You are on page 1of 5

AnonPaste http://www.anonpaste.me/anonpaste2/index.php?a8ff7de1404ecd48#o4t...

Welcome to AnonPaste Version 2.0 powered by ZeroBin v .16 -


AnonPaste is based on the open source ZeroBin software. It is a
minimalist, opensource online pastebin where the server has zero
knowledge of pasted data. Data is encrypted/decrypted in the browser
using 256 bits AES. More information on the project page.
Note: This service is brought to you courtesy of Anonymous and the
Peoples Liberation Front. Please consider donating to support this service
using BitCoins For technical support for AnonPaste send an E-Mail to
AnonymousGlobal@riseup.net.

"The Unmasking of Craig Brittain/Chance Trahan/Takedownhammer"


-@bullyville "Ending Revenge Porn one dickhead at a time"
- @funnyb34r
-@funnyb34r_

#BullyVille
#Antibully
#EndRevengePorn
#opantibully
#opconsent

Greetings, I am Funny Bear, a anti-bully advocate with a peculiar set of skills. I took
interest in Craig Brittain and Chance Trahan because of suspicion that they have been
extorting victims that may have been submitted to their revenge porn site without
consent. I have been working in conjunction with a few select other anti-bully advocates
as well. I employed a tactic known as "Social Engineering" or pretending to be someone
you're not, basically using their method against them. Let us begin.

I "Borrowed" pictures of 2 people submitted to pinkmeth.doxing.me (another notorious


revenge porn site) and since they aren't watermarked I submitted them to
isanybodydown.com with a tracking code attached that reveals the IP address.

Upon opening the email the tracking code generates a report back to my computer. All
perfectly legal since emails are sole property of those who send them.

First email was sent from ewalters336@gmail.com to Submit@isanybodydown.com with


pictures pertaining to Shalanna Dong Ekis. The handler, (self admitted to be craig
brittain on his website) then opened the email revealing his home IP, and unwittingly
uploaded the fake photos to his website isanybodydown.com

I knew I had his home IP but I wanted to make sure since I knew he was in hiding from
his previous home address so I made the email JWithers0508@gmail.com and sent another
set of pictures "borrowed" from pinkmeth.doxing.me of Sandra Gregor to

1 of 5 3/28/2013 7:13 AM
AnonPaste http://www.anonpaste.me/anonpaste2/index.php?a8ff7de1404ecd48#o4t...

submit@isanybodydown.com and 2 weeks later they have been opened by the same home IP
address and uploaded to the site.

Now for the good part.

I made the email SDEkis08@gmail.com to submit a takedown request via takedownhammer.com,


an arbitration service listed on their site, previously exposed to be a fake new york
lawyer named David Blade. People have already matched Site IP's before they were masked
but I wanted to take it a step further and prove the same location, and the same person
operated both.

I then tracked that email as well, and behold, we have the same IP address to a home in
Colorado springs. Therefore it MUST be the same person reviewing both submissions, and
takedown requests, thus Craig Brittain.

What's more is I was asked to pay $250 fee for removal, and upon asking for a managers
name, or any name, or contact number, I was denied all three.

I have inserted the plaintext version of the email below but first, a little info on the
Home IP and scum that is Craig Brittain.

Craig Brittain - Revenge Porn Site Owner


@CraigRSBrittain

Domain http://isanybodydown.com/ , http://takedownhammer.com


Email Tracked IP: Takedowns@Takedownhammer.com 50.134.205.79
Email Tracked IP: Submit@isanybodydown.com 50.134.205.79
Domain IP : 93.114.41.43 (Protected by @Cloudflare)
Home IP address : 50.134.205.79
Internet Provider: Comcast Cable
Browser of choice: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.2; WOW64;
Trident/6.0; .NET4.0E; .NET4.0C; .NET CLR 3.5.30729; .NET CLR 2.0.50727; .NET CLR
3.0.30729)
Longitude and Latitude of signal : 38.8339, -104.8214
Converted to Address : 212 E Pikes Peak Ave, Colorado Springs, CO 80903

Last known Info before going into hiding:

Address: 2732 Kittyhawk Road, Colorado Springs, CO 80920


Phone Numbers: 303-341-1533 | 719-545-6189 | 303-364-2572
Father: Lewis Brittain
Mother: Joann Brittain
Parent's Phone Number: 719-592-1676
Lewis Brittain's Work Phone Number 719-302-6468

and a little info on Chance Trahan the sites designer/cofounder

www.chancetrahan.com
@trahanchance
@ninjaunity
@kataishinninja

Chance Bradford Trahan


DOB: August 12, 1980
Address: 2048 South Rural Road, Unit B, Tempe, Arizona 85282
Lives with Ashley Lynn Moore
Chance was arrested \with a felony for "Endangerment Risk of Death" and "Unlawful Flight
from Pursuing Officer" in Yavapai County. He was arrested for a misdemeanor for drug
paraphernalia.
Possible phone number: 480-497-6660

2 of 5 3/28/2013 7:13 AM
AnonPaste http://www.anonpaste.me/anonpaste2/index.php?a8ff7de1404ecd48#o4t...

Hey @cloudflare, I believe running illegal scams is against your terms of service right?

Here is the screenshot to prove I have access to both accounts, as well as the tracking
script (you may have to zoom in) I have Redacted my IP address but have no problem
giving the unredacted version, and even performing my skills in front of a judge and
jury to shut these guys down for good:

SCREENSHOT: http://i.imgur.com/qIOEqHh.png

I have also taken the liberty to contact every single victim phone number/facebook
account that would accept communication to not only warn against paying this fraud, but
to refer to a legal team who is handling the case for a class action lawsuit.

This is the paypal YOU SHOULD NOT PAY :

https://www.paypal.com/cgi-bin/webscr?cmd=3D_s-xclick&hosted_button_id=
=3D56YKFJRUYA8GW

Email in plaintext below. PLEASE READ FROM THE BOTTOM UP (it makes more sense that way.)

And they name previous victims? like an arbitration company would do that. Someone
should contact these girls and let them know they have been scammed.

MIME-Version: 1.0
Received: by 10.58.40.18 with HTTP; Wed, 27 Mar 2013 07:13:08 -0700 (PDT)
In-Reply-To: <DM__130326174244_97283171036@smtp.gmail.com>
References: <CAEy0YduJZmn16+KeK3bqdhzr+vWdrwvgeEuR_VR-JrpwX6LCvA@mail.gmail.com>
<DM__130325123426_08045878816@smtp.gmail.com>
<CAEy0Ydv5gnsvGqmJ=LitGT3FsnT=LXJkGh8058=t2CGSOPS7JA@mail.gmail.com>
<DM__130325182742_81981103617@smtp.gmail.com>
<CAEy0Ydupb2fasDJ=ZAGK9ryPAstPxNo+Bx3XvFHZ1ei+tN1DRw@mail.gmail.com>
<DM__130325231045_55485407274@smtp.gmail.com>
<CAEy0YdtiEJejYLW8Yy2sm6bpMFZn3_ucpD6LZGy+TYz93VCM8w@mail.gmail.com>
<DM__130326174244_97283171036@smtp.gmail.com>
Date: Wed, 27 Mar 2013 10:13:08 -0400
Delivered-To: sdekis08@gmail.com
Message-ID: <CAEy0YdtRBrZtX6BrvNshZMcrfKs+PG1Wp01Qozr96vwfb1+n2g@mail.gmail.com>
Subject: Re: Re: Re: Takedown Request for Shalanna Dong Ekis
From: Shalanna Ekis <sdekis08@gmail.com>
To: Takedown Hammer <takedowns@takedownhammer.com>
Content-Type: multipart/alternative; boundary=089e0129439427fb8304d8e8a3b0

--089e0129439427fb8304d8e8a3b0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

Okay well the pictures have to come off, what's the paypal I send payment
to?

On Tue, Mar 26, 2013 at 7:42 PM, Takedown Hammer <


takedowns@takedownhammer.com> wrote:

> We do not currently offer phone support.


>
>
>
> ----- Receiving the following content -----
> *From:* Shalanna Ekis <sdekis08@gmail.com>
> *Receiver:* Takedown Hammer <takedowns@takedownhammer.com>
> *Time:* 2013-03-26, 17:16:19
> *Subject:* Re: Re: Takedown Request for Shalanna Dong Ekis

3 of 5 3/28/2013 7:13 AM
AnonPaste http://www.anonpaste.me/anonpaste2/index.php?a8ff7de1404ecd48#o4t...

>
> So no name of manager/ Representative then? or a phone number I can talk
> to you all at?
>
> On Tue, Mar 26, 2013 at 1:11 AM, Takedown Hammer <
> takedowns@takedownhammer.com> wrote:
>
>> We use PayPal for payments so you will receive an instant refund if
>> your photos aren't removed.
>>
>> ----- Receiving the following content -----
>> *From:* Shalanna Ekis <sdekis08@gmail.com>
>> *Receiver:* Takedown Hammer <takedowns@takedownhammer.com>
>> *Time:* 2013-03-25, 20:46:41
>> *Subject:* Re: Takedown Request for Shalanna Dong Ekis
>>
>> So is there someone I can call and hold accountable if my photos aren't
>> removed? A manager perhaps? If I'm investing money I want to invest it
>> properly
>>
>> On Monday, March 25, 2013, Takedown Hammer <takedowns@takedownhammer.com=
>
>> wrote:
>> > Takedown Hammer is Takedown Hammer.
>> >
>> > We don't represent people; we provide a third party removal service.
>> >
>> >
>> >
>> > ----- Receiving the following content -----
>> > From: Shalanna Ekis
>> > Receiver: Takedown Hammer
>> > Time: 2013-03-25, 13:08:11
>> > Subject: Re: Takedown Request for Shalanna Dong Ekis
>> > What's your name? Who will be representing me? Should I seek Legal hel=
p?
>> >
>> > On Mon, Mar 25, 2013 at 2:34 PM, Takedown Hammer <
>> takedowns@takedownhammer.com> wrote:
>> >>
>> >> Hello. We have found the content in question.
>> >>
>> >> We can have that content removed for our standard fee of $250.00.
>> >>
>> >> In the event that the content is not removed from or is re-uploaded t=
o
>> isanybodydown.com, you are guaranteed a full refund.
>> >>
>> >> Also, the fee covers sending notices to search engines to remove link=
s
>> to infringing content.
>> >>
>> >> Here are some examples of content that we have had removed recently o=
n
>> behalf of clients:
>> >>
>> >>
>> http://isanybodydown.com/2012/09/19/liz-juneau-from-los-angeles-californ=
ia/
>> >>
>> >>
>> http://isanybodydown.com/2012/08/20/gloria-tomlinson-from-warren-michiga=
n/
>> >>
>> >>

4 of 5 3/28/2013 7:13 AM
AnonPaste http://www.anonpaste.me/anonpaste2/index.php?a8ff7de1404ecd48#o4t...

>> http://isanybodydown.com/2012/09/06/sarah-fong-from-brooklyn-new-york-ci=
ty-new-york/
>> >>
>> >>
>> http://isanybodydown.com/2012/09/10/mallory-pillard-from-willington-conn=
ecticut/
>> >>
>> >> Notice that their content is now gone.
>> >>
>> >> We accept PayPal for payments. Here is the payment link:
>> >>
>> >>
>> https://www.paypal.com/cgi-bin/webscr?cmd=3D_s-xclick&hosted_button_id=
=3D56YKFJRUYA8GW
>> >>
>> >> Please do not use eCheck.
>> >>
>> >> Once your payment has cleared, we will begin the takedown process
>> immediately.
>> >>
>> >> Thanks,
>> >>
>> >> - Takedown Hammer
>> >>
>> >>
>> >>
>> >> ----- Receiving the following content -----
>> >> From: Shana Ekis
>> >> Receiver: takedowns
>> >> Time: 2013-03-25, 11:43:24
>> >> Subject: Takedown Request for Shalanna Dong Ekis
>> >> Hello, My Name is Shalanna Dong Ekis, =E7=87=9F have just learned tha=
t my
>> photographs were posted on a site known as Isanybodydown.com.
>> >>
>> >> I have no idea how they were obtained and would like them removed
>> immediately! I am being harassed by people I dont even know!
>> >>
>> >>
>> http://isanybodydown.com/2013/03/22/shalanna-dong-ekis-from-fairbury-neb=
raska/
>> >>
>> >>
>> >> Please help me, I will pay anything.
>> >>
>> >
>> >
>>
>>
>

5 of 5 3/28/2013 7:13 AM

You might also like