Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- ___ _ _
- /___\_ __ /\ /\_ _ _ __ | |_ /\ /\_ _ _ __ | |_ ___ _ __
- // // '_ \ / /_/ / | | | '_ \| __|/ /_/ / | | | '_ \| __/ _ \ '__|
- / \_//| |_) / __ /| |_| | | | | |_/ __ /| |_| | | | | || __/ |
- \___/ | .__/\/ /_/ \__,_|_| |_|\__\/ /_/ \__,_|_| |_|\__\___|_|
- |_|
- ____ __. .__ .__ __ _________
- | |/ _| ____ |__| ____ | |___/ |_/ _____/ ____ ____
- | < / \| |/ ___\| | \ __\_____ \_/ __ \_/ ___\
- | | \| | \ / /_/ > Y \ | / \ ___/\ \___
- |____|__ \___| /__\___ /|___| /__|/_______ /\___ >\___ >
- \/ \/ /_____/ \/ \/ \/ \/
- Greetings citizens of the world, We are anonymous, We are KnightSecc. You have followed our resounding success with Op Hunt Hunter. Today we anounce a new target to be added to the campaign. Craig Brittain and Chance Trahan of is anybody down dot com. He also posts addresses enabling stalking, but takes it a step further and uses extortion tactics to take money from the victims.
- Is Anybody Down is a controversial website co-founded by Craig Brittain and Chance Trahan where users can anonymously upload nude photographs along with information identifying the person in the photograph including full names, addresses, phone numbers, and Facebook screenshots. The site also contains a section of nude photographs titled "Anonymous Bounty", where users are offered "free stuff" if they can provide the Facebook or Twitter information of any of the people pictured. In concept, the website recapitulates the now-defunct IsAnyoneUp?, which was shut down in April of 2012, shortly before an FBI investigation into the propriety of the site.
- For anyone wishing to have their photo removed from Is Anybody Down, the website recommends they enlist the services of the "Takedown Hammer". Prior to November 2nd, this service had been referred to as the "Takedown Lawyer" and required complainants pay between $200 and $300 to the allegedly independent "Takedown Lawyer" to have the offending content removed. It was found that the Takedown Lawyer was none other than Craig Brittain trying to extort money out of the helpless victims, since then the takedown lawyer ahs then been renamed Takedown Hammer and is registered to none other than Craig Brittain.
- Marc Randazza, a prominent first amendment lawyer, has compiled evidence that the two sites are part of the same operation. He is offering to take the case of anyone whose images were displayed on IsAnybodyDown without permission.
- Craig Brittain, the founder of Is Anybody Down, stated that people who never gave consent to have their photos displayed are "not really upset about being seen naked" and are "not victims". Brittain claims the site is part of a larger progressive agenda to destigmatize nudity.
- Anonymous will Hold Craig and those affliated accountable for their actions as we have done and are currently doing to hunter moore during the op hunt hunter campaign. Anonymous will pursue access to his site, and shut it down. Craig Brittain will not extort money from the already struggling public. He will feel the pain others have felt. Craig Brittain, We are anonymous, We are Knight Secc, We do not forgive, we do not forget, expect us.
- how to join the class action lawsuit against them and be represented for free: http://randazza.wordpress.com/2012/10/30/lets-fuck-up-david-blade-attorney-at-law-and-isanybodydown-com-whos-with-me/
- List of all W-P Logins so far: http://pastebin.com/CsDCGZxE
- --------------------------------------=--Begin D0x of Craig Brittain ------------------------------------
- D0X OF ISANYBODYDOWN.COM FOUNDER CRAIG BRITTAIN
- _____ _ ______ _ _ _ _
- / __ \ (_) | ___ \ (_) | | | (_)
- | / \/_ __ __ _ _ __ _ | |_/ /_ __ _| |_| |_ __ _ _ _ __
- | | | '__/ _` | |/ _` | | ___ \ '__| | __| __/ _` | | '_ \
- | \__/\ | | (_| | | (_| | | |_/ / | | | |_| || (_| | | | | |
- \____/_| \__,_|_|\__, | \____/|_| |_|\__|\__\__,_|_|_| |_|
- __/ |
- |___/
- Photo: http://a2.ec-images.myspacecdn.com/images02/114/d42836f8276e421188c5b240a302f9b4/l.jpg
- Name: Craig Brittain
- Address: 2732 Kittyhawk Rd
- Colorado Springs, CO 80920
- United States
- Emails: craig@719x.com
- Phone: +1 7192913997
- Social Media:
- http://www.myspace.com/unholycraig
- http://www.linkedin.com/in/craigbrittain
- Photo of email to a person - http://adamsteinbaugh.com/wp-content/uploads/2012/10/nocomment.jpg
- Felony Record:
- http://www.popehat.com/wp-content/uploads/2012/10/Craig-Brittain-Felony-Record.pdf
- Login portal for TakedownHammer: http://takedownhammer.com/wp-login.php?redirect_to=http%3A%2F%2Ftakedownhammer.com%2Fwp-admin%2F&reauth=1
- ---------------------------------------Begin D0x of Chance Trahan----------------------------------------
- D0X OF ISANYBODYOWN.COM C0-FOUNDER CHANCE TRAHAN
- _____ _ _____ _
- / __ \ | |_ _| | |
- | / \/ |__ __ _ _ __ ___ ___ | |_ __ __ _| |__ __ _ _ __
- | | | '_ \ / _` | '_ \ / __/ _ \ | | '__/ _` | '_ \ / _` | '_ \
- | \__/\ | | | (_| | | | | (_| __/ | | | | (_| | | | | (_| | | | |
- \____/_| |_|\__,_|_| |_|\___\___| \_/_| \__,_|_| |_|\__,_|_| |_|
- FULL NAME: CHANCE BRADFORD TRAHAN
- LOCATION: TEMPE, AZ
- AGE: 32
- W3b51t3s:
- http://heygreatwebsite.com/chance-trahan/
- http://www.kataishin.com
- http://ninjatale.com/
- L0g1n p0rtalz :
- http://heygreatwebsite.com/wp-login.php
- B4D PR355
- http://satiricalcraigbrittain.wordpress.com/2/11/12/chance-trahan-has-an-itch-he-can-not-scratch/
- http://www.popehat.com/2012/10/30/the-takedown-lawyer-lets-help-marc-randazza-investigate-a-scammer-shall-we/#more-16564
- Soc14l n3Tw3rK5:
- TWITTER: @KataishinNinja @TalonLives
- YOUTUBE: www.youtube.com/user/kataishin
- GOOGLE+: https://plus.google.com/117726813386437696115
- FACEBOOK PAGE: http://www.facebook.com/pages/Chance-Trahan/487301254621807
- SOUNDCLOUD: https://soundcloud.com/kataishin (warning, prepare to drill your ears with a knife)
- LAST.FM: http://www.last.fm/music/kataishin
- SONGKICK: http://www.songkick.com/artists/6006939
- BRANDYOURSELF: http://chancebradfordtrahan.brandyourself.com/
- FUNNYORDIE: http://www.funnyordie.com/theninja
- MYSPACE: http://www.myspace.com/newestkaraoke
- He is quite a rager isn't he?
- http://i.imgur.com/tu8xD.png
- http://www.popehat.com/wp-content/uploads/2012/11/ChanceTrahan-480x562.png
- Scan of Kataishin.com reveals that trahan and isanybody down site are hosted on same server, same IP
- DDOS the server and both sites down.
- ---------------------------------------Begin Scan of http://isanybodydown.com-------------------------------
- Login Portal : http://isanybodydown.com:2082/
- Username:
- Password:
- IP Address: 93.114.44.79
- Vulnerable Ports:
- Scan Data:
- NSE: Loaded 93 scripts for scanning.
- NSE: Script Pre-scanning.
- Initiating Ping Scan at 17:04
- Scanning 93.114.44.79 [4 ports]
- Completed Ping Scan at 17:04, 0.49s elapsed (1 total hosts)
- Initiating Parallel DNS resolution of 1 host. at 17:04
- Completed Parallel DNS resolution of 1 host. at 17:04, 0.37s elapsed
- Initiating SYN Stealth Scan at 17:04
- Scanning wc19801.webcare360.com (93.114.44.79) [1000 ports]
- Discovered open port 993/tcp on 93.114.44.79
- Discovered open port 22/tcp on 93.114.44.79
- Discovered open port 143/tcp on 93.114.44.79
- Discovered open port 21/tcp on 93.114.44.79
- Discovered open port 110/tcp on 93.114.44.79
- Discovered open port 443/tcp on 93.114.44.79
- Discovered open port 53/tcp on 93.114.44.79
- Discovered open port 80/tcp on 93.114.44.79
- Discovered open port 995/tcp on 93.114.44.79
- Discovered open port 587/tcp on 93.114.44.79
- Discovered open port 3306/tcp on 93.114.44.79
- Discovered open port 16992/tcp on 93.114.44.79
- Discovered open port 465/tcp on 93.114.44.79
- Discovered open port 9091/tcp on 93.114.44.79
- Completed SYN Stealth Scan at 17:05, 6.66s elapsed (1000 total ports)
- Initiating Service scan at 17:05
- Scanning 14 services on wc19801.webcare360.com (93.114.44.79)
- Completed Service scan at 17:05, 25.20s elapsed (14 services on 1 host)
- Initiating OS detection (try #1) against wc19801.webcare360.com (93.114.44.79)
- Retrying OS detection (try #2) against wc19801.webcare360.com (93.114.44.79)
- Initiating Traceroute at 17:05
- Completed Traceroute at 17:05, 0.05s elapsed
- Initiating Parallel DNS resolution of 2 hosts. at 17:05
- Completed Parallel DNS resolution of 2 hosts. at 17:05, 0.01s elapsed
- NSE: Script scanning 93.114.44.79.
- Initiating NSE at 17:05
- Completed NSE at 17:05, 6.65s elapsed
- Nmap scan report for wc19801.webcare360.com (93.114.44.79)
- Host is up (0.0075s latency).
- Not shown: 985 closed ports
- PORT STATE SERVICE VERSION
- 21/tcp open ftp Pure-FTPd
- | ssl-cert: Subject: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Issuer: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Public Key type: rsa
- | Public Key bits: 2048
- | Not valid before: 2012-08-27 15:07:54
- | Not valid after: 2013-08-27 15:07:54
- | MD5: ac55 5bb4 3a8c d178 ef52 0821 ab0a d377
- |_SHA-1: 4e5b 573a a215 2188 d8f4 52a6 3ee0 b690 d11e 6f85
- 22/tcp open ssh OpenSSH 5.3 (protocol 2.0)
- | ssh-hostkey: 1024 d1:05:ea:d3:68:34:b5:c3:0f:41:1e:ad:3c:88:dd:f9 (DSA)
- |_2048 80:7d:31:f7:87:86:4e:67:b4:5f:5e:03:cd:38:10:2f (RSA)
- 25/tcp filtered smtp
- 53/tcp open domain
- | dns-nsid:
- |_ bind.version: 9.8.2rc1-RedHat-9.8.2-0.10.rc1.el6_3.6
- 80/tcp open http Apache httpd 2.2.22 ((Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_bwlimited/1.4 mod_fcgid/2.3.6)
- | http-methods: GET HEAD POST OPTIONS TRACE
- | Potentially risky methods: TRACE
- |_See http://nmap.org/nsedoc/scripts/http-methods.html
- |_http-title: Site doesn't have a title (text/html).
- 110/tcp open pop3 Dovecot pop3d
- |_pop3-capabilities: USER CAPA UIDL TOP OK(K) RESP-CODES PIPELINING STLS SASL(PLAIN LOGIN)
- 143/tcp open imap Dovecot imapd
- |_imap-capabilities: LOGIN-REFERRALS QUOTA AUTH=PLAIN LIST-STATUS CHILDREN CONTEXT=SEARCH THREAD=REFERENCES UIDPLUS SORT IDLE MULTIAPPEND CONDSTORE ESEARCH Capability UNSELECT IMAP4rev1 AUTH=LOGIN ID WITHIN QRESYNC LIST-EXTENDED SORT=DISPLAY THREAD=REFS STARTTLSA0001 OK completed SEARCHRES ENABLE I18NLEVEL=1 LITERAL+ ESORT SASL-IR NAMESPACE
- 443/tcp open http Apache httpd 2.2.22 ((Unix) mod_ssl/2.2.22 OpenSSL/1.0.0-fips mod_bwlimited/1.4 mod_fcgid/2.3.6)
- |_http-title: Site doesn't have a title (text/html).
- | http-methods: GET HEAD POST OPTIONS TRACE
- | Potentially risky methods: TRACE
- |_See http://nmap.org/nsedoc/scripts/http-methods.html
- 465/tcp open ssl/smtp Exim smtpd 4.80
- | smtp-commands: wc19801.webcare360.com Hello adsl-184-43-24-203.bgk.bellsouth.net [184.43.24.203], SIZE 52428800, 8BITMIME, PIPELINING, AUTH PLAIN LOGIN, HELP,
- |_ Commands supported:
- | ssl-cert: Subject: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Issuer: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Public Key type: rsa
- | Public Key bits: 2048
- | Not valid before: 2012-08-27 15:07:54
- | Not valid after: 2013-08-27 15:07:54
- | MD5: 5c69 e26f 4772 d383 6ffd 6ddf 486a b28e
- |_SHA-1: 3f87 6ca6 e688 111d be48 023c e94f 1fce 056a 460e
- 587/tcp open smtp Exim smtpd 4.80
- | smtp-commands: wc19801.webcare360.com Hello adsl-184-43-24-203.bgk.bellsouth.net [184.43.24.203], SIZE 52428800, 8BITMIME, PIPELINING, AUTH PLAIN LOGIN, HELP, STARTTLS,
- |_ Commands supported: AUTH HELO EHLO MAIL RCPT DATA NOOP QUIT RSET HELP
- | ssl-cert: Subject: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Issuer: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Public Key type: rsa
- | Public Key bits: 2048
- | Not valid before: 2012-08-27 15:07:54
- | Not valid after: 2013-08-27 15:07:54
- | MD5: 5c69 e26f 4772 d383 6ffd 6ddf 486a b28e
- |_SHA-1: 3f87 6ca6 e688 111d be48 023c e94f 1fce 056a 460e
- 993/tcp open ssl/imap Dovecot imapd
- |_imap-capabilities: LOGIN-REFERRALS completed OK SORT=DISPLAY Capability UNSELECT AUTH=PLAIN AUTH=LOGINA0001 IMAP4rev1 QUOTA CONDSTORE LIST-STATUS ID SEARCHRES WITHIN CHILDREN LIST-EXTENDED ESORT ESEARCH QRESYNC CONTEXT=SEARCH THREAD=REFS THREAD=REFERENCES I18NLEVEL=1 UIDPLUS NAMESPACE ENABLE SORT LITERAL+ IDLE SASL-IR MULTIAPPEND
- |_sslv2: server supports SSLv2 protocol, but no SSLv2 cyphers
- | ssl-cert: Subject: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Issuer: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Public Key type: rsa
- | Public Key bits: 2048
- | Not valid before: 2012-08-27 15:07:55
- | Not valid after: 2013-08-27 15:07:55
- | MD5: eac5 2a12 98a0 00a6 6386 8273 ac91 d7bc
- |_SHA-1: bfa6 fc66 17f2 7ea2 0bbe 1b68 048d 77dc 11af c28a
- 995/tcp open ssl/pop3 Dovecot pop3d
- |_sslv2: server supports SSLv2 protocol, but no SSLv2 cyphers
- | ssl-cert: Subject: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Issuer: commonName=wc19801.webcare360.com/organizationName=Unknown/stateOrProvinceName=Unknown/countryName=US
- | Public Key type: rsa
- | Public Key bits: 2048
- | Not valid before: 2012-08-27 15:07:55
- | Not valid after: 2013-08-27 15:07:55
- | MD5: eac5 2a12 98a0 00a6 6386 8273 ac91 d7bc
- |_SHA-1: bfa6 fc66 17f2 7ea2 0bbe 1b68 048d 77dc 11af c28a
- |_pop3-capabilities: OK(K) CAPA RESP-CODES UIDL PIPELINING USER TOP SASL(PLAIN LOGIN)
- 3306/tcp open mysql MySQL (unauthorized)
- 9091/tcp open xmltec-xmlmail?
- 16992/tcp open http Intel Active Management Technology User Notification Service httpd 7.1.3
- | http-title: Intel® Active Management Technology
- |_Requested resource was http://93.114.44.79/logon.htm
- OS fingerprint not ideal because: Host distance (28 network hops) is greater than five
- No OS matches for host
- Uptime guess: 2.687 days (since Sun Dec 09 00:37:04 2012)
- Network Distance: 2 hops
- TCP Sequence Prediction: Difficulty=260 (Good luck!)
- IP ID Sequence Generation: All zeros
- TRACEROUTE (using port 80/tcp)
- HOP RTT ADDRESS
- 1 4.00 ms home (192.168.1.254)
- 2 2.00 ms wc19801.webcare360.com (93.114.44.79)
- NSE: Script Post-scanning.
- Initiating NSE at 17:05
- Completed NSE at 17:05, 0.00s elapsed
- Read data files from: C:\Program Files (x86)\Nmap
- OS and Service detection performed. Please report any incorrect results at http://nmap.org/submit/ .
- Nmap done: 1 IP address (1 host up) scanned in 48.67 seconds
- Raw packets sent: 1097 (50.520KB) | Rcvd: 1118 (47.089KB)
- --------------------------------Proof TakedownHammer is Brittains----------------------------------------
- WHOIS:
- domain: takedownhammer.com
- reg_created: 2012-10-31 05:46:42
- expires: 2013-10-31 05:46:42
- created: 2012-10-31 06:46:43
- changed: 2012-10-31 06:53:23
- transfer-prohibited: yes
- ns0: ns1.takedownhammer.com 93.114.44.79
- owner-c:
- nic-hdl: CB9188-GANDI
- organisation: ~
- person: Craig Brittain
- obfuscated: Obfuscated by Gandi
- address: (Gandi) 63-65 boulevard Massena
- zipcode: (Gandi) 75013
- city: (Gandi) Paris
- country: (Gandi) France
- phone: (Gandi) +33.170377666
- fax: (Gandi) +33.143730576
- email:
- lastupdated: 2012-06-19 21:19:48
- admin-c:
- nic-hdl: CB9188-GANDI
- organisation: ~
- person: Craig Brittain
- obfuscated: Obfuscated by Gandi
- address: (Gandi) 63-65 boulevard Massena
- zipcode: (Gandi) 75013
- city: (Gandi) Paris
- country: (Gandi) France
- phone: (Gandi) +33.170377666
- fax: (Gandi) +33.143730576
- email:
- lastupdated: 2012-06-19 21:19:48
- tech-c:
- nic-hdl: CB9188-GANDI
- organisation: ~
- person: Craig Brittain
- obfuscated: Obfuscated by Gandi
- address: (Gandi) 63-65 boulevard Massena
- zipcode: (Gandi) 75013
- city: (Gandi) Paris
- country: (Gandi) France
- phone: (Gandi) +33.170377666
- fax: (Gandi) +33.143730576
- email:
- lastupdated: 2012-06-19 21:19:48
- bill-c:
- nic-hdl: CB9188-GANDI
- organisation: ~
- person: Craig Brittain
- obfuscated: Obfuscated by Gandi
- address: (Gandi) 63-65 boulevard Massena
- zipcode: (Gandi) 75013
- city: (Gandi) Paris
- country: (Gandi) France
- phone: (Gandi) +33.170377666
- fax: (Gandi) +33.143730576
- email:
- lastupdated: 2012-06-19 21:19:48
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement