To find out who owns a website, start with a free domain registration lookup at lookup.icann.org, which returns the registrant’s name and contact details when they aren’t hidden. When the record is redacted, you can usually identify the owner by combining clues from the site itself, state business filings, SSL certificates, technical fingerprints, and historical archives. If every public method fails and you have a legal claim, a court can compel the registrar or hosting provider to disclose the owner’s identity.
Start With a Domain Registration Lookup
Every domain is tied to a registration record listing the owner’s name, organization, address, email, phone, the registrar managing the domain, and the creation and expiration dates. ICANN’s free lookup pulls this data in real time from registrars and registry operators.1ICANN Lookup. ICANN Lookup As of January 2025, ICANN replaced the older WHOIS protocol with the Registration Data Access Protocol (RDAP), which supports secure access, internationalized characters, and more structured data.2ICANN. ICANN Update: Launching RDAP; Sunsetting WHOIS Many lookup tools still use the “WHOIS” label, but most queries now run through RDAP underneath.
When a domain’s registration data is fully visible, this one lookup often answers the question. In practice, though, most results come back partial or fully redacted.
Why Most Lookups Come Back Redacted
Two things hide registrant data. First, owners routinely buy privacy or proxy services from their registrar that replace personal details with a shielding company’s contact information. Second, registrars themselves now redact personal fields by default to comply with the European Union’s General Data Protection Regulation (GDPR). The World Intellectual Property Organization notes that since GDPR took effect, many registrars have redacted the registrant’s name, email, and phone number from public records, making it significantly harder for trademark holders and others to identify domain owners.3World Intellectual Property Organization. Q&A: Domain Name Registrant Data and the UDRP
Redaction doesn’t mean the data is gone. ICANN requires registrars to maintain a way for third parties to contact registrants without revealing their identity, and some registrars offer a web form that forwards your message to the registrant’s email on file.4Cloudflare. WHOIS Redaction For more formal requests, ICANN runs the Registration Data Request Service (RDRS), a centralized system where consumer protection advocates, intellectual property professionals, law enforcement, cybersecurity researchers, and others with a legitimate interest can submit standardized requests for nonpublic registration data. The system forwards the request to the registrar, which then decides whether to disclose.5ICANN. Registration Data Request Service There is no universal standard for what qualifies as a sufficient basis, and registrars apply their own internal processes.
What the Website Tells You About Itself
Before chasing databases, read what the site voluntarily publishes. The “About Us” or “Contact” page frequently names the company or individual behind it, often with a physical address. The homepage footer usually carries a copyright notice (“© 2026 Acme Corp”), and the entity named there is typically the legal owner or operator. A copyright notice isn’t legally required and doesn’t prove ownership on its own, but it’s a reliable starting point.
Privacy policies and terms of service pages often reveal more. Various federal and state transparency laws require sites that collect user data to post a privacy policy, and these policies typically name the company responsible. If the site is run by a subsidiary, the parent company’s name may appear here too.
Sites that promote products through affiliate relationships or endorsements must also disclose material connections under the FTC’s Endorsement Guides. If there’s a financial relationship between the operator and a promoted brand, that connection should be disclosed clearly and conspicuously.6Federal Trade Commission. FTC’s Endorsement Guides: What People Are Asking Those disclosures sometimes name the corporate entity behind the site or expose ownership relationships that aren’t obvious from the homepage.
Verify a Company Name in Business Records
Once you have a company name or a “doing business as” designation from any of the methods above, government databases let you verify who actually controls the entity. Every state maintains a Secretary of State business registry (or equivalent) where you can search for corporations, LLCs, and partnerships. Filings typically list the entity’s legal standing, formation date, names of corporate officers or managing members, and the registered agent designated to accept legal documents. Most state registries are searchable online at no cost; certified copies carry a small fee that varies by state.
The registered agent listing is especially useful if you need to serve legal papers. Every formally organized business must designate someone with a physical address (not a P.O. box) available during business hours to receive lawsuits and official correspondence. Even when a site owner hides behind layers of LLCs, the registered agent is still a real person or company you can locate.
One avenue to rule out: the Corporate Transparency Act originally required most U.S. companies to report their beneficial owners to the Financial Crimes Enforcement Network (FinCEN). Under an interim final rule published in March 2025, all domestic entities are now exempt from this reporting requirement. Only foreign companies registered to do business in the U.S. must file beneficial ownership reports.7Financial Crimes Enforcement Network. Beneficial Ownership Information Reporting For most U.S.-based website owners, FinCEN’s database won’t help.
What SSL Certificates Reveal (and Don’t)
SSL certificates can identify a site’s owner, but only certain types. Three validation levels exist, and the distinction matters. Domain Validated (DV) certificates, by far the most common, verify only that the applicant controls the domain. Clicking the padlock and inspecting a DV certificate’s details shows no organization name at all.8DigiCert. What’s the Difference Between DV, OV and EV SSL Certificates
Organization Validated (OV) and Extended Validation (EV) certificates are different. The certificate authority verifies the applicant’s legal identity before issuing them, so the Organization field in the certificate details shows the actual company name. EV certificates get the most rigorous vetting and display the parent company’s details. If you check a certificate and see an organization name, you’ve found a verified legal entity. If the field is blank, the site uses a DV certificate and this method won’t help. Banks, large retailers, and government sites tend to use OV or EV. Smaller sites and personal blogs almost always use DV.
Technical Fingerprints That Connect Sites
When the obvious methods come up empty, the site’s technical infrastructure can still connect it to an owner through indirect clues.
Shared Tracking Codes
Most websites embed analytics and advertising tracking codes in their source. Google Analytics IDs (formatted as G-xxxx, UA-xxxx, or GT-xxxx), Google Tag Manager containers (GTM-xxxx), and AdSense publisher IDs (PUB-xxxx) are each tied to a single Google account. View a page’s source, find one of these IDs, then use a reverse analytics tool to see every other site using the same ID. When a site with hidden registration shares a tracking code with a site whose owner is publicly known, you’ve linked them. AdSense publisher IDs are especially useful because they also appear in a site’s publicly accessible ads.txt file.
Reverse IP Lookups
Every website sits on a server with an IP address, and multiple domains often share one IP on shared hosting. A reverse IP lookup shows all the other domains at that address. If your target has privacy protection but another domain on the same server doesn’t, you may find a registrant name through the neighbor. This technique is less reliable for large shared hosts where thousands of unrelated sites share one IP, but it works well for smaller hosts or dedicated servers where related sites cluster.
Source Code Metadata
Viewing a page’s source sometimes turns up developer comments, meta tags, or embedded copyright notices naming the company or web agency that built the site. These aren’t legally binding proof of ownership, but they give you another name to research. Header information and HTML comments occasionally include internal project names or client references that developers forgot to strip before launch.
Historical Records When Current Ones Are Hidden
Current registration data may be redacted, but older records often aren’t. Commercial WHOIS history services maintain archives of past registration snapshots, sometimes going back years before GDPR-era redactions. If a domain was registered or transferred before privacy services became widespread, older records may still show the original registrant’s full name and contact details.
The Internet Archive’s Wayback Machine serves a different purpose: it captures snapshots of the site’s actual content over time. An older “About Us” page, footer, or contact page may list the owner’s name even if the current version no longer does. For legal proceedings, the Internet Archive offers an affidavit request process where a representative can authenticate a specific archived page, confirming the URL, timestamp, and integrity of the preserved content.9Internet Archive. Using the Wayback Machine Archived pages aren’t self-authenticating in court, so this affidavit step matters if you plan to use historical content as evidence.
If a site’s content has been formally registered with the U.S. Copyright Office, that registration names a legal claimant. The Copyright Public Records Portal covers registrations from 1898 to the present and is searchable online.10U.S. Copyright Office. Search Copyright Records: Copyright Public Records Portal Most sites don’t register their content, but larger publishers and media companies often do.
Legal Tools to Force Disclosure
When every public method fails and you have a legitimate legal claim against a website owner, courts can compel disclosure. The path depends on the nature of your claim.
DMCA Subpoena
If someone is infringing your copyright, the Digital Millennium Copyright Act provides an expedited subpoena process under 17 U.S.C. § 512(h). You file a request with the clerk of any federal district court, including a copy of a takedown notification, a proposed subpoena, and a sworn statement that the information will only be used to protect your copyright. If the paperwork is in order, the clerk issues the subpoena without a judge’s approval, and the service provider must then disclose the infringer’s identity.11Office of the Law Revision Counsel. United States Code Title 17 – Section 512 The process is fast and doesn’t require filing a full lawsuit first.
One important limitation: federal courts have held that this expedited subpoena only works against service providers that host or store content, not against providers that merely transmit data (like internet access providers). If your target falls into the second category, you’ll need a full lawsuit instead.
John Doe Lawsuits
For claims beyond copyright, or when the DMCA subpoena isn’t available, you can file a lawsuit against an unknown defendant listed as “John Doe.” After filing, you ask the court for permission to conduct early discovery, typically a subpoena to the website’s hosting provider, registrar, or payment processor demanding the account holder’s identifying information. The provider usually notifies the anonymous defendant, who then has a window to file a motion to block disclosure. A judge weighs the plaintiff’s need against the defendant’s privacy interests before deciding whether to order the reveal.
John Doe cases are slower and more expensive than a DMCA subpoena, with filing fees, attorney involvement, and judicial oversight at every stage. They are the only option when the dispute involves defamation, fraud, trademark infringement, or other claims outside the DMCA’s copyright framework.