Hosting.XYZ
Changelog
2026

May

Main changes in 🌤 May:

  • 🌐 Hosting:
    • In the "My sites" section, the header of the block containing the site hosts now remains visible while scrolling the page.
    • In bot protection, Facebook has been renamed to Facebook External Hit, and other Meta bots have been added.
    • Notifications for I'm Under Attack can now be configured using the "DDoS protection" option in notification settings.
    • Similar to the bot statistics in country access restrictions, a list of the top 20 countries by number of requests has been added.
    • The 429 error page now displays the visitor's IP address and the time the request was sent.
    • The "Linux configuration" section has been renamed to "Hosting account settings". A default outgoing mail setting has been added to the section. All settings on the page are now saved independently of one another.
    • Support for Node.js 26 LTS has been added.
    • For manually installed SSL certificates that are set to expire in two weeks or have already expired, expiration notifications are now being sent. This notification feature applies only to sites hosted on our platform and is sent no more than once a month.
    • A button to forcefully terminate all MySQL processes and connections has been added to the active processes list view.
    • For business hosting, a new section "MySQL errors" has been added.
    • In the file manager, the .wp-cli directory added to hidden by default.
  • 🌎 Domains:
    • Increased prices for domains in the .KHMELNITSKIY.UA, .KHMELNYTSKYI.UA, .KM.UA, and .ORG.UA zones.
    • The maximum code length for the parking page is now 65000 characters.
  • ✉️ Mail:
    • To ensure the correct operation of the mail system, the system now automatically detects and blocks the sending of messages with an incorrect "From" header.
    • Redirects can now be configured via the mailbox menu.
    • For corporate mail, the mailbox menu now includes the option to copy filters to one or more other mailboxes.
    • In the "Unsent emails" section, added the option to download all messages for a selected date as an archive.
    • When enabling DKIM for a domain on third-party NS, access to the domain is no longer required.
  • 📧 WebMail.Online:
    • The logic for displaying mail threads has been improved — when opening a thread from a location other than the Trash, deleted messages are displayed in a muted color and with a Trash label; conversely, when opening a thread from the Trash, messages from other folders are displayed in a muted color and with a folder label; when you hover over such a message, its color changes to normal.
    • The separate button for expanding messages in a thread has been removed; you can now expand and collapse messages by clicking on the empty area at the top of the message.
    • When composing a new message, clicking "To", "CC", or "BCC" now opens a window where you can search for and select contacts and address books.
    • In the window that opens when you click on the sender's address, a "All messages from this contact" button has been added, allowing you to quickly find their messages using the search function.
  • ☁️ Cloud services:
    • To order any of the cloud services, your account balance must now have sufficient funds to cover at least one day of service usage. If the balance is insufficient, an invoice will be generated to recharge your balance. Additionally, the order form now displays the daily cost instead of the monthly cost.
  • 🐬 MySQL:
    • A new "Error log" tab has been added.
  • 🔎 Manticore Search:
    • Added the ability to upload custom exception dictionaries and use them in tables.
    • The table properties now include the option to select standard stopword dictionaries for different languages.
    • A tab containing information about indexes has been added to the table information window.
  • 🔍 OpenSearch:
    • The cluster_all privilege is now included in the "Full access to indexes" set to ensure that Query Insights configurations are preserved in OpenSearch Dashboards. These changes apply to all new users; existing users will need to resave their settings.
  • 👤 Account:
    • For security purposes, two-step authentication via Email is enabled for all users; if necessary, you can disable it or configure other 2FA methods.
  • 🛠 Tools:
    • The design of the tools page has been updated.
    • The RDAP tool now features an improved layout for displaying the retrieved data.
  • ⚙️ API:
    • In the API documentation, the way parameter tooltips are displayed has changed — instead of appearing on hover, they now appear below the parameter field when you click the information icon.
  • 📖 Wiki:
    • Updated article about two-step authentication.
    • The article "Linux configuration" has been renamed to "Hosting account settings", updated, and moved to the “Hosting account” subsection; information on configuring the default outgoing mail settings has been added to the article.
    • In article on restricting access by country, information about statistics has been added.
    • In article about I'm Under Attack, information about notifications and how to configure them has been added.
    • In instruction for installing own SSL certificate, information about certificate expiration notifications has been added.
    • Updated article with brief information on how to view and terminate all active processes and connections to MySQL.
    • Updated article on exceeding CPU minutes; added a description of the process for applying and relaxing limits.
    • Updated instruction on how to configure a redirect for a mailbox.
    • Added article about copying mailbox filters.
    • Updated article about the unsent emails log.
    • The instructions for ordering cloud services have been consolidated into one.
    • The instructions for changing cloud service plans have been consolidated into one, and a detailed description of automatic plan upgrades has been added to the instruction.

April

Main changes in 🌤 April:

  • ☁️ Hosting:
    • In bot protection, we've added statistics on allowed and blocked requests over the past 10 days. The statistics are displayed as a top 20 list, as well as separately for each bot next to its name in the general list, provided the bot has made at least one request.
    • In bot protection, the ability to configure access for Google-Xrawler (Google Merchant Feed), QUIC.cloud, and PagePeeker has been added.
    • The IP addresses of the TurboSMS service have been added to the whitelist.
    • When you have ordered dedicated IP, you can now select an address for outgoing connections in the "Outgoing connections" section.
    • On business hosting, added the ability to automatically install the Memos app.
    • Support for the qpdf library has been added.
    • The limit on the number of authorization attempts in phpMyAdmin from a single IP has been increased from 30 to 45 per 10 minutes.
  • 🌎 Domains:
    • Increased prices for domains in the .BEER, .BIZ, .BIZ.UA, .CHERNIGOV.UA, .CHERNIHIV.UA, .CLUB, .CN.UA, .CO.UA, .COM.UA, .COOKING, .COURSES, .DESIGN, .FASHION, .FISHING, .FIT, .GARDEN, .IF.UA, .INK, .IVANO-FRANKIVSK.UA, .KIEV.UA, .KYIV.UA, .PL.UA, .POLTAVA.UA, .RODEO, .STUDY, .SURF, .UA, .UZ.UA, .UZHGOROD.UA, .UZHHOROD.UA, .VIP, .VODKA, .WEDDING, .WIKI, .WORK, .YOGA, and .ZAKARPATTIA.UA zones.
    • Auction functionality has been improved — the conditions for calculating the auction end time have been expanded, the auction prolongation time after a bid has been placed has been increased from 30 to 60 seconds, additional notifications have been added 15 minutes before the auction ends, and notifications now include the auction end time and a header for combining messages into threads in mail clients.
    • If free domains are found in pre-orders, the pre-order for those domains is now automatically canceled, and a notification is sent inviting the user to register the domain.
    • Domains in the .BIZ.UA, .CO.UA, and .PP.UA zones can now be added to the control panel by yourself, without contacting tech support.
  • ✉️ Mail:
    • You can now add entire domain zones in the *.zone format to the blacklist.
    • Autoresponder messages are now sent with authentication using the email address to which the message was sent and are signed with DKIM. If authentication fails, the message is sent without authentication, as before.
    • Re-exporting messages from your mailbox can now only be requested after the previous export in the same format has been automatically deleted.
    • The SMTP limits for the number of connections, recipients, and messages sent have been increased to 3000.
  • 📧 WebMail.Online:
    • The layout for mobile devices has been improved — the side menu is now always collapsed and expands when you tap the hamburger button; in the message list, the message actions menu opens when you tap and hold; and the calendar view automatically switches from week view to day view.
    • The indexing process when opening the mailbox has been optimized.
    • The session lifetime when opening WebMail.Online from the control panel has been increased from 30 minutes to 4 hours.
  • 💻 VPS:
    • Support for Ubuntu 26.04 LTS has been added to the OS auto-installation.
    • The available memory metric has been added to the RAM usage statistics. Additionally, the cache metric is no longer included in the used memory metric.
  • 🖥 Dedicated:
  • ☁️ Cloud services:
    • For all cloud services except Redis, exceeding the disk space limit may now result in an automatic plan upgrade — when 95% is reached, a notification is sent; when 100% is reached, a notification with a warning about an automatic plan upgrade in 3 days is sent; if usage does not drop below 100% within 3 days, the instance plan is automatically upgraded.
    • Resource usage statistics are now collected and displayed more effectively; the RAM usage chart now provides more detailed information.
  • 🐘 PostgreSQL:
  • 🗃 Redis:
    • The "Memory usage" tab has been removed, and the button for configuring the memory cleanup mode has been moved to the "Statistics" tab.
  • 👤 Account:
    • In accounts where anti-phishing code has not been configured, a warning is now displayed with a suggestion to configure it.
  • 💰 Payment:
    • When signing a contract, Ukrainian legal entities must now specify the director’s title, its genitive form, and the legal basis for the director’s authority.
  • 🛠 Tools:
    • In the QR code generator, support for the "Description" field has been added for vCard.
    • The option to order extracts from the EDR has been removed.
  • 📖 Wiki:
    • Added article about incorrect "From" headers when sending messages.
    • Updated article about limits on sending messages per day.
    • In article containing examples of WebMail.Online filters, information about configuring a filter to delete messages from senders in a specific domain has been added.
    • In article about bot protection, information about statistics has been added.
    • Updated article about outgoing connections — added a diagram and information about configuring the outgoing IP.
    • Updated article about VPS usage statistics — added a brief description of memory usage metrics.
    • Updated instruction about changing your account email address.
    • In article about anti-phishing, a description of how phishing messages are sent has been added.
    • Updated article about getting a contract.

March

Main changes in 🌤 March:

  • ☁️ Hosting:
    • In bot protection, a button for suggesting new bots has been added.
    • In bot protection, the ability to configure access for Base (BaseLinker) and TikTokSpider has been added.
    • Site page protection no longer applies for IPs added to the Firewall whitelist.
    • When you unblock an IP in the "DDoS protection" section, that address is now automatically added to the Firewall whitelist in your hosting account.
    • For PHP 7.4-8.5, added the ability to enable the php-amqp module, which is used to work with RabbitMQ.
    • Node.js and Go binaries are now available on shared hosting. You can select the versions in the "Linux configuration" section. The main difference from business hosting is that you cannot use sites or apps that listen on ports and need to be accessible from the outside.
    • On business hosting, added the ability to automatically install the Uptime Kuma app.
    • For BookStack, added the ability to configure outgoing email via our control panel.
    • Added the ability to import a database dump from a .TAR.GZ or .GZ archive. When importing a .TAR.GZ, the first SQL file in the archive is selected.
    • For the Redis extra service, a memory usage chart has been added.
    • In the OPcache statistics, parameters are now displayed with their full paths.
  • 🌎 Domains:
    • When configuring a web redirect, you can now choose the redirect code — 301 or 302.
    • For users with delegated access, the domain owner's set of NS records is now displayed in the "Name servers (NS)" section.
    • In the incoming transfer form, you can now specify multiple domains at once.
    • Notifications about your bid being outbid in the auction are now sent only once, until you place a new bid.
    • Added a preset for connecting a domain to Notion Sites.
  • ✉️ Mail:
  • 💻 VPS:
    • Users with delegated access can now download backups of deactivated VPS from their "Deleted VPS" section. Once a server is deleted, only the server owner will be able to download the backups.
    • Removed the ability to auto-install FASTPANEL.
  • 📦 Storages:
    • When ordering, your balance must now have enough funds to cover at least 1 day of service usage.
    • In the web interface, support for the HEIC format has been added — when viewing such files, a WebP preview is automatically generated for them.
    • In the web interface, when creating public links, if the limit on the number of links is reached, a clearer error message will now be displayed, indicating the limit.
    • The limit on the number of simultaneous FTP connections has been increased from 10 to 100.
  • 🐬 MySQL:
    • Added the ability to import a database dump from a .TAR.GZ or .GZ archive. When importing a .TAR.GZ, the first SQL file in the archive is selected.
  • 📊 ClickHouse:
    • The log directory is no longer counted toward the instance's disk space.
  • 👤 Account:
  • 🛠 Tools:
    • Added tool for viewing documents from the court decisions registry.
    • When checking a domain on the WHOIS page, if no WHOIS data is available, RDAP data will now be automatically retrieved.
  • ⚙️ API:
    • Added method for retrieving information about a web app.
  • 📖 Wiki:
    • Added article about webhooks for mail.
    • Updated article about configuring the auto-responder.
    • Updated article about web redirect.
    • Added article about Manticore Search distributed indexes.

February

Main changes in 🌨 February:

  • ☁️ Hosting:
    • When opening the "My sites" section, the system now checks the expiration date of the corresponding domains registered with us, and if there are expired domains, a list of them with payment links is displayed at the top of the section.
    • In the main settings of site protection, an option has been added to control access for suspicious IP addresses.
    • In the bot protection, the ability to control access for adm.tools, Telegram, Viber (except preview), WhatsApp, iMessage (applies to Facebook along with Instagram and Facebook Messenger), Discord, and Yeti has been added. User-Agent for ChatGPT and OpenAI bots has also been updated, and ChatGPT-User has been moved from ChatGPT to a separate switch.
    • In the "Hosting" and "Web server load" sections, the CPU minutes chart now displays data for the last month instead of the last 7 days.
    • When opening the CMS auto-install form, the system now checks for access restrictions that may prevent auto-installation, and if any are found, a warning is displayed with a list of problem areas.
    • Added the ability to automatically install BookStack.
    • Removed the option to automatically install an outdated version of October.
    • In the site access logs filter, you can now select the HEAD and OPTIONS methods.
    • In the SSL settings, in case of problems with obtaining an SSL certificate from Let's Encrypt, clear descriptions are now displayed for common errors.
  • 🌎 Domains:
    • Domains that are no longer registered with us are now automatically removed from sale.
  • ✉️ Mail:
    • For corporate mail, the ability to set up a publicly accessible booking form has been added to the calendar.
    • For online booking, email notifications have been implemented.
  • 📧 WebMail.Online:
    • Added the ability to search by the "Copy" and "Hidden copy" fields.
    • Events in the calendar can now be created either by clicking or by dragging and dropping.
  • 💻 VPS:
    • When changing the plan in the plan list, the additional payment amount is now displayed on the switch button, and the monthly cost is now displayed for each plan.
    • Added the ability to automatically install FASTPANEL on Debian 12.
    • Support for the ICMP protocol has been added to Firewall.
  • 🖥 Dedicated:
    • Support for the ICMP protocol has been added to Firewall.
  • 📦 Storages:
    • The file selection interface for torrent downloads has been improved — files are now displayed in a tree structure, and you can select directories.
  • ☁️ Cloud services:
    • The storage period for unpaid services has been extended from 10 to 30 days.
    • For Manticore Search and MySQL, on the "Security" tab, you can now also add Manticore Search instances to the allowed list.
  • 🔎 Manticore Search:
    • Added support for distributed indexes.
  • 👤 Account:
  • 🛠 Tools:
  • ⚙️ API:
    • The method for installing your SSL certificate instead of uploading files now only accepts certificate data in text format.
  • 🤖 Telegram bot:
    • When paying for a service, the amount from the invoice is now displayed; for the pay-from-balance button, the amount remaining on the balance is now displayed.
  • 📖 Wiki:
    • Added article about checking suspicious IPs in the site protection system.
    • Added article about online booking to the WebMail.Online calendar.
    • Added article about anti-phishing.

January

Main changes in 🌨 January:

  • ☁️ Hosting:
    • The ability to scale has been added to the load diagrams.
    • In the event of an overload, notification of the overload is now sent during business hours within one hour of the overload occurring or the following morning.
    • The "IP statistics" page has been improved — columns with statistics on successful requests, blocked requests, and the percentage of load generated have been added. The number of days for which statistics are available has been increased to 7.
    • In the main site protection settings, you can now specify the number of simultaneous requests, after which protection against unwanted requests (I'm Under Attack) should be automatically enabled.
    • In the bot protection, the ability to control access for the mistral.ai bot has been added.
    • Google Merchant Center addresses and networks that Google uses for APIs are added to our whitelist of protection against unwanted requests.
    • Added the ability to automatically install n8n version 2.
    • Added support for Go 1.25.
    • Support for outdated versions of Go has been removed; only LTS versions are now supported for Node.js.
    • Auto-completion for git and npm commands has been added to the console.
    • When resetting settings in the "Linux configuration" section, the maximum versions available are now set for all interpreters.
    • When connecting to a hosting account using the file manager, the correctness of the .bashrc file is now checked, and if it is incorrect, it and the .bash_profile file will be reset to the default values.
  • 🌎 Domains:
    • Increased prices for domains in the .DP.UA, .FUN, .HOST, .ONLINE, .PRESS, .PW, .SITE, .SPACE, .STORE, .TECH, .UNO, .INFO, .IO, .MOBI, and .PRO zones.
  • 📧 WebMail.Online:
    • For new mailboxes, grouping messages into chains is now enabled by default.
    • In the list of messages, the display of recipients has been improved.
    • In messages, the display of quotes consisting of two or more lines has been improved.
  • 📦 Storages:
    • Improved file uploading in the web interface — if an existing file or directory is found, you are now offered the option to overwrite or skip it. directories are now displayed as directories during upload, the progress bar for files is now replaced by the upload percentage, and for directories, the number of files uploaded out of the total number of files is displayed, a button has been added to clear the list of uploaded files and failed uploads.
    • When creating thumbnails using GET parameters, you can now preserve proportions and control the resizing mode.
  • ☁️ Cloud services:
    • In the security settings for all cloud services except Manticore Search, the ability to disable access restrictions without removing IP addresses and hosting accounts from the list has been added.
    • The "Security" tab now displays a warning if access restrictions are enabled and the user’s current IP address is not added to the allowed list.
  • 🐬 MySQL:
    • On the "Security" tab, you can now add not only individual IP addresses to the allowed list, but also hosting accounts.
  • 🐘 PostgreSQL:
    • For PostgreSQL 17+, support for the pg_textsearch extension has been added.
    • Support for the Ukrainian dictionary has been added to databases. The dictionary is enabled by default in new databases; in older databases, it can be enabled manually using queries if necessary.
  • 📖 Wiki:
    • Updated article describing the request statistics page for the site.
    • Updated article describing the IP statistics page for the site.
    • In the article about I'm Under Attack, a description of the limit on simultaneous requests for enabling protection has been added.
    • Updated instruction for installing n8n, added information about updating the installed version.
    • Updated article about connection sources in the file manager.
    • In the article about the storage web interface, a description of GET parameters when accessing via direct links has been added.

Sections