Skip to main content

Fix it: guides for the errors people actually hit

One guide per error message: what it means, why it happens, the exact fix per platform, and how to tell a local problem from a real outage.

Free check SSL handshake failed: causes and how to diagnose it

Version mismatch, no shared cipher, a bad certificate or an interception proxy can each break a handshake. Here is how to tell which one it is.

View →
Free check How to flush the DNS cache on Windows, macOS and Linux

A DNS cache holds old answers after a change. Flush it with ipconfig /flushdns on Windows, dscacheutil on macOS, or resolvectl flush-caches on Linux.

View →
Free check DNS error: what it means and how to find the real cause

"DNS error" covers several unrelated failures. Answer three quick questions to find which one you have and the guide that fixes it.

View →
Free check This site can't be reached: what the message means and how to fix it

Chrome's generic headline covers many different errors. Find the real cause from the code underneath it and the matching fix for each one.

View →
Free check Your connection is not private: what the warning means and how to fix it

Chrome's headline over the whole NET::ERR_CERT_* family. What each specific certificate error code means and how to fix it.

View →
Free check ERR_SSL_VERSION_OR_CIPHER_MISMATCH: causes and fixes

The handshake found no shared TLS version or cipher. Usually a server still offering only TLS 1.0/1.1 or weak ciphers.

View →
Free check ERR_TOO_MANY_REDIRECTS: what causes a redirect loop and how to fix it

The browser followed a redirect chain that never reached a final page. Usually an HTTP-to-HTTPS loop between a proxy and the origin.

View →
Free check ERR_CONNECTION_REFUSED: what it means and how to fix it

The host rejected the TCP connection outright, usually because nothing listens on that port. How to tell why, on your side or the server's, and fix it.

View →
Free check ERR_CONNECTION_RESET: causes and fixes

An open connection was cut off by a TCP reset, usually from a firewall or filter, antivirus, or a crashed server process. How to tell which and fix it.

View →
Free check ERR_CONNECTION_TIMED_OUT: why it happens and how to fix it

The connection attempt got no answer at all, usually because a firewall drops it, the server is down, or DNS points elsewhere. How to find which.

View →
Free check ERR_EMPTY_RESPONSE: causes and fixes

The connection was accepted but the server sent back zero bytes. Learn the common causes, from crashed workers to protocol mismatches, and how to fix it.

View →
Free check ERR_HTTP2_PROTOCOL_ERROR: causes and fixes

TLS worked, but a frame or stream broke HTTP/2's rules. Causes range from oversized headers to a proxy's HTTP/2 bug.

View →
Free check ERR_NAME_NOT_RESOLVED: what it means and how to fix it

The browser could not turn the hostname into an IP address. Chrome uses this code for every failed DNS lookup, from a missing record to a dead resolver.

View →
Free check ERR_ADDRESS_UNREACHABLE: what it means and how to fix it

Your device or a router reported no path to the site's IP address. Usually a VPN, private IP, macOS permission or IPv6 fault; sometimes a server firewall.

View →
Free check Cloudflare Error 520: what it means and how to fix it

The origin answered but the response was empty or unreadable, so Cloudflare could not relay it. How to read origin logs and bypass Cloudflare to test directly.

View →
Free check Cloudflare Error 521: web server is down - causes and fixes

The origin refused Cloudflare's connection outright. Wrong port, blocked firewall ranges, or a TLS mode mismatch - plus how 521 differs from 523.

View →
Free check Cloudflare Error 522: connection timed out - causes and fixes

The TCP handshake to the origin never completed within about 15 seconds. Causes, fixes, and how 522 differs from a slow-response 524.

View →
Free check ERR_CERT_DATE_INVALID: expired certificate or wrong clock, and how to fix it

The certificate is expired or not yet valid, or the visitor's clock is wrong. How to read the dates with openssl and fix both causes.

View →
Free check ERR_SSL_PROTOCOL_ERROR: what it means and how to fix it

The TLS handshake failed before any certificate was judged. Causes range from a non-TLS port to QUIC, antivirus scanning and Cloudflare SSL mode.

View →
Free check Fix a canonical URL pointing to staging

A staging canonical on live pages is a base URL config that traveled with a release or a database copy. The causes, how to verify the fix, how to prevent it.

View →
Free check Site disappeared from Google: what to check

The ordered checklist: manual action, noindex, robots.txt, canonical, hacked or blacklisted, server errors, expired domain. Six are visible from outside.

View →
Free check How to fix a slow DNS lookup

Measure the lookup before you change anything, then fix the resolver, the TTLs or the CNAME chain that is costing you the delay.

View →
Free check Cron expressions: the five fields, with examples

What each of the five cron fields means, a table of the schedules people actually use, and the nine mistakes that run a job at the wrong time.

View →
Free check How to fix DNS server not responding

The lookup timed out with no answer at all. Work out whether the resolver, the router or the network is at fault, then fix it per platform.

View →
Free check DNS_PROBE_FINISHED_NXDOMAIN: what it means and how to fix it

Chrome got no IP address and its DNS probe concluded the name does not exist. Fixes for Windows, Android, ChromeOS, the router and the domain.

View →
Free check Access denied on this server: causes and fixes

The server got your request and refused it, almost always with a 403. Separate fixes for the blocked visitor and for the site owner.

View →

Error messages name a symptom, not a cause, and the same wording covers several unrelated faults. The first question worth answering is always whether the problem is on your machine or on the server, because the fixes have nothing in common. The guides in this section take one error message each and answer that question first.

Which guide you need follows from what the browser told you. If the address will not resolve at all, the lookup returned no such name and you want the NXDOMAIN guide. If the browser sits there and eventually gives up, the resolver never answered and that is a different fault with different fixes. If pages load but stall for a second first, the lookup is slow rather than broken, which is a third diagnosis again. If the server answered and refused, you are looking at an access rule, not a network problem. And if a scheduled job ran at the wrong hour, the five fields of the cron expression are usually where the mistake is.

Each guide is built the same way: what the message means, the named causes, the fix as numbered steps with the exact command for Windows, macOS, Linux, the router or the browser, and then a section the rest of the internet leaves out. Running the check from your own machine tells you what one network sees at one moment. Running it from several countries tells you whether anyone else has the problem, and that is usually the difference between an afternoon of flushing caches and a five minute fix in a DNS panel.

HostTracker has been monitoring websites since 2004 and now watches over 500,000 websites from 300+ checkpoints in 158 cities, with alerts by email, SMS, voice call, Slack, Telegram and more. To see what a server is returning right now, from locations that are not yours, run the free HTTP check.