Ask a person who runs facebook.com and they’ll say “Facebook.” Ask an attribution system that only reads the domain string, and it’ll say the same thing, and it’ll be wrong. The company that operates facebook.com is Meta Platforms, Inc., and has been since the October 2021 rename.
This is the attribution problem nobody warns you about. It isn’t that the operator is hidden. It’s that the operator is a different legal entity than the brand on the door. Registration rolls up to a parent. Brands get acquired. Companies rename themselves and never rewrite the domain. If your tool anchors on the domain string, it confidently returns the wrong entity every time.
Here are four real shapes of that problem, with the actual result WhoisGenius returns for each.
The rename: facebook.com resolves to Meta Platforms, Inc.
facebook.com is the clean case. The domain says Facebook, and five independent signals (WHOIS, network, DNS, certificate, content) all agree the operator is Meta Platforms, Inc. WhoisGenius returns it at 100% confidence, precisely because everything except the domain string has been updated to reflect the rename. The domain is the only thing still saying “Facebook,” and it gets outvoted.
The lesson: the domain name is a weak ownership signal. It’s the label, not the deed.
The subsidiary rollup: xfinity.com resolves to Comcast
xfinity.com and spectrum.com are consumer brands, not companies. The operators come back as Comcast and Charter Communications, both at high confidence. A brand-name lookup gives you the marketing. The registration and network give you the corporation. Both are “correct” depending on your question, but only one is the entity you serve a subpoena to, screen for risk, or file a complaint against. A good tool returns the operating entity and tells you the brand maps to it, rather than collapsing the distinction.
The multi-tier hierarchy: npmjs.com and the ownership ladder
npmjs.com is the interesting one, because there is no single right answer. There’s a chain. npm was acquired by GitHub, and GitHub is owned by Microsoft. Depending on why you’re asking, the answer you want is npm (the product), GitHub (the operator), or Microsoft (the ultimate parent). WhoisGenius resolves to npm, Inc. as the direct operator while the signals expose the rest of the ladder. Attribution isn’t always a single name. Sometimes the honest output is the hierarchy, and flattening it hides information you need.
The rebrand in progress: twitter.com
twitter.com is the messy, current case. The company rebranded to X Corp in 2023, the domain redirects to x.com, the WHOIS is privacy-shielded, and the network still routes as Twitter, Inc. The signals genuinely disagree, because reality is mid-transition. WhoisGenius surfaces Twitter, anchored by the network, with the conflict visible rather than papered over. When the world is ambiguous, the evidence should show the ambiguity, not hide it behind false confidence.
Why this matters more than it looks
“Who operates this domain” sounds like a lookup. It’s actually an entity-resolution problem with four traps stacked on top of each other: the brand isn’t the company, the subsidiary isn’t the parent, the acquisition rewired ownership, and the rename left the domain behind. Tools that treat attribution as string-matching fall into all four.
The fix isn’t a bigger database of names. It’s reading multiple signals, noticing when they name different entities, and resolving that into the operator plus the hierarchy around it. That’s why WhoisGenius returns a scored entity with its evidence, not just a string, so you can see for yourself whether “Facebook” really means Facebook or Meta.
Try one of these in the interactive demo, or run your own. Start free with 75 credits.