Content Site Due Diligence Checklist
A complete 8-area due diligence framework for evaluating a content site or niche site before acquisition. Use this alongside the general website due diligence guide and the website acquisition checklist. Content site acquisitions require particular attention to traffic source concentration, Google algorithm exposure, backlink profile quality, and affiliate account transferability, risks that general checklists underweight.
1.Traffic verification and organic search health
- Request read-only access to Google Analytics 4, verify monthly organic sessions, traffic sources, and geographic breakdown for the trailing 24 months
- Request read-only access to Google Search Console, check total clicks, impressions, average position, and CTR for the past 16 months; look for any sudden drops
- Cross-reference GA4 organic traffic against Ahrefs or Semrush estimated traffic, a divergence of more than 30% in either direction warrants explanation
- Review the traffic trend month-by-month: is traffic growing, flat, or declining? A site listed immediately after a 6-month decline is a red flag
- Verify traffic is primarily organic (not paid), a site dependent on Facebook Ads or Google Ads for revenue has much higher concentration risk
- Check Google Search Console for manual actions, navigate to Security & Manual Actions > Manual Actions; any penalty here is a serious problem requiring investigation
- Look for sudden traffic drops in the GA4 data that coincide with known Google Core Update dates (March 2024, August 2024), confirm recovery or ongoing decline
- Verify geographic distribution, confirm traffic comes primarily from Tier 1 countries (US, UK, CA, AU, NZ) if the site monetizes via display ads; non-Tier 1 traffic earns dramatically lower RPM
2.Revenue verification and SDE calculation
- Request read-only access to all monetization platforms: Google AdSense, Mediavine, Raptive, AdThrive, Amazon Associates, affiliate dashboards (ShareASale, Impact, CJ Affiliate), and any direct sponsor deal invoices
- Cross-reference each revenue source against the seller's stated SDE, verify the monthly figures match platform exports for the trailing 12 months
- Request bank statements for the past 12 months and reconcile deposits against platform payouts (accounting for payment delays and thresholds)
- Verify add-backs claimed by the seller, non-recurring expenses, personal expenses, and one-time costs that inflate SDE should be documented and credible
- Check Amazon Associates account status, Amazon Associates accounts are non-transferable; the buyer must apply for a new account, and revenue may drop to zero during the transition period
- Review affiliate program terms for any non-transfer clauses, some affiliate networks restrict account transfers; verify each program's policy before closing
- Calculate trailing 12-month SDE independently from platform data: sum all revenue across monetization sources, subtract all operating costs (hosting, tools, freelancer payments, plugin subscriptions), add back any personal expenses or one-time costs
- Check for seasonal patterns, request month-by-month data for 24 months and identify whether TTM revenue includes an abnormally strong seasonal period
3.SEO and backlink profile audit
- Run the domain through Ahrefs Site Explorer or Semrush, review Domain Rating (DR) or Domain Authority (DA), total referring domains, and the referring domain trend over 24 months
- Check for referring domain decline, a site losing referring domains month over month is losing link equity even if traffic appears stable
- Review the top 50 referring domains by DR, flag any links from private blog networks (PBNs), link farms, or low-quality directories
- Check the anchor text distribution, a site with more than 25% of backlinks using exact-match keyword anchors is at risk of a Google link penalty
- Verify no disavow file hides toxic links, request the disavow.txt file from Google Search Console; an unusually long disavow list indicates a history of problematic link building
- Run a crawl of the site using Screaming Frog (free up to 500 URLs), check for broken internal links, redirect chains, missing title tags, duplicate H1s, and orphaned pages
- Check robots.txt and sitemap.xml, confirm no valuable pages are accidentally blocked from indexing and the sitemap reflects the actual indexed content
- Verify Core Web Vitals in Google Search Console under Experience > Page Experience, confirm LCP, CLS, and INP are all in the 'Good' range across desktop and mobile
4.Content quality and editorial audit
- Spot-check 20-30 articles across the main content categories, evaluate whether the content demonstrates genuine expertise (E-E-A-T) or reads as thin, generic filler
- Identify the percentage of content that receives zero organic traffic, pull a URL-level traffic report from Google Search Console and count pages with fewer than 10 clicks in 90 days; more than 40% low-traffic content is a content quality risk
- Check for AI-generated content markers, review writing style consistency, use of hedging phrases ('It is important to note that'), and generic sentence structures; check a sample in a tool like Originality.ai if concerned
- Verify author profiles and bylines, content with no named authors or authors without verifiable credentials is at higher EEAT risk post-HCU
- Check content freshness, review publish dates and last-updated dates for the top 50 traffic-driving articles; outdated content (2+ years without update in fast-moving niches) represents a maintenance burden
- Verify image licensing, check whether images are from licensed stock photo providers, original photography, or potentially copyright-violating scrapes; stock image licenses are typically non-transferable and must be repurchased
- Assess content publishing cadence, request the number of new articles published per month over the trailing 12 months to understand how much operator time maintaining content requires
- Review monetization placement and ad density, confirm ad placement complies with Google Better Ads Standards; excessive ads can trigger penalties and reduce RPM after a new owner triggers a fresh page quality review
5.Affiliate and monetization due diligence
- List every active affiliate program and the revenue attributed to each, calculate the concentration risk: if more than 50% of revenue comes from one affiliate program, that program is a critical platform dependency
- For Amazon Associates: verify the commission rate history by product category and check for recent Amazon commission cuts that may not yet be reflected in TTM revenue
- For display advertising: verify which ad network is active and whether the site meets the traffic threshold for the claimed network, Mediavine requires 50,000 monthly sessions; Raptive (AdThrive) requires 100,000 monthly pageviews
- Request the RPM (Revenue Per Mille) breakdown by month, confirm the claimed RPM is achievable with the site's traffic profile and geographic distribution; an RPM above $20 for a broad-audience content site requires explanation
- Check for direct advertising deals, if the seller claims revenue from sponsored posts or direct newsletter placements, request the advertiser contracts and verify the relationships will transfer to a new owner
- Verify whether any revenue comes from recurring affiliate deals or subscriptions that depend on the seller's personal relationships or accounts that cannot be transferred
- For affiliate link heavy sites: use a link scanner (e.g., Broken Link Checker) to verify that affiliate tracking links are not broken or redirected to discontinued programs
6.Technical and hosting due diligence
- Identify the hosting provider, plan type, and monthly cost, confirm the hosting cost is included in the SDE calculation and not understated
- Verify the CMS and any paid plugins or themes, WordPress sites commonly have $50-$300/year in paid plugin subscriptions (Kadence, GeneratePress, WP Rocket, etc.); confirm all costs are accounted for
- Check hosting infrastructure for shared hosting tenancy with other sites, a seller who hosts multiple sites on a shared server may have IP reputation that affects the acquired site's mail delivery or SEO
- Run a security scan using a free tool like Sucuri SiteCheck, verify no malware, blacklist status, or spam injection has occurred
- Confirm the domain name is registered separately from hosting and can be transferred independently, request the EPP/auth code confirmation before releasing escrow
- Verify SSL certificate installation and expiry date, an expired SSL creates browser warnings that can tank traffic; confirm auto-renewal is set up
- Check for website speed using Google PageSpeed Insights, a mobile score below 50 on a content site can suppress organic rankings; poor scores inherited at acquisition require immediate investment to fix
- Request a full list of all third-party tools and services (CDN, email capture, A/B testing, analytics) with their costs, confirm all accounts can be transferred or have clear migration paths
7.Legal and ownership verification
- Verify domain ownership via WHOIS, confirm the seller is the registered owner and that the domain is not in a registrar lock or expiring within 6 months
- Confirm all content is original or properly licensed, request confirmation that no scraped, AI-generated, or plagiarized content is present; check a sample using Copyscape
- Verify social media accounts included in the sale, confirm the seller owns and controls all accounts listed in the asset schedule, including their follower counts
- Check for any outstanding copyright infringement notices, request the DMCA complaint history; repeat DMCA strikes can result in Google deindexing specific URLs
- Confirm contractor and freelance content creator agreements, verify all paid content contributors signed 'work for hire' agreements assigning copyright to the business; if not, the content may legally belong to the freelancer
- Review Terms of Service and Privacy Policy, confirm they are current, compliant with GDPR and CCPA if the site collects email addresses or personal data, and can be updated by a new owner
- Verify the site is not subject to any active litigation, trademark disputes, or FTC disclosure violations, non-disclosure of affiliate relationships without proper 'sponsored' or 'affiliate' labels can result in FTC fines transferable to a new owner
- Confirm there are no platform-specific terms of service violations, verify the site complies with Google AdSense policies, Amazon Associates operating agreement, and any active affiliate program rules
8.Transfer planning and handover checklist
- Obtain the EPP/auth code for the domain transfer before releasing escrow funds, do not allow escrow release until domain transfer is initiated
- Confirm full hosting account transfer or migration plan, if the site is on a shared hosting account with the seller's other sites, migration to a new hosting account is required before transfer
- Verify Google Analytics 4 property transfer, the seller must add the buyer as an admin before the GA4 property can be transferred; confirm the historic data will be retained
- Transfer Google Search Console, the seller must add the buyer as a verified owner; confirm all verification methods (DNS, HTML file, or Search Console) will work on the buyer's account
- Transfer all affiliate accounts or create a migration plan, request written confirmation from each affiliate program that the buyer has applied and been approved, or that a transfer process is possible
- List all WordPress plugins, themes, and tool licenses that require renewal, confirm which licenses are site-specific (transfer with the domain) and which are account-specific (buyer must purchase new licenses)
- Negotiate a transition support period of 30-90 days, request weekly availability and document the scope (SEO questions, hosting issues, affiliate introductions, advertiser relationships)
- Use escrow (Escrow.com) and release funds only after verifying access to all critical systems: domain registrar, hosting, GA4, Search Console, and all major revenue platforms
Key content site due diligence benchmarks
Organic traffic share
Good: Over 70% from organic search
Caution: 50-70% organic
Red flag: Under 50% organic or traffic declining
Referring domain trend
Good: Growing or stable 24 months
Caution: Flat 12 months
Red flag: Declining any 6-month period
Amazon Associates revenue share
Good: Under 40% of total revenue
Caution: 40-60%
Red flag: Over 60%, non-transferable risk
Display ad RPM (Mediavine/Raptive)
Good: $20-$50 for general niche
Caution: $10-$20 or over $60
Red flag: Under $8 or unverified
Low-traffic content ratio
Good: Under 25% pages with no organic traffic
Caution: 25-40%
Red flag: Over 40%, content quality risk
Exact-match anchor text ratio
Good: Under 10% of backlinks
Caution: 10-25%
Red flag: Over 25%, Google penalty risk
Frequently asked questions
- What is the most important thing to verify when buying a content site?
- Traffic source and trend is the single most important thing to verify, and it's also the easiest to misrepresent. A seller can show you a Google Analytics screenshot with strong traffic numbers, but screenshots can be manipulated. Always request read-only GA4 access and cross-reference against two independent sources: Google Search Console (which shows keyword-level clicks directly from Google) and an Ahrefs or Semrush estimate of organic traffic. If all three sources align, the traffic is real. If they diverge significantly, investigate before proceeding. After traffic, verify that the site has not been penalized by Google: check Google Search Console for manual actions and look for traffic drops that coincide with confirmed Core Update dates.
- Do I need to be technical to do content site due diligence?
- Mostly no. Traffic verification, revenue validation, affiliate account review, backlink audit, and legal/ownership checks can all be completed without technical skills, you need access to the right platforms and a methodical approach. The technical areas (hosting infrastructure, CMS setup, plugin costs, security scan) require only basic familiarity with web hosting concepts, not coding skills. For content site acquisitions, Screaming Frog (free for up to 500 URLs) handles the technical crawl automatically. The main tool investment is an Ahrefs or Semrush subscription for backlink and keyword analysis, budgeting $99-$199/month for the due diligence period is standard. The most common mistake non-technical buyers make is skipping the backlink audit, which is where the most expensive hidden problems are found.
- How long does content site due diligence take?
- For a small content site ($5,000-$50,000 acquisition price), plan for 1-2 weeks of active due diligence after the seller grants access. Traffic and GSC verification (1-2 days), revenue validation against all affiliate and ad platforms (2-3 days), backlink audit (1-2 days), content quality spot-check (1-2 days), technical and hosting review (1 day), and legal/ownership verification (1-2 days). For deals above $100,000, budget 2-4 weeks and consider hiring a content site specialist for an independent review ($300-$800). The most time-consuming step is typically revenue verification when a site monetizes via multiple channels, tracking down read-only access to five or six different affiliate platforms takes time.
- What content site due diligence red flags should cause me to walk away?
- Walk away if you find: (1) Traffic that cannot be reconciled between GA4, Google Search Console, and third-party estimates, unexplained divergence above 30% typically indicates traffic manipulation or bot traffic. (2) A manual action in Google Search Console, manual penalties are difficult to recover from and may require significant content overhaul before Google lifts them. (3) More than 25% of backlinks using exact-match keyword anchors, this pattern indicates past black-hat link building and creates a ticking time bomb for a Google link penalty. (4) A site listed within 3-6 months of a major traffic drop coinciding with a Google Core Update, with no recovery, this is a common pattern of sellers offloading HCU-penalized sites. (5) Amazon Associates revenue that represents more than 60% of total revenue, the account cannot transfer and revenue may fall to zero during the transition period. Any one of these, confirmed, is sufficient justification to walk away or demand a significant price reduction.
Related guides
- Affiliate Website Due Diligence Checklist
- Website Due Diligence Guide
- Website Acquisition Checklist
- How to Buy a Content Site
- Content Site Valuation Multiples
- How to Sell a Content Site
- How to Verify Website Revenue
- SaaS Due Diligence Checklist
- LOI Guide for Website Acquisitions
- Website APA Guide
- Website Escrow Guide
- Website Transfer Guide
- SEO Red Flags FAQ
- How to Grow an Acquired Content Site
Ready to browse content sites for sale?
Apply this checklist to live listings, browse content sites with verified revenue, direct from owners, no broker fees.