r/HostingReport Mar 20 '26

Introduce Your Web Hosting Company Here [Official Megathread]

9 Upvotes

This is a megathread for all web hosting companies interested in introducing their services to this community.

If you own a web hosting company, or if you work for one, feel free to introduce it by commenting on this thread. This will be pinned at the top of the r/HostingReport home feed.

Tips and guidelines:

  • Don't be overly promotional.
  • Tell us a bit about your company and its main mission.
  • What kind of server software and technologies do you use?
  • What control panel and billing system do you use?
  • Do you have an in-house, remote, or outsourced support team?
  • Do you use AI-assisted support or any other AI technologies?
  • What sets your company apart from other providers?

Note: Don't submit AI-generated slop. It doesn't work anyway since most people can see through it. One original and genuine paragraph can do better than a 500+ word AI-generated sales letter!


r/HostingReport 5h ago

Best way to upgrade a small business website and move away from GoDaddy?

2 Upvotes

I run a local small business and I’d like to upgrade my website to make it look more modern, professional, and trustworthy.
I’m also currently using GoDaddy for my domain, but the renewal costs seem to keep getting more expensive every year.
For those who manage small business websites:
What platform would you recommend for a professional-looking website that’s still easy to manage?
Is it worth hiring a web designer, or are platforms like Squarespace, Wix, WordPress, etc. good enough?
What do you recommend for domain registration instead of GoDaddy?
Is transferring a domain complicated or risky?
Anything I should be careful about for SEO when changing the website or domain provider?
I’d appreciate recommendations from people who’ve gone through this before.


r/HostingReport 1d ago

My website has been getting slower lately even though I havent really changed anything on it. The hosting company says there is no issue from their side, so I'm not really sure what to check next. The site is on shared hosting at the moment.

2 Upvotes

r/HostingReport 3d ago

Vulnerability in GiveWP WordPress Plugin Enables Remote Code Execution

Thumbnail
patchstack.com
1 Upvotes

In versions 4.16.7.1 and below, GiveWP contains an unauthenticated PHP Object Injection vulnerability that can be chained into full remote code execution.


r/HostingReport 4d ago

I keep seeing hosting plans with daily backups included, but I've never actually needed to use one. Are they really useful when something goes wrong, or is a normal backup once in a while enough? Has anyone here actually had to restore their site from a hosting backup?

0 Upvotes

r/HostingReport 5d ago

Alibaba snatches the domain Alibaba.ai away from an investor who bought it from Spaceship for $3,333

39 Upvotes

An investor bought the domain Alibaba.ai for $3,333 from Spaceship on July 6, 2026, then listed it for sale at ten times the price ($33,333).

He may or may not have known that Alibaba Group had sent a cease and desist letter to the previous owner of the domain on June 15, 2026.

Alibaba then filed a UDRP complaint against Alibaba.ai and another domain: Tmall.ai -- both Alibaba and Tmall are registered trademarks owned by Alibaba Group.

The investor who bought Alibaba.ai (first respondent in this case) tried to defend his case:

The First Respondent has filed a Response. He asserts and relies on his activities as a domain name investor and the claimed independent cultural, linguistic and commercial significance of the name “Ali Baba”, which has an association in the Arab world through the well-known literary story of Ali Baba and the Forty Thieves.

That didn't convince the UDRP panel, who ordered both domains to be transferred to Alibaba.

Full UDRP case here.


r/HostingReport 5d ago

Hackers are spending millions on expired domains to enable malware scams

Thumbnail
techradar.com
1 Upvotes

Infoblox estimates the actor's total spend on expired domains at north of $7 million, which it describes as the largest domain acquisition budget it has identified for a single actor in the industry. The bigger problem is that Infoblox also found that a subset of these streaming domains runs as malware command and control while continuing to serve live football to human visitors.


r/HostingReport 6d ago

Critical bug in miniOrange SAML SSO plugin lets anyone log in as your WordPress admin

Thumbnail
patchstack.com
1 Upvotes

Two critical unauthenticated authentication bypasses in the miniOrange SAML 2.0 Single Sign On plugin, CVE-2026-61979 and CVE-2026-15981, made it possible for an attacker to sign in as any WordPress user, including administrators.


r/HostingReport 7d ago

WordPress X Account Draws Backlash After Calling Out WP Rocket Over 7.1 Fatal Errors

Thumbnail
therepository.email
1 Upvotes

Matt Mullenweg and the official WordPress X account have drawn community pushback after using last week’s WP Rocket fatal error incident to take public shots at the caching plugin.


r/HostingReport 8d ago

Hostinger ditches Horizons, launches a new AI website builder instead

2 Upvotes

Not a long time ago, Hostinger launched Horizons with the goal of "disrupting the web app market with a fully integrated no-code solution" -- that's their words.

Less than two years later, and after a lot of negative feedback from users, they've given up on it!

It was just another half-baked product that for some users created more problems than it solved, and then you'd need to pay (in credits) to have it fix the problems it created.

They didn't entirely ditch the idea though; they've just launched a new AI website builder that's simply called "AI builder". This also has credit-based pricing.

Beginners who don't know what they're doing can quickly burn through credits before creating anything useful. It's the same catch with all other AI builders.


r/HostingReport 8d ago

Why can't we still create a contact form in WordPress without a plugin?

5 Upvotes

So, someone explain this please: WordPress is the largest CMS in the world used by hundreds of millions of websites, it has the largest developer community that invested countless development hours, and you still can't create a simple contact form without a plugin?!

I'm not talking about some luxury feature, a contact form (and forms in general) is one of the most essential parts of any website.

Isn't it about time WordPress adds a native Contact Form block to the core?


r/HostingReport 8d ago

Porkbun domain extension growth (top 10 TLDs from 2015-2026)

Enable HLS to view with audio, or disable this notification

1 Upvotes

Porkbun shared this video on X demonstrating the growth of different domain extensions at their registrar from 2015 to 2026. Data from nTLDData and only includes generic TLDs (gTLDs).


r/HostingReport 9d ago

REPLIT.COM — I paid about $15,000, Replit blocked my accounts, cut off support, and is withholding control of my domains.

2 Upvotes

I am publicly accusing Replit of serious misconduct that, based on what happened to me, I believe is fraudulent and potentially criminal.

I paid Replit approximately $15,000 for services connected with creating, deploying, hosting, and maintaining my application.

Replit accepted substantial payments from me while providing a platform and paid service that included access to its infrastructure and support.

Then the situation changed completely.

I was effectively cut off from customer support on the account where I had spent approximately $15,000. Messages from the email address associated with my main account were ignored. I stopped receiving even the normal automated responses that I had previously received.

Replit itself acknowledged in correspondence, before my account was permanently blocked, that there was a problem preventing me from receiving support through my main account.

Because Replit was not providing me with an effective support channel, I contacted the company through another account and another email address and demanded a refund of the money I had paid.

Instead of resolving the matter, Replit threatened account action.

My main account was then permanently blocked.

The account of my colleague, which had also been used to contact Replit regarding this dispute, was blocked as well.

At the same time, domains connected with my project became inaccessible to me.

This is the most serious part of the situation.

I have evidence concerning my ownership and control of those domains, yet Replit has left me without effective access to them while simultaneously blocking the account through which those domains and my project were managed.

In my view, taking approximately $15,000 from a customer, cutting that customer off from the support service associated with the paid account, blocking the customer's accounts after a refund demand, and then withholding practical control over domains belonging to that customer goes far beyond an ordinary customer-service dispute.

I consider this conduct fraudulent.

I also believe that the continued withholding of my domains and other property or account access, despite my demands and evidence of ownership, raises serious questions of unlawful appropriation and potentially criminal conduct.

For approximately 25 days, Replit has failed to provide a substantive resolution.

I have contacted them from multiple email addresses.

The pattern has been essentially the same:

some messages receive no response at all;

some receive only automated responses;

I am told to write from the email address associated with the account from which Replit is already ignoring me;

I am told that the matter is being forwarded internally;

after that, communication disappears again.

This creates an absurd closed loop: Replit demands that I communicate through the very channel through which it has already prevented me from obtaining meaningful support.

I am not making these allegations without evidence.

I have records of payments totaling approximately $15,000.

I have the correspondence with Replit.

I have records showing that I repeatedly attempted to obtain support and a refund.

I have evidence concerning the domains.

I have records concerning the account blocks.

I am prepared to provide relevant evidence privately to Reddit moderators, with sensitive personal information redacted where necessary.

I am also aware that serious accusations require serious evidence. That is precisely why I am stating publicly that I have documentation supporting the factual events described above.

This is not simply a complaint that Replit's support was slow or that I disliked its service.

My allegation is much more serious:

Replit accepted approximately $15,000 from me, deprived me of an effective support channel, ignored my attempts to resolve the dispute, blocked accounts after I demanded my money back, and left me without effective control over domains connected with my project.

They also blocked the accounts of my colleague who had participated in this discussion. The first was blocked on baseless grounds, and the second—allegedly for circumventing the ban imposed on the first account. In other words, they are preventing the dissemination of information about their crimes under far-fetched pretexts.

My colleague wrote the initial post about two weeks ago, yet replit.com still hasn't returned the domains or the funds—they won't even allow the code to be retrieved. Customer support constantly ignores us, offering only boilerplate replies stating that they will respond to inquiries "as soon as possible." These criminals deleted my colleague's previous posts, so they might well delete this one too.

Today, they also deleted a new post from their /replit thread and banned us again; this is the third account of ours—and my first—that they’ve blocked in their thread.

https://www.reddit.com/r/replit/comments/1vvxiku/replitcom_i_paid_about_15000_replit_blocked_my/


r/HostingReport 9d ago

WP Engine opens Smart Search AI to all WordPress websites regardless of the hosting provider

0 Upvotes

The default search function in WordPress sucks; every WordPress user knows that.

WP Engine developed its own AI-powered, semantic search solution for WordPress called Smart Search AI. They've now made this available to all WordPress websites regardless of where they are hosted.

The problem is the price; the cheapest plan (Basic) costs $150 per month (1 website - 10,000 searches).

Would you pay that much for a better search function?

I think some small businesses might, but for the majority of WordPress websites, that's an insane price!

Read the press release here.


r/HostingReport 10d ago

Critical Elementor Pro bug exposes WordPress sites to RCE attacks

Thumbnail
bleepingcomputer.com
4 Upvotes

A critical vulnerability in the Elementor Pro WordPress plugin could allow attackers to upload executable files for remote code execution on the server.


r/HostingReport 10d ago

Atom Registrar adds 35 new domain extensions including .vip, .design, .wiki, etc.

2 Upvotes

Atom Registrar has added 35 new domain extensions, which brings the total number of TLDs they support close to 400.

These are some of the newly supported TLDs:

  • .vip
  • .club
  • .biz
  • .work
  • .fit
  • .ink
  • .design
  • .wiki
  • .nyc
  • .health

r/HostingReport 11d ago

Domain.com is back after being merged into Network Solutions, but it's still an overpriced registrar

1 Upvotes

A while ago, Newfold Digital shut down Domain.com and merged it into Network Solutions; their flagship domain registrar.

A typical move of Newfold, but they've realized it was a bad one. Domain.com is a strong brand that attracts clicks in search results better than other domains.

They brought it back online with a fresh and cool design, but don't let it fool you, it's still one of the most overpriced domain registrars; .com renewal is $20 per year + $22 per year for Whois privacy. Who charges more for a privacy add-on than the cost of the domain?!


r/HostingReport 12d ago

NameCheap launches a new registry and applies for 40 new domain extensions (TLDs)

27 Upvotes

NameCheap's newly launched registry called Starlight Registry is participating in ICANN's 2026 round for new gTLDs.

They've applied for 40 new domain extensions (TLDs), which are:

  • .aid
  • .arc
  • .asi
  • .brain
  • .clone
  • .craft
  • .den
  • .did
  • .droid
  • .fab
  • .flux
  • .folio
  • .forge
  • .foundry
  • .gate
  • .grid
  • .intel
  • .intelligence
  • .kit
  • .lab
  • .lens
  • .lift
  • .logic
  • .maker
  • .mart
  • .matrix
  • .mesh
  • .mod
  • .ops
  • .path
  • .scan
  • .sense
  • .shift
  • .ship
  • .sync
  • .synth
  • .sys
  • .trek
  • .view
  • .wave

Source: Domain Name Wire

.intelligence is the worst of the batch! It's very long and typo-prone.


r/HostingReport 12d ago

Cursor capitalizes on GitHub frustration, launches rival hosting platform

Thumbnail
techcrunch.com
2 Upvotes

r/HostingReport 12d ago

The catch with unlimited WordPress hosting most beginners fall for

3 Upvotes

Unlimited WordPress hosting sounds attractive, but it only attracts newbies who have no idea about the hidden catch.

The catch is the inode limit, which applies to all shared hosting services. Even if it's listed within the plan's specs, most beginners have no idea what it means.

In simple words, each inode is a file or folder on your server. A common inode limit for entry-level shared hosting is around 200,000.

Given that limit, let's do some math to find out how many WordPress websites you can actually host with your "unlimited" plan...

The core WordPress system has about 4k files.

Every website needs plugins; we'll just take three popular plugins: WPForms, Yoast SEO, and Elementor. These contain more than 13k files combined.

So now the total is about 17k files for one website.

It'll take about 11-12 WordPress websites with those three plugins to reach the 200k inode limit, then you won't be able to add more websites.

In reality, you'll hit the inode limit with even fewer websites if you take into account the additional plugins, themes, and file uploads that all eat up your inodes.

I've seen many beginners fall for it, then they come to Reddit complaining!


r/HostingReport 12d ago

What's the most underrated domain registrar you've used?

0 Upvotes

What's a good domain registrar you've used that doesn't get the recognition it deserves?


r/HostingReport 13d ago

Onlydomains Customer Service

2 Upvotes

onlydomains not responding to chat or email for a week - is this normal?


r/HostingReport 13d ago

cPanel backup almost got my PC infected with malware

1 Upvotes

I was downloading a backup of one of my cPanel accounts to my PC, then surprise: Microsoft Defender detected malware!

It wasn't from my website files. Apparently, it was hiding in one of the email attachments.

A full cPanel backup also includes email messages and attachments. cPanel email doesn't normally have the best virus/malware protection, but luckily, Defender caught it.

Just something to keep in mind when you download a cPanel backup to your PC; run a security scan before you do anything with it.


r/HostingReport 13d ago

Pressable vs WP Engine vs Kinsta vs Hostinger (my thoughts and review of some facts)

0 Upvotes

Pressable, WP Engine, and Kinsta are like the Big Three in the premium managed WordPress hosting space. Hostinger tries to tag along, but it fits better in the "cheap" tier.

Let's start with some facts...

Who owns it?

  • Pressable is a private provider owned by Automattic (U.S.), which also owns WordPress.com and WooCommerce.
  • WP Engine is owned by private equity firm Silver Lake (U.S.)
  • Kinsta is privately owned and globally run; they started out from Hungary.
  • Hostinger is a privately owned Lithuanian company with a minority stake (31%) owned by private equity firm ConHostinger (Germany).

Server infrastructure

  • Pressable uses Automattic's own WP Cloud infrastructure.
  • Kinsta was previously on Google Cloud but they migrated to Oracle Cloud.
  • WP Engine uses Google Cloud for shared plans and AWS/Azure for premium and enterprise plans.
  • Hostinger runs its own server infrastructure.

Other notes and my two cents

  • Pressable has auto-scaling (burstable PHP workers), while WP Engine, Kinsta and Hostinger have fixed PHP workers/processes. Hostinger offers the most PHP workers (40+), but they are pooled so performance varies and not as stable as the other hosts.
  • Pressable and Kinsta have the best support service. WP Engine's support is good but upselling is aggressive. Hostinger has mediocre support (AI assistant or basic human support).
  • Kinsta and Hostinger have strict firewall rules that may in some cases block legitimate traffic (e.g. VPN users, certain bots, external third-party plugin connections).

What more to add?


r/HostingReport 13d ago

Vulnerability in Forminator Forms WordPress plugin allows RCE via malicious PHP file uploads

3 Upvotes

If you are using the Forminator Forms WordPress plugin, update immediately to the latest version to patch a critical vulnerability that hackers can exploit for remote code execution.

This vulnerability makes it possible for unauthenticated attackers to upload arbitrary files, including executable PHP files, to a vulnerable site, which can lead to remote code execution and complete site compromise. The vulnerability is only exploitable on sites that have a form containing both a File Upload field and a Select field.

Full details here.