To find the owner of a website, start with a free domain registration lookup at lookup.icann.org, then work through the site’s own pages, hosting records, and government business filings when the registration data is hidden. Most commercial domains now return redacted contact details, so identifying a real owner usually means stitching together clues from several sources, and in a few situations asking a registrar or a court to unmask the registrant.
Start With a Domain Registration Lookup
Every registered domain has an owner on record with a registrar, and ICANN runs a free public tool to query that record. Go to lookup.icann.org, type in the domain, and run the search.1Internet Corporation for Assigned Names and Numbers. ICANN Lookup When the data is available, you’ll see the registrant’s name, mailing address, email, and phone, along with the registration date, expiration date, and the registrar managing the domain.2Internet Corporation for Assigned Names and Numbers. Registration Data at ICANN
You may still see this called a WHOIS lookup. ICANN replaced WHOIS with the Registration Data Access Protocol (RDAP) in January 2025, but from the user’s side the lookup works the same way.3Internet Corporation for Assigned Names and Numbers. ICANN Update: Launching RDAP; Sunsetting WHOIS Even when every contact field is blank, the registrar name alone is useful: it tells you which company holds the account, which matters if you later send a legal notice or file a complaint.
What to Do When the Record Says “Redacted for Privacy”
If every field in the lookup reads “REDACTED FOR PRIVACY,” you haven’t done anything wrong. Since the European Union’s GDPR took effect in 2018, ICANN has allowed registrars to redact personal data from public results, and that became permanent policy in August 2025. Registrars may redact the registrant’s name, street address, postal code, phone number, and email, and may also redact the organization name and city at their discretion.4Internet Corporation for Assigned Names and Numbers. Registration Data Policy
You may also run into a privacy or proxy service, where the proxy company’s name and address appear in the record in place of the real owner’s. Either way, the public lookup won’t tell you who’s behind the site, and the next steps have to come from elsewhere.
Read the Site Itself
The website is often the best source when the registration record is a dead end. Check the obvious places first: the About page, the footer copyright line, and the contact page. Corporate sites commonly name the parent entity that operates the platform somewhere in those three spots.
Privacy policies and terms of service are more revealing. Federal law requires sites that collect personal information to disclose the entity responsible for that collection, so these documents typically name the legal entity, its jurisdiction of incorporation, and sometimes a physical address. When you need to separate the company that runs a site from the company that merely hosts it, the privacy policy is usually where the distinction appears.
The page source is worth a look too. Right-click, choose “View Page Source,” and search for meta tags such as “author” or “publisher.” Some content management systems write the owner’s name or organization into those tags automatically. Analytics and ad tracking IDs visible in the source can also be cross-referenced against other sites to spot a common operator.
Look at Older Versions of the Site
A current site may have been scrubbed, but older versions often weren’t. The Internet Archive’s Wayback Machine at web.archive.org stores snapshots of actual web pages going back years. Enter the domain, browse snapshots from different dates, and read the past About pages, copyright notices, and contact information that may have since been removed. This helps most when a site has changed hands and the current operator has erased references to previous owners.
Historical registration data is a separate archive. Before GDPR, most domain records were fully public, and commercial services such as DomainTools and WhoisXML API maintain archives of those older records. They charge fees, but they can trace a domain’s chain of ownership back to a time when real names were on file.
Trace the Hosting Provider
If you still can’t name the owner, you can at least identify the company that knows who pays the server bill. Nameservers stay visible in the registration record even when personal details are redacted, and they often give the host away directly. Entries like “ns1.bluehost.com” or “dns1.cloudflare.com” make identification trivial.
If the nameservers don’t name the host, find the domain’s IP address through DNS records or a ping, then run it through a reverse IP lookup. These tools show which company controls the server and sometimes reveal other sites hosted on the same address. When several sites share an IP and an unusual set of nameservers, there’s a strong chance they share an operator, which is how investigators connect seemingly unrelated sites to a single owner.
The hosting provider also matters when you need to report illegal content, phishing, or trademark infringement, because the host can disable material at the server level. Most hosts publish an abuse contact email on their website or in their own registration records.
Confirm the Company Through Public Filings
Once you have a company name from any of the previous steps, government records can tell you who stands behind it. Every state’s Secretary of State database holds formation documents for corporations and LLCs, listing officers, directors or managing members, and a registered agent authorized to accept legal documents. Most of these databases are searchable online for free.
If the site uses a distinctive brand name or logo, the U.S. Patent and Trademark Office’s trademark search system can connect that brand to its legal owner.5United States Patent and Trademark Office. Trademark Search A registered trademark filing lists the owner’s name, address, and the goods or services tied to the mark, which tells you whether the site operator is the trademark holder or a licensee.
For a publicly traded operator, the SEC’s EDGAR database goes deeper. Annual reports, proxy statements, and registration statements identify officers, major shareholders, subsidiaries, and principal offices. You can search EDGAR by company name, ticker, or CIK and filter by filing type or date; searching for the domain name itself sometimes surfaces filings that mention it.6U.S. Securities and Exchange Commission. EDGAR Full Text Search
Check the DMCA Designated Agent Directory
Federal copyright law requires any site that hosts user-generated content to designate an agent for copyright infringement notices and register that agent with the U.S. Copyright Office.7Office of the Law Revision Counsel. United States Code Title 17 – Section 512 The Copyright Office keeps a searchable directory of those agents at dmca.copyright.gov/osp.8U.S. Copyright Office. DMCA Designated Agent Directory
The filings include the service provider’s full legal name, address, phone number, and the agent’s contact information. Because they’re submitted to a federal agency to secure statutory liability protection, the information tends to be more reliable than what sits on the website itself. Not every site is listed, but major platforms, e-commerce operators, and content-hosting services almost always are.
Ask the Registrar to Disclose the Data
When the record is redacted and you have a legitimate reason to see it, ICANN runs a formal channel for requesting the hidden information. The Registration Data Request Service (RDRS) lets intellectual property professionals, cybersecurity researchers, law enforcement, and consumer protection advocates ask a registrar to reveal non-public registration data.9Internet Corporation for Assigned Names and Numbers. Registration Data Request Service
You create a free ICANN account, submit a request explaining why you need the data, and the system forwards it to the domain’s registrar. Registrars aren’t required to comply; they weigh each request against the registrant’s privacy rights. Requests backed by a trademark registration, evidence of fraud, or a pending legal matter are far more likely to succeed than general curiosity. The service doesn’t guarantee results, but it sits in a useful middle ground between a dead-end lookup and a lawsuit.
Subpoena the Registrar
When every other method fails and legal action is already on the table, a court order is the definitive way to unmask an anonymous owner. The usual path is filing a lawsuit against a John Doe defendant and issuing a subpoena to the registrar or hosting provider, compelling them to produce the subscriber’s billing records, contact information, and IP address logs. Registrars and hosts generally comply with valid subpoenas because ignoring one creates its own legal problems.
This route requires an attorney and a filing fee, so it only makes sense when the stakes justify the cost: trademark infringement, defamation, fraud, or similar matters where identifying the operator is essential. Under ICANN’s accreditation agreement, registrars are required to verify their customers’ contact information, so the data behind the redaction is more likely to be accurate than you might expect.10Internet Corporation for Assigned Names and Numbers. 2013 Registrar Accreditation Agreement
If You Suspect the Registration Data Is Fake
Registrars must verify a registrant’s email or phone within 15 days of registration, and if the registrant doesn’t respond, the registrar is required to suspend the domain.10Internet Corporation for Assigned Names and Numbers. 2013 Registrar Accreditation Agreement If a domain’s registration data looks deliberately false, which is a common sign of fraud or phishing, you can report the inaccuracy to the registrar or to ICANN. That can trigger a verification cycle forcing the registrant either to prove their identity or lose the domain, and in some investigations an accuracy complaint works faster than a formal legal proceeding.