When you run a WHOIS lookup, the domain status codes tell you exactly what state the domain is in — whether it's locked, suspended, expiring, or available for transfer. These codes are defined by the EPP (Extensible Provisioning Protocol) standard and are set by either the registrar ("client" codes) or the registry ("server" codes).
Understanding the Naming Convention
EPP status codes follow a pattern: [who][action][prohibited/period]
Client codes can be removed by the domain owner through their registrar. Server codes can only be removed by the registry — usually in response to a legal process or abuse resolution.
Complete Status Code Reference
Normal / Active Statuses
| Code | Meaning |
|---|---|
| **ok** | Domain is active with no pending operations or restrictions. This is the default "healthy" state. |
| **active** | Same as "ok" — used by some registries instead. |
A domain showing only "ok" or "active" has no locks or restrictions. It can be transferred, updated, or deleted.
Client-Side Lock Codes (Set by Registrar)
| Code | What It Does | Should You Have It? |
|---|---|---|
| **clientTransferProhibited** | Blocks domain transfers to another registrar | Yes — prevents unauthorized transfers |
| **clientDeleteProhibited** | Blocks domain deletion | Yes — prevents accidental or malicious deletion |
| **clientUpdateProhibited** | Blocks changes to domain settings (nameservers, contacts) | Optional — useful for critical domains |
| **clientRenewProhibited** | Blocks domain renewal | Rare — only used in special cases (legal holds) |
| **clientHold** | Removes domain from DNS (stops resolving) | No — this is usually a problem indicator |
Recommended security setup: Enable clientTransferProhibited + clientDeleteProhibited on all your important domains. This is the standard "registrar lock" that prevents hijacking.
Server-Side Lock Codes (Set by Registry)
| Code | What It Does | Why It Happens |
|---|---|---|
| **serverTransferProhibited** | Registry-level transfer block | Set during disputes, legal holds, or for premium domains |
| **serverDeleteProhibited** | Registry-level deletion block | Same as above |
| **serverUpdateProhibited** | Registry-level update block | Same as above |
| **serverRenewProhibited** | Registry-level renewal block | Rare — used in legal situations |
| **serverHold** | Domain removed from DNS by registry | Domain suspended for non-payment, abuse, or legal order |
If you see serverHold: Your domain has been suspended at the registry level. Your website and email will stop working. Contact your registrar immediately — this usually means there's an unpaid invoice, an ICANN compliance issue, or an abuse report.
Pending Operation Codes
| Code | What It's Doing | How Long It Lasts |
|---|---|---|
| **pendingCreate** | Domain registration is being processed | Usually seconds to minutes |
| **pendingDelete** | Domain is queued for deletion and release | 5 days |
| **pendingRenew** | Renewal is being processed | Usually seconds |
| **pendingRestore** | Domain is being recovered from redemption | Up to 7 days |
| **pendingTransfer** | Transfer to new registrar is in progress | Up to 5 days |
| **pendingUpdate** | Changes are being applied | Usually immediate |
Expiration-Related Codes
| Code | Phase | What It Means |
|---|---|---|
| **autoRenewPeriod** | Just renewed automatically | Domain was auto-renewed; can still be un-renewed within a short window |
| **redemptionPeriod** | 45-75 days after expiry | Domain expired and can only be recovered for a premium fee ($80-200+) |
| **pendingDelete** | 75-80 days after expiry | Final 5-day hold before public release |
Special Codes
| Code | Meaning |
|---|---|
| **inactive** | Domain has no nameservers configured (registered but not pointed anywhere) |
| **addPeriod** | Just registered; within the Add Grace Period (can be deleted for a refund within ~5 days) |
| **renewPeriod** | Just renewed; within the Renew Grace Period |
| **transferPeriod** | Just transferred; within the Transfer Grace Period |
How to Read Multiple Status Codes
Domains often have multiple status codes simultaneously. Here's how to interpret common combinations:
Healthy, locked domain:
clientTransferProhibited clientDeleteProhibited
This is the ideal state — the domain is active and protected against unauthorized transfers and deletion.
Expired domain in redemption:
redemptionPeriod serverRenewProhibited serverTransferProhibited serverDeleteProhibited serverUpdateProhibited
All server locks are applied during redemption. The domain can only be restored by the original registrant through their registrar (for a premium fee).
Domain about to be released:
pendingDelete
This domain will be deleted and released for public registration within 5 days. If you want it, set up a backorder service.
Suspended domain:
serverHold clientTransferProhibited
The registry has suspended this domain (DNS is not resolving), and the registrar has it transfer-locked. The owner needs to resolve the issue with their registrar.
Check Any Domain's Status
Use [CheckHost's WHOIS lookup](/en/whois) to instantly see the status codes for any domain. We parse the raw WHOIS data and highlight the status codes with explanations, so you don't need to memorize this reference — but now you'll understand exactly what they mean when you see them.