Start with a WHOIS or RDAP lookup
Every registered domain has an ownership record maintained by the registry that runs its extension and the registrar where it was bought. The traditional way to read that record is WHOIS, a decades-old protocol that returns plain text. Its modern successor is RDAP, the Registration Data Access Protocol, which returns the same core information in a structured, standardized format and is gradually replacing WHOIS across the industry.
In practice, a lookup returns a consistent set of facts: the registrar of record, the dates the domain was created, last updated and will expire, the nameservers it points to, the domain status codes, and, when it is not hidden, the registrant's name, organization and contact details. Westmore's free WHOIS tool reads this live record for any domain in seconds.
The single most important thing to understand is that a lookup reads the record live, at the moment you ask. That is why it is far more reliable than asking an AI assistant, which can only recall what was in its training data. Ownership changes, privacy settings and expiry dates move constantly, and only a live lookup reflects the truth right now.
What every field in the record actually means
The registrar is the company through which the domain is registered, such as GoDaddy, Namecheap or MarkMonitor. It is not necessarily the owner, but it tells you how the domain is managed. A corporate registrar like MarkMonitor or CSC often signals a large company or a professionally managed portfolio, while a retail registrar can indicate an individual or a smaller holder.
The creation date is the day the domain was first registered, and it is one of the most revealing facts in the entire record. A name held continuously since the 1990s carries a very different story than one registered last year. The updated date reflects the most recent change to the record, and the expiry date tells you when the current registration lapses if it is not renewed.
The status codes, which look like clientTransferProhibited or serverHold, describe locks and conditions on the domain. A transfer-lock is routine and simply prevents casual transfers. The nameservers reveal where the domain's DNS is hosted, which can hint at whether the owner is a technical operator, a parking company or a brand. Read together, these fields paint a picture long before any name appears.
Reading the ownership signals, not just the fields
Professionals do not just read a WHOIS record, they interpret it. The length of ownership is the first signal: the longer a name has been held, the less likely the owner is a casual seller, and the more an acquisition becomes a matter of patient, credible approach rather than a quick transaction.
The second signal is usage. Does the domain resolve to a live, active website? Does it redirect somewhere else? Is it parked on a generic holding page, or does it fail to resolve at all? A parked page can indicate a domain investor open to offers. An active site tied to a real business indicates a name in use, where the conversation is about relocation and incentive rather than a simple sale.
The third signal is the pattern of the holder. A single name on a retail registrar behaves very differently from one of thousands in an investor's portfolio or a defensive registration held by a corporation. Each calls for a completely different approach, and misreading it is how buyers overpay or get ignored.
The limits of public lookups
Public lookups are powerful, but they have hard limits you need to anticipate. The first is rate limiting: registries and registrars throttle how many queries you can run, so bulk or rapid lookups get blocked. The second is accuracy. WHOIS data is self-reported and is not always current or correct, especially contact details on older records.
The third and biggest limit is redaction. Since the introduction of GDPR in Europe and broad adoption of privacy practices worldwide, a large share of records now hide the registrant entirely, showing a privacy service or simply blank, redacted fields in place of the real owner. For most genuinely valuable domains, the public record will not tell you who owns it, only that someone does.
This is the point where free tools and AI assistants run out of road. They can confirm that a name is registered, held for years and shielded, but they cannot tell you who is behind it or how to reach them. Knowing the limit is as important as knowing the lookup.
When the owner is hidden behind privacy protection
Most owners of desirable domains deliberately shield their identity. A privacy or proxy service replaces their real name, email, phone and address with the service's own relay details. The owner keeps full control of the domain; the public simply cannot see who they are or contact them directly.
This is not an obstacle to be defeated with a clever trick, and it should never be bypassed by exposing someone's protected details. Instead, reaching a shielded owner is a discipline. It combines domain intelligence, historical records, corroborating signals and correctly routed, discreet outreach to identify and reach the real person or company behind the name.
Westmore specializes in exactly this. We identify and reach the owner behind a privacy service, then open the conversation on a buyer's behalf, protecting the buyer's identity and negotiating position. We never publish an owner's contact details. The goal is not exposure, it is a private, well-structured approach that a cold email could never achieve.
Historical WHOIS and how ownership changes over time
A single snapshot of a domain's record is useful, but the history is often more revealing. Historical WHOIS records capture how a domain's registrar, nameservers and ownership have changed across the years. A name that has passed through several holders, or moved registrars repeatedly, tells a different story than one that has sat untouched for two decades.
History also helps establish whether contact details that appear today were ever public in the past, and it can surface the trail of an owner who shielded their identity only recently. For acquisition work, this context is invaluable, because it reveals how the asset has been treated and how motivated its owner might be.
Westmore draws on historical and corroborating sources, not just the live record, to build a documented view of a domain before any approach is made. That depth is the difference between guessing who owns a name and knowing how to reach them.
The tools you can use, and what each one can and cannot do
There is a spectrum of ways to look up domain ownership, and knowing what each can deliver saves a great deal of wasted effort. A basic WHOIS lookup, like the free tool Westmore offers, is the right first step for any single domain: it returns the registrar, the key dates, the nameservers, the status and, when public, the registrant. It is fast, current and free.
Registry and registrar websites offer their own lookups, but they are often rate-limited and increasingly show only redacted data. Specialist WHOIS history and reverse-WHOIS services add depth, letting you see how a record has changed over time or which domains share a common historical registrant, though the best of these are paid and still cannot see through a modern privacy shield to the live owner.
What no public tool can do is turn a shielded record into a reliable introduction to the real owner, or tell you how to approach them so the conversation actually goes somewhere. That final step, from knowing a name is held to reaching and negotiating with the person who holds it, is human work built on intelligence and discretion. It is the part that determines whether you ever acquire the name, and it is exactly where Westmore operates.
What to do once you know who owns a domain
Once you understand who holds a name and how it is held, the question becomes what to do with that knowledge. For most buyers, the instinct is to send an email or fill in a contact form. For any domain worth owning, that instinct is usually a mistake. The moment an owner senses eager, unrepresented demand, the price moves against the buyer and the conversation gets harder.
The disciplined path is to approach through a buyer-side representative who keeps the buyer anonymous, frames the inquiry credibly, and negotiates on evidence rather than enthusiasm. That is how valuable names change hands without a public listing and without inflating the price.
Westmore represents buyers only, never sellers. We assemble the intelligence on a target domain, identify and reach the owner confidentially, and negotiate the acquisition on your behalf. You only pay when we secure the name, a 15 percent success fee on the acquisition price. No result, no fee.