WHOIS Domain Privacy Redaction & Registrar Status Code Explainer
Analyze raw WHOIS/RDAP records, decode ICANN EPP domain status codes into plain English, inspect GDPR privacy redactions, and audit DNS transfer lock health client-side.
Raw WHOIS / RDAP Payload
TWISTERTOOLS.COM
Example Registrar Corporation LLC
Active Redaction
signedDelegation
Registrar Transfer Lock (Client Locked)
Your registrar has placed an administrative lock on the domain to stop unauthorized domain transfers to other registrars.
Registrar Modification Lock
Prevents unauthorized modifications to domain contact records, nameservers, DS keys, and glue records.
Registrar Accidental Deletion Protection
Prevents the domain from being accidentally or maliciously purged and deleted from the registrar account.
100% Client-Side In-Memory Execution: All WHOIS and RDAP payload parsing, ICANN status regex evaluations, and GDPR privacy scans run locally within your web browser. No domain queries, IP addresses, proprietary logs, or raw search records are ever sent to or stored on external servers.
What Are ICANN EPP Domain Status Codes and Why Do They Matter?
Every domain registered on the internet operates under the governance of ICANN (Internet Corporation for Assigned Names and Numbers) and the Extensible Provisioning Protocol (EPP, defined in IETF RFC 5731). EPP status codes—also called domain statuses—are standardized operational directives that inform web crawlers, registrars, nameserver clusters, and systems administrators of the domain's current administrative posture.
Transfer Lock Protection
Codes like clientTransferProhibited ensure that an attacker with stolen registrar credentials cannot initiate an unauthorized inter-registrar transfer or hijack your domain assets.
DNS Suspension Detection
The appearance of clientHold or serverHold signifies immediate global DNS deactivation, taking websites and critical corporate email offline worldwide.
Expiry Lifecycle Tracking
Deciphering redemptionPeriod versus pendingDelete allows domain investors and system administrators to determine whether a domain can be renewed or is about to drop.
Comparative Architectural Matrix: Client-Level vs. Server-Level Status Codes
EPP status codes exist at two distinct hierarchical operational tiers. Understanding which tier applied the code reveals whether resolution requires logging into your registrar control panel or contacting the authoritative registry operator:
| Status Code Tier | Authoritative Entity | Typical Codes | Resolution Mechanism | Operational Impact |
|---|---|---|---|---|
| Client-Level (client*) | Retail Registrar (GoDaddy, Namecheap, Cloudflare) | clientTransferProhibited, clientHold, clientUpdateProhibited | Registrant toggles in account dashboard or verifies email | User-controlled security locks or billing notices |
| Server-Level (server*) | TLD Central Registry (Verisign, PIR, Nominet) | serverTransferProhibited, serverHold, redemptionPeriod | Registry intervention, legal dispute resolution, court release | Authoritative overrides; cannot be removed by customer panel |
The ICANN Domain Expiration Lifecycle: From Active to Drop
When a domain reaches its expiration date, it does not immediately become available for public registration. ICANN mandates a strict multi-stage lifecycle to protect domain registrants from accidental loss. Before acquiring an expiring name, verify its historical registration longevity using our Domain Age Checker to ensure the backlink authority remains intact:
Auto-Renew Grace Period
The domain expires, and status code autoRenewPeriod applies. The registrant can still renew the domain at regular pricing. Nameservers may be parked.
Redemption Grace Period
Status changes to redemptionPeriod. All DNS is shut down. The original owner can still restore the domain, but must pay an expensive redemption fee ($80 to $250+ USD).
Pending Delete Phase
Marked as pendingDelete for exactly 5 days. The domain can no longer be restored or renewed by anyone. It is locked in the registry queue awaiting deletion.
Public Release & Re-registration
The registry drops the domain back into the public pool. Drop-catchers and regular registrars can register it on a first-come, first-served basis at standard wholesale prices.
Frequently Asked Questions (FAQ)
What are ICANN EPP domain status codes?
EPP (Extensible Provisioning Protocol) status codes are standardized instructions set by domain registrars and top-level registries to indicate the operational, administrative, and security state of a domain name. They dictate whether a domain can be transferred, updated, renewed, deleted, or if its DNS resolves online.
What is the difference between client-level and server-level domain status codes?
Client-level codes (prefixed with 'client', e.g., clientTransferProhibited) are set directly by your retail domain registrar and can typically be toggled inside your customer account dashboard. Server-level codes (prefixed with 'server', e.g., serverHold or serverTransferProhibited) are enforced directly upstream by the registry operator (like Verisign for .com) and cannot be modified without registrar or legal registry intervention.
Why is clientTransferProhibited considered a security best practice?
clientTransferProhibited locks the domain record against unauthorized transfer attempts to another registrar. It acts as the primary defense against domain hijacking, credential theft, and unauthorized domain asset transfers. It does not affect live website hosting, DNS resolution, or incoming email.
What causes the clientHold or serverHold status code?
A 'Hold' status code is a critical suspension state that halts global DNS resolution. It is most frequently triggered by unpaid renewal invoices, failure to verify the registrant contact email within ICANN's 15-day verification window, or compliance suspensions resulting from copyright infringement, malware, or phishing abuse.
How does GDPR and ICANN Temporary Specification impact public WHOIS data?
Following the European Union General Data Protection Regulation (GDPR) and ICANN's subsequent consensus policies, registrars are required to redact personal identifying information (PII)—including registrant name, phone number, and physical mailing address—from public WHOIS lookups by default, replacing them with generic proxy tags or centralized contact webforms.
Is my WHOIS or RDAP input data sent to external servers by this tool?
No. TwisterTools operates with 100% client-side memory execution. All regex parsing, status code lookups, GDPR redaction scanning, and health calculations happen entirely inside your web browser. No domain queries, IP addresses, or raw data strings are transmitted or stored.
Related & Complementary Utilities
Explore more privacy-first client-side web tools.
HTTP Headers Inspector & Response Code Analyzer
Inspect HTTP response headers, check HTTP status codes, and analyze web security header policies.
Content Security Policy (CSP) Header Generator
Generate hardened Content Security Policy Level 3 headers with presets for Next.js, WordPress, and zero-trust security.
Domain to IP Converter & DNS Inspector
Instantly resolve domain names into IPv4/IPv6 addresses, inspect A-records, ISP metadata, and server locations.
Canonical URL Link Tag & Cross-Domain Audit Formatter
Generate, sanitize, and validate canonical link tags, HTTP response headers, hreflang clusters, and cross-domain rel=canonical markup with instant SEO audit diagnostics.