We don't give a fuckwhat you host.
spy.lu delivers focused offshore shared hosting with full cPanel access. Our servers are located on remote islands operating in the grey zones of international internet law — built to be reliable, fast and genuinely confidential.
Trusted by hard-to-host platforms worldwide
What you get
Built around what
actually matters.
One service, refined. No upsells, no clutter — just the essentials of solid hosting.
Offshore hosting
Infrastructure designed for confidentiality and a calm, jurisdiction-aware experience.
Managed via cPanel
The interface you already know. No relearning, no proprietary dashboard — just cPanel.
Fast deployment
Get up and running quickly. Your account is provisioned and ready in minutes.
Stable performance
Tuned shared environments built to stay responsive under real, day-to-day workloads.
Responsive support
Direct, technical and quiet. We respond when you need us, without the noise.
Discreet by design
Privacy is a default, not a feature. We keep things quiet, professional and clean.
Test our network
Ping our offshore endpoints.
Real IPs from real jurisdictions. Test latency and traceroute.
> 103.112.0.23Guam
Guam — US Pacific territory
Located in the western Pacific, Guam is a US unincorporated territory. While technically under US jurisdiction, its remote location and unique legal status create a meaningful operational distance from mainland enforcement channels. Latency to Asia and Oceania is excellent.
> 186.2.161.88Belize
Belize — Central American privacy haven
Belize is a long-standing offshore jurisdiction known for strong privacy laws, banking secrecy tradition and minimal cooperation with foreign data requests. No mandatory data retention regime.
> 45.130.41.146Masked proxy
Anonymous proxy IP — origin masked
Served behind a hardened reverse-proxy layer that conceals the origin server's true location and IP. Useful for clients who need an additional anonymity barrier on top of an already offshore origin.
> Test IPs for connectivity checks only. Not a guarantee of any specific server assignment.
Live infrastructure
Real-time server load.
Live metrics from our shared cluster.
CPU
System
RAM
SWAP
> Metrics refreshed every 1.5s. RamNuke layer absorbs traffic spikes before they hit these graphs.
One plan. No upsell.
No tiers, no artificial limits, no “upgrade for support” games.
RamNuke™ technology
Spikes get +200% RAM & CPU instantly.
The plan
One plan. Everything in.
We sell a single, honest offshore hosting plan.
ONE
Offshore shared hosting, the way it should be sold.
Final pricing to be announced
- StorageUnlimited (fair use)
- Hostable sites5
- Bandwidth1 TB / month
- Email addresses10
- Shared RAM pool8 GB across 10 clients
- RamNuke burst+200% RAM & CPU on demand
- BackupsIncluded
- Control panelFull cPanel access
How RamNuke works
The 8 GB RAM pool is shared across 10 clients per node. When your site bursts, RamNuke allocates 200% of your baseline RAM and CPU from the unused pool — automatically, no overage bill.
Payments
Pay your way — discreetly.
Two payment paths, both designed to keep your hosting account decoupled from your real identity.
Card payments via Stripe
Card details are tokenized by Stripe — we never see or store your card number. The transaction is anonymized on our side.
- Tokenized — no card data on our servers
- Anonymized account reference
- Instant activation
Cryptocurrency
We accept BTC, XMR and USDT for clients who prefer maximum separation. Crypto payments are handled manually.
- BTC · XMR · USDT
- Available on request via ticket
- Manual reconciliation, no third-party processor
DDoS Protection
While they get pwned,
you stay online.
Every site on spy.lu sits behind our always-on multi-Tbps scrubbing layer. Layer 3, 4 and 7 attacks are absorbed at the edge — your cPanel stays up, your visitors don't notice, and you don't pay extra for it.
FAQ
Quiet answers to
common questions.
Privacy promises
What we don't know,
we can't reveal.
Confidentiality isn't a marketing word here — it's an operational choice baked into how we run the platform.
No real identity collected
Signup only asks for a first name. No last name, no address, no government ID — ever.
Email aliased at signup
Every customer email is masked behind an internal alias. We physically cannot identify you from our records.
No IP logging
Connection logs are not retained. There is nothing for us to hand over because nothing is stored.
DMCA & abuse ignored
All DMCA notices and abuse requests are discarded by default. Only AUP categories are enforced.
Exceptions: content categories explicitly listed in our Acceptable Use Policy (CSAM, real-violence pornography, bestiality) are not tolerated.
Why this matters
When your host
becomes your judge.
Over the last decade, dozens of legal websites have been wiped off the public internet — not by a court, not by a law, but by a hosting provider responding to a tweet, a press cycle, or a PR risk assessment.
Kiwi Farms
2022Cloudflare drops Kiwi Farms after public pressure campaign
After years of providing infrastructure to all comers, Cloudflare reversed course under coordinated activist pressure and terminated Kiwi Farms — a precedent that effectively put every controversial forum at the mercy of a public outrage cycle.
Reported by Slate, NBC News, The Verge
Gab
2018Gab knocked offline by hosts, registrar and payment providers
Within 48 hours, Gab lost its hosting provider, domain registrar, and payment processors simultaneously — not because of a court order, but because of corporate decisions made under media pressure.
Reuters, BBC, Wired
8chan / 8kun
2019Cut off by Cloudflare, Voxility and multiple registrars
8chan was systematically deplatformed across the entire stack — DDoS protection, hosting, domain — leaving the site unreachable for weeks despite no legal ruling against it.
The Guardian, NYT, Ars Technica
Real free speech needs infrastructure that won't fold.
A "free internet" that depends on three US-based corporations agreeing with your content is not free — it's licensed. The moment your host, your CDN, or your registrar receives a viral complaint, your site is gone. No appeal, no due process.
Privacy-respecting offshore hosting isn't about hiding wrongdoing — it's about decoupling your right to publish from the political mood of a Silicon Valley boardroom. We hold one line, drawn in our Acceptable Use Policy. Everything else stays online.
Founder's note
Why spy.lu exists.
Hi — I'm Q. I used to run several adult traffic and referral sites, and I kept getting banned without prior notice, in the middle of the night, by a so-called "offshore / no rule" hosting company.
I got tired of the lies in this market. With the technical background I had, I decided to build a company that actually owns what it does — instead of hiding behind buzzwords and folding the second a complaint lands in an inbox.
Liberty and freedom of expression are things we lost on the internet a long time ago. Only a few companies are still standing against that drift.
We are not epik.com. We are not bending under a bit of pressure. We will be proudly hosting all of your sites.
Why spy.lu
One product.
Done properly.
We deliberately offer a single service — offshore shared hosting via cPanel. That focus is the point. No fragmented catalog, no hidden tiers, no upsells.
The result is a clean, professional experience built for clients who want something direct: reliable hosting, a familiar control panel, and a team that takes their privacy seriously.
Get in touch
Have a project? Let's talk.
Tell us what you're building. We'll come back to you with the details that matter — quietly and quickly.