A backlink audit is a systematic review of all inbound links pointing to your site, identifying toxic links that risk penalties, lost links that need recovery, and opportunities to strengthen your profile. For Canadian businesses, regular audits protect against algorithm updates and safeguard local visibility in competitive markets like Toronto and Vancouver.
Start by pulling backlink data from at least three sources. Google Search Console gives you what Google actually sees but updates slowly and caps sample size. Ahrefs and Semrush crawl the web independently and often catch links GSC misses, especially newer or less-crawled domains. Majestic adds historical context through its Fresh and Historic indices. Export all four datasets as CSV files, then merge them in a spreadsheet by destination URL and referring domain. De-duplicate rows but keep a source column so you know which tool reported each link.
This multi-source approach matters because toxic link builders frequently use obscure or geo-targeted networks that major tools index at different rates. A PBN domain might appear in Ahrefs weeks before GSC picks it up. Canadian sites should also check for .ca-specific directories and regional blog networks — some Quebec link schemes fly under the radar of US-centric tools. Once merged, you typically see twenty to forty percent more unique referring domains than any single tool reports alone.
Sort your inventory into four buckets: safe, review, disavow, and lost. Safe links come from editorial placements on sites with real traffic, diverse outbound link profiles, and content related to your niche. Review links exhibit warning signs but need human judgment — for example, a domain with thin content but legitimate business registration, or a guest post on a site that also hosts some spammy articles. Disavow candidates include domains with no organic keywords, footer-wide sitelinks, exact-match anchor text from irrelevant foreign languages, and networks where dozens of domains share the same IP block and registrar. Lost links are URLs that once pointed to you but now return 404 or redirect elsewhere; these represent recovery opportunities rather than risks.
Use conditional formatting in your sheet to flag domains below certain thresholds — Domain Authority under fifteen, Trust Flow under ten, zero estimated monthly traffic. Canadian auditors should add a column for TLD and language, then filter for .ru, .pl, .cn domains with anchor text in Cyrillic or Mandarin unless you operate in those markets. These patterns reveal automated link-building campaigns. Don't auto-disavow based solely on metrics; a low-DA domain can still be a legitimate local news site or industry blog.
Export an anchor text report from your primary tool and calculate the percentage of exact-match commercial anchors versus branded, naked URLs, and generic phrases. A natural profile skews heavily toward your brand name and URL, with commercial keywords appearing in single-digit percentages. If twenty percent or more of your anchors are exact-match targets like "Ottawa SEO services" or "Toronto plumber," you likely have legacy paid links or scraped content issues.
Group anchors into categories: branded, partial-match, exact commercial, generic (click here, read more), naked URL, and image alt text. Canadian bilingual sites should separate English and French anchors to spot keyword-stuffing in one language. For each high-risk anchor, trace back to the referring pages and check whether those links belong in your disavow file. Sometimes a single low-quality directory submitted your site under ten different keyword variations — that entire domain goes on the disavow list. Conversely, if a legitimate publication happened to use exact-match anchor once, that stays. Context always beats the ratio alone.
Open a random sample of fifty referring pages in your browser — not just the domains, the actual pages hosting your link. Look for signs of real editorial intent: does the content discuss a topic where your link adds value, or is your URL dumped in a footer alongside two hundred other unrelated sites? Check the page's own outbound link count; anything over one hundred links per page dilutes value and often signals a link farm. View the page source to see if your link carries a nofollow or UGC attribute, which passes no equity but also poses no penalty risk.
For Canadian sites, manually inspect local business directories to confirm they're legitimate chambers of commerce or industry associations rather than auto-generated Yelp clones. A page listing "plumbers in Ottawa" with three hundred identical entries scraped from public records adds no value. Compare the publication date of the referring content to the date your link appeared in tools; if a 2018 article suddenly shows your link in 2024 data, the page was likely hacked or the link injected via malware. Flag those domains for disavow and consider notifying the webmaster.
Create a plain text file with one URL or domain per line. Use the domain-level directive (domain:example.com) when the entire site is toxic; use page-level URLs only when specific pages are problematic but the rest of the domain is clean. Prefix each entry with a comment line explaining the reason (# link farm network, # hacked foreign site, # exact-match anchor spam) so you or a future auditor understands the decision months later.
Before uploading to Google Search Console, cross-reference your disavow list against your safe bucket to catch accidental inclusions — disavowing a legitimate media mention can't be undone instantly. Submit the file under your verified property in GSC's Disavow Tool. Google processes disavows during the next crawl of each domain, which can take weeks for obscure sites. Track the submission date in your audit log. Re-audit quarterly or after any manual action notice, appending new toxic domains to the file rather than replacing it. Canadian businesses facing CRA or legal compliance audits should store a dated copy of each disavow file as evidence of proactive spam management.
Filter your link inventory for HTTP 404 responses or URLs that no longer resolve. Export this subset and check whether your own site changed — maybe you deleted a resource page or renamed a product, and incoming links now hit dead ends. Set up 301 redirects from the old URLs to relevant current pages to recapture that equity. If the issue is on the referring site (they moved their article or took down a blog post), use the Wayback Machine to find the archived page, then contact the site's webmaster with the old URL and ask them to reinstate or update the link to your current page.
Prioritize recovery by the authority of the linking domain and relevance of the original context. A lost link from a university research page or a national news outlet justifies significant outreach effort; a broken link from a five-year-old personal blog does not. Canadian sites often lose links when .ca domains expire and get parked — if you see a valuable .ca referrer now showing a domain-for-sale page, check CIRA WHOIS to see if the domain recently changed hands. Sometimes you can contact the previous owner directly to retrieve archived content or negotiate a redirect.
Maintain a master audit log in a shared spreadsheet with columns for referring domain, discovery date, classification (safe/review/disavow/lost), action taken, and auditor initials. This log becomes your institutional memory, preventing you from re-evaluating the same five hundred domains every quarter. When a new team member or external consultant runs the next audit, they can filter for domains already reviewed and focus on net-new links.
Include a notes column for edge cases: a domain you decided not to disavow despite low metrics because the webmaster is a known industry contact, or a spammy-looking .ca site that's actually a legitimate Quebec startup with poor on-page SEO. Canadian agencies managing multiple clients should add a client identifier column so you can reuse safe-domain lists across accounts in the same niche. Update the log immediately after each audit action — submitting a disavow file, redirecting a broken URL, or sending an outreach email for link recovery — so the status reflects reality.
Quarterly audits suit most sites, catching new toxic links before they accumulate. Monthly checks make sense if you're actively building links or recently recovered from a manual penalty. After a major Google algorithm update, run an immediate spot-check on your top hundred referring domains to confirm none were devalued. Canadian sites in competitive local niches like real estate or legal should audit more frequently during peak link-building seasons.
Automated scoring helps prioritize, but final disavow decisions need human review. Tools flag spam signals, but a low metric score might reflect a new legitimate site or a regional publication with minimal online presence. Manually verify at least the top fifty highest-risk domains and any .ca or bilingual referring sites to avoid disavowing valuable Canadian backlinks. Automation works for obvious spam patterns like Cyrillic anchor text on your English site.
Domain-level (domain:example.com) tells Google to ignore all pages on that domain, appropriate when the entire site is a link farm or PBN. Page-level ( disavows only that URL, useful when a single hacked or spammy page exists on an otherwise legitimate news site or blog. Use domain-level by default for efficiency unless you have reason to preserve some links from that domain.
No. Nofollow, sponsored, and UGC attributes already signal to Google that the link shouldn't pass equity, so they carry no penalty risk. Including them in your disavow file wastes lines and can obscure actual toxic links. Focus your disavow effort exclusively on followed links from low-quality or spammy sources. You can ignore nofollow links entirely during the audit classification step.
Evaluate them by the same quality criteria: does the site have real traffic, topical relevance, and editorial intent? A legitimate Quebec news site linking to your Ottawa office location is valuable even if the article is in French, because it signals local authority. Disavow only if the French site is a spun-content directory or irrelevant link farm. Bilingual anchor text from credible Canadian sources often helps rather than harms.
Compile them into a domain-level disavow file and submit it immediately, then document the attack timeline in case you need to file a reconsideration request. Google's algorithms usually identify and discount these patterns automatically, but a disavow file provides explicit protection. Monitor your rankings and Search Console for manual action notices over the next thirty days. If you see a sudden influx of new toxic links, update and resubmit the disavow file monthly until the attack stops.