Profiting From Exploitation: How We Found the Man Behind Two Deepfake Porn Sites

Bellingcat attributes the operation of the deepfake pornography sites RefacePorn and DeepfakePorn to Hungarian national Mark Resan through corporate ties (Dorocron LLP, Facitic Ltd), shared analytics tags, domain records, and reused credentials. Simulated purchases and payment redirects reveal disposable domains and the Peerwallet processor facilitating at least US$331,000 in sales and enabling evasion of payment platform restrictions; after inquiries, the sites and some profiles went offline and archival records were delisted. The report underscores regulatory gaps and inadequate safety controls (e.g., lack of age-related safeguards) and situates the case within broader monetization trends of synthetic sexual content.