Buying a content site is risky if you trust self-reported data. This guide breaks down the 40 critical questions you must ask to verify traffic and revenue, ensuring you make a profitable investment without falling for common scams.
Deal Alert AI is reader-supported. We earn commissions from affiliate links at no cost to you.
This post is based on a video from our Deal Alert AI YouTube channel. Watch the original or read the full breakdown below.
When entering the world of online business acquisitions, content sites often present themselves as the most accessible entry point. Unlike e-commerce stores that require inventory management or SaaS products that demand technical maintenance, blogs and media sites seem simple: you write, they read, and the ads pay. However, this simplicity is a double-edged sword. Because the core asset is intangible—information and human attention—it is significantly easier for a seller to manipulate metrics or misrepresent the quality of their traffic. You are not buying a warehouse full of physical goods; you are buying a stream of visitors. If that stream is dry, polluted, or artificially boosted, your investment evaporates overnight.
The landscape of online media has shifted dramatically in recent years. Search engine algorithms have become stricter regarding low-quality content, site reputation, and link integrity. A site that generated $5,000 in monthly profit two years ago might be struggling to hit $1,000 today due to algorithmic updates, increased competition, or a lack of content refresh. For buyers, this makes historical performance data less indicative of future viability unless you dive deep into the mechanics of how that traffic is acquired. You must understand that a content site is not just a collection of articles; it is a complex ecosystem of SEO, off-page authority, and audience engagement that requires constant nurturing.
At Deal Alert AI, we have seen too many buyers make the mistake of looking only at the bottom line. They see a monthly recurring revenue (MRR) number, multiply it by 36 months, and assume they have calculated the enterprise value. This approach ignores the decay rate of organic traffic, the dependency on a single publisher, and the technical debt accumulated over years of development. To buy a content site profitably, you need a forensic approach to due diligence. You need to verify every claim, cross-reference data from multiple sources, and understand the underlying economics of the traffic. This post provides the exact framework we use to evaluate media assets, ensuring you don’t fall into the trap of buying expensive air.
We scan Empire Flippers, Flippa, Acquire.com and Quiet Light daily — scoring every listing. Start free.
The first major pitfall in content site acquisitions is relying on the seller’s dashboard. Most sellers will present screenshots of their Google Analytics or Ahrefs dashboard. Remember: a dashboard is only as honest as the person who owns it. It is possible to manipulate display settings, hide specific data ranges, or even use modified versions of analytics tools to show inflated numbers. "Vanity metrics"—such as total pageviews including bot traffic, or bounce rate calculated on a single landing page—can create a false sense of security. Your job as a buyer is to look beyond the summary stats and demand raw, verifiable data logs where possible, or at minimum, trends that align with industry standards for the niche.
Consider the metric of "Unique Visitors" versus "Pageviews." A content site might boast a high pageview count, suggesting high engagement. However, if the unique visitor count is low, it indicates that the same users are viewing multiple pages, or that the traffic is not broadening. If the unique visitors are dropping month over month while pageviews remain flat, you are likely looking at a site with a shrinking audience that is compensating with higher ad density. This is a red flag. It suggests the site is nearing the end of its lifecycle, where advertisers are squeezing every last drop of value from a dying audience. You must analyze the ratio between these two metrics to gauge the true breadth of the site's reach.
Furthermore, the source of traffic is more important than the volume. A site with 100,000 monthly visitors derived entirely from a single tweet that went viral in 2021 is a completely different asset than a site with 100,000 visitors derived from 500 distinct, long-tail keyword rankings in Google. The former is unpredictable and potentially fading; the latter is a compounding asset. When reviewing data, you must segment the traffic by channel. If 80% of the traffic comes from "Direct" or "(Not Provided)," you have a data integrity problem. Those classifications often mask referrer spam or private browsing, but they can also hide a lack of true organic search growth. You need clarity on where the people are coming from before you pay for their attention.
The most critical question to ask is: How much of this traffic costs the owner money? If a site is heavily reliant on paid traffic, such as display ads, social media boosting, or email buying, you must accurately calculate the Net Operating Profit (NPOP) after deducting advertising spend. Many small to mid-sized media sites operate on thin margins where the difference between profit and loss is the cost-per-click (CPC) rate. If the CPCs rise by just 5%, the site could go from profitable to operating at a loss. You must request the last six months of ad expenditure records, not just the ad platform dashboard, which may contain tracking errors or excluded costs.
Conversely, if the site relies 90% on organic search traffic, you are buying an SEO portfolio. This is generally a more stable asset, but it comes with its own set of risks, specifically related to Google algorithm updates. You need to investigate if the site has suffered any "sandcastles" effects—sudden, massive losses in ranking for key keywords. Ask the seller to demonstrate the keyword rankings for the top 20 articles driving the most traffic. If the site was built on a few "pillar" keywords that rank #1 in Google, and those rankings drop to the second page, your traffic could halve overnight. You need a diversified keyword portfolio to mitigate this risk.
Another aspect of traffic quality is geographic distribution. Advertisers pay significantly different rates depending on where the user is located. A site with 50% of its traffic from Tier 1 countries (US, UK, CA, AU) will have a much higher yield per 1,000 impressions (RPM/CPM) than a site with global traffic. If the seller's traffic is heavily skewed toward lower-income countries, the revenue figures might look impressive in volume, but the actual dollar yield is much lower. You must normalize the traffic data by geography to understand the true earning potential. A site with 20,000 visitors in the US is worth significantly more than a site with 20,000 visitors in a lower-tier market, even if the total pageview numbers are similar.
All websites, especially popular ones, suffer from bot traffic. Some bots are benign, simply indexing content. Others are malicious, designed to scrape data or test server security. However, in the context of buying media sites, bots are dangerous because they inflate traffic metrics without generating revenue. If a seller claims high traffic but low revenue, one possibility is a low traffic-to-revenue conversion ratio. But another possibility is a high volume of bot traffic that passes through analytics but never triggers an ad impression. You need to use a third-party bot filtering tool to analyze the raw server logs or analytics data if available. Look for patterns such as users who visit only one page, have a zero-second dwell time, or appear from data center IP addresses rather than residential IPs. If you detect more than 10-15% bot traffic, you must discount the reported revenue accordingly.
Referrer spam is another subtle issue that can distort traffic sources. Some spammers will send fake referral spam to analytics tools to trick the site owner into clicking a malicious link or simply to clutter the data. While this doesn't directly inflates pageviews as much as direct bot traffic, it pollutes the "Referral" data source. If you see unusual spikes in traffic from unrelated, spammy domains, it is a sign of poor site maintenance and potential security vulnerabilities. A well-maintained site will have consistent, logical referral sources. If the referral data looks messy or contains suspicious domains, you are dealing with a site that lacks proper technical hygiene, which can lead to higher maintenance costs post-acquisition.
As a buyer, you must be forensic about the revenue stream. Is the site relying on a single ad network, such as Google AdSense, Media.net, or Ezoic? While diversification is good, deep dependence on one network poses a risk. If that network changes its payout policies, raises their threshold, or blocks the site for a policy violation, your revenue could drop to zero. Diversified revenue is a sign of a mature business. Look for sites that have secondary income streams such as affiliate commissions, sponsored content (display ads), digital products, or email list subscriptions. A site with 60% ad revenue and 40% affiliate/product revenue is generally more resilient because it is not entirely at the mercy of display ad fluctuations. You need to verify the contracts for any sponsored content deals to ensure they are recurring and not one-off promotions.
When reviewing the financials, look at the Earnings Per 1,000 Impressions (EPM) or RPM. Calculate the effective RPM by dividing the total revenue by the total impressions (adjusted for bot traffic) and multiplying by 1000. Compare this RPM to industry benchmarks for the niche. If the site operates in a high-paying niche like finance or B2B SaaS, the RPM should be significantly higher than a site in the hobbyist or general news niche. If the RPM is unusually high for the niche, investigate why. Is it because of a high click-through rate (CTR)? Or is it because the ad placement is intrusive, leading to user frustration? While high ad yield is great for short-term profit, it often leads to high user churn and negative brand reputation, which can hurt long-term growth.
Don't forget to check for expenses that are not obvious. Content sites are not labor-free. Who is writing the articles? Are they using freelance writers, full-time employees, or AI tools? If the site relies on full-time employees, you are buying a business with high overhead and potential labor liability. If it uses freelancers, you need to verify the quality of the content and the cost per article. Additionally, check for subscription costs for tools like SEO software, hosting, premium themes, or plugin licenses. These costs can add up quickly. A site that relies on expensive enterprise-level SEO tools might have a hidden monthly expense of $5,000+ that is not explicitly listed in the "Net Profit" figure. As a buyer, you must reconstruct the P&L statement from scratch, listing every single dollar out and every single dollar in, to arrive at the true Net Operating Profit.
The golden rule of financial due diligence is reconciliation. Never trust the seller's spreadsheet. You must request bank statements and ad network payout statements for the last 12 to 24 months. Cross-reference the dates and amounts. Does the money reported in the seller's accounting software match the money that actually hit the bank account? Discrepancies here are common and often reveal hidden costs, unreported income, or accounting errors. If the seller has been paying for personal expenses through the business bank account, you need to adjust the profit figure to reflect the true economic reality of the site. You are buying the business, not the seller's lifestyle.
For ad networks, check the historical payout reports. Some networks hold back a portion of revenue for 60-90 days for fraud prevention. This means the "current month" revenue is not fully realized. Your valuation should account for this "working capital" gap. Furthermore, check if there are any pending earnings or if the account is in good standing. An ad account that has banned the site once in the past is a high-risk liability. Ask the seller why the site was banned, and what steps were taken to avoid it in the future. If the seller cannot provide a clear, credible explanation, assume the site could be banned again, which would essentially be a total loss of the primary revenue stream.
The backlink profile of a content site is its organic traffic engine. You need to analyze not just the quantity of backlinks, but the quality and diversity. A healthy backlink profile includes links from diverse domains, authoritative news sources, and relevant industry publications. Red flags in the backlink profile include a high number of links from spammy directories, PBNs (Private Blog Networks), or irrelevant foreign-language sites. These links were likely built via black-hat SEO tactics and can trigger a Google penalty, resulting in de-indexing or significant ranking drops. Use tools like Ahrefs or Majestic to audit the backlink profile. Look for the "Trust Flow" and "Citation Flow" ratios. If the Trust Flow is significantly lower than the Citation Flow, it indicates a poor quality link profile that is dominated by low-trust links.
Also, investigate the anchor text distribution. If a huge percentage of the links point to the site with exact-match keyword anchors (e.g., "best running shoes"), it looks unnatural and manipulative to search engines. A natural link profile has a mix of brand anchors, generic anchors (e.g., "click here"), and natural sentence fragments. If the anchor text is skewed heavily towards commercial keywords, the site is at higher risk for algorithmic penalization. You should also check for any toxic links that point to the site from hacked sites or spam farms. If you find a significant number of toxic links, you must price in the cost of a digital PR cleanup, which can be expensive and time-consuming.
Technical SEO is the foundation of any content site. A site with great content but poor technical infrastructure will struggle to rank. You need to audit the site's Core Web Vitals, which measure loading, interactivity, and visual stability. Slow-loading sites lose users and are penalized by Google. Run the site through Google PageSpeed Insights and check the Experience Score. If the Score is below 50, the user experience is poor, and improving it will require significant development resources. Check for mixed content issues (https on an http page), broken links, and duplicate content. Duplicate content is a common issue in content sites that have syndicated articles or reused headlines. This dilutes the site's authority and can confuse search engines about which page to rank.
Furthermore, check the site's accessibility and mobile-friendliness. With mobile-first indexing, a site that does not render correctly on mobile devices is effectively invisible to a large portion of the audience. Check the mobile version of the site and ensure the navigation is intuitive and the text is readable without zooming. Also, look at the site's internal linking structure. A well-organized site passes "link juice" (equity) from high-ranking articles to newer, money-making articles. If the internal linking is random or nonexistent, the site is wasting its existing authority. You must assess the time and cost involved to fix these technical issues. If the site has significant technical debt, you are buying a liability that will require a developer and a SEO specialist to untangle, adding to your overall acquisition cost.
Content is the asset, but it must be a legal and high-quality asset. You need to spot-check the originality of the content. In the era of AI, plagiarism is easier to perpetrate and harder to detect visually. Use plagiarism checkers on a random sample of top-performing articles. If the content is spun, translated, or stolen, it is a liabilities. Google is increasingly aggressive in removing plagiarized content from its index. A site with a history of plagiarism is at high risk of being de-indexed. You must ensure that the content is original, accurate, and cited properly. If the site publishes user-generated content, check the terms of service to ensure you have the rights to the content and that the platform has safeguards against problematic or illegal content.
Legal compliance is another area that often surprises buyers. Check the site's Privacy Policy and Cookie Banner compliance. With GDPR in Europe and CCPA in California, failing to have a compliant privacy setup can lead to fines or legal action. Ensure the site has a clear disclaimer for financial, legal, or medical advice if applicable. If the site publishes "how-to" guides for sensitive topics, ensure it has the proper disclaimers to protect against liability. Review any contracts the site has with expert contributors or partners. If the site has exclusive content deals with certain brands or individuals, you need to ensure these contracts transfer to you or are terminated. Buying a site with sticky contracts that restrict your ability to work with other brands can significantly limit its future growth potential.
One of the most overlooked aspects of content site due diligence is the operational workflow. Who is the face of the brand? Is the site heavily dependent on the seller's personal brand, such as a "Founder's Blog" or a personal newsletter? If the brand is inextricably linked to the seller's name, the asset is less transferable. The audience may follow the person, not the URL. This is known as "key person risk." You need to assess how much of the equity is tied to the seller's reputation versus the domain itself. If the site is 80% dependent on the seller's social media following, you are buying an audience, not a website. This requires a different valuation approach and a higher discount rate due to the risk of audience attrition post-sale.
Examine the editorial calendar and the publishing process. How many articles are published per week? What is the cost per article? Is the value proposition of the content consistent? If the site publishes 10 articles a week, each taking 10 hours to write, that is 100 hours of work weekly. If the site only generates $5,000 in profit, the return on labor is low. You need to understand the efficiency of the content operation. A scalable media business should be optimized for high output with consistent quality and low marginal cost. If the workflow is chaotic, relying on the seller's personal time for every editorial decision, you are buying a job, not a business. You must look for systems, playbooks, and SOPs (Standard Operating Procedures) that document how content is ideated, researched, written, edited, and published. Without these, you will struggle to replicate the current traffic levels without the seller's involvement.
There are certain red flags that should end the conversation immediately. If the seller cannot prove the existence of the email list (via a brief, monitored email send or access to the ESP dashboard), it is likely purchased or fake. Bought emails have low engagement and high bounce rates, which harms deliverability and ad revenue. Another walk-away trigger is if the seller claims high engagement metrics (comments, shares, likes) but you cannot see the corresponding data in the CMS or social media platforms. Engagement is social proof, and if it's missing, the site may be suffering from "phantom traffic" where users visit but do not connect. This often indicates low-quality traffic that is not valuable to advertisers.
Also, be wary of sellers who are in a rush to sell without providing a data room. A legitimate seller has their financials, legal docs, and analytics organized because they want to sell at the highest price. A seller who is messy, slow to respond, or refuses to share specific data points is often hiding a problem, such as pending litigation, a tax lien, or a sudden drop in traffic. If you encounter resistance, view it as a cost. The "discount" you might get from a distressed seller is rarely enough to offset the risk of a catastrophic hidden issue. In the world of digital asset acquisition, information asymmetry favors the seller. Your due diligence must close that gap before you sign the Letter of Intent.
Once you have completed your due diligence, you have the leverage to negotiate. Use the findings from your audit to adjust your offer. If you found 20% bot traffic, you should reduce the traffic-based valuation by 20%. If you found that the revenue is 50% dependent on a single, non-recurring sponsored post, you should subtract that from the recurring revenue base. If the site has technical debt that will cost $15,000 to fix in the first 90 days, deduct that from the purchase price. You are not just buying a number; you are buying the exact state of the business as it exists today, including all its flaws. Your valuation should reflect the "As-Is" condition, not the "Ideal" condition.
Consider using an escrow service that specializes in online businesses. Services like Escrow.com or those offering through platforms like Empire Flippers provide a layer of security. If you are browsing listings on Flippa, be aware that while there are great deals, the due diligence burden is 100% on the buyer. These marketplaces do not verify the data; they just host it. Your independence in verification is what separates a profitable investor from a victim. By using this comprehensive checklist, you shift the power dynamic. You are no longer a passive buyer; you are an active investigator who knows exactly what you are buying and what it is truly worth.
Before you wire a single dollar, ensure you have the following items documented and verified. This checklist serves as your insurance policy.
Buying a content site is a complex transaction that requires precision. By approaching it with the skepticism and rigor outlined in this guide, you protect your capital and position yourself for long-term success. The online media landscape is competitive, but for those who do their homework, it offers incredible opportunities for scalable, passive income. Don't let vanity metrics cloud your judgment. Look at the plumbing, audit the numbers, and verify the traffic. That is how you build a portfolio of profitable digital assets, not a collection of expensive mistakes. For more advanced screening tools and data-driven insights, explore the analysis features at Deal Alert AI to streamline your search for high-quality opportunities.
We scan Empire Flippers, Acquire, Flippa, and Quiet Light daily. The best sub-$500K businesses are gone within 48 hours.
We scan Empire Flippers, Flippa & Acquire every morning. The best deals sell in 48 hours.