FlokiNET review covering its Iceland-based offshore hosting, no-KYC signup, Monero payments, DDoS protection, and tools for journalists and privacy-focused XMR users.
FlokiNET was founded in 2012 in Reykjavík, Iceland, by activists and digital rights advocates. The company began with the explicit goal of supporting freedom of speech, press freedom, and whistleblowing projects through offshore hosting infrastructure.
Its core audience includes journalists, activists, NGOs, and censorship-sensitive users. XMR users form a notable part of this group, drawn to providers that prioritize operational independence from mainstream surveillance ecosystems.
FlokiNET positions itself as a European offshore host built around speech and press protections rather than commercial mass-market needs. Data centers in Iceland, Romania, Finland, and the Netherlands underpin this stance, with Iceland serving as the headquarters and original base for its activist-driven model.
The service emphasizes tools and capacity suited to investigative and high-risk publishing workflows. This focus remains consistent across its growth, distinguishing it from general-purpose hosting providers.
FlokiNET operates data centers in four countries: Iceland, Romania, Finland, and the Netherlands. Iceland provides strong press and speech protections and draws on 100% clean energy. The provider owns and runs its full network as autonomous system AS200651, which announces 38 prefixes (32 IPv4, 6 IPv6) and maintains 100% RPKI validity.
Free Layer 3/4/7 DDoS mitigation rated at over 1 Tbps filtering capacity protects the Iceland, Romania, and Netherlands sites. The service is delivered at the network edge and covers the listed attack vectors without extra configuration on supported plans.
Early 2026 network expansion added capacity and improved routing toward major European exchanges. The Netherlands location now supports hardened anti-DDoS shared hosting configurations. These changes extend reach across additional European transit paths while preserving the existing four-country footprint and continued operation of Tor relays and exit nodes.
FlokiNET lists shared hosting at an entry price of €3.50 per month for the Romania I plan, which supplies 10 GB SSD storage, 1 GB RAM, two MySQL databases, cPanel, unmetered traffic and included DDoS protection. The VPS tier opens at €7.99 per month for the Romania VPS I option that provides one core, 1 GB RAM, 20 GB NVMe storage, 3 TB traffic, 1 Gbit uplink and DDoS protection, with a €5 setup fee reported on monthly billing in 2026 data.
Dedicated servers start at €89.00 per month. A separate Netherlands anti-DDoS hardened shared plan begins at €25 per month. All listed tiers include the provider’s free Layer 3/4/7 mitigation rated above 1 Tbps capacity on supported locations.
| Plan | Entry Price | Specs | Traffic | Notes |
|---|---|---|---|---|
| Shared (Romania I) | €3.50/mo | 10 GB SSD, 1 GB RAM, 2 MySQL, cPanel | Unmetered | DDoS included |
| VPS (Romania I) | €7.99/mo | 1 core, 1 GB RAM, 20 GB NVMe | 3 TB | €5 setup on monthly; DDoS included |
| Dedicated | €89.00/mo | Full root access | Not specified at entry | DDoS included |
| Shared (Netherlands) | €25.00/mo | Anti-DDoS hardened | Not specified | Higher baseline for extra filtering |
These prices deliver clear value for privacy-focused workloads because unmetered or high-traffic allowances and always-on DDoS protection reduce ongoing costs for journalist or activist sites that face variable load and potential attacks, while the low shared and VPS entry points allow testing without large upfront commitments.
FlokiNET requires only a valid email address for account creation and performs no ID verification or standard KYC checks. This approach applies uniformly to shared, VPS, and dedicated offerings.
Accepted payment methods include multiple cryptocurrencies, with explicit support for Monero (XMR), Bitcoin, and additional coins. Cash-by-mail provides a non-digital option for users who prefer it.
Free WHOIS privacy is provided for most domains, keeping registrant details out of public databases by default.
Community directories note rare KYC requests in narrow edge cases, such as dedicated ASN registration. No broader shift toward mandatory verification has appeared in 2026 reporting or on the provider’s own pages.
FlokiNET operates Tor exit and relay nodes alongside clearnet infrastructure, creating potential correlation risks for users who access services or support without routing all traffic through Tor or a VPN. Its Acceptable Use Policy bars illegal activity, spam, malware distribution, and adult content in the Iceland location, so violations can trigger account termination even on offshore servers.
Support channels limited to Signal, Threema, and PGP email reduce metadata exposure but still require users to avoid linking accounts to identifiable information. Clearnet node operation means some traffic may traverse monitored paths, and the provider does not claim to eliminate all logging or timing attacks.
These measures reduce exposure but do not guarantee immunity from subpoenas, exit-node monitoring, or policy enforcement actions.
Yes. The provider installs and maintains GlobaLeaks, SecureDrop, OpenAleph, LiquidInvestigations, and Matrix instances on request for qualifying projects.
Official sources state no refunds are issued under any circumstances, including early termination or service issues.
FlokiNET operates its own Tor exit and relay nodes and explicitly offers .onion hosting on all supported plans.
No independent SLA or audited uptime figures are released by the company; users rely on scattered third-party reports and forum anecdotes.
Romania is frequently chosen because it lacks mandatory data-retention laws, while Iceland offers strong press-freedom protections; both accept XMR payments without KYC.
An Acceptable Use Policy bans illegal material, spam, and malware, but the provider otherwise supports censorship-sensitive and press-related content across its four locations.
Standard sign-up needs only an email address, yet community reports note rare additional verification for dedicated ASN registration or unusual traffic patterns.