Free ISP Check: Is a Site Down on Orange, Free or SFR?

Quick select:

You seem to be in the United States. Check from providers in the United States instead

Please wait, we are opening the site from inside internet providers in France.
Checking providers in France0 s
    Finished
      Your IP:
      Report generated on
      Tested:

      Can each internet provider open the site?

        Load time on each provider

        Address lookup (DNS) Connect Secure handshake Server answer

        Other signals we checked

          Rate this result

          Test your website's reachability and performance across real residential broadband networks in France. DNS Info Free ISP Check connects directly through consumer internet connections on Orange, Free, SFR and other major providers to diagnose provider-specific downtime, routing blackholes, and latency bottlenecks.

          Free ISP Check: Real-World Website Availability & Diagnostics

          When visitors report that your website or web service is down, standard uptime monitors hosted in centralized cloud datacenters (like AWS, Google Cloud, or Cloudflare) often report 100% uptime. This happens because datacenter servers use premium Tier 1 backbone transit with direct peering. In contrast, real visitors browse from local residential and mobile broadband connections subject to local peering disputes, ISP caching policies, BGP routing anomalies, and regional content filtering.

          Why Does a Website Work on One Provider but Fail on Another?

          Internet traffic does not travel along a single universal highway. When a customer on Orange requests your site, their traffic is routed through their provider's autonomous system (ASN), regional Internet Exchange Points (IXPs), and transit carriers before reaching your origin server. If an intermediate carrier drops packets, if a BGP route fails to announce, or if your server firewall blocks an ISP's consumer IP subnet, customers on that provider experience an outage while visitors on another network load the site seamlessly.

          Datacenter Pings vs. Real Residential ISP Probing

          Most online diagnostic tools run synthetic checks from server farms. DNS Info Free ISP Check provides true consumer-edge visibility:

          • True Last-Mile Experience: Tests run through real consumer broadband and mobile subscriber connections across France, exposing problems only residential users see.
          • Recursive ISP DNS Verification: Verifies how local ISP nameservers resolve your domain, detecting stale DNS caches and NXDOMAIN poison that public resolvers like 1.1.1.1 or 8.8.8.8 never experience.
          • Hop-by-Hop Route Diagnostics: When a connection fails, we trace the route from that specific provider to identify the exact ASN or router hop where packets are dropped.
          • Time to First Byte (TTFB) Waterfall: Granular latency breakdown separating DNS resolution, TCP handshake, TLS encryption negotiation, and server response time.

          5 Common Causes of Provider-Specific Reachability Failures

          1. BGP Peering and Transit Blackholes

          Autonomous Systems exchange routing tables via BGP. If an ISP drops peering with an intermediate upstream transit provider or misconfigures route filtering, traffic destined for your server's IP address gets discarded midway.

          2. Stale or Divergent ISP DNS Resolvers

          Broadband subscribers use their ISP's default recursive DNS servers. If your DNS changed recently, some ISPs ignore low TTL values and serve cached old IPs for days. Check our ISP DNS Propagation tool to monitor resolver updates.

          3. Origin Server WAF & Firewall False Positives

          Firewalls like ModSecurity, fail2ban, or Cloudflare WAF can mistakenly flag shared Carrier-Grade NAT (CGNAT) IP blocks used by mobile and residential ISPs, banning thousands of legitimate subscribers simultaneously.

          4. Regulatory & ISP Content Filtering

          Certain jurisdictions mandate ISP-level filtering via DNS sinkholing or SNI (Server Name Indication) packet inspection. Over-blocking and collateral domain censorship frequently cause inadvertent site blocks on specific carriers.

          5. MTU / MSS Clamping and Packet Fragmentation Drops

          Residential broadband connections utilizing PPPoE, DS-Lite, or VPN tunnels introduce packet encapsulation overhead, lowering the Maximum Transmission Unit (MTU) below 1500 bytes. If your web server drops ICMP "Fragmentation Needed" packets (breaking Path MTU Discovery), large TLS certificate payloads hang indefinitely on affected ISPs while loading normally elsewhere.

          Understanding the Time to First Byte (TTFB) Latency Breakdown

          DNS Info's ISP Check splits the loading time of your website into four distinct technical phases for every provider:

          • DNS Lookup Time: The time required for the ISP's local DNS resolver to look up your domain's A record. A slow lookup indicates unoptimized nameserver infrastructure or high latency between the ISP and your authoritative DNS host.
          • TCP Connect Time: The duration of the initial 3-way handshake (SYN, SYN-ACK, ACK) on port 80 or 443. This reflects raw physical network latency and route distance. Use our Ping tool and Port Checker to isolate connection lags.
          • TLS / SSL Handshake: The time spent negotiating encryption ciphers, validating SSL certificates, and establishing a secure session. Verify your certificate health with our SSL Checker.
          • Server Response (Origin TTFB): The time taken by your origin web server or backend application to execute code, query databases, and return the first byte of HTML.

          FAQs

          Each provider reaches your server over its own distinct network route and BGP peering path. A broken intermediate transit link, an upstream routing filter, an aggressive server firewall rule (e.g. Fail2ban or Cloudflare WAF) blocking specific IP ranges, or stale DNS records on that provider's recursive resolver can prevent Orange visitors from reaching your site while Free works smoothly. The route trace above identifies the exact network hop where traffic drops.

          No. Tests are dispatched directly from automated diagnostic probes deployed inside real residential broadband networks across France. The results reflect real customer experiences on each provider independently of your local connection or geographic location.

          It highlights the last responsive autonomous system (ASN) or network router that acknowledged packets before the connection dropped. If only one internet provider fails, the stop point indicates where that provider's packets were blocked or dropped. If all providers stop at the exact same final node, your web server or hosting firewall is likely refusing connections or timing out.

          Providers exchange traffic across internet exchange points (IXPs) and private peering links. If a provider routes through congested transit links or routes traffic through a distant country, round-trip latency increases significantly. Our load time waterfall splits the connection into DNS lookup, TCP connect, TLS handshake, and server response (TTFB) so you can pinpoint the bottleneck.

          Yes. Providers frequently enforce court-ordered or regulatory website blocks, parental control filters, or automated anti-malware blocklists. These are typically implemented via DNS redirection to a warning page or TCP resets on port 80/443. Our ISP check verifies both DNS resolution and HTTP/HTTPS connectivity to determine if an intentional block exists.

          In a full server outage, your website fails universally across all internet providers, ping tests, and global locations. In an ISP-specific reachability issue, the site opens normally on mobile carriers (e.g. cellular data) or alternative broadband networks, but fails specifically for users of one or two providers due to regional peering disputes, local DNS cache staleness, or localized fiber cuts.

          First, inspect your server firewall, ModSecurity, and CDN security settings to confirm you are not mistakenly blocking the provider's IP range. Second, verify your DNS TTL and propagation across our DNS Propagation Checker. If the drop occurs inside an intermediate transit carrier (e.g. Cogent, Lumen, Telia), share the traceroute hop data with your web hosting provider or CDN support so their network operations center (NOC) can adjust BGP routing announcements.

          Every major consumer broadband and mobile provider in France that has a test point online at that moment, typically including Orange, Free, SFR along with regional networks. A provider with no probe currently online is marked as not tested.

          ISP Reachability Problems and Technical Solutions

          When a site is completely unreachable on a single carrier (e.g. timeout or connection reset), the issue is almost always a broken routing transit link or an aggressive firewall rule on your origin server.

          How to fix: First, check your server's firewall (iptables, ufw, or Cloudflare Security Events) to ensure that the ISP's public IP range is not blocked or rate-limited. Next, review the route trace from our report to find the last responding hop. If the connection dies inside the ISP's autonomous system (ASN), contact their network operations center (NOC) or submit a ticket to your hosting provider's network team quoting the target IP and drop point. Use our Traceroute tool to cross-verify route paths.

          Following a server migration or IP address change, certain ISP recursive DNS resolvers continue serving old cached DNS records past the configured Time to Live (TTL).

          How to fix: Verify global propagation status using our ISP DNS Propagation tool and A record checker. Ensure your authoritative nameservers are returning identical answers across all nodes. To mitigate future migration delays, lower your DNS TTL to 300 seconds (5 minutes) at least 24 hours prior to scheduled IP changes.

          If every tested provider reports a failure, the problem is centralized: your origin web server is down, web server processes (Nginx/Apache) have crashed, or DNS authoritative servers are offline.

          How to fix: Log into your hosting control panel or SSH terminal. Verify that web server daemons are running (e.g. systemctl status nginx). Use our Port Checker to test whether ports 80 and 443 are listening and open, and verify network responsiveness with our Ping tool.

          A TCP connection establishes successfully, but the secure TLS handshake stalls or times out specifically on broadband connections.

          How to fix: This is a classic symptom of Path MTU Discovery (PMTUD) failure or an incomplete intermediate SSL certificate chain. Ensure your web server allows ICMP Type 3 Code 4 packets through your firewall, configure TCP MSS clamping (e.g. iptables -A FORWARD -p tcp --tcp-flags SYN,RST SYN -j TCPMSS --clamp-mss-to-pmtu), and verify certificate validity and full chain installation using our SSL Checker.

          The site opens, but TCP connect time and TTFB are dramatically higher on one provider compared to others in France.

          How to fix: The provider may lack direct peering with your host, forcing traffic to take a suboptimal routing detour through international transit hubs (hairpin routing). Deploy an Anycast Content Delivery Network (CDN) such as Cloudflare or AWS CloudFront to cache content at edge nodes closer to local subscribers, or inquire with your hosting company regarding direct peering arrangements with France carriers.

          Mobile and home broadband providers use Carrier-Grade NAT (CGNAT) where thousands of distinct subscribers share a small pool of public IP addresses.

          How to fix: If a single user or bot on that provider triggered an IP-based rate limit or security rule, your server may have blocked the shared IP address. Adjust rate-limiting thresholds to avoid banning entire /24 subnets, rely on session-based or cookie-based rate limiting where possible, and whitelist legitimate residential ISP ranges in your WAF.