Diagnosis Guide

Is a Website Down for Everyone or Just Me? Complete Diagnosis Guide

A website is down for everyone when independent network probes across multiple Autonomous Systems all fail to receive a valid HTTP 200 response. Here is how to verify it in under 5 minutes — and fix it if it is only you.

Quick Answer

Down for everyone: DownCheck’s 3 independent probes (HTTP from Railway, Cloudflare Edge, DNS resolution) all return failures simultaneously. No single ISP route, DNS cache, or network path can fail across Google AS15169, Cloudflare AS13335, and Quad9 AS19281 at the same time unless the origin itself is down.

Down just for you: At least one probe succeeds. The failure is in your local DNS cache, ISP routing, browser, firewall, VPN tunnel, or hosts file.

What “Down for Everyone” Actually Means (Technically)

A website is down for everyone when independent network probes across multiple Autonomous Systems (ASNs) all fail to receive a valid HTTP 200 response from the origin server or its CDN edge layer. An ASN is a collection of IP routing prefixes operated by a single administrative entity — Google LLC operates AS15169, Cloudflare operates AS13335, and Quad9 DNS operates AS19281. These networks peer via BGP (Border Gateway Protocol) but maintain entirely separate routing tables, infrastructure, and physical paths through the internet.

This definition matters because it rules out false positives. No single network failure can simultaneously break connectivity across unrelated Autonomous Systems. An ISP route flap affects only traffic transiting that ISP. A DNS cache poisoning event affects only users of that resolver. A BGP misconfiguration at a single AS withdraws only that AS’s prefixes. When all three of DownCheck’s probes — dispatched from separate ASNs — fail to reach a target within 10 seconds, the probability of a coincidental multi-AS failure is negligible: the origin server, its DNS infrastructure, or its CDN layer is genuinely unreachable.

Confirming a global outage requires querying 4 or more independent DoH (DNS over HTTPS) resolvers simultaneously — Cloudflare (1.1.1.1), Google (8.8.8.8), Quad9 (9.9.9.9), and OpenDNS (208.67.222.222) — and cross-referencing HTTP response codes with DownCheck’s multi-probe telemetry. If DNS resolution fails across all four resolvers and the HTTP probe returns a connection timeout rather than a 5xx error, the most likely root cause is a DNS infrastructure failure at the authoritative nameserver level, not an origin server crash.

HTTP 200 vs TCP reachability: DownCheck’s HTTP probe follows redirects and checks for a valid HTTP 200–399 response — not just TCP connectivity. A server that accepts connections on port 443 but returns HTTP 502 (Bad Gateway) or HTTP 503 (Service Unavailable) is counted as functionally down, even though the TCP handshake succeeded.

What “Down Just For Me” Means and Why It Happens

A website that appears down only on your connection is experiencing a local failure — a fault in the network path, name resolution, or configuration between your device and the internet, rather than at the origin server. DownCheck’s probes reach the website successfully while your browser cannot because you are traveling a different network route. Six distinct failure classes account for the overwhelming majority of “just me” reports:

1ISP Routing Failure

Your ISP’s border router has a stale or withdrawn BGP route to the destination AS. Traffic is black-holed mid-transit. Switching to mobile data (a different AS) bypasses this entirely.

2DNS Cache Poisoning / Stale Record

Your ISP’s recursive resolver is serving a cached A record pointing to a decommissioned IP. The authoritative nameserver has updated it, but the TTL has not expired at your resolver. Flushing your DNS cache or switching to 1.1.1.1 resolves this.

3Browser Extension Interference

Ad blockers, privacy extensions (uBlock Origin, Privacy Badger), or security tools intercept requests to specific domains via their filter lists. Opening Incognito disables most extensions by default and isolates this cause.

4VPN Tunnel Conflict

A VPN client in split-tunnel or full-tunnel mode may route specific destination IPs through a VPN server that is experiencing an outage or applying firewall rules. Disconnecting the VPN and testing directly isolates this.

5Corporate / Network Firewall

Enterprise firewalls, parental controls, and router-level DNS filtering (Pi-hole, OpenDNS Family Shield) block access to specific domains or categories. These operate at the network edge and are invisible to your browser’s error messages.

6Local hosts File Override

Your OS’s hosts file (/etc/hosts on Linux/macOS, C:\Windows\System32\drivers\etc\hosts on Windows) may contain an entry that overrides DNS and redirects the domain to 127.0.0.1 or an incorrect IP address.

Each failure class produces a different browser error. ERR_NAME_NOT_RESOLVED points to DNS. ERR_CONNECTION_REFUSED means TCP was rejected — often a hosts file redirect to localhost. ERR_CONNECTION_TIMED_OUT suggests an ISP routing or firewall issue where traffic is dropped silently without a TCP RST packet. Matching your error code to the cause reduces the diagnosis from 7 steps to 2 or 3.

The 7-Step Diagnosis Checklist

Follow these steps in order. Each step either confirms the site is globally down (and you can stop) or isolates the local failure to a specific layer of your network stack. Completing all 7 steps takes under 5 minutes and identifies the root cause in over 95% of cases.

1

Check DownCheck

Enter the site’s URL at downcheck.online. If all 3 probes (HTTP, Cloudflare Edge, DNS) fail, the outage is global — remaining steps are unnecessary. If at least one probe succeeds, continue to step 2.

2

Open an Incognito / Private Window

Press Ctrl+Shift+N (Chrome/Edge) or Ctrl+Shift+P (Firefox) and navigate to the site. Incognito disables most extensions and uses a fresh session with no cached data. If it loads in incognito, a browser extension or cached response is the cause.

3

Switch to a Different Network

Disable Wi-Fi and test using your phone’s mobile data (4G/5G), which routes through a completely different ASN than your home or office ISP. If the site loads on mobile data, the failure is within your local network or ISP’s routing infrastructure.

4

Flush Your DNS Cache

Clear your OS’s local DNS cache to force a fresh lookup from the authoritative nameserver.

Windows: ipconfig /flushdns macOS: sudo dscacheutil -flushcache && sudo killall -HUP mDNSResponder Chrome: chrome://net-internals/#dns → Clear host cache
5

Switch to an Alternate DNS Resolver

Change your network adapter’s DNS server to 1.1.1.1 (Cloudflare) or 8.8.8.8 (Google) and retry. If the site now resolves, your ISP’s recursive DNS resolver had a stale, poisoned, or DNSSEC-invalid cache entry for that domain.

6

Toggle Your VPN

If you are connected to a VPN, disconnect it and test directly. If you are not using a VPN, enable one with an exit server in a different country and test again. VPN misconfigurations and exit-node IP blocks are responsible for a significant share of “just me” failures for specific sites.

7

Contact Your ISP

If all 6 prior steps confirm the site is globally reachable but you still cannot access it, your ISP is implementing route-level filtering, IP blocking, or DNS filtering for that specific domain. Contact support with the DownCheck result and tracert domain.com (Windows) or traceroute domain.com (macOS/Linux) output showing where packets are dropped.

tracert example.com  (Windows) traceroute example.com  (macOS/Linux)

How DownCheck Detects Global vs Local Outages

DownCheck’s architecture is built around a 3-probe, multi-Autonomous-System design that eliminates false positives from single-point-of-measurement tools. Unlike crowd-sourced outage detectors that rely on user reports (which lag real incidents by 15–30 minutes), DownCheck dispatches active network requests the moment you submit a URL and returns a confidence-scored verdict within seconds.

HTTP Origin Probe

A full HTTP/HTTPS request sent from a Railway-hosted server (US region, separate ASN from Cloudflare). Follows up to 5 redirects. Validates HTTP status 200–399. Records response time in milliseconds.

Timeout: 10s
Follows redirects: yes
TLS validation: strict
Records: status code + latency

Cloudflare Edge Fetch

A fetch() dispatched from a Cloudflare Worker at the edge PoP nearest to the request origin. Measures delivery from Cloudflare AS13335 — the world’s largest CDN and reverse-proxy network. Distinguishes CDN-layer failures from origin failures.

Origin: Cloudflare AS13335
PoP: nearest edge location
Detects: CDN vs origin failures
Records: status + CF-Ray ID

DNS Multi-Resolver Check

Parallel DNS queries to 4 independent resolvers — Cloudflare (1.1.1.1), Google (8.8.8.8), Quad9 (9.9.9.9), OpenDNS (208.67.222.222) — via DNS over HTTPS (DoH). Confirms the domain resolves to a live A or AAAA record across separate resolver infrastructures.

Resolvers: 1.1.1.1, 8.8.8.8,
           9.9.9.9, 208.67.222.222
Protocol: DNS over HTTPS
Records: A + AAAA resolution

The three probe results are combined into a weighted confidence score that drives the final verdict. The HTTP probe carries the highest weight because it tests actual application-layer reachability. The Cloudflare Edge probe distinguishes CDN-layer failures from origin failures. The DNS probe confirms whether the domain can even be resolved before HTTP connectivity is attempted.

HTTP ProbeCF Edge ProbeDNS ProbeVerdict
✓ 200 OK✓ 200 OK✓ ResolvesUp
✓ 200 OK⚠ Timeout✓ ResolvesLikely Up
✗ 5xx / Timeout✓ 200 OK✓ ResolvesLikely Down
✗ Timeout✗ Timeout✓ ResolvesDown — Origin unreachable
✗ Timeout✗ Timeout✗ NXDOMAINDown — DNS failure

When the DNS probe fails with NXDOMAIN across all 4 resolvers but the HTTP probe times out rather than receiving a connection refused, the most likely root cause is an authoritative DNS infrastructure failure — the nameservers for the domain are unreachable, preventing any client from resolving the domain to an IP. This is distinct from an origin server crash, where DNS resolves correctly but the TCP connection to the resolved IP fails. DownCheck surfaces this distinction explicitly in the probe detail panel so you can identify whether to contact the site’s DNS provider or hosting provider.

Why not just ping? ICMP ping tests TCP/IP reachability at the network layer (L3) but does not test HTTP (L7) application availability. A server can respond to ping while its web server process (nginx, Apache, Caddy) is crashed or returning errors. DownCheck’s HTTP probe tests the full application stack — the only layer that matters to your users.


Frequently Asked Questions

How do I know if a website is down for everyone or just me?
Use a multi-probe monitoring tool like DownCheck that sends independent HTTP requests and DNS queries from multiple Autonomous Systems (ASNs). If probes from Google AS15169, Cloudflare AS13335, and Quad9 AS19281 all fail simultaneously, the outage is global. If only your local connection fails, the issue is on your network, ISP, or device.
What does “down for everyone” mean technically?
A website is down for everyone when independent network probes across multiple Autonomous Systems (ASNs) all fail to receive a valid HTTP 200 response from the origin server or CDN. No single network path, ISP route, or DNS cache can simultaneously fail across separate global autonomous systems.
Why can some people access a website while others cannot?
Partial outages occur due to regional CDN failures, ISP-level DNS filtering or route blocking, BGP routing anomalies affecting specific network paths, or geographic load balancing routing different regions to different origin servers. A website can be fully operational on one network and completely inaccessible on another.
Can a DNS failure make a website appear down only for me?
Yes. DNS cache poisoning, stale TTL records in your ISP’s recursive resolver, or DNSSEC validation failures can prevent your device from resolving a domain to the correct IP while the website remains fully operational globally. Flushing your local DNS cache and switching to an alternative resolver (1.1.1.1 or 8.8.8.8) resolves this in most cases.
What is the fastest way to check if a website is down?
Enter the URL at downcheck.online. DownCheck immediately dispatches 3 concurrent probes — an HTTP request from a Railway-hosted server, a Cloudflare Edge fetch from the nearest PoP, and a DNS resolution check against 4 global resolvers — and returns a combined confidence verdict within seconds.
What is an Autonomous System (ASN) and why does it matter for outage detection?
An Autonomous System (AS) is a collection of IP routing prefixes under the control of a single administrative entity, identified by an ASN. Internet traffic routes between ASes via BGP. Outage probes from different ASNs are meaningful because a failure across all of them confirms the origin server itself is unreachable — not just a single routing path or ISP.

Check a site right now

DownCheck runs an HTTP probe and a 4-resolver DNS consensus simultaneously, telling you in seconds whether a site is down globally or just on your connection.

Run a Free Check →