Guides
Domain Status Codes Explained: clientHold to pendingDelete
2026-07-07 · OSIR Team
Summary: A domain status code is a short label, published in WHOIS and RDAP, that tells you what state a domain is in and which actions are allowed on it. Every gTLD domain carries at least one. The 17 standard EPP codes split into two families: client statuses your registrar sets (and can remove for you) and server statuses only the registry controls. Two of them, clientHold and serverHold, pull a domain out of DNS so the site and email stop working; the transfer- and delete-prohibited codes protect it; and the pending* codes mark a transition in progress. Read them like vital signs: when something breaks, the status code usually names the cause.
What a domain status code actually is
Domains are managed through EPP (the Extensible Provisioning Protocol), the standard registrars use to talk to registries. Every domain object carries one or more status values defined by that protocol. They are not cosmetic: a status is what the registry enforces. If a domain shows clientTransferProhibited, the registry will reject a transfer request outright, no matter who sends it.
Define: an EPP status code is a machine-readable flag on a domain that both describes its current state and controls which operations (transfer, delete, update, renew, resolve) the registry will permit.
Where you see them
The same codes surface in three places:
| Source | Field | Who reads it |
|---|---|---|
| WHOIS lookup | Domain Status |
People, legacy tools |
| RDAP query | status array |
Modern tools, AI agents, APIs |
| Registrar dashboard | usually plain-language labels | You |
A raw WHOIS block looks like this, one line per status:
Domain Status: clientTransferProhibited
Domain Status: clientDeleteProhibited
Domain Status: clientUpdateProhibited
Each status also links to an ICANN explainer page in real WHOIS output, but the code itself is the part that matters.
Client vs server: who can change what
This single distinction answers most "why can't I do X?" questions.
| Prefix | Set by | Removed by | You can change it? |
|---|---|---|---|
| client | Your registrar | Your registrar, at your request | Yes, through your registrar |
| server | The registry | Only the registry | No, not directly |
A client status is under your control: ask your registrar (or toggle it in the dashboard) and it changes. A server status is set by the registry for a reason, a 60-day lock, a legal dispute, an abuse case, and typically clears on its own or requires the registry to act.
The 17 standard EPP status codes
These are the core codes defined by the protocol. Everything else below is a grace-period or transitional status layered on top.
| Status | Family | Effect |
|---|---|---|
ok |
base | Normal state, no restrictions |
inactive |
base | No nameservers set, domain cannot resolve |
clientHold |
client | Registry pulls the domain from DNS (site and email go dark) |
serverHold |
server | Same effect, registry-imposed |
clientTransferProhibited |
client | Blocks transfer to another registrar |
serverTransferProhibited |
server | Blocks transfer, registry-imposed |
clientDeleteProhibited |
client | Blocks deletion |
serverDeleteProhibited |
server | Blocks deletion, registry-imposed |
clientUpdateProhibited |
client | Blocks changes to nameservers and contacts |
serverUpdateProhibited |
server | Blocks updates, registry-imposed |
clientRenewProhibited |
client | Blocks renewal, including auto-renew |
serverRenewProhibited |
server | Blocks renewal, registry-imposed |
pendingCreate |
pending | Registration is being processed |
pendingTransfer |
pending | A transfer request is awaiting approval |
pendingRenew |
pending | A renewal is being processed |
pendingUpdate |
pending | An update is being processed |
pendingDelete |
pending | Scheduled for permanent removal |
One rule ties them together: the ok status disappears the moment any other status is added. A locked, perfectly healthy domain will not show ok; it will show its lock statuses instead. That is normal and not a warning sign.
The lock statuses: your domain's seatbelt
Most registrars offer a "domain lock" toggle. Turning it on sets the client-side prohibition trio:
clientTransferProhibited— stops domain hijacking via unauthorized transferclientDeleteProhibited— stops accidental or malicious deletionclientUpdateProhibited— stops changes to your nameservers and contacts
Keep every domain you care about locked, and unlock only for the few minutes you need to make a change or start a transfer, then re-lock. For high-value names, a registry lock service adds the three server* equivalents on top, so even a compromised registrar account cannot move the domain; changes then require out-of-band verification with the registry.
Hold statuses: why a domain goes dark
clientHold and serverHold are the ones that scare people, because they remove the domain from the DNS zone entirely. The website returns nothing and email bounces, even though the registration is still valid.
| Status | Common causes |
|---|---|
clientHold |
Non-payment, failed registrant (WHOIS) verification, an abuse complaint |
serverHold |
Court order, law-enforcement request, registry policy violation |
If you hit clientHold, contact your registrar, it is usually a billing or verification fix. serverHold is set by the registry, so your registrar has to resolve it on your behalf.
Pending statuses: something is in motion
Pending codes are temporary and clear on their own once the operation finishes or times out.
| Status | Meaning | Typical window |
|---|---|---|
pendingTransfer |
Transfer requested, awaiting approval or auto-approval | up to 5 days |
pendingDelete |
Past redemption, queued for release to the public pool | 5 days, irreversible |
pendingRestore |
A restore from redemption has been requested | short, then clears |
pendingCreate / pendingRenew / pendingUpdate |
The named operation is being processed | usually minutes |
pendingDelete is the one to respect: once a domain enters it, nothing can save the name. It has already passed the renewal grace period and the 30-day redemption window. For the full timeline, see Domain Lifecycle Explained.
Grace-period statuses
Separate from the core EPP set, registries apply grace-period statuses in the windows after registration, renewal, transfer, or deletion. These map directly onto the domain lifecycle.
| Status | When it appears | Duration |
|---|---|---|
addPeriod |
Right after initial registration | 5 days |
renewPeriod |
After an explicit renewal | 5 days |
autoRenewPeriod |
After auto-renewal at expiry | up to 45 days |
transferPeriod |
After a successful transfer | 5 days |
redemptionPeriod |
After deletion, before pendingDelete | 30 days |
During redemptionPeriod a domain is out of the zone and only the original registrant can recover it, for a restore fee. Renewal is not possible in redemption; you restore it instead.
Read the codes to fix the problem
Status codes are the fastest diagnostic you have. Match the symptom to the code:
| Symptom | Check for | Fix |
|---|---|---|
| Site and email suddenly down | clientHold, serverHold |
Clear the billing/verification issue with your registrar |
| Domain "not resolving" but registration fine | inactive |
Add nameservers |
| Transfer rejected | clientTransferProhibited |
Ask registrar to unlock |
| Transfer still rejected after unlocking | serverTransferProhibited |
You are in the 60-day post-registration or post-transfer lock; wait it out |
| Can't change nameservers | clientUpdateProhibited |
Ask registrar to unlock |
| Won't renew / didn't auto-renew | clientRenewProhibited |
Have the block removed before expiry |
Quick reference
| Status | Resolves in DNS? | Blocks |
|---|---|---|
ok |
Yes | Nothing |
inactive |
No | Nothing (no nameservers) |
clientHold / serverHold |
No | DNS |
clientTransferProhibited / serverTransferProhibited |
Yes | Transfer |
clientDeleteProhibited / serverDeleteProhibited |
Yes | Deletion |
clientUpdateProhibited / serverUpdateProhibited |
Yes | Updates |
clientRenewProhibited / serverRenewProhibited |
Yes | Renewal |
pendingTransfer |
Yes | In progress |
pendingDelete |
No | Everything (irreversible) |
Domain status codes FAQ
What does clientTransferProhibited mean?
It means your registrar has locked the domain against transfers to another registrar, which is the normal, recommended protected state. It is not a problem: it stops anyone from hijacking the name. To transfer the domain yourself, ask your registrar to remove the lock (or toggle it in your dashboard) first.
Is the "ok" status good or bad?
Good. ok means the domain is in a normal state with no restrictions. But note that ok vanishes as soon as any other status is added, so a securely locked domain shows its lock codes instead of ok. Seeing lock statuses rather than ok is exactly what you want.
Why is my domain not resolving?
Check the status codes first. clientHold or serverHold removes the domain from DNS, so the site and email stop working even though the registration is valid, usually a billing, verification, or policy issue to resolve with your registrar. If instead you see inactive, the domain simply has no nameservers set; adding them fixes it.
Can I remove a server status code myself?
No. server* codes are set by the registry and only the registry can lift them. Many clear automatically, for example serverTransferProhibited from the mandatory 60-day post-registration or post-transfer lock. If an unexpected server status appears, your registrar must contact the registry on your behalf.
Can a domain in pendingDelete be recovered?
No. pendingDelete comes after both the renewal grace period and the 30-day redemption window have already passed, so the name cannot be saved at that point. It sits in pendingDelete for 5 days, then drops to the public registration pool. To recover an expired name, you must act during the grace or redemption stages, not in pendingDelete.
Check any domain's status the AI-native way
Every domain at OSIR shows its live status codes in the dashboard and over RDAP, API, and MCP, so you (or an AI agent) can read a name's exact state, lock or unlock it, and act before a grace window closes. Browse the extensions directory and pricing to register or transfer a name. New to this? Start with Domain Registries Explained, then the Domain Lifecycle and the status-codes help article.
Image generated with AI (Higgsfield).