To check who owns a domain name, enter it into ICANN’s free lookup tool at lookup.icann.org. The results come back in seconds and show the registrar, the creation and expiration dates, the name servers, and in some cases the registrant’s name and contact details. Often, though, the owner’s identity is hidden behind a privacy or proxy service, and reaching the real person takes a few extra steps.
Running the Lookup
ICANN’s tool at lookup.icann.org pulls registration data directly from registry operators and registrars in real time.1ICANN. ICANN Lookup Type the domain into the search bar and hit enter. A few things to keep in mind so you don’t waste a search:
- Use the bare domain. Enter “example.com,” not “https://www.example.com” or “blog.example.com.” The lookup wants the root domain and its extension, nothing more.
- Get the extension right. The same name under .com and .org can belong to completely different people.
- Expect a CAPTCHA. Most lookup tools use one to block automated scraping. Clear it and results appear within seconds.
Third-party lookup sites also exist, often with extras like DNS history or reverse-search features. The underlying ownership data comes from the same registries, so the core information should match what ICANN returns.
Reading the Results
A typical result includes several blocks of data. The fields that matter most for identifying an owner:
- Registrant contact. The name, organization, and sometimes the address and email of the person or company that registered the domain. This is the legal holder of the registration rights.
- Registrar. The company through which the domain was registered, such as GoDaddy, Namecheap, or Cloudflare.
- Creation and expiration dates. When the domain was first registered and when the current term ends. Registrations for generic extensions like.com can run up to ten years at a time.2ICANN. COM Registry Agreement – Functional and Performance Specifications
- Name servers. The DNS servers that route traffic to the hosting provider. They don’t name the owner, but they show where the site is hosted.
- Status codes. Flags like “clientTransferProhibited” indicate the domain is locked against transfers, a standard security measure.
The registrant contact section is where most people look first, and where most people hit a wall.
When the Record Says “Redacted for Privacy”
If the registrant contact shows “REDACTED FOR PRIVACY” or lists a proxy service’s details instead of a real name, you’re seeing the effect of a shift that began in 2018. When the European Union’s General Data Protection Regulation took effect, ICANN adopted a Temporary Specification that cut back how much personal information registrars could publish.3ICANN GAC. WHOIS and Data Protection Only a limited subset of registration data is public now; the rest requires a layered-access request.
Even before GDPR, many registrants used privacy or proxy services their registrars offered. These services substitute the registrar’s or proxy company’s contact details for the registrant’s own. Cloudflare, for example, applies free WHOIS redaction to every domain registered through its service.4Cloudflare. Cloudflare Registrar Docs – WHOIS Redaction The result: most lookups for generic domains today come back redacted. Treat that as the default.
Redaction doesn’t mean the registrar lacks the data. Registrars are still required to collect and maintain accurate registrant information, and false details are treated as a material breach of the registration agreement.5ICANN. Keeping Registration Data Accurate The data exists. It just isn’t published.
Reaching an Owner Behind a Privacy Service
When the record points to a proxy rather than a person, you have a few options depending on why you want to make contact.
Go Through the Proxy Service
Under the 2013 Registrar Accreditation Agreement, privacy and proxy providers must publish an abuse and infringement point of contact, disclose their business contact information, and describe how they handle communications and complaints.6ICANN. About Privacy/Proxy Registration Service Most services will forward a legitimate inquiry to the registrant without revealing who they are. Look on the proxy service’s site for a contact form or forwarding email.
Submit a Request Through ICANN’s RDRS
ICANN runs a Registration Data Request Service (RDRS) that gives people with a legitimate interest a standardized way to request nonpublic registration data for generic domains.7ICANN. Registration Data Request Service It’s aimed at intellectual property professionals, law enforcement, cybersecurity researchers, and others who can show a genuine need. The workflow: confirm with the public lookup that the data isn’t already available, then file a structured request at rdrs.icann.org using an ICANN account.8ICANN. Home – Registration Data Request Service The request routes to the registrar, which decides whether to disclose. Approval isn’t guaranteed; the registrar weighs your stated interest against the registrant’s privacy.
Use Legal Process
For trademark disputes, copyright claims, or other legal matters, a court-issued subpoena is often the most direct route. The DMCA lets a copyright owner ask a federal court clerk to issue a subpoena compelling a service provider to disclose an alleged infringer’s identity.9Copyright Alliance. Finding Online Copyright Infringers This generally means working with an attorney and filing paperwork with a U.S. district court.
Country-Code Domains Follow Different Rules
The approach above applies to generic top-level domains like .com, .org, and .net, which ICANN oversees. Country-code extensions, the two-letter ones like .uk, .de, .ca, and .au, operate under separate governance. Each country’s designated operator sets its own registration policies, display rules, and complaint procedures, and ICANN’s compliance department has no role in those areas.10ICANN. About ccTLD Compliance
Some country registries are quite open. Nominet, which runs .uk, offers public lookups. Others, especially in jurisdictions with strong data protection laws, redact by default. If you need ownership data for a country-code domain, start with the IANA Root Zone Database, which lists the operator and contact information for every country extension, then use that operator’s own lookup tool and follow its policies.
Checking Historical Ownership
A standard lookup only shows the current registrant. If you want to know who owned a domain previously, say when vetting a domain before buying it or researching past activity, you need a historical WHOIS service. These archives maintain past registration snapshots, sometimes going back to the mid-1980s. Pre-2018 records are especially useful because they often contain full, unredacted registrant details from before GDPR-era privacy changes.
Historical services can show every past registrant, registrar change, name server update, and contact modification. Some also offer monitoring that emails alerts when a registrant’s details change, which helps with brand protection or competitive research. DomainTools, for example, runs a registrant monitor that parses new records daily and flags domains matching parameters like a contact name, email, or postal code.
Other Ways to Identify a Domain Owner
When the record is locked behind a privacy service and you don’t have grounds for a formal data request, a few indirect approaches often turn up useful information.
Read the Website
An “About Us” page often names the operating company. Terms of service and privacy policies usually identify the governing entity and the jurisdiction where it’s incorporated. Copyright notices in the footer tend to reflect the current rights holder. None of this is guaranteed to match the domain registrant, since a company can run a site on a domain registered by someone else, but it’s a reasonable starting point.
Check the DNS Records
DNS TXT records can hint at who controls a domain. Companies often add verification records for services like Google Workspace or Microsoft 365, which look something like “google-site-verification=abcdef123.” These prove that someone with DNS access verified ownership with that service and can suggest which platforms the owner uses. You can query TXT records with free DNS lookup sites or command-line tools like “dig” or “nslookup.”
Search Business Registries
If the site identifies a company and you want to verify it, most states maintain online business entity databases where you can search for the registration, registered agent, and officers. These searches are usually free or carry a small fee.