DNS 3 NXDOMAIN vs 19 BADMODE
Embed This Widget
Add the script tag and a data attribute to embed this widget.
Embed via iframe for maximum compatibility.
<iframe src="https://statuscodefyi.com/iframe/entity//" width="420" height="400" frameborder="0" style="border:0;border-radius:10px;max-width:100%" loading="lazy"></iframe>Paste this URL in WordPress, Medium, or any oEmbed-compatible platform.
https://statuscodefyi.com/entity//Add a dynamic SVG badge to your README or docs.
[](https://statuscodefyi.com/entity//)Use the native HTML custom element.
Both DNS 3 (NXDOMAIN) and 19 (BADMODE) belong to the DNS Response Codes (RCODEs) category. 3 indicates that non-Existent Domain. The queried domain name does not exist in the DNS namespace. Meanwhile, 19 means that bad TKEY Mode. The TKEY mode field contains a value not supported by the server.
Description
Non-Existent Domain. The queried domain name does not exist in the DNS namespace.
When You See It
The domain has no DNS records at all — either it was never registered, has expired, or you have a typo in the hostname.
How to Fix
Double-check the domain spelling. If you own the domain, verify your registrar settings and ensure the nameservers are correctly delegated.
Description
Bad TKEY Mode. The TKEY mode field contains a value not supported by the server.
When You See It
Your client attempted a TKEY key exchange using a mode (e.g., Diffie-Hellman, GSS-API) that the server does not support or has not been configured for.
How to Fix
Check which TKEY modes the server supports and configure your client to use a compatible mode. GSS-TSIG (mode 3) is the most widely deployed.
Key Differences
DNS 3: Non-Existent Domain. The queried domain name does not exist in the DNS namespace.
DNS 19: Bad TKEY Mode. The TKEY mode field contains a value not supported by the server.
You encounter 3 when the domain has no DNS records at all — either it was never registered, has expired, or you have a typo in the hostname.
You encounter 19 when your client attempted a TKEY key exchange using a mode (e.g., Diffie-Hellman, GSS-API) that the server does not support or has not been configured for.
When to Use Which
For 3 (NXDOMAIN): Double-check the domain spelling. If you own the domain, verify your registrar settings and ensure the nameservers are correctly delegated. For 19 (BADMODE): Check which TKEY modes the server supports and configure your client to use a compatible mode. GSS-TSIG (mode 3) is the most widely deployed.