US authorities usually take a domain through the companies that run it, not by reaching the website owner. A .SU domain has no US company in that chain. That is a real difference from .com, but it covers the name only. Hosting, CDN, email and payment providers stay within reach of whatever law governs them.

How US domain seizures normally work

A typical US seizure warrant for a .com or .net domain is served on Verisign, the registry for both. A 2025 seizure affidavit filed in the District of Columbia shows the pattern: it asks that “Verisign shall be directed to restrain and lock” the domain and repoint its nameservers. The domain’s registrar was in Singapore; the US registry was the point of control.

Civil cases have a similar route. Under the Anticybersquatting Consumer Protection Act, a trademark owner can sue the domain itself when it cannot find or sue the registrant. 15 U.S.C. §1125(d)(2) places the domain where its registrar or registry is located, and limits the remedy to forfeiture, cancellation or transfer.

Both routes depend on a registry or registrar that will act on a US order.

Why .SU is different

The .SU registry, RIPN, is in Moscow, according to the IANA record. Its registrars are accredited by RIPN and, under the Government’s registrar requirements, must be Russian legal entities without foreign affiliation. Its technical operator is also Russian. No company in the .SU registration chain is located in the US.

That removes the usual targets for a seizure warrant and for a cybersquatting suit against the domain itself. We have not found a public record of a US seizure of a .SU domain. The registry acts on Russian court rulings and Russian state requests, under Decree No. 1119 and its published court-dispute policy.

The root zone is the one US link. Every top-level domain depends on its delegation there. ICANN and its affiliate that performs the IANA functions are California non-profits, and Verisign maintains the root zone file under contract with ICANN. ICANN has said it has no sanction-levying authority and has not used the root zone against .SU. Is .SU outside ICANN? covers the details.

What US law can still reach

US enforcement against Russian-linked infrastructure usually targets the services around a domain. The Treasury Department has sanctioned several Russia-based hosting providers it accused of supporting ransomware or abuse:

Inside your own setup, any US company can act on US law or its own terms, whatever the extension:

  • a US-based host, CDN or DDoS-protection service
  • a US public DNS resolver or browser safe-browsing list
  • a US email provider
  • a US payment processor or app store

Sanctions and buying .SU

US sanctions have not made .SU registration services off-limits. OFAC’s General License 25G authorises services incident to internet communications for Russia, explicitly including web hosting and domain name registration. We have found no OFAC designation of the .SU registry or its technical operator.

Some Western registrars stopped serving Russian customers or Russian extensions after 2022, generally as a commercial decision rather than a sanctions requirement. If you are a US person or company, check your own compliance position.

Building a setup with fewer US dependencies

A .SU domain does not change which laws apply to you or to activity aimed at people in a given country; US persons remain subject to US law. What you can choose is which companies sit in your infrastructure. If you want fewer US providers, choose each layer with that question in mind:

  1. Domain: .SU puts the registry and registrar outside the US. At xUID a trustee supplies the registration identity, so your own details are not part of the registration.
  2. DNS: the nameservers you use decide who can change your records. A domain with a non-US registry but US-hosted DNS has a US point of control.
  3. Hosting: ask the provider where it operates and which law governs the agreement. Our hosting overview compares xUID VPS, FastFlux and protected hosting.
  4. Email and payments: account for these separately; they are often the most US-dependent part of a project.

Register .SU through xUID

Base .SU registration costs $75/year with a shared trustee. Private Identity adds a dedicated trustee for $750, a total of $825/year. Full Bulletproof adds abuse-complaint handling within the service agreement for $8,000, a total of $8,075/year. Renewals use the same fees.

Read Why choose .SU for an anonymous domain? for the wider case, or search .SU names.

Anonymous .RU domains $50/year. .SU domains $75/year.

Compare domain options