A consumer warning based on my own experience, plus publicly checkable records.
Service operated by RARE MOOD AGENCY SRL.
Last updated: Sep 30, 2026If you're considering this provider, read the "Before you buy" checklist at the bottom first. Where I make a factual claim, I say how you can verify it yourself.
I signed up for a virtual machine advertised at €32. On Sep 28, 2026, €97.50 was taken from my payment method — roughly 3× the advertised price — with no prior notice, no grace period, and no warning email I ever saw. When I requested a refund due to no emails or warnings, I was denied.
Advertised price: €32 · Amount charged: €97.50 · Notice given beforehand: none
Charging an amount different from the advertised price without notice isn't a billing slip — it's the kind of practice consumer-protection law exists to catch. In the EU, the price you agreed to is the price you owe, and terms that let a business unilaterally raise a charge mid-term can be unfair contract terms.
And because their emails go to spam (section 2), anyone relying on email notices is set up to miss them and get charged again.
What I did: documented the charge and the advertised price, disputed it in writing, and escalated through my payment provider. You can do the same — the escalation path is listed in the checklist.
Emails from RareCloud's billing system land in spam. The cause is on their side: misconfigured SPF records and sending IPs that appear on public blocklists. When your invoice reminders are sent from infrastructure that mailbox providers refuse to trust, "we emailed you" becomes an excuse rather than a notice.
This is checkable in seconds, and you don't have to take my word for it:
dig +short TXT rarecloud.io — look at the v=spf1 record: a missing ~all/-all mechanism, more than one SPF record, or a chain of lookups that exceeds the 10-lookup limit all break authentication.This is the section I'd want to read if I were thinking about trusting them with data. When I looked at RareCloud's public DNS footprint, I found their production servers resolving SSH services exposed to the internet — on hosts where that has no business being publicly reachable. This isn't an accusation or a rumour: it is visible to anyone with a browser and a domain name, before you ever hand them a credit card.
Go to DNSDumpster.com and search rarecloud.io. You'll see the subdomains and hosts they publish, and the services those hosts expose to the world. Do the same for any provider before you buy — it's free, it's passive, and it tells you more about their operational competence than any marketing page will.
If a hosting company's own perimeter looks like this, that's the free sample of how they'd look after your VM.
Why this matters for your data: a provider's own machines are the ones it controls most directly. If those are left exposed, the reasonable inference isn't that customer systems are handled more carefully — it's that they aren't. A company that can't lock down its own production hosts is not a company to trust with your data, your credentials, or your customers' data.
If you're a current customer: don't wait for them to fix it. Move anything sensitive off, rotate every credential you've used there, disable password authentication on your own instances, and keep off-host backups.
Published as a public observation for due-diligence purposes. Don't attempt to access systems that aren't yours — a warning page only stays useful if it stays on the right side of that line.
My warning is about the service and its operating entity: RareCloud.io, operated by RARE MOOD AGENCY SRL.
I've deliberately kept this page on the company and my documented experience rather than turning it into a personal campaign against any individual — that's what keeps a page like this credible, factual and online.