Whois history: retrace the complete history of a domain name

The whois history refers to the set of successive whois records of a domain name, from its creation to today. It is the administrative memory of the name: who owned it, when it changed hands, with which registrar it was filed, to which nameservers it pointed. For any investor in expired names, consulting this history is a non-negotiable step before bidding. This article describes the data sources available, the tools usable in 2026 and the interpretation methodology.

Definition and usefulness

The whois is a standard protocol that queries the databases of a registry to obtain the administrative information of a domain name: holder, administrative and technical contact, nameservers, creation date, last modification, expiration. What this protocol returns in real time is only a snapshot of the present moment. The whois history adds the time dimension: it is the sequence of all successive records.

This information is essential for five concrete reasons:

• Verify the real age of the domain (a name created in 2008 and continuously held has higher authority than a name recreated in 2024).
• Identify the continuity of use: multiple passes through PBNs, link farms or risky activities (adult, gambling, pharma).
• Detect suspicious changes: sudden switch to parking nameservers, change of registrar coinciding with SEO loss, etc.
• Confirm a legitimate transfer before a secondary market purchase (is the seller really the current holder?).
• Reconstruct the expiration context: how long has the name been inactive, who was the last operational holder.

Whois history data sources

No registry officially publishes the complete whois history, that is not their role. The data exists because third-party players, since the early 2000s, have been capturing daily the public whois of millions of domains and building their own archives. Several sources stand out by their historical depth, capture frequency and extension coverage.

Commercial databases

• DomainTools: historical reference. Archives since 2002, near-daily captures on tens of millions of domains. Professional pricing, several hundred euros per month for full accounts.
• Whoxy: emerging player with excellent value for money. Data since 2010-2012 depending on extensions, very accessible API (from about 30 USD/month).
• SecurityTrails: cybersecurity focus with broad whois coverage, paid.
• WhoisXMLAPI: commercial API with history, pay per volume.

Free sources

• Wayback Machine (archive.org): not whois strictly speaking, but site content captures that indirectly reveal ownership changes (redesign, theme change, abandonment).
• ViewDNS.info: free limited whois history (a few queries per day), variable depth.
• WhoisFreaks: limited free tier.
• Hexillion: current whois only, but useful to confirm the present state.

The specific case of .fr

AFNIC has tightened its GDPR rules: holders who are individuals see their contact details masked in public whois since 2018. Historical databases still contain the old nominative data from before 2018. For new filings, only technical information (registrar, nameservers, dates) remains publicly visible, unless the holder is a legal entity that has not requested anonymisation.

What to read in a whois history

Raw whois history can run to several dozen lines for an old domain. Four dimensions to examine systematically to derive useful reading in an investment context.

Initial creation date

This is the most important piece of data. A name created 15 years ago and continuously held accumulates far more SEO signals than a name recreated after expiration. Caution: a recent creation date does not necessarily mean a new domain, it may result from a post-expiration re-creation. Cross-check with the Wayback Machine to confirm.

Holding continuity

How many holder changes? On what dates? A domain that has passed through 5 hands in 10 years is riskier than a name held by the same entity from the start. Each change may correspond to a thematic repositioning, an abandonment, a resale on the secondary market.

Registrar history

The move from a mainstream registrar (OVH, Gandi, GoDaddy) to a little-known registrar, especially in opaque jurisdictions, may signal a strategy change (PBN, grey monetisation). A return to a mainstream registrar may indicate legitimate reactivation.

Nameserver evolution

Nameservers reveal successive hosts. Extended stay at Sedo, Bodis, NameDrive or other parkings indicates periods of passive monetisation, neutral in itself but informative about the previous holder's strategy. Move to a known PBN host (PBN.com, etc.) is a negative signal.

Whois history and GDPR: what has changed

Since 2018 and the entry into force of the European GDPR, personal contact details (name, email, address, phone) of natural-person holders are masked in public whois. This protection applies to new registrations and to renewals from 2018 onwards. Whois archives before 2018 retain the old nominative data, under the original terms of service accepted by holders at the time.

For a legal-entity holder (company, association), contact details remain visible by default, unless an explicit anonymisation request is made. This asymmetry makes reading the current whois history less rich than before 2018 for names held by individuals, but the available data (registrar, nameservers, dates) remains sufficient for everyday investment needs.

FAQ, Frequently asked questions

Going further

Whois history is one of the five dimensions to check before any expired domain investment. For the complete methodology, read our guide how to analyse an expired .fr domain before bidding. To understand the full lifecycle of a .fr name, see what is an expired domain. To browse .fr names awaiting a drop with their enriched metrics, visit the Milodomain catalogue.