Article Lead Image

Hacker claims revenge porn site created fake lawyer to extort victims

A hacktivist called Funny Bear has posted purported evidence that the operator of a revenge porn site and the lawyer who helps victims get their photos removed are actually the same person.

 

Chase Hoffberger

Society

Posted on Mar 27, 2013   Updated on Jun 1, 2021, 8:20 pm CDT

An Anonymous hacktivist claims to have proof that Craig Brittain and Chance Trahan, the two individuals behind revenge porn site IsAnybodyDown, are creating false identities and extorting victims whose nude photos appeared on the site without their consent.

Not surprisingly, the evidence comes down to localizing IP addresses.

Funny Bear, a self-described anti-bully advocate “with a peculiar set of skills,” attached tracking codes to naked pictures of two women and sent them to Brittain and Trahan’s website,  IsAnybodyDown.com. Copying the model made popular by revenge porn site IsAnybodyUp, IsAnybodyDown publishes nude photos once deemed to be private.

The photos are sent from third parties to the site’s administrators and posted online, where their presence is protected by the Communications Decency Act, which protects a site’s owners from legal action based on what its users submit.

Funny Bear basically reenacted what any other submitter would do, except that the photos he sent came packaged with these tracking codes, codes that, Funny Bear attests, send a report every time someone opens an email containing the pictures.

Those codes would also, according to Funny Bear, reveal the IP addresses of anyone who took the bait opened the nudie-pic emails.

Funny Bear believed that if could tie the IP address behind Brittain’s email account to the IP address of David Blade, the supposed New York City attorney behind Takedown Hammer—the “independent third party team” responsible for removing pictures from Brittain’s site for $250 a pop—he could implicate Brittain and his partner in a case of extortion.

Brittain would be Blade, essentially. There would be no New York lawyer.

Funny Bear’s first email, which contained “pictures pertaining to Shalanna Dong Ekis,” was sent from a personal address to submit@isanybody.com, an address that, despite its ambiguity, purports to be managed by Craig Brittain on the IsAnybodyDown.com website.

“I knew I had his home IP but I wanted to make sure since I knew he was in hiding from his previous home address,” Funny Bear wrote. “So I made the email JWithers0508@gmail.com and sent another set of pictures ‘borrowed’ from pinkmeth.doxing.me [another revenge porn site] of Sandra Gregor to submit@isanybodydown.com.”

“2 weeks later they have been opened by the same home IP address and uploaded to the site,” Funny Bear concluded. Brittain’s home IP address was confirmed.

“Now for the good part.”

The hacktivist’s next move involved making an email address for Shalanna Dong Ekis and submitting a takedown request to Takedown Hammer.

What he discovered was that the email was opened from the same IP address in Colorado Springs as the two previous emails containing the stolen photos.

“It MUST be the same person reviewing both submissions, and takedown requests,” Funny Bear concluded.

If Funny Bear’s evidence is genuine, it appears David Blade does not reside in New York City.

Funny Bear attached the entire string of emails sent between his pseudonyms and those belonging to Brittain to a Pastebin document, which you can read here. What’s most notable is that the individual sending the emails from the Takedown Hammer account refuses to provide Funny Bear with any name at all, even Blade’s.

The Daily Dot has reached out to both IsAnybodyDown and TakedownHammer via email, but we have yet to receive a response.

UPDATE: We asked Funny Bear to send us an email that tacked the same tracking device attached to the phony IsAnybodyDown emails onto ours. If Funny Bear could properly determine our IP address through our opening of an email, the Anon’s Pastebin document accusing Craig Brittain of being David Blade would hold more water.

Funny Bear sent us an email that we responded to with excitement. A few minutes later, we received a Twitter DM with our IP address as well as geographical coordinates and a mention of our Internet Service Provider. 

“The important part would be the IP address for subpoena purposes,” Funny Bear wrote. “There’s no denying Craig is the Takedown Hammer.”

Photo via IsAnybodyDown

Share this article
*First Published: Mar 27, 2013, 3:41 pm CDT