The No-KYCKnow Your Customer rules require users to submit identity information such as passports, selfies, addresses, or phone numbers before accessing a service.Glossary → Stack: Domain → VPS → Payments

Register through Njalla

Njalla (see provider page) uses a unique model: they register the domain in their own name, then grant you full control via a service agreement. Your name never appears in WHOIS. Even if a registrar is compelled to produce WHOIS records, those records point to Njalla - a Swedish company governed by EU law.

Njalla accepts XMR, BTC, ETH, and a handful of other coins. Pay with XMR and there is no fiat trail. Create a Njalla account using a ProtonMail or SimpleLogin alias - never your real email. Use Tor or a trusted VPNA virtual private network encrypts traffic between your device and a provider-run server, hiding activity from local networks while shifting trust to the VPN operator.Glossary → when signing up.

Alternatives: 1984 Hosting also sells domains with crypto payments, and NameSilo accepts privacy protection + crypto, though WHOIS privacyA domain registration feature that masks or proxies the registrant’s contact details in public WHOIS records to reduce direct exposure.Glossary → there is a bolt-on rather than structural. Njalla's structural approach is stronger.

Choose an offshore hosting provider

Iceland remains the strongest hosting jurisdiction in this list. It has strong press protections and no direct match for the old EU data-retention regime. Romania is a solid fallback outside the core Five Eyes bloc.

1984 Hosting - Based in Reykjavik, Iceland. Named after the Orwell novel on purpose. Accepts BTC and various altcoins. Shared hosting, VPS, and dedicated options. Transparent about their privacy stance. IMHO the most credible option for straightforward hosting needs.

FlokiNET - Operates in both Iceland and Romania. Accepts XMR. More infrastructure options than 1984 Hosting (colocation, bare metal). Known for hosting Tor exit nodes and privacy-focused projects without complaint.

NiceVPS - Smaller provider, accepts XMR. Good for low-traffic projects that need basic VPS functionality without a paper trail. Fewer datacenter options than FlokiNET.

Use XMR, ZEC shielded, or CoinJoined BTC

Monero (XMR) is the strongest option. Ring signatures, stealth addresses, and RingCT make every transaction opaque by default. There is no "transparent mode" to accidentally use. Get XMR via a no-KYC P2P exchange (Bisq, or a swap from BTC via Trocador/Godex) and pay directly.

Zcash (ZEC) shielded is a valid second choice. Shielded ZEC transactions use zk-SNARKs and are cryptographically private. The caveat: you must explicitly use z-addresses (shielded). Many wallets default to transparent addresses - double-check.

CoinJoined BTC is a last resort. BTC is transparent by default. If the provider doesn't accept XMR, run your BTC through Wasabi Wallet's CoinJoin first, wait for sufficient anonymity setThe group of possible users or transactions that could plausibly match an observed action. Larger anonymity sets generally mean stronger privacy.Glossary →, then pay from a fresh output address. Never pay from an exchange withdrawal address directly.

DNS → VPS → TLS

Once your VPS is provisioned and your domain is registered at Njalla:

1. Log into Njalla's DNS manager and set an A record pointing your domain to your VPS IP address.
2. SSH into your VPS. Install your web server - nginx or caddy.
3. For TLS with Let's Encrypt: sudo certbot --nginx -d yourdomain.tld (or Caddy handles this automatically with its built-in ACME client).
4. Test DNS propagation with dig yourdomain.tld +short.
5. Set up a firewall: ufw allow 22,80,443/tcp && ufw enable.

Caddy is recommended for solo operators - zero-config HTTPS, automatic cert renewal, simpler config than nginx. The Caddyfile for a basic site is two lines.