To find out who owns a website, start with what the site itself discloses, then move through domain registration records, state business filings, and trademark or DMCA registries. Each layer narrows the possibilities, and if the owner has deliberately hidden themselves, a court-ordered subpoena is the last resort. Most sites are traceable long before it gets to that.
Read the Site First
Spend five minutes on the website before touching any database. Commercial sites usually print a legal business name in the footer of every page, and that name is the key to everything else. Look for the “LLC,” “Inc.,” or “Corp.” suffix, because those confirm a registered entity exists in some state’s records. An “About Us” page often names founders or executives. A “Contact” page gives you an address, phone number, or email you can cross-reference later.
The most useful disclosures tend to sit inside the Terms of Service and Privacy Policy. Those documents almost always name the specific legal entity entering into the agreement with users, and that entity name is what you’ll search in government databases. If the site takes payments, the merchant name that shows up on your credit card statement is another lead. Even a site trying to stay anonymous often slips up in one of these places.
Look Up the Domain Registration
Every domain is tied to a registration record that includes the registrant’s name, organization, email, phone, and mailing address. The Internet Corporation for Assigned Names and Numbers (ICANN) oversees the system, and you can run a free lookup through ICANN’s own tool or any third-party service.1Internet Corporation for Assigned Names and Numbers. ICANN Lookup As of January 2025, ICANN officially replaced the old WHOIS protocol with the Registration Data Access Protocol (RDAP). The underlying data is the same, and most people still call the process a WHOIS lookup.2Internet Corporation for Assigned Names and Numbers. ICANN Update: Launching RDAP; Sunsetting WHOIS
Expect a lot of redacted fields. Many registrars sell privacy proxy services that replace the owner’s details with a forwarding service’s information, and some include that privacy free with every domain. ICANN also adopted rules after the EU’s General Data Protection Regulation took effect that require redaction of personal data for registrations connected to the European Economic Area.3Internet Corporation for Assigned Names and Numbers. Temporary Specification for gTLD Registration Data In practice, many registrars now redact by default for all customers, because it’s simpler than sorting out who qualifies.
A redacted record isn’t a dead end. The registrar’s name, creation date, and expiration date still show. The registrar identity matters, because that’s where a subpoena would eventually be directed if it comes to that.
Historical Records and Reverse IP
Privacy services can only hide the present. Archival services like DomainTools maintain registration snapshots going back to the mid-1990s, and many domains were registered years before their owners thought to turn on privacy. A historical lookup can surface a real name, email, or address from an earlier snapshot.
When domain data is locked down, the server itself can help. A reverse IP lookup shows every other domain hosted on the same IP address. If the owner runs multiple sites and forgot to enable privacy on one, you’ve found a link. Even when every domain uses privacy services, shared hosting arrangements, naming patterns, or identical content structures can tie sites to a common operator.
Search State Business Registries
Once you have an entity name from the footer, Terms, or domain record, search for it in a government business registry. Every state maintains a database through the Secretary of State’s office (or an equivalent agency) that holds formation documents for corporations, LLCs, and partnerships.4California Secretary of State. Business Entities Those filings name officers, directors, or LLC members. Basic searches are usually free; certified copies run anywhere from a few dollars to around $75 depending on the state.
The most useful line item is the registered agent, the person or service designated to accept lawsuits and official correspondence on behalf of the company. Every active entity must maintain one at a physical street address, and if the agent lapses, the state can administratively dissolve the entity.5South Carolina Legislature. Reasons and Statistics re: Administrative Dissolution of Business Corporations Many site owners use professional agent services, so the address won’t be the owner’s home, but it is a valid address for serving legal papers.
If the company is publicly traded, SEC filings on the EDGAR database go further, naming top executives, major shareholders, and the principal business address.
Check Trademark, Copyright, and DMCA Records
If the site uses a distinctive brand name or logo, someone likely registered it. The U.S. Patent and Trademark Office runs a public search at tmsearch.uspto.gov, which replaced the older TESS system.6United States Patent and Trademark Office. Trademarks Trademark records identify the owner by name and address, and they’re harder to fake than website disclosures because the application process requires verified identification.
The U.S. Copyright Office keeps a similar registry for written content, software, and visual designs.7U.S. Copyright Office. U.S. Copyright Office Anyone who knowingly makes a false statement of material fact in a copyright application faces a fine of up to $2,500 under federal law.8Office of the Law Revision Counsel. 17 U.S. Code 506 – Criminal Offenses That penalty makes copyright records more reliable than most self-reported information online.
An underused option is the DMCA Designated Agent Directory at the U.S. Copyright Office. Any site that wants safe harbor protection from copyright infringement claims under the Digital Millennium Copyright Act must register an agent to receive takedown notices, and that registration is public.9U.S. Copyright Office. DMCA Designated Agent Directory The directory lists the service provider’s name and the agent’s contact details, and because sites must keep the information current to hold their legal protection, it’s often fresher than domain records.
When Public Records Come Up Empty
If every public source is dry, the remaining path is a court order. It’s slow and expensive, but it’s sometimes the only way to identify an operator you intend to sue.
John Doe Lawsuits
If you don’t know the defendant’s identity, you can file a “John Doe” lawsuit naming the unknown person. The purpose isn’t to win immediately. It’s to get standing to issue subpoenas. Once the court authorizes discovery, you serve a subpoena on the platform or registrar that has the defendant’s account information. The platform typically produces an email and IP address. You then subpoena the internet service provider controlling that IP to get the subscriber’s real name and physical address.
Courts don’t rubber-stamp these requests. Most jurisdictions require a prima facie showing on your underlying claims before authorizing unmasking. Judges weigh your need for the information against the defendant’s privacy interest, and you generally need to show you have no other way to identify the person and that the information is essential to your claim.
Subpoenas to Registrars and ISPs
Domain registrars must comply with valid court orders directing them to release the identity behind a privacy proxy account. The process has grown more complex since GDPR, especially when the registrar is based in the EU, but U.S. courts still have authority to compel disclosure from registrars within their jurisdiction.10Internet Corporation for Assigned Names and Numbers. WHOIS and Registration Data Directory Services
Federal law prohibits ISPs from disclosing subscriber information without consent except in specific circumstances, one of which is a court order.11Office of the Law Revision Counsel. 47 U.S. Code 551 – Protection of Subscriber Privacy When a government entity seeks subscriber records, the standard is higher: clear and convincing evidence that the subscriber is reasonably suspected of criminal activity. For private litigants, courts apply a balancing test weighing the strength of the claims against the subscriber’s privacy interest.
If the Site Is Overseas
If the owner or hosting infrastructure sits outside the United States, federal courts can still help in some situations. Under 28 U.S.C. ยง 1782, a district court can order any person within its district to produce documents or testimony for use in a foreign legal proceeding.12Office of the Law Revision Counsel. 28 U.S. Code 1782 – Assistance to Foreign and International Tribunals and to Litigants Before Such Tribunals If an anonymous site’s hosting company, payment processor, or advertising network has a U.S. presence, you can potentially compel it to hand over identifying records even when the underlying dispute is in another country. The person compelled to produce records can still assert any legally applicable privilege.
Follow the Money
Even if domain records, hosting, and corporate filings are all hidden, the site almost certainly touches money somewhere. If it sells anything, the payment processor knows who’s receiving funds. If it runs ads, the ad network has an account holder on file. Those financial relationships are harder to obscure than domain records because payment processors are subject to federal know-your-customer and anti-money-laundering rules.
Public databases don’t expose any of this. But in litigation, subpoenas to payment processors and advertising networks are a well-established tool, and the account holder’s verified identity, bank details, and tax ID are all potentially discoverable. Short of a lawsuit, the merchant name on a credit card statement after a small purchase can itself be a useful lead that connects back to state filings.
Corroborate Across Sources
Identifying a website owner rarely comes from a single record. You might find a business name in the Terms of Service, confirm it through state filings, and discover the individual behind it in a trademark registration. Or you might start with a redacted domain record, pull a historical snapshot that reveals an email, and trace that email to a profile that names the owner. The strongest identification comes from matching facts across multiple records, because any single source can be outdated, incomplete, or deliberately misleading. Each layer you check narrows the possibilities and raises your confidence that you’ve found the right person or entity.