You've found the perfect domain name for your business—except someone else already owns it. Or maybe you've received an email from an unfamiliar domain and want to verify it's legitimate. Whatever your reason, WHOIS lookup is the tool that gives you a starting point.

This guide explains what WHOIS is, what it shows you today, how privacy rules have changed what's visible, and exactly how to use it to track down a domain owner—ethically and effectively.

What is WHOIS?

WHOIS (pronounced "who is") is a publicly accessible database that stores registration information for domain names. When someone registers a domain, the registrar is required to collect contact information from the registrant and submit it to this database. Anyone can query the WHOIS database to see who registered a domain, when it was registered, when it expires, and which registrar manages it.

The system has existed since the early days of the internet. Its original purpose was practical: give network administrators a way to identify who controlled a domain so they could resolve technical issues or report abuse. Over time, it became a useful tool for businesses, legal teams, journalists, and anyone trying to understand who's behind a particular web address.

What WHOIS can and can't show you today

What you might find

A standard WHOIS record can include:

• Registrant name and organization: the individual or company that owns the domain

• Contact email address: for reaching the owner directly

• Mailing address and phone number: in some cases

• Registration date: when the domain was first registered

• Expiration date: when the domain license expires (useful if you're hoping to acquire a domain that's lapsing)

• Registrar name: the company that manages the domain registration

• Name servers: the technical infrastructure pointing the domain to a website

What privacy protection hides

Here's the reality: many WHOIS records today show very little personal information. That's because most reputable registrars now offer WHOIS privacy protection, which replaces the registrant's personal details with the registrar's proxy contact information.

Instead of seeing a name, address, and email, you might see something like:

Registrant Name: Registration Private
Registrant Organization: Domains By Proxy, LLC
Registrant Email: [a masked forwarding address]

This is a deliberate layer of protection. Privacy regulations like the GDPR in Europe have also pushed registrars to limit what personal data is publicly accessible. The result is that a WHOIS lookup on a privacy-protected domain tells you who manages the registration—not necessarily who owns it.

That said, even a privacy-protected record still gives you useful information: the registrar, the registration date, the expiration date, and sometimes a forwarding contact address you can use to reach the owner.

Why someone might want to find a domain owner

There are plenty of legitimate reasons to run a WHOIS lookup. Here are the most common ones.

You want to buy a domain that's already taken.

If your ideal domain name is registered but not in active use, finding the owner's contact information is the first step toward making an offer to purchase it.

You're researching a business or potential partner.

Before signing a contract or entering a significant business relationship, verifying that a company's website is owned by who they say they are is a reasonable due diligence step.

You've received a suspicious email.

If you want to check whether a domain sending you messages is associated with a legitimate organization, WHOIS can give you context about its age and registrar—both useful signals.

You're investigating a legal matter.

Attorneys and compliance teams sometimes use WHOIS data as part of intellectual property cases, trademark disputes, or other legal research.

You're a journalist or researcher.

Verifying who operates a website is a standard part of responsible reporting and online research.

All of these are appropriate uses of the WHOIS system. What's not appropriate is using WHOIS data to harass individuals, collect personal information for unsolicited marketing, or attempt to impersonate a domain owner.

How to do a WHOIS lookup

The process is straightforward. Here's how to run one.

Step 1: Choose a WHOIS lookup tool

Several reliable tools are available for free:

• Squarespace’s free WHOIS tool: Many registrars, including Squarespace, provide a built-in WHOIS search through their domain search interface

• ICANN Lookup (lookup.icann.org): The most authoritative source, maintained by the organization that oversees global domain registration

• Whois.domaintools.com: A well-known third-party tool with additional historical data features

Step 2: Enter the domain name

Type in the full domain name you want to research—for example, yourbusiness.com—and run the search. You don't need to include "www."

Step 3: Read the results

The WHOIS record will display in a text format. Look for the following sections:

• Registrant information: name, organization, and contact details (if not privacy-protected)

• Important dates: registration date and expiration date

• Registrar name: who manages the registration

• Name servers: where the domain points

If the record is privacy-protected, you'll see the registrar's proxy information in place of the owner's personal details.

Step 4: Note the expiration date

Even if you can't identify the owner directly, the expiration date is valuable. If a domain is expiring soon and doesn't appear to be actively used, you might be able to register it yourself once it lapses—or set up a backorder through a registrar that offers that service.

What to do when owner information is hidden

Privacy protection blocks a direct lookup, but it doesn't necessarily block all contact. Here's what you can try.

Use the proxy contact method

Many WHOIS privacy services provide a masked email address that forwards messages to the real domain owner. You won't know who you're reaching, but you can send a professional inquiry expressing interest in purchasing the domain. Keep it brief and direct—something like:

"I'm interested in acquiring [domain name] and would like to discuss a potential purchase. Please feel free to reach me at [your contact information]."

Owners who receive a credible offer may respond even if they weren't actively planning to sell.

Contact the registrar

The registrar listed in the WHOIS record can sometimes facilitate contact with the domain owner in cases involving legitimate legal concerns, trademark disputes, or domain abuse. They won't share private contact details directly, but they may pass along a message or assist in a formal dispute process.

Use a domain broker

If the domain is valuable and the owner is hard to reach, a professional domain broker can help. Brokers have experience negotiating domain acquisitions, often have existing relationships in the domain market, and can approach owners confidentially on your behalf. Many work on a commission basis, so the upfront cost is typically low.

Check the website itself

If the domain resolves to an active website, the site itself may reveal ownership information through an "About" page, a footer business name, a contact form, or social media links. This is often the fastest path to identifying who's behind a domain.

Search business registries and social media

A company name found in a WHOIS record or on a website can often be cross-referenced with public business registries, LinkedIn, or other professional directories. If the domain is connected to a registered business, that business's official filings may include contact information.

A note on ethics and privacy

WHOIS data was designed for transparency, but that doesn't mean every use of it is appropriate. A few principles worth keeping in mind:

Respect the purpose of privacy protection.

When a registrant has chosen to protect their personal information, they've made a deliberate decision. Using WHOIS to circumvent that protection—whether through social engineering or data aggregation—isn't in line with the intent of the system.

Don't use WHOIS data for unsolicited outreach at scale.

Harvesting contact information from WHOIS records for bulk marketing campaigns is against most registrar terms of service and may violate anti-spam laws.

Focus on legitimate use cases.

The most defensible reasons to investigate domain ownership are transactional (buying a domain), legal (a formal dispute), or journalistic (verified reporting). If your reason doesn't fit neatly into one of those categories, consider whether the lookup is necessary.

Using WHOIS responsibly means treating it as an informational tool, not a surveillance system.

Protecting your own domain information

If you're registering a new domain, it's worth making sure your own information is protected. With Squarespace Domains, privacy protection is built in—your personal contact details are shielded from public WHOIS records automatically, without needing to purchase it as an add-on.

That means your name, email address, and mailing address stay private, while your domain stays fully functional. It's one of the most straightforward ways to protect your personal information when you establish your brand online.

What to do after a WHOIS lookup

Once you've completed a WHOIS lookup, your next steps depend on what you found.

Owner is reachable and the domain is for sale

Make a direct offer or work with a broker for a more formal negotiation.

Owner is unreachable and the domain is expiring soon

Consider setting up a domain backorder through a registrar that offers this service.

The domain is taken but your preferred name is available with a different extension

Register it before someone else does—sometimes a .co, .io, or descriptive extension like .studio is the right fit for your brand.

You've confirmed a website is legitimate

Proceed with confidence in your business relationship or transaction.

You need legal recourse

Work with an attorney who specializes in domain disputes or intellectual property.

Start with the right domain

If your ideal domain name is already taken, don't give up. A WHOIS lookup can open the door to a conversation with the current owner, help you time a registration after a domain lapses, or simply give you the confidence to explore alternatives.

And if you're starting fresh, registering your domain with Squarespace gives you a clear, protected record, transparent pricing, and the tools to connect your domain to a website and professional email—all in one place.

Every business starts somewhere. Yours starts with the right domain.