Dead, Parked & Hijacked Website Finder — Local Lead Qualifier

Give it a list of business websites (for example the website column of a Google Maps scrape). For every site you get one clear verdict and the reason, ready to use as a sales opener.

Status	What it means	Example opener
HIJACKED_SPAM	The old domain now shows casino / gambling / spam content, or bounces visitors through a chain of unrelated foreign sites	"Your old web address now opens a casino site — did you know?"
FOR_SALE	Domain lands on a marketplace (Sedo, Dan, expireddomains, nicsell…)	"Your domain is being sold by someone else."
PARKED	Parking page with ads — or a restaurant domain that only shows a delivery-platform logo	"Your address shows ads, not your business."
DEAD	No DNS / no web server / HTTP error	"Your website doesn't load."
PLACEHOLDER	"Coming soon", hosting default page, empty page	"You have an address but no website."
MOVED	Redirects to another domain where the business name isn't visible	Verify manually
OK	Live — plus a list of outdated signals	see below
PROTECTED	Site blocks automated visitors (Cloudflare challenge, HTTP 403/429)	Not flagged — check by hand
UNREACHABLE	Did not answer during the check (timeout, disconnect)	Verify before contacting

Outdated signals for live sites: not mobile-friendly, no working HTTPS / broken certificate, old copyright year, discontinued builders (Adobe Muse, FrontPage, Flash), very old jQuery or WordPress, table layouts, missing German Impressum, free builder plans (wixsite, site123 free), content that only appears after JavaScript runs (AI crawlers and link previews see an empty page), and a surprisingly common one: the click-to-call button dials a placeholder number left over from a theme demo — mobile visitors tapping "call" never reach the business.

Every row also has: lead_score (0–100), a one-line pitch, final_url, detected tech (WordPress, Wix, Jimdo, Shopify, IONOS, STRATO, Webflow, Next.js…), emails, phones, social links.

Why this is more accurate than a status-code checker

These rules come from checking real small-business sites by hand:

• Both http and https, with and without www. Many small sites only answer on plain http.
• A redirect is not a lost domain. Businesses move or join chains. Hijacked = spam content and no trace of the business. Pass name or phone in businesses and the Actor checks the page for them.
• Marketplace URLs are recognised even when the business domain appears in the path (expireddomains.com/domain/your-bakery.de is a sale listing, not your bakery).
• DNS is asked via public resolvers, so a local VPN resolver can't make live sites look dead.
• Bot protection is not "dead". A 403 or a Cloudflare challenge is reported as PROTECTED, never as a lead. False positives are worse than misses when you contact a business.

Input

{
  "websites": ["bakery-example.de", "https://www.garage-example.com"],
  "businesses": [{"url": "old-domain.de", "name": "Müller Bakery", "phone": "030 1234567", "id": "row-17"}],
  "onlyProblems": true
}

onlyProblems: true returns only sites with a problem — you only pay for returned rows.

Output (one row)

{
  "domain": "orankesee-terrassen.berlin",
  "status": "HIJACKED_SPAM",
  "lead_score": 100,
  "final_url": "https://klarnacasino.de/",
  "pitch": "orankesee-terrassen.berlin now shows gambling/spam content — likely an expired domain taken over.",
  "tech": [], "emails": [], "phones": [], "social": {}
}

Use with AI agents

Works through the Apify MCP server — an agent can pass a list of domains and get structured verdicts back. Typical chain: Google Maps scraper → this Actor with onlyProblems: true → outreach list.

Pricing

Pay per result: you pay only for websites returned. No subscription.

Fair use

Loads only the public start page of each website, like a browser would. No logins, no form submissions, no crawling of private areas. Respect local rules for contacting businesses (e.g. no unsolicited marketing email in Germany).