What Happens When You Type a URL and Press Enter?
Typing a website address into a browser feels almost instantaneous.
You enter something like:
https://www.example.com
press Enter, and within seconds the page appears.
Behind that simple action, your device performs a long chain of tasks involving the browser, operating system, local network, internet provider, DNS servers, security certificates, web servers, databases and content-delivery systems.
Most of the time, these steps happen so quickly that you never notice them. When one stage becomes slow or fails, however, the result may be:
- A page that takes several seconds to start loading
- A DNS error
- A certificate warning
- A connection timeout
- A blank page
- Missing images
- A login failure
- A website that works on one device but not another
Understanding the process makes internet problems much easier to diagnose.
Step 1: The Browser Interprets What You Typed
The browser first decides what your input means.
You might type:
www.example.com
or:
example.com/support
or even a search phrase such as:
Hamilton Group IT support
The browser determines whether the input is:
- A valid web address
- A search query
- A local address
- A previously visited page
- A browser command
- A file path
When the text looks like a website address, the browser normally adds the appropriate scheme automatically, usually:
https://
The complete address is known as a URL.
What Is a URL?
URL stands for Uniform Resource Locator.
A URL tells the browser where a resource is located and how it should be accessed.
Consider:
https://www.example.com/articles/networking?category=wifi#setup
It contains several parts.
Scheme
https
This tells the browser which protocol to use.
Common schemes include:
- https
- http
- ftp
- file
- mailto
For websites, HTTPS is now the normal secure option.
Hostname
www.example.com
This identifies the website or service.
Path
/articles/networking
This identifies a particular page or resource.
Query string
?category=wifi
This passes additional information to the website.
Fragment
#setup
This usually tells the browser to move to a specific section of the page after it loads.
Step 2: The Browser Checks Its Own Cache
Before contacting the internet, the browser checks whether it already knows something useful about the address.
It may have cached:
- The website’s IP address
- The page itself
- Images
- Style sheets
- JavaScript files
- Redirect information
- Security policies
- Previous connection details
A cache is temporary stored information used to avoid repeating work.
When a valid cached copy exists, the browser may display part of the page immediately while checking whether anything has changed.
This is why a site may load faster on the second visit.
Step 3: The Browser Checks Security Rules
Browsers remember security instructions from websites.
For example, a site may have previously told the browser:
Always use HTTPS for this domain.
This is commonly enforced through a policy called HTTP Strict Transport Security.
When such a rule exists, the browser will not attempt an ordinary unencrypted HTTP connection first. It goes directly to HTTPS.
The browser may also check whether:
- The domain is on a known security list
- A blocked certificate exists
- A parental-control rule applies
- An extension should intercept the request
- A proxy or VPN is configured
Step 4: The Browser Looks for an IP Address
Computers communicate across networks using IP addresses rather than ordinary website names.
People remember:
example.com
Networks need something like:
93.184.216.34
or an IPv6 address such as:
2606:2800:220:1:248:1893:25c8:1946
The process of translating a hostname into an IP address is called DNS resolution.
DNS stands for Domain Name System.
Step 5: The Device Checks Local DNS Information
Before asking an external DNS server, the device checks whether it already knows the answer.
It may look in:
- The browser DNS cache
- The operating system DNS cache
- A local hosts file
- A security product’s DNS cache
- The router’s DNS cache
When the address was resolved recently and the stored answer is still valid, the device can reuse it.
This saves time and reduces DNS traffic.
What Is a Hosts File?
A hosts file is a local text file that can map names directly to IP addresses.
For example:
192.168.1.50 internalserver
The operating system may check this file before asking DNS.
Hosts files can be useful for:
- Testing websites
- Internal systems
- Temporary overrides
- Blocking certain domains
They can also cause problems when an old or malicious entry redirects a legitimate website to the wrong address.
Step 6: The Device Asks a DNS Resolver
When no valid local answer exists, the device sends a DNS query to its configured resolver.
The resolver may be provided by:
- Your internet provider
- Your router
- Your employer
- A VPN
- A public DNS service
- A security-filtering provider
The question is essentially:
What IP address belongs to www.example.com?
The DNS resolver may already have the answer cached.
If not, it must look it up.
Step 7: DNS Follows the Naming Hierarchy
DNS is organised as a hierarchy.
For a hostname such as:
www.example.com
the resolver may need to consult several systems.
Root DNS servers
The root servers direct the resolver towards the servers responsible for the top-level domain.
In this case:
.com
Top-level domain servers
The .com servers identify which authoritative DNS servers are responsible for:
example.com
Authoritative DNS servers
These servers hold the official DNS records for the domain.
They provide the answer for:
www.example.com
The resolver then returns the IP address to your device and usually stores it temporarily.
DNS Records Can Point Somewhere Else
A hostname does not always map directly to one IP address.
It may use records such as:
- A: maps a name to an IPv4 address
- AAAA: maps a name to an IPv6 address
- CNAME: points one name to another hostname
- MX: identifies email servers
- TXT: stores verification or policy information
- NS: identifies authoritative DNS servers
A website might use a CNAME to point towards a content-delivery network.
For example:
www.example.com
could point to:
example.cdnprovider.net
That system then returns an IP address selected for your location or network.
Step 8: The Browser Chooses IPv4 or IPv6
Many modern websites provide both IPv4 and IPv6 addresses.
The browser and operating system decide which to use.
They may test both quickly and select whichever connection works best.
This helps avoid long delays when:
- IPv6 is available but broken
- IPv4 is slower
- One route is congested
- A firewall handles one protocol incorrectly
A website can therefore work over IPv4 and fail over IPv6, or the reverse.
Step 9: Your Device Determines Where to Send the Traffic
The operating system compares the destination IP address with its routing table.
It asks:
- Is the destination on the local network?
- Should the traffic go through the default gateway?
- Is a VPN route active?
- Is a proxy configured?
- Is there a more specific route?
For an ordinary public website, the traffic normally goes to the default gateway, which is usually your router.
Step 10: The Device Finds the Router’s Hardware Address
On an Ethernet or Wi-Fi network, the device needs the router’s hardware address before it can send a frame locally.
For IPv4, this is commonly found using ARP, the Address Resolution Protocol.
The device asks the local network:
Which device owns 192.168.1.1?
The router replies with its MAC address.
For IPv6, a similar process occurs through Neighbour Discovery.
Once this information is known, the computer can send traffic to the router.
Step 11: The Packet Travels Across Your Local Network
The request now moves from your device to the router.
It may travel over:
- Ethernet
- Wi-Fi
- A mesh connection
- Powerline networking
- Fibre within a business network
- A managed switch
This first part of the journey can already introduce delay.
Possible causes include:
- Weak Wi-Fi
- Interference
- Packet loss
- A slow mesh backhaul
- A faulty cable
- An overloaded switch
- A congested wireless channel
A slow website is not always slow because of the website.
Step 12: The Router Performs NAT
Most home and small-business devices use private IP addresses, such as:
192.168.1.25
These addresses are not normally routed across the public internet.
The router uses Network Address Translation, or NAT, to replace the device’s private source address with the router’s public internet address.
It also records which internal device started the connection so returning data can be sent back correctly.
In simple terms:
Laptop: 192.168.1.25
becomes:
Public address: 81.x.x.x
for the journey across the internet.
Step 13: The Router Applies Firewall Rules
Before forwarding the traffic, the router or firewall checks whether the connection is permitted.
It may examine:
- Destination
- Protocol
- Port
- Device identity
- Security policy
- Parental controls
- Time schedules
- Content filters
- Threat intelligence
- VPN rules
An organisation’s firewall may also inspect encrypted traffic metadata or route the request through a secure web gateway.
This security processing can add a small delay. Faulty or overloaded equipment can add much more.
Step 14: The Traffic Enters the ISP Network
The router sends the traffic through the broadband connection.
The physical technology may be:
- Full fibre
- Fibre to the cabinet
- Cable broadband
- Copper DSL
- Fixed wireless
- 4G or 5G
- Satellite
The traffic enters the internet provider’s network and passes through several routers.
The provider determines how to reach the wider internet.
Step 15: Internet Routers Forward the Packets
The internet is not one network. It is a large collection of interconnected networks.
Traffic may pass through:
- Your ISP
- Regional networks
- Internet exchanges
- Transit providers
- Cloud networks
- Content-delivery networks
- The destination’s hosting provider
Each router examines the destination IP address and forwards the packet towards the next suitable network.
The route is selected using routing information exchanged between network operators.
The Route May Not Be Geographically Direct
Internet traffic does not always take the shortest physical route.
A request may travel through another city or country because of:
- Commercial peering arrangements
- Network congestion
- Maintenance
- Provider design
- Security services
- Available capacity
- Routing faults
This is why a nearby website can occasionally have unexpectedly high latency.
Step 16: A Content-Delivery Network May Receive the Request
Large websites often use content-delivery networks, or CDNs.
A CDN stores copies of website content in many locations.
Instead of sending every visitor to one central server, the DNS system may direct you to a nearby or less busy CDN location.
CDNs commonly deliver:
- Images
- Videos
- Software downloads
- Style sheets
- JavaScript files
- Entire web pages
This improves speed and reduces the load on the origin server.
The server answering your request may therefore belong to a CDN rather than the organisation named in the address bar.
Step 17: The Browser Opens a Network Connection
Once the browser knows the destination IP address, it begins establishing a connection.
Traditional web connections commonly use TCP.
TCP creates a reliable connection using a process often described as a handshake.
The client sends a request to begin.
The server acknowledges it.
The client confirms the acknowledgement.
This allows both sides to agree that the connection is ready.
What Port Is Used?
A port identifies the service being requested on the server.
Common web ports are:
- Port 80 for HTTP
- Port 443 for HTTPS
A server can host many services on one IP address because each can use a different port.
For a secure website, the browser normally connects to:
server-address:443
Newer Connections May Use QUIC and HTTP/3
Some modern websites use HTTP/3 over QUIC rather than traditional TCP.
QUIC runs over UDP but adds its own reliability, security and connection-management features.
It can reduce delays, particularly when:
- The connection is being established
- The network changes
- Packets are lost
- The user switches between Wi-Fi and mobile data
The browser and server negotiate whether HTTP/3 is available.
When it is not, they can fall back to HTTP/2 or HTTP/1.1.
Step 18: The Secure TLS Handshake Begins
Because the website uses HTTPS, the browser and server must create an encrypted connection.
This is handled using TLS, which stands for Transport Layer Security.
During the TLS handshake, the browser and server agree on:
- Security methods
- Encryption settings
- Temporary session keys
- The server’s identity
- Supported protocols
The server sends its digital certificate to the browser.
Step 19: The Browser Checks the Certificate
The certificate helps prove that the server is authorised to represent the requested hostname.
The browser checks:
- Does the certificate include the correct domain?
- Is it currently valid?
- Has it expired?
- Was it issued by a trusted certificate authority?
- Is the signature valid?
- Has it been revoked?
- Is the certificate chain complete?
When these checks fail, the browser may show a warning.
Examples include:
- Certificate expired
- Name mismatch
- Untrusted issuer
- Incomplete certificate chain
- Connection not private
Do not bypass certificate warnings casually.
HTTPS Protects the Connection, Not the Website’s Honesty
A valid certificate confirms that the encrypted connection is associated with the domain you visited.
It does not prove that the organisation is trustworthy.
A fraudulent website can still obtain a valid certificate for its own domain.
HTTPS protects information from being read or changed during transit. It does not guarantee that the recipient deserves the information you submit.
Step 20: Encryption Keys Are Established
The browser and server create shared session keys.
These keys are then used to encrypt the data exchanged during the session.
Once the secure connection is established, an outside observer should not be able to read the normal page contents, passwords or form information easily.
They may still be able to see metadata such as:
- The IP address contacted
- Timing
- Data volume
- Connection duration
The exact amount visible depends on the protocols and network configuration.
Step 21: The Browser Sends the HTTP Request
The browser can now request the page.
A simplified request might look like:
GET /support HTTP/1.1
Host: www.example.com
User-Agent: BrowserName
Accept: text/html
The request may also include:
- Cookies
- Language preference
- Compression support
- Authentication tokens
- Cached-content information
- Referrer information
- Browser capabilities
When submitting a form, the browser may send data using a method such as POST.
What Is an HTTP Method?
An HTTP method describes the action being requested.
Common methods include:
- GET: retrieve information
- POST: submit information
- PUT: replace or update information
- PATCH: modify part of something
- DELETE: remove something
- HEAD: request headers without the full content
- OPTIONS: ask which methods or features are supported
Ordinary page loads mainly use GET, but modern web applications use several methods behind the scenes.
Step 22: The Request Reaches a Load Balancer
Large websites rarely depend on one server.
A load balancer may receive the request first and select an available backend server.
It can distribute traffic according to:
- Server health
- Current load
- Geographic location
- User session
- Application type
- Response time
When one server fails, the load balancer can direct new requests elsewhere.
A badly configured or overloaded load balancer can make an otherwise healthy website slow.
Step 23: A Reverse Proxy or Web Application Firewall May Inspect It
Before the request reaches the application, it may pass through:
- A reverse proxy
- A web application firewall
- A DDoS-protection service
- A bot-management platform
- An authentication gateway
- A caching layer
These systems may:
- Block attacks
- Enforce login
- Compress responses
- Cache content
- Filter suspicious requests
- Route traffic to the correct application
- Limit abusive users
The visible website address may therefore point to a security or proxy platform rather than directly to the application server.
Step 24: The Web Server Processes the Request
The web server receives the request and decides what to return.
For a simple static page, it may read an HTML file from storage.
For a dynamic page, it may pass the request to application code.
The application may need to:
- Verify your login
- Check a session
- Query a database
- Retrieve files
- Contact another API
- Calculate results
- Personalise the page
- Check permissions
This server-side work can take far longer than the network connection itself.
Step 25: The Application May Query a Database
A website may need data such as:
- Product listings
- Customer records
- Account details
- Blog articles
- Stock levels
- Booking availability
- User preferences
It sends a query to a database.
The database searches for the requested records and returns them.
Performance may be affected by:
- Database size
- Missing indexes
- High demand
- Slow storage
- Locking
- Inefficient queries
- Replication delays
- Server overload
A slow page may therefore be caused by the database rather than by your broadband connection.
Step 26: The Server May Contact Other Services
Modern websites depend heavily on external systems.
A single page may contact:
- Payment providers
- Identity platforms
- Mapping services
- Advertising networks
- Analytics systems
- Email services
- Stock databases
- Search platforms
- Cloud APIs
When one dependency responds slowly, the whole page may be delayed.
This is why one part of a website can fail while the main site remains online.
Step 27: The Server Builds the Response
The server assembles the information into a response.
A simplified response may include:
HTTP/1.1 200 OK
Content-Type: text/html
Content-Length: 12450
followed by the HTML document.
The response also includes an HTTP status code.
Common HTTP Status Codes
200 OK
The request succeeded.
301 Moved Permanently
The resource has a new permanent address.
302 Found
The browser is temporarily redirected elsewhere.
304 Not Modified
The cached version is still valid.
400 Bad Request
The server could not understand the request.
401 Unauthorized
Authentication is required.
403 Forbidden
The server understood the request but refuses access.
404 Not Found
The requested resource does not exist at that path.
429 Too Many Requests
The client has sent too many requests.
500 Internal Server Error
The server encountered an unexpected problem.
502 Bad Gateway
An intermediary received an invalid response from an upstream server.
503 Service Unavailable
The service is unavailable or overloaded.
504 Gateway Timeout
An intermediary waited too long for another server to respond.
These codes help distinguish browser, network and server problems.
Step 28: The Response Travels Back Across the Internet
The response is divided into packets and sent towards your public IP address.
The return path may not be identical to the outbound route.
Packets can pass through:
- The hosting provider
- Transit networks
- Internet exchanges
- Your ISP
- Your router
- Your local network
The router uses its NAT table to identify which internal device started the connection.
It forwards the packets back to your computer or phone.
Step 29: TCP Reassembles the Data
When TCP is used, the browser receives packets that may arrive:
- At slightly different times
- Out of sequence
- With some packets missing
TCP places them back in the correct order.
When a packet is lost, it requests a retransmission.
This reliability is useful, but repeated packet loss can make a site feel slow because the browser must wait for missing information.
Step 30: The Browser Decrypts the Response
The encrypted HTTPS data is decrypted using the session keys established earlier.
The browser can now read:
- HTTP headers
- HTML
- Cookies
- Scripts
- Other content
This happens automatically.
The user never needs to handle the session key directly.
Step 31: The Browser Parses the HTML
HTML describes the structure of the page.
It may define:
- Headings
- Paragraphs
- Images
- Links
- Forms
- Tables
- Buttons
- Navigation
- Embedded media
The browser reads the HTML and builds an internal representation known as the Document Object Model, or DOM.
The DOM is a structured tree of the page’s elements.
Step 32: The Browser Discovers More Files
The first HTML file is rarely the whole website.
It may refer to:
- CSS style sheets
- JavaScript
- Images
- Fonts
- Videos
- Icons
- Advertising
- Analytics
- API data
The browser must request each of these resources.
A page may generate dozens or hundreds of additional network requests.
This is why receiving the first HTML response does not mean the page has finished loading.
Step 33: CSS Is Processed
CSS controls how the page looks.
It can define:
- Colours
- Fonts
- Spacing
- Layout
- Responsive behaviour
- Animation
- Mobile formatting
The browser parses the CSS and combines it with the DOM to determine how each element should be displayed.
Large or complex style sheets can delay rendering, particularly on slower devices.
Step 34: JavaScript Runs
JavaScript adds behaviour to the page.
It can:
- Open menus
- Load additional content
- Validate forms
- Update dashboards
- Track interactions
- Display notifications
- Communicate with APIs
- Build entire web applications
JavaScript can improve a site dramatically, but too much of it can cause:
- Slow page loading
- High memory use
- Frozen browser tabs
- Delayed interaction
- Battery drain
A website may download quickly but remain unusable while scripts are still running.
Step 35: The Browser Creates the Page Layout
The browser calculates:
- The size of each element
- Where it should appear
- How text wraps
- Which items overlap
- How the page responds to screen size
This is sometimes called layout or reflow.
When scripts keep changing the page, the browser may need to repeat these calculations.
Poorly designed pages can shift visibly while loading.
Step 36: The Browser Paints the Page
The browser converts the calculated layout into pixels.
It draws:
- Text
- Backgrounds
- Borders
- Images
- Shadows
- Icons
- Animations
The graphics processor may assist with complex effects and video.
The browser combines multiple visual layers and displays the result on the screen.
This is the point where the page appears to the user.
Step 37: More Activity Continues in the Background
Even after the page looks complete, it may continue to:
- Load images
- Run analytics
- Refresh data
- Connect to chat services
- Display advertisements
- Preload links
- Check notifications
- Maintain live connections
- Save cookies
- Update local storage
A modern web application may remain connected to its server for the entire time the tab is open.
What Are Cookies?
Cookies are small pieces of data that a website asks the browser to store.
They may be used for:
- Login sessions
- Shopping baskets
- Preferences
- Language
- Security
- Analytics
- Advertising
When you revisit the site, the browser may send relevant cookies back.
Cookies are not executable programs, but they can contain identifiers that allow activity to be linked across sessions.
What Is Browser Local Storage?
Websites can also store data using browser features such as:
- Local storage
- Session storage
- Indexed databases
- Cache storage
These can hold more information than traditional cookies.
They are commonly used by:
- Web applications
- Offline-capable sites
- Games
- Productivity tools
- Streaming services
Corrupted local data can occasionally cause a site to behave incorrectly on one browser while working elsewhere.
What Happens During a Redirect?
A website may tell the browser to visit another address.
For example:
http://example.com
may redirect to:
https://www.example.com
Redirects are common for:
- Enforcing HTTPS
- Moving pages
- Login services
- Tracking links
- Regional websites
- Shortened URLs
Too many redirects can add delay or create an error loop.
Why the First Visit Is Often Slower
The first visit may require:
- DNS resolution
- A new network connection
- A TLS handshake
- Full file downloads
- Font downloads
- JavaScript compilation
- Cache creation
Later visits may reuse:
- DNS answers
- Existing connections
- Session tickets
- Cached images
- Cached style sheets
- Compiled code
This can make repeat visits noticeably faster.
Why a Site Can Be Slow Before Anything Appears
A long delay before the first visible content may be caused by:
- Slow DNS
- Connection failure
- High latency
- Packet loss
- TLS negotiation problems
- A slow server
- A delayed database query
- A redirect chain
- A blocked script
- An overloaded security service
Browser developer tools can help identify which phase consumed the time.
Why a Site Can Appear Quickly but Remain Unusable
Sometimes the basic page appears, but buttons do not work for several seconds.
Possible causes include:
- Large JavaScript bundles
- Slow API calls
- Browser extensions
- Main-thread blocking
- Delayed authentication
- Heavy tracking scripts
- A slow device
The network may already have delivered the page. The delay is now in browser processing.
Why Images May Be Missing
Missing images can result from:
- A blocked image domain
- A CDN problem
- Incorrect file paths
- Browser privacy settings
- Ad blocking
- Certificate errors
- Mixed-content blocking
- Slow downloads
- Server permissions
The main HTML page and its images may come from different servers.
This is why a website can load partially.
What Is Mixed Content?
Mixed content occurs when a secure HTTPS page tries to load a resource over insecure HTTP.
Browsers may block that resource to protect the secure page.
This can affect:
- Images
- Scripts
- Style sheets
- Video
- Embedded content
A site may therefore look broken even though the main page loaded successfully.
The website owner must correct the insecure references.
Why One Website Works and Another Does Not
Different websites use different:
- DNS providers
- Hosting companies
- CDNs
- Network routes
- Security systems
- Certificates
- Application servers
When one site fails but others work, the issue may be specific to that destination.
Possible causes include:
- Website outage
- Poor routing
- DNS record fault
- Certificate problem
- Firewall blocking
- Regional CDN failure
- Your IP address being blocked
A general broadband speed test may look completely normal.
Why the Site Works on Mobile Data but Not Wi-Fi
Switching to mobile data changes:
- DNS resolver
- Public IP address
- Internet provider
- Network route
- Filtering
- IPv4 or IPv6 behaviour
When the site works on mobile data but not through the router, investigate:
- DNS
- Router filtering
- ISP routing
- Public IP blocking
- VPN or proxy settings
- IPv6
- Cached data
The website itself may still be functioning normally.
Why the Site Works in One Browser
When a site works in one browser but not another, possible causes include:
- Browser cache
- Cookies
- Extensions
- Certificate storage
- Privacy settings
- Proxy configuration
- Different DNS behaviour
- Unsupported browser features
- Corrupted local storage
Try a private window and disable optional extensions before changing the entire network.
Where a VPN Fits Into the Process
A VPN changes the path.
Instead of sending traffic directly to the website, the device sends encrypted traffic to the VPN server.
The VPN server then contacts the website on your behalf.
This changes:
- Public IP address
- Route
- DNS behaviour
- Geographic appearance
- Security policy
- Latency
A VPN may fix a poor route, but it may also make the connection slower.
Where a Proxy Fits Into the Process
A proxy acts as an intermediary between the browser and the destination.
A business may use one for:
- Security filtering
- Logging
- Access control
- Caching
- Data-loss prevention
The browser may connect to the proxy rather than directly to the website.
The proxy then makes the external request.
A proxy fault can therefore affect websites even when the underlying internet connection works.
Where a Firewall Fits Into the Process
A firewall can inspect or control traffic at several points.
It may run:
- On the device
- On the router
- At the business network edge
- In the cloud
- In front of the website
Firewalls can block traffic based on:
- IP address
- Domain
- Port
- Protocol
- User
- Device
- Application
- Security reputation
A misconfigured firewall can create connection timeouts or partial page loads.
What a Browser Error Can Tell You
DNS_PROBE_FINISHED_NXDOMAIN
The hostname could not be resolved.
Possible causes include:
- Incorrect address
- Missing DNS record
- DNS outage
- Filtering
- Typing error
ERR_CONNECTION_TIMED_OUT
The destination did not respond within the expected time.
Possible causes include:
- Routing issue
- Firewall blocking
- Server offline
- Packet loss
- Wrong IP address
ERR_CONNECTION_REFUSED
The destination actively rejected the connection.
Possible causes include:
- No service listening on that port
- Firewall rejection
- Application stopped
- Incorrect port
ERR_CERT_DATE_INVALID
The certificate may be expired, not yet valid or affected by an incorrect device clock.
Too Many Redirects
The browser is being sent repeatedly between addresses.
Possible causes include:
- Broken login logic
- Cookie problems
- HTTPS redirection faults
- Proxy configuration
How to Diagnose a Slow URL
Use a structured approach:
- Confirm the address is correct.
- Try another website.
- Try another browser.
- Try a private window.
- Test another device.
- Compare Wi-Fi and Ethernet.
- Check DNS resolution.
- Ping the destination where allowed.
- Run traceroute.
- Test with and without the VPN.
- Check the service-status page.
- Use browser developer tools.
- Record any HTTP error code.
- Compare mobile data with the normal connection.
This helps identify which stage is failing.
Browser Developer Tools Show the Detail
Most desktop browsers include developer tools.
Open them with a key such as:
- F12
- Ctrl + Shift + I
- Cmd + Option + I
The Network panel can show:
- DNS time
- Connection time
- TLS time
- Time waiting for the server
- Download duration
- HTTP status
- File size
- Failed resources
- Redirects
A request that spends most of its time “waiting” may indicate a slow server.
A request that spends most of its time connecting may indicate a network or routing issue.
A Simplified End-to-End Summary
When you type a URL and press Enter:
- The browser interprets the address.
- It checks caches and security rules.
- DNS translates the hostname into an IP address.
- The device chooses a route.
- Traffic passes through the local network and router.
- The router applies NAT and firewall rules.
- The request crosses the ISP and internet.
- The browser connects to the server.
- TLS creates a secure HTTPS session.
- The browser sends an HTTP request.
- The server, application and database process it.
- The response travels back.
- The browser decrypts and parses the content.
- Additional files are downloaded.
- HTML, CSS and JavaScript are rendered into the page you see.
All of this can happen in less than a second.
The Internet Is a Chain of Dependencies
Loading a website depends on many systems working together.
A problem at any point can affect the final result:
- The device
- Browser
- DNS
- Wi-Fi
- Router
- Firewall
- ISP
- Internet route
- CDN
- Web server
- Application
- Database
- Third-party services
This is why “the internet is slow” is not always a complete diagnosis.
The most effective troubleshooting starts by identifying which stage is taking too long or failing.
Hamilton Group can diagnose slow websites, DNS problems, unreliable Wi-Fi, routing faults, browser issues and business connectivity problems.
Call 0330 043 0069 or visit hgmssp.com to speak with one of our experts.