Maybe the perfect name for your business is taken but there is no website on it. Maybe a site is copying your content, or a supplier's domain looks suspicious. In each case the first question is the same: who owns a domain? A decade ago you could usually get a name, address and phone number in seconds. Today the answer is often "the details are private", but there is still plenty you can learn, and legitimate routes to reach the owner.
Start with a WHOIS or RDAP lookup
Every domain registration is recorded by a registrar (the company that sold the name) and a registry (the organisation that runs the extension, such as .com or .in). The public view of that record has traditionally been called WHOIS. For generic top-level domains like .com, .net and .org, the modern replacement is RDAP (Registration Data Access Protocol), which returns the same kind of data in a structured format. ICANN has made RDAP the authoritative source for gTLD registration data, but the word "WHOIS" is still used for the lookup in everyday language.
Run the domain through our WHOIS lookup. On the command line, whois example.com works on macOS and Linux. The useful fields are:
| Field | What it tells you |
|---|---|
| Registrar | Who the domain is registered through, and their abuse contact |
| Creation date | How long the domain has existed; a very new domain is a fraud warning sign |
| Expiry date | When it is due for renewal |
| Registrant organisation / country | Often still shown even when the person's name is hidden |
| Name servers | Which DNS provider or host the domain uses |
| Status codes | For example clientTransferProhibited (normal lock) or redemptionPeriod (expired) |
Why the owner's details are usually hidden
Since the EU's General Data Protection Regulation (GDPR) took effect in 2018, most registrars redact personal data in public registration records by default, for registrants worldwide rather than only in Europe. On top of that, many owners buy a privacy or proxy service that replaces their details with the service's own. So you will often see "REDACTED FOR PRIVACY" or the name of a privacy company where the owner used to be.
Redaction is not a sign of anything shady. It is the default for a large share of domains, including those owned by perfectly ordinary businesses.
Other clues to the owner
When the record is redacted, gather evidence from what the domain is actually doing:
- The website itself. Check the footer, "About", "Contact", privacy policy and terms pages. Businesses in many countries are legally required to identify themselves on their sites.
- The SSL certificate. Organisation-validated and extended-validation certificates include the company name. The SSL checker shows the certificate's subject details. Most certificates are domain-validated and show only the domain, though.
- DNS records. MX records reveal the email provider, and TXT verification records often reveal which services the owner uses. A DNS lookup takes seconds.
- Historical registration data. Commercial services keep archives of older WHOIS records, which may show the owner before redaction began.
- Web archives. Old snapshots of the site can show a previous business name or contact details.
How to contact a domain owner whose details are private
- Use the registrar's contact form or anonymised email. Registrars are expected to provide a way to reach the registrant, typically a web form or a forwarding email address shown in the record. Keep your message short and specific.
- Email common addresses on the domain, if it has MX records, such as the contact address published on the site.
- Use a domain broker if you want to buy the name. Brokers contact owners on your behalf without revealing who you are, which stops the price jumping because a known company is interested.
- Request disclosure for a legitimate reason. For gTLDs, ICANN operates a Registration Data Request Service through which parties with a legitimate interest, such as law enforcement or intellectual-property holders, can ask participating registrars for non-public data. Disclosure is not guaranteed.
If the domain is being used against you
For phishing, malware or fraud, you do not need to know the owner. Report the domain to the registrar's abuse contact listed in the record, and to the hosting provider (find it from the domain's IP address). Include evidence: URLs, screenshots and email headers.
For trademark disputes, where someone has registered a name confusingly similar to your brand in bad faith, the Uniform Domain-Name Dispute-Resolution Policy (UDRP) applies to gTLDs, and many country-code registries have their own dispute policies. These are formal processes with fees, and it is worth taking legal advice before filing.
Checking ownership of your own domains
This exercise is worth doing on your own domains too. Look them up and confirm:
- The registrant is your company, not a former employee, web designer or agency.
- The registrar account email is a shared, monitored mailbox rather than one person's inbox.
- The expiry date is comfortably in the future and auto-renew is on.
Disputes over who really owns a business's domain, often after a falling-out with a developer who registered it in their own name, are entirely avoidable with a few minutes of checking.
Key takeaways
- A WHOIS or RDAP lookup shows the registrar, dates, status and name servers for any domain.
- Personal details are redacted for most domains; that is normal, not suspicious.
- Reach a private owner through the registrar's contact form or a broker, and report abuse to the registrar and host.
- Make sure your own domains are registered to your organisation, not to an individual.