This site can't be reached
"This site can't be reached" means Chrome could not open a connection to the website. The small gray sub-code under the message (such as DNS_PROBE_FINISHED_NXDOMAIN or ERR_CONNECTION_TIMED_OUT) tells you the real reason, so read it first.
Updated June 2026 · 5 min read
-
Written by
Andrian Valeanu
Founder of Pulsetic
Andrian Valeanu founded Pulsetic and, before it, Designmodo. Across 15-plus years he has shipped web products, design tools, and monitoring software teams around the world rely on.
-
Reviewed by
Ionut Caval
Technical reviewer
Ionut Caval reviews Pulsetic's technical guides for accuracy. He works hands-on with web servers, networking, and uptime monitoring day to day, and makes sure the causes and fixes here hold up in production.
The short version: "This site can't be reached" is the generic message Chrome shows when it cannot open a connection to a website. The gray sub-code beneath it is the real clue, so read that first. More often than not it is a local DNS or network snag: restart your router, flush DNS, point at a public DNS like 8.8.8.8, and switch off any VPN.
Key takeaways
- This site can't be reached is just the umbrella. The gray sub-code beneath it (something like ERR_CONNECTION_REFUSED or DNS_PROBE_FINISHED_NXDOMAIN) is what names the actual cause. Read that line first.
- DNS-family codes (NXDOMAIN, NAME_NOT_RESOLVED) mean the domain never turned into an address at all. Connection-family codes (TIMED_OUT, REFUSED, RESET) mean the address was found, but the connection to it fell apart.
- Want the quickest split test? Open the same website on a different network or device. Loads there: the problem is on your end. Fails everywhere: it is the website's.
- Most visitor-side fixes do not care which sub-code you have: flush DNS, restart the router, point at a public resolver like
1.1.1.1, and turn off any VPN, proxy, or firewall. - Run the website yourself? Before you blame the browser, check three things: the web service is listening on port 443 or 80, the DNS records resolve to the right IP, and the firewall lets inbound traffic through.
- Error type
- Browser connection error (umbrella)
- Whose side
- Usually your side; sometimes the website
- Fix difficulty
- Easy
- Common cause
- DNS lookup or local network failure
What does This site can't be reached mean?
This site can't be reached is not a single fault. It is the page Chrome falls back to whenever it cannot finish a connection, and the line of capital letters underneath is the part that actually carries the information. DNS_PROBE_FINISHED_NXDOMAIN and ERR_NAME_NOT_RESOLVED mean the domain name never resolved to an address. ERR_CONNECTION_TIMED_OUT means the server stayed silent past the wait window. ERR_CONNECTION_REFUSED means a server was reached but turned the connection away. ERR_ADDRESS_UNREACHABLE means there was no route to the address in the first place.
The cause can live on either side of the connection: your device, network, or DNS resolver, or the website's server, DNS records, or firewall. To find out which, try the same address from a different network or device. Loads elsewhere, and the problem is local to you. Fails everywhere, and the trouble is on the website's side, where only its operator can fix it.
- 6
- Common Chrome sub-codes
- 8.8.8.8
- Google public DNS
- 1.1.1.1
- Cloudflare public DNS
How the This site can't be reached error appears
The wording changes depending on your browser, device, or server. Here is how this error commonly shows up:
This site can't be reached
Try checking the connection, the proxy, and the firewall.
DNS_PROBE_FINISHED_NXDOMAINthe domain does not resolveERR_NAME_NOT_RESOLVEDDNS could not find the IPERR_CONNECTION_TIMED_OUTthe server did not answer in timeERR_CONNECTION_REFUSEDthe server actively rejected the connectionERR_ADDRESS_UNREACHABLEthe address could not be routed toERR_CONNECTION_RESETthe connection dropped mid-handshake
The sub-codes under "This site can't be reached"
Chrome shows the same headline for several distinct failures, and the gray sub-code underneath is what tells you which one you have.
| Sub-code | What it means | Most likely fix |
|---|---|---|
| DNS_PROBE_FINISHED_NXDOMAIN | The DNS lookup returned no record, so the domain name does not resolve to an IP address. | Check the spelling of the domain, flush your DNS cache, and switch to a public resolver like 1.1.1.1; if it fails everywhere the domain may be unregistered or expired. |
| ERR_NAME_NOT_RESOLVED | Your resolver could not turn the hostname into an address at all, often a local DNS or connectivity fault. | Restart your router, flush DNS, and try the website on another network; if only one website fails, its DNS records may be misconfigured. |
| ERR_CONNECTION_TIMED_OUT | A server was found but never answered within the wait window, so the browser gave up. | Retry, disable any VPN, proxy, or firewall, and confirm the website is not down for everyone before troubleshooting further. |
| ERR_CONNECTION_REFUSED | A server was reached but actively rejected the connection, usually because nothing is listening on that port. | Recheck the URL and port; if it is your own website, confirm the web service is running and bound to 443 or 80. |
| ERR_ADDRESS_UNREACHABLE | The target IP address could not be routed to from your network at all. | Restart your router and disable any VPN or proxy; a persistent failure points to a routing or firewall problem on the path, not your browser. |
Which side owns each sub-code, and how to confirm it
Each sub-code points to a different layer and a different owner. This narrows down whether to look at your network, your DNS, or the website itself.
| Sub-code | Layer that failed | Whose side | How to confirm |
|---|---|---|---|
ERR_NAME_NOT_RESOLVED / DNS_PROBE_FINISHED_NXDOMAIN | DNS lookup: the hostname never became an IP address. | Your resolver, or the website's DNS records. | nslookup yourdomain.com or dig yourdomain.com: no answer points to DNS. |
ERR_CONNECTION_TIMED_OUT | TCP handshake: an address was found but the server never answered in time. | The server or the network path. | ping yourdomain.com and curl -I https://yourdomain.com; a hang points to the host or a firewall. |
ERR_CONNECTION_REFUSED | TCP handshake: the server actively rejected the connection. | The server: nothing is listening on that port, or it is blocked. | curl -I https://yourdomain.com returns connection refused; check the service and port. |
ERR_CONNECTION_RESET | An established connection was dropped mid-exchange. | The network, a firewall, or the server cutting the link. | Retry on another network; a reset that clears off your network points to a local firewall, VPN, or proxy. |
ERR_ADDRESS_UNREACHABLE | Routing: the target IP could not be reached from your network at all. | The network path or a routing or firewall fault. | Restart the router and drop any VPN; a persistent failure is a routing problem, not the browser. |
What causes This site can't be reached?
- A DNS lookup failure, where the domain cannot be resolved to an IP address (
DNS_PROBE_FINISHED_NXDOMAIN,ERR_NAME_NOT_RESOLVED). - A typo in the address, or a domain that expired or was never registered to begin with.
- The web server is down, swamped, or not listening on the expected port, so the connection times out (
ERR_CONNECTION_TIMED_OUT). - A service is reachable but turns the connection away because nothing is bound to that port, or it is blocked (
ERR_CONNECTION_REFUSED). - A firewall, antivirus, VPN, or proxy on your device or network is sitting in the way of the request.
- A stale or corrupted local DNS cache still pointing the domain at an old or wrong address.
- Broken or missing DNS records on the website's side: a misconfigured A, AAAA, or CNAME record.
How to find the cause fast
- Start with the sub-code under the message. NXDOMAIN or NAME_NOT_RESOLVED point at DNS; TIMED_OUT, REFUSED, or RESET point at reaching the server.
- Pull up the same website on another device or network. If it loads, your computer is where the problem lives.
- Open incognito and a second browser to rule out cache and extensions.
- Run
nslookup yourdomain.com, or check Is Website Down?, to see whether DNS resolves and whether the website is genuinely down.
How This site can't be reached looks from the outside
The sub-code is the whole game, and it is also the part most people walk right past. To an outside observer, DNS_PROBE_FINISHED_NXDOMAIN and ERR_CONNECTION_TIMED_OUT are entirely different failures with entirely different owners, even as Chrome puts the same headline above both. A check that resolves DNS and opens the connection as two separate steps will tell you which half broke. Someone hammering the refresh button just gets the same gray screen, over and over, with no idea which one it is.
How to fix This site can't be reached
If you are a visitor
- Read the sub-code under the message first, then give the address bar a second look for a typo or a missing piece of the URL.
- Check your own connection by opening another well-known website. Nothing loads at all? Then it is your internet, not the website.
- Restart your router or modem. Unplug it, wait about thirty seconds, plug it back in.
- Flush your DNS cache. Windows: run
ipconfig /flushdnsin Command Prompt. macOS: runsudo dscacheutil -flushcache; sudo killall -HUP mDNSResponderin Terminal. - Still failing on Windows? Renew your IP and reset the stack with
ipconfig /release,ipconfig /renew, thennetsh winsock resetandnetsh int ip reset, and reboot. - Move your device onto a public DNS resolver, Google (
8.8.8.8) or Cloudflare (1.1.1.1), then reload the page. - Turn off any VPN, proxy, firewall, or antivirus for a moment and try again; any of these can single out a website and block it.
- Open the website on another network (mobile data, say) or another device. If it works there, check Is Website Down? to see whether the website is down for everyone or only you.
If you run the website
- Make sure the server is powered on and the web service is running and listening on the right port (usually
443for HTTPS,80for HTTP). Test it locally withcurl -I https://yourdomain.com. - Check that your DNS records resolve the way they should. Run
dig yourdomain.com A(ornslookup yourdomain.com) and confirm the A, AAAA, or CNAME records hand back the IP your server actually uses. - Make sure your firewall or security group allows inbound traffic on the web ports and is not quietly dropping connections.
- Confirm the domain is still registered and unexpired, and that its nameservers are set correctly at your registrar.
- Once it is back, test from outside your own network. The server may answer for you while staying unreachable for the public internet, so a local-only check can fool you.
On Linux
- Flush your resolver's DNS cache. On most systems that is
sudo systemd-resolve --flush-caches(sudo resolvectl flush-cacheson newer ones), orsudo systemctl restart nscdif you run nscd. - Point at a public resolver. Edit the connection's DNS in NetworkManager, or set
nameserver 1.1.1.1in/etc/resolv.conf, then reload the page. - Open
/etc/hostswithcat /etc/hostsand delete any leftover line that pins the domain to an old or wrong IP. - Settle whether DNS or the connection is the culprit by running
dig yourdomain.comornslookup yourdomain.com.
On iPhone or iPad
- Flip Airplane mode on for a few seconds, then off again, to force a fresh network and DNS connection.
- Swap the DNS for your Wi-Fi network: Settings, Wi-Fi, tap the (i) beside your network, Configure DNS, set it to Manual, and add
8.8.8.8or1.1.1.1. - Still stuck? Forget the Wi-Fi network from that same screen and rejoin it, re-entering the password.
- As a last resort, reset network settings under Settings, General, Transfer or Reset, Reset, Reset Network Settings. Note that this wipes saved Wi-Fi passwords.
On Android
- Adjust Private DNS under Settings, Network and internet, Private DNS: set it to Off or Automatic, or type a provider hostname such as
dns.google, then reload. - Forget the Wi-Fi network in Settings, Network and internet, Wi-Fi and reconnect, which clears a stale local network state.
- Clear Chrome's cache: Settings, Apps, Chrome, Storage, Clear cache, or from within Chrome under History, Clear browsing data.
- If the error sticks around, toggle Airplane mode on and off to rebuild the connection.
Still not fixed? Next steps
- Read the sub-code and match it to its layer. DNS codes send you to
nslookupor a resolver switch. TIMED_OUT, REFUSED, and RESET tell a different story: the lookup worked fine, and the connection itself is what broke. - Test the same address on a network that shares nothing with your current one, mobile data being the easy choice. That separates a local fault from an outage on the website's side.
- Running the website? Confirm three things: the web service is up and bound to port 443 or 80, the A, AAAA, or CNAME records resolve to the IP your server actually uses, and the firewall or security group allows inbound web traffic.
- Once it is back, test from outside your own network. A server can answer perfectly well for you locally and still be invisible to the rest of the internet.
Code & configuration
Copy-paste starting points. Replace example.com and the paths with your own, and test changes on staging before production.
Flush DNS, renew IP, reset the stack (Windows)
ipconfig /flushdns
ipconfig /release
ipconfig /renew
netsh winsock reset
netsh int ip reset
# then restart your computer
Confirm the domain resolves
nslookup example.com
How to prevent This site can't be reached
You cannot head off every outage, but you can stop being the last to hear about one. Pulsetic checks your website and endpoints from multiple locations every 30 seconds, using HTTP, TCP, ICMP, port, keyword, SSL, and domain checks, and the moment something stops responding it alerts you by email, SMS, voice call, Slack, Discord, Telegram, or webhook. Domain monitoring goes further, flagging DNS and expiry trouble before it ever becomes a "this website can't be reached" page. One caveat: Pulsetic gauges availability from the outside, so it will not report on server CPU, memory, or disk.
Learn how Pulsetic's uptime monitoring detects this from the outside, across 15+ locations.
Frequently asked questions
-
How do I know if it's my internet or the website?
Open a different, well-known website. If that one fails too, the trouble is your connection or local network. If other websites load and only one keeps failing, take that single address to another network or device. Loads elsewhere: the problem is local to you. Fails everywhere: the website itself is unreachable.
-
What does the code under the message mean?
It is the exact reason Chrome could not connect.
DNS_PROBE_FINISHED_NXDOMAINandERR_NAME_NOT_RESOLVEDpoint to DNS or a wrong domain name.ERR_CONNECTION_TIMED_OUTmeans the server never replied.ERR_CONNECTION_REFUSEDmeans it replied but turned the connection away.ERR_ADDRESS_UNREACHABLEmeans the address could not be routed. Match the code to the cause before you start trying fixes. -
Why can I reach the website on my phone but not my computer?
That fingerprints something local on the computer: a stale DNS cache, a VPN or proxy, or a firewall or antivirus rule. Flush the DNS cache, drop any VPN or proxy, and turn off security software for a moment, then reload. Your phone on mobile data rides a different network and DNS path, which is why it still gets through.
-
The error is intermittent. How do I catch it?
Intermittent failures are a pain to reproduce by hand, since they tend to clear before you can test them. Continuous monitoring from multiple locations records exactly when and where the website went unreachable, so you walk away with the timestamp, the failing check, and the response instead of a single lucky screenshot. Pulsetic runs these checks every 30 seconds and alerts you the moment a failure begins.
-
Does Chrome's Secure DNS setting cause this error?
It can. Chrome's Secure DNS (DNS-over-HTTPS) routes your lookups to a separate DoH provider, and if that provider is slow, blocked on your network, or set up wrong, resolution fails and you land on this website can't be reached. Head to
chrome://settings/security, turn Secure DNS off, or point it at a known provider like Google or Cloudflare, then reload. One more catch: on a managed work or school network, Secure DNS can clash with the filtering the network requires, and that throws the same error. -
Can antivirus or a firewall trigger this even though my internet works?
Yes. Plenty of security suites inspect HTTPS traffic by intercepting connections, and when that scanning module breaks or falls out of date, it can block a single website while every other app carries on as normal. Switch off the HTTPS or web-shield feature of your antivirus for a moment, or close the program outright, then reload the page. If that does the trick, turn the software back on and either update it or add the website to its exception list. Do not leave protection off.
-
Incognito and another browser fail too. What does that tell me?
That clears your browser profile, cache, cookies, and extensions of any blame, so the cause is sitting lower in the stack: your DNS resolver, your network, a VPN or firewall, or the website itself. Try the same address on a network that shares nothing with this one, like mobile data, to tell a local fault apart from a real outage. Fails on every network and device? Then the issue is almost certainly on the website's side, and only its operator can put it right.
-
Catch the next outage before your visitors do.
2-minute setup · Cancel any time
-
No credit card needed