To find out who owns a URL, run the domain through ICANN’s free Registration Data Lookup Tool at lookup.icann.org. The tool returns the current registrant on file in real time.1ICANN Lookup. ICANN Registration Data Lookup Tool Be ready for a disappointment, though: on most domains today, the registrant’s name, address, phone, and email are hidden behind a privacy redaction, and you’ll need to use an anonymized contact relay to reach the holder.
Running the Lookup
Go to lookup.icann.org and type in the bare domain only. Drop the “https://” and the “www.” A search for “example.com” works; a search for “https://www.example.com/pricing” does not. The tool pulls the registration record directly from the registry.
Most individual registrars also offer their own lookup portals, and these sometimes surface a bit of additional detail.2ICANN. Registration Data at ICANN You may still hear people call this a “WHOIS search.” The underlying protocol changed in January 2025, when ICANN officially retired WHOIS in favor of the Registration Data Access Protocol (RDAP).3ICANN. ICANN Update: Launching RDAP; Sunsetting WHOIS RDAP returns the same ownership data in a more standardized format and handles privacy redactions more cleanly. The name on the search box has changed; the question it answers hasn’t.
What the Record Is Supposed to Show
Under ICANN policy, a complete registration record identifies the registrant (the legal holder of the domain) by name, street address, city, country, phone, and email. It also lists an administrative contact, who makes business decisions about the domain, and a technical contact, who manages the server settings. Every record carries the registration date, the expiration date, and the date the record was last updated.4ICANN. RDAP Operational Profile for gTLD Registries and Registrars
Registrars are contractually obligated to collect accurate contact details and to keep them current. Providing false information, or ignoring a registrar’s accuracy inquiry for more than fifteen days, can be grounds for canceling the registration entirely.5ICANN. Registrar Accreditation Agreement
Watch the Organization Field
One quirk worth knowing when you read a record. If the “Registrant Organization” field contains a value, that organization is the legal holder of the domain, not the individual whose name may also appear on the same record. Under ICANN’s Registration Data Policy, the organization entry takes priority.6ICANN. Registration Data Policy So if you’re trying to figure out who you’d be dealing with for a purchase or a legal notice, read the organization line first.
Why Most Records Say “Redacted for Privacy”
If your lookup returns “REDACTED FOR PRIVACY” across the contact fields, the tool is working. Since the European Union’s General Data Protection Regulation took effect in May 2018, ICANN has required registrars to redact personal registrant data from public lookup results unless the registrant explicitly consents to publication. The redaction covers the registrant’s name, street address, phone, and email, along with the same details for the administrative and technical contacts.7ICANN. Temporary Specification for gTLD Registration Data
This applies globally to generic top-level domains such as .com, .net, .org, and the newer extensions, not just to European registrants. Expect most public lookups today to return little more than the registrar’s name, the creation and expiration dates, and the domain’s status codes. The era when you could pull a stranger’s home address off a WHOIS search is over.
Reaching an Owner Whose Details Are Hidden
Redaction doesn’t make domain holders unreachable. ICANN’s rules require every registrar to provide a way for third parties to contact the registrant through an anonymized email relay or web form, even when the personal data is hidden.8ICANN. ICANN Board Approves Temporary Specification for gTLD Registration Data On the lookup results page, look for a “contact domain holder” link that routes through the registrar. Your message forwards to the registrant’s real inbox without exposing the address to you.
If the relay goes unanswered, you have a few other paths. Many domain holders publish contact information directly on the website, usually on an “About” or “Contact” page, so check there before giving up. For domains that look parked or unused, the registrar’s aftermarket platform may show a “make an offer” button that routes your bid to the owner. Domain broker services will handle outreach on your behalf, which is useful when you’d rather not let the seller know how much you want the name. If a deal comes together, use a third-party escrow service so the money and the transfer release against each other.
Country-Code Domains Work Differently
The lookup tool and the rules above cover generic top-level domains. Country-code domains such as .uk, .ca, .au, .de, and .fr operate under the authority of each country’s designated registry, and the registration data may live in a completely different database with its own rules about what gets published and what gets redacted. If a standard ICANN lookup returns nothing for a country-code domain, go to the registry operator for that country code directly.
These registries often impose residency or local-presence requirements as well. A .au domain generally requires an Australian business number. A .us domain requires U.S. residency or citizenship. A .eu domain requires a connection to an EU member state. That won’t change your lookup, but it tells you something about who the owner is likely to be.
If the Owner Is Infringing a Trademark
Some people searching for a URL’s owner aren’t buyers; they’re trademark holders who’ve found their brand sitting on a domain they didn’t register. ICANN’s Uniform Domain-Name Dispute Resolution Policy (UDRP) offers an expedited alternative to court. You file a complaint with an approved dispute-resolution provider, and a panel of one or three arbitrators decides the case, typically within about 60 days.9ICANN. Uniform Domain-Name Dispute-Resolution Policy
Winning requires proving three things: the domain is identical or confusingly similar to your trademark, the registrant has no legitimate interest in the name, and the domain was registered and is being used in bad faith. Classic cybersquatting (someone registering “YourBrandName.com” to sell it back to you) is what the process was built for. Filing fees start at $1,500 for disputes involving one to five domain names with a single panelist through WIPO, the most widely used provider.10WIPO. Schedule of Fees under the UDRP
The UDRP only transfers the domain or denies the complaint. It can’t award money damages. If you need compensation, or the facts are more complicated than straightforward bad-faith registration, you’ll need to file a lawsuit in a court with jurisdiction. The UDRP preserves each party’s right to go to court before, during, or after the administrative proceeding.