The fastest way to find a website's publisher

The person or company running a website is usually listed in one of three places: the footer of the homepage, the "About Us" page, or the domain registration records. Start by scrolling to the bottom of the site's main page — most legitimate websites put their name, address, and contact information there. If that's blank, click "About Us" or "About" in the navigation menu. If neither of those works, use a WHOIS lookup tool to search the domain registration database.

A WHOIS lookup shows you who registered the domain name and when. This is public information by law. The most straightforward tool is WHOIS.com or ICANN Lookup (icann.org/whois), where you type in the domain name and get back the registrant's name, organization, and sometimes their address and phone number. Some domain owners pay extra to hide this information, but you'll still see the registrar — the company that sold them the domain — and that company can sometimes be contacted to pass along a message.

Key Takeaways

  • Check the website footer first, then the "About Us" page — most sites display their publisher's name and contact details in one of these two places.
  • A WHOIS lookup shows the domain registration records, which are public and include the registrant's name and sometimes their address.
  • If the owner's information is hidden, you can contact the domain registrar (the company that sold the domain) and ask them to relay a message.
  • For social media accounts, look for a "Contact Us" link or message the account directly — the platform does not publish owner information.

Reading the website footer and About page

The footer is the section at the very bottom of a webpage, below all the main content. On most professional and business websites, it contains the company name, a physical address, a phone number, an email address, or some combination of these. Scroll all the way down and look for text that says "© [Year] [Company Name]" or "About Us" or "Contact." This footer usually appears on every page of the site, so you only need to check the homepage.

If the footer is empty or vague, click the "About Us" or "About" link, usually found in the top navigation menu. This page typically explains what the site does and who runs it. Look for the organization's legal name, the names of founders or leaders, and any address or contact information. Some sites list multiple people; the publisher is usually the organization itself, not individual staff members.

If you still can't find a publisher listed anywhere on the site, that's a red flag. Legitimate businesses and organizations almost always display this information. Sites that hide their ownership are often selling something questionable or collecting data without clear consent.

Using WHOIS to find domain registration details

Every domain name is registered with a registrar — a company licensed to sell domains. That registration is recorded in a public database called WHOIS. To look it up, go to WHOIS.com or ICANN Lookup (icann.org/whois), type the domain name into the search box, and click search. You'll get back the registrant's name, the registrar's name, the date the domain was registered, and the date it expires.

The "Registrant" field is the person or organization that owns the domain. Sometimes this is the same as the website's publisher; sometimes it's a web hosting company or a privacy service. If you see a company name you don't recognize, search that company name online to learn what it does. If it's a privacy service like Domains by Proxy or Privacy.com, the actual owner has chosen to hide their identity, and you'll need to contact the registrar instead.

The registrar is listed as "Registrar" in the WHOIS results. Common registrars include GoDaddy, Namecheap, Google Domains, and Network Solutions. You can contact the registrar's support team and ask them to pass along a message to the domain owner, though they're not required to do so. Some will, some won't — it depends on the registrar's policy.

What to do when ownership information is hidden

Some domain owners pay extra for WHOIS privacy, which hides their name and address in the public database. When this happens, the WHOIS lookup shows the privacy service's information instead of the owner's. This is legal and common, especially for people who want to keep their personal address off the internet.

If the owner has hidden their information, you have a few options. First, check the website itself again — many sites that use WHOIS privacy still list their contact information on the "About Us" or "Contact Us" page. Second, contact the registrar and ask if they can pass along a message. Third, look for social media accounts linked to the site and try messaging through those. Fourth, if the site is selling something or offering a service, use their contact form or email address if one is provided.

If you're trying to report abuse or illegal activity, you can contact the registrar directly with details of the problem. Registrars have policies against hosting sites used for fraud, malware, or other crimes, and they may investigate even if the owner's identity is hidden.

Finding the publisher of a social media account

Social media platforms like Facebook, Instagram, Twitter, and TikTok do not publish the personal information of account owners. The platform itself knows who registered the account, but that information is private. To find out who runs an account, look for a "Contact Us" link in the account's bio or description, or send a direct message asking who you're talking to.

Some accounts belong to businesses or organizations that list their website in the bio. If they do, visit that website and use the methods above to find the publisher. If the account is for a public figure or celebrity, search their name online to find official websites or verified accounts. If the account is anonymous and has no contact information, you may not be able to find out who runs it — and that's by design.

Checking if a website is legitimate

A website's publisher information is one clue to whether it's legitimate, but not the only one. A real business or organization will list a physical address, a phone number, and an email address. They'll have an "About Us" page that explains what they do. They'll have a privacy policy that explains what data they collect. They won't ask for passwords or credit card numbers unless you're buying something, and they'll use HTTPS (look for the padlock icon in your browser's address bar) to encrypt your data.

If a site has no publisher information, no "About Us" page, no privacy policy, and no way to contact anyone, assume it's not trustworthy. If it asks for personal information but doesn't explain why, or if it pressures you to act quickly, those are also warning signs. Legitimate sites are transparent about who they are and what they want from you.

Frequently Asked Questions

Can I find out who owns a website if they've hidden their WHOIS information?

Not always. If they've paid for WHOIS privacy, their personal details won't show up in the public database. Your best options are to check the website itself for contact information, contact the domain registrar and ask them to relay a message, or look for social media accounts linked to the site.

What does the padlock icon in my browser mean?

It means the connection between your browser and the website is encrypted, so data you send (like passwords or credit card numbers) can't be read by someone intercepting your internet traffic. It's a good sign, but it doesn't mean the site is legitimate — a scam site can have HTTPS too.

Is WHOIS information always accurate?

No. People sometimes register domains with fake names or outdated information. WHOIS shows what was entered at registration, but it's not verified. If you need to confirm a business's real identity, check their business license or registration with your state's secretary of state office instead.

What if I find a website that's impersonating a real company?

Report it to the real company first — they have legal teams that handle this. You can also report it to the domain registrar, the hosting company, or the Federal Trade Commission at reportfraud.ftc.gov if it's being used for fraud or scams.