How to Spot a PBN Domain in Under Five Minutes
How to spot a PBN domain before you bid: the archive, backlink and WHOIS tells a 20-year investor checks, and when a network past is survivable.
Mark FultonSep 22, 12:00 AM UTC9 min read
To spot a PBN domain before you bid, look for a pattern across three free sources rather than a single bad metric. In the Wayback Machine, a network node shows a gap in ownership followed by an abrupt topic change, a generic template and thin posts stuffed with outbound links to unrelated commercial sites. In a backlink checker, it shows high authority with little or no traffic, links from a small cluster of look-alike sites, and anchor text that reads like a keyword list. In WHOIS history, the ownership changes line up with the topic switch. One tell is noise. Two or three pointing the same way is a burned name, and it takes under five minutes to find.
I’ve been buying expired names for over twenty years, and the PBN check is the one I wish someone had drilled into me earliest. Almost everything written about spotting private blog networks is written for a different reader: an SEO auditing the sites that link to their client, or a network builder shopping for fresh nodes. Neither is asking the investor’s question, which is narrower and more expensive to get wrong. I am not asking whether some site in my backlinks is a PBN. I am asking whether the name on this auction board used to be one, and whether that past is going to cost me when I try to sell it.
What is a PBN, and why does it poison a name?
A private blog network is a set of websites that exist mainly to link to other websites. The builder buys expired domains that already carry links and authority from their previous lives, puts thin content on each one, and uses them to point links at the sites they actually want to rank. The whole economics of the thing rests on expired inventory, which is why it lands on your desk. The same auctions and drop lists you shop are the ones network builders shop.
Google is not ambiguous about the practice. Its spam policies define link spam as creating links to or from a site primarily to manipulate search rankings, and they list low-value content created primarily to manipulate linking signals as one of the examples. More pointed still, when Google announced its December 2022 link spam update, it said its SpamBrain system can now detect both sites buying links and sites used for the purpose of passing outgoing links, and that credit passed by those unnatural links is lost. That second category is a PBN node described in one clause.
So a name that spent a few years as a node carries two kinds of damage. Its authority metrics are inflated by links that may already be neutralized, which means the number that made it look valuable is the number you can least trust. And its footprint is still out there: dozens of sister sites linking to it, some of them still live, all of them saying something about what the name was used for.
What are the archive tells?
Start in the Wayback Machine, because the archive shows you motive and it costs nothing. I have a full routine for reading a domain’s history in the Wayback Machine; for the PBN screen you are hunting for three specific shapes.
- The gap and the pivot. A real business runs for years, then the snapshots stop or show a registrar parking page. A few months later the name comes back as something unrecognizable. A former dental practice becomes a general blog about travel, finance and home improvement at once. The topic change after a gap in ownership is the single strongest archive tell, because it means someone bought the name for what it had accumulated, not for what it said.
- The template farm. Network nodes are built fast and in bulk, so they look alike: a stock WordPress theme, a handful of short posts with generic stock images, an author name with no other footprint, no contact details that lead anywhere. If the site looks like a demo of its own theme, treat that as a tell.
- The outbound-link explosion. Open three or four posts from the network era. A normal blog links out occasionally, and to sources. A node links out in almost every post, to commercial pages on unrelated sites, usually with a keyword phrase as the anchor. A sidebar or footer block of links to casinos, supplements, loans or essay services settles the question on its own.
What are the backlink tells?
The archive tells you what the name did. The link graph tells you whether it was part of something organized. Run the name through a backlink checker; my walkthrough on checking a domain’s backlinks before buying covers the tools. For the PBN read, four patterns matter.
- Authority with no traffic. A high third-party authority score and a traffic estimate near zero is the most common PBN signature there is. Real sites that earned their links usually earned some visitors along with them. On its own it proves nothing, because an expired name has no traffic by definition. Paired with an archive pivot, it is most of a case.
- A small, look-alike neighborhood. Open the referring domains. If a large share of the links come from sites with the same template, the same thin-post structure and the same kind of outbound links, you are looking at the network itself. Nodes link to each other, and they link to the money site.
- Anchor text that reads like a keyword list. Natural anchors are mostly the brand name, the bare URL and phrases like “this article.” Network anchors are commercial phrases, repeated, often in a language or niche the original site never touched.
- Links that arrived in bursts. A real site accumulates links unevenly over years. A node picks them up in a block around the time the network was built, then the growth stops dead when the network was abandoned.
What do WHOIS and hosting tell you?
This is the corroborating layer, not the deciding one. A registration data lookup through ICANN gives you the current registrar and key dates for free. Historical WHOIS services, where you have access to one, show the ownership changes over time. What you are looking for is alignment: a change of registrant, often to privacy protection, landing right where the archive shows the topic pivot. The name changed hands and changed purpose in the same month. That is not proof, since plenty of legitimate buyers use privacy protection, but it tightens the story the archive and the links are already telling.
Hosting footprints used to be the classic giveaway, when builders put every node on the same cheap server. Modern networks spread across hosts and sit behind CDNs precisely to hide that, so an absence of shared hosting clears nothing. If you do see the old pattern, treat it as a bonus confirmation, not a required check.
What does a burned name look like next to a clean one?
Here is the comparison I actually run in my head. The two names below are illustrative rather than real listings, built from the patterns you will meet on any expired auction board. Both show the same attractive authority score on the listing. Only one of them is worth the bid.
| Check | Name A: burned node | Name B: clean expired business |
|---|---|---|
| Archive, early years | A local bakery site with menus and opening hours. | A regional landscaping company with project galleries. |
| Archive, later years | A gap, then a generic lifestyle blog covering travel, crypto and home loans in one feed. | The same landscaping site, a few redesigns, then a registrar parking page when it lapsed. |
| Outbound links | Nearly every later post links out with a commercial keyword anchor to an unrelated shop. | Occasional links to suppliers and a local trade association. |
| Referring domains | A cluster of look-alike blogs with the same theme and the same kind of outbound links. | Local directories, a newspaper feature, a supplier’s partner page. |
| Anchor text | Repeated commercial phrases unrelated to baking. | Mostly the company name and the bare URL. |
| WHOIS | A switch to privacy protection that lands the month the blog appeared. | One long ownership run, then expiry. |
| Verdict | Pass, or bid as a bare string at hand-register money. The authority is the part you cannot trust. | Worth a real bid. The links match the story the archive tells. |
Notice that no single row decides it. A gap in the archive happens to honest names. Privacy protection is everywhere. What condemns Name A is that every row points the same direction, and every row points there for the same reason. That is what a pattern means, and it is why I never trust a one-metric “PBN score” from any tool.
What is the five-minute PBN check?
Condensed into the order I run it, on any expired name I am about to bid real money on:
- Minute one: the archive pivot. Sample the earliest year, the latest year and one year in between. Did the topic survive?
- Minute two: three posts from the late era. Count the outbound commercial links and read the anchors.
- Minute three: referring domains. Open the top ten. Do they look like real sites or like siblings?
- Minute four: anchors and growth. Brand-name anchors and slow growth, or keyword anchors in a burst?
- Minute five: WHOIS alignment. Does an ownership change sit on top of the pivot?
Score it simply. Zero or one tell is a normal expired name. Two tells is a discount. Three or more is a network past, and you now bid on the string alone as if the authority score did not exist. If the name is also carrying signs of a manual action, run the separate routine for checking whether a domain is penalized, because a PBN past and a penalty are related but not the same thing.
When is a PBN past survivable?
More often than the fear-driven guides suggest, as long as you know what you are buying. The question is not whether the name is clean. It is whether the thing you plan to sell depends on the part that is dirty.
- Resale of a strong string: usually survivable. A short, pronounceable, brandable name sells to an end user who is buying the word, not the link graph. Most buyers will never open a backlink checker. The network chapter lowers what you should pay; it rarely kills the flip, provided you priced it as a bare name.
- Resale to SEO buyers: rarely survivable. The only reason this buyer pays a premium is the authority, and the authority is exactly what the network history discredits. Anyone doing their own diligence will find what you found.
- Rebuilding a site to rank: assume zero. Treat every inherited link as worthless, and budget as if you were launching a new domain with a messy footprint attached. If that math still works, fine. Usually it does not.
- Any Safe Browsing flag or pharma-and-casino chapter: walk. Those histories leak into email deliverability, ad approvals and buyer trust in ways that outlast the links.
The broader rule sits inside my full routine for finding valuable expired domains: length, pattern and liquidity first, history second. There is no point auditing the past of a name you would not want even if its record were spotless.
The practical problem is volume. Expiring inventory closes on a schedule, and the names worth five minutes of archive work are buried among thousands that are not. That filtering is what PounceDomains does. It watches the Namecheap Market aftermarket around the clock, scores and enriches every name that matches your configs with comps, backlink data and appraisal context, and puts a short list in front of you while there is still time to run the check. The discovery is worth automating. The call on whether a name’s past is survivable should stay yours. Start your free account and let the scanning run while you do the reading.
Frequently asked questions
Is buying a PBN domain bad?
It depends entirely on what you are buying it for. If you plan to rank a site on the name's old link equity, a former PBN node is a liability: Google's spam policies define link spam as links created primarily to manipulate rankings, and Google has said its SpamBrain system can detect sites used for the purpose of passing outgoing links and neutralize the credit those links carry. You would be paying for authority that may already be switched off. If you are a resale investor buying the string itself, the calculation is gentler. A short, brandable name with a network chapter in its past can still sell to an end user who never looks at the backlinks. What makes it bad for a flipper is price: a PBN past should lower what you bid, never raise it, because the metrics that attracted the network are exactly the ones you cannot trust.
Can you clean up a PBN domain?
Partly. The content is the easy half: the moment the name changes hands and the old hosting goes away, the thin network posts and their outbound links disappear. The inbound links are the hard half. They sit on other people's sites, often other nodes in the same network, and they are not yours to remove. You can let them decay, and you can use a disavow file once you own the property in Search Console, but there is no guaranteed finish line and no public report that tells you the cleanup worked. For resale that rarely matters, since the buyer wants the name rather than its link graph. For an SEO rebuild it usually means you are starting from zero authority on a name that still carries a messy footprint.
How do I know if a domain was part of a PBN?
Look for the pattern rather than any single metric. In the Wayback Machine a network node usually shows an abrupt change of topic after a gap in ownership, a generic template with thin posts, and a sidebar or post body full of outbound links to unrelated commercial sites. In a backlink checker it tends to show high authority scores with little or no organic traffic, links from a small cluster of sites that share a template or hosting, and anchor text that reads like a keyword list rather than a brand name. WHOIS history often shows privacy-protected ownership changes lining up with the topic switch. One of those tells alone is common and innocent. Two or three pointing the same way is a network past.
Do high DR expired domains always mean PBN?
No, but a high authority score with no traffic is the single most common PBN signature, so it should make you look harder. Third-party authority metrics count links; they do not judge why those links exist. A name that earned links as a real business and then expired will show high authority too, and its archive will show a coherent site with a consistent topic and natural brand-name anchors. The difference is in the story the links tell. Earned links come from sites that talk about the old business. Network links come from sites that talk about nothing in particular and link out to everything.

Mark Fulton
Developer & Founder of PounceDomains · 20+ year domain investor
Mark Fulton is a 20+ year domain investor and the developer and founder of PounceDomains. He has spent two decades buying, building, and flipping domain names, and built PounceDomains himself to automate the hunt for undervalued domains on the Namecheap aftermarket.
Keep reading
Check if a Domain Is Banned by Google Before You Bid
You cannot open Search Console on a domain you do not own yet. Here are the four checks a 20-year investor runs instead, and the pass/fail call at the end.
Domain Backorder Explained: How It Really Works (2026)
What is a domain backorder and does it actually work? A 20-year investor on the lifecycle, the private-auction cost trap, and when to bid at auction instead.
Snipe these domains automatically
PounceDomains watches Namecheap Market 24/7, scores every ending-soon domain with AI, and bids on the winners. Free to start.
Start sniping free