How to Detect Parked Domains: DNS, Page and HTTP Signals
A parked domain resolves and answers requests, but there is no real site behind it. Telling parked from live matters for research, security triage and domain buying. This guide lists the signals that work, how strong each is, and how they combine.
What "parked" means
People use the word for several different situations, and the right response depends on which one you face:
- Registrar default page. The registrar shows a placeholder, often with the registrar's branding, because the owner never set up anything.
- Monetised parking. The domain points at a parking service that shows ads related to the name, sometimes with a "this domain is for sale" banner.
- For-sale landing page. The owner or a marketplace shows a price or an inquiry form.
- Under construction. A template or a "coming soon" page from a site builder.
- Email only. The domain has no website but has mail records and is used for mail.
- No response at all. The name is registered but does not answer on port 80 or 443.
Only the first four are typically called parked. Email-only and dead domains are separate cases, which is why a live-or-dead check and a parked check are complementary. The classification in TLDlive Lens keeps "parked" as one purpose category among others for the same reason.
DNS signals
You can often decide before fetching a page. Query the name servers and the address records:
- Name servers at a parking or registrar default service. Many registrars and parking companies use dedicated name servers for unused domains. The name server hostname frequently contains the service name. Learn how name servers map to providers in the guide to DNS name servers and providers.
- A record pointing to a shared parking IP. Thousands of parked domains share a handful of addresses. If a reverse lookup, or a search of other domains on that address, returns a very long list of unrelated names, it is a parking pool.
- CNAME to a parking host. Some services ask owners to add a CNAME that points to the parking platform.
- No A or AAAA record but an MX record. Likely an email-only domain.
- Missing delegation. A name that is registered but absent from the zone has no DNS at all. TLDlive's added-domain lists are derived from what appears in zones, so a registered but undelegated name does not show yet.
DNS signals are cheap and have the advantage of working for every domain without fetching content. Their weakness is churn: owners switch parking providers, so a hostname list needs maintenance.
HTTP signals
- Redirect chains. Parking services often redirect through one or more tracking hosts before landing on an ad page. A redirect to a domain-sale marketplace is a strong signal.
- Response headers. The Server header and custom headers can name the parking platform. Unusually short responses with a generic body are typical.
- Status behaviour. Parked pages mostly answer 200 for any path, including nonsense ones. A genuine site returns 404 for a random path such as
/zz-no-such-page. Requesting a random path is a cheap, discriminating test. - TLS. A certificate that does not match the hostname, or a certificate shared across many unrelated names, suggests a shared parking host.
Page content signals
Once a page is fetched, the content gives away most parking pages:
- Title or text such as "This domain is for sale", "Buy this domain", "Make an offer", "Domain parking", "Coming soon", or "Related searches".
- A page that is almost entirely ad blocks and keyword links, with no navigation or contact information.
- Script references to parking or ad-serving hosts, and a JavaScript tag manager whose only job is ad rendering.
- Almost no internal links: a real site normally links to its own pages. A page with one or two links in total is suspicious.
- The
meta name="robots"value set to noindex on pages that otherwise look empty.
How Lens classifies this: it combines parked-page patterns with schema.org types, Open Graph type, generator meta, detected technologies and keyword heuristics on the title and description. The title and description text are read locally for classification and are never sent anywhere. Only the resulting category label can be shared, and only if the user opted in; see the privacy policy for the exact fields.
Combining the signals
| Evidence | Weight | Notes |
|---|---|---|
| Name servers belong to a known parking service | High | Verify the list periodically |
| Redirects to a domain marketplace | High | Intent is explicit |
| Explicit "for sale" text | High | Could also be a genuine site that sells domains, so check for other content |
| Same IP as thousands of other domains | Medium | Shared hosting looks similar; check the page |
| 200 for random path | Medium | Some single-page apps do the same |
| Very few links and no contact details | Low to medium | Also true of new, small sites |
A good rule is to require one high-weight signal or two medium ones. Lower-weight evidence alone should produce "unknown", not "parked". False positives are costly because the label affects how someone treats a legitimate site; false negatives are cheap because a human looking at the page will catch them.
Why it matters in practice
Buying. A parked name whose owner shows a price is a negotiation, not an abandoned asset. A parked name with default registrar pages may be an unused registration that will lapse; the evaluation checklist for expired domains covers what to inspect before bidding on one that does.
Research. Statistics on "what websites run" are polluted by parking pages unless they are separated. That is why the methodology for new-domain technology analysis filters on the purpose category.
Security. Parked lookalike domains are lower priority than ones with live phishing forms, though they can be activated at any time. Registration age and registrar are found through RDAP.
A quick manual check
- Look up the name servers and note the provider.
- Open the domain in a browser. Note any redirect and the final hostname.
- Request a nonsense path and see whether it returns a 404.
- Scan the page for sale or ad language and count internal links.
- Check the registration date and expiry. A domain that expires soon and has never had a site is often a candidate to lapse.
The domain checker shows registration and DNS data in one place, and the TLDlive Lens popup adds the page-level purpose guess while you browse.
Sources
- RFC 9110, HTTP Semantics (status codes and redirection): rfc-editor.org
- ICANN, Registration Data Access Protocol overview: icann.org/rdap
- Google Search Central, soft 404 errors, for the "200 for any path" behaviour: developers.google.com
Frequently asked questions
Is a parked domain the same as an unused domain?
Not exactly. Unused is a state of the owner's plans; parked is a technical state in which the name resolves to a placeholder, an ad page or a sale page. An unused domain might also not resolve at all.
How can I see who owns a parked domain?
Registration data is available through RDAP and often redacted for privacy. If the domain is for sale, the sale page or the marketplace is the intended contact channel.
Can a parked domain still be dangerous?
Yes. Parked pages can redirect through ad networks that serve unwanted content, and the owner can replace the placeholder with a phishing page at any time. Treat newly registered lookalikes accordingly.
Does a for-sale banner mean the domain is cheap?
No. Asking prices vary enormously. Compare with registration price, age and comparable sales before you make an offer.