Verisign Registry Lock Service Status

How to Check Verisign Registry Lock on Verisign Domain Names

Determine if a domain name with a Verisign top-level domain (TLD), such as .com, .net, .cc, and .name, is locked with Verisign Registry Lock Service.

STEP 1

Visit the Whois lookup tool

STEP 2

Type the domain name into the lookup bar to check lock status:

If the domain name is locked only by Verisign Registry Lock Service, the following will appear:

Server Delete Prohibited – Confirms a domain name cannot be deleted or lapsed
Server Transfer Prohibited – Prevents unauthorized transfers away from domain name provider
Server Update Prohibited – Ensures no modifications are allowed, including name server re-delegations

If the domain name is locked only by the registrar, the following will appear:

Client Delete Prohibited – Confirms a domain name cannot be deleted or lapsed
Client Transfer Prohibited – Prevents unauthorized transfers away from domain name provider
Client Update Prohibited – Ensures no modifications are allowed, including name server re-delegations

If the domain name is locked by both the Verisign Registry Lock Service and the registrar, the following will appear:

Client and Server Delete Prohibited – Confirms a domain name cannot be deleted or lapsed
Client and Server Transfer Prohibited – Prevents unauthorized transfers away from domain name provider
Client and Server Update Prohibited – Ensures no modifications are allowed, including name server re-delegations

Example results for Verisign.com

    
          Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited 

          Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited 

          Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited 

          Domain Status: serverDeleteProhibited https://icann.org/epp#serverDeleteProhibited 

          Domain Status: serverTransferProhibited https://icann.org/epp#serverTransferProhibited 

          Domain Status: serverUpdateProhibited https://icann.org/epp#serverUpdateProhibited

Check Registry Lock on Host Records

Verisign Registry Lock Service can only be applied to nameserver hosts with Verisign TLDs.

For example, Verisign Registry Lock Service can be placed on the domain example.com which can have one or many nameserver host records (e.g., ns1.example.com, ns2.example.com.) This example represents three separate locks (one domain and two hosts).

Combining Verisign Registry Lock Service and a registrar lock service to lock both the host and the domain name is critical. Doing this can stop attacks which attempt to change the nameserver(s) where resolution occurs, thereby helping to prevent malicious activity.

To check registry lock status on a host record, ask your registrar to contact Verisign Support.