foundational

DMCA Ignored Registrars Explained — What It Means and Why It Matters

Why a non-US registrar isn't bound by the DMCA — and the difference between 'ignoring' a notice and a notice not applying in the first place.

TL;DR DMCA only applies to US entities and those who voluntarily opt in. Most offshore registrars don't ignore DMCA—they simply operate where it has no jurisdiction.

Most people searching for "DMCA ignored registrar" don't actually want what they think they want. They want a registrar that won't yank domains over copyright complaints filed by lawyers who watched one too many procedural dramas. That exists. But the mechanics are simpler—and stranger—than the phrase suggests.

DMCA Exists to Protect Platforms, Not You

The Digital Millennium Copyright Act is a 1998 US law. Section 512 creates "safe harbor" for online service providers: follow the takedown process, and you're shielded from liability when users post infringing content.

The law never mentions domain registrars. But ICANN—the nonprofit that coordinates DNS—added registrars to the list of entities "encouraged" to process DMCA complaints. ICANN is US-based. Most accredited registrars play along to stay in good standing, even when they operate outside US borders.

Safe harbor works like this:

  1. Copyright holder files a DMCA notice
  2. Registrar forwards it to the domain owner
  3. Domain owner can file a counter-notice
  4. If no counter-notice, registrar may suspend the domain
  5. If counter-notice is filed, complainant must sue in court

Notice the word "may." DMCA doesn't mandate suspension. It only provides liability protection if you follow the process. A registrar outside US jurisdiction doesn't need that protection—they're not liable under US law to begin with.

Offshore Registrars Aren't Ignoring Anything

Iceland doesn't enforce DMCA. Neither does Malaysia, Seychelles, or Nevis. Saying a registrar "ignores" DMCA implies they're breaking a rule. They're not. They operate where the rule doesn't exist.

Three categories exist:

TypeJurisdictionDMCA ResponseExample Use Case
US registrarUnited StatesFull compliance, forwards noticesStandard business sites
ICANN-obedient offshoreVariousVoluntary compliance to stay accreditedE-commerce avoiding US hosting
Non-ICANN or defiantOffshore, often non-WesternNo response or selective reviewWhistleblowing, adult content, controversy

Most "bulletproof" registrars fall into category three. They may be ICANN-accredited but interpret policies narrowly. Or they operate under ccTLD registries with independent policies.

Why Registrars Pretend DMCA Applies Everywhere

ICANN runs on consensus and compliance theater. US-based staff, US legal advisors, US corporate culture. The organization suggests DMCA-style processes globally, even though they have no enforcement mechanism outside contracted registrars.

Many offshore registrars adopt DMCA procedures anyway. Reasons:

  • ICANN accreditation requires it (for gTLDs like .com, .net, .org)
  • Payment processors demand it (Visa and Mastercard enforce US policy globally)
  • Easier than thinking (template responses, less staff training)

A registrar in Panama forwarding DMCA notices isn't obeying US law. They're obeying ICANN's Registrar Accreditation Agreement, which they signed voluntarily. That agreement isn't law—it's a contract.

The ccTLD Loophole

Country-code TLDs (.is, .to, .ch, .nu) answer to national registries, not ICANN. Those registries set their own rules. Some ignore foreign legal demands entirely. Others process complaints under local law only.

Example: .to domains (Tonga) remained online during high-profile piracy cases because Tonga's registry doesn't recognize US copyright claims without a local court order. No lawyer is flying to Nuku'alofa to sue over a streaming site.

What "DMCA Ignored" Actually Looks Like

Real offshore registrars don't advertise "DMCA ignored" on their homepage. That's a signal to fraudsters and a liability magnet. Instead, they describe their jurisdiction, support policy, and response protocols.

At bunkerdomains, we don't reply to DMCA notices. We operate under jurisdictions where DMCA has no force. If someone has a legal claim, they can pursue it in the courts where our entities are registered—good luck with that discovery process.

Practical differences you'll notice:

  • No automated suspensions from emailed PDF complaints
  • Registry-level action only if the TLD operator itself receives a court order
  • Anonymous registration by default (no WHOIS to receive notices at)
  • Crypto payment (no chargeback leverage, no processor interference)

We still enforce our terms. Phishing, malware distribution, child exploitation—those get terminated. We're offshore, not lawless. But "your site hosts a pirated e-book" complaints go to /dev/null.

The Misunderstanding That Costs People Domains

People register with a "DMCA ignored" registrar, then host with AWS. The site gets a complaint. AWS suspends the hosting. The domain still works, but there's nothing to point it at.

Or they use Cloudflare for DNS. Cloudflare—US company, DMCA-compliant—disables proxying. The origin IP is exposed. Hosting provider gets the next complaint.

DMCA protection is a stack problem. The registrar is one layer. You also need:

  • Offshore hosting (or decentralized like IPFS)
  • Non-US DNS (or run your own authoritative nameservers)
  • Offshore payment processing (or crypto-only)
  • Anonymous registration (or a privacy service that doesn't roll over)

bunkerdomains handles the registrar layer. You handle the rest. We don't offer hosting because hosting requires jurisdiction-specific compliance we'd rather not touch. DNS we can do—we run authoritative nameservers in privacy-friendly locations.

Precedent: When Registrars Actually Get Pressured

The Pirate Bay switched registrars seven times between 2006 and 2013. Each suspension came from registry-level action, not DMCA notices. Sweden's .se registry deleted the domain after a local court order. Greenland's .gl did the same. They eventually landed on .sx (Sint Maarten), which lasted until the registry sold to a US company.

Kim Dotcom's Mega used .co.nz until New Zealand courts forced the registry to suspend it. Moved to .nz, same result. Switched to Gabon's .ga, which lasted years because Gabon doesn't care.

Notice the pattern: court orders in the registry's jurisdiction are the real threat. DMCA notices are noise. A registrar in Seychelles can't be ordered by a US court, but the .com registry (Verisign, US company) can be.

The Nuclear Option

Some registries have been threatened with removal from the global DNS root. ICANN can theoretically delist a ccTLD if the registry becomes a "haven for abuse." This has never happened, but the threat exists.

More realistically: payment processors and banking partners get pressured. If your registrar can't accept payments, they're dead regardless of legal immunity.

How to Pick a Registrar That Won't Fold

Check these:

  1. Entity jurisdiction — where is the company actually registered? A .com website means nothing if the bank account is in Delaware.
  2. Payment methods — crypto-only is a signal they've already been cut off from traditional rails.
  3. WHOIS policy — if they offer "privacy protection" as an upsell, they're storing your real data. Anonymous by default or don't bother.
  4. Response to legal requests — read their legal policy page. If it says "we comply with all valid legal requests," they're compliant. If it says "we respond to court orders from [specific jurisdiction]," that's clearer.
  5. Operational history — how long have they existed? Who uses them? Search for complaints.

bunkerdomains: Nevis-registered, crypto payments only, anonymous signup with disposable email, free WHOIS privacy (because we don't collect WHOIS in the first place), and we don't respond to foreign legal demands without a local court order. Our legal policy page is three sentences.

Most DMCA notices are automated garbage. They target dead links, parody sites, and pages that mention a copyrighted term in passing. The signal-to-noise ratio is abysmal.

US registrars forward them all because it's cheap and safe. Review costs money. Ignoring them risks being the test case. So they pass the complaint to you, and if you don't respond in 10 days, they suspend the domain.

Offshore registrars can afford to ignore low-quality notices because they're not playing the liability game. If Warner Brothers wants to enforce copyright, they can file in Seychelles court. They won't. That's the entire model.

DMCA isn't some international treaty being heroically resisted. It's a US procedural law that offshore businesses simply don't acknowledge. The entire "DMCA ignored" framing is marketing—useful marketing, because that's what people search for, but marketing nonetheless. What you actually want is a registrar outside the compliance ecosystem, running where the incentives favor your privacy over Hollywood's convenience.

v0idmask avatar

@v0idmask

Security researcher

Spent a decade at large red team firms. Now does threat modeling for journalists, activists, anyone who actually needs it.

Related reading

Related TLDs