The fastest way to find a website owner is through a WHOIS lookup
When you visit a website, you're looking at a domain name — the address like example.com or newssite.org. That domain is registered with a company called a registrar, and registrars keep records of who owns each domain. You can search those records for free using a WHOIS lookup tool.
The catch is that many domain owners pay extra to hide their information. When that happens, you'll see the registrar's details instead of the owner's. But you'll still learn which registrar holds the domain, and sometimes that's enough to contact the owner through the registrar's abuse or support channels.
The most straightforward WHOIS tools are ICANN Lookup (icann.org/whois), which is run by the organisation that oversees domain registration, and Whois.com. Type the domain name into either one and you'll get back the registrant name, organisation, email, phone number, and registration date — if the owner didn't pay to hide it.
Key Takeaways
- WHOIS lookup tools show you who registered a domain name, though many owners pay to keep their information private.
- If the owner's details are hidden, you can still see which registrar manages the domain and contact them about abuse or concerns.
- The Internet Archive's Wayback Machine can show you older versions of a website, which sometimes contain contact information that's no longer visible.
- For businesses, checking the website's privacy policy, terms of service, or "About" page often reveals the company name and location before you need WHOIS data.
- If a website is hosting illegal content or scamming people, reporting it to the registrar or to law enforcement is more effective than trying to contact the owner directly.
What to do when WHOIS information is hidden
Privacy protection services let domain owners register anonymously. When you run a WHOIS lookup on a protected domain, you'll see the privacy service's details instead — usually something like "Privacy Service" or "Domains by Proxy" as the registrant name.
You can still contact the owner through the registrar. Look up which registrar holds the domain (this appears in the WHOIS results), then visit that registrar's website and find their abuse reporting form. GoDaddy, Namecheap, and Google Domains all have abuse contact pages. Describe your concern — whether it's spam, a scam, or copyright infringement — and the registrar will forward your message to the domain owner.
This route works best if you have a legitimate reason to contact the owner: you've been harassed, you've found your copyrighted work on the site, or you believe the site is breaking the law. Registrars take abuse reports seriously because they're legally required to respond to certain complaints.
Using the Internet Archive to find old contact information
The Wayback Machine (archive.org) stores snapshots of websites as they appeared on past dates. Older versions of a website sometimes show contact information, owner names, or business details that have since been removed or hidden.
Go to archive.org, type in the domain name, and you'll see a calendar of dates when the site was captured. Click on an older date — try going back several years if the site has been around that long. The archived version may show an "About" page with a real name, an email address, or a physical business address that's no longer on the current site.
This is particularly useful for tracking down the real owner of a site that's now using privacy protection, or for finding contact details when a business has removed them from their current website.
Checking the website itself for ownership clues
Before you run a WHOIS lookup, spend a minute looking at the website itself. Most legitimate businesses put their name, location, and contact information somewhere on the site — usually in the footer, on an "About" page, or in the privacy policy.
The privacy policy is especially useful. By law, websites that collect personal data from visitors must disclose who they are and how to contact them. Even if the privacy policy doesn't name the owner directly, it often lists the company name and a mailing address or email.
The terms of service page sometimes lists the company name and registration details as well. If you're trying to figure out whether a site is legitimate before you interact with it, this is often faster than a WHOIS lookup and tells you more about what the site actually does.
Understanding what WHOIS results actually tell you
A WHOIS lookup returns several pieces of information, and it's worth knowing what each one means. The registrant is the person or organisation that owns the domain. The registrar is the company that manages the registration — they don't own the domain, they just keep the records. The nameservers are the computers that direct traffic to the website's actual location.
The registration date tells you how long the domain has existed. A domain registered last week is more likely to be a scam or temporary project than one registered ten years ago, though that's not a may provide either way. The expiration date shows when the owner needs to renew the registration or lose the domain.
If you see a privacy service listed as the registrant, the actual owner paid extra to hide their identity. This is legal and common — many small business owners, activists, and privacy-conscious people use it. It doesn't mean the site is doing anything wrong, just that the owner wanted anonymity.
When to report a website to authorities instead
If you're trying to find a website owner because the site is hosting illegal content, running a scam, or harassing someone, contacting the owner directly is usually not the right move. Report it to the registrar's abuse team instead, or to law enforcement if the activity is criminal.
The FBI's Internet Crime Complaint Center (IC3) takes reports of online fraud and scams. The National Center for Missing and Exploited Children (NCMEC) handles reports of child exploitation. Your state's attorney general's office handles consumer fraud. These organisations have the legal authority to investigate and take action — you don't.
If you report abuse to the registrar and nothing happens within a reasonable time, you can escalate to ICANN, which oversees registrars and can force them to act. But this process is slow. For urgent safety concerns, law enforcement is the right channel.
Why some websites don't show up in WHOIS at all
Not every website has a traditional domain name in WHOIS. Some sites run on subdomains owned by larger companies — for example, a blog hosted on Medium or Substack doesn't have its own WHOIS entry because Medium and Substack own the main domains.
Sites hosted on free platforms like WordPress.com, Wix, or Squarespace work the same way. The platform owns the domain, and individual users rent space on it. If you're trying to find the owner of a site like "myname.wordpress.com", you won't find them in WHOIS — you'll need to look for contact information on the site itself or use the platform's reporting tools.
For these sites, the platform's terms of service usually require users to provide contact information, and the platform has a process for reporting abuse or contacting users. Start there instead of searching WHOIS.
Frequently Asked Questions
Can I find out who owns a website if they're using a VPN or proxy?
A VPN or proxy hides the visitor's location, not the website owner's identity. The domain registration information is public record (unless the owner paid for privacy protection), so a VPN doesn't protect it. If the owner used privacy protection when registering the domain, that's a separate choice from whether they use a VPN to browse the internet.
Is it legal to look up someone's WHOIS information?
Yes. WHOIS records are public by design — that's the whole point of the system. You can look up any domain's registration information without permission. What you do with that information matters: contacting someone based on WHOIS data is fine, but using it to harass or threaten them is not.
What if the WHOIS information looks fake or outdated?
Registrars are supposed to verify that registrants provide accurate information, but enforcement is inconsistent. Outdated information is common — people move, change email addresses, or forget to update their registration. If the information seems wrong, try contacting the registrar's abuse team with your concern, or look for current contact details on the website itself.
Can I find out who owns a website if it's registered in another country?
Most countries use WHOIS systems similar to the one in the United States, so you can look up domains registered anywhere. The information may be in a different language, and some countries have stricter privacy laws that hide more registrant details. Start with ICANN Lookup, which works across most countries, or search for the country-specific WHOIS registry if needed.
What should I do if I find the owner and they don't respond to my message?
If you've contacted the owner through the registrar's abuse system and received no response, your next step depends on why you're trying to reach them. For scams or illegal content, report it to law enforcement or the appropriate agency. For business disputes, consider consulting a lawyer. For general concerns, a second report to the registrar sometimes helps, but repeated messages to an unresponsive owner usually don't.