How to Find Out Who Owns a Domain, and Whether They Will Sell
The appraisal desk is open
Type a domain like sunsetcapital.com or a keyword like capital to see its estimated value, the sales that prove it, and matching names for sale.
Automated estimate for informational purposes only. Not financial or investment advice, and not a guarantee of sale price.
Short answer: Look the domain up in RDAP, not WHOIS. Since 28 January 2025, RDAP is the definitive source for gTLD registration data, and public port 43 WHOIS was deprecated on 31 July 2025. ICANN's own lookup at lookup.icann.org will give you the registrar, the creation and expiry dates and whatever contact data is not shielded by privacy. Privacy will usually hide the person, so the reachable route is the anonymized forwarding address or the registrar's contact form. Then read four more signals (nameservers, mail records, the live page and the expiry date) to work out whether this owner is an investor who will sell or a business that will not.
The question behind the question is almost never "who owns it." It is "will they sell, and what will it cost me." Those are different investigations, and the second one is where the money is.
WHOIS is gone. Here is what replaced it
If you last looked up a domain owner a few years ago, the tool you used has been retired. ICANN moved gTLD registration data onto the Registration Data Access Protocol, and as of 28 January 2025 registries and registrars are no longer required to run WHOIS at all, with narrow carve-outs for .com, .name and .post. Public port 43 WHOIS services were officially deprecated on 31 July 2025.
Practically, this matters in two ways. Older third-party WHOIS sites now serve cached or incomplete records, so a "no data found" result frequently means the lookup tool is stale rather than the domain being unregistered. And RDAP returns structured, machine-readable data with consistent field names, which makes it far easier to check a hundred candidate names in one pass than the old free-text format ever was.
| What you get from RDAP | Usually visible? | Why it matters to a buyer |
|---|---|---|
| Registrar name and IANA ID | Always | Tells you where the name lives and gives you an official contact route |
| Creation date | Always | A 1998 registration held quietly for decades signals a very different owner than a 2024 one |
| Expiry date | Always | A name expiring in six weeks may drop instead of selling |
| Domain status codes | Always | Shows transfer locks, redemption status and whether the name can move at all |
| Registrant name and organization | Rarely, privacy is the default now | When an organization does show, it is often a company that will never sell |
| Registrant email | Usually an anonymized forwarding address | Forwarders work. Most owners do read them, they just filter aggressively |
The five signals that actually predict whether they will sell
The registration record is one input. Four others tell you more about the owner's intent, and you can collect all five in about three minutes per domain.
1. The nameservers. Parking nameservers (Bodis, Sedo, Afternic, DAN, Above.com and similar) mean the name is a monetized investment. That is the friendliest possible answer: this owner prices names for a living, thinks in comparables, and expects offers. Nameservers pointing at a real host with a real site mean the opposite.
2. The mail records. This is the single most underrated check. If the domain has active MX records pointing at Google Workspace, Microsoft 365 or a business mail host, somebody is running email on it. A business will not give up the address every invoice and contract has been sent from, at nearly any price. No MX records at all means the name is dormant, whatever the website looks like.
3. The page it serves. Four outcomes, in descending order of how easy your life is about to be: a for-sale landing page with a price, a for-sale page with an offer form, a parking page with ads, or a working business site. There is a fifth, a blank or error page, which usually means a lapsed project and an owner who has stopped thinking about the name.
4. The creation and expiry dates. A long, unbroken registration history with automatic renewals is an investor or a company that cares. A name expiring soon that has never been renewed early might be about to drop, which turns the whole exercise into a drop catching question and a much cheaper one.
5. The rest of the portfolio. Reverse lookups on the registrant email or the nameserver set often reveal that the same owner holds dozens or hundreds of names. Portfolio holders sell. They also have published asking prices on comparable names you can use as an anchor before you say a single number.
| What you find | Who the owner probably is | Realistic chance of a deal |
|---|---|---|
| For-sale page with a buy-now price | Investor actively selling | Very high. The price is the price, though most accept 10% to 25% below it |
| Parking page, ads, no price | Investor monetizing quietly | High, but expect a slow first reply and a high opening ask |
| Blank page, no MX records | Abandoned side project | Moderate. The hard part is reaching a human, not agreeing a price |
| Old site, no updates, active MX | Dormant business still using email | Low to moderate. Offer to fund a migration, not just the name |
| Live business, active MX, recent content | Operating company | Very low. Price the alternatives instead |
How to reach an owner hiding behind privacy
Privacy protection is now the default at most registrars, so a shielded record is the normal case rather than a signal of anything. There are four routes through it, in the order worth trying.
The anonymized forwarding address in the RDAP record is the first. It works more often than people expect, because the forwarder passes mail to the real inbox and the owner simply gets a lot of junk through it. The registrar's own contact form is second: several registrars run a message relay specifically so buyers can reach a shielded registrant. Third, the for-sale or parking page frequently carries its own offer form, which routes straight to a marketplace account the owner checks. Fourth, and last, look for the person rather than the record: matching the name against a company register, a LinkedIn profile or an old archived version of the site that predates privacy defaults.
What does not work is a paid "WHOIS history" report bought in the hope of finding a decade-old personal email. Those addresses are almost always dead, and using one to bypass a privacy service starts the relationship on the wrong footing.
What to put in the first message
The opening email decides the price more than any later argument does. Three rules, and they are all about restraint.
Keep your identity out of it if the identity would move the number. An email from a funded company or a recognizable brand gets quoted a different figure than a neutral one, which is the entire reason a buy-side domain acquisition service exists. Do not open with a price, because whoever names a number first in an information vacuum loses. And do not explain the deadline, the rebrand or the funding round. Owners read urgency as budget.
Beyond that, the mechanics are the same discipline that makes any personalized outreach sequence work: short, specific, one ask per message, and a genuine follow-up cadence rather than five emails in a week. Two or three messages spaced a fortnight apart outperforms persistence. A useful opening is a single sentence asking whether the owner would consider an offer on the name, with nothing else attached.
Before any of this, know what the name is worth. Run it through a domain appraisal and read the sold comparables behind the estimate, so that when a number comes back you can tell instantly whether it is in the realm of reality or four times over. Buyers who negotiate without comps end up arguing against their own enthusiasm.
When they will not sell: the UDRP reality check
People reach for trademark disputes far too early. The Uniform Domain-Name Dispute-Resolution Policy exists for genuinely abusive registrations, and it is neither cheap nor fast. WIPO's filing fee for a case covering one to five domains is $1,500 with a single panelist and $4,000 with a three-member panel as of March 2026. A standard case runs about 45 to 60 days from filing to decision. WIPO added an expedited option in 2026 at $4,000 for a qualifying single-panelist case, targeting a decision in roughly a month.
More importantly, a UDRP complaint has to prove the domain is identical or confusingly similar to your mark, that the holder has no legitimate interest in it, and that it was registered and used in bad faith. A generic word registered in 2004, years before your company existed, fails that test comprehensively. Filing anyway costs you the fee, tips off the owner that you want the name badly, and typically raises the price if you later go back to buy it.
For ordinary generic and brandable names, buying is the fast route and it is usually the cheap one too. If the negotiation is going to be difficult, a domain broker making the approach anonymously costs less than the premium your own identity would trigger.
Questions people ask
How do I find out who owns a domain for free?
Use ICANN's RDAP lookup service, which is free and authoritative for gTLDs. It returns the registrar, the creation and expiry dates, the domain status codes and whatever contact data is not shielded. For country-code extensions, the national registry runs its own lookup with its own disclosure rules. Free third-party WHOIS sites still work but increasingly serve cached data since the WHOIS sunset.
Why is the domain owner hidden?
Privacy protection is enabled by default at most registrars and is included free with many registrations, largely as a response to privacy regulation and to spam harvesting of registrant emails. It is not a sign that the owner is doing anything wrong or is unreachable. The anonymized forwarding address in the record still routes to a real inbox in most cases.
Can I find out who owns a domain if it has privacy protection?
Often, yes, though not from the registration record itself. Work outward instead: the nameservers show the parking or hosting provider, the site or its archived versions may name the owner, and reverse lookups on the nameserver set or the forwarding address can reveal a portfolio that identifies the holder. If none of that lands, the registrar contact form and the anonymized email are still open routes to a conversation.
How much does it cost to buy a domain from the owner?
Most owned but unlisted names change hands in the low four figures to the low five figures, with short one-word .com and category .ai names running far higher. Add a buy-side broker fee of roughly 10% to 20% if you use one, and escrow of about 2.4% to 2.6% on smaller transactions. Our breakdown of what a premium domain costs sets out the price bands by extension.
Is it legal to contact a domain owner about buying their domain?
Yes. Making an unsolicited offer to buy a domain is an ordinary commercial approach, and the registrant contact routes exist in part for exactly that. What is not acceptable is scraping registrant data for bulk marketing unrelated to the name, which breaches registrar terms and, in the case of the anonymized relays, gets the sender blocked quickly.
What is RDAP and how is it different from WHOIS?
RDAP, the Registration Data Access Protocol, is the standardized replacement for WHOIS. It returns structured JSON with consistent field names instead of free-form text, supports internationalized data, and allows differentiated access so that accredited requesters can be shown more than the public. Since 28 January 2025 it has been the definitive source for gTLD registration data.
How do I know if a domain is about to expire and drop?
The expiry date in the RDAP record is the starting point, but expiry is not the same as availability. A lapsed gTLD name goes through roughly 30 days of grace, then a 30-day redemption period, then a short pending-delete window before it drops, and valuable names are usually caught the second they do. The status codes in the record tell you which stage a name has reached.
The order that works
Look the name up in RDAP, read the five signals, and decide from those whether you are dealing with an investor, an abandoned project or a live business. Value the name before you write anything. Approach without revealing who you are if your identity would cost you money. Then close through domain escrow and take the transfer to a new owner in the right sequence, because a private domain purchase sits outside every chargeback system there is.
And keep a second choice priced. The buyers who overpay are almost always the ones who decided there was only ever one acceptable name. Browsing premium domains for sale or the brandable domain names board for a week before you make an approach is the cheapest negotiating leverage available.