Fixing MYNIC Domain Lock Status (clientTransferProhibited)

The MYNIC Domain Transfer Hurdle

If you are trying to transfer a .com.my or .my domain away from your current registrar (like Exabytes, Shinjiru, or ServerFreak) to another provider, or trying to update name servers, you might encounter a hard block.

A WHOIS lookup will show the domain status as clientTransferProhibited or serverTransferProhibited. This is a security feature called Registrar Lock, designed to prevent unauthorized domain hijacking.

1. Removing the Registrar Lock

For standard .com domains, you click a button in cPanel. For MYNIC domains, the process is heavily regulated.

If you purchased the domain through a reseller (Exabytes/Shinjiru), you must log into their billing portal (not cPanel) and find the Domain Management section. Look for the "Registrar Lock" toggle and disable it. The status should change to OK.

2. Accessing the MYNIC Ichoos Portal

Sometimes the reseller is unresponsive, or you own the domain directly. You need to log into the MYNIC portal (Ichoos).

1. Go to domainmanager.mynic.my.
2. Log in using your Administrative Contact Code (usually starting with CPA... or your Mykad/BRN).
3. If you lost access, you must submit a formal letter on company letterhead to MYNIC via customercare@mynic.my to reset the Administrative Contact email.

3. Generating the EPP / Authorization Code

Once logged in, navigate to Domain Name > Modify Domain. To transfer the domain to a new registrar, you need the Authorization Code (EPP Code).

In the MYNIC portal, find your domain, click Transfer, and request the Authorization Code. It will be emailed only to the Administrative Contact email on file.

Provide this EPP code to your new registrar to initiate the transfer.

---

Locked out of your own company's domain? We've helped companies like UrusHQ regain legal control of their MYNIC domains from unresponsive ex-developers and agencies.

Secure your digital assets today with JagaWeb's RM5,000 Ownership & Access Review, ensuring your company—not your agency—holds the master keys. Maintain that security long-term with our RM450/month Care Plan.