Whois Question

[SK1990]

I've never really paid attention to this but if someone could explain it that would be great.

Here is an example whois:

• Registrar History:4 registrars with 2 drops.
  
• NS History:14 changes on 10 unique name servers over 4 years.
  
• IP History:24 changes on 14 unique IP addresses over 7 years.
  
• Whois History:28 records have been archived since 2007-09-30 .

My Question:

Is 09/30/07 the first time this domain was ever registered?

If so why does the IP history outdate the whois history? (2 years prior to initial whois records)

Am I missing something?

Thanks.

 

[novatheory]

Some whois'es provide the record for the last active registration. Check on waybackmachine see if there is anything prior to it.

 

[SK1990]

Some whois'es provide the record for the last active registration. Check on waybackmachine see if there is anything prior to it.

So how would one go about finding the original registration date? (date of first creation)

 

[novatheory]

Domain Tools have this or who.is. For the moment those are the one I can think of that have forensic whois.

 

[SK1990]

Domain Tools have this or who.is. For the moment those are the one I can think of that have forensic whois.

My example is quoted from domaintools.

 

[novatheory]

My example is quoted from domaintools.

Look for the forensic one, I think DT charges for the forensic.

 

[SK1990]

Look for the forensic one, I think DT charges for the forensic.

I think your missing the point. My post shows how far their records go back. Forensic just shows the specific whois info, Ip addresses, etc.

 

[novatheory]

I think your missing the point. My post shows how far their records go back. Forensic just shows the specific whois info, Ip addresses, etc.

The forensic will give you all the whois recorder for the domain.

I will use an example: FreakyDicky.com

I know I had this domain back in 1999-2000 (makes me cry I dropped it longtime ago). But is showing records for the last active one : http://www.who.is/domain_archive-com/freakydicky.com/

But if you search in wayback machine you can see this was register before 2007. To find who had it in 1999-2000 you need to get a forensic whois.

 

[Kate]

In Domaintools click the 'Registration' tab, it will show registry data including creation date. The domain name has been registered in the past at least twice (hence two drops) then dropped at some point.
Every time a domain drops and gets re-registered the creation date is reset. So you only see the creation date pertaining to the latest (current) registration.

Domaintools provides paid services if you want to obtain historical data.
Also have a look at hosterstats.com.
You may be able to find the approximate date the domain was first registered, but their data doesn't go back earlier than 2000 I think. The domain name might have even older history.

 

[weppos]

I've never really paid attention to Is 09/30/07 the first time this domain was ever registered?

No. 09/30/07 is the date when the domain was first discovered/tracked by Domain Tools. If you execute a whois query and you read the response, it's likely the domain is older than that date.

The registration date is normally included in the whois response, depending on the whois server. Also keep in mind the creation date may refer to the latest creation in case the domain has been registered, dropped and then registered again.