Behind a Secretive Global Network of Non-Consensual Deepfake Pornography

Bellingcat uncovers a loosely connected network of AI deepfake porn platforms—Clothoff, Nudify, Undress, and DrawNudes—that disguise their activities and launder payments through gaming marketplaces (e.g., G2A, Skinsback), mainstream processors (Stripe, PayPal, 2Checkout, Patreon), e-commerce redirects, and crypto services (Coinbase, Alchemy Pay, Plisio), using cloned domains, shared templates, dedicated servers, and 24/7 “dealers.” The investigation correlates domains, hosting, payment flows, and corporate records to entities and individuals across multiple countries (e.g., Aurora Borealis LLC, GG Technology LTD, Itai Tech LTD, Sol Ecom Inc., Vitalii Ionov), prompting some service suspensions and inquiries by affected platforms.