To find the owner of a URL, run the domain through a free registration lookup like the one at lookup.icann.org. The search returns the registrar, registration dates, nameservers, and any contact details the registrant has made public. Privacy rules now hide most personal information by default, so identifying the actual person or company behind a site usually takes a combination of that lookup, clues on the website itself, hosting records, archived pages, and sometimes legal process.
Start With a Registration Lookup
ICANN, the organization that coordinates internet naming, requires registrars to provide public access to registration data for generic top-level domains like .com, .net, and .org. Its own lookup tool at lookup.icann.org is free and works on any domain.1ICANN. ICANN Lookup
A search returns a structured set of fields. The ones that matter for ownership are:
- Registrar: the company through which the domain was purchased, such as GoDaddy, Namecheap, or Cloudflare.
- Creation and expiry dates: when the domain was first registered and when the current registration runs out.
- Nameservers: the DNS servers handling the domain’s traffic, which often reveal the hosting provider.
- Registrant contact: the name, organization, and contact details of whoever registered the domain.
- Registrar abuse contact: an email address and phone number for reporting misuse.
The registrant contact section is where ownership lives. It’s also the section most likely to be blank.
Why the Registrant Field Is Usually Blank
Before 2018, these records were an open book. You could look up almost any domain and see the registrant’s name, mailing address, email, and phone number. That changed when the European Union’s General Data Protection Regulation took effect on May 25, 2018. ICANN responded by letting registrars redact personal data, replacing fields like name, street address, phone number, and email with “REDACTED FOR PRIVACY” or a generic web contact form.2ICANN. Temporary Specification for gTLD Registration Data Over 85% of large registration data providers began redacting records for European registrants, and more than 60% extended that redaction to non-European records as well.3NDSS Symposium. From WHOIS to WHOWAS: A Large-Scale Measurement Study of Domain Registration Privacy under the GDPR
ICANN’s permanent Registration Data Policy took effect on August 21, 2025. It requires registrars to publish a minimum set of data (domain name, registrar details, abuse contact, creation and expiry dates, nameservers, and status), but personal registrant details stay redacted unless the registrant consents to publication.4ICANN. Registration Data Policy
On top of that, most registrars offer privacy or proxy services, often bundled free with every registration. A privacy service keeps you listed as the registrant but swaps in a forwarding address. A proxy service goes further: the proxy company itself becomes the registered name holder, so its name appears in the record instead of yours.5ICANN. About Privacy/Proxy Registration Service Either way, the public record stops being useful for identification.
Read What the Website Says About Itself
When the registration record is a dead end, the site’s own pages are often more revealing. Check the “About” page, the “Contact” page, the footer, and any legal disclosures.
The copyright notice in the footer usually includes a legal name, which may be a corporation, an LLC, or an individual. The contact page sometimes lists a physical address, phone number, or formal company name that ties the site to a real-world entity.
Terms of Service and Privacy Policy pages can be even more useful. They frequently identify the specific legal entity responsible for the site, including its formal corporate name, jurisdiction of incorporation, and a registered address. A site might operate under a catchy brand while its Privacy Policy reveals it’s run by “Acme Holdings LLC, a Delaware limited liability company.” That formal name is what you need for everything else.
Trace the Hosting and IP Address
Every website is served from a computer with an IP address, and that address is assigned to an organization. Even when the registrant is hidden, identifying the host can narrow the field or at least give you a company to contact.
Find the IP address first with the nslookup or dig commands on any computer’s command line. Typing nslookup example.com returns the IP address the domain resolves to. Then run that address through the American Registry for Internet Numbers (ARIN) lookup at search.arin.net/rdap. The results show which organization was allocated that IP block and the associated point-of-contact records.6American Registry for Internet Numbers. Using Whois For addresses outside North America, equivalent registries cover other regions (RIPE for Europe, APNIC for Asia-Pacific).
If the site sits on a major cloud platform like AWS or Cloudflare, the ARIN result identifies the platform rather than the customer. For smaller hosting setups, it can point straight at the company running the server. Reverse IP lookups go a step further by showing other domains hosted on the same IP. In shared hosting, dozens of sites may sit on one server, and if most of the neighbors belong to the same company, you’ve likely found your owner.
Look at Who Owned the Domain Before
When a site has gone dark, changed hands, or scrubbed its identifying information, historical records can fill the gap. The Internet Archive’s Wayback Machine at web.archive.org is the standard tool. Enter a URL and select “Browse History” to see snapshots captured over the years.7Internet Archive Help Center. Using the Wayback Machine
The practical trick is to pull up archived versions of the “About,” “Contact,” or “Terms” pages. A site that’s privacy-protected now may have proudly displayed its founder’s name and address a decade ago. To see every file the Archive has captured for a domain, use the URL format web.archive.org/*/example.com/*.
Specialized domain history services track changes to the registration records themselves, keeping logs of previous registrant data from before privacy protections were switched on or before a transfer. Most charge a subscription or per-lookup fee. Seeing that a domain belonged to “John Smith at Acme Corp” three years ago, then quietly moved to a privacy-protected registration, often reveals a connection that current records hide.
Verify the Company Through a Business Registry
Once you have a company name from any of the steps above, verify it through official government records. Every state maintains a business registry, usually through the Secretary of State, where corporations, LLCs, and partnerships file formation documents. These are searchable online and free for basic lookups.
A successful search returns the entity’s filing status (active, dissolved, suspended), formation date, and state of incorporation. Most results also include the name and address of the registered agent (the person designated to accept legal documents on the company’s behalf) and sometimes a list of officers or directors.
Watch for the DBA problem. Many companies operate under a trade name, or “doing business as” name, that differs from their registered legal name.8U.S. Small Business Administration. Choose Your Business Name – Section: Doing Business As (DBA) Name A website called “TechBuddy” might be owned by “Springfield Electronic Accessories LLC.” If a search for the brand name returns nothing, pull the formal entity name from the site’s legal pages and search for that instead. DBA names are filed separately and don’t always surface in the main corporate index.
When You Need the Real Name for a Legal Reason
Public tools stop at the privacy wall. If you need the identity behind a protected domain for a trademark dispute, fraud investigation, or to serve legal papers, there are formal paths.
Subpoena to the Registrar
The direct route is a court-issued subpoena to the registrar or privacy service provider. These companies generally maintain policies for handling legal process and will disclose registrant information when served with a valid subpoena or court order. The process requires an existing or anticipated lawsuit; you can’t request a subpoena because you’re curious. An attorney files a motion, the court issues the subpoena, and the registrar’s compliance department produces the records.
UDRP for Trademark Infringement
If someone has registered a domain that infringes your trademark, ICANN’s Uniform Domain-Name Dispute-Resolution Policy offers an alternative to court. The UDRP is built into every registration agreement with an ICANN-accredited registrar.9ICANN. Uniform Domain-Name Dispute-Resolution Policy You file a complaint with an approved provider such as the World Intellectual Property Organization, and a panel decides whether the domain should be transferred or canceled.
Filing fees start at roughly $1,300 to $1,500 for a single-panelist decision on one or two domain names, with three-panelist proceedings costing roughly double. The only available remedies are cancellation or transfer of the domain. You can’t recover money damages through a UDRP proceeding.
Uniform Rapid Suspension
For clear-cut trademark abuse involving newer generic top-level domains such as .shop, .app, or .xyz, the Uniform Rapid Suspension system is faster. It doesn’t apply to .com or .net. The trademark holder must prove the case by clear and convincing evidence, the domain holder gets 14 days to respond, and an examiner issues a decision within five days after that. A successful complaint suspends the domain for the rest of its registration period rather than transferring it.
Check Trademark Records in Parallel
Domain ownership and trademark rights are separate but overlap often. A domain can infringe a trademark even if the registrant bought it legitimately. The United States Patent and Trademark Office maintains a searchable database of federally registered marks at tmsearch.uspto.gov.10United States Patent and Trademark Office. Search Our Trademark Database A search there shows whether someone holds a registered mark matching the domain name, which company owns it, and what goods or services the mark covers.
This cuts both ways. If you’re investigating a domain because you think it copies your brand, a trademark search confirms your registration and strengthens a UDRP or legal claim. If you’re researching a domain you want to buy, the same search can reveal that the name belongs to a company with the legal standing to take it from you after you’ve paid.