To find out who owns a website, start with ICANN’s free registration data lookup at lookup.icann.org, which queries the domain’s registrar in real time and returns whatever contact information is public. When the owner’s name comes back redacted, there are several reliable fallbacks: the site’s own Terms of Service and Privacy Policy, state business filings, federal trademark records, the DMCA designated agent directory, and archived versions of the site. If none of that works and you have a legal claim, a subpoena can compel disclosure.
Run a Domain Registration Lookup
Every domain name has a registration record kept by the registrar that sold it and the registry operator that manages the extension (like .com or .org). ICANN’s lookup tool at lookup.icann.org queries those records live.1ICANN Lookup. ICANN Registration Data Lookup Tool ICANN itself doesn’t store the data in a central database; the results come straight from the registrar when you search.
Even on heavily redacted records, certain fields are always public: the domain name, the registrar that sold it, the registrar’s abuse contact email and phone number, the creation date, the expiration date, the name servers, and the domain’s current status.2ICANN. Registration Data Policy Those details alone tell you a lot. The registrar name shows where the domain was bought, the creation date shows how long the site has existed, and the name servers often point to the hosting provider.
What To Do When the Owner Is Redacted
If the lookup returns “REDACTED FOR PRIVACY” where the owner’s name and address should be, that’s the default, not a glitch. After the European Union’s General Data Protection Regulation took effect in 2018, ICANN required registrars to redact personal data from public lookup results, and its permanent Registration Data Policy continues most of those requirements.2ICANN. Registration Data Policy
Under the current rules, registrars must redact the registrant’s name, street address, postal code, phone number, fax number, and email address when data protection rules apply.2ICANN. Registration Data Policy The country is always published. The state or province is published if it was collected. The organization name is sometimes visible, sometimes not, depending on how the registrar handles it. A domain registered to a business will often show the company name and country; a domain registered to an individual usually shows almost nothing personal.
Even when the direct email is hidden, registrars must provide either an anonymized forwarding email or a web form so you can contact the registrant without seeing who they are. Messages sent through that channel get forwarded to the actual owner. This is the most reliable way to reach someone when the record is redacted.
Check the Website Itself
Before chasing records, read the pages the site publishes about itself. The Terms of Service and Privacy Policy almost always name the legal entity that operates the site, because that entity is the one entering an agreement with every visitor. They often specify a jurisdiction for disputes and list a physical address. The copyright notice in the footer identifies who claims the content. An “About Us” or “Company Information” page sometimes goes further, naming parent companies or professional license details.
On-site disclosures can lag behind reality. A recently acquired company might still show its old parent in the footer for months. Cross-check what the site says against external records.
Search State Business Filings
When a company operates the site, state business registries can confirm the entity behind it. Every state’s Secretary of State (or equivalent office) maintains a searchable database of corporations, LLCs, and partnerships. Filings typically list the registered agent, the principal office address, and the names of officers or organizers. Most are free to search online.
These records also show whether the entity is in good standing, when it was formed, and whether it has changed names or merged. If you have the company name from the site’s Terms of Service or copyright notice, searching the appropriate state’s database confirms the entity is active and identifies who is authorized to receive legal documents on its behalf.
Search Federal Trademark Records
A website’s brand name or logo is often a federally registered trademark, and the registration record names the owner. The U.S. Patent and Trademark Office runs a free, searchable database.3United States Patent and Trademark Office. Search Our Trademark Database You can search by name, slogan, or design element.
Once you find a matching trademark, the Trademark Status and Document Retrieval system shows the owner’s name, correspondence address, and full filing history.4United States Patent and Trademark Office. Trademark Status and Document Retrieval If the mark has changed hands, USPTO assignment records show the chain of ownership. Trademark filings are fully public, so this route often works even when the domain record is redacted.
Check the DMCA Agent Directory
Any website that hosts user-generated content and wants Digital Millennium Copyright Act safe harbor protection must register a designated agent with the U.S. Copyright Office. That registration is public. You can search the directory at dmca.copyright.gov for any service provider’s designated agent and contact information.5U.S. Copyright Office. DMCA Designated Agent Directory
Each entry names the service provider operating the site and the agent authorized to receive copyright complaints. Not every website files one, since only sites that host third-party content need the safe harbor. But for platforms, forums, social media sites, and anything with user uploads, this is a reliable way to identify the operator.
Look at Archived Versions
The Internet Archive’s Wayback Machine at web.archive.org stores snapshots of websites going back decades. Enter a URL, pick a date, and browse the site as it appeared then. That’s useful for identifying a previous owner, pulling up an “About Us” page that has since been removed, or documenting a copyright notice that changed after an acquisition.
Commercial WHOIS history services do the same for registration records specifically, archiving past data so you can see who owned a domain before the current registrant, even if the record has been updated or redacted. These services charge fees and vary in depth. For most purposes, the Wayback Machine plus a current registration lookup is enough.
When You Need a Subpoena
Everything above relies on publicly accessible information. When privacy protections block every path and you have a legitimate legal claim, formal legal process is the remaining option.
For copyright infringement, federal law provides a streamlined route. Under 17 U.S.C. ยง 512(h), a copyright owner can ask the clerk of any federal district court to issue a subpoena ordering a service provider to disclose information identifying an alleged infringer.6Office of the Law Revision Counsel. 17 U.S. Code 512 – Limitations on Liability Relating to Material Online The filing requires a copy of the infringement notification, a proposed subpoena, and a sworn declaration that the information will only be used to protect the copyright. Once the clerk signs it, the service provider must turn over whatever identifying information it has.
Outside copyright, identifying an anonymous website operator usually means filing a lawsuit (sometimes as a John Doe action) and using court-issued discovery subpoenas to compel the registrar, hosting provider, or privacy service to disclose the registrant’s identity. This is slower and more expensive than the DMCA route, but it works for trademark disputes, defamation claims, fraud investigations, and other matters where you need to name a defendant before you can serve them.
Privacy and proxy services that replace the owner’s name in registration records are required to forward communications, and they are also subject to legal process. A court order or properly served subpoena directed at the privacy service will compel disclosure of the underlying registrant in most circumstances.