Can you really find out who is behind an anonymous site?
Usually, yes. WHOIS privacy and Cloudflare hide the operator from the public — not from a court. After filing a John Doe action we subpoena the four custodians that actually hold identity: the registrar (registrant and billing records), the CDN (origin and account-creation IPs), the email provider (subscriber and recovery data), and any commercial mail-drop the operator used (the USPS Form 1583 on file for a private mailbox carries two forms of verified ID). When those returns converge, the operator has a name.
Isn't anonymous speech protected by the First Amendment?
Anonymous speech is protected; anonymous defamation and harassment are not. Courts balance the two using established standards (see Dendrite and Doe v. Cahill): a plaintiff must make a real evidentiary showing of a viable claim before a court will unmask anyone. That is a feature, not an obstacle — meeting it is exactly what we build the case to do.
What about Section 230 — doesn't that block everything?
47 U.S.C. §230 immunizes platforms (hosts, search engines, forums) from liability for content their users post. It does not immunize the person who actually wrote the defamatory material or who operates the attack site. We target the author and operator, not the platform — which is where §230's protection runs out.
What is anti-SLAPP, and why do you keep mentioning it?
California's anti-SLAPP statute (CCP §425.16) lets a defendant quickly dismiss a suit that targets protected speech — and recover their attorney's fees if they win. The danger is suing on the wrong words. Verbatim quotes from court filings are absolutely privileged (Civ. Code §47(b)); sue on those and you can lose on anti-SLAPP and pay the other side. We plead only the unprivileged false statements — fabricated "fraud histories," invented case numbers, name-calling found in no court record.
How fast can a site actually come down?
It depends on cooperation. A counsel cease & desist resolves a meaningful share of matters within about 5–7 days. If the operator hides, unmasking through subpoenas typically takes 30–60 days, and a civil-harassment restraining order (for individuals) can issue ex parte in roughly 21 days. Registrar and CDN abuse channels rarely produce takedown on their own without a court order — we use them to build the record, not as the cure.
The operator may already be suing me. Can you still help?
Often that helps. If the person behind the site is also a party to a pending case against you, that case is a live discovery channel — we can serve sworn interrogatories asking, under penalty of perjury, whether they own, fund, or operate the sites. We keep that effort procedurally separate from any mediation to respect confidentiality rules (Evid. Code §1119).
What do you need from me to start?
The URLs of every page or domain targeting you, screenshots or links to the specific statements, any related case numbers, and a short timeline of what happened. Do not contact the operator or publicly accuse anyone before we speak — premature contact can destroy evidence and create exposure if the wrong person is named.
Should I respond to the site or post my side?
Generally no. Engaging publicly tends to amplify the page, feed it fresh content, and can complicate later litigation. The most valuable early move is the opposite: preserve everything quietly and let counsel act before the operator knows you have noticed.
What does it cost?
Engagements are scoped to the matter — commonly a flat fee for the preservation-and-demand phase, with litigation and subpoena work quoted separately once the facts are clear. We will give you a straight estimate after the initial confidential review. (Fee structures shown for illustration; actual terms are set in your engagement agreement.)