How to Buy a Website: Due Diligence and Valuation

Buying a website is the closest thing there is to buying someone else’s homework and turning it in as your own. You skip the two-year slog of publishing into the void, skip the sandbox, skip the part where nobody reads your stuff. You just take over something that already makes money.

That’s the pitch. And it’s mostly true — which is exactly why the space is infested with padded numbers, half-truths, and listings that were built to be sold rather than to be run.

This is the version of the process nobody walks you through: how the math actually works, what you can and cannot verify, and where sellers quietly hide the rot.

Why People Buy Instead of Build

Instant cash flow. A site earning $4,000/month pays you next month, not in two years.
Existing traffic signals. Age and history carry weight with search engines that a brand-new domain doesn’t have.
Proven demand. You’re buying a validated market, not a guess.
Leverage. Buying three small sites and improving them is often faster than growing one from zero.

The flip side: you’re also buying whatever the previous owner did, including everything they got away with. That’s where due diligence comes in.

The Only Valuation Formula That Actually Matters

Ignore the fancy spreadsheets. At the small-site level, everything reduces to one line:

Monthly net profit × multiple = price

Not revenue. Net profit. After hosting, content costs, tools, contractors, ad spend, refunds, and every other line the seller would love you to forget. Sellers love quoting revenue because it makes the number bigger.

Then there’s SDE — seller’s discretionary earnings. That’s net profit plus any personal expenses the owner ran through the business, plus their salary if they paid themselves. It’s the real number, and it’s the number you should base your offer on.

Rough Multiples You’ll See in the Wild

Content site monetized with display ads: 30–45× monthly net profit (roughly 2.5–3.5× annual).
Affiliate site: 25–40× monthly, lower if traffic is concentrated in one or two pages.
Recurring subscription business: 3–5× annual profit, higher if churn is low.
Ecommerce: 2–3× annual net, more if there’s real brand equity.
Tiny sites under $1,000/month: often 15–24× monthly, because buyers want a quick flip.

What pushes a multiple up: diversified traffic sources, diversified revenue, an email list you actually own, years of history, low owner involvement, and clean books.

What pushes it down: one keyword carrying 60% of traffic, one traffic source, one big client, a seller who is also the entire content team, or revenue that appeared six months ago out of nowhere.

Due Diligence: The Part Sellers Hope You’ll Skip

Due diligence isn’t a formality. It’s the difference between buying an asset and buying a story. Here’s what you verify, in order.

1. Traffic: Prove It or Walk

Never accept screenshots. Never accept PDFs. Screenshots are the easiest thing in the world to edit.

Get read-only access to the analytics account and browse it live on a screen share while the seller watches.
Look at 24 months minimum, not 90 days. Ninety days can be the best quarter in the site’s history.
Break down sources: search, direct, referral, social, email. A healthy site has a mix. A fragile one has 90% from search.
Check geography. If most of the traffic comes from regions with low ad rates but the seller claims premium rates, something is off.
Watch engagement: time on page and pages per session. Bot traffic walks like a bot — weirdly high pageviews with near-zero scroll time, or thousands of sessions with one page and instant exits.
Map seasonality. A site peaking every November that’s being sold in October is a timing play, not a business.

2. Money: Follow the Payouts, Not the Spreadsheet

A spreadsheet is a document of claims. Read-only access to the actual ad, affiliate, or payment dashboards is evidence. It’s not rude to ask for it — it’s expected. A seller who resists is telling you something.

Match the money to the traffic. If traffic dropped 30% in March and revenue stayed flat, either the revenue is fake or the traffic numbers are wrong. Both are dealbreakers.

3. Content and Links

Spot-check the top 20 pages for plagiarism. Spun and scraped content is more common than anyone admits.
Check the search console for manual actions or security issues. A penalty doesn’t always show up as a traffic cliff — sometimes it just quietly caps you.
Look at the backlink profile for sudden spikes, exact-match anchor text in bulk, or links from obvious link farms. Those are time bombs.
Check how concentrated the traffic is. If one article is 40% of the revenue, you’re not buying a site — you’re buying a single ranking that could evaporate in an update.

4. The Domain and Its Baggage

Pull up archived versions of the site going back years. Domains get repurposed. A site that used to be something sketchy carries that history longer than most sellers want to admit.

Also check for trademark disputes, takedown complaints, content licensing issues, and any contracts that don’t transfer to you. Affiliate and ad agreements usually do transfer — but you need to confirm it, not assume it.

5. Operations

Who actually writes, edits, and updates? If it’s all the seller, you’re buying a job.
What’s the monthly cost to keep it running, including tools, hosting, and freelancers?
Are there accounts, licenses, or plugins tied to the seller’s personal identity? Those are friction points, not assets.

Red Flags That Should End the Conversation

The seller refuses live access and only offers screenshots.
The revenue is verifiable but the traffic isn’t — or vice versa.
A huge traffic spike in the last six months with no explanation.
Every answer is vague: roughly, around, I’d have to check.
The site was rebuilt or re-monetized recently and the seller wants a multiple based on the new numbers only.
They’re pushing you to close fast because of other interested buyers. There are almost never other interested buyers.

Structuring the Deal

How you buy matters as much as what you buy.

Asset purchase, not entity purchase. You take the domain, content, accounts, and audience — not the seller’s old liabilities.
Escrow. Money sits with a neutral third party and releases when the transfer completes. Always.
Holdback. Keep 10–20% for 30–90 days in case the traffic or revenue falls off a cliff right after transfer.
Earnout. If the seller promises performance, tie part of the price to it actually happening.
Transition period. 30–90 days of seller support, plus a non-compete so they don’t just rebuild the same site next door.
Transfer checklist. Domain registrar, hosting, analytics, ad accounts, affiliate accounts, email list, social profiles, payment processor. Get it in writing.

Negotiation Levers Most Buyers Never Use

Owner dependence is a discount, not a feature. Price it in.
Traffic concentration is a risk premium. One bad update and you own nothing.
Declining trends are worth less than flat trends, even at the same profit.
Cash today is worth more than a seller’s optimistic projections. Say that out loud.

The First 90 Days After You Own It

Don’t redecorate the house in week one. Watch it. Document the baseline traffic and revenue exactly as it stands. Change nothing for the first 30 days except the things that have to change — hosting, account access, payment routing.

After that, improve the boring stuff: internal linking, page speed, updating stale content, adding an email capture. Most small sites are sold because the owner got bored, not because the niche died. Boredom is an opportunity, and it’s usually cheap.

The Bottom Line

Buying a website is a legitimate shortcut, but only if you treat the seller like a counterparty, not a mentor. Verify the traffic independently. Verify the money at the source. Price the concentration risk. Hold back part of the payment. Then move fast on the boring improvements nobody bothered to make.

Do that, and you’re buying a business. Skip it, and you’re buying a screenshot.