Free tools Windows power users keep installed
One-click scans. No signup required.
A domain name is not merely a readable version of an IP address. On a modern shared web server, the hostname tells the server which website and TLS certificate to use. Entering the server’s numeric IP can therefore show a different site, redirect, fail with a certificate warning, or be rejected even when the domain works normally.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What the domain name does that an IP address does not
When you enter https://example.com, the browser performs two related but separate jobs. First, DNS looks up the domain’s address records, such as A for IPv4 and AAAA for IPv6. That lookup gets the connection to one or more server addresses. It does not, by itself, tell the web server which site you intended to open.
As an Amazon Associate I earn from qualifying purchases.
The browser keeps the hostname from the URL and sends it during the connection. For ordinary HTTP, that value is the Host header. A server can use the same address and port for dozens or thousands of domains, then choose the matching virtual-host configuration from the hostname. Apache describes this as discriminating on the basis of the HTTP Host header when multiple virtual hosts share an address and port.
This is why DNS and web-site selection should not be treated as interchangeable. DNS answers “which address should I contact?” The hostname in the request answers “which site should that address serve?”
#1 Best Overall
- [Ultra-Lightweight Ear Buds Designed for Small Ears] Each earbud weighs only 3.7g and features a compact, ergonomic in-ear design made especially for small ears. Secure, low-profile, and comfortable for workouts, all-day wear or overnight sleeping.The ultra-slim profile sits flush in your ear with no hard edges poking or rubbing, so you can even sleep on your side without discomfort.
- [Immersive Stereo Sound with TOZO OrigX Technology] TOZO OrigX tuning delivers clear vocals, balanced mids, and natural stereo sound for music, podcasts, and videos.
- [Long Battery Life for Daily Use] Get up to 7 hours of playtime on a single charge, with up to 32 hours total using the charging case—ideal for workdays, commuting, and extended listening sessions.
- [Bluetooth 5.3 & Stable Connection] Bluetooth 5.3 provides fast pairing, stable wireless performance, and reduced dropouts as you move around home or office.
- [Deep Bass with Clear Vocals] High-performance drivers produce punchy bass while keeping vocals clean and detailed for everyday listening.
Why a shared server cannot infer your intended site from its IP
Name-based virtual hosting
Web hosting commonly uses name-based virtual hosts. Each site has a configuration containing a name such as example.com, aliases such as www.example.com, a document root, rewrite rules and often a separate security policy. Several of those configurations can listen on the same local IP and port.
A request for http://example.com/ includes Host: example.com, so the server can select the example.com configuration. A request for http://203.0.113.10/ normally supplies the numeric address as the host value. Unless a virtual host was deliberately configured for that address, it does not match the domain’s ServerName or aliases.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallThe default or first virtual host
When no name matches, the server still needs a response. Depending on the web-server software and configuration, it may use the default virtual host for that address and port. On many configurations, that is the first listed virtual host. The result can be a hosting-company landing page, another customer’s site, an empty directory, a deliberate “default” page, a redirect to a canonical domain, or an error such as 400 or 404.
That behavior does not prove that the intended site is offline. It proves only that the request did not select the same virtual host as the domain request.
Rank #2
- 【IP68 Waterproof Multifunctinal Smart Watch】Torjalph fitness activity tracker smart watch is IP68 waterproof technology ,you can wear it when swimming,handwashing,it's rain-proof which means that you perform multiple exercise modes outside without worrying about sweat or rain corroding your fitness smart watch,and this watch equipped with a 230 mAh large capacity battery magnetic charging ,and this sports activity tracker watch can be used 5-7 days If fully charged.
- 【Larger 1.83'' Full Screen Watch & Multi-dial Selection】1.83 inch full HD color touch screen smart watch for men / women provides excellent 240*284 resolution image quality ,This Bluetooth smart watch offers a better touch experience and remarkable immersion and ,more than 200 watch faces for you to choose from App"Da Fit ", you can change the dial style according to your mood to wear keeping the world on your wrist
- 【Accurate Activity Tracker Smart Watch 】sports watch activity tracker uses sweat and dust resistant breathable silicone strap, our Fitness Tracker Smart Watch for Android iOS Phones supports 12 sports modes,walking,running,bicycle,swimming,badminton,basketball,football,rope skipping. This bluetooth calls smart watch for men women is lightweight and stylish, bringing more convenient and relaxing sports experience while also providing more protection.
- 【Your 24 Hour Personal Daily Health Monitor】Fitness watch for women men full touch screen IP67 waterproof bluetooth smartwatch for Android iOS Phones with heart rate blood pressure monitor multifunction Andriod smart watch with steps counter sleep monitor sports fitness watch, monitoring blood oxygen saturation allows you to understand your physical condition in real time to track fitness progress ,to know your health status in time.
- 【More Functions Bluetooth Call Smart Watch】This fitness activity smart watch full screen for iPhone and Android phones includes a bunch of new features including:The bluetooth smart watch can hang up the phone, receive and display WhatsAPP /Text /Facebook /Twitter /Messenger reminder.Support sedentary reminder, alarm clock, stopwatch, timer,weather information,music control, remote camera control compatible with Android 5.0 and above or iOS 9.0 and above smartphones.
Dedicated addresses do not remove every issue
A site with a dedicated IP may be configured to answer its domain and its numeric address identically, but that is an administrator’s choice rather than a general property of IP URLs. Redirect rules, application routing and security filters can still treat a numeric host differently. If an address is shared by a reverse proxy or content-delivery network, the address may not identify the origin server at all.
Why HTTPS usually fails more visibly by IP
The certificate must match the host in the URL
HTTPS adds identity verification before the browser accepts encrypted HTTP. RFC 9110’s service-identity rules require the client to compare the certificate with the host in the URI. For a domain URL, the reference identity is a DNS name such as example.com. For a literal IP URL, the reference identity is an IP identity.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →A certificate containing example.com and www.example.com does not automatically authenticate 203.0.113.10. If the numeric address is absent from the certificate’s IP subject-alternative-name entries, the browser can display a name-mismatch warning or terminate the connection. Bypassing that warning does not make the certificate valid and is unsafe for normal use.
SNI selects the certificate before HTTP exists
HTTPS virtual hosting has an ordering problem: the server must choose a certificate during the TLS handshake, but the encrypted HTTP request (including its Host header) is sent only after that handshake. TLS Server Name Indication (SNI) solves this by carrying the requested hostname early in the handshake.
Rank #3
- [Low Noise High Fidelity] New bee guitar cord with 22AWG oxygen-free-copper center conductors provides enhanced signal transfer, the PVC insulation material and the high-density stranded copper double shield provide noise rejection for quiet operation
- [Ideal for Choice] New bee 1/4 straight and right angle metal connectors, ensures a secure connection in any instrument, pedal, or amp jack. L shape great fro on stage guitar stands
- [Wide Compatible] Suitable for mixer, power amplifier, microphone, effector, decoder, equalizer, electoronic organ, electric guitar, electric bass and other electronic equipments. Widely used in the installation of smart home, karaoke speaker, professional stage audio, etc
- [Easy Disassemble] Making incidental repairs quick and easy! Very nice, flexible cable
- [Dont Hesite to Order] 24 hours customer services and professional technology team are standing by
With https://example.com, the browser normally sends SNI for example.com; the server can then select that site’s certificate and, after TLS is established, route the HTTP request to the same virtual host. With https://203.0.113.10/, the client sends an IP identity (or no useful domain name for a name-based certificate selection), so the server may present its default certificate. Even if the later HTTP request contains a host value you expected, the certificate decision has already been made.
Why HTTP may appear to work while HTTPS does not
Plain HTTP has no certificate check, so an IP request can return a page selected by the default virtual host. HTTPS must satisfy both certificate identity and virtual-host routing. It can therefore fail with a TLS warning before you ever see an HTTP response, while the domain URL succeeds on the same machine and address.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minuteWhat each access method sends
| Aspect | Domain URL | Numeric IP URL |
|---|---|---|
| DNS resolution | Looks up the domain’s A and/or AAAA records. | No domain lookup is required; the address is supplied directly. |
| HTTP host value | Normally the domain, allowing a matching virtual host. | Normally the literal IP, which may match no named site. |
| TLS SNI | Usually carries the domain name before HTTP begins. | Cannot select a certificate issued only to the domain. |
| Certificate identity | Checked against the DNS name in the URL. | Checked against an IP identity; a domain-only certificate is insufficient. |
| Likely virtual host | The configuration for that hostname. | The default, first, unmatched or explicitly rejected configuration. |
| Proxy or CDN path | Host-based rules can route to the intended tenant and origin. | The shared edge address may have no rule for the numeric host. |
How to diagnose the problem without changing DNS
The most useful test connects to a particular address while preserving the real hostname for both HTTP routing and TLS SNI. This separates reachability from name-based configuration.
1. Check the addresses published for the domain
- Query the domain’s A record for IPv4 and AAAA record for IPv6 using your operating system’s DNS tools or a trusted resolver.
- Compare every returned address with the IP you are testing. A stale A record, a missing AAAA record, or an address belonging to a proxy can send you to a different system than expected.
- Repeat the check from more than one network if results appear inconsistent; DNS caches and geographic routing can produce different answers.
2. Force the connection to an address while retaining the hostname
With curl, --resolve adds a temporary host-to-address mapping for that command. The URL still contains the domain, so curl sends the proper HTTP host and SNI while opening the TCP connection to the chosen address:
Rank #4
- Digital Family Calendar: BSIMB digital calendar wall touch screen puts an end to your chaotic life. Designed for busy families, the digital calendar keeps you organised and in step with your family. Assign different colours and tasks to each family member to make family scheduling easier and more intuitive.
- Easy Setup and Auto-Sync: Plug in, connect to WLAN and auto-syn your electric calendar in minutes. Digital wall calendar compatible with Google calendar, iCloud calendar, Outlook calendar, Cozi calendar and Yahoo calendar. Add events directly on the device or through the ecalendar app. Electronic calendar stays current whether you're at work or traveling—no manual updates needed.
- All-In-One Home Assistant: Smart calendar builds habits and encourage independence with personalised chores. Display daily meal plan to reduce the daily ‘What's for dinner?’ stress. To-do lists keep track of everything you want. Turning chores into valuable achievements with stars and rewards, making life easier and more enjoyable.
- Manage Anytime Anywhere: BSIMB electronic calendar for family stay connected with the powerful ecalendar app. Access and manage your digital wall calendar anytime, anywhere with free features like stars & rewards, photo screensaver, chore charts, meals plans, to-do lists etc. Electronic planner paid features like Magic Import tailor advanced tools for users with special needs.
- Stay in Touch with Loved Ones: Share photos or videos from your phone to electronic wall calendar with app, instantly update your life moment, and keep in touch with your family, especially those who are far away; you can also surprise your smart calendar digital wall by sending him a wish card; it's also great for keeping tech-illiterate elders in touch with the youngsters.
curl -v --resolve example.com:80:203.0.113.10 http://example.com/For HTTPS, use the TLS port and an HTTPS URL:
curl -v --resolve example.com:443:203.0.113.10 https://example.com/In the verbose output, check the connected address, the certificate names, the negotiated protocol and the response status. If this succeeds while visiting the numeric URL fails, the network path is probably healthy and the difference is host routing or certificate identity.
3. Inspect the web-server virtual-host configuration
On the server, verify that the intended site has the correct name and aliases, listens on the expected address and port, and is enabled. In Apache, inspect the relevant ServerName and ServerAlias directives and the virtual-host list for ports 80 and 443. Confirm which configuration is the default for unmatched requests and whether rewrite rules intentionally redirect non-canonical hosts.
For HTTPS, check that the TLS virtual host presents the certificate for the same hostname used in the request and that SNI-based selection is enabled by the server and its proxy layer. A correct port-80 configuration does not automatically correct port 443.
4. Examine the certificate names
Open the certificate details for the working domain and read its subject-alternative-name list. Match the exact hostname, including whether the request uses a www alias or another subdomain. If you intentionally need an IP URL, the certificate must contain that IP as an IP identity; a DNS name that happens to resolve to the address is not equivalent.
5. Account for a reverse proxy or CDN
If traffic passes through a reverse proxy or CDN, the public address is often shared. The edge service routes tenants by hostname, not by the address alone, and may block unknown host values. Test the public domain with --resolve first, then inspect host-routing rules at the proxy. Testing the public IP may never reach your origin, so do not use that result alone to judge the origin server’s health.
6. Interpret the symptom as evidence
- Wrong site or generic landing page: an unmatched request is reaching a default virtual host.
- Redirect to a domain: canonical-host or HTTPS rewrite rules are functioning, but the initial host was not the intended one.
- Certificate warning before a page loads: the certificate does not authenticate the literal IP, or SNI selected a default certificate.
- Connection timeout or refusal: investigate firewall rules, listeners, routing and the address itself; this is a separate failure from virtual-host selection.
- HTTP 400, 403 or 421: the server or proxy may deliberately reject an unknown or unsafe host value.
Ways to make IP access behave predictably
Use the domain for normal visitors
The reliable public URL is the domain because it supplies the routing name and the certificate identity together. Keep DNS records current and publish the canonical hostname. If you want one preferred URL, redirect alternate hostnames to it after the request has been safely classified.
Recommended Free Tools
Configure an intentional default host
Administrators can create a default virtual host that returns a clear response, redirects to an approved domain, or rejects unknown hosts. This is safer than accidentally exposing another tenant’s site when someone visits the server address. The default should not contain private application content or administrative interfaces.
Provide a certificate for an IP only when it is truly required
An IP-based HTTPS URL can work only when the selected virtual host serves a certificate whose identities include that exact IP and the server routes the request accordingly. This is operationally different from a normal domain certificate and may be impractical for dynamic, shared or proxy-managed addresses. Do not issue or install a certificate for an address you do not control.
Use hostname-preserving tests for development
When a site is not yet in public DNS, use a local hosts-file entry or curl’s --resolve option so the browser or client still sends the planned hostname. This tests the real virtual-host and TLS behavior without making the numeric IP the site’s public identity.
Common misconceptions and mistakes
- “DNS points to the server, so the IP must open the site.” DNS supplies reachability; the HTTP host and TLS SNI supply tenant selection and identity.
- “The IP shows another page, so my website was hacked.” A default virtual host commonly explains a wrong page. Verify the host-routing configuration before drawing a security conclusion.
- “I can ignore the certificate warning because I know the IP.” The warning means the connection is not authenticated to the URL you entered. It can conceal interception or a misrouted service.
- “Changing the Host header alone fixes HTTPS.” A manually changed HTTP header cannot change the certificate already selected during the TLS handshake; SNI must also name the intended site.
- “The address in DNS is definitely the origin.” Proxies, CDNs, load balancers and IPv6 can place other infrastructure between the public hostname and the application server.
When an IP test is useful
Direct IP testing is valuable for checking whether a listener responds, comparing IPv4 and IPv6 paths, validating a new server before DNS changes, and identifying an incorrect default virtual host. It is not a substitute for testing the production hostname. Always perform the final check with the same domain, protocol, port and certificate path that visitors will use.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
