Domains with the ICANN EPP status serverRenewProhibited cannot be renewed and requires action to rescue the domain or otherwise migrate away from it
Domains provide the backbone for all online services. ICANN (the Internet Corporation for Assigned Names and Numbers) is the ultimate authorative body for domains and the individual registrars and hold their own records tracking the status of domains. This tracking is useful for monitoring domains that are migrating between registrars and serves as a definitive source of truth regarding the status of a domain.
When the ICANN EPP code is set to serverRenewProhibited the registrar or a higher authority in the DNS hierarchy has marked that the domain cannot be renewed. This means that the domain will forcibly expire at the end of its current registration and will no longer be active.
The reasons behind this status are variable and often sensitive so theres’s no specific guidance that we can provide. Your best optionn is to contact your registrar for the specific details as to why the domain cannot be renewed and what actions may be necessary to keep it functional.
Once you understand the underlying cause of this status, you can determine whether the domain can be rescued. If it cannot be rescued, you’ll need to develop a migration plan to safely transfer your services off that domain as well as safeguard all data and identities tied to that domain. Depending on the activity of the domain this can be a substantial amount of work.
Please note that the ultimate fate of the domain may allow it to be transferred to a third party, which could mean that any data or services associated with the domain - including emails and data held by third-party services - could become accessible to the new owner.
To prevent any unauthorised access or data loss, it’s crucial to implement a full domain migration plan as soon as you ascertain that the domain will no longer be under your organisation’s control. Even if you retain the domain, you may wish to strategically migrate away from this domain to avoid being placed in a situation where you’re required to proceed with a full domain migration by force.
Contact your registrar for assistance and determine what the status of your domain is. Proceed with good architectural guidance and a thorough categorisation as to all the data and services tied to the domain in question.
SkySiege Cloud Security Assessments scan for this issue and provide same-day reports.
Available for individual projects or organisations.
