Skip to content
Website Checker
Blog 03

Is a website down for everyone or just me? A step-by-step diagnosis

Updated October 12, 2026 · Reading time: 5 min · 5 sections

Before you reboot the router or open a ticket with your host, spend two minutes working out where the failure sits. A website that will not load can be down for everyone, broken only on your network, or blocked by something on your own device, and each case has a different fix.

I work through the same path every time, from the cheapest test to the most involved, and it rarely takes more than a handful of steps. The website checker covers the middle of that path (DNS, certificate, one reachability probe), and this guide covers the rest.

Step 1: Read the error, do not just reload

The wording of the error already narrows the cause. Chrome-style messages are the most common, and the layer they point to is fairly consistent.

What common browser errors usually mean
MessageLayerFirst thing to try
DNS_PROBE_FINISHED_NXDOMAINDNS: the name does not existCheck spelling, then the domain's DNS records
ERR_NAME_NOT_RESOLVEDDNS: your resolver could not answerTry another network or resolver
ERR_CONNECTION_REFUSEDServer reached, nothing listeningServer or firewall issue, usually the owner's side
ERR_CONNECTION_TIMED_OUTNo reply at allRoute or firewall problem; test from another network
NET::ERR_CERT_DATE_INVALIDCertificate expired or clock wrongCheck your device date, then the certificate expiry
NET::ERR_CERT_COMMON_NAME_INVALIDCertificate does not cover this nameTry www versus the bare domain
502, 503, 504Site reached, back end failingWait and retry; the owner must fix it

An HTTP error such as 502 or 503 is actually good news for diagnosis: the name resolved, the connection worked and the certificate was accepted. The fault is on the server side.

Decision path: does the name resolve, does HTTPS answer, is the certificate valid, does it work from another network, then check status pages
The order I follow. Each question rules out one layer before the next.

Step 2: Walk the path

  1. Does the name resolve? If a lookup says NXDOMAIN, the name is misspelt, expired at the registrar, or its records were removed. A status of SERVFAIL points to a broken zone or failing nameservers. The DNS records guide explains how to tell the two apart.
  2. Does HTTPS answer from your browser? A reachability probe only says whether a connection came back and how long it took. It cannot tell a refused connection from a bad certificate, because the browser hides the reason from page scripts.
  3. Is the certificate valid for this name? Check the expiry and the coverage, as described in the certificate expiry guide. A date problem on only one device usually means that device's clock is wrong.
  4. Does a different network work? Switch your phone to mobile data and open the same address. If it loads there, the site is up and the problem is between you and it: your Wi-Fi, your provider, a DNS filter, or a router cache.
  5. Does a clean browser work? Try a private window, and then another browser. Extensions that block content, rewrite requests or force HTTPS are a frequent hidden cause, as are stale cookies and cached redirects.
  6. Does the other name work? Try www.example.com and example.com separately. They often point to different places and use different certificates.
  7. Is the host or CDN having an outage? Providers publish status pages. If your host or CDN reports an incident, you can stop investigating.

Step 3: Clear stale local data

Your computer remembers DNS answers for as long as their TTL allows, and a wrong or old answer can stick after the real records change. Flushing the local cache is harmless.

Flush the DNS cache on your device
SystemCommand
macOSsudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder
Windowsipconfig /flushdns
Linux with systemd-resolvedresolvectl flush-caches

Also restart the browser afterwards, because browsers keep their own short-lived DNS cache. If you changed DNS yourself in the last day or two, remember that other people may still see the old answer until the old TTL runs out; a record with a 3600-second TTL can take up to an hour to disappear from resolvers that cached it just before the change.

If it is your own site

Run through the causes that owners miss most:

  • Domain expired. Registrars park an expired domain, and the site simply stops resolving or shows a registrar page.
  • Certificate expired. Common, entirely preventable, and now more likely because lifetimes are shorter.
  • DNS records changed or deleted during a provider or e-mail change, often the A record or a CNAME.
  • Hosting suspended for an unpaid invoice or a resource limit.
  • Firewall or security plugin blocking a country, a network or your own address.
  • Only one of www and the bare domain configured.

Compare what DNS returns with where you think the site is hosted. If the A record points at an address your host no longer uses, the site vanishes the moment the old server is switched off.

What a single check cannot prove

Every outside check runs from one place on one network. A public tool that tests from its own server, such as Down For Everyone Or Just Me, can say how the site looks from there; it cannot see a regional outage, a block by your provider, or a problem that only appears for logged-in users. The checker on this site runs from your own browser, which makes it better at telling you about your connection and worse at telling you about the rest of the world.

What a browser cannot see: the HTTP status code and headers of another site, its server software, the redirect chain, blacklist or reputation status, and the result from other countries. A green reachability result means a connection came back, not that every page works.

If three different paths all say the site works and yours does not, the fault is local. If two networks fail and your host's status page is quiet, open a ticket and include the exact error text, the time, and which checks passed. That detail gets you an answer faster than "my site is down".

Questions and answers

How do I know if a website is down for everyone or just me?

Open it on mobile data or another network, try a private window, and run a DNS and certificate check. If it fails everywhere the site is down; if it only fails on your network or device, the problem is local.

What does DNS_PROBE_FINISHED_NXDOMAIN mean?

The DNS lookup came back saying the name does not exist. Check the spelling and, if it is your domain, look for an expired registration or deleted DNS records.

Why does a site work on my phone but not on my computer?

Different network, different DNS cache, extensions or a wrong clock. Flush the DNS cache, try a private window and check the date and time on the computer.

Can an online checker prove a site is up?

Only from where it tests. One location can confirm the site answers there, but it cannot see regional outages, provider blocks or problems after login.

How long does a DNS change take to show up?

Resolvers keep the old answer until its TTL runs out, so with a TTL of 3600 seconds expect up to an hour. Lowering the TTL a day before a planned change shortens the wait.

Run the website checker

More posts