Buying a website without doing due diligence is like buying a used car without looking under the hood. The seller knows exactly what's wrong with it. You don't. This checklist makes sure you find out before you hand over the money.
Let's be real — most people who get burned buying websites online got burned because they skipped due diligence. They saw the revenue numbers, got excited, and wired the money. Then the traffic dropped a month later, or they discovered the income came from one source that vanished overnight, or the backlink profile was full of spam.
The good news? Due diligence isn't complicated. You don't need to be a tech genius or hire an expensive consultant. You just need to know what to look for. This checklist covers everything — and it's written in plain English, not MBA jargon.
1. Traffic Verification
Traffic is the lifeblood of any content website. It's also the easiest thing for a dishonest seller to fake. Always verify independently — never just trust a screenshot.
- Request read-only Google Analytics access. Screenshots can be faked. A read-only GA link cannot. If the seller refuses, walk away.
- Check 12 months of traffic data, not just the last 30 days. Look for consistent trends vs sudden spikes. A spike right before listing is a red flag.
- Verify traffic sources. What % comes from organic search vs direct vs social? Heavy reliance on one source = higher risk.
- Cross-check with third-party tools. Run the domain through Ahrefs, Semrush, or SimilarWeb. They won't match GA exactly but should be in the ballpark.
- Check Google Search Console. Ask for read-only access. Look at which keywords are actually driving traffic and whether impressions match clicks.
- Look for traffic after recent Google updates. Did traffic drop after March 2025 or June 2025 core updates? Ask specifically.
- Check bounce rate and session duration. Very high bounce rate (90%+) can indicate low-quality traffic or bot traffic.
A seller who only provides screenshots and refuses to give read-only analytics access is hiding something. No exceptions. Real sellers have nothing to hide and will provide access within 24 hours.
2. Revenue & Monetization Verification
Revenue is even easier to fake than traffic, so this section is critical. A screenshot of an AdSense dashboard means nothing. You need to verify the actual numbers through official channels.
- Get a screen-share walkthrough of the monetization platform. AdSense, Mediavine, affiliate dashboards — watch the seller navigate it live if possible.
- Request 12 months of payment history. PayPal statements, bank transfers, or official platform exports. Look for consistent monthly payments.
- Understand every income stream. List every single way the site makes money. AdSense, affiliate links, sponsored posts, digital products, email list monetization — get the breakdown.
- Calculate how many income streams are single points of failure. If 90% of revenue comes from one affiliate program, what happens if that program closes or cuts commissions?
- Ask about revenue seasonality. Some sites make 80% of their money in Q4. Make sure the "average monthly revenue" figure isn't inflated by seasonal peaks.
- Calculate the real multiple you're paying. If the site earns $500/month and the asking price is $25,000, that's a 50x multiple — on the high end. Know what you're paying for.
- Verify affiliate account transferability. Some affiliate programs (Amazon Associates especially) can't always be easily transferred. Check the terms before buying.
Calculate the "net profit," not just revenue. Subtract hosting, tools, content costs, VA costs, and any paid traffic before comparing to the asking price. Some sites look profitable until you see the actual expenses.
3. SEO & Backlink Profile
The SEO health of a website is what protects the traffic long-term. A site sitting on a bed of spammy backlinks could get hit by a Google penalty the day after you buy it. Always check.
- Run the domain through Ahrefs or Semrush. Look at Domain Rating (DR), total backlinks, and referring domains. Make sure the numbers look organic, not artificially inflated.
- Check the backlink profile for spam. Filter backlinks by low DR and look for patterns — links from casino sites, foreign-language sites, or link farms are red flags.
- Check the domain history using Wayback Machine. Was this domain previously used for something spammy or unrelated? Old spam history can carry over.
- Look at anchor text distribution. Too many exact-match anchor text links is a sign of manipulative link building that could get penalized.
- Check for any Google manual actions. In Search Console, look under Security & Manual Actions. Any penalties here must be resolved before the site can fully recover.
- Check the content quality. Is the content original and genuinely useful, or is it thin AI slop churned out at scale? Google's 2024–2025 updates targeted low-quality content aggressively.
- Verify keyword rankings independently. Use Ahrefs or Semrush to see what the site actually ranks for and verify those keywords have real search volume.
4. Technical Health
Technical issues can kill traffic and user experience fast. The good news is they're usually fixable — but you want to know about them before buying so you can factor in the cost of fixing them.
- Run a site speed test. Use Google PageSpeed Insights or GTmetrix. Slow sites rank lower and convert worse. Poor Core Web Vitals = SEO problem.
- Check mobile responsiveness. Over 60% of search traffic is mobile. If the site looks broken on mobile, you've got work to do.
- Verify HTTPS is active. No SSL certificate is a dealbreaker in 2025. Google flags non-HTTPS sites and users won't trust them.
- Run a crawl with Screaming Frog or Sitebulb. Look for broken links, duplicate content, missing meta tags, redirect chains, and crawl errors.
- Check uptime history. Use UptimeRobot historical data or ask the seller. Consistent downtime = revenue loss and SEO damage.
- Understand the tech stack. WordPress is easiest to transfer. Custom-built sites or obscure CMSs can make the handover complicated and expensive.
- Check what plugins or tools are paid subscriptions. Some sites run on $200/month in tools that the seller has been absorbing. These costs transfer to you.
Here are the free tools you should have bookmarked for technical due diligence:
| Tool | What It Checks | Cost |
|---|---|---|
| Google PageSpeed Insights | Site speed, Core Web Vitals | FREE |
| Ahrefs Webmaster Tools | Backlinks, keywords, site health | FREE (with verification) |
| Screaming Frog SEO Spider | Site crawl, broken links, redirects | FREE (up to 500 URLs) |
| Wayback Machine | Domain history | FREE |
| WHOIS Lookup | Domain ownership, registration history | FREE |
| Semrush | Full SEO analysis, competitor data | PAID (free trial available) |
| SimilarWeb | Traffic estimates, traffic sources | PAID (limited free version) |
5. Legal & Ownership Checks
This is the boring part that people skip and then regret. Ownership disputes, content licensing issues, and trademark problems can completely derail a website acquisition. Take 30 minutes to check these.
- Verify domain ownership via WHOIS. The seller's name should match the registrant. If it doesn't, ask for a clear explanation before proceeding.
- Check the domain age and history. Older domains with clean history are more valuable and less risky. Use WHOIS and Wayback Machine together.
- Confirm all content is original or properly licensed. Ask specifically: is any content scraped, PLR, or AI-generated at scale? Google now penalizes mass-produced low-quality content heavily.
- Check for trademark issues. Is the domain name or brand potentially infringing on a registered trademark? A quick USPTO or Google trademark search can flag this.
- Confirm what exactly is being transferred. Domain, hosting account, all social media accounts, email list, analytics accounts, affiliate accounts — get the full list in writing.
- Use an escrow service for payment. Never wire money directly. Use Escrow.com or the marketplace's built-in escrow. The seller releases the site assets, then you release the funds.
- Get a written purchase agreement. Even for small deals. It doesn't need to be fancy — a simple document listing what's being sold, for how much, and the transfer timeline protects both sides.
Using Escrow.com or a marketplace's built-in payment protection is non-negotiable. Scammers target website buyers specifically because wire transfers are hard to reverse. A legitimate seller will always agree to escrow — if they won't, it's a scam.
6. Evaluating the Seller
The seller is part of the due diligence. A shady seller with a great-looking site is still a risk. A trustworthy seller with a transparent history makes the whole process smoother and safer.
- Ask why they're selling. Common legit reasons: moving on to a new project, raising capital, lifestyle change, portfolio consolidation. Vague or defensive answers = red flag.
- Check their listing history on the marketplace. Have they sold sites before successfully? Any negative feedback or disputes?
- Look them up independently. Google their name and the website name together. Look for any scam reports, forum complaints, or negative mentions.
- Ask about their transition support offer. Will they spend 2–4 weeks helping you understand the site after the sale? Good sellers do this. Bad sellers disappear.
- Hop on a call with them. A 20-minute video call tells you more than 50 messages. Are they knowledgeable about their own site? Can they answer detailed questions confidently?
The Big Red Flags — Walk Away If You See These
Instant Deal Breakers
- Seller refuses to provide read-only analytics access
- Revenue spikes suspiciously in the last 30–60 days before listing
- Traffic comes primarily from one viral post or one social media account (not owned by the seller)
- Affiliate accounts that cannot be transferred to a new owner
- Seller insists on direct wire transfer instead of escrow
- Domain has a history of being penalized or used for spam
- Site has a Google manual action currently active in Search Console
- Seller can't explain why traffic dropped after a recent Google update
- Content appears to be AI-generated at scale with no editorial oversight
- Asking price implies a multiple above 50x without exceptional justification
Where to Find Websites to Buy (That Are Already Vetted)
The platform you use matters a lot for due diligence, because the best marketplaces do some of the vetting work for you. Here's where to look:
Motion Invest is one of the cleanest options for content sites under $100K. They vet every listing, verify the revenue, and their team actually knows content websites. Listings are curated — no junk. This is where to start if you're buying your first site.
Flippa has the largest selection by far, from tiny $500 sites all the way to million-dollar businesses. The tradeoff is more noise — you need to apply this due diligence checklist rigorously on Flippa because listing quality varies wildly. But the deal volume and variety are unmatched.
Empire Flippers is the premium tier — they only list vetted, established businesses and have a rigorous screening process. Expect higher prices and higher quality.
Ready to Find a Site to Buy?
Browse vetted content websites for sale right now — already screened, revenue verified, ready for a new owner.
The Quick Summary
Due diligence sounds intimidating but it's really just six areas to check: traffic, revenue, SEO/backlinks, technical health, legal/ownership, and the seller themselves. Go through each category systematically, use the free tools listed above, and don't let excitement rush you into skipping steps.
The buyers who get burned are the ones who see good numbers, get emotional about the opportunity, and skip verification. The buyers who build profitable website portfolios are the ones who treat every purchase like an investment — because that's exactly what it is.
Take your time. Ask the hard questions. Use escrow. And if anything feels off, trust that feeling and walk away. There will always be another website for sale.