--- title: "Who Owns a Domain? How to Find the Owner (RDAP & WHOIS)" description: "Find out who owns a domain with RDAP and WHOIS, learn why records say redacted for privacy, and see how to contact a hidden owner and check past owners." url: https://gritbrokerage.preview.multisites.ai/guides/find-domain-owner publisher: Grit Brokerage contact: https://gritbrokerage.preview.multisites.ai/contact offer: https://gritbrokerage.preview.multisites.ai/inquiry --- # How to Find Out Who Owns a Domain Name (WHOIS, RDAP, and Privacy) Search the domain in ICANN Lookup, which uses RDAP, the system that replaced WHOIS for most domains. Since GDPR, most records hide the owner's name and show a relay email or web form instead. Use that relay, the website, or a broker to reach the owner. For buyersUpdated October 14, 20268 min read 01 ## RDAP is the standard RDAP is the official replacement for WHOIS. Most generic domains no longer need to run WHOIS, but .com, .name and .post still do. 02 ## Redaction is normal A record that says redacted for privacy is not a red flag. Privacy laws and registrar policy hide personal data by default. 03 ## Relay beats guessing The record usually lists an anonymized email or web form. Your message goes to the owner without showing their address. 04 ## History is public Archived copies of the site can show how the domain was used, even when the owner is hidden. ## How do I find out who owns a domain name? Search the domain in ICANN Lookup, then read the record. You will see the registrar, key dates and status. You may not see the owner’s name, because most records now hide it. Here is the fastest path: 1. Go to ICANN Lookup at lookup.icann.org and enter the full domain. 2. Note the **registrar**, the **creation and expiry dates**, and the **status codes**. 3. Look for a **registrant contact**. If the name says “REDACTED FOR PRIVACY,” look for an email address or web form instead. 4. Use that relay to send a short message to the owner. 5. If there is no relay, check the website, its social profiles, and any “for sale” page. ICANN says its Lookup tool is the first place to check for registration data. If the data you need is not there, ICANN points to two next steps: the Registration Data Request Service for participating registrars, or contacting the sponsoring registrar directly. A lookup tells you facts about the registration. It does not tell you who the person is behind a company, or whether they will sell. That takes more work, which the sections below cover. Treat the lookup as a starting point. The dates alone are useful: a domain created many years ago and renewed far ahead suggests a committed owner, while a name close to its expiry date may be easier to buy. Write down what you find before you send any message, so you can compare it with the owner’s reply later. ## What is the difference between WHOIS and RDAP? RDAP is the modern lookup protocol, and it replaced [WHOIS](https://gritbrokerage.preview.multisites.ai/glossary/whois) for most generic domains. Both show registration data. RDAP returns it in a standard format and supports more languages and character sets. Feature WHOIS [RDAP](https://gritbrokerage.preview.multisites.ai/glossary/rdap) Status for generic domains Retired as a requirement on January 28, 2025, with exceptions The required, definitive source Still required for .com, .name, .post All generic domains Data format Free text, varies by registrar Standard structured format Languages Limited Supports internationalization Redaction handling Inconsistent Shows that a field was redacted ICANN’s own words: RDAP will be “the definitive source” for generic top-level domain registration data. Accredited registrars and registry operators have offered it since 2019. ICANN also notes that all generic top-level domain registries and registrars must offer RDAP under a common profile. Two caveats matter: - **Country-code domains** (such as .uk or .de) follow their own rules. Many run their own lookup tools. - **Third-party WHOIS sites** may show cached or old data. Use the registrar or ICANN’s tool when accuracy matters. For the formal definitions, see the glossary entries for WHOIS, RDAP, and the ICANN Lookup tool. ## Why does the record say “REDACTED FOR PRIVACY”? Registrars hide personal data because privacy law and ICANN policy require it. The record is not broken, and it does not mean the owner has something to hide. The change started with the EU’s GDPR. ICANN adopted a Temporary Specification that took effect on May 25, 2018. It required registrars to redact fields such as registrant name, street, city, postal code and phone, unless the registrant gave consent to publish. It also said the email fields must not reveal the contact’s address. ICANN’s newer Registration Data Policy took effect on August 21, 2025, and keeps the approach. It says: - Registrars and registries must redact when applicable law requires it. - They may also redact for a commercially reasonable purpose. - Registry operators must also redact the registrant and technical email. - A registrant’s organization name must be published if the registrant agrees. So you will see a mix. Some records show an organization name. Some show only a country. Many show nothing personal. Read more under [GDPR redaction](https://gritbrokerage.preview.multisites.ai/glossary/gdpr-redaction). There is a second layer. Some owners add a [privacy or proxy service](https://gritbrokerage.preview.multisites.ai/glossary/privacy-proxy-service), which places the service’s details in the record. The cause differs, but the result for you is similar: you contact the relay. ## How do I contact an owner who hides behind privacy? Use the relay in the record. ICANN’s policy says a registrar that redacts the email must publish either an anonymized email address or a link to a web form. That contact method must not reveal the real address or identify the person. Work through these methods, from easiest to hardest: Method How it works Chance of reaching the owner Relay email or web form in the record Registrar forwards your message Good, but owners may not check it Website contact page or footer Owner or staff may reply Good if the site is active “This domain is for sale” page Links to a seller, marketplace or broker High; the owner wants offers Social profiles linked from the site Direct message to a person or business Medium Registrar abuse or contact channel Registrars handle complaints, not offers Low; use it only for a real issue Domain broker Broker researches and contacts for you Higher for valuable names Two notes on the relay. First, ICANN’s policy requires registrars to keep logs that show a message was relayed. The logs do not contain the message itself. They cannot prove the owner read it. Second, owners get many cold emails, so a short, clear subject line helps. Try: “Question about Example.com.” If you want a model message, see our guide on [how to buy a domain that is taken](https://gritbrokerage.preview.multisites.ai/guides/how-to-buy-a-domain-that-is-taken). ## Can I get the hidden data through ICANN? Sometimes, but not for a normal purchase. ICANN’s Registration Data Request Service (RDRS) lets people with a “legitimate interest in nonpublic data” ask participating registrars for it. ICANN lists law enforcement, intellectual property professionals, consumer protection advocates, cybersecurity professionals and government officials as the expected users. Key facts about RDRS from ICANN: - It started as a pilot in November 2023. The pilot ended in November 2025. - The ICANN Board directed ICANN to keep the service running for up to two more years while policy work continues. - Requesters need an ICANN account. - Registrars still decide each request. The service does not guarantee access. ICANN’s page does not say whether domain buyers qualify, and a wish to make an offer is unlikely to count as a legal reason for disclosure. Do not plan a purchase around it. The Registration Data Policy also sets how registrars handle disclosure requests: acknowledge within two business days, then respond within 30 calendar days in normal cases. Those timelines apply to formal requests, not to a casual offer. For an offer, a relay message or a broker is the practical route. ## What if the real owner is a company? Find the business behind the site, then find the person who can decide. A domain registered to “Domain Administrator” at a company usually sits with marketing, legal, or IT. Try this: 1. **Read the site.** Look at the About, Contact, Legal, and Terms pages. Company names and addresses often appear there. 2. **Check the brand.** Search for the company name and see who runs it. 3. **Check professional networks.** Titles like “Head of Brand” or “Founder” point to the right person. 4. **Use the sales path.** If the domain redirects to another site, ask that company. Be careful with names that match a known brand. If the name is a trademark, a large company may have lawyers watching it. Check the USPTO database first, and see our [trademark and UDRP guide](https://gritbrokerage.preview.multisites.ai/guides/domain-trademark-udrp-risk). ## Can I see who owned a domain in the past? Not from the public registration record alone, but you can learn how the domain was used. Current RDAP data shows only the present registration. Past owner names are usually not public. What you can check: - **The [Wayback Machine](https://gritbrokerage.preview.multisites.ai/glossary/wayback-machine).** It stores archived copies of web pages. You can see old sites, logos, and contact details. This is the best free tool for domain history. - **Paid history services.** Some companies keep older lookup records. Their data may be incomplete or out of date, so treat it as a clue. - **Search engines.** A search for the exact domain can show old mentions, reviews, and press. - **Backlinks.** Old links may show how trusted or how spammy the domain was. See backlink profile. History matters for risk, not just for contacts. A domain with a spam past can harm email delivery and search trust. Check it before you buy. ## Is it legal to contact a domain owner with an offer? In general, yes. Offering to buy a domain is a normal business act, and most domain sales start with a message like that. This is not legal advice. Follow a few rules: - **Be honest** about who you are if asked. - **Be brief and polite.** One clear question and one offer range is enough. - **Do not threaten.** Do not mention lawsuits or trademark claims unless you have a real basis and a lawyer. - **Stop if asked.** If the owner says no and asks you to stop, stop. One more point: if you hold a trademark, be careful how you combine an offer with a complaint. WIPO’s panel guidance says that where the registrant has a legitimate interest in the name, an offer to sell is not, by itself, evidence of bad faith. Using the UDRP in bad faith can lead to a finding of reverse domain name hijacking. Talk to a lawyer before you file anything. ## What should I do if I cannot find the owner? Choose between three paths: hire help, wait, or move on. The right one depends on how valuable the name is to you. Path Best when Watch out for Hire a domain broker The name matters to your brand and you want discretion Broker fees; see the [broker fees guide](https://gritbrokerage.preview.multisites.ai/guides/domain-broker-fees) Wait and follow up The name is nice to have Owners may never answer Pick another name Price or effort is too high A weaker brand name A broker can do the research and the outreach, and can keep your identity private. Grit Brokerage has full-time researchers who track down domain owners, and our stealth acquisition service contacts the owner on your behalf. We use third-party escrow on every deal. Learn more on our [buying domains page](https://gritbrokerage.preview.multisites.ai/buying-domains). Whichever path you pick, protect your money. Once you find the owner, close through an escrow service. For example, Escrow.com holds the buyer’s payment and releases it after confirming that the buyer is listed as the registrant. Read our escrow guide and domain sale scams guide before you pay. ## Next step Tell us the domain you want and we will check how reachable the owner is. [Contact our buying team](https://gritbrokerage.preview.multisites.ai/contact?interest=buy) or review how we work on the buying domains page. ## Frequently asked questions ### How do I find out who owns a domain name? Enter the domain in ICANN Lookup at lookup.icann.org, which uses RDAP. You will see the registrar, dates and status. The owner's name and email are often redacted. If so, use the relay email or web form in the record, or check the website itself for contact details. ### Why does WHOIS say redacted for privacy? Registrars hide personal data to follow privacy law and ICANN policy. ICANN's Temporary Specification, effective May 25, 2018, required redaction of registrant name, address and phone, and email where consent was not given. The current Registration Data Policy keeps redaction in place. ### Did RDAP replace WHOIS? For most generic domains, yes. ICANN says that from January 28, 2025, registries and registrars no longer have to provide WHOIS, except for .com, .name and .post. RDAP is now the definitive source for generic top-level domain data. Country-code domains run their own systems. ### How do I contact an owner who uses privacy protection? Use the anonymized email address or web form shown in the record. ICANN's policy requires a registrar that redacts email to publish one of them. Messages are relayed to the owner without revealing their address. You can also use the website's contact page or a broker. ### Can I see past owners of a domain? Not from the public record alone. Current RDAP data shows the present registration. Archived web pages can show how the domain was used in the past, and paid history services may list older records. Treat third-party history data as clues, not proof. ### Is it legal to contact a domain owner with an offer? In general, a polite offer to buy a domain is a normal business act. Keep it honest and short, do not threaten, and stop if the owner asks you to. Laws vary by country, and this is not legal advice. Talk to a lawyer if you have a trademark dispute. ## Terms on this page - [Registration Data Access Protocol](https://gritbrokerage.preview.multisites.ai/glossary/rdap) - [Reverse domain name hijacking](https://gritbrokerage.preview.multisites.ai/glossary/reverse-domain-name-hijacking) - [Generic top-level domain](https://gritbrokerage.preview.multisites.ai/glossary/gtld) - [Registration Data Policy](https://gritbrokerage.preview.multisites.ai/glossary/registration-data-policy) - [Stealth acquisition](https://gritbrokerage.preview.multisites.ai/glossary/stealth-acquisition) - [Backlink profile](https://gritbrokerage.preview.multisites.ai/glossary/backlink-profile) - [Wayback Machine](https://gritbrokerage.preview.multisites.ai/glossary/wayback-machine) - [Domain history](https://gritbrokerage.preview.multisites.ai/glossary/domain-history) - [GDPR redaction](https://gritbrokerage.preview.multisites.ai/glossary/gdpr-redaction) - [Domain broker](https://gritbrokerage.preview.multisites.ai/glossary/domain-broker) ## Sources 1. [ICANN: Registration Data Access Protocol (RDAP)](https://www.icann.org/rdap) 2. [ICANN: Launching RDAP, sunsetting WHOIS (January 2025)](https://www.icann.org/en/announcements/details/icann-update-launching-rdap-sunsetting-whois-27-01-2025-en) 3. [ICANN: Registration Data Policy](https://www.icann.org/resources/pages/registration-data-policy-2024-02-21-en) 4. [ICANN: Temporary Specification for gTLD Registration Data](https://www.icann.org/resources/pages/gtld-registration-data-specs-en) 5. [ICANN: Registration Data Request Service (RDRS)](https://icann.org/rdrs-en) 6. [WIPO: Overview of WIPO Panel Views on Selected UDRP Questions, 3.1](https://www.wipo.int/amc/en/domains/search/overview3.1/index.html) 7. [Escrow.com: Domain name transactions](https://www.escrow.com/domains) Written by the Grit Brokerage team and checked against the sources above on October 14, 2026. Registry rules, fees and prices change. This guide is general information, not legal or tax advice. ## Keep reading - [How to Buy a Domain Name That Someone Already OwnsYou buy a taken domain from its current owner, not from a registrar. Check if it is listed for sale, find the owner or their broker, make a short offer, agree on a price, and close through third-party escrow. A buy-side broker can do the outreach quietly for you.](https://gritbrokerage.preview.multisites.ai/guides/how-to-buy-a-domain-that-is-taken) - [Domain Broker Fees and Commissions: What You Will Actually PayDomain brokers usually charge a commission on the sale price, often in the range of 10% to 30% depending on the model. Some add an upfront fee, such as GoDaddy's $99.99 for buyers. Escrow adds a separate fee. Each broker sets its own terms, so ask for them in writing.](https://gritbrokerage.preview.multisites.ai/guides/domain-broker-fees) - [Domain Names and Trademarks: UDRP, Cybersquatting, and How to Buy SafelyThe UDRP is a fast, low-cost ICANN process that lets a trademark owner ask a panel to transfer a domain name. The owner must prove three things: the name is confusingly similar to its mark, you have no legitimate interest, and you registered and used it in bad faith. Owning a brand word alone is not enough.](https://gritbrokerage.preview.multisites.ai/guides/domain-trademark-udrp-risk) - [How Domain Transfers Work: Auth Codes, Transfer Locks, and Push vs TransferA domain transfer moves a name to a new registrar, or to a new owner, using an auth code and a domain with the registrar lock off. A registrar transfer usually finishes in 5 to 7 days. A push between accounts at one registrar is usually faster. A 60-day lock can block registrar transfers after some changes.](https://gritbrokerage.preview.multisites.ai/guides/domain-transfer-process) - [How to Negotiate a Domain Name Purchase Without OverpayingSet a walk-away price before you write. Open below your target, but not insultingly low. Use comparable sales as evidence, keep your identity and budget private, move up in small steps, and close through escrow. If the price passes your ceiling, walk away.](https://gritbrokerage.preview.multisites.ai/guides/negotiate-domain-purchase) - [.com vs .ai vs .io vs .co: How to Choose a Domain Extension.com is still the safest default because buyers, investors and email systems expect it. Choose .ai if your product is AI and you accept higher renewals. Choose .io for developer tools with some registry risk. Choose .co mainly as a cheaper fallback. Whatever you pick, try to own the .com too.](https://gritbrokerage.preview.multisites.ai/guides/com-vs-ai-vs-io-vs-co) ## Want a domain someone else owns? Tell us the name and your budget. We contact the owner without revealing who you are and negotiate for you. [Start an acquisition](https://gritbrokerage.preview.multisites.ai/contact?interest=buy) [Call (442) 500-GRIT](tel:+1-442-500-4748)