Skip to main content
protocols.pageprotocols.page
3

NXDomain

Non-Existent Domain

Core RCODERFC 1035

NXDomain (3) means the queried domain name does not exist in the DNS. The authoritative nameserver has confirmed the name does not exist in the zone. This is distinct from NOERROR/NODATA (name exists but no records of the requested type). NXDomain is authoritative – the name simply does not exist.

RCODE

3

Name

NXDomain

Standard

RFC 1035

Description

NXDOMAIN is the definitive 'name not found' response. It is returned by the authoritative server for the zone containing the queried name, confirming the name does not exist. NXDomain responses include a negative TTL from the SOA record's MINIMUM field – resolvers cache NXDomain for this duration. NXDOMAIN hijacking is common with ISPs and CDNs that intercept NXDomain responses and return their own IP for monetization or search redirect purposes. DNSSEC-aware resolvers can detect and block NXDOMAIN hijacking via NSEC/NSEC3 authenticated denial of existence.

Common Causes

  • –Queried domain name does not exist in the zone
  • –Typo in domain name
  • –Domain was deleted or expired
  • –Subdomain does not exist (e.g., querying removed A record)
RFC 1035 – DNS RCODE specification →