- Step by step: look up a domain owner
- What the record has to show, and what it can hide
- WHOIS is gone for most domains: RDAP replaced it
- When the owner is hidden behind a privacy service
- Contacting a redacted owner the right way
- Legal and security requests: ICANN's RDRS
- Country-code domains follow their own rules
- My verdict
- Frequently asked questions
To find out who owns a domain, run it through a free registration data lookup such as ICANN Lookup, which reads the official RDAP record. You'll always see the registrar, the creation date and the registrant's country, but the owner's name and email are usually redacted, so the record points you to the registrar's contact form or disclosure process instead.
That last part is where most people get stuck. They expect an old-style WHOIS record with a name, phone number and home address, and they get a page full of the word 'redacted'. It isn't broken. It's the rules working as designed, and there are still several legitimate ways to reach the person behind the site.
Step by step: look up a domain owner
- Open ICANN Lookup (or your registrar's own lookup tool) and type the bare domain, such as example.com, with no https or page path.
- Read the registrar line first. That's the company the domain is registered through, and it's the route to the owner when the details are hidden.
- Check the creation date, the expiry date and the domain status. They tell you how long the site has existed and whether it's about to lapse.
- Look at the registrant fields. Country is always shown. Organisation appears only if the owner agreed to publish it.
- If the name and email are redacted, use the email address or web form the registrar publishes in the record. It forwards your message without revealing the owner's address.
- Check the website itself: the about page, contact page, terms and privacy policy often name the legal business behind it.
What the record has to show, and what it can hide
Since 21 August 2025, ICANN's Registration Data Policy sets out exactly what registries and registrars of generic domains (.com, .net, .org, .shop and the rest) must publish. Here's the split, taken from the policy itself:
| Data element | Status under the policy |
|---|---|
| Domain name, registrar, registrar URL | Always published |
| Creation date and expiry date | Always published |
| Registrar abuse contact email and phone | Always published |
| Domain status and name servers | Published (name servers if collected) |
| Registrant country | Always published |
| Registrant state or province | Published if collected |
| Registrant organisation | Published only if the owner agrees |
| Registrant name, street, phone, email | Redacted where the law requires it, or where the registrar has a commercially reasonable purpose |
| Registrant email when redacted | Replaced by an email address or web form that reaches the owner without identifying them |
So even a fully redacted record tells you three useful things: who the registrar is, how old the domain is, and which country the owner gave. For outreach, that's often enough to work out whether you're dealing with a real business or a parked name.
WHOIS is gone for most domains: RDAP replaced it
If an old guide tells you to type 'whois' into a terminal, it's out of date for most domains. ICANN describes RDAP (Registration Data Access Protocol) as the replacement for WHOIS. It delivers the same kind of registration data in a standard format, with support for international characters and secure access.
ICANN also says that as of 28 January 2025, generic domain registries and registrars are no longer required to run WHOIS services, with .com, .name and .post listed as exceptions. In practice, a modern lookup tool queries RDAP for you, so you don't need to know which server to ask.
When the owner is hidden behind a privacy service
Some owners use a privacy or proxy service from their registrar. In that case the policy says the full registration data of the privacy service is published instead, which may include a pseudonymised email that forwards to the real owner. You still can't see the person, but your message can reach them.
If you want to understand what that layer protects, I've covered it in plain English in my guide to what WHOIS privacy hides and what it doesn't.
Contacting a redacted owner the right way
Here's the order I'd follow if you need to reach someone about a domain, whether it's a partnership, a link request or a domain you'd like to buy:
- Use the website's own contact details first. A business that wants to be found usually lists them.
- Send a short, specific message through the registrar's contact form or forwarding email from the lookup record. Say who you are and why you're writing in the first two lines.
- Look for the people behind the business on LinkedIn or the company's team page, then find their work email. Tools for that job are compared in my roundup of RocketReach alternatives for finding contact details.
- If you have a legal reason (trademark misuse, fraud, a security problem), use the registrar's disclosure request process. The policy requires registrars to link to it from their homepage.
Legal and security requests: ICANN's RDRS
ICANN runs the Registration Data Request Service (RDRS) for people with a legitimate interest in non-public data: consumer protection advocates, cybersecurity specialists, government officials, intellectual property professionals and law enforcement among them. It gives requests a standard format, lets you upload legal documents and track progress, and sends the request to participating registrars. You need an ICANN account to use it.
Two caveats matter. Registrars decide whether to disclose, so a request isn't a guarantee, and not every registrar takes part. ICANN's Board has kept RDRS running for up to two more years after the pilot ended in November 2025 while longer-term policy work continues.
Want AI doing the heavy lifting in your marketing?
I build the systems that handle the boring 80 percent, so you get your week back. Done properly, with the human kept in.
Country-code domains follow their own rules
Everything above covers generic domains under ICANN's policy. Country-code domains such as .uk, .de or .ca are run by their own national registries, which set their own rules on what's shown. If ICANN Lookup doesn't give you a full answer for one of those, go to the national registry's own lookup page.
My verdict
Don't waste time hunting for a hidden name in the registration record. Read what's always published (registrar, age, country), then go through the front door: the site's contact page, the registrar's forwarding form, or the person's work email. For anything legal, use the formal disclosure route and keep a record of what you sent.
Want to know how old the site is too? I've covered that in my guide to checking domain age.
Frequently asked questions
Is it legal to look up who owns a domain?
Yes. Registration data lookups are a public service, and ICANN Lookup is free. What's shown is limited by privacy law, so personal details are usually redacted.
Why does the record say 'redacted for privacy'?
Under ICANN's Registration Data Policy, registrars must hide personal data such as the owner's name, street, phone and email where the law requires it. They publish a contact form or forwarding email instead.
Can I find the owner of a domain for free?
You can see the registrar, creation date, expiry date and registrant country for free. To reach a redacted owner, use the registrar's forwarding contact or the details on the website itself.
What replaced WHOIS?
RDAP, the Registration Data Access Protocol. ICANN says it was created as the replacement for WHOIS and returns the same kind of data in a standard format.
How do I contact the owner of a domain I want to buy?
Send a short message through the registrar's contact form or forwarding email shown in the lookup, or use the site's contact page. Many registrars also offer a broker service for this.
