How to Find Out Who Owns a Domain Name

How to Look Up Who Owns Any Domain Name

You found a domain you want to buy, a website that's causing you problems, or a site you're not sure you can trust. The first question: who owns it?

The answer lives in WHOIS, the public directory of domain registrations. Every domain has a WHOIS record, and with the right tools, you can look it up in about 30 seconds.

Here's how—and what you'll actually find.

What Is WHOIS?

WHOIS (pronounced "who is") is a protocol and database system that stores registration information for every domain name on the internet. When someone registers a domain, their contact details are recorded in WHOIS.

Think of it as a public phone book for domain names. Except, as you'll see, many people have opted for an unlisted number.

WHOIS records are maintained by registrars (the companies you buy domains from) and registries (the organizations that manage TLDs like .com, .org, .io).

How to Do a WHOIS Lookup

That's it. No account needed, no fees. WHOIS lookups are free.

What You'll Find in a WHOIS Record

A WHOIS record contains several types of information:

Example WHOIS Data

Here's what a typical WHOIS record looks like (with privacy off):

Domain Name: example.com
Registry Domain ID: 2336799_DOMAIN_COM-VRSN
Registrar: Example Registrar, Inc.
Creation Date: 1995-08-14
Updated Date: 2024-08-14
Registry Expiry Date: 2027-08-13
Registrant Name: John Smith
Registrant Organization: Example Corp
Registrant Street: 123 Main Street
Registrant City: Springfield
Registrant State/Province: IL
Registrant Country: US
Registrant Email: john@example.com
Name Server: ns1.example.com
Name Server: ns2.example.com

The WHOIS Privacy Problem

Here's the catch: most domain owners today use WHOIS privacy protection.

When privacy is enabled, the registrant's personal information is replaced with the privacy service's details. Instead of seeing "John Smith, 123 Main Street," you'll see something like "Registration Private, Domains By Proxy, LLC."

What privacy hides:

• Registrant name and organization
• Street address
• Phone number
• Email address (replaced with a proxy email)

What privacy doesn't hide:

• Registrar name
• Registration dates (created, updated, expires)
• Nameservers
• Domain status codes

Getting Past WHOIS Privacy

If the owner's info is hidden behind privacy, you still have options:

• Use the proxy email. Privacy services forward emails sent to the proxy address. You can contact the owner—you just won't know who they are until they respond.
• Check historical WHOIS data. Services like DomainTools and WhoisXMLAPI store historical WHOIS records. The owner may have registered the domain before enabling privacy.
• Look at the website itself. Check the site's "About" page, contact page, or footer for identifying information.
• Check social media and business registrations. Sometimes you can find who's behind a domain through LinkedIn, corporate filings, or business directories.

Best WHOIS Lookup Tools

Not all WHOIS tools show the same information. Here are the most useful ones:

For a quick one-off lookup, ICANN's tool or who.is is fine. For research or bulk lookups, DomainTools or WhoisXMLAPI gives you more depth.

Common Reasons to Look Up Domain Ownership

You Want to Buy a Domain

The domain you want is taken, but maybe the owner would sell. WHOIS tells you who to contact. If privacy is enabled, use the proxy email—many owners respond if the offer is reasonable.

Legal or Trademark Issues

Someone's infringing your trademark or hosting content that's harming your brand. WHOIS helps you identify who's behind the domain so you can send a cease-and-desist or file a UDRP complaint.

Reporting Abuse

A domain is sending spam, hosting phishing pages, or distributing malware. WHOIS shows you the registrar (so you can report abuse) and sometimes the hosting provider (via nameservers).

Verifying a Website's Legitimacy

You're not sure if a website is trustworthy. WHOIS data gives you clues: how old is the domain? Is the registrant information hidden or consistent with what the site claims? A brand-new domain with privacy protection claiming to be an established business is a red flag.

Checking Domain Expiry

WHOIS always shows the expiration date. If you're interested in acquiring a domain, knowing when it expires tells you when it might become available.

GDPR and WHOIS: What Changed

In 2018, the EU's General Data Protection Regulation (GDPR) fundamentally changed WHOIS.

Before GDPR: Registrant contact details were publicly available by default for most domains. Privacy protection was optional (and often cost extra).

After GDPR: Registrars are required to redact personal data from public WHOIS for EU-based registrants. Many registrars extended this protection to all customers, not just EU ones.

The result: WHOIS data is significantly less detailed than it used to be. You'll still get registrar info, dates, and nameservers. But personal contact details for the domain owner are now hidden by default in most cases.

What WHOIS Dates Tell You

Even when personal details are hidden, WHOIS dates are always visible—and they're surprisingly informative:

Creation date: When the domain was first registered. Older domains generally have more credibility. A domain created last week claiming to be an established company is suspicious.

Expiration date: When the domain needs to be renewed. Domains expiring soon might be abandoned. Domains renewed for many years in advance suggest the owner is committed.

Updated date: When the WHOIS record was last modified. Recent updates could mean a transfer, ownership change, or renewal.

Tips for Using WHOIS Effectively

Check multiple WHOIS tools. Different tools pull from different data sources. If one tool shows limited info, another might show more.

Look at historical data. DomainTools stores years of WHOIS snapshots. You can see when ownership changed, when privacy was added, and what information was previously public.

Pay attention to nameservers. Even when everything else is hidden, nameservers reveal where the site is hosted. Cloudflare, AWS, or a shared hosting provider each tell you something different about the site operator.

Cross-reference with other data. Combine WHOIS data with Wayback Machine history, DNS records, and social media to build a fuller picture of who's behind a domain.

---

WHOIS won't always give you a name. But it always gives you clues.