The backlink-disavow conversation has swung hard in the last three years.
2018: disavow everything spammy. Google's manual actions were common and every bad link was a liability.
2022: mostly stop disavowing. Google's algorithm improved at ignoring spam automatically. Over-aggressive disavow hurt more sites than it helped.
2026: disavow surgically. Most spam still gets ignored, but some patterns still trigger problems — especially concentrated PBN clusters, coordinated anchor-text floods, and links from domains actively penalized by Google.
The right mental model is: don't disavow broadly, but know which links to monitor and which to pull the trigger on if the trend goes bad.
What the Backlink Toxicity Scorer does
You paste a backlink CSV (from Ahrefs "Referring pages," Semrush Backlink Audit, or GSC Links). Each link gets scored 0-100 against nine heuristic signals:
- Toxic TLD (
.tk,.ml,.loan,.click, etc. — historically spam-heavy) - Spammy subdomain pattern (random numeric,
blog42.info-style) - Very low Domain Rating (under 10)
- Zero organic traffic + low DR
- URL in a comment / profile / forum path (easy to manipulate)
- Affiliate / tracking parameter patterns
- Spammy anchor keywords (
casino,payday,viagra, etc.) - Exact-match money-term anchor with very short length
- HTTP (not HTTPS)
Plus a cluster-level flag: if one host contributes many toxic links (5+ total, 3+ toxic), everything from that host gets a PBN-cluster score bump.
The output:
- Per-link score (0-100) with top 3 flags
- Three buckets: toxic (disavow candidates), watchlist, clean
- Domain-level disavow file (download-ready for GSC)
- AI triage prompt for contextual decision-making
When disavow is the right move
You have a manual action. GSC is showing "Unnatural links to your site" manual action. This is the unambiguous case — disavow the problematic links and file a reconsideration request.
You ran a paid-link strategy in the past. If ever bought links from SEO services circa 2015-2020 era, those domains are often still in your profile. Disavow them before Google's algorithm catches up.
Sudden aggressive influx from a single cluster. If this month's audit shows 200 new links from a single PBN network you didn't build, disavow the domain. Competitor negative-SEO attacks are rare but real.
When disavow is the wrong move
Passively-accumulated spam. Every site with any public presence gets random spam links — comment spam, low-quality directory scrapers, reposting sites. Google auto-discounts these. Disavowing them won't help and may cause overreach.
A site you're unsure about. Google's public guidance is explicit: if you can't point to a reason the link shouldn't count, don't disavow. The default is to trust the algorithm's filtering.
Links that Ahrefs flagged but Semrush didn't (or vice versa). Third-party toxicity scores disagree all the time. When they disagree, the link is ambiguous — don't disavow ambiguous links.
The monthly maintenance cadence
- Export backlink data monthly (Ahrefs or Semrush; GSC's export is smaller but free).
- Run the audit. Note the profile-health score.
- If the score drops materially month-over-month, investigate the new toxic concentration.
- Only add to the disavow file if a new concentrated cluster appears with 20+ links from a single domain or network.
- Re-upload disavow file only when you've meaningfully changed it.
The anchor-text pattern check
The tool flags "exact-match money-term anchors" specifically because over-optimized anchor text is one of the only remaining signals Google actively penalizes. If 60% of your inbound anchors say "best roofer twin falls" you look like you paid for them, even if they came from legitimate sites. Fix: outreach to those sites to diversify anchor text, or dilute by earning more branded anchor links.
The PBN cluster detection
Private Blog Networks (PBNs) are the dominant category Google still penalizes. Signatures: multiple domains from a single host, similar subdomain patterns, shared IP addresses, anchor text that matches a campaign, publishing dates that cluster. The tool detects the concentration signal (5+ links from one host where 3+ are toxic) and flags the cluster.
When a PBN cluster appears in your profile and you didn't create it, two options:
- Disavow the domain (kills all links from it).
- Do nothing and trust Google's filter.
Option 1 is safer if the cluster is clearly manipulative. Option 2 is correct if the domain is borderline-legitimate (a real blog that happens to have weak signals).
Related reading
- Anchor Text Manipulation Detector — specifically for anchor-text over-optimization
- Anchor Text Entropy Scanner — diversity scoring
- Backlink Parser — the upstream data-extraction tool
- Broken Link Decay Scanner — tracks the outbound-link half of the problem
Fact-check notes and sources
- Google Search Central — Disavow Links Tool: support.google.com/webmasters/answer/2648487
- John Mueller public statements (2023-2025) repeatedly emphasize that most spam is auto-ignored and disavow should be surgical
- PBN detection patterns synthesized from Majestic, Ahrefs, and Moz published spam research
This post is informational, not SEO-consulting advice. Mentions of Ahrefs, Semrush, Moz, Google Search Console, and Majestic are nominative fair use. No affiliation is implied.