Outbound links are an SEO and security check at once

Outbound links (links from your page to other domains) signal topical context to Google, can leak link equity if not managed, and create security risks if used carelessly. This checker audits every external link, reporting domain, rel attributes, and target behavior.

Key metrics: total outbound link count, unique domains, nofollow usage, and unsafe target="_blank" links. The last is a security issue (tabnabbing) that affects 30 to 50% of sites we audit.

Tabnabbing: the unsafe target="_blank" risk

When a link uses target="_blank" without rel="noopener", the page that opens in the new tab gets access to window.opener, which is a reference back to your tab. The opened page can then redirect your tab to a phishing URL while users believe they are still on your site. This is called tabnabbing.

Modern browsers default to noopener for cross-origin links opened with target="_blank", but this is recent behavior and not universal. Always set rel="noopener noreferrer" explicitly. The fix is one attribute and prevents the entire attack class.

Nofollow on outbound links

Nofollow tells Google not to pass link equity through this link. Use it for: paid links (legally required), affiliate links (FTC disclosure plus SEO best practice), user-generated content where you cannot vouch for the destination, and links to known low-quality or spammy sites.

Do not use nofollow on every outbound link. Linking generously to authoritative sources is a quality signal. Sites that hoard all link equity by nofollowing everything externally rank worse than sites that link liberally to good sources.

The unique-domains metric and what it reveals

Beyond the raw link count, the number of unique external domains a page links to is a quietly useful signal. A research-heavy article that cites many different authoritative sources will link out to a spread of domains, which reads as genuine due diligence. A page that contains dozens of outbound links but only points at one or two domains is a different animal: it often signals an affiliate page funneling clicks to a single merchant, or a doorway page built to push traffic somewhere specific.

Neither pattern is automatically bad, but the ratio tells you what kind of page you are looking at and whether that matches your intent. If you expected a balanced editorial piece and the checker shows every outbound link pointing at one commercial domain, that is worth a second look. Concentrated outbound linking to a single destination, especially with exact-match commercial anchors, is one of the patterns search engines associate with thin affiliate and link-scheme behavior.

The newer rel attributes: sponsored and ugc

Since 2019, Google supports rel="sponsored" for paid links and rel="ugc" for user-generated content. Both are treated similarly to nofollow for ranking purposes, but provide more accurate attribution to Google.

Use sponsored on affiliate links, paid placements, and anything an advertiser influenced. Use ugc on links posted by users in comments, forums, or community sections. Use nofollow as a fallback for links you do not want to vouch for but that do not fit either of the above.

What this checker inspects on the page

When you submit a URL, the tool fetches the page and parses its HTML for every anchor that points to a domain other than the one you entered. For each external link it captures the full destination, the domain it resolves to, the rel attribute (nofollow, sponsored, ugc, noopener, noreferrer, or none), and whether the link opens in a new tab via target="_blank". It then rolls those details into a summary so you can see the page's outbound footprint at a glance rather than reading the source by hand.

Because it works on the rendered link list of a single page, the checker is ideal for auditing one important page at a time: a homepage, a heavily cited article, an affiliate review, or a resource roundup. It does not crawl your whole site, so it answers a focused question well, namely "what does this page link out to, and is every one of those links safe and correctly configured?" That is usually exactly the question you have when you sit down to review a specific page.

How to read the report

The checker lists every external link with its destination domain and its rel attributes, then summarizes the page: total outbound links, count of unique external domains, how many links are nofollow versus followed, and how many use target="_blank" without the safe rel value. Read it top down. The unsafe target="_blank" count is your security to-do list. The followed-versus-nofollow split tells you how much link equity the page passes out and to whom. The unique-domain count tells you whether you are citing a healthy range of sources or repeatedly linking the same few.

Scan the destination domains themselves. A page that links out to respected, topically relevant sites looks like a well-researched resource. A page linking to low-quality, off-topic, or spammy domains drags down its own perceived quality, because Google and AI systems treat the company you keep as a signal. If the report surfaces a domain you do not recognize or did not intend to link, that is worth investigating immediately.

Followed outbound links are not something to fear

A persistent myth says you should nofollow every external link to avoid "leaking" PageRank. This is backwards. Linking out with normal followed links to authoritative, relevant sources is a positive quality signal. Google has repeatedly indicated that outbound links are part of how it understands a page's topic and trustworthiness, and hoarding equity by nofollowing everything does not help you rank; it just makes your content look stingy and less credible.

Reserve nofollow, sponsored, and ugc for the specific cases that warrant them: paid and affiliate links, user-generated content, and links to sources you genuinely cannot vouch for. For everything else, a plain followed link is correct. If this checker shows that nearly all your outbound links are nofollow, that is a flag to audit them, because most are probably followed-worthy links that a plugin or template marked nofollow by default.

Link rot and keeping outbound links healthy

Outbound links decay over time. The sites you link to get redesigned, change their URL structures, move behind paywalls, or go offline entirely, and your once-valid citation quietly becomes a 404. This is called link rot, and on older content it is widespread. Dead outbound links frustrate readers, break the supporting evidence for your claims, and signal a page that is no longer maintained.

This tool inspects which external links exist and how they are configured; to confirm those destinations are still alive, pair it with the Broken Link Checker, which tests each link's HTTP status. When you find a dead outbound link, replace it with a current source on the same topic, point it at the Internet Archive's saved copy of the original, or remove it and adjust the sentence so it still reads cleanly. Auditing outbound links periodically, especially on your highest-traffic pages, keeps your citations trustworthy.

Outbound links, citations, and AI search

In 2026, where you link out has become an AI-search signal. Large language models and AI answer engines lean on citation patterns to judge whether content is well-sourced and reliable. A page that backs its facts and statistics with links to recognized authorities reads as trustworthy and is a stronger candidate to be summarized or cited. A page that makes claims with no supporting links, or links only to weak sources, gives these systems little reason to trust it.

This flips the old equity-hoarding instinct on its head. Generous, well-chosen outbound links are now part of demonstrating expertise and trustworthiness, the same qualities that classic E-E-A-T evaluation rewards. Keeping those links followed, relevant, and alive is how you make your content legible and credible to the AI systems that increasingly decide which sources get surfaced in answers.

Outbound link best practices

Link to authoritative sources for facts, statistics, and claims. This signals due diligence to both Google and AI search systems, which use citation patterns to evaluate content quality.

Open external links in the same tab unless there is a clear UX reason not to (forms, applications, complex multi-step workflows). Forcing target="_blank" on all external links makes back-button behavior weird and clutters tab history.

For e-commerce or affiliate-heavy sites, audit the outbound:inbound link ratio. Sites that link out 100x more than they link internally signal "thin affiliate" patterns to Google. Healthy sites have a balance.

What to do after you run this checker

Fix the security issues first. Add rel="noopener noreferrer" to every target="_blank" link the report flags; it is a one-attribute change that closes the tabnabbing risk entirely. Next, correct the rel attributes that are wrong: remove unnecessary nofollows from good editorial links, and add sponsored or ugc where paid or user-generated links currently lack them.

Then audit the destinations. Confirm your outbound links still resolve, replace or remove any that have rotted, and make sure the domains you cite are relevant and reputable. Re-run the check after major content edits, and for a complete view, the full DarnItSEO Audit inspects outbound links across every page on your site rather than the single page you submit here.