TL;DR — Not all ccTLDs are created equal when governments start knocking. Iceland, Switzerland, and a handful of island nations still let you register a domain without handing over a passport or folding the moment a foreign lawyer sends a fax.
Most registrars call themselves "privacy-focused" until someone with a letterhead shows up. Then the WHOIS gets unredacted, the nameservers get suspended, and your site goes dark while you're mid-sentence explaining why censorship is bad actually.
Free speech domain registration isn't about breaking laws. It's about picking jurisdictions that don't enforce other countries' laws, don't participate in bulk takedown treaties, and understand that "offensive" isn't a legal standard everywhere.
Why jurisdiction matters more than you think
Your registrar's Terms of Service mean nothing if the ccTLD registry operates under a government that considers your blog about encryption "dual-use technology" or your adult content site "harmful to minors" under laws you've never heard of.
The registry controls the zone file. The registrar is just middleware. If the registry suspends your domain, your registrar can't override it—no matter how many Bitcoin you paid them.
Three things determine whether a TLD is actually censorship-resistant:
- Registry jurisdiction: Which government can compel the registry operator to suspend domains
- Legal framework: Whether that government recognizes foreign court orders, DMCA, or "notice-and-takedown" regimes
- Operational practice: Whether the registry actually does suspend domains for content (some jurisdictions have laws they don't enforce)
Iceland (.is): the cypherpunk standard
Registry: ISNIC (Reykjavik)
Country: Iceland
Iceland has actual case law protecting hosting providers from foreign takedown demands. When the U.S. tried to seize WikiLeaks materials hosted in Iceland, the Icelandic government told them to file paperwork under Icelandic law or pound sand.
ISNIC doesn't respond to foreign legal requests unless they go through proper treaty channels—which requires showing actual Icelandic law was broken, not just "someone in California is upset."
Common uses:
- Investigative journalism platforms
- Whistleblower submission systems
- Privacy tools and VPN landing pages
- Political dissident blogs targeting authoritarian regimes
- Any project where "hosted in Iceland" adds jurisdictional armor
The trade-off: .is domains require a local presence for registration (we handle that). ISNIC is also slow—changes take 24–48 hours instead of instant. But slow registries are often the most resilient ones.
Switzerland (.ch) and Liechtenstein (.li): banking-grade privacy
Registry: SWITCH (Zurich) / SWITCH (same operator)
Country: Switzerland / Liechtenstein
Swiss law doesn't recognize the DMCA. SWITCH doesn't participate in domain seizure programs. Foreign law enforcement has to prove a crime under Swiss law—which excludes most copyright trolling, defamation tourism, and "harmful content" moral panics.
.ch and .li are technically separate ccTLDs but operated by the same registry under Swiss jurisdiction. Liechtenstein's legal framework is nearly identical for internet purposes.
Common uses:
- Cryptocurrency exchanges and DeFi platforms
- Offshore corporate websites
- Privacy-focused SaaS tools
- Adult content (legal under Swiss law, no "obscenity" carve-outs)
- Controversial research and free-speech communities
The trade-off: SWITCH requires accurate contact info (we handle anonymization via our privacy layer). They will forward legal complaints to the registrant—but forwarding a complaint isn't the same as acting on it. You get to respond or ignore it.
Russia (.ru): the other kind of offshore
Registry: Coordination Center for TLD RU (Moscow)
Country: Russia
.ru is offshore from Western jurisdiction. If you're worried about U.S. or EU takedown demands, Russian ccTLDs (.ru and .su) are beyond their reach. The registry ignores DMCA, GDPR takedown requests, and basically all foreign legal process.
Common uses:
- Mirror sites for content banned in the West
- Cryptocurrency services avoiding U.S. sanctions
- Darknet market informational pages (we don't ask)
- Political content critical of Western governments
- Reverse-offshore for Russian speakers operating outside Russia
The trade-off: You're now under Russian jurisdiction. If the Kremlin doesn't like you, the domain goes dark. .ru is useful if your threat model is Western censorship, not Russian. Also, payment processors and ad networks often won't touch .ru domains due to sanctions—crypto only.
Tonga (.to): the island loophole
Registry: Tonic (Tonga)
Country: Kingdom of Tonga
Tonga is a Polynesian island nation with a population under 100,000 and a ccTLD operated semi-commercially. They don't have resources to process foreign legal requests even if they wanted to. No DMCA enforcement. No EU copyright directive. No mutual legal assistance treaties with anyone who matters.
.to became famous in the early 2000s for URL shorteners and file-sharing sites that survived longer than their .com equivalents.
Common uses:
- Link shorteners and redirect services
- Torrent trackers and file-sharing indexes
- Free-speech forums on controversial topics
- Projects that just want to be left alone
The trade-off: Tonga's infrastructure is inconsistent. The registry has had outages. DNS propagation can be slower than Tier-1 ccTLDs. But if you're optimizing for "nobody will bother us," .to is hard to beat on price and neglect.
Seychelles entities: jurisdiction shopping for registrants
Seychelles doesn't operate a ccTLD (.sc exists but is expensive and niche). The play is registering your domain under a Seychelles company, not using a Seychelles TLD.
Why it matters: WHOIS privacy only hides contact details. The registrant name is often still visible. If that registrant is "Seychelles IBC No. 12345," good luck serving papers.
Seychelles IBCs:
- No public shareholder registry
- No requirement to disclose beneficial owners
- Dirt cheap (under $1,000/year all-in)
- Commonly used by offshore crypto exchanges, adult sites, and grey-market operators
We don't provide Seychelles company formation, but if you already have one, we'll register domains under it with any ccTLD that doesn't explicitly ban IBCs.
Comparison table
| TLD | Jurisdiction | DMCA? | EU Copyright Directive? | Foreign court orders? | Best for |
|---|---|---|---|---|---|
.is | Iceland | No | No | Must go through treaty | Journalism, whistleblowing, political speech |
.ch | Switzerland | No | No | Must prove Swiss crime | Crypto, privacy tools, adult content |
.li | Liechtenstein (Swiss law) | No | No | Same as .ch | Same as .ch, plus prestige |
.ru | Russia | No | No | Only Russian courts | Reverse-offshore, anti-Western-censorship |
.to | Tonga | No | No | Ignored even if valid | Maximum neglect, file-sharing, link shorteners |
Trade-offs you need to understand
No jurisdiction is absolute.
Iceland won't protect you if you're hosting CSAM. Switzerland will freeze assets if Interpol shows up with a red notice. Russia will delete your domain if you criticize Putin. Tonga might just forget you exist until the registry goes bankrupt.
"Bulletproof" is marketing.
We don't use that term because it implies immunity. What we offer is jurisdictional arbitrage—picking registries that don't enforce the laws you're worried about. That's not the same as being above all law.
Your content still needs hosting.
Domain registration is one piece. If your hosting provider folds under a foreign request, the domain is irrelevant. Offshore domains pair with offshore hosting, Tor hidden services, or IPFS mirrors.
Payment matters as much as jurisdiction.
If you paid with a credit card tied to your real name, the registrar's privacy policy is theater. We only take crypto. No KYC. No records linking payment to domain. That's the point.
Use case fit
- Journalist covering authoritarian regimes: Iceland
.isor Switzerland.ch - Cryptocurrency exchange outside US/EU: Switzerland
.chor Russia.ru(depending on which bloc you're avoiding) - Adult content platform: Switzerland
.chor Seychelles company + any neutral TLD - Political dissident blog: Iceland
.is(if Western) or Russia.ru(if anti-Western) - Torrent tracker / file index: Tonga
.toor Russia.ru - Privacy tool with controversial reputation: Iceland
.isor Liechtenstein.li
DNS and EPP considerations
Most offshore TLDs support standard DNS records. DNSSEC availability varies:
.chand.li: Full DNSSEC support.is: Supported but slower updates.ru: Supported.to: No DNSSEC (infrastructure limitations)
EPP transfer codes follow standard format: 16-character auth codes like aB3$xK9!mNp2@sL7. No special hoops for transferring between offshore registrars—assuming the losing registrar doesn't ghost you.
If you're running your own nameservers, expect 24–48 hour propagation delays for .is and .to. Swiss TLDs update within hours.
Bunkerdomains advantage
We register all these TLDs with:
- Free WHOIS privacy (where applicable—some ccTLDs don't expose WHOIS at all)
- Crypto-only payment (Monero preferred, Bitcoin accepted)
- No KYC, no ID, no phone number
- No replies to foreign DMCA or takedown requests (we forward them if they're addressed to the registrant, but we don't act on them)
- No logs linking payment to domain (we're not stupid)
We don't ask what you're hosting. We don't care. If the registry suspends your domain, we'll tell you why (if they tell us). We won't lecture you about acceptable use.
Conclusion
Free speech domain registration is about picking jurisdictions that don't rubber-stamp foreign court orders and registrars that don't panic when someone tweets at them. Iceland, Switzerland, and a few island nations still understand that "controversial" and "illegal" aren't synonyms—and that not every government's legal threats deserve a response.