To find business leads worth pitching, look where businesses show up at the moment they need help, such as the week a new website goes live, then filter hard. Keep only the ones that are a real business, a fit for what you sell, missing something you can fix, and reachable by a person who reads email. Score what is left and write to the top of the list first.
This guide covers where to look, the five checks that separate a good lead from a name on a spreadsheet, a scoring sheet you can copy, and what to send once a lead passes.
What makes a business lead worth pitching?
A lead is any business you could contact. A lead worth pitching is one where you can answer yes to five questions:
| Test | The question | A lead that passes | A lead that fails |
|---|---|---|---|
| Real | Does it sell something, under its own name? | A new physio clinic with treatments and prices listed | A parked domain with a "this domain is for sale" page |
| Fit | Is it the kind of client you serve, in a language you work in? | A cafe, if you design sites for hospitality | A national bank, if you work alone |
| Timing | Did something change recently that creates work? | A site that went live this week | A site nobody has touched in years |
| Gap | Can you point to one specific thing missing that you fix? | No meta description, and you sell SEO | Nothing obvious, or only things you do not sell |
| Reachable | Is there an address a real person reads? | hello@ on the business's own domain | No email, no form, no social profile |
Most lists you find or buy are full of businesses that pass one or two of these. The work is throwing out the rest quickly, so you spend your writing time on the few that pass all five.
Where do you find business leads in the first place?
Start with sources that show a change, because a change is what creates a reason to buy. A directory listing tells you a business exists. A launch, a registration or a first ad tells you it is doing something new right now, and new things come with jobs nobody has done yet.
| Source | What it tells you | How fresh | Contact details |
|---|---|---|---|
| Certificate Transparency logs | A website has just been issued an HTTPS certificate | Minutes to hours | Usually on the site |
| Company registers | A company was just formed | Days | Rarely |
| Ad libraries (Meta, Google) | They have started paying for attention | Days | Through their site |
| Job posts | They have work nobody is doing yet | The day it is posted | Often a named person |
| Map and directory listings | The business exists | Can be years old | Varies |
| LinkedIn and local business groups | Owners asking for help or announcing a launch | The day they post | The person posting |
| Referrals from clients and partners | Someone trusts you enough to introduce you | Whenever they come | Introduced |
Certificate Transparency is the source most freelancers have never heard of. Publicly trusted HTTPS certificates are written to public logs, so a new website shows up there soon after it gets its certificate. You can search the logs for free at crt.sh. For a walk through each source with search tips, read how to generate new business leads without buying a list.
Directories are the weakest of these for this job. The businesses in them are real, but many are years old, often already have someone looking after their website, and anyone else who found the same directory can pitch them too.
How do you check that a lead is a real business?
Many new domains are not businesses you can sell to. Open the site and look for these signs before you spend another minute on it.
Throw it out if you see:
- A parked page, a "for sale" notice, or the hosting company's default page
- "Coming soon" and nothing else
- A template demo, with placeholder text such as lorem ipsum or "Your Company Name"
- A personal blog, a news or media site, or a directory that lists other businesses
- A charity, church, club or government body, unless those are the clients you serve
- A big brand's campaign site, or a subdomain of a company that already has a team
Keep it if you see:
- A business name, and the products or services it sells
- Prices, a menu, a booking link or a shop
- A real address, a phone number or an owner's name
- Copy that reads like someone wrote it for this business, not a template
A thin site is not a reason to throw a lead out. A business that launched yesterday may have one page and fifty words on it. The question is whether it is a business, not whether the site is finished. An unfinished site is often the reason it needs you.
How do you tell if the timing is right?
Timing decides how a business reads your message. A business in its first weeks is still making decisions about its site, its tools and who helps it. One that has been running for years has probably made them already.
Two free checks tell you most of what you need:
- When was the domain registered? Look it up with an RDAP or WHOIS tool. Most registries publish a creation date.
- When did it get its first certificate? Search the domain on crt.sh and scroll to the oldest entry.
Read the two together:
| Domain registered | First certificate | What it probably means | How to pitch |
|---|---|---|---|
| This month | This week | A new business, or a new brand from an existing owner | Launch help: the basics they skipped |
| Years ago | This week | An older domain getting its first HTTPS site, often a rebuild | Ask what changed, and pitch around the new site |
| Years ago | Years ago | An established site | Only with a strong, specific gap |
| This month | None yet | Registered but not live | Too early. Note it and check back in a week |
Some country domains do not publish a creation date at all. For those, the first certificate is your best clue.
Which website gaps make a good opening line?
A gap is something missing from the site that you can point at and fix. It becomes the opening line of your message, so it has to be specific, true, and something the owner can check in a few seconds. These six can all be seen from the homepage alone, mostly by right clicking the page and choosing View page source:
| Gap | How to spot it | What it costs the business | Who sells the fix |
|---|---|---|---|
| No meta description | No name="description" meta tag in the source | Google has no summary from the owner to use, so it picks text from the page, which may be a menu or a cookie notice | SEO people, web designers |
| No social preview image | No og:image tag in the source | Links shared on Facebook, LinkedIn or WhatsApp show no picture, or whatever the app grabs | Social media managers, designers |
| No favicon | A blank or default icon in the browser tab | The site looks unfinished in tabs and bookmarks, and search results show a generic icon | Web designers, brand studios |
| Images with no alt text | Product or content images with no alt attribute | Screen reader users get no description, and search engines learn less about the image | SEO people, developers |
| Old copyright year | The footer still says 2022 | The site looks unattended to a first-time visitor | Web designers, maintenance retainers |
| Pages over plain http | The address starts with http:// and the browser shows Not secure | Visitors see a warning on their first visit | Developers, web designers |
Google explains when it uses a page's own description and when it writes one in its guide to controlling snippets. An empty alt attribute is correct on purely decorative images, so only count it on images that show something.
Pick one gap, the one closest to what you sell. One problem the owner can check in ten seconds beats a ten-point audit they will never read.
What a homepage cannot tell you
Some things are tempting to pitch but cannot be proven from a homepage: whether the business tracks visitors, runs ads, collects emails or answers its contact form. Tracking often loads through a tag manager or the platform's own settings, so not seeing it in the source does not mean it is missing. If you want to talk about those, ask a question instead of stating a fact. "Are you tracking where visitors come from yet?" is safe. "You have no analytics" is a guess, and a wrong guess in the first line ends the conversation.
The same goes for the six above. Look at the live page yourself on the day you write. An owner who fixed it yesterday and gets an email saying it is missing will not read your second line.
How do you score leads so you know who to pitch first?
Once a lead passes the Real and Reachable tests, a quick score tells you which of the rest to write to first. Give each lead 0, 1 or 2 on five factors:
| Factor | 0 | 1 | 2 |
|---|---|---|---|
| Fit | Not your kind of client | Close to it | Exactly who you serve |
| Timing | Old and unchanged | Changed in the last few months | Launched or changed this week |
| Gap | None you sell | A gap next to what you sell | A gap that is your core service |
| Contact | None | A form or a social profile | An email on their own domain |
| Can pay | Hobby or side project | Unclear | Prices, staff or premises suggest a budget |
Write to anything scoring 8 or more first. Get to the 6s and 7s if you have time. Leave everything under 6.
Here is how it plays out on three made-up leads a social media manager found on the same morning:
| Lead | Fit | Timing | Gap | Contact | Can pay | Total | Decision |
|---|---|---|---|---|---|---|---|
| Harbor Physio: new clinic site this week, no social preview image, hello@ address | 2 | 2 | 2 | 2 | 2 | 10 | Pitch today |
| Northgate Plumbing: trading for years, moved to a new domain this week, footer says 2021, form only | 2 | 2 | 1 | 1 | 2 | 8 | Pitch today, and ask what changed |
| Bloom Florist: same site for years, nothing you sell is missing, form only | 2 | 0 | 0 | 1 | 2 | 5 | Skip for now |
Bloom Florist is a perfectly good business. It is just not a good lead for you this week, and the score says so before you spend twenty minutes writing to it.
Keep the scores in the same spreadsheet where you track messages and replies. After a few weeks you can see whether your 10s actually reply more often than your 7s, and change the weights to match what you see.
How do you find an email that will not bounce?
Look on the site in this order:
- The contact page and the footer
- The privacy policy and terms pages, which often list an address
- The about page, for the owner's first name
- The business's Instagram, Facebook or LinkedIn page
Prefer an address on the business's own domain, such as hello@ or the owner's name, over a webmail address you found somewhere else. Do not guess addresses like firstname@. A domain can accept mail while that one mailbox does not exist, and bounces count against your sending reputation, which affects the mail you send to real clients too. If you are unsure about an address, run it through an email verifier first. A verifier asks the business's mail server whether the mailbox exists, without sending anything. Some servers say yes to every address, so treat an "unknown" result as a no.
What do you send once a lead passes?
Keep the first message short, with four parts:
- One line that shows you looked: their name and one real detail
- The gap, and what it costs them in their terms
- One small offer that is easy to say yes to
- An easy way out
Here is what that social media manager might send to Harbor Physio:
Subject: Your link preview, Harbor Physio
Hi Dana,
I saw Harbor Physio's site went live this week. The page on what to expect at a first visit is a nice touch.
One small thing: the homepage has no preview image set. When a patient shares your link on WhatsApp or Facebook, it shows up with no picture, and a bare link is easy to scroll past.
I can add one sized for the main apps, usually in under an hour. Want me to send a mockup of how a shared link would look first?
If now is not the time, no problem at all.
Sam
It names one thing Dana can check by sharing her own link. It does not attach an audit or ask for a call. If there is no reply, send one follow-up four or five days later with something new in it, such as a second small gap or a tip she can use either way. Then stop. For more openings by service, see this cold email template for web design.
How many business leads should you work each day?
Five a day is plenty to start. Five well-chosen leads, each with one gap you can name, will teach you more than fifty generic sends. An hour a day is enough:
- 15 minutes: collect. Pull candidates from one or two sources.
- 20 minutes: check and score. Run the five tests, score what passes, and drop the rest.
- 25 minutes: write. Five short messages to your highest scores.
Log each one: business, source, score, gap, date sent, reply. After about three weeks your own numbers will show which sources, which kinds of business and which gaps get answers. Trust those over any average you read online, because they come from your niche and your writing.
Can a tool do the finding and checking for you?
Done by hand, collecting and checking are the slow parts. Many candidates turn out to be parked domains, test sites or old businesses, and it takes a few minutes each to find that out.
Vetted Leads does that part. It reads the public certificate logs as sites go live, keeps the ones that are real businesses and online stores, and lists what each homepage is missing, such as the six gaps in the table above. Every email in the feed was checked with the business's own mail server before it got there. As of 27 October 2026 the feed holds 63,574 leads, and 3,561 of them launched in the previous 24 hours. On the Pro plan, Freddy drafts a first message from the site's gaps, and you can edit it before you send it.
You can try it free with no card: 3 contacts to unlock, one time only, and the newest 50 leads every day. The plans are on the pricing page. You still decide which leads are worth your time. The scoring sheet above works the same way on leads from any source.
What mistakes make good leads go cold?
- Writing to everything that passes one test. A real business with no gap you sell is not a lead for you.
- Claiming a gap you did not check. Look at the live page on the day you write.
- Pitching an established business as if it were new. Check the dates first, because a ten-year-old firm on a new site needs a different message.
- Leading with yourself. "I am a designer with eight years of experience" is about you, so open with their business instead.
- Waiting. A new business fills its gaps week by week, and the first useful message has the best chance.
Pick one source today, find ten businesses that launched or changed this week, run the five tests, score what passes, and write to the top three.
Questions people ask
Where can I find business leads for free?
Look where businesses show up at a moment of change: public Certificate Transparency logs (searchable at crt.sh) for new websites, company registers for new companies, Meta's Ad Library for businesses that just started advertising, job posts for small firms hiring marketing help, and Google Maps or local directories, if you check the dates first. Referrals from happy clients are free too, and usually the warmest.
How do I know if a business lead is worth pitching?
Check five things: it is a real business that sells something, it fits the kind of client you serve, something changed recently (such as a site going live), it is missing one specific thing you fix, and there is an email address a person reads. If any answer is no, move on.
What is the difference between a lead and a qualified lead?
A lead is any business you could contact. A qualified lead is one you have checked: it fits your service, has a reason to buy now, has a gap you can name, and has a working contact. Only qualified leads are worth a personal message.
How many business leads should I contact each day?
Start small, around five well researched messages a day, each about one specific gap. That keeps every message personal and gives you enough data after a few weeks to see which sources and gaps get replies.
How do I find a business's email address without guessing?
Check the contact page, the footer, the privacy policy and terms pages, then the business's social profiles. Prefer an address on the business's own domain. Do not guess addresses like firstname@, and run any address you are unsure of through an email verifier before you send.