1. Border router handling inbound traffic, connecting via encrypted VPN to their load balancer in a different country.
2. Load balancer which is a disk-less server with all configuration in RAM that connects via encrypted VPN to two separate sets of VMs at two separate cloud providers in two different countries.
3. Said VMs using encrypted disk images, and set up to automatically shut down if they are out of contact with the load balancer for more than 8 hours, at which point a keyphrase would need to be entered to unlock the disk images.
I would assume they probably has more routers and load balancers in other locations ready in case they need to switch over.
They can keep this shell game up forever as long as the people operating it are able to get online - adding more layers if necessary.