A-R53-15

ICANN Domain Status has Domain Deletion Prohibited

Risk:
Advisory
CWE:
None

A domain with the status of "serverDeleteProhibited" prevents a domain from becoming unregistered. This is potentially a lock but may also stem from legal contests and should be determined


Details

Domains provide the backbone for all online services. ICANN (the Internet Corporation for Assigned Names and Numbers) is the ultimate authorative body for domains and the individual registrars and hold their own records tracking the status of domains. This tracking is useful for monitoring domains that are migrating between registrars and serves as a definitive source of truth regarding the status of a domain.

A domain marked as “serverDeleteProhibited” is one that cannot be released for registration as a normal domain would, essentially blocking the domain from normal operations. This status can serve as a domain protection measure if facilitated by the registrar protecting domains that accidently expire from unauthorised registration. This acts as an additional safeguard against domain theft and can help protect against unintentional loss of your domain to unauthorised parties.

However, there are circumstances where this status may be imposed due to other reasons including legal disputes. If you have not explicitly set your domain to be protected from transfers and deletions, this status may indicate an issue that needs your attention

Remediation

If this status is unexpected then contact your registrar to determine if there’s any unusual activity or concerns that you need to address. Otherwise if this is a protected domain status then best to note that this domain has this status for registration protection.

If you’re unsure of the status of your domains SkySiege can provide a same day report covering all your domains in your cloud accounts:

Discover if you're vulnerable

SkySiege Cloud Security Assessments scan for this issue and provide same-day reports..
Available for individual projects or organisations.

Related Tests