CENTER FORM

CENTER FORM MISSING & EXPLOITED C H I L D R E N' (Addi CyberTipline Report 8365 Priority Level: 3 tional information required to determ Received by NCMEC on 12-15-2020 23:52:05 U All dates are displayed as MM-DD-WYY 8616 ne possible risk) TC Except for times provided in Additional Information sections, all time zones are displayed in UTC Executive Summary The following is a brief overview of information contained in this CyberTipline report: Incident Type: Chil NCMEC incident Typ uploaded files submit I Sex Trafficking p is based on NCMEC's review of the report OR a 'Hash Match' of one or more upl ed by the reporting ESP. aded files. NCMEC may not have viewed all The National Cen 501(c)(3) orgy enforcement, and child sexual explo NCMEC makes ' also uses this inf works with Elec images. NCMEC does not act in ter for Missing & Exploited Children (NCMEC) was incorporated in 1984 by to serve as a national clearinghouse and resource center for fam he public on missing and sexually exploited child issues. To further our rt itation, and prevent future victimization, NCMEC operates the CyberTipfir nformation submitted to the CyberTipline and Child Victim Identification P mation to help identify trends and create child safety and prevention me Ironic Service Providers, law enforcement and the public in a combined e performs its programs of work pursuant to its own private mission and in he capacity of or under the direction or control of the government or law r investigate and cannot verify the accuracy of the information submitter by child advocates as a private, non-profit lies, victims, private organizations, law Ission to help find missing children, reduce e and Child Victim Identification Program. rogram available to law enforcement and ssages. As a clearinghouse, NCMEC also ffort to reduce online child sexual abuse dependent business operations. NCMEC nforcement agencies. NCMEC does not by reporting parties. EFTA00129101 Contents CyberTipline Report 83658616 I i Section A: Reported Information 1 Reporting Person Incident Information 1 Other Section B: Automated Information Added by NCMEC Systems 2 Explanation of Automated Information (in alphabetical order) 2 Section C: Additional Information Provided by NCMEC 3 NCMEC Note #1 NCMEC Note #2 NCMEC Note #3 NCMEC Note #4 Supplemental Files Section Law Enforcement Contact Information _CSTT_Fl3I (Alexandria) 3 3 3 6 6 8 8 This Report is provided solely for informational purposes pursuant to NC EC's nonprofit mission. Please treat all information in this Report as confider) EFTA00129102 CyberTipline Report 8365861611 Section A: Reported Information The following information was submitted to the CyberTipline by the Reporting Person or Reporting ESP. The information appearing in Section A is information received in the original submission. The reporting of information in Section A, other than the 'Incident Type' and 'Incident Time," is voluntary and undertaken at the initiative of the Reporting Person or Reporting ESP. Submitter. Reporting Person Kathryn Phone: IP Address: Received by on 2-15-2020 23:52:05 UTC Incident Type: Incident Time: Incident Information Child Sex Trafficking 12-15-2020 23:49:00 UTC Other Additional Information: Epsteins private group is still active and Jennifer Dee young is the ringleader. Who is Destiny in Tampa, FL, This concludes Section A. All of the information in this section was submitted electronically to the CyberTipline by the Reporting Person, NCMEC Call Center or Reporting ESP. The information appearing in Section A is information received in the original submission. The reporting of information in Section A, other than the "Incident Type' and "Incident Time," is voluntary and undertaken at the initiative of the Reporting Person or Reporting ESP. 1 This Report is provided solely for informational purposes pursuant to NC EC's nonprofit mission Please Veal all information in this Report as conflden le EFTA00129103 CyberTipline Report 83658616 12 Section B: Automated Information Added by NCMEI Systems Upon receipt of a CyberTipline report, NCMEC Systems may conduct automated processes on the information submitted in Section A. The information found in Section B of this CyberTipline Report has been automatically generated by NCMEC Systems. If the CyberTipline Report was submitted by a member of the public, Section B will be blank. Geo-Looicup: Whe the IP address via Geolocafion data i is not exact but is Explanation of Automated Information (in alphabelcal order) la Reporting ESP voluntarily reports an IP address for the 'Suspect," NC a publicly-available online query. The results of this lookup are displayed. ; approximate and may not display a user's exact location. Please be awa iroviding a reliable estimate of location based on IP address(es) voluntaril This concludes Section B MEC Systems will geographically resolve e that the geolocation information provided provided by the reporting ESP. This Report is proWield solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential. EFTA00129104 KISS az rxPLCntD CyberTipline Report 83658616 13 Section C: Additional Information Provided by NCM C Section C contains information collected by NCMEC staff based on the information electronically submitted by the Reporting Person, NCMEC Call Center or Reporting ESP. Section C may contain a variety of additional information, including data gathered from queries on publicly-available, open-source websites. Any queries conducted by NCMEC staff will be documented and any query results will be saved to the electronic filing system when possible. The CyberTipline cannot confirm the accuracy of information found in public records or whether the results are affiliated with any parties relating to this report NCMEC Priority Le NCMEC Classification': NCMEC Date Processed: Made Available to Law Enforcement by NCMEC: NCMEC Classdicaaoi uploaded files submit CSTT-SEF 12-17- 3 (Additional information required to di Child Sex Trafficking 12-17-2020 21:57:07 UTC Yes termine possible risk) is based on NCMEC's review of the report OR a -Hash Match- of one or more uploaded files. NCMEC may not have viewed all ed by the reporting ESP. NCMEC Note #1 020 21:35:13 UTC This CyberTipline Report was processed by the Child Sex Trafficking Team (CSTT) in the Case Analysis Division. Should you have any questions regarding this report, or need any technical assistance pertaining to child sex trafficking, please contact us at o rg. Any open source and/or public record searches conducted by NCMEC will be documented within this report and saved to the electronic filing system. The NCMEC cannot confirm the accuracy of information found in public records or whether the results are associated with any of the parties affiliated with this report. Please note, the re deconfliction on re within the narrative porting party's narrative appears to be disjointed and difficult to understan want terms listed within the narrative, at this time. If you would like additic please e-mail org with this request. NCMEC Note #2 CSTT-SEF 12-17-2020 21:38:56 UTC At this time I will conduct searches on the reported information. therefore, I will only conduct nal searches on the information listed I searched for previous reports known to the Exploited Child Division and other NCMEC Databases (Sex Offender Tracking Team, Missing Children's Database and Attempted Abductions) on the following terms: I did not locate any results at this time. NCMEC Note #3 This Report is provided solely for informational purposes pursuant to NCMEC's nonprofit mission. Please treat all information in this Report as confidential. EFTA00129105 t ti CyberTipline Report 83658616 14 CSTT-SEF 12-17-2020 21:41:09 UTC At this time I will conduct searches on the reporting party. I searched for previous reports known to the Exploited Child Division and other NCMEC Databases (Sex Offender Tracking Team, Missing Children's Database and Attempted Abductions) on the following terms: "Kathryn Dee" I did not locate any results at this time. WHOIS lookup for :WHOIS lookup for IP and Network lookup information: Address lookup canonical name 120 . sub-174-228-8 myww.com aliases addresses Network Whois record Queried whois.arin.net with NetRange: CIDR. NetName: WIRELESSDATANETWORK NetHandle: NET-174-192-0-0-1 Parent: NET174 (NET-174-0-0-0-0) NetType: Direct Allocation OriginAS: Organization: Calico Partnership DBA Verizon Wireless (CLLC) RegDate: 2008-12-16 Updated: 2012-03-02 Ref: https://rdap.arin.neffregistryfip/174.192.0.0 OrgName: Cellco Partnership DBA Verizon Wireless Orgld: CLLC Address: 180 Washington Valley Road City: Bedminster This Report is provided solely for Informational purposes pursuant to NefifEtts nonprofit mission. Please treat all information in this Report as confldencial. EFTA00129106 CyberTipline Report 8365861615 StateProv: NJ PostalCode: 07039 County: US RegDate: 2001-10-01 Updated: 2017-10-12 Ref. https://rdap.arin.netiregistrytentity/CLLC OrgAbuseHandle: ABUSE716-ARIN OrgAbuseName: Abuse OrgAbusePhone: +1-908-306-7000 OrgAbuseEmail: abuse@verizonwireless.com OrgAbuseRef: Mtps://rdap.arin.nel/registry/entity/ABUSE716-ARIN OrgTechHandle: NDBM-ARIN OrgTechName: NDBM OrgTechPhone: +1-908-306-7000 OrgTechEmail: VZWNDBMIPControl@VerizonVVireless.com OrgTechRef: https://rdap.arin.nethegistry/entity/NDBM-ARIN DNS records name class type data time to live 120.sub-174-228-8.myvzw.com IN A 7200s (02:00:00) sub-174-228-8.myrzw.com IN NS nsl.vzwdomain.com 7200s (02:00:00) sub-174-228-8.myyzw.com IN NS ns2.yzwdomain.com 7200s (02:00:00) sub-174-228-8.mraw.com IN SOA server njbbintdnslv.local email: vzw.net.dnsr•.-verizonwireless.com serial: 2009012822 refresh: 86400 retry: 7200 expire: 1209600 minimum ttl: 900 7200s (02:00:00) myvzw.com IN NS ns1.vzwdomain.com 7200s (02:00:00) myvzw.com IN NS ns2.vzwdomain.com 7200s (02:00:00) myvzw.com IN A 207.68.174.238 7200s (02:00:00) myvzw.com IN SOA server njbbintdns1v.local email: vzw.neldns verizornvireless.corn serial: 2012104588 refresh: 43200 retry: 7200 expire: 1209600 minimum ttl: 10800 7200s (02:00:00) 120.8.228.174.in-addr.ama IN PTR 120.sub-174-228-8.myvzw.com 1446s (00:24:06) 228.174.in-addr.arpa IN NS ns2.vzwdomain.com 7200s (02:00:00) 228.174.in-addr.arpa IN NS nstvzwdomain.com 7200s (02:00:00) 228.174.in-addr.arpa IN SOA server: njbbinWns1v.local email: vzw.net.dnsigverizonvelreless.com serial: 281 refresh: 86400 retry: 7200 expire: 1209600 minimum ttl: 900 7200s (02:00:00) Traceroute Tracing route to 120.sub-174.228-8.myvzw.com name 1 2 1 1 169.254.158.58 2 1 1 0 169.48.118.156 ae103.ppr01.dal13.netwoddayer.com 3 0 0 0 169.48.118.136 88.76.30a9.ip4.static.sl-reverse.com 4 • 3 169.45.18.88 ae17.cbs01.eq01.dal03.networldayer.com 5 1 1 1 50.97.17.53 ae33.bbr0l.egOl.da103.networklayer.com 6 1 1 1 64.125.192.21 ae9.er2.dfw2.us.zip.zayo.corn 7 1 1 1 64.125.27.104 ae24.cs2.d1w2.us.zip.zayo.com 8 9 1 1 1 64.125.14.253 zayo.vdms.er2.ord7.us.zip.zayo.com 10 ' • • 11 • • • 12 41 39 40 69.82.18.181 181.sub-69-82-18.myv-zw.com 13 hop It rtt rtt ip address fully qualified domain This Report is provided solely for informational purposes pursuant to NCMECs nonprofit mission. Please treat all information in this Report as confidential. EFTA00129107 k4 CyberTipline Report 83658616 l 6 14 • • 15 • • 16 • • Trace aborted Maxmind Geographic Results: Country: US Region: City: Postal Code: =I Latitude: Longitude: Metropolitan Code: ISP: Venzon Wireless Organization: Verizon Wireless Types: cellular Google Geographic Results: Country: US Latitude Longitude Area: 170.554.7969 sq. km. (65.851.5755 sq. miles) mop•ti WgigffiitmEC Note #4 CSTT-SEF 12-17-2020 21:41:20 UTC The following Point of Contact has been sent a copy of this CyberTipline report: FBI: Federal Bureau of Investigation Emei Desk Cell: cc: FBIInnocenceLost@ic.fbi.goy Questions regarding Innocence Lost and national intelligence may be addressed to Supplemental Files The following is a list of supplemental files saved to the report by NCMEC CTT83658616.pdf This Report Is provided solely for informational purposes pursuant to NCA4EC's nonprofit mission. Please treat all information in this Report as confidential. EFTA00129108 This concludes Section C CyberTipline Report 83658616 17 If you need further Information regarding the contents of this Report. please contact the ChM Sex Traffiddng Team at This Report is provided solely for informational purposes pursuant to NC C's nonprofit mission. Please treat ell information in this Report as confiderel. EFTA00129109 CyberTipline Report 83658616 18 Section D: Law Enforcement Contact Information The report was made available to the Law Enforcement Agency fisted below. _CSTT_FB1 (Alexandria) Investigator Assigned Officer Title: City/State: Alexandria. VA Country: t Initori %fabric Email Address: Time/Date was made available: 12-17-2020 21:55:00 UTC This concludes Section D This concludes CyberTipline Report 83858816 This Report Is provided solely for informational purposes pursuant to NCMtCs nonprofit mission. Please treat all information in this Report as confidenti1. EFTA00129110