English
Español
Português
Français
Română
Türkçe
РусскийBulletproof hosting, what it means here.
Hosting that does not fold at the first complaint, and the lines we still hold.
What is bulletproof hosting?
Bulletproof hosting is hosting that keeps a site or server online when someone complains about it. A normal host takes a site down after a copyright notice or an angry email. A bulletproof host looks at whether the complaint has any legal weight where the server actually is.
The name has a bad reputation, and some of it is earned. Security researchers use it for networks that knowingly carry malware, ransomware and botnets. That is not what we sell. We sell privacy and a host that is hard to push around, not a hiding place for crime.
The term goes back to the 2000s, when some hosts openly promised to ignore every abuse report. Security companies and law enforcement still use it in that sense, for providers that knowingly keep phishing pages, malware, spam senders and botnet control servers online. Blocklist operators then list whole address ranges of such hosts, so their mail is refused and many sites block their visitors.
What most privacy customers need is narrower. A host that does not ask who they are, does not take a site down because of a foreign copyright notice, and takes payment without a bank. That is privacy hosting, and it is what we offer, with no KYC sign-up, crypto payments and the rules on this page.
At Bulletproof.to that means three things. You never give us your identity. Foreign DMCA notices are not forwarded and not acted on. And your server runs in Lithuania or Iran, under the law of that country only.
Port 25 is open on every VPS for your own mail server, and Tor relays, onion sites, seedboxes and media servers are allowed.
Still not allowed
Bulletproof does not mean anything goes. These are removed without warning, in both locations.
- Child sexual abuse material
- Malware distribution
- Ransomware
- Layer 4 or Layer 7 DDoS attacks
Plus anything illegal in the country the server is in. Acceptable use policy
Privacy hosting, not a haven for crime.
What we protect
- Your identity. Your login is a random account number, email is optional.
- Your payments. Crypto only, no card or bank in your name.
- Your content, against foreign copyright notices.
- Your traffic. No IP logs and no traffic capture, only a daily byte count per server for your graphs.
How a complaint is handled
- A foreign DMCA or copyright notice is not forwarded to you and nothing is taken down.
- A valid court order from the country the server is in can lead to action.
- Anything on the list above is removed without warning.
- A server that harms others on the shared network, for example by attacking them, can be slowed down or cut off.
- Anyone can report abuse, no account needed. How to report
How to choose a bulletproof host
Most hosts call themselves offshore or bulletproof. These questions separate the ones that mean it, and they work for any provider, us included.
| What to check | Why it matters | At Bulletproof.to |
|---|---|---|
| Where the servers are | The law of that country decides which complaints count, not the address of the company. | Vilnius, Lithuania (EU) and Tehran, Iran |
| What sign-up asks for | Every name, email or ID a host keeps can be handed over later. | An account number, email optional |
| How you pay | A card or bank transfer ties the server to your name. | Monero, Bitcoin, USDT on TRC-20, Litecoin |
| What happens to a DMCA notice | Some hosts forward every notice and suspend after a few. | Not forwarded, nothing taken down |
| What is still removed | A host that removes nothing shares its network with botnets and gets blocklisted. | Child abuse material, malware, ransomware, DDoS attacks |
| What is logged | Logs that do not exist cannot be handed over. | No IP logs, a daily byte count per server |
| Which uses are allowed | Mail, Tor or torrents are often banned in the small print. | Port 25 open, Tor relays, seedboxes |
| Whether you can check it | Claims cost nothing, signed statements and outside monitoring can be verified. | Signed warrant canary, PGP key, public status page |
What you get.
No KYC
Your login is a random account number. Email is optional.
Crypto only
Monero, Bitcoin, USDT (TRC-20) and Litecoin. No cards, no bank. Paying with Monero
DMCA notices ignored
Foreign copyright notices are not forwarded and not acted on.
No IP or traffic logs
We keep no IP addresses and capture no traffic. Only a daily byte count per server, for your graphs. What we keep
Two jurisdictions
Vilnius in the EU, Tehran outside EU and US jurisdiction. You pick per server.
Warrant canary
A signed statement every month that we have had no secret orders. Read it
Pick what you need.
Locations
Vilnius, Lithuania
Dual Intel Xeon Silver 4214R · 10 Gbps uplink · DDoS protection L4 · EU · GDPR
Tehran, Iran
Dual Intel Xeon Gold 6138 · 10 Gbps uplink · DDoS protection L3–L4 always-on · Outside EU / US jurisdiction
Questions
What is bulletproof hosting?
Hosting that stays up when someone complains about what you publish. Here that means foreign DMCA and copyright notices are not acted on, you never give us your identity, and your server runs in Lithuania or Iran.
What is a bulletproof VPS?
A virtual server with the same rules as the rest of our hosting. Foreign DMCA notices are not acted on, sign-up needs no name or ID, and you pay in crypto. It runs on KVM in Vilnius or Tehran with full root access.
Is bulletproof hosting legal?
Yes. We follow the law of the country your server is in. What is illegal there, and the abuse listed on this page, is removed.
What happens with a DMCA notice?
It is not forwarded to you and nothing is taken down. Only a valid court order from the country the server is in can lead to action.
Will you host anything at all?
No. Child sexual abuse material, malware distribution, ransomware and layer 4 or layer 7 DDoS attacks are removed without warning, whatever the jurisdiction.
How do I pay?
With Monero, Bitcoin, USDT on TRC-20 or Litecoin. You top up your balance and services renew from it monthly, every 3 months or yearly. Payments are final.
How fast is a server ready?
A Linux VPS is running about a minute after the payment confirms, Windows takes a few minutes. Dedicated servers in stock are handed over within 24 hours.
How a copyright complaint is handled, step by step, is on the DMCA ignored hosting page.
Resell it under your own brandYour customers see your name and your prices, we run the servers. A white-label store and panel, and you set the markup.Reseller programCheck us, not our word
Also from Bulletproof.to
Prices, specs and rules on this page checked in November 2026.