How Ali Alexander tried to hide his digital footprint after the Capitol riot

Just days after supporters of former President Donald Trump violently stormed the Capitol on January 6, Ali Alexander, one of the main organizers of the rally that day, appeared to be busy, trying to hide his links to dozens and dozens of websites calling the Election of 2020 stolen.

The Alexander-related areas that pushed Stop the Steal, which the Daily Dot has examined, including those he has publicly posted on as himself, have been scrambled in the wake of the riot to hide ownership. But pirated documents show that they go directly back to Ali and an anonymization service at web hosting company Epik.

In the run-up to the failure of the insurgency, which was sparked by weeks of false allegations of widespread electoral fraud in the 2020 presidential election, Alexander had positioned himself as the de facto leader of the movement with his “Stop the Steal” campaign.

At a December 19 rally in Arizona to which he spoke, Alexander made clear his intentions for January 6: he and his legion of supporters would do whatever was necessary to prevent Congress from certifying the electoral votes of the victory of President Joe Biden.

According to Washington post and Daily Beast, Alexander was already working with far-right Republican lawmakers to plan the January 6 rally.

“We’re going to convince them not to certify the January 6 vote by marching hundreds of thousands, if not millions of patriots, to sit in Washington and shut this city down, right?” Alexander said this December day. “What if we have to explore options after that …”

Alexander has been an important backchannel in Republican politics for nearly two decades. He also pleaded guilty to felony charges under an old name, when he was known as Ali Akbar. He has been friends with far-right operatives like Laura Loomer and Jacob Wohl. He also has ties to Roger Stone, who is under investigation for his role in instigating the Capitol Riot. At the time of the Capitol Riot, Alexander had nearly a quarter of a million followers on Twitter.

The day before the riot, Alexander was filmed chanting “Victory or Death” in front of an enthusiastic crowd. He had also nicknamed himself an official coordinator of the January 6 event and was filmed on a roof during the rally praising its success.

When the dust finally settled on January 6, Alexander had already appeared to be in an effort to obscure his ties to the movement. With five dead, hundreds injured and extensive damage to the Capitol, the conspiracy theorist would find himself facing permanent social media suspensions before eventually going into hiding.

As national outrage over the riot escalated, the work seemed to be taking place behind the scenes. On January 15, just nine days after the insurgency failed, Alexander, or someone working with him, took steps to anonymize his personal information on records from more than 100 domains. Almost half of these areas are directly related to Stop the Steal. Domains such as, and have all been scrambled in the wake of the riot.

Alexander had chosen to entrust his web addresses to domain registrar Epik, which offers a domain privacy feature called “Anonymize.” The ruling would theoretically prevent the public from finding out what estates they owned.

However, on September 13, the Anonymous hacking collective announcement that he had stolen a decade of data from Epik, a company known to host extremist websites. Although the company initially claimed not to be aware of a breach, Epik CEO Rob Monster later said in a bizarre four-hour video conference that hackers had obtained a backup of its data.

Launched online as a torrent, the 180-gigabyte data cache included, among other things, domain registrations and account credentials as well as personal details of people who had registered some of the most far-right domains. most notorious of the Internet.

Analysis of the data by the Daily Dot linked an email linked to Alexander to 122 separate domains. On January 15, the far-right figure received an email to a ProtonMail address thanking him for creating an Anonymize account.

“Dear Ali A,” the email begins. “Thank you for signing up with us. Your new account has been set up and you can now log into our customer area using the details below.

By searching the hacked data for the ProtonMail address used to register the account, the Daily Dot was able to locate Alexander’s Anonymize profile. The data includes Alexander’s hashed username and password as well as a phone number and address. The address appears to be that of a UPS store in Texas. The Fort Worth Star-Telegram previously linked this UPS address to Alexander.

The Daily Dot made multiple attempts to reach Alexander via the phone number and email address found in the breach, but did not receive a response until press time.

The account creation date shown under Alexander’s account information, January 15, is the date of the email indicating that he signed up for the Anonymize service.

Alexander’s account was assigned a unique identifier, which would take the place of his real name on his public domain registrars. The Daily Dot does not disclose the identity of Alexander.

ali anonymize data


Anonymize provides all of its users with an email address based on the five digits of their unique identifier. These numbers appear on Alexander’s web presence.

Questioning the Anonymize email address in the breach reveals all the areas it appears the far-right figure has apparently tried to hide. If the Epik hack hadn’t been so extensive, some domains might have been difficult, if not impossible, to link to Alexander based solely on the Anonymize email address.

However, many domains do little to hide their true owner. Among the domains listed is, the main website where Alexander solicits donations as “the world’s most warped man.”

A mailing address on the website also matches the one seen in Alexander’s Anonymize profile.

Other areas bear similar themes around the alleged persecution of Alexander, such as And while many domains are for sale or vacant, others host operating websites.

The domain, for example, is dedicated to the claim that the president suffers from Parkinson’s disease. Alexander, who publicly acknowledged his ownership of the estate after its launch last year, offers a range of products on the site, including branded hats, t-shirts and fanny packs.

Although Alexander has since removed his name from the website, the current domain registrar’s display for confirms that the account holder’s email matches Alexander’s anonymization address.

Hosting of the ali alexander website for

Who is

Many domains also refer to Alexander’s religious beliefs, including,, and

But aside from a handful of politician-related sites, such as and, the significant portion of Alexander’s owned estates was related to the Stop the Steal movement. The Daily Dot was able to obtain a list of 57 of these areas.

All were anonymized following the Capitol riot.

all domains deleted


Alexander, according to law enforcement sources who spoke with the Washington Post, was placed under investigation by the FBI following Jan.6. No charges have been filed against him so far.

Interestingly enough, the address linked to Alexander also opted to register the domain just a day after signing up for Epik’s domain privacy service.

Despite the negative attention paid to Alexander, the far-right figure told his supporters in February that he was still determined to eliminate “this whole system”.

“I healed my wounds, but I conspired,” Alexander said. “I planned. I conspired.

Alexander’s future plans remain unclear. For now, Alexander is fueling his crusade by charging his subscribers $ 500 a year to read his personal blog.

This week’s top tech stories

About Dora Kohler

Check Also

Business News | Stock and Equity Market News | Financial news

Leave a Reply

Your email address will not be published.