How to find out where a website is hosted
This tool resolves the domain’s DNS and looks up the ASN of the resulting IP. It is the fastest method, but not the only one, and none of them works alone in every case. These are the five we use when auditing a site’s infrastructure, with the exact point where each one breaks.
| Method | What it reveals | Where it breaks |
|---|---|---|
| DNS + ASN | The public IP and the organization that owns the address block. | With a CDN or proxy in front, you see the CDN and not the real server. |
| MX records | The mail provider, which for most small businesses is the same as the host. | Tells you nothing if mail runs on Google Workspace or Microsoft 365. |
| HTTP headers | The server software (Nginx, LiteSpeed, Apache) and sometimes the control panel. | They can be hidden, and several panels now do it by default. |
| SSL certificate | Who issued it and which other domains it covers in the SAN field. | With Let’s Encrypt the issuer does not identify the provider. |
| Nameservers (NS) | Who runs the DNS zone, which usually matches the host. | If they use the registrar’s or Cloudflare’s DNS, it says nothing about the server. |