{"rid":"compute/cloudcone","card":{"rid":"compute/cloudcone","eid":"cloudcone","topic":"compute","slug":"cloudcone","provider":"CloudCone","url":"https://app.cloudcone.com/","domain":"cloudcone.com","category":"cloud VM","tier":null,"verdict":"qualifies-with-caveat","vorder":1,"grp":"usable","confidence":"reported","binding":"none","identity_kind":"institution","identity_basis":"stated","needs_card":0,"needs_phone":0,"needs_id":0,"needs_institution":1,"country":null,"crypto":null,"interfaces":null,"egress_metered":null,"per_object_bytes":null,"retention_days":null,"verified_at":"2026-10-22T00:00:00.000Z","verified_basis":"live","checked_on":"2026-10-22","stale_on":"2026-11-05","n_evidence":5,"usd_month":null,"usd_per_tb_month":null,"summary":"Still trading, but the reason to record it is a data-loss incident rather than a price: several Los Angeles host nodes were compromised through a Virtualizor...","duplicate_of":null,"n_unknown":9},"record":{"topic":"compute","slug":"cloudcone","provider":"CloudCone","url":"https://app.cloudcone.com/","category":"cloud VM","free_tier":{"stated":"Still trading, but the reason to record it is a data-loss incident rather than a price: several Los Angeles host nodes were compromised through a Virtualizor vulnerability, the boot sectors of affected guest disks were overwritten with a ransom note, and the vendor states that the data on those disks cannot be recovered. The vendor's own wording, reposted in the forum: 攻击者损坏了与VPS相关的磁盘，磁盘上的数据无法恢复.","unit":"GiB","metered_on":"wall-clock","source_url":"https://app.cloudcone.com/","read_on":"2026-10-22","notes":"none"},"per_object_cap":{"stated":"not applicable","bytes":null,"source_url":"https://app.cloudcone.com/","notes":null},"retention":{"stated":"not applicable","days":null,"source_url":"https://app.cloudcone.com/","notes":null},"egress":{"terms":"not stated","metered":false,"free_allowance":null,"price_per_tb":null,"source_url":"https://app.cloudcone.com/"},"interface":["unknown"],"interface_detail":"inferred from the tooling the provider documents; not probed","tooling":"not stated","chaining":"This is the reason any free or cheap host needs a second copy elsewhere: the composition that survives an incident is two providers plus an object store, not one provider plus its own snapshots.","limits":[],"limits_note":"What fails is durability: a hypervisor-level compromise destroyed guest disks across several nodes and the vendor confirmed non-recovery, so a snapshot kept on the same provider is not a backup.","binding":"none","binding_note":"What fails is durability: a hypervisor-level compromise destroyed guest disks across several nodes and the vendor confirmed non-recovery, so a snapshot kept on the same provider is not a backup.","identity_cost":{"kind":"institution","detail":"The signup route was not read the record is about the incident, not the account door.","country":null},"reliability_note":"no reliability event recorded","confidence":"reported","evidence":[{"url":"https://www.nodeseek.com/post-604538-1","date":"2026-10-22","proved":"the vendor letter is reposted: 我们使用的平台（Virtualizor）存在一个漏洞，攻击者获得了...节点的访问权限...磁盘上的数据无法恢复, quoted from the snippet"},{"url":"https://www.nodeseek.com/post-601737-1","date":"2026-10-22","proved":"a write-up states the boot sector of affected virtual machines was overwritten with a ransom note and that recovery proceeded by inspecting raw block devices and rebuilding partition tables"},{"url":"https://www.nodeseek.com/post-602525-1","date":"2026-10-22","proved":"a summary states CloudCone subsequently confirmed 数据已遭不可逆损毁 (the data was irreversibly destroyed) and that the ransom demand recovered nothing, quoted"},{"url":"https://cloudcone.com/vps/","date":"2026-10-22","proved":"SSD VPS 1 at '$2.33 /MO' with 'Billed $28 per year', 2 vCPU, 1 GB dedicated RAM, 30 GB SSD, 4 TB/Mo at 1 Gb/s, quoted from the plan card"},{"url":"https://cloudcone.com/vps/","date":"2026-10-22","proved":"SSD VPS 2 at USD 46 per year with 4 vCPU, 2 GB, 60 GB SSD, 7 TB/Mo; SSD VPS 3 at USD 69 per year with 6 vCPU, 3 GB, 90 GB, 8.5 TB"}],"verdict":"qualifies-with-caveat","verified_at":"2026-10-22T00:00:00.000Z","notes":"The compute topic has no CloudCone record; the only existing record is dossier/storage/cloudcone-storage-vps.json, which covers the storage line at daniao.org and says nothing about the Los Angeles VPS product or this incident, so this entry adds the compute side rather than repeating it. The threads read do not carry a post date in the extracted snippet, so the incident date is not stated here rather than guessed; the read date is 2026-10-22 and the thread identifiers run from 600738 to 606125. Recorded as a technical reliability note, with no view on the terms. The one recorded is the better-evidenced.","extras":{"wave2":{"class":"enforcement","free_tier_kind":"none","shape":null},"refund":"none: prepaid is non-refundable including annual"}},"claims":[{"path":"$.free_tier.stated","kind":"free-quota","num":null,"unit":null,"per":null,"currency":null,"usd":null,"fx_date":null,"parse":"unparsed"}],"unknown":[["$.egress.metered","egress-unknown"],["$.egress.terms","not-stated"],["$.interface","interface-unknown"],["$.per_object_cap.notes","process"],["$.per_object_cap.stated","not-applicable"],["$.reliability_note","none-observed"],["$.retention.notes","process"],["$.retention.stated","not-applicable"],["$.tooling","not-stated"]],"history":[],"drift":[{"kind":"duplicate-disagrees","subject":"compute/cloudcone","other":"compute/cloudcone-black-friday","field":"verdict","a":"qualifies-with-caveat","b":"dead","detail":null},{"kind":"duplicate-disagrees","subject":"compute/cloudcone","other":"compute/cloudcone-black-friday","field":"identity_kind","a":"institution","b":"card","detail":null},{"kind":"duplicate-disagrees","subject":"compute/cloudcone","other":"compute/cloudcone-ssd-vps-1","field":"verdict","a":"qualifies-with-caveat","b":"qualifies","detail":null},{"kind":"duplicate-disagrees","subject":"compute/cloudcone","other":"compute/cloudcone-ssd-vps-1","field":"identity_kind","a":"institution","b":"card","detail":null},{"kind":"duplicate-disagrees","subject":"compute/cloudcone","other":"compute/cloudcone-ssd-vps-2","field":"verdict","a":"qualifies-with-caveat","b":"qualifies","detail":null},{"kind":"duplicate-disagrees","subject":"compute/cloudcone","other":"compute/cloudcone-ssd-vps-2","field":"identity_kind","a":"institution","b":"card","detail":null},{"kind":"duplicate-disagrees","subject":"compute/cloudcone","other":"compute/cloudcone-windows","field":"verdict","a":"qualifies-with-caveat","b":"paid-only","detail":null},{"kind":"duplicate-disagrees","subject":"compute/cloudcone","other":"compute/cloudcone-windows","field":"identity_kind","a":"institution","b":"card","detail":null}]}