sandai.net

What our own request to this host returned, over the last 30 days. Nothing here was tested for weaknesses and nothing was captured from anyone else's traffic.

Last status

200

Answered

100% of 6 probes

Refused

none of 6 probes over 30 days

Median open time

3927 ms

Last seen

2026-09-18 06:48:22 UTC

“Answered” is how often our own request got a response, from one region at one probe per day. It is not an uptime figure and must not be read as one. A refusal is a response, so a refused probe counts as answered. "Refused" counts the probes whose answer was 403 or 429.

Transport

TLS

1.3

Certificate expiry

90 days left

Issuer

GlobalSign RSA OV SSL CA 2018

Chain valid

valid

Name matches

matches

HTTP version

1.1

Cipher

TLS_AES_256_GCM_SHA384

Address family

Headers and cookies

Header grade

HSTS

not sent

Mixed content

none

Cookie flags

not measured

Redirect hops

Exposure check

clean

The request ended at https://www.xunlei.com/. 6 of the 6 probes that got a response ended on a different host, so the fields above may describe that host rather than this one.

Graded against hg3.

Where the time went

DNS (first request) 0 msConnect (first request) 260 msTLS handshake (first request) 0 msRedirects, then waiting for the first byte 2140 msTransfer 360 ms

2760 ms in total, across 3 requests — the first and 2 redirects. Transfer is the remainder after the first byte rather than a separately measured phase.

Only the first request’s DNS, connection and TLS are timed separately, so that segment is not server think-time alone: it carries the other 2 requests and anything else between the first connection and the first byte.

The TLS handshake reads 0 ms because the first request was plain HTTP, so there was no handshake to time. The TLS version and certificate above are from the HTTPS hop the origin redirected to, which is a different connection from the one timed here.

43,594 bytes returned, after 2 redirects.

Registration and published DNS

Domain registration

1226 days left

Registrar

Alibaba Cloud Computing (Beijing) Co., Ltd.

Registered

2003-01-27

DNSSEC

not signed

Registry record read over RDAP on 2026-09-13. Neither involves a request to this host, and neither is a test: we read what the registry and the domain’s own DNS publish. A published policy is not evidence about what a mail receiver would actually do.

By observer region

Measured from one region. The per-region comparison §5.5 describes needs more than one, and the deployment has one today.