To look up who owns a website, run the domain name through ICANN’s free Registration Data Lookup Tool at lookup.icann.org. It returns registration details in seconds. The catch is that since 2018, most personal owner information has been redacted from those results, so a full answer usually means combining the ICANN lookup with clues on the website itself, public business filings, and, in rare cases, legal process.
Start With the ICANN Lookup
Go to lookup.icann.org and type in the full domain, including the extension such as .com, .org, or .net.1Internet Corporation for Assigned Names and Numbers. Registration Data Lookup Tool Spelling matters; one wrong character sends you to a completely different registration. The tool is free, needs no account, and pulls results directly from registry operators and registrars in real time.
As of January 28, 2025, ICANN sunsetted the older WHOIS service and made the Registration Data Access Protocol (RDAP) the definitive source for generic top-level domain registration data.2ICANN. ICANN Update: Launching RDAP; Sunsetting WHOIS Many registrars, including GoDaddy and Namecheap, still label their tools “WHOIS,” but they query the same underlying data through RDAP. If a third-party lookup returns nothing, try ICANN’s tool directly.
What the Lookup Actually Shows You
Results are grouped into a few categories.3ICANN. Registration Data Lookup Tool Frequently Asked Questions (FAQs)
- Domain information: the domain name, its registry ID, current status codes, and nameservers.
- Dates: when the domain was created, when it was last updated, and when it expires.
- Registrar information: the company through which the domain was registered, its IANA ID, and an abuse contact email and phone number. This tells you where the domain was bought, not necessarily who bought it.
- Contact information: fields for the registrant, administrative contact, technical contact, and billing contact. This is where the owner’s identity would appear if it were public.
The registrar’s abuse contact is always visible. If you need to report illegal content or intellectual property theft tied to the site, that address is your entry point to the company managing the registration.
Why the Owner’s Name Is Usually Hidden
If the contact fields read “REDACTED FOR PRIVACY,” that is the default, not an error. In May 2018, ICANN adopted its Temporary Specification for gTLD Registration Data, requiring registrars to redact personal registrant information from public lookups to comply with the European Union’s General Data Protection Regulation (GDPR).4ICANN. Temporary Specification for gTLD Registration Data The specification identifies nine fields that must be redacted unless the domain holder explicitly consents to publication, including registrant name, street address, city, postal code, phone number, and fax number.
Although GDPR is a European law, its practical effect has been global. ICANN acknowledged that if a registrar could not feasibly limit the redaction to European registrants, it could apply the same rules to all registrations worldwide.5ICANN. ICANN Board Approves Temporary Specification for gTLD Registration Data Most registrars took that option. Nearly every domain registered after mid-2018 shows redacted personal details regardless of where the owner lives.
On top of that, many owners use privacy or proxy services (once sold as add-ons like “Domain Privacy” or “WhoisGuard,” now bundled free with most registrations) that replace their personal contact information with a proxy company’s details. Between the regulatory redaction and widespread proxy services, the ICANN lookup will identify the owner on only a small fraction of domains, mostly large organizations that choose to publish.
Reading Ownership Clues off the Website Itself
When registration data is a dead end, the website’s own pages often say more than any external database. Most legitimate operators voluntarily publish identifying information to build trust.
Footer, About, and Contact Pages
Scroll to the bottom of any page. A copyright notice like “© 2026 Acme Holdings LLC” gives you a legal entity name to work with. The “About Us” page frequently names founders or leadership; a “Contact” page may list a physical address, phone number, or an email whose domain reveals a parent company different from the site you are looking at.
Terms of Service and Privacy Policy
These legal documents are the most reliable on-site source because they typically name the exact legal entity operating the site and the jurisdiction governing disputes. Google’s Terms of Service, for example, identify the contracting party as “Google LLC, organized under the laws of the State of Delaware, USA” and list its Mountain View, California address.6Google. Google Terms of Servicea> Look for the language near the top or bottom that identifies who “we” or “the company” refers to. That name is your bridge from a website to official business records.
Confirming the Company Through Business Filings
Once you have a company name from the site’s legal pages, you can identify the real people behind it through government business records. Every U.S. state keeps a searchable database of registered business entities, typically through the Secretary of State’s office. The portals let you search by company name, ID number, officer name, or registered agent name, and basic searches are generally free.
A typical result shows the entity type (LLC, corporation, limited partnership), the date of formation, its current status, and the registered agent, meaning the person or company designated to receive legal documents like lawsuits or subpoenas on the entity’s behalf. Many states also list officers, directors, or managing members. That connects the digital presence to specific individuals who carry legal responsibility.
If the website uses a trade name that does not match any registered entity, look for fictitious business name filings (sometimes called “DBA” or “doing business as” filings). These are usually filed at the county level and link a trade name to the underlying entity or individual. Many county clerks offer online search portals for these records.
Contacting the Owner Even When Data Is Masked
You are not fully cut off when the record is redacted. Registrars that provide privacy services typically offer a forwarding mechanism: either a masked email that relays messages to the domain holder, or a web-based contact form on the registrar’s website. The masked email usually appears in the RDAP results in place of the owner’s real address.
Identify the registrar from the lookup, then visit that registrar’s site and look for an “owner contact” or “domain inquiry” form. Some registrars forward messages reliably; others do not. For everyday purposes such as offering to buy a domain, reporting an issue, or asking permission, this is the lowest-friction path. Generic addresses on the domain itself, like admin@ or webmaster@, are worth trying too, though they are hit-or-miss.
Historical and Reverse Lookups for Harder Cases
Registration records were not always private. Before ICANN’s 2018 policy change, records for most domains were fully public, and some services have archived them for decades. If a domain was registered or renewed earlier, an archived snapshot may still contain the original owner’s name, email, and address.
DomainTools, for example, has tracked historical registration data since 1995 and lets users follow ownership trails, including records that predate current privacy protections. Historical lookups are generally subscription services, not free. They matter most when a domain has changed hands or when you need to establish who owned it on a specific date, such as in a trademark dispute.
Reverse lookups run in the opposite direction: you search by a person’s name, email, or phone number and get back every domain associated with that information. They are useful when you have identified one owner and want to find other sites they run. Because current registrations are mostly redacted, reverse lookups work best on pre-2018 data or on registrants who chose to publish. Like historical lookups, they are typically paid.
Using Legal Process to Unmask an Anonymous Owner
When the other methods fail and you have a legitimate legal claim, the court system can compel disclosure. These tools require legal filings and, in most cases, an attorney, but they exist for real harm involving copyright infringement, defamation, fraud, or similar actionable conduct.
DMCA Subpoena for Copyright Cases
If the issue is copyright infringement, 17 U.S.C. § 512(h) lets a copyright owner ask the clerk of any U.S. district court to issue a subpoena directing a service provider to identify an alleged infringer.7Office of the Law Revision Counsel. 17 USC 512 The filing requires a proper takedown notification identifying the infringing material, a proposed subpoena, and a sworn declaration that the information will be used solely to protect rights under copyright law. If the paperwork is in order, the clerk issues the subpoena without a full hearing, and the service provider must turn over the identifying information it has.
The tool is narrow. It applies only to copyright claims, not defamation, fraud, or other causes of action, and the notification must identify the copyrighted work and the infringing material with enough detail for the service provider to locate it.7Office of the Law Revision Counsel. 17 USC 512 A false declaration carries perjury consequences.
John Doe Lawsuits for Everything Else
For non-copyright claims like defamation, harassment, or fraud, the standard approach is a “John Doe” lawsuit, filed against an unnamed defendant. Once the case is open, the plaintiff can use the court’s subpoena power to compel the registrar, hosting provider, or other intermediaries to hand over the account holder’s identity. The placeholder is replaced with the real name and the case proceeds normally.
The process is more involved than a DMCA subpoena. Courts in most jurisdictions require the plaintiff to show that the underlying claim has enough merit to justify piercing the defendant’s anonymity. Some states also have pre-suit requirements, such as sending a retraction demand, which becomes awkward when you do not know who to send it to. An attorney experienced in internet litigation is practically essential.
Preserve evidence before filing. Websites change and posts get deleted. Timestamped screenshots and archived URLs (through tools like the Wayback Machine) create a record that survives even if the content disappears, and courts expect plaintiffs to have documented the harmful content before seeking the identity of the person who posted it.