You have taken over a website, or a supplier has stopped answering, and you realise you do not know which company actually runs the server it sits on. You cannot log in, you cannot download a backup and you do not know who to ring. This is a common position for small businesses, because the hosting account is often opened by a designer, a former employee or a relative, and then forgotten while the site keeps working. This guide is about the detective work: how to find out where your site lives, how far you can trust each clue, who to contact once you have a name, and how to ask for access or a backup in writing.
What "the host" means, and what it does not
The host is the company whose servers store your website's files and, usually, your business email, and send the pages to visitors. It holds the hosting account, and only the account holder can be given a login, a backup or a way to move the site. That makes it a different party from the other names attached to a website. The domain registrar is where the address is registered; our guide on domain name vs web hosting explains why those are two separate bills. The designer is whoever built the pages, and may or may not be the one paying the host.
This guide is only about finding the host. If your question is who controls the domain, the hosting and the files, and how to check all three in ten minutes, read who actually owns your website. If you already know the host and want to leave an agency, see moving your website away from an agency.
Start with paperwork, not technical tools
The quickest answer is usually already in your inbox or on a statement. Hosting is a recurring charge, so it leaves a trail.
- Search your email. Try "hosting", "cPanel", "welcome", "your account", "invoice", "renewal" and "nameserver". A welcome email from a host often names the company and the control panel address. Search every address the business has used, including old ones and any personal address the first designer might have used.
- Check card and bank statements. Look back 12 to 36 months for a recurring or yearly charge to a company you do not recognise. Hosting is often billed yearly or every few years, so a single charge a year ago is a real lead.
- Ask the people involved. Ask the designer or developer who they pay for the site's hosting, and whether it is on their account or yours. Ask former staff and whoever set up the business's email.
- Look at the contract. A web design or maintenance agreement may name the hosting provider or say that hosting is included in the fee, which means it may sit on the designer's own account.

What the website itself can tell you
If the paperwork leads nowhere, the site gives away a few clues. None is proof, but they narrow things down.
- The control panel login page. On many cPanel hosts, adding
/cpanelto the end of your domain redirects to the panel's login page, which is often on port 2083. The page usually carries the host's branding, or at least confirms that the site runs on cPanel. - The admin login for the site. A page such as
/wp-admintells you the site runs on WordPress, which is the software, not the host. Do not mistake the two. - A builder platform address. If the site opens on, or redirects through, an address belonging to a website-builder platform, the "host" is that platform, and the account sits with whoever signed up to it.
- Default or error pages. A server's generic "page not found" or "account suspended" page sometimes shows the host's name or software.
- The footer. Some designers add a credit line. That names the builder, not the host.
Use a public lookup to find hints
Every domain has public technical records, and anyone can read them. Two lookups matter here. Each takes a couple of minutes and needs no login.
- Look up the nameservers. Use a public domain lookup (WHOIS or RDAP) for your domain, or run
nslookup -type=NS yourdomain.comon a computer. The nameservers are listed even when privacy protection hides the owner's details. If they look likens1.somehostingcompany.com, that company is a strong candidate for the host. - Look up the IP address. Run
nslookup yourdomain.comto see the address the domain points to, then enter that address in a public IP lookup. It shows which organisation the address block belongs to, which is often the hosting company or its data centre.
Read the result carefully, because the two lookups answer slightly different questions. The nameservers tell you who runs the domain's DNS, the records that say where the site and email live. Our guide to DNS explained covers what those records do. The IP address tells you where the website's web server is, unless something sits in front of it.
How much each clue tells you
| Clue | What it points to | How reliable | What can mislead you |
|---|---|---|---|
| Hosting invoice or welcome email | The company that billed you | High | It may be an old host the site has since left |
| Recurring charge on a statement | A paid supplier to investigate | Medium | The charge may be for a domain, email or a builder subscription |
| Nameservers | Who runs the domain's DNS | Medium | DNS can be run by the registrar or a separate DNS service, away from the host |
| IP address owner | Where the web server sits | Medium to high | A CDN or security proxy in front of the site can hide the real server |
| Control panel login page | The panel software, sometimes the host | Medium | Many different hosts use the same panel |
| What the designer says | Who they believe they pay | Medium | They may resell hosting from a larger provider |
Four parties that can look like the host
Most wrong guesses come from mixing up four different roles. A site can use four different companies at once, and a lookup may show any of them.
| Role | What it does | Where you see it | Can it give you site files? |
|---|---|---|---|
| Web host | Stores the site's files and serves the pages | IP address, hosting invoices, control panel | Yes, to the account holder |
| Domain registrar | Holds the domain registration and renewals | Domain lookup, renewal emails | No, only the domain |
| DNS provider | Says where the domain's traffic and email should go | Nameservers | No, only the records |
| Email service | Receives and stores your mail | The domain's mail (MX) records | No, only mailboxes |
Often one company does all four, which is why the first lookup you try may look conclusive. The warning sign is when the nameservers show one company and the IP address shows another. That is not an error. It usually means the DNS is held in one place and the site in another, and you may need to contact both.
When a CDN or proxy hides the real host
Some sites sit behind a content delivery network (CDN) or a security proxy, a service that receives visitors first and passes them on to the real server. When this is switched on, the IP address and sometimes the nameservers belong to that service, not to the host. The lookup then tells you that a CDN is in use, but not where the files are.
If you see this, fall back to paperwork and people. Whoever set up the CDN knows which server it forwards to, so ask them. A CDN account has its own login and its own billing email, and that email is another clue to search for in your inbox.
Once you have a name, confirm it
Before you contact anyone, test your guess so you do not send a request to the wrong company.
- Match two clues. A name that appears in both an invoice and a lookup is much safer than one from a lookup alone.
- Check the date. An old invoice shows who hosted the site then. Make sure the nameservers and IP address, which are current, still agree.
- Find the host's client area. Most hosts have a customer login page. Try the "forgot password" option with the email addresses the business has used. If an account exists, the reset email will arrive, which confirms it, and it shows you the address the account is registered to.
Who to contact, and what they will ask for
The host will deal only with the account holder, because handing a login or a backup to a stranger would be a security failure. That shapes who you should approach first.
- If the site is on your designer's or agency's account, contact them. They are the account holder, and the host will refer you back to them.
- If the account is in your business's name, contact the host's support through its ticket system or client area. Expect to be asked for the domain name, your name, the email address on the account and some proof that you are the business.
- If the account was opened by someone who has left, start with their old business email, if it still works, and use the "forgot password" route. If that fails, the host may accept written proof of business ownership, but its process is its own, so ask what it requires.
Your domain details can help establish who you are. If you are not sure the domain is registered to your business, see how to check you are the registrant first.
How to ask for access or a backup in writing
Put the request in writing, keep it short and keep a copy. A message that works with a designer, an agency or a host's support team:
Hello, I am [your name], [role] at [business name]. I am trying to confirm where the website [yourdomain.com] is hosted and who holds the account. Could you confirm whether you host it, which account it sits on and the email address registered to that account? I would like (1) a login in my business's name, or the account transferred to us, and (2) a full backup of the website files, database and email. Please also tell me the renewal date and the billing cycle. Thank you, [name and phone number].
Asking for the renewal date matters. A site that is about to lapse is urgent, and a site that is paid for years ahead gives you time to do this properly.
If you cannot find the host
Sometimes the trail goes cold. The usual explanations are simple.
- The site is down or parked. If the domain no longer leads to a working site, the hosting may have lapsed, and the nameservers may now point to a registrar's parking page. Your domain registrar can tell you where the domain points.
- The site never lived on a normal host. It may be on a builder platform, or on a server run by a business partner or a relative.
- The paperwork sits in a former employee's inbox. Ask whoever manages the business's email accounts whether the old mailbox can be opened.
If the site is working and the account cannot be found, you can still protect yourself. Copy the pages and images from the live site, record the domain's nameservers and keep the written details of every attempt. A new site on a hosting account you own can then be built from that material.
What to do the day you find it
- Get a login in your own name. Not a shared one that depends on someone else staying helpful.
- Update the contact email. Renewal and security notices should reach an inbox someone at the business checks.
- Take a full backup. Files, database and email. See how to back up a website and test a restore.
- Write down the details. The host's name, the renewal date, the billing cycle and where the login lives, in a place the business controls.
- Decide whether to stay. If the plan is poor value or you cannot get access, consider moving. Read how to migrate a website without downtime first.
Common mistakes
- Trusting one lookup. Nameservers alone often point to the registrar or a DNS service, not the host.
- Confusing the host with the software. Finding that a site runs WordPress says nothing about who hosts it.
- Contacting the registrar about site files. A registrar holds the domain only.
- Asking the host verbally. Without a written record you have nothing to point to later.
- Cancelling the old hosting before the new one works. Never cancel until the site has a verified copy elsewhere.
- Changing nameservers to "test" something. That can take the live site or email offline.
Where Gotka Technologies fits
Every Gotka Go AI hosting plan runs cPanel on LiteSpeed servers and includes free SSL, daily backups, free migration and 24/7 support through client-area tickets, with a 99.9% uptime guarantee. If you find your site at another host and decide to move, free migration is included with Gotka hosting plans, so raise a ticket in the client area to discuss the move, and check the copy on your new account before you switch the domain. Our cPanel guide shows what you will see once you have your own login. Questions during office hours can go to the team on WhatsApp.
Key terms used in this guide
- Web host: the company whose servers store your website's files and serve its pages.
- Nameserver: a server that holds a domain's DNS records and says where the site and email should go.
- IP address: the numeric address of the server a domain points to.
- WHOIS / RDAP: public lookup services that list a domain's registration and nameserver details.
- CDN: a content delivery network that sits in front of a site and passes visitors to the real server.
- Account holder: the person or business the hosting account is registered to, and the only one the host will normally deal with.
How can I find out who hosts my website?
Start with paperwork: search your email for hosting invoices and welcome emails, and check card statements for a recurring charge. Then look up your domain's nameservers and the IP address its web server uses in a public lookup, which often name the hosting company. Confirm the answer by matching two clues, because one lookup alone can point to a registrar or a CDN instead.
Can a WHOIS lookup show who my web host is?
A domain lookup lists the nameservers even when privacy protection hides the owner's details, and those can hint at the host. But nameservers show who runs the domain's DNS, which may be the registrar or a separate service. A lookup of the website's IP address is usually a better pointer to the server. Neither is proof on its own.
Is my domain registrar the same as my web host?
Not necessarily. The registrar holds the domain registration, while the host stores the website's files and email. One company can do both, and many small businesses buy them together, but they can be separate. A registrar cannot give you website files unless it also hosts the site, so check which role each company plays before you contact it.
What if my web designer hosts my website?
Then the hosting account is probably in their name, possibly under a reseller arrangement. Ask them in writing which account the site is on, what it costs, and how you can get a backup or move the site. Ask for a login in your business's name, or for the account to be transferred to you, so the site does not depend on one supplier.
How do I ask a host for access or a backup?
Write a short message that gives your name, role, business and domain, and ask which account the site is on and what email it is registered to. Request a login in your business's name or a transfer, plus a full backup of files, database and email. The host will deal only with the account holder, so expect to prove you represent the business.
Can I move my website to Gotka once I find the host?
Free migration is included with Gotka hosting plans. Once you have access to the site and a full backup from the current host, raise a ticket in the client area to discuss the move. Check the copy on your new account before you switch your domain, and do not cancel the old hosting until the new site is confirmed working.
Why Is Your WordPress Site Slow? A Malaysia Speed Guide
Find out what's actually slowing your WordPress site down in Malaysia — hosting, plugins, images or your theme — and which speed fixes make the biggest difference.
HostingHow to Secure Your cPanel Hosting Account: Passwords, 2FA and Who Has Access
Credential-stuffing attacks are rising fast. A practical guide to cPanel account security — strong passwords, two-factor authentication and access control.
HostingHow LiteSpeed Actually Makes a Site Faster Than Apache or Nginx Shared Hosting
LiteSpeed vs Apache hosting, explained plainly: an event-driven design, built-in LSCache page caching and native HTTP/3 support make LiteSpeed genuinely faster.


