Investigative journalism operates in hostile territory. Sources demand anonymity. Subjects threaten lawsuits. Governments issue takedown orders. Corporations flood hosting providers with DMCA notices before publication. Mainstream registrars fold at the first legal letterhead.
The problem starts at registration. GoDaddy, Namecheap, and Google Domains require real names, real addresses, sometimes ID scans. That metadata becomes exhibit A when a subpoena lands. WHOIS privacy is marketed as protection, but it's cosmetic—the registrar still holds your data and will hand it over under pressure. Payment trails connect domains to bank accounts, credit cards, real identities.
Jurisdiction matters more than marketing claims. A US registrar operating under ICANN rules will comply with US court orders, FBI requests, and corporate DMCA campaigns. A registrar in Stockholm or Reykjavik operates under different pressures. Some refuse to answer foreign requests. Some don't log IP addresses during registration. Some accept Monero.
Takedown pressure doesn't always come through courts. Registrars receive "friendly" emails from intelligence agencies, threat intelligence firms hired by corporations, or politically connected lawyers. Most registrars suspend domains quietly to avoid legal costs. They terminate accounts for "violation of acceptable use" without specifying which clause or providing appeal. The domain goes dark. Your investigation dies.
Payment creates exposure. Credit cards tie domains to real people. PayPal freezes accounts retroactively if content attracts attention. Wire transfers require banks, which require KYC, which creates records. Cryptocurrency offers separation, but most registrars either don't accept it or use payment processors that log everything anyway.
Journalists need infrastructure that doesn't cooperate by default. A registrar that doesn't reply to casual legal threats. That doesn't store unnecessary data. That operates outside Five Eyes jurisdiction. That takes Bitcoin or Monero and asks nothing in return. Bunkerdomains exists because the alternatives bend too easily.