hairpin-nat-test-invalid-for-external-port-exposure-check
Curling from the VPS to its own public IP tests hairpin NAT (which may loop back through the local network stack), not genuine external Internet access. A port may appear reachable from this test but be blocked at the upstream cloud firewall. Always verify external port exposure from a genuinely external host or use the Hostinger firewall API to check allowed rules.