Why xCloud Suspends a Site or Server: Billing and Abuse Suspensions Explained

xCloud suspends a site, a server or a whole team for one of two reasons: an unpaid invoice (a billing suspension) or an abuse report against something you host (an abuse suspension). The two are handled separately, so the fix depends on which one you have. This page explains both, what each one takes offline, and how to get service back.

If you can see a suspension in your dashboard, the site or server shows a banner reading This site has been suspended. or This server has been suspended., followed by the reason when one was recorded.

The two reasons and the three scopes

A suspension has an owner (billing or abuse) and a scope (site, server or team). The owner decides what lifts it; the scope decides what goes offline.

Scope	What goes offline	What lifts it
Site	That one site is marked suspended in your dashboard. If it runs on an xCloud demo or staging domain, that domain stops resolving.	Billing: paying the debt. Abuse: a person on the xCloud team, after reviewing your fix.
Server	The server and every site on it. Where xCloud controls the server at its provider, the server is powered off.	Billing: support lifts it once every open invoice is paid. Abuse: a person on the xCloud team, after review.
Team	Every server the team owns, and the sites on them.	The same owner that imposed it: settled invoices for billing, a review for abuse.

Settling a debt never lifts an abuse suspension. If you have both, you have to resolve both.

Abuse suspensions

An abuse suspension means someone reported content on your site or server as harmful, and xCloud has to act on it.

Where abuse reports come from

Most reports reach xCloud through Cloudflare abuse reports (phishing and trademark complaints) and through the trust and safety teams of server providers. They cover phishing pages, trademark misuse and fraud, malware, and outbound attacks coming from a server.

What support sends you

When a report arrives, xCloud support emails the account owner. The email includes:

• the reported domain
• the report ID
• the reported URL

Support asks you to investigate, remove the content and secure the site, usually within 24 hours.

Site suspension or server suspension

• Site: clear phishing can get the site suspended at once, as a precaution, before you reply.
• Server: repeated reports can get the whole server suspended, which takes every site on it offline.

If the suspended site uses an xCloud demo or staging domain, xCloud removes that domain’s DNS records, so the reported content stops resolving. Your own domains’ DNS is never changed. The records come back when the suspension is lifted.

Step 1: Find and remove the reported content

Open the reported URL from the support email and find what serves it: a page, an uploaded file, or a folder of files you didn’t create. Remove it. SFTP and the web terminal both work for this.

You should end with the reported URL no longer serving that content.

Step 2: Check the site for compromise

Phishing pages and malware are often planted through a hacked plugin or a stolen password. If you didn’t put the content there yourself, assume the site was compromised. Run the vulnerability checker and look for files, admin users or scheduled tasks you don’t recognise.

Step 3: Update WordPress, plugins and themes

Update WordPress core and every plugin and theme, and delete the ones you don’t use. An outdated plugin is the most common way content gets planted again after you remove it.

Step 4: Change passwords

Change the WordPress admin passwords, the database password, and any SFTP or SSH credentials for the site. Turn on login protection such as BetterShield so the old way in is closed.

Step 5: Reply to the support ticket

Reply to the abuse email or ticket with what you did: what you removed, how it got there if you know, and what you changed to stop it coming back. A person on the xCloud team reviews your reply and lifts the suspension.

Disputing a false report

If the report is wrong, reply to the same ticket with evidence: what the reported URL actually serves, why the content is legitimate, and anything that shows you own the brand or have permission to use it. A person reviews it the same way.

If you ignore the report

The suspension stays in place. An ignored report can lead to the site and its data being removed permanently. The server provider may also power down or remove its own server, which is outside xCloud’s control.

Billing suspensions

A billing suspension follows an unpaid invoice. Cards are charged on the 1st of the month, and invoices should be paid by the 5th. While your account is past due, the dashboard is locked to Billing, and a server can be suspended.

Paying clears the account lock within minutes. A suspended server comes back after support lifts it, once every open invoice is paid; xCloud then restarts the server and checks its connection. The full process is in Paid an Overdue Invoice? How Reactivation Works.

How to avoid both

• Keep a valid card on file and pay invoices before the 5th. See How Billing Works in xCloud.
• Keep WordPress, plugins and themes updated, and remove what you don’t use.
• Use strong, unique passwords and login protection on every site.
• Don’t host content that uses another company’s brand without permission, even as a demo.
• Watch the account owner’s email inbox, so an abuse report never sits unanswered.

The rules for what you can host are in the xCloud Terms and Conditions and the security overview.

If you run into any issues with a suspension, feel free to reach out to our support team.

Frequently asked questions

I paid my overdue invoice. Will that lift an abuse suspension too?

No. Billing and abuse suspensions are separate. Settling a debt only lifts a billing suspension. An abuse suspension lifts only after the xCloud team reviews your reply to the abuse ticket and removes it.

How long do I have to respond to an abuse report?

Support usually asks you to investigate and remove the reported content within 24 hours. Clear phishing can get the site suspended straight away as a precaution, so reply as soon as you see the email.

What if the abuse report is wrong?

Reply to the support ticket with evidence: what the reported URL actually serves, why the content is legitimate, and anything that shows you own the brand or have permission to use it. A person reviews your reply.

What happens if I ignore an abuse report?

The site, or the whole server if reports repeat, stays suspended. An ignored report can lead to the site and its data being removed permanently, and the server provider may also power down or remove its own server.