While court documents confirmed Jennifer Couture and Ralph Garamone hired political operative Joey Camp, the evidence suggests they were likely not his first patrons. To understand the full scope of the operation, we have to go back to 2020—the year Camp lost his last “real” job and needed to eat.
That financial necessity leads us directly to the doorstep of the domain registrar Epik, its founder Rob Monster, and the suspicious origins of the doxxing site, Antifa Watch.
The Impossible Timeline
Most observers are familiar with antifawatch.net, but the operation began with a different domain: antifa.us.
A forensic look at the site’s history raises immediate red flags. According to the site’s own update log, antifa.us went live on June 1, 2020. However, the domain wasn’t registered at Epik until June 3, 2020.
In the world of web administration, this should be impossible. A website cannot be live and posting updates two days before the domain itself ostensibly exists.
Breaking the Rules of .US Domains
The irregularities go beyond simple timeline errors. The .us top-level domain comes with strict federal regulations. To own one, you must be a US citizen or have a nexus in the United States, and most importantly: you cannot hide behind privacy anonymization. The owner’s name and contact information must be public record.
Despite these federal rules, antifa.us was anonymized by Epik. It existed for only four months before morphing into the .net version, but in that short window, it cycled through two mysterious, and clearly fabricated, owners.
Phantom Owners
The first registrant listed was a man named Harold Stork.
• The Address: Listed in Louisiana.
• The Phone: The number provided began with “111”—a non-existent US area code.
• The Violation: Despite the obvious fake data, Epik anonymized the registration, making it illegal on two counts (fake data and prohibited privacy).
Following Stork, the domain was re-registered to a Hungarian entity named Virag Samuka. Despite the name change and the shift to an international address, the digital fingerprint remained the same:
• The Email: It used the same ProtonMail account as Harold Stork.
• The Account: It was managed by the same Epik customer account.
• The Error: Just like the previous “Harold Stork” entry, the phone number was faked. The Hungarian number listed contained only eight digits, whereas a valid number requires nine.
The Epik Connection
In the span of a single summer, the same US domain flipped between two fake registrations, both utilizing illegal anonymization.
Normally, a registrar would flag a site running live before registration or using clearly fabricated contact details (like a “111” area code). However, antifa.us was registered through Epik. The evidence suggests that when your registrar is a figure like Rob Monster, standard verification rules do not apply. As the investigation suggests, miracles happen—for a price.
What Lies Beneath
If the registration history of the main domain seems shady, the infrastructure supporting it is even darker. Our investigation has uncovered concerning data hidden within the subdomains of this operation.
We will follow those digital breadcrumbs in the next episode of The Predator Files.
