You can find a site's hosting provider by checking the domain's NS records and the owner of the IP address the site points to. Both methods are free and give an answer within minutes: the first shows who manages DNS, the second shows who physically runs the server.
Domain and hosting are different companies
A domain is often bought from one registrar while the site itself sits on a server run by a completely different company — this is a normal and common setup. The confusion happens because many providers sell domains and hosting together, which makes it seem like the two are always linked.
A domain registrar is only responsible for the registry entry and the NS records. Hosting is the company on whose hardware the site files and the database physically live. Finding one does not mean finding the other, so two separate methods are described below.
Method 1: domain NS records
NS records show which name servers are responsible for a domain, and the name often reveals the hosting provider or DNS service.
dig NS example.com +short
ns1.hostingcompany.com.
ns2.hostingcompany.com.If dig is not available, nslookup gives the same result.
nslookup -type=NS example.comThe name in the answer usually matches the hosting provider or the registrar that manages the domain's DNS. How to change these records yourself is covered in the article on changing a domain's NS servers.
Method 2: by IP address
If NS records reveal nothing, for example when the domain is delegated to a third-party DNS service, the next step is the IP address the site points to.
dig A example.com +short
203.0.113.25The resulting address is checked through whois — the service shows the organization that holds that address range.
whois 203.0.113.25The organization or netname field in the whois reply is the hosting provider being searched for.
Why the answer can be wrong
If a site runs behind a CDN or a proxy such as Cloudflare, the IP address dig returns belongs to the CDN network, not to the hosting provider. The real server is hidden behind the proxy, and checking the address directly is no longer enough.
A sign of this substitution is that the address belongs to a large CDN network rather than a single hosting company, and the same address answers for many unrelated sites at once. In that case the IP method does not work, and indirect signs from the next section are needed.
What else reveals the provider
When the direct methods fail, a provider is sometimes revealed by indirect signs.
- server response headers — sometimes contain the name of the web server or control panel;
- the error page — for some hosting companies it is branded and recognizable;
- open standard control panel ports — respond on a characteristic port;
- mail MX records — point to a mail service that often matches the hosting provider.
How reliable each sign is
Not all signs are equally accurate: some give a direct answer, others only a guess.
| Sign | What it shows | How reliable |
|---|---|---|
| NS records | hosting or DNS provider | high, if there is no third-party DNS |
| IP and whois | server owner | high without a CDN, useless with one |
| headers and panel | type of the provider's software | medium, an indirect sign |
| MX records | mail service | low, often a separate service |
Frequently asked questions
How do you find a site's hosting provider from its domain?
The simplest way is to check the domain's NS records with dig NS or nslookup: the server name usually reveals the provider. If that fails, check the site's IP address through whois — the organization field in the reply shows the company that owns the server.
Can you find the hosting provider if a site is behind Cloudflare?
Not directly: the IP address will belong to the CDN network rather than the site's hosting provider. The real address is sometimes visible through old DNS records, emails sent from the site, or subdomains that are not connected to the CDN, but no guaranteed workaround exists.
How are NS servers different from hosting?
NS servers handle the domain's DNS: they say where to send a visitor. Hosting is the place where the site files and the database physically live. They often belong to the same company, but that is not a strict rule, and each should be checked separately.
Is it legal to check someone else's hosting provider?
Yes, every method described relies on public data: NS records, the IP address, and the whois reply are open to anyone and require no access to someone else's account. This is a standard step before moving a site or starting cooperation with a provider.
What to do next
To understand not just who the hosting provider is but also how a domain and hosting relate to each other when moving a site, see the article on the difference between a domain and hosting.