Haraj Properties and Details Scraper

This Actor is scoped to Haraj real-estate listings. It parses supported structured JSON records only when their type or category indicates property. It does not parse general marketplace cards or collect seller names, IDs, or phone numbers.

Permission and input

Haraj's Terms of Use restrict accessing, collecting, aggregating, reusing, or republishing platform and user data without authorization. The default-false authorizationConfirmed input blocks all source requests unless you confirm you have the required express authorization for your use.

After obtaining authorization, provide HTTPS startUrls for a real-estate category or property listing on haraj.com.sa or www.haraj.com.sa. The Actor does not crawl the general marketplace homepage by default and does not follow redirects. maxItems, maxPages, and timeoutMs bound the run.

Output

When authorized pages contain supported structured property data, records may include listing ID, title, URL, category, description, price and currency, condition, location, image URLs, posting/update dates, status, and source URL. Missing values are omitted. Seller names, profile IDs, and phone numbers are excluded. The parser does not infer property details or treat all marketplace products as real estate.

Only structured property listings with official-site provenance, a title, and at least one substantive listing fact are added to the dataset. Search or category pages that contain no verified listing details, access failures, and invalid input never become dataset items. Failure details and clean-empty diagnostics are stored in the OUTPUT key-value summary.

Without authorization, the Actor reports SUCCEEDED/SKIPPED_POLICY, writes no dataset rows, and makes zero source requests. Clean completion, including a confirmed empty result, reports SUCCEEDED/COMPLETED; failures after verified rows report SUCCEEDED/PARTIAL; failures before any verified row report FAILED/FAILED with native exit code 1.

You can download the dataset in various formats such as JSON, HTML, CSV, or Excel.

Responsible use

Confirm that your permission covers automated access and the intended reuse. Follow Haraj's terms and applicable privacy rules. The Actor does not access accounts, private contact data, or private messages, and does not bypass access controls. It is not affiliated with or endorsed by Haraj.

Apify

Apify provides scheduling, API access, dataset exports, monitoring, and run history. Compute use depends on the supplied pages, request limits, and your Apify plan.

Dependency security and HTTP caching

The locked dependencies require Node.js 20.18.1 or later. Implemented Actor Cloud builds use Node.js 22.

HTTP response caching is disabled throughout the SDK dependency graph by a project-owned, tested non-caching policy replacement. Responses are always fetched afresh; stale cached responses and serialized cache headers cannot be reused. This replaces the vulnerable package rather than suppressing its advisory. The locked FTP client is 6.2.1; the SDK keeps its supported interface.

The original unpatched-cache advisory is GHSA-ch52-4w7c-c8xp. The FTP patch is documented in GHSA-c475-qrg2-pj4r. Project tests include actual localhost HTTP requests with a shared cache and distinct user headers. These tests make no target-site requests and do not qualify extraction.