Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

A domain does not redirect because of DNS alone. DNS returns an IP address; a proxy, web server, or application then decides whether to serve the site or send an HTTP 3xx response to another URL. Find the first response in the redirect chain, identify the layer that issued it, and correct that layer’s DNS, redirect rule, virtual-host, TLS, or canonical-URL setting.

What is actually happening when a domain appears to redirect

When you enter example.com, the browser first asks a DNS resolver for address records. An A record returns an IPv4 address, an AAAA record returns an IPv6 address, and a CNAME points one hostname to another hostname. The browser then opens an HTTP or HTTPS connection to the returned address and sends the original hostname in the request.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

DNS has no standard mechanism for telling a browser to load a different URL. Huawei Cloud’s Domain Name Service documentation puts the distinction plainly: “Explicit or implicit URL forwarding is not performed over a standard DNS protocol, but uses 301 or 302 redirection over HTTP.” If the address bar changes to an IP, a server answers with an IP-based URL, or another site appears, the cause is normally one of these:

  • The DNS record or delegated nameserver is wrong, so the request reaches the wrong address.
  • A CDN, reverse proxy, or redirect rule returns an HTTP 3xx response.
  • The origin web server uses a default virtual host because it does not recognize the requested hostname.
  • The TLS configuration does not cover the hostname, causing a fallback site or an HTTPS failure.
  • The application’s configured canonical URL differs from the hostname or scheme the visitor requested.
  • A cached DNS answer or cached permanent redirect hides a change that has already been made.

Seeing an IP address therefore does not prove that DNS performed a redirect. It may simply be the address DNS returned, a server-generated link, or the default site configured at that address.

#1 Best Overall
Sale
Compressed Air Duster,130000RPM Super Power Cordless Air Duster,Rechargeable Brushless Blower,3 Gear Adjustable Blower with LED Light,Dust Remover for Computer/House/Outdoor/Car
  • Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
  • With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
  • Wide Application:Upgraded attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
  • Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
  • Warranty & Support: Our Electric air duster comes with 5 years warranty and 24/7 customer service. During this period, if you have any questions,pls kindly feel free to contact us.

First determine whether this is DNS, HTTP, or the origin server

Do not change settings at random. The first response and its Location header tell you which layer needs attention.

What you observe Most likely layer What to verify
The DNS answer is an unexpected IPv4 or IPv6 address DNS records or nameserver delegation Check apex and www A, AAAA, and CNAME records, then confirm the registrar’s delegated nameservers.
The first HTTP response is 301, 302, 307, or 308 and includes Location: Proxy, web server, or application redirect Inspect the rule set and determine which service generated the response.
The response is 200 but shows an IP-based welcome page or another customer’s site Origin virtual-host or host-binding configuration Check the hostname mapping in Nginx, Apache, IIS, or the hosting control panel.
HTTPS fails, shows the wrong certificate, or loops between HTTP and HTTPS TLS coverage or conflicting proxy/origin rules Verify certificate names and every HTTP-to-HTTPS rule on both sides of the proxy.
The result changes between devices or after clearing data DNS, browser, intermediary, or HTTP cache Repeat the test with a clean browser session and inspect cache age and redirect status.

Run a complete redirect and DNS check

1. Query every relevant DNS record

Check the bare domain (the apex) and the www hostname separately. Record every answer, not just the first one.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Query the apex IPv4 records with dig example.com A +short.
  2. Query the apex IPv6 records with dig example.com AAAA +short.
  3. Query the www alias with dig www.example.com CNAME +short, then query the target hostname’s A and AAAA records.
  4. Repeat the queries through more than one resolver if results look inconsistent. A negative DNS answer can remain cached, so an old “no record” response may outlive the correction.

Compare the returned addresses with the addresses your hosting or proxy provider gave you. An unexpected address, an obsolete IPv6 record, or a www alias pointing to an old service can send only some visitors to the wrong site.

2. Confirm nameserver delegation at the registrar

Look at the domain’s delegated nameservers in the registrar account, then compare them with the DNS service where you edited records. If delegation points to provider A while you changed records in provider B, provider B’s edits cannot affect public DNS. This is one of the most common reasons a seemingly correct fix has no effect.

Also check for DNSSEC errors after a nameserver move. A broken delegation or invalid signature can make resolvers return a failure even though the zone file looks correct in the dashboard.

Rank #2
EVEO® Screen Cleaner Spray Kit (Streak-Free) TV Screen Cleaner for Smart TV, Lcd, LEd, Oled | Computer Screen Cleaner Spray and Wipe Microfiber Cloth - TV, Monitor, Laptop, iPad, Car - 6.7oz 1 Pack
  • Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
  • Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
  • Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
  • Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
  • Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth

3. Inspect the first HTTP response without following it

Use browser developer tools’ Network panel, enable a fresh request, and select the first document request. Do not rely only on the final page: a chain can contain several hops. The status code, Location value, response headers, and serving hostname identify the next place to investigate.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

From a terminal, a header-only request such as curl -I --max-redirs 0 https://example.com/ exposes the first response. To display headers for each hop while retaining the chain, use curl with redirect following and header output, for example curl -sS -D - -o /dev/null -L https://example.com/. Run equivalent tests for both the apex and www"> hostnames, and for HTTP as well as HTTPS.

If the first response is a 3xx, copy each Location value and note whether the path and query string are preserved. If the first response is a 200 page containing an IP or generic welcome page, investigate the origin virtual host instead of searching for a redirect rule.

Fix incorrect or incomplete DNS records

Correct records at the authoritative DNS provider—the service named by the delegated nameservers—not in a disconnected hosting dashboard. Check all hostnames visitors use:

  • Apex: the bare domain, such as example.com.
  • www: commonly an A record or a CNAME to the apex or hosting target.
  • IPv6: remove or correct an AAAA record if the IPv6 service is not configured for the same website. Some visitors prefer IPv6 and will never use the correct IPv4 address.
  • Aliases: verify that every CNAME ultimately resolves to the intended service and does not point to an old provider.

Remove duplicate or obsolete records only after confirming that no active service depends on them. After saving, allow resolver caches to expire. Test from a clean client and at least one independent resolver rather than assuming a local result proves global propagation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
BladeHawks RGB Gaming Mouse Pad Extra Large Extended 31.5x12 Inch-Black
  • 【Large size】:Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
  • 【LED backlight mouse pad】:Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
  • 【Anti-slip rubber base】:Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
  • 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
  • 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.

DNS can direct traffic to the correct server, but it cannot create URL forwarding. Once the records resolve correctly, continue with the HTTP checks if the browser still changes the URL.

Remove an unwanted proxy or CDN redirect

A reverse proxy can issue a redirect before the request reaches your server. Review every rule type enabled for the hostname: Redirect Rules, bulk redirect lists, legacy page rules, edge workers or functions, and any separate CDN configuration. Search for rules matching the apex, www, the IP address, and both HTTP and HTTPS schemes.

Cloudflare’s redirect guidance requires a resolvable, proxied A or CNAME record so the request reaches its rule engine. Its documentation uses 192.0.2.1 as a non-routing example address for a redirect-only alias. That address belongs to documentation space; it is not a destination for a live website. If you use a redirect-only alias, preserve the incoming path and query string when the destination has equivalent routes.

Disable or narrow a rule that sends every request to an IP-based URL. Then purge only the relevant edge cache if your provider requires it and retest with a new private-browser session. A rule can appear to be fixed in the dashboard while an already cached response continues to reach users.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Correct the origin web server’s virtual host

If DNS points to the right address but the page is a generic welcome screen, another customer’s site, or an IP-based page, the server may be selecting its default virtual host. Web servers choose a site by the requested hostname, not merely by the destination IP.

Rank #4
Sale
Vaydeer Wrist Rest for Keyboard and Mouse, Computer Ergonomic Wrist Support Pad, Soft Memory Foam Arm Cushion for Desk, Palm Hand Office Laptop Typing
  • 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
  • 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
  • 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
  • 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
  • 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.

Nginx, Apache, and IIS checks

  • Ensure the site definition includes both the apex and www names where appropriate.
  • Remove an unintended default-server or catch-all site that captures requests before the real site definition.
  • Confirm the hosting panel’s domain and document-root mapping matches the deployed files.
  • Reload or restart the web server after a configuration change, and check its error log for an unmatched host.

The TLS layer must recognize the same names. A certificate that covers only www.example.com does not cover example.com, and the reverse is also true. Verify the certificate’s Subject Alternative Names and the server’s SNI binding for both hostnames. A proxy may serve its own certificate while connecting to the origin with another one, so inspect both sides when the proxy is enabled.

Fix an application-level canonical URL

Content-management systems and frameworks often redirect to a configured “site URL,” “base URL,” or canonical host. If that value contains an IP address, an old domain, or the wrong scheme, the application can issue a redirect even after DNS and the web server are correct.

  1. Confirm the request reaches the intended virtual host before editing application settings.
  2. Inspect environment variables, configuration files, and database values for the public hostname and preferred scheme.
  3. Set the canonical URL to the exact public hostname, including whether the site uses the apex or www.
  4. Search for hard-coded absolute URLs in configuration, templates, and reverse-proxy settings.
  5. Clear the application’s page cache and object cache, then request a page that previously redirected.

Do not “fix” an application redirect by adding another proxy redirect on top of it. Two layers enforcing different canonical URLs create loops or unnecessary hops. Choose one canonical policy and make the other layers agree.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Resolve HTTPS redirects and loops

A common loop occurs when a proxy terminates HTTPS for the visitor but connects to an origin over HTTP. The origin then redirects HTTP to HTTPS, while the proxy continues presenting the request as HTTP to the origin. Check the proxy’s SSL mode, forwarded-protocol headers, and origin redirect rule together.

  • Use an HTTPS destination for a permanent public redirect.
  • Ensure the certificate covers both the apex and www names that users can enter.
  • Remove duplicate HTTP-to-HTTPS rules at the proxy, web server, and application, or configure them so they agree.
  • Test a direct origin request only when your host permits it, using the correct Host header and TLS name; an IP-only test can select the default site and give a false result.

Cloudflare notes that it can serve a certificate for a DNS record when proxying is enabled. That does not eliminate the need for a valid, correctly bound certificate and hostname configuration at the origin when the proxy connects there.

Best Value
Sale
Under Desk Cable Management Tray No Drill, Metal Mesh Cable Management Under Desk with Clamp Mount, 2 Hole Cable Tray with Wire Management and Cord Organizer for Home Office Standing Desk
  • 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
  • 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
  • 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
  • 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
  • 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.

Understand 301, 302, 307, and 308 before choosing a rule

Status Meaning Use it when
301 Permanent move The browser-facing domain or URL has permanently changed.
302 Temporary redirect You are testing a destination, performing short maintenance, or expect to revert soon.
307 Temporary redirect that preserves the HTTP method A temporary redirect must keep methods such as POST unchanged, commonly for APIs.
308 Permanent redirect that preserves the HTTP method A permanent move must keep the original method and request body.

Cloudflare defines 301 as a permanent move; its documentation states, “The 301 Moved Permanently status indicates that the requested resource has been assigned a new permanent URI.” Use 301 only after the destination and path mapping are final. During testing, use 302 so browsers and intermediaries are less likely to retain the mistake. Preserve the original path and query string when corresponding routes exist at the destination.

Deal with browser, DNS, and intermediary caching

Browsers and intermediate caches can retain 301 responses, while resolvers can retain both positive and negative DNS answers for their configured time-to-live. This makes a corrected rule appear broken.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Test in a private window or a separate browser profile.
  2. Clear the browser’s cached redirects if the browser continues to jump to the old URL.
  3. Check the response headers and cache age at the proxy or CDN.
  4. Query DNS again after the record’s TTL has elapsed, using an independent resolver.
  5. Use a temporary 302 while validating a new destination, then change to 301 or 308 only when the chain is correct.

Do not repeatedly change DNS records to outrun a cached HTTP redirect. First identify whether the stale result is coming from DNS or from an already cached 3xx response.

Use an origin comparison to isolate the emitting layer

When your hosting provider allows it, test the origin directly while supplying the production hostname in the Host header and the correct TLS name. Compare that response with the public hostname:

  • If the direct origin is correct but the public request redirects, inspect the proxy or CDN.
  • If both responses redirect, inspect the origin web server and application.
  • If the direct origin shows a generic site, fix virtual-host bindings before changing proxy rules.
  • If the direct origin has a certificate or protocol error, correct origin TLS before enabling strict HTTPS enforcement at the proxy.

Keep a record of each hop: requested URL, status code, Location, response server, and whether the path and query changed. That record prevents a second rule from being mistaken for the original problem.

A practical repair sequence

Follow this order when you need a reliable fix rather than a temporary workaround:

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  1. Query apex and www A, AAAA, and CNAME records.
  2. Confirm the registrar’s delegated nameservers match the DNS service you edited.
  3. Correct wrong records, DNSSEC or delegation errors, and obsolete IPv6 answers.
  4. Inspect the first HTTP response and record every status and Location value.
  5. Remove or correct the proxy/CDN rule that emits an unwanted 3xx response.
  6. Verify origin virtual-host bindings, document roots, and TLS names for every public hostname.
  7. Set the application’s canonical URL and proxy protocol settings consistently.
  8. Retest both hostnames and both schemes from a clean client after relevant caches expire.
  9. Change a tested temporary redirect to the appropriate permanent status only after path, query, method, and certificate behavior are confirmed.

When the IP address is expected

Some services intentionally use an IP address as an origin or as a non-routing record behind a proxy. That is acceptable only when the public hostname still resolves through the intended service, the proxy receives the request, and the browser-facing response uses the correct domain. An IP displayed in the address bar, a certificate issued only to an IP, or a page containing absolute links to an IP indicates that a hostname, redirect, or application setting still needs correction.

Final verification checklist

  • The apex and www records return the intended addresses or aliases.
  • Delegated nameservers are the ones you actually manage.
  • No stale AAAA record sends IPv6 visitors elsewhere.
  • The first response has the expected status and no unwanted Location header.
  • Any intentional redirect uses the correct 301, 302, 307, or 308 semantics.
  • Paths and query strings survive the redirect when equivalent routes exist.
  • The origin recognizes every public hostname and serves the right document root.
  • TLS certificates and SNI bindings cover the apex and www names.
  • Proxy and origin agree on HTTP versus HTTPS, with no loop.
  • The application’s canonical URL matches the public hostname.
  • Clean-browser and independent-resolver tests show the corrected result after caches expire.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.