To find out who owns a domain, run a WHOIS or RDAP lookup: enter the domain in our WHOIS Lookup or in ICANN’s official lookup at lookup.icann.org. You will always see the registrar, the creation and expiry dates, the nameservers and the domain status. The owner’s name and contact details, however, are hidden for most domains because of privacy laws and privacy services; in that case you reach the owner through the registrar’s contact form or relay e-mail.
What a WHOIS record shows
| Field | Meaning |
|---|---|
| Registrar | The company the domain was registered through; your contact point for disputes and abuse |
| Creation / Updated / Expiry date | When the domain was registered, last changed and when it expires |
| Name Server | The nameservers the domain is delegated to |
| Domain Status | Codes such as clientTransferProhibited; see domain status codes |
| Registrant / Admin / Tech contact | Owner and contacts; usually “REDACTED FOR PRIVACY” or a privacy service |
| DNSSEC | Whether the domain is signed |
WHOIS and RDAP
WHOIS is the original text protocol on port 43. Its successor, RDAP (Registration Data Access Protocol), returns structured data over HTTPS and is now the authoritative source for generic top-level domains such as .com, .net and .org; ICANN no longer requires registries and registrars of these domains to run port-43 WHOIS. For country-code domains (.uk, .de, .tr…) each registry decides, and many still use WHOIS or their own web lookup. If one source returns little data, try the other.
Why the owner is hidden
Since the EU’s GDPR took effect in 2018, registrars redact personal data of individuals by default, and many owners add a privacy or proxy service on top. A hidden owner is therefore normal and not a sign that a site is suspicious. What changed for investigators is explained in reverse WHOIS after GDPR.
How to contact a domain owner
- Look for contact details on the website itself (imprint, contact page,
/.well-known/security.txtfor security reports). - Use the registrar’s contact form or the relay e-mail address shown in WHOIS; the registrar forwards the message without revealing the owner.
- For abuse (phishing, malware, spam), contact the registrar’s abuse address and the hosting provider. Our Abuse Contact Lookup finds them, and this guide explains the process.
- To buy a registered domain, use the registrar’s brokerage service or contact the owner through the relay; never pay an unknown party directly.
Useful checks with WHOIS
- Domain age: a domain registered a few days ago that imitates a bank or shop is a strong phishing signal.
- Expiry date: check your own domains regularly; see how to check a domain expiration date.
- Transfer lock: clientTransferProhibited protects your domain from unauthorized transfers.
Common Questions
Why does WHOIS say 'REDACTED FOR PRIVACY'?
Personal data of domain owners is hidden by default under privacy laws such as GDPR and by registrar privacy services. The registrar can still forward messages to the owner.
Can I find the owner of a domain with privacy protection?
Not directly. Law enforcement and parties with a legitimate legal interest can request the data from the registrar; others should use the registrar's contact form or relay address.
Is WHOIS lookup legal?
Yes. WHOIS and RDAP data is published for anyone to query, within the limits set by each registry.
Why is the WHOIS result for some domain extensions so short?
Each country-code registry decides what to publish. Some show only the registrar and dates, and some provide data only through their own website.