Reading WHOIS History as a Timeline, Not a Snapshot
A single current WHOIS or RDAP lookup shows only the domain's present state. Ownership analysis instead assembles a timeline from historical snapshots — captured at registration, at each renewal, and at any point registrant, registrar, or name server information changed — to establish exactly when control of the domain shifted and to whom.
Working Around Privacy and Proxy Redaction
Since 2018, most gTLD WHOIS records have been redacted for privacy under registrar compliance with data protection requirements, with RDAP as the modern lookup protocol. Where current records are redacted, historical WHOIS captured before redaction, prior privacy-service registrant-of-record data, and registrar disclosure obtained through discovery or subpoena are used to reconstruct the same picture.