Skip to content
NewVerdictIQ Connector is here. One Docker image enriches your DNS logs with verdicts inside your network and forwards them to your SIEM.Install guide

Low-Quality Backlink Profile

It indicates that a significant portion of the domain’s backlinks originate from low-reputation, irrelevant, spam-like, or link-farm sources rather than authoritative or thematically related websites.

Analyst Q&A

What this signal answers

The questions every analyst asks before acting on this signal.

What it detects01

What does a 'Low-Quality Backlink Profile' indicate?

It indicates that a significant portion of the domain’s backlinks originate from low-reputation, irrelevant, spam-like, or link-farm sources rather than authoritative or thematically related websites.

Why it matters02

Why is this considered a malicious-leaning signal?

Low-quality backlinks are commonly associated with SEO manipulation, traffic-broker ecosystems, parked domains, or short-lived phishing and scam infrastructures attempting to artificially inflate visibility.

How analysts use it03

How should SOC analysts interpret this label?

This label represents a weak-to-moderate malicious-context signal. It should not be treated as definitive on its own, but when correlated with redirector behavior, malicious backlink relationships, or content anomalies, it strengthens the overall abuse assessment.

Often paired with:alert_only
Evidence shape

What Low-Quality Backlink Profile looks like in the response

A realistic shape of the entry the engine appends to the risk_signals array when this signal fires. Evidence keys are subgroup-default; per-signal overrides documented in the API reference.

json
{
  "slug": "backlink_quality_low",
  "name": "Low-Quality Backlink Profile",
  "group": "popularity_and_backlink",
  "subgroup": "backlink_quality",
  "direction": "malicious",
  "evidence": {
    "backlink_count": 184,
    "referring_domain_count": 6,
    "backlink_quality_band": "low",
    "known_farm_cluster_share": 0.82
  }
}
See in API reference
Siblings

Peers in Backlink Quality

3 other signals share the same subgroup. They detect related behaviors and often co-fire on the same IOC.

High-Quality Backlink Profile

It indicates that the domain receives backlinks primarily from reputable, authoritative, and thematically relevant sourc…

SafeCore
Low Backlink Source Diversity

It indicates that the domain’s backlinks originate from a small number of repeating or closely related sources rather th…

Malicious
Backlink From Known SEO Farm Cluster

It indicates that the domain receives backlinks from known link-farm or PBN clusters commonly used for SEO manipulation …

MaliciousCore
In the wild

See Low-Quality Backlink Profile fire on real IOCs

The Verdict Gallery is a curated stream of real verdicts. Filter by this signal to see exactly which IOCs it caught, what other signals fired alongside it, and what the engine recommended.

Open Verdict Gallery
Pre-filtered to Low-Quality Backlink Profile. See real IOCs this signal caught and the verdicts the engine returned.
Verdicts ✓

Start free, in five minutes

1,000 verdicts/month on the free tier, LLM layer included. No card required.