Toxic links, the disavow file and recovering from Google Penguin

Toxic backlinks are links from low-quality, spammy or irrelevant websites that can suppress your rankings or, in severe cases, trigger a manual penalty from Google. In most situations, Google's algorithm simply ignores these links rather than penalising them. However, if your site has a history of aggressive link building, if you have inherited a domain with a problematic link profile, or if a competitor is pointing spam at your site through negative SEO, a proactive approach to toxic links becomes essential. This lesson covers the complete process of identifying genuinely harmful links, distinguishing them from merely low-quality ones, attempting manual removal, creating a properly formatted disavow file, submitting it to Google, and monitoring your recovery. Critically, it also teaches you when not to disavow, because incorrectly disavowing legitimate links is one of the most common and damaging mistakes in SEO.

Do You Actually Have a Toxic Link Problem?

Before investing any time in link auditing and disavow files, you need to determine whether you actually have a problem. Most Wix sites do not. Google has become increasingly sophisticated at identifying and ignoring spam links without requiring webmasters to take action. The disavow tool exists for specific situations, not as routine maintenance.

• Check Google Search Console under Security and Manual Actions. A manual action is Google's explicit confirmation that they have identified a link problem with your site. If you have no manual action, proceed with extreme caution before disavowing anything.
• If your organic traffic has dropped suddenly and significantly (50%+ decline), check whether the timing correlates with a known Google algorithm update. If so, the cause may be content quality, not links.
• If you are aware of a specific history of paid links, PBN usage or aggressive link building on your site (perhaps by a previous SEO provider), an audit is warranted.
• If you receive notifications in Google Search Console about unnatural links, take immediate action.
• If your traffic is stable or growing, you almost certainly do not need to disavow anything. Do not fix what is not broken.

What Makes a Backlink Genuinely Toxic

Not every low-quality link is toxic. Google ignores the vast majority of spam links automatically. A truly toxic link is one that exists as part of a deliberate link manipulation pattern that Google has identified. Understanding the difference between "low quality" and "genuinely toxic" prevents you from disavowing links that are actually helping or at least not hurting your rankings.

• Links from known private blog networks (PBNs): sites with thin, auto-generated or spun content that exist solely to sell links. Often identifiable by random, unrelated topics across the site, dozens of guest authors with no real online presence, and excessive outbound links on every page.
• Links from link farms: networks of sites that interlink aggressively in circular patterns to artificially inflate authority. These sites typically have no real readership or social engagement.
• Paid links with manipulative anchor text: if you paid for links (or a previous SEO provider did) and those links use exact-match keyword anchor text, they are toxic.
• Links from hacked pages: sometimes malware injects hidden links into legitimate websites. If you see links from unexpected sites with no logical reason to link to you, the source page may be compromised.
• Foreign-language spam sites linking with keyword-rich English anchor text: this pattern is characteristic of automated spam link campaigns.
• Links from gambling, pharmaceutical, adult or other spam-adjacent sites that have no relevance to your business.
• Auto-generated blog comment links: if your domain appears in blog comments across dozens of unrelated sites, a spam bot was likely used to place them.

Running a Complete Backlink Audit

A thorough backlink audit combines data from multiple sources and applies systematic criteria to identify genuinely problematic links while preserving legitimate ones.

The complete backlink audit process

• Export your complete backlink profile from Google Search Console (Links > Export External Links). This is your primary data source because it represents what Google actually sees.
• Supplement with data from Ahrefs Free Backlink Checker, Moz Link Explorer and Ubersuggest. Each tool crawls independently and catches different links.
• Merge all data into a master spreadsheet. Deduplicate by referring domain to create a clean list of unique linking domains.
• Add columns for: Domain Rating, Organic Traffic (from Ahrefs), Language, Topical Relevance, Link Type, Anchor Text, Follow Status and Toxic Score.
• Flag domains that meet multiple toxic criteria: DR under 10, zero organic traffic, irrelevant language, irrelevant topic, excessive outbound links per page, and manipulative anchor text.
• Manually review every flagged domain by visiting the actual linking page. Many sites that look suspicious in spreadsheet data are actually legitimate small businesses, niche blogs or non-English sites that happen to have low authority.
• Create a final "definitely toxic" list containing only domains where you have high confidence the link is genuinely harmful. Be conservative. When in doubt, do not include it.

Attempting Manual Link Removal

Before creating a disavow file, Google recommends attempting to have toxic links removed at the source. This involves contacting the owners of linking sites and asking them to remove or nofollow the link. While the response rate is typically low (5-15%), successful removals are more effective than disavows because they physically eliminate the link rather than asking Google to ignore it.

Manual removal outreach process

• For each domain on your "definitely toxic" list, find the site owner or webmaster's contact information. Check their About page, Contact page, WHOIS data or use Hunter.io.
• Send a polite, professional email explaining that you have identified a link from their site to yours, that the link appears to be the result of spam or an automated process, and requesting its removal.
• Include the specific URL of the page containing the link and the URL it points to on your Wix site to make it easy for the webmaster to find and remove it.
• Send one follow-up after 7 days if you receive no response. Do not send more than two emails.
• Document every outreach attempt in your spreadsheet with the date sent, contact information used and response received. This documentation is important if you later need to submit a reconsideration request to Google.
• Wait 14 days after completing your outreach before creating the disavow file. This gives webmasters time to respond and act.

Creating the Disavow File

The disavow file is a plain text file that tells Google you want specific domains or URLs to be excluded from consideration when evaluating your backlink profile. The file must follow a specific format for Google to process it correctly.

# Disavow file for yourdomain.com
# Created: 2026-03-28
# Reason: Toxic links identified during backlink audit

# PBN links identified March 2026
domain:spammy-linkfarm-example.com
domain:pbn-site-example.net

# Hacked page links
https://specific-compromised-page.com/your-hidden-link

# Foreign spam campaign
domain:foreign-spam-example.ru
domain:gambling-spam-example.xyz

• Use "domain:" prefix to disavow an entire domain. This is appropriate when the entire site is spammy.
• Use the full URL to disavow a specific page. This is appropriate when the linking domain is legitimate but one specific page has a problematic link.
• Add comment lines using the # prefix to document why each group of domains was disavowed. This is essential for future reference.
• Save the file as a plain .txt file with UTF-8 encoding. Do not use .csv, .doc or any other format.
• Keep the file organised with grouped sections and clear comments. You may need to update it in the future.
• Before finalising, review every entry one more time. Removing a domain from the disavow file later does not immediately reverse its effect.

Submitting the Disavow File to Google

How to submit your disavow file

• Navigate to the Google Search Console Disavow Links tool at search.google.com/search-console/disavow-links.
• Select your Wix site property from the dropdown menu.
• If you have a previous disavow file, download it first so you have a backup. New uploads replace the existing file entirely.
• Click "Choose File" and upload your completed disavow.txt file.
• Google will show a confirmation screen displaying the number of domains and URLs in your file. Verify this matches your expectations.
• Click Submit. Google confirms receipt and notes that the file may take several weeks to be fully processed.
• Save a local copy of the disavow file with the date in the filename for your records.

Monitoring Recovery and Ongoing Maintenance

After submitting a disavow file, recovery is not instant. Google needs to recrawl the disavowed domains and reprocess your link signals. For algorithmic suppressions, expect to see initial improvements within 4-8 weeks. For manual actions, you must submit a reconsideration request after completing your cleanup and wait for Google's review, which typically takes 2-4 weeks.

Post-disavow monitoring process

• Track your organic traffic in GA4 weekly. Create a custom annotation on the date you submitted the disavow file so you can correlate any changes.
• Monitor your keyword rankings weekly for your most important terms. Look for gradual improvement over 4-12 weeks.
• If you had a manual action, go to Google Search Console > Security and Manual Actions and submit a reconsideration request. Include a description of the cleanup work you performed, the outreach documentation, and the disavow file details.
• Re-run your backlink audit quarterly to check for new toxic links that may have appeared since your initial cleanup.
• If you identify new toxic links, update your disavow file by downloading the current version, adding new entries and re-uploading the updated file.
• Monitor your Domain Rating and referring domain count to ensure your overall link profile is growing healthily despite the disavowed links.

Complete How-To Guide: Auditing and Disavowing Toxic Backlinks

This comprehensive guide walks you through the entire toxic link cleanup process, from initial diagnosis through to recovery monitoring.

Follow these steps to audit and disavow toxic backlinks

• Step 1: Check Google Search Console under Security and Manual Actions. If you have an active manual action related to unnatural links, proceed with urgency. If not, evaluate whether you have symptoms of a toxic link problem (sudden traffic drops, known history of paid links) before continuing.
• Step 2: Export your complete backlink profile from Google Search Console by navigating to Links > Top Linking Sites > Export External Links. Save this as your primary data source.
• Step 3: Run your domain through Ahrefs Free Backlink Checker, Moz Link Explorer and Ubersuggest to supplement the GSC data with domain authority scores, anchor text data and additional referring domains.
• Step 4: Merge all exports into a single master spreadsheet. Deduplicate by referring domain. Add columns for Domain Rating, Organic Traffic, Language, Topical Relevance, Link Type, Anchor Text, Follow Status and Toxic Score.
• Step 5: Apply systematic flagging criteria. Flag domains with DR under 10 AND zero organic traffic AND irrelevant topic. Flag any domains with characteristics of PBNs, link farms, hacked pages or automated spam campaigns.
• Step 6: Manually review every flagged domain by visiting the actual linking page in your browser. Confirm each one is genuinely toxic rather than simply a low-authority legitimate site. Remove false positives from your flagged list.
• Step 7: Create your final "definitely toxic" list containing only domains where you have high confidence the link is genuinely harmful. Document your reasoning for each inclusion.
• Step 8: Attempt manual removal by finding contact information for each toxic domain and sending a polite email requesting link removal. Include the specific linking URL and your target URL to make removal easy.
• Step 9: Send one follow-up after 7 days for non-responses. Document every outreach attempt with dates, contacts and outcomes in your spreadsheet.
• Step 10: Wait 14 days after completing outreach, then create your disavow.txt file using the correct format. Use "domain:" for entire domains and full URLs for specific pages. Add comment lines documenting reasons for each group.
• Step 11: Navigate to search.google.com/search-console/disavow-links, select your property, download any existing disavow file as a backup, then upload your new disavow file.
• Step 12: If you have a manual action, submit a reconsideration request through Google Search Console. Describe the cleanup steps taken, attach outreach documentation and reference the submitted disavow file.
• Step 13: Set up weekly tracking of organic traffic, keyword rankings and referring domain counts. Create a GA4 annotation for the disavow submission date.
• Step 14: Re-run your backlink audit quarterly. Download and update your disavow file if new toxic links appear. Upload the updated file to replace the previous version.