I've seen this used in the wild quite a few times. I'm pretty sure dome of the "universal share this button" widgets use history sniffing to put sites they know you use at the front if the list.
First? I doubt it. Also, I don't know if they were before or after these guys:<p><a href="http://www.didyouwatchporn.com/" rel="nofollow">http://www.didyouwatchporn.com/</a>
This is more certainly not the first in the wild use!<p>What about <a href="http://www.mikeonads.com/2008/07/13/using-your-browser-url-history-estimate-gender/" rel="nofollow">http://www.mikeonads.com/2008/07/13/using-your-browser-url-h...</a> from July 13th, 2008?
Some years ago, some people at Stanford developed the "Safe History" Firefox extension as a means of limiting IIRC history/cache sniffing via CSS. As far as I know, the extension's currency has lapsed. The idea remains valid.