spy.lu delivers focused offshore shared hosting with full cPanel access. Our servers are located on remote islands operating in the grey zones of international internet law — built to be reliable, fast and genuinely confidential.
Trusted by hard-to-host platforms worldwide
What you get
One service, refined. No upsells, no clutter — just the essentials of solid hosting.
Infrastructure designed for confidentiality and a calm, jurisdiction-aware experience.
The interface you already know. No relearning, no proprietary dashboard — just cPanel.
Get up and running quickly. Your account is provisioned and ready in minutes.
Tuned shared environments built to stay responsive under real, day-to-day workloads.
Direct, technical and quiet. We respond when you need us, without the noise.
Privacy is a default, not a feature. We keep things quiet, professional and clean.
Test our network
Real IPs from real jurisdictions. Test latency, traceroute, and see for yourself where your data could live.
103.112.0.23Guam
Located in the western Pacific, Guam is a US unincorporated territory. While technically under US jurisdiction, its remote location and unique legal status create a meaningful operational distance from mainland enforcement channels. Latency to Asia and Oceania is excellent, and local data laws often differ from continental US practice — making it a strong, low-friction offshore choice for clients targeting the Asia-Pacific audience while staying outside European reach.
186.2.161.88Belize
Belize is a long-standing offshore jurisdiction known for its strong privacy laws, banking secrecy tradition and minimal cooperation with foreign data requests. The country has no mandatory data retention regime and a legal framework that historically favors operator confidentiality. Combined with stable Caribbean connectivity to North and South America, Belize is one of the most respected jurisdictions for clients who need genuine legal insulation rather than just marketing claims.
45.130.41.146Masked proxy
This endpoint is served behind a hardened reverse-proxy layer that conceals the origin server's true location and IP. Useful for clients who need an additional anonymity barrier on top of an already offshore origin. The visible IP reveals nothing about the underlying infrastructure — only the proxy network responds to lookups, scans and abuse reports.
Test IPs are provided for connectivity and latency checks only. They are not a guarantee of any specific server assignment.
Live infrastructure
Live metrics from our shared cluster. Monitor CPU, RAM, system load and website latency in real time.
CPU Usage
System Load
RAM Usage
SWAP Usage
Metrics refreshed every 1.5s. Our RamNuke layer absorbs traffic spikes before they ever reach these graphs.
One plan. No upsell.
No tiers, no artificial limits, no “upgrade for support” games. Everyone gets the same product.
RamNuke™ technology
When your site spikes, RamNuke lends you +200% RAM and CPU instantly — no ticket, no overage bill.
The plan
We sell a single, honest offshore hosting plan. Same resources, same support, same privacy guarantees for every customer.
Offshore shared hosting, the way it should be sold.
Final pricing to be announced
How RamNuke works
The 8 GB RAM pool is shared across 10 clients on each node. When your site bursts, RamNuke temporarily allocates 200% of your baseline RAM and CPU from the unused pool — automatically, with no extra charge and no overage bill.
Payments
Two payment paths, both designed to keep your hosting account decoupled from your real identity.
Card details are tokenized by Stripe — we never see or store your card number. The transaction is anonymized on our side: nothing from the payment ties back to your hosting account beyond an internal reference.
We accept BTC, XMR and USDT for clients who prefer maximum separation. Crypto payments are handled manually — open a support ticket and we'll send wallet details and reconcile the order ourselves.
FAQ
Privacy promises
Confidentiality isn't a marketing word here — it's an operational choice baked into how we run the platform.
Signup only asks for a first name. No last name, no address, no government ID — ever.
Every customer email is masked behind an internal alias. We physically cannot identify you from our records.
Connection logs are not retained. There is nothing for us to hand over because nothing is stored.
All DMCA notices and abuse requests are discarded by default. Only the categories listed in our AUP are enforced.
Exceptions: content categories explicitly listed in our Acceptable Use Policy (CSAM, real-violence pornography, bestiality) are not tolerated and will be removed.
Why this matters
Over the last decade, dozens of legal websites have been wiped off the public internet — not by a court, not by a law, but by a hosting provider responding to a tweet, a press cycle, or a corporate PR risk assessment.
Cloudflare drops Kiwi Farms after public pressure campaign
After years of providing infrastructure to all comers, Cloudflare reversed course under coordinated activist pressure and terminated Kiwi Farms — a precedent that effectively put every controversial forum at the mercy of a public outrage cycle.
Reported by Slate, NBC News, The Verge
Gab knocked offline by hosts, registrar and payment providers
Within 48 hours, Gab lost its hosting provider, domain registrar, and payment processors simultaneously — not because of a court order, but because of corporate decisions made under media pressure.
Reuters, BBC, Wired
Cut off by Cloudflare, Voxility and multiple registrars
8chan was systematically deplatformed across the entire stack — DDoS protection, hosting, domain — leaving the site unreachable for weeks despite no legal ruling against it.
The Guardian, NYT, Ars Technica
A "free internet" that depends on three US-based corporations agreeing with your content is not free — it's licensed. The moment your host, your CDN, or your registrar receives a viral complaint, your site is gone. No appeal, no due process, no warning.
Privacy-respecting offshore hosting isn't about hiding wrongdoing — it's about decoupling your right to publish from the political mood of a Silicon Valley boardroom. We hold one line, drawn in our Acceptable Use Policy. Everything else stays online, regardless of who is angry about it this week.
Founder's note
Hi — I'm Q. I used to run several adult traffic and referral sites, and I kept getting banned without prior notice, in the middle of the night, by a so-called "offshore / no rule" hosting company.
I got tired of the lies in this market. With the technical background I had, I decided to build a company that actually owns what it does — instead of hiding behind buzzwords and folding the second a complaint lands in an inbox.
Liberty and freedom of expression are things we lost on the internet a long time ago, quietly handed over to a handful of intermediaries watching every move. Only a few companies are still standing against that drift.
We are not epik.com. We are not bending under a bit of pressure. We will be proudly hosting all of your sites.
Why spy.lu
We deliberately offer a single service — offshore shared hosting via cPanel. That focus is the point. No fragmented catalog, no hidden tiers, no upsells.
The result is a clean, professional experience built for clients who want something direct: reliable hosting, a familiar control panel, and a team that takes their privacy seriously.
Get in touch
Tell us what you're building. We'll come back to you with the details that matter — quietly and quickly.