Thanks for the reply, Thomas.

> You said this is "shared hosting" - when you say "shared hosting" do you
> mean this is *not* a dedicated machine but one machine out of many in a
> shared environment?

Sorry, I meant virtual hosting.

> Have you tested briefly by disabling your firewall just to see if that
> fixes the issue?

When I disable UFW I get the same nmap results. Somebody else configured the server previously, so there could be something besides UFW interfering, but I'm not sure where to check for that.

> What is the backend? You're passing everything to 8080 which suggests
> the backend might be having issues too.

8080 is eXist-db running in a docker container (for example.org) and standalone (for example.com). There are no issues connecting to these via http.

Any thoughts what to try next?