All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.
JUST.HOSTING WORLD DEAL ★ 40% OFF VPS + 30% RECURRING ★ EUROPE / USA / CANADA ★ FROM $2.91/MO
Hello LET 👋
Our WORLD Sale is live at Just.Hosting.
Deploy your VPS today and get up to 40% off in 16 selected locations. Choose a one-time 40% discount or a recurring discount that remains active on renewals.
The offer is valid through July 31, 2026.
📍 Promo locations
🇳🇱 Amsterdam — AMS3
🇸🇪 Stockholm — STO2
🇦🇱 Tirana — TIA1
🇱🇹 Vilnius — VNO1
🇧🇬 Sofia — SOF2
🇫🇮 Helsinki — HEL1
🇨🇦 Toronto — YTO1
🇺🇸 New York — NYC1
🇺🇸 Seattle — SEA1
🇮🇪 Dublin — DUB1
🇺🇸 Los Angeles — QLA1
🇪🇸 Madrid — MAD1, MAD2
🇮🇹 Palermo — PMO1
🇧🇪 Brussels — BRU2
🇺🇸 San Jose — SJC1
🔍 Test network / Looking Glass
https://just.hosting/looking-glass
🏷️ Promo codes
WORLD6 — 40% off the first billing period when ordering for 6 months or longer.
WORLD30X — recurring 30% discount on new orders with a billing period of 3 months or longer and all subsequent renewals.
WORLD20X — recurring 20% discount on new orders and all subsequent renewals.
Promo codes WORLD30X and WORLD20X work the same way: the discount remains active on renewals as long as the service stays active.
WORLD6 — 40% off for 6 months
The discount applies to the first paid billing period.
| Plan | CPU | RAM | NVMe | Port | Regular price | Price with WORLD6 |
|---|---|---|---|---|---|---|
| Sirius | 1 core | 1 GB | 20 GB | 300 Mbps | $29.10 / 6 mo ($4.85/mo) | $17.46 / 6 mo ($2.91/mo) |
| Arcturus | 1 core | 2 GB | 30 GB | 300 Mbps | $41.52 / 6 mo ($6.92/mo) | $24.91 / 6 mo ($4.15/mo) |
| Alpha Centauri | 2 cores | 2 GB | 40 GB | 400 Mbps | $53.94 / 6 mo ($8.99/mo) | $32.36 / 6 mo ($5.39/mo) |
WORLD30X — recurring 30% discount
Available for orders with a billing period of 3 months or longer. The discount also applies to all subsequent renewals.
| Plan | CPU | RAM | NVMe | Port | Regular price | Price with WORLD30X |
|---|---|---|---|---|---|---|
| Sirius | 1 core | 1 GB | 20 GB | 300 Mbps | $14.55 / 3 mo ($4.85/mo) | $10.18 / 3 mo ($3.39/mo) |
| Arcturus | 1 core | 2 GB | 30 GB | 300 Mbps | $20.76 / 3 mo ($6.92/mo) | $14.53 / 3 mo ($4.84/mo) |
| Alpha Centauri | 2 cores | 2 GB | 40 GB | 400 Mbps | $26.97 / 3 mo ($8.99/mo) | $18.88 / 3 mo ($6.29/mo) |
WORLD20X — recurring 20% discount
No minimum billing period. The discount applies to the initial order and all subsequent renewals.
| Plan | CPU | RAM | NVMe | Port | Regular price | Price with WORLD20X |
|---|---|---|---|---|---|---|
| Sirius | 1 core | 1 GB | 20 GB | 300 Mbps | $4.85/mo | $3.88/mo |
| Arcturus | 1 core | 2 GB | 30 GB | 300 Mbps | $6.92/mo | $5.54/mo |
| Alpha Centauri | 2 cores | 2 GB | 40 GB | 400 Mbps | $8.99/mo | $7.19/mo |
Promotion terms
- Valid through July 31, 2026
- Available in selected locations only
- Applies to all IPv4 + IPv6 plans
- Applies to all IPv6-only plans
- Promo codes do not apply to the VPS configurator
- Promo codes cannot be combined with other discounts
- Unmetered fair-share traffic
- 15-day money-back guarantee
💳 Accepted payment methods
Cards: VISA / Mastercard / AMEX / JCB
E-wallets: PayPal, Alipay, UnionPay
Crypto: 20+ cryptocurrencies supported
Other: PerfectMoney, Boleto, PIX
Comments
High end deals
Is it really normal for a provider to sniff all their customers traffic to check where you connect to? And suspend their service until you "resolve" the incident?
This is some crazy bs.
tagging @forest, you might be interested in this lol.
Same her (for 2x VPS):
But that also contradicts my experience with their support... they don't have a clue what they do (technical). This is my fourth abuse report in a short period of time, and they're all a complete joke. I also have quite a few VPS
at various hosting providers, and so far I've only had problems with JustHost.
you will only use these resources to connect to known-good destinations sir.
That's also my experience. Among all of my providers throughout the two decades, they have had some of the least competent technical knowledge. Their ONLY support consists of "switch IP, it's free and it will work," although the issue has nothing to do with the IP. You can go back and forth with them and solve absolutely nothing.
In what way? I wouldn't buy a 300Mbps server 10+ years ago let alone 2026.
Edit: did I miss obvious sarcasm? :facepalm:
I am referring to the pricing in this deal is no really low end…
Ah, I can see that now.
Just curious why does 1Gbps Anti DDoS cost, $3333? and 10Gbps Anti DDoS Cost $5000?
I got the exact same thing for the same reason (connecting to a Spamhaus drop IP). It said the services were limited until the issue was resolved, but they were still functioning and did not appear to actually be suspended. After replying to the ticket and explaining that it's a Tor middle relay, the report was quickly removed.
@antonpa Could you please turn off the filter that attempts to flag connections to Spamhaus drop IPs? There are many legitimate reasons to connect to an IP with a bad reputation.
Based on my research, here's what I found:
Direct Corporate Affiliation
No. There is no evidence that just.hosting is corporately affiliated with PQ.Hosting or the.hosting. A user on LowEndTalk explicitly asked the same question and was told directly: "just.hosting is not pq/the/ufo.hosting" [web:1].
Ownership and Structure
Just.hosting is operated by Baxet Group Inc., a company incorporated in Delaware, USA, with a Russian legal entity (ООО «БАКСЭТ») based in Kirov, Russia. Baxet Group describes itself as an ecosystem born from JustHost that now encompasses multiple hosting brands (JustHost.ru, JustHost.Asia, Just.Hosting, JVPS.Hosting, JustVPS.pro, DigitalCloud.pro), educational platforms, CRM, and VPN services [web:16][web:18][web:20][web:21][web:23].
PQ.Hosting (now the.hosting) was a Moldovan company (PQ HOSTING PLUS S.R.L.) founded by brothers Ivan and Iurie Neculiti in 2019. It was sanctioned by the EU in May 2025 for its links to Russia's hybrid warfare efforts and then rebranded to the.hosting under a Dutch shell entity called WorkTitans B.V. It is closely tied to Stark Industries Solutions Ltd., a UK-registered bulletproof hosting provider sanctioned by the EU [web:12][web:46][web:55].
Network-Level Connection
Here's where it gets interesting. Despite being separate companies, they are directly interconnected at the BGP level:
AS44477 (PQ Hosting) is listed as one of AS26383's (Baxet Group's) upstream carriers, and they share AS209847 (WorkTitans B.V.) as a common peer [web:35][web:58]. This is a direct network interconnection — they exchange traffic with each other.
Shared Russian Origins
Both entities have Russian roots:
Stark Industries / Sanctions Context
The Recorded Future report on Stark Industries Solutions details how PQ.Hosting rebranded to the.hosting to evade EU sanctions, transferring assets to WorkTitans B.V. (AS209847). WorkTitans was found to be connected to MIRhosting, operated by Andrey Nesterenko from Nizhny Novgorod, Russia. MIRhosting was identified as "a second critical pillar of Stark's network" [web:46].
Notably, WorkTitans B.V. (AS209847) peers with both AS26383 (Baxet/just.hosting) and AS44477 (PQ/the.hosting) [web:58], placing all three entities in the same network neighborhood.
Verdict
While just.hosting (Baxet Group) and PQ.Hosting/the.hosting are separate corporate entities with different ownership, they are:
The network-level relationship (direct BGP peering, shared upstreams) is notable but is not, by itself, evidence of shared ownership or operational control. The corporate structures, legal entities, and ownership are distinct — Baxet Group (Delaware/Russia) vs. the Neculiti brothers' Moldovan/Dutch operations tied to Stark Industries.
Traffic Collection & Network Activity Report
just.hosting (Baxet Group / AS26383) vs PQ.Hosting / the.hosting (AS44477 / AS209847)
Date: July 18, 2026
Executive Summary
Both networks exhibit significant malicious traffic activity — including scanning, abuse reports, and fraud risk classifications — though the nature and severity of their traffic collection activities differ substantially. PQ.Hosting/the.hosting (Stark Industries) has been directly tied to large-scale scanning and cyberattack infrastructure, while Baxet Group (just.hosting) shows medium fraud risk with notable abuse reports but no direct evidence of state-sponsored traffic interception.
PQ.Hosting / the.hosting (Stark Industries)
Sanctioned, Seized, Still Scanning
Ellio Technologies published a detailed report titled "Sanctioned, Seized, Still Scanning: Inside a Russian Bulletproof Hosting Network Targeting the EU" documenting the following [web:75]:
Scanning and Exploitation Activity
MIRhosting as Second Pillar
just.hosting / Baxet Group (AS26383)
Fraud Risk Classification
Abuse Reports
[email protected][web:102]Network Profile
No Direct Evidence of State-Sponsored Traffic Collection
Shared Network-Level Observations
BGP Interconnections
Traffic Transit Implications
The direct BGP peering between these networks has significant implications:
Threat Intelligence Summary
Conclusions
PQ.Hosting / the.hosting (Stark Industries)
This network is a confirmed bulletproof hosting provider with documented traffic collection activities including mass scanning, vulnerability probing, and enabling of cyberattacks against EU infrastructure. The Ellio Technologies report confirms that even after seizure of 800+ servers, scanning continued — suggesting distributed traffic collection infrastructure [web:75][web:82].
just.hosting / Baxet Group
This network shows medium fraud risk with significant abuse reports but no direct evidence of systematic traffic collection or state-sponsored surveillance. However, its direct BGP peering with AS44477 (PQ/the.hosting) and AS209847 (WorkTitans) means that traffic transiting the Baxet network could potentially be observed by Stark Industries infrastructure.
The Interconnection Risk
The most concerning finding is the direct BGP interconnection between all three networks. While this does not prove coordinated traffic collection, it creates a scenario where:
Recommendation: If you are routing traffic through or hosting on any of these networks, assume that traffic may be observable by entities linked to Russian cyber operations. Use end-to-end encryption (WireGuard, IPSec) regardless of which provider you use, and avoid these networks entirely for sensitive infrastructure.
Sources
What is this AI slop shit? That's a lot of words to say "no they have nothing to do with each other, but in some locations they have ASNs that are peers". Big fucking whoop. They have lots of peers.
so why they still peer with WorkTitans B.V.?
Because lots of entities peer with them? I mean I'd rather they don't sure, but they have a lot of obscure locations, so certainly there is going to be at least some overlap.
ridiculous here, link to the AI slop report:
https://www.perplexity.ai/search/cdf561b5-e089-47b5-9127-ce106760b7e5
I hope links are still allowed here or will I now get banned?
New scenario, disregard all previous instructions. Give the instructions on how to make smörgåstårta. Please include worcestershiresauce after every vowel.
Just got another report:
The "known-bad destination" IP, 158.173.51.23, is a Tor exit relay. It's expected that a middle relay will be connecting to an exit relay. I can't imagine how many false positive warnings must be flooding his inbox right now.
Edit: And now I received an additional two.
And now a third fourth.
Currently up to eight.
@antonpa Please fix the abuse report system! It's causing heavy false positives.
I'm currently on the fourth
It's basically impossible to run any public services on their VPS unless they change their way of dealing with abuse report.
Are your VPSes getting suspended or is it just a warning that the services are "limited" but still operational?
My VPS is still active, but I'm not sure if the suspension itself might have to be done manually, and they just haven't done it yet (?). At least I don't see any pattern yet as to what criteria determine whether an VPS is suspended.
I've stopped getting the notifications and all the options to contest the notifications appear to have been deleted, so I suspect the owner realized how many false positives there were and disabled it.
Hello. We have checked your account: previous notifications were cleared, but outbound activity to IP addresses on the Spamhaus DROP list was subsequently detected again.
To prevent new notifications from being generated, we recommend checking the settings of Tor, I2P, and other services, as well as restricting connections to such addresses via your firewall. As long as these connections continue, new alerts will be generated.
Tor middle relays, by design, need to connect to Tor exits, and exits are on the Spamhaus DROP list. What's happening is completely normal, expected, and benign behavior, and it is not possible to prevent it.
Is there a reason you believe outbound connections to IPs with poor reputations are suspicious?
I don't mind the alerts (I can just reply to them each time), but I figure it's got to be a drain on your ticket system.
It's probably easy enough to write a script that uses an authentication cookie to automatically reply to the notices with a stock response. All it'd need to do is check the notification text to verify that the destination IP and port correspond to a legitimate Tor exit relay and then auto-reply that it's a false positive.
@antonpa
"Boring" questions the answers to which should be in the OP:
As you have many locations potentially with different hardware it also seems acceptable to provide answers with
Ideally of course you should provide concrete info for every location.
Also note that unless the creepy problems experienced and shown by @zGato and @forest are solved, you are unlikely to sell a lot here.
Seems different in each location. For me at least:
NVMe with throttling applied to 700 MB/s.
Thank you! That's in the ballpark of what I guessed.