Fix DNS_PROBE_FINISHED_NXDOMAIN Error in 3 Simple Steps

We have all been there. You type in a web address, hit enter, and instead of the website you want, you are met with a bleak screen that says “This site can’t be reached.” This is usually accompanied by the incredibly confusing error code DNS_PROBE_FINISHED_NXDOMAIN.

It looks extremely technical, but do not panic!

Think of the internet Domain Name System (DNS) as a giant phonebook. When you type in a website name, your computer looks up the IP address in that phonebook. This error simply means your computer could not find the number.

You do not need a computer science degree to fix this. Here are three simple steps to get you back online.

Step 1: Flush Your DNS Cache (Clear the Memory)

Sometimes, your computer remembers outdated phonebook entries. Flushing your DNS cache simply tells your computer to forget the old addresses and look up fresh ones.

For Windows Users:

1. Click your Start menu and type cmd.
2. You will see “Command Prompt” appear. Right click it and select Run as administrator.
3. A black window will pop up. Type this exact phrase: ipconfig /flushdns
4. Hit Enter. You should see a message saying it was successful.

For Mac Users:

1. Open your Applications folder, then go to Utilities, and open Terminal.
2. Type in this exact phrase: sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder
3. Hit Enter. It might ask for your Mac login password. When you type it, the characters will not show up. That is perfectly normal! Just type it and hit enter.

Restart your browser and try the website again. Still getting the error? Move on to Step 2.

Step 2: Change Your DNS Server (Get a Better Phonebook)

If your default phonebook from your internet company is broken, you can easily switch to a free and highly reliable one. Note: We use Google Public DNS in this example, but you can find a full list of alternative providers at the bottom of this article!

For Windows Users:

1. Go to your Control Panel, then Network and Internet, and click Network and Sharing Center.
2. On the left side, click Change adapter settings.
3. Right click your active internet connection (WiFi or Ethernet) and select Properties.
4. Double click on Internet Protocol Version 4 (TCP/IPv4).
5. Select “Use the following DNS server addresses” and type in Google’s public numbers:
   • Preferred DNS server: 8.8.8.8
   • Alternate DNS server: 8.8.4.4
6. Click OK to save.

For Mac Users:

1. Click the Apple logo in the top left and select System Settings or System Preferences.
2. Click on Network, then select your active connection (WiFi or Ethernet) and click Advanced or Details.
3. Go to the DNS tab.
4. Click the + button at the bottom left to add a new address.
5. Type 8.8.8.8, hit enter, then click + again and type 8.8.4.4.
6. Click OK and apply the changes.

Step 3: Reset Your Hosts File (Check the Blocklist)

Your computer has a hidden text file called the “hosts” file. Sometimes, a rogue program will accidentally put the website you are trying to visit onto a blocked list inside this file. Let us make sure the site is not blocked.

For Windows Users:

1. Open your Start menu, type Notepad, right click it, and select Run as administrator.
2. Go to File > Open and navigate to this exact folder: C:\Windows\System32\drivers\etc
3. In the bottom right corner of the open window, change the dropdown menu from “Text Documents (*.txt)” to All Files.
4. Double click the file named hosts.
5. Look at the very bottom of the text document. If you see the name of the website you are trying to visit listed there, simply delete that line of text.
6. Go to File > Save.

For Mac Users:

1. Open Terminal by going to Applications > Utilities > Terminal.
2. Type sudo nano /private/etc/hosts and hit Enter.
3. Enter your computer password.
4. Use your arrow keys to scroll to the very bottom of the file. If you see your broken website listed there, delete that line.
5. Press Ctrl + O (the letter O, not zero) and hit Enter to save. Finally, press Ctrl + X to exit.

Close out of everything, restart your browser one last time, and your website should load perfectly!

Bonus: Choosing the Best Alternative DNS Provider

If you utilized Step 2 above, you might be wondering which DNS server is actually the best to use long term. Choosing the right DNS provider can lead to snappier browsing, stronger privacy, and extra protection against online risks.

Because there is no single DNS server that is perfect for everyone, providers tailor their services to different needs. Here is a breakdown of the top alternative DNS servers, ranging from those built for raw speed to those strictly dedicated to your privacy.

Quick Comparison Table

Provider	Primary IPv4	Core Strength	Average Latency
Google Public DNS	8.8.8.8	Speed & Reliability	Varies (Excellent)
Cloudflare	1.1.1.1	Speed & Privacy	~11 ms
OpenDNS	208.67.222.222	Families & Filtering	~30 ms
AdGuard DNS	94.140.14.14	Blocking Ads & Trackers	Varies
Quad9	9.9.9.9	Security & Malware Blocking	~25 ms
NextDNS	Custom	Advanced Customization	Varies
Mullvad DNS	194.242.2.2	Maximum Privacy	Varies

1. Google Public DNS (8.8.8.8 / 8.8.4.4)

Best for: Users seeking a highly reliable and fast replacement for their default ISP DNS.

• Pros:
  • It offers excellent speed thanks to a large anycast network that routes queries to the nearest server.
  • The service provides high reliability by utilizing Google’s massive global infrastructure to handle huge volumes of traffic.
  • It delivers untampered and accurate answers without hidden filters or commercial redirects.
  • Google does not use personal information collected through the Public DNS service to target ads.
• Cons:
  • It does not filter malicious or inappropriate content by default. Instead, it returns raw DNS answers.
  • Since all your DNS queries transit via Google, there are privacy trade offs. However, the permanent logs replace your exact IP address with a general city location.

2. Cloudflare (1.1.1.1 / 1.0.0.1)

Best for: Users who want the fastest possible speeds with a solid baseline of privacy.

• Pros:
  • It consistently ranks among the fastest public DNS providers worldwide with an average response time of roughly 11 milliseconds.
  • The service promises no logging of your data, making it an incredibly strong choice for privacy focused users.
  • It offers full support for modern encrypted protocols including DNS over HTTPS, DNS over TLS, and IPv6.
• Cons:
  • It has limited customization capabilities for individual users.
  • Its advanced filtering options are considered basic when compared to heavily managed solutions like NextDNS.
  • It provides limited phishing and malware protection compared to security focused services like OpenDNS.

3. OpenDNS (208.67.222.222 / 208.67.220.220)

Best for: Families and households needing easy to use content filters.

• Pros:
  • It features integrated content filtering. This makes it an excellent choice for families looking to block inappropriate websites.
  • It delivers excellent security by protecting networks from phishing, malware, and botnet attacks.
  • The service offers high dependability and uptime because its servers are strategically located around the globe.
• Cons:
  • It has a slightly higher average latency of about 30 milliseconds.
  • Users may experience slower speeds in certain geographic regions.
  • More sophisticated security filters and reporting tools require a paid subscription.

4. AdGuard DNS (94.140.14.14 / 94.140.15.15)

Best for: Users who want network wide ad blocking without installing browser extensions.

• Pros:
  • It is an excellent choice for automatically blocking unwanted ads, trackers, and malicious websites.
  • It offers distinct profiles, such as Default, Family, and Unfiltered. This allows users to easily choose their level of blocking.
  • It supports modern connection standards like DNS over QUIC and DNSCrypt.
• Cons:
  • The aggressive ad filtering can sometimes inadvertently break certain apps or websites.

5. Quad9 (9.9.9.9 / 149.112.112.112)

Best for: Security conscious users and business environments.

• Pros:
  • It actively blocks access to known malicious domains by utilizing threat intelligence from multiple security partners.
  • It operates under a very strictly framed privacy policy.
  • It is highly recommended as a top DNS choice for business environments.
• Cons:
  • It prioritizes threat blocking over general speed. This results in an average latency of 25 milliseconds.
  • It focuses strictly on security and does not offer deep customization or parental filtering right out of the box.

6. NextDNS

Best for: Tech savvy users who want complete control over their network traffic.

• Pros:
  • It offers the highest level of customization. This makes it ideal for users who want granular control over filtering and privacy settings.
  • It allows users to view detailed analytics, utilize an API, and apply specific profiles for different devices or sites.
• Cons:
  • The richer settings mean users have to make more decisions to properly configure the service.
  • It requires custom IP setups for each user rather than offering a simple and universal IP address.

7. Mullvad DNS (194.242.2.2)

Best for: Absolute privacy purists.

• Pros:
  • It is a leading option for privacy focused users seeking minimal data collection.
  • It maintains a strict and straightforward approach to DNS security.
• Cons:
  • It lacks the robust and customizable analytics and filtering profiles found in services like NextDNS.