked URL / partial / exact-match commercial / junk).
Calculate exact-match-commercial %. <10% is normal editorial. 10-30% is yellow flag. ≥30% is a link-seller regardless of how the site presents.
Or paste the donor's outbound anchor list into our anchor distribution analyzer for the 5-bucket breakdown without uploading to a third party.
Audit anchor distribution free
Critical Run a fast first-pass on-page score before committing 60 minutes of manual audit Our donor trust audit scores the on-page signals only — indexability, canonical, content depth, outbound-link density per 100 words, editorial markers (title/meta/H1), HTTPS — into a single 0-100 score with a good / caution / poor verdict. It's a 30-second triage before the 60-minute manual audit. For everything else in this checklist (outbound anchor profile, Wayback, cluster, rel attribute, pricing) you still do the manual work below — the tool sees the page, not the donor's link history.

How to do this

Paste the donor URL into our donor trust audit. Read the per-signal checklist (not just the score). A caution verdict isn't disqualification — it's a flag that the manual audit needs to find offsetting evidence. Poor verdicts usually save the manual hour by surfacing on-page red flags (noindex, canonical pointing elsewhere, outbound-link density >5 per 100 words) before you spend time on the link-history audit.
Audit donor trust free
Critical Pull the full Wayback timeline — look for any 12-month gap or topic switch Expired-domain rebuilds are the dominant manufactured-donor pattern in 2024-2026. Operators buy a domain that died 4-7 years ago, leave it parked for 6-18 months, "relaunch" the brand. Only the full Wayback timeline catches this. Looking at only the last 24 months misses the buy + park window entirely — a 24-month-old rebuild looks legitimate.
How to do this
Open web.archive.org/web/*/donor.com and read the calendar bar at the top. Two disqualifying patterns:
Any 12+ month gap in snapshots = domain was parked / abandoned. Pre-park content is irrelevant; the brand you're evaluating is a rebuild.
Any complete topic switch at any point in history (a local plumber in 2020 → an "SEO authority" in 2026) = domain bought and re-themed. Subtle drift (a SaaS pivoting from CRM to AI tools) is fine; complete topic switch is not.
Quick parallel check while you're in Ahrefs: backlink profile → referring domains → sort by first-seen. A spike of 200+ referring domains in a single month 2-3 years ago is the expired-domain rebuild fingerprint — the parked domain carried equity, and the rebuild bought it.
Critical Verify the rel attribute the donor will publish your link with Some marketplaces silently force rel="sponsored" or rel="nofollow" on every outbound, then resell the placements as "editorial dofollow". You pay for follow-equity and get hint-only links. Google now treats rel="sponsored" as a hint anyway, so this isn't black-and-white — but you should know what you're buying.

How to do this

Ask the donor for the URL of a placement they've made for a comparable client in the last 90 days. Open the page. Inspect the outbound link's rel attribute directly in DevTools, or paste into our nofollow/dofollow checker for a batch view. If they refuse to share a sample, you're flying blind.
Bulk nofollow check free
Important Read 5 random posts from the last 90 days — look for AI-content tells without an editor Ahrefs's 600,000-page study found AI content is not auto-devalued by Google — but Search Engine Land's 16-month controlled experiment showed pure-LLM no-edit AI content stays structurally under-indexed. A donor running unedited AI content is publishing pages Google won't surface, which means your link sits in a page nobody reads.
How to do this
Pick 5 random recent posts. Read the first 200 words of each. AI tells without an editor:
Identical paragraph length across sentences
Formulaic intros ("In today's...", "In the realm of...")
Hallucinated stats with no source link
No author voice / no first-person examples / no proper names
Every H2 is a question
Three or more posts hitting these patterns means the donor is running an unedited AI pipeline. The pages exist but won't rank, so your link sits in a structurally weak placement.
Important Verify topical relevance at the URL level, not the domain level A general-purpose business blog can be "topical" to almost anything if you squint. The relevance that matters is page-level: is the post you'll be cited in about your topic? A SaaS tool's link from a "Top 10 Cybersecurity Trends" post on a generic business blog is weaker than the same link from a niche infosec publication's review page.

How to do this

Ask the donor for the working draft (or exact topic + outline) of the post your link will sit in. Check that the surrounding 300 words make sense for the linked anchor and your destination page. If the donor won't share a draft until after payment, that's its own signal — legitimate editorial outlets share working drafts as standard practice.
Critical Check cluster-membership tells — analytics IDs, theme fingerprint, footer overlap Modern PBN clusters share infrastructure and content fingerprints. If the donor is one of 50 sites in a cluster that SpamBrain is about to neutralize, individual evaluation is wasted budget. ~85% of mid-tier marketplace donors sit behind Cloudflare in 2026, which destroys the reverse-IP signal that worked in 2020 — modern operators look at analytics IDs and shared bylines instead.
How to do this
Run in order — stop as soon as you confirm a cluster:
Analytics IDs in page source (strongest 2026 tell). view-source:donor.com, Ctrl+F for UA-, G-, ca-pub-. If five "unrelated" donors share an analytics or AdSense ID, they're one ownership cluster.
Shared author bylines. Same author name + same headshot writing for multiple "different" sites = same operator.
Footer / sidebar overlap. Open 5 suspected-cluster donors, diff footers manually. Identical outbound link sets = cluster.
Theme + plugin combo. view-source → search wp-content/themes/. Five donors with identical theme + unusual plugin combo (e.g. Schema Lite + WP Rocket + same Adsense ID) = cluster.
IP / reverse IP. nslookup donor.com (Windows) or dig +short donor.com (Mac/Linux), paste IP into viewdns.info/reverseip/?host=<IP>&t=1. Useful when donors are NOT behind Cloudflare; skip if the IP resolves to a Cloudflare edge.
WHOIS. whois.domaintools.com. Optional in 2026 — if WHOIS returns "Cloudflare, Inc." you can't get the real owner. Use the other signals.

Four pricing checkpoints. Most overpayment isn't for premium quality — it's for an agency middle layer or for a marketplace markup. The 2026 honest ranges are published; use them to detect rip-offs.

Important Benchmark against the 2026 published guest-post pricing ranges Adsy's 37,542-site analysis and OutreachZ's 2026 guide put the honest market at $459-$508 average for a guest post, $692-$957 for quality tier, $1,459 average with an agency middle layer, and $1,500-$2,500 for genuine news / PR placements. A $200 quote on a DR 60 "editorial" donor is almost always a link farm masquerading as editorial. A $3,000 quote on a comparable donor is usually paying for the agency layer, not the donor.

How to do this

Quick-reference:

Quote	Honest read
<$200	Link farm. Stop.
$200-$450	Marketplace baseline. Audit hard.
$450-$700	Honest market average.
$700-$1,000	Quality tier. Worth it if audit passes.
$1,000-$1,500	Agency markup. Verify what the agency is doing for the difference.
$1,500-$2,500	News / PR / vertical-leading publication. Real if niche fits.
>$2,500	Tier-1 media or you're being overcharged.

Nice Add 15-30% to the quote for the link-survival risk premium Lily Ray's 220-site dataset: 54% of bought-link strategies lost ≥30% traffic. The honest expected value of a $500 link is lower than $500 because the link itself isn't a guaranteed asset — it's a probability of an asset. Operators who ignore the survival risk overpay; operators who price it in negotiate harder or skip more donors.

How to do this

Rule of thumb: take the quoted price, multiply by ~1.5x, and ask "would I still pay this if I knew there was a 50%+ chance the link gets devalued within 18 months?" If yes — proceed. If no — renegotiate or skip.
Important Refuse upfront payment without a draft URL or a placement guarantee Standard marketplaces and reputable freelancers either share the draft URL before publish or use escrow / Stripe-with-refund-clause arrangements. Upfront payment with no proof of work is the marketplace pattern most associated with placements that vanish after 30 days.
How to do this
Accept payment terms ONLY when one of:
Escrow / milestone payment.
Pay-on-publish (the donor sends the live URL, you transfer within 7 days).
30-day replacement guarantee in writing if the link is removed.
If the donor refuses all three, the donor knows the placement won't survive. Walk.
Important Discount the quote for nofollow / sponsored attributes Google treats rel="sponsored" as a hint, not a directive, but it remains a signal Google uses in evaluation. A rel="nofollow" link is worth materially less than a follow link for ranking purposes — though both still carry brand-mention value for AI-search citation. Pay accordingly.

How to do this

Operator floor: nofollow and sponsored links should cost 30-50% less than the same donor's follow placement. If the donor quotes the same price regardless of rel attribute, they're hiding the attribute in the deal — verify in a-05 before paying.

Four execution rules. The audit catches bad donors; the mechanics keep you from sabotaging good acquisitions through bad terms or rushed timelines.

Critical Specify the anchor in writing before payment, accept the donor's right to edit The most common acquisition failure is anchor mismatch: you specified "backlink monitoring tool", the donor published "this neat tool". Without a written spec, you have no leverage to ask for an edit. With a written spec, you have leverage but also a published anchor pattern you need to live with.

How to do this

In the brief: 1 primary anchor + 2 fallback options the donor can use if the primary doesn't read naturally. Make the fallbacks include a branded option and a naked URL — those keep your distribution healthy even when the donor rejects exact-match.
Important Stagger acquisitions to <15% of monthly new-link velocity per donor cluster Buying 30 links from the same marketplace in one month is a velocity footprint SpamBrain reads. Buying 5 per month for 6 months from 4 different sources looks like natural editorial acquisition. The math is the same; the footprint isn't.

How to do this

Cap: no single marketplace / agency / outreach pipeline should account for more than 15% of your monthly inbound acquisition. Use 3+ acquisition sources in parallel; rotate.
Critical Document every acquired link in a 9-column tracker for survival monitoring Without a tracker, you can't tell 12 months later whether a marketplace's links survived or got devalued. With one, you can blacklist sources whose links vanished and double down on sources whose links held. The tracker is the only thing that converts acquisition into learning.
How to do this
Create a Google Sheet with nine columns. 30d_check = link still live AND indexed (both must be Y, not just live):
acquisition_date | donor_url | source (marketplace/agency/outreach) | price | anchor | rel_attribute | 30d_check (Y/N) | 180d_check (Y/N) | ranking_correlation_notes
Audit the 30d / 180d / 365d columns automatically with our backlink index checker — paste the URLs, see indexation status. Manual review every 90 days.
Check if it is indexed in Google
Important Pre-commit to a kill criterion before the first dollar leaves the account Operators who don't pre-commit to a kill criterion keep buying from a marketplace long after the links stop surviving. Setting it in writing before you start is the cheapest discipline mechanism — without it, sunk-cost fallacy keeps the spend running.

How to do this

Write the kill criterion in the engagement brief, e.g.: "We will stop buying from Source X if (a) more than 30% of acquired links are deindexed at 180-day check, OR (b) Search Console shows no measurable referring-domain velocity improvement after 9 months at current spend."

Three patterns that show up in every post-mortem of an overspent link-building engagement.

Critical Don't trust agency "DR 50+ guaranteed" packages without donor-list approval Agency packages that promise "DR 50+ guaranteed, 20 links/month" almost always fulfill against a rotating PBN cluster the agency owns or rents. The DR number is real (PBNs do show DR 50+); the survival is not. Lily Ray's 220-site dataset is heavily populated by sites that bought these packages.

How to do this

Demand donor-list approval before each month's placements. Audit 3-5 donors from the proposed list per month using this checklist's audit category. If the agency refuses donor-list approval, you're being fulfilled against a PBN cluster they don't want you auditing.
Important Don't buy from sellers who only contact you via cold outreach without a verifiable business Legitimate link-building operations have websites, LinkedIn profiles, and case studies you can verify. The cold-email-only seller who can't be Googled is, in 2026 operator experience, almost always running a churn-and-burn PBN operation with a 6-month horizon.
How to do this
Minimum verification before responding to a cold pitch:
The seller's name on LinkedIn with ≥6 months tenure at the company they claim to work for.
A company website with a real address, real client logos, and a verifiable phone number.
At least one independent reference (check r/SEO, AuthorityHacker forums, or ask for 2 current clients you can email).
Any failure = decline, regardless of how attractive the quoted DR / price looks.
Important Don't skip the audit because the pitch came from a "known" agency Reputation lag is real. Agencies that ran a clean operation in 2020 may be fulfilling against very different donor inventory in 2026 — especially the ones that scaled fast or got acquired. Treat every pitch as a fresh donor audit, no matter who's pitching.

How to do this

Run the 8-item audit category above on every monthly placement batch, including from agencies you've worked with for years. Brand familiarity is not a qualification signal — the donor list and its evolution over time is.

About the Author

Andrei

SEO and digital marketing professional with 13+ years of experience. Started as a website administrator in 2011, transitioned to SEO, and achieved top-3 rankings for competitive keywords. Co-founded a consulting firm specializing in marketing audits for companies in Ukraine and internationally. Built LinkGuard to solve the problem he experienced firsthand: most SEO teams purchase links but never monitor their survival. Based in Kyiv, Ukraine.

Backlink donor evaluation checklist: what to check before you pay

Andrei

Vocabulary

What success looks like

Pre-flight — get the 2026 mental model right

Audit — the five dimensions that predict survival

Pricing — what 2026 honest costs look like

Mechanics — how to acquire safely

What NOT to do

Tags

About the Author

Andrei

Vocabulary

What success looks like

Tags

About the Author

Andrei

Related Articles

Quarterly backlink audit checklist for agencies: 40 items for 2026

On-page SEO optimization checklist: 35 items for the 2026 audit

Site migration SEO checklist: 37 items for surviving a 2026 domain move