EFTA Document EFTA01342942

Extracted Text (OCR)

EFTA Disclosure

Text extracted via OCR from the original document. May contain errors from the scanning process.

MOBILITY 4Iiib AT&T AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4 \---s""s e AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in lit OTC. Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 a Conn. Seizure Time Time CUTC) ST Originating Terminating Number Number MORI INSI CT Feature 1 03/01/20 19:58:27 0:09 0:00 NM 2 03/02/20 16:34:38 0:03 0:00 MO 3 03/02/20 16:35:15 0:10 0:00 MT (1 4 03/02/20 16:35:19 0:24 0:00 MO 5 03/02/20 16:36:05 0:06 0:00 MT (NIORI 6 03/02/20 16:36:05 0:07 0:00 MO 7 03/02/20 16:36:53 0:09 0:47 MO 8 03/02/20 16:43:46 0:09 0:04 MT 9 03/02/20 16:44:06 0:06 2:06 MO 10 03/03/20 21:36:01 0:07 30:41 MO 11 03/04/20 18:52:26 0:08 1:40 MT 12 03/04/20 19:46:37 0:20 0:05 MO 13 03/04/20 22:07:25 0:05 47:57 MO 14 03/04/20 23:04:25 0:03 0:39 MO 15 03/05/20 00:56:24 0:33 0:00 MO AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 1 SDNY_GM_00170884 EFTA01342942 .111020 MOBILITY S AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm "‘" ss° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in \C ite UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Time Tine (UTc) Er Originating Terminating SRI INBI Cr Member Number Feature 16 03/05/20 00:58:14 0:07 0:26 MT (Ni-ri:NIOPI 17 03/05/20 13:22:45 0:11 1:13 NO (Ni-ri:MIORI 18 03/05/20 14:04:59 0:20 0:00 MT (NIOPI 19 03/05/20 15:49:47 0:29 0:00 MT (Ni-ri:NIOPI 20 03/05/20 15:49:48 0:30 0:01 MT (MI - ri:NIOP:CFNA:VM] 21 03/05/20 15:50:04 0:08 0:00 MT (MI -fi:NI081 22 03/05/20 17:14:12 0:02 0:34 MO CM/ -fi:NIOA1 23 03/05/20 17:15:32 0:07 0:00 MO 24 03/05/20 18:27:34 0:19 0:05 MO 25 03/05/20 18:29:16 0:20 0:04 MO 26 03/05/20 18:42:42 0:20 0:03 MO 27 03/05/20 20:38:46 0:10 9:04 MO (VCORAI 28 03/05/20 20:51:35 0:05 0:00 MO (1 29 03/06/20 15:08:17 0:04 1:07 NO (W1-81:N101:1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 SDNY_GM_00170885 EFTA01342943 .111020 MOBILITY `~~ AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 NM= Conn. Seizure Tim Sum (USC) CT Originating Terminating DC IM8I Cr Number number Feature 30 03/06/20 20:02:56 0:20 0:05 MO [Ni-fil 31 03/06/20 20:51:24 0:03 0:58 MO [Ni-fi:NIOA1 32 03/06/20 21:03:38 0:14 0:00 MT [Ni-fi:NIOPI 33 03/06/20 21:04:01 0:08 0:00 MT [Ni-fi:NIOPI 34 03/06/20 21:04:33 0:03 0:16 MO [Ni-fi:NIOAI 35 03/06/20 21:09:32 0:03 0:51 MO [Ni-fi:NIOAI 36 03/06/20 21:32:36 0:03 1:11 MO [Ni-fi:NIOAI 37 03/07/20 00:02:25 0:13 0:00 MT (1 38 03/07/20 00:02:25 0:24 0:00 ST [HIM 39 03/07/20 00:02:26 0:25 0:05 ST (NIOP:CfNA:VM] 40 03/07/20 16:17:45 0:15 0:00 ST (NIOPI 41 03/07/20 18:21:38 0:05 0:08 MT (MITR:INIORI 42 03/07/20 18:21:40 0:25 0:04 MO -ri:NIORI 43 03/07/20 18:39:48 0:06 0:00 MT -ri:NIOPI 44 03/08/20 00:01:01 0:22 0:00 MT (Mt -ri:NIOPI AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 SDNY_GM_00170886 EFTA01342944 .111020 MOBILITY 4III, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm C at id 1e /4 1..... AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Tine: Voice Usage For: Item Conn. Dato 08/17/2020 Conn. Tama (UMC) Seizure Time ET Originating Terminating DMZ INSI Number number CT Feature 45 03/08/20 18:09:41 0:11 0:00 MT (Ni-Pi:NIOPI 46 03/08/20 18:23:28 0:13 0:00 MT (Ni-Pi:NIOPI 47 03/09/20 00:45:20 0:27 0:00 MT (Ni-Pi:NIOP1 48 03/09/20 00:45:22 0:29 0:01 MT (Ni- ri:NIOP:CPNA:VNI 49 03/09/20 01:30:41 0:17 18:35 MT (NIOA:VCORA1 50 03/09/20 01:30:41 0:18 18:35 NO (Ni-ri:NIOA1 51 03/09/20 14:52:35 0:17 0:00 MT (Ni-ri:NIOPI 52 03/09/20 15:46:24 0:07 0:00 MT (Ni-ri:NIOA1 53 03/09/20 18:49:59 0:04 0:00 NO (Ni-ri:NIOA1 54 03/10/20 17:41:33 0:14 0:00 MT (Ni-ri:NIOPI 55 03/10/20 17:43:58 0:23 0:00 MT (Ni-ri:NIORI 56 03/10/20 17:44:00 0:25 0:58 MT (Ni- ri:NIOA:CPNA:VNI 57 03/10/20 18:36:22 0:13 0:00 MT (Ni-ri:NIOA1 58 03/10/20 23:20:53 0:01 0:00 NO (Ni-ri:NIOA1 59 03/10/20 23:20:57 0:02 0:00 NO (Ni-ri:NIOA1 1PHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 SDNY_GNL00170887 EFTA01342945 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t1/4-15 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tim Tine (OTC) ET Originating Terminating a@I nMS1 Number Member Cr Feature 60 03/11/20 20:57:26 0:20 0:04 MO (Ili -ri:MIORI 61 03/11/20 21:36:41 0:20 0:04 MO (Ili -ri:MIORI 62 03/11/20 21:48:29 0:20 0:05 MO (Wi-Pit 63 03/11/20 21:56:49 0:21 0:04 MO (Wi-Pit 64 03/12/20 00:33:30 0:02 0:00 MT (RIM 65 03/12/20 16:00:34 0:08 7:20 MO (Wi-Pit 66 03/12/20 18:12:35 0:20 0:03 MO (Wi-Pit 67 03/12/20 19:34:27 0:06 1:09 MO (Wi-Pit 68 03/12/20 19:39:16 0:12 0:00 MO (Wi-Pit 69 03/12/20 19:49:52 0:20 0:03 MO (Wi-Pit 70 03/13/20 16:33:25 0:21 0:04 MO (Wi-Pit 71 03/13/20 17:59:47 0:20 0:03 MO (Wi-Pit 72 03/14/20 15:39:45 0:28 0:00 MT (Wi-ri:MIOPI 73 03/14/20 15:39:45 0:28 0:00 MT (WI- ri:MIOP:CFNA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 SDNY_GM_00170888 EFTA01342946 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41.. ..„`•-_--s at's 1/4-6 AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dill's' Conn. Seizure Tina TiaDO (UTC) ET Originating Terminating =RI INSI Numbor Maher CT Feature 74 03/14/20 20:56:04 0:03 0:02 NO (Mt -ril 75 03/14/20 20:56:10 0:02 0:03 NO (Mt -8/1 76 03/14/20 20:56:19 0:05 0:03 NO (Ni-fil 77 03/14/20 20:56:42 0:02 0:03 NO (Ni-Pil 78 03/14/20 22:49:35 0:19 0:00 MT (NIOP1 79 03/14/20 22:49:36 0:20 0:04 MT (NIOP:CPNR:VN1 80 03/14/20 23:33:17 0:14 0:00 MT (Ni -Pi:NIOP1 81 03/15/20 00:44:05 0:02 0:00 MT (NIOP1 82 03/15/20 00:44:23 0:11 0:00 MT (NIOP1 83 03/15/20 00:44:23 0:11 0:09 MT (NIOP:CPNR:VN1 84 03/15/20 15:46:15 0:18 0:00 MT (Ni -Pi:NIOR1 85 03/16/20 00:36:19 0:14 0:00 MT (1 86 03/16/20 00:36:19 0:25 0:00 ST (NIOR1 87 03/16/20 00:36:21 0:27 0:07 ST (NIOR:CFNA:VN1 88 03/19/20 16:30:35 0:39 0:00 NO -P i1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 SDNY_GNL001708.89 EFTA01342947 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (UTC) ET Originating Terminating DISI Number Number CT Feature 89 03/19/20 19:26:50 0:18 0:00 NO (Ni-Fil 90 03/23/20 03:56:33 0:14 0:00 NT (1 91 03/23/20 03:56:33 0:25 0:00 ST (NIOP1 92 03/23/20 03:56:35 0:27 0:03 ST (NIOS:CVNA:VM] 93 03/23/20 04:01:36 0:26 0:00 NT (Ni-ri:NI081 94 03/24/20 00:20:32 0:24 0:00 NT -Pi:NIOP1 95 03/24/20 00:20:32 0:24 0:00 NT -Pi:NIOP1 96 03/24/20 00:20:38 0:30 0:05 NT (Ni- Pi:NIOP:CFNA:VNI 97 03/24/20 00:20:38 0:30 0:05 NO (Ni-Fil 98 03/24/20 23:44:26 0:06 0:06 NO (Ni-Fil 99 03/24/20 23:45:05 0:22 0:00 NT (Ni-Pi:NIOP1 100 03/24/20 23:45:05 0:22 0:00 NT (NIOP:CNN1 101 03/24/20 23:45:12 0:29 0:04 NT (NIOP:CPNA:CbM:VM1 102 03/24/20 23:45:12 0:29 0:04 NO (Ni-Fil 103 03/26/20 23:55:56 0:20 0:00 NT (Xi —Pi:NIOP1 104 03/27/20 02:21:32 0:13 0:00 NT —Pi:NIOP1 105 03/27/20 14:05:36 0:06 0:00 NT (NIOP1 106 03/27/20 14:05:42 0:13 0:00 ST (NIOP1 107 03/27/20 14:05:42 0:14 0:00 NO (Ni-Fil 1PHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 SDNY_GM_00170890 EFTA01342948 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (DMC) Seizure Time CT Originating Terminating LNSI CT Number Number Feature 108 03/27/20 20:17:37 0:05 0:00 MT (Ni-Ti:NIOPI 109 03/27/20 20:52:41 0:11 0:00 MT (Ni-ri:NIOPI 110 03/30/20 23:55:43 0:21 0:00 MT (Ni-ri:NIOPI 111 03/31/20 17:28:06 0:01 0:00 NO (Ni-ril 112 03/31/20 17:28:18 0:07 4:39 NO (Ni-ril 113 04/01/20 16:49:44 0:12 0:00 MT (Ni-ri:NIOPI 114 04/01/20 16:49:44 0:12 0:00 MT (Ni-ri:NIOPI 115 04/01/20 16:49:48 0:16 0:03 MT (Ni-ri:NIOP:CPB:VM] 116 04/01/20 16:49:48 0:16 0:03 NO (Ni-ril 117 04/01/20 16:50:01 0:04 44:44 MT (Ni-ri:NIOPI 118 04/01/20 16:50:01 0:04 14:01 NO (Ni-ril 119 04/01/20 17:04:02 0:00 0:12 NO (1 120 04/01/20 17:04:14 0:00 12:58 NO (Ni-fil 121 04/01/20 17:17:12 0:00 0:12 NO (1 122 04/01/20 17:17:24 0:00 0:15 NO (Ni-fil 123 04/01/20 17:17:39 0:00 0:11 NO (1 124 04/01/20 17:17:50 0:00 3:32 NO (Ni-fil 125 04/01/20 17:21:22 0:00 0:12 NO (1 126 04/01/20 17:21:34 0:00 5:33 NO (Ni-fil 127 04/01/20 17:27:07 0:00 0:11 NO (1 128 04/01/20 17:27:18 0:00 2:26 NO (Ni-fil 129 04/01/20 17:29:44 0:00 0:11 NO (1 130 04/01/20 17:29:55 0:00 0:21 NO (Ni-fil 131 04/01/20 17:30:16 0:00 0:11 NO (1 132 04/01/20 17:30:27 0:00 4:18 NO (Ni-fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 SDNY_GM_001708.91 EFTA01342949 P.020 MOBILITY "-a. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t--_„•-•° AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tine Time (uTc) LT Originating Terminating flax DWI CT Number Number Feature 133 04/01/20 21:54:18 0:21 0:00 MT (Ni-Fi:NIOPI 134 04/01/20 21:54:18 0:21 0:00 MT (Ni-Fi:NIOPI 135 04/01/20 21:54:22 0:25 0:02 MT Fi:NIOP:CFNA:VM] 136 04/01/20 21:54:22 0:25 0:02 MO (Ni-Fil 137 04/01/20 22:49:44 0:10 4:27 MO (Ni-Fil 138 04/01/20 22:49:44 0:10 61:40 MT (Ni-Fi:NIOPI 139 04/01/20 22:54:11 0:00 0:11 MO (1 140 04/01/20 22:54:22 0:00 13:02 MO (Ni-ril 141 04/01/20 23:07:24 0:00 0:09 MO (1 142 04/01/20 23:07:33 0:00 13:50 MO (Ni-ril 143 04/01/20 23:21:23 0:00 0:10 MO (1 144 04/01/20 23:21:33 0:00 2:28 MO (Ni-811 145 04/01/20 23:24:01 0:00 0:12 MO (1 146 04/01/20 23:24:13 0:00 13:03 MO (Ni-ril 147 04/01/20 23:37:16 0:00 0:21 MO (1 148 04/01/20 23:37:37 0:00 6:17 MO ($11-811 149 04/01/20 23:43:54 0:00 0:12 MO (1 150 04/01/20 23:44:06 0:00 0:53 MO (Ni-ril 151 04/01/20 23:44:59 0:00 6:25 MO (VCORR1 152 04/03/20 14:24:29 0:15 0:00 MT (Ni-Fi:NIOPI 153 04/03/20 20:07:32 0:03 0:27 MO -Fil 154 04/03/20 20:08:13 0:04 0:57 MO -Fil 155 04/06/20 21:07:53 0:02 0:00 MT (Ni-Fi:NIOPI 156 04/06/20 21:08:13 0:22 0:00 MT (Ni-Fi:NIOPI 157 04/06/20 21:08:17 0:26 0:01 MT Fi:NIOP:CFNA:VM] 158 04/06/20 21:08:17 0:26 0:01 MO (Ni-Fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 9 SDNY_GNL00170892 EFTA01342950 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. `ca -ase• ""s AT&T Run Dato: Run Tine: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tim Time MMC) ET Originating Terminating L@I IMSI Cr Number Weber Feature 159 04/06/20 21:08:54 0:09 5:49 MO (Ili-Pit 160 04/06/20 21:08:54 0:09 5:49 MT (Ili -Pi:NIOP1 161 04/06/20 21:15:03 0:03 12:03 NO (Mi-Pit 162 04/06/20 21:15:03 0:03 12:03 NT (NIOP1 163 04/06/20 22:56:05 0:01 0:00 NO (Mi-Pit 164 04/06/20 22:57:06 0:21 0:00 MT (Mi-Pi:NIOP1 165 04/06/20 22:57:06 0:21 0:00 MT (Mi-Pi:NIOP1 166 04/06/20 22:57:10 0:25 0:02 NT (Ili- ri:NIOP:CPNA:VM1 167 04/06/20 22:57:10 0:26 0:02 NO (Mi-Pit 168 04/06/20 22:58:08 0:39 0:00 NO (Mi-Pit 169 04/06/20 23:18:27 0:23 0:00 MT (Mi-Pi:NIOP1 170 04/06/20 23:18:27 0:23 0:00 MT (Mi-Pi:NIOP1 171 04/06/20 23:18:31 0:27 0:04 MT (Ili- ri:NIOP:CPNA:VM1 172 04/06/20 23:18:31 0:28 0:04 MO (Mi-Pit 173 04/06/20 23:28:26 0:22 0:00 MT (Mi-Pi:NIOP1 174 04/06/20 23:28:26 0:22 0:00 MT (Mi-Pi:NIOP1 175 04/06/20 23:28:29 0:25 0:01 MT (Ili- ri:NIOP:CPNA:VM1 176 04/06/20 23:28:29 0:25 0:01 MO (Mi-Pit 177 04/07/20 00:15:42 0:23 0:00 MT (Mi-Pi:NIOP) 178 04/07/20 00:15:44 0:25 0:07 MT (Mt- ri:NIOP:CPNA:VM1 179 04/07/20 00:15:44 0:26 0:07 MO (Mi-Pit AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 10 SDNY_GN1_00170893 EFTA01342951 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in VTC. ...."-_ 11,/ `'s AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tine Sum (DSc) ET Originating Terminating flax DWI CT Number Number Feature 180 04/07/20 00:31:15 0:14 0:00 MT (Ni-Fi:NIOPI 181 04/07/20 00:31:15 0:14 18:52 MT (Ni-Fi:NIOPI 182 04/07/20 00:31:15 0:14 18:52 NO (Ni-Fil 183 04/07/20 14:35:18 0:07 48:52 NO (1 184 04/07/20 17:03:18 0:22 0:00 MT (Ni-ri:NIOPI 185 04/07/20 17:03:18 0:22 0:00 MT (Ni-fi:NIOP1 186 04/07/20 17:03:23 0:27 0:02 MT (Wi- fi:NIOP:CZNA:VM] 187 04/07/20 17:03:23 0:28 0:02 MO (Ni-fil 188 04/07/20 21:49:43 0:04 0:00 MT (NIOP1 189 04/07/20 22:24:55 0:22 0:00 MT (Ni-fi:NIOP1 190 04/07/20 22:24:55 0:22 0:00 MT (Ni-fi:NIOP1 191 04/07/20 22:25:00 0:27 0:06 MT (Wi- fi:NIOP:CZNA:VM] 192 04/07/20 22:25:00 0:27 0:06 NO (Ni-fil 193 04/08/20 19:59:50 0:03 18:27 NO (Ni-fil 194 04/09/20 14:31:59 0:19 7:35 NO CI 195 04/09/20 19:29:43 0:16 0:00 MT (Ni-Pi:NIOP1 196 04/09/20 19:29:43 0:16 0:00 MT (Ni-Pi:NIOP1 197 04/09/20 19:29:43 0:16 0:00 NO (1 198 04/09/20 19:30:14 0:22 0:00 MT (NIOP1 199 04/09/20 19:30:16 0:24 0:10 NO (Ni-fil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 11 SDNY_GM_00170894 EFTA01342952 P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. a AT&T in Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n0.0 dildimmo Conn. Seizure T10.0 Sum (DTC) ST Originating Terminating !MIT DO3I Number Number CT Feature 200 04/09/20 19:30:16 0:24 0:10 MT (NIOP:CrNA:VM1 201 04/09/20 19:37:50 0:23 0:00 MT (Ni-ri:NIOPI 202 04/09/20 19:37:50 0:23 0:00 MT (Ni-ri:NIOPI 203 04/09/20 19:37:51 0:24 0:02 MT (Wi- ri:NIOP:ClNA:VM1 204 04/09/20 19:37:51 0:25 0:02 NO (1 205 04/09/20 19:48:23 0:01 0:00 MT (Ni-ri:NIOP1 206 04/09/20 19:48:23 0:01 0:00 MT (NIOP1 207 04/09/20 19:48:23 0:02 0:00 NO (1 208 04/09/20 20:39:36 0:22 0:00 MT (NIOP1 209 04/09/20 20:39:38 0:24 0:02 NO (1 210 04/09/20 20:39:38 0:24 0:02 MT (NIOP:CrNA:VM1 211 04/09/20 21:03:46 0:10 22:09 MT (NIOP:VCORR1 212 04/09/20 21:03:46 0:11 22:09 NO (1 213 04/09/20 21:29:49 0:05 27:57 NO (1 214 04/09/20 22:33:59 0:06 13:20 NO (NIOR1 215 04/09/20 22:49:27 0:04 4:06 NO (1 216 04/09/20 23:32:11 0:05 0:29 MT (NIOP:VCORR1 217 04/09/20 23:32:11 0:06 0:05 NO (Ni-ril 218 04/09/20 23:32:16 0:00 0:13 NO (1 219 04/09/20 23:32:29 0:00 0:11 NO (Ni-ril 220 04/09/20 23:33:32 0:04 0:00 MT (Ni-ri:NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 12 SDNY_GN1_00170895 EFTA01342953 .111020 MOBILITY dn. AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ..., 1/4=s) 4*-6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time CT Originating Terminating flat INSI Number Maher CT Feature 221 04/09/20 23:33:32 0:04 0:21 MT (Ni-Pi:NIOPI 222 04/09/20 23:33:32 0:04 0:21 NO (VCORAI 223 04/09/20 23:33:53 0:00 0:00 MT (NIOP:VCORR1 224 04/10/20 00:24:44 0:13 1:54 MO (Mi-Fil 225 04/10/20 00:24:44 0:13 1:54 MT (NIOP1 226 04/10/20 18:26:36 0:27 0:00 MT (Mi-Pi:NIOP1 227 04/10/20 18:26:38 0:29 0:14 MT (NI - ri:NIOP:CPNA:VN1 228 04/13/20 15:24:09 0:12 0:00 MT (Ni -Pi:NIOP1 229 04/15/20 21:58:10 0:08 0:00 (NIOP1 230 04/15/20 22:54:21 0:21 0:00 MT (Ni-Pi:NIOP1 231 04/15/20 22:54:21 0:21 0:00 MT (NIOP:CNN1 232 04/15/20 22:54:25 0:25 0:03 MT (NIOP:CFNA:CbM:VN1 233 04/15/20 22:54:25 0:25 0:03 MO —Fil 234 04/15/20 23:06:43 0:10 25:16 (Ni—Pi:NIOP1 235 04/15/20 23:06:43 0:10 3:54 ND (1 236 04/15/20 23:10:37 0:00 13:18 MO (Ni-fil 237 04/15/20 23:23:55 0:00 1:52 NO (1 238 04/15/20 23:25:47 0:00 6:12 NO (Ni-fil 239 04/16/20 22:15:29 0:22 0:00 MT (NIOP1 240 04/16/20 22:15:30 0:23 1:02 (NIOP:CFNA:VN1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 13 SDNY_GM_00170896 EFTA01342954 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ..4:1/44 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time UT Originating Terminating SRI INBI Number Number CT Feature 241 04/16/20 22:30:40 0:01 0:00 MT 242 04/17/20 00:28:51 0:07 0:04 NO (Ni-fil 243 04/17/20 01:54:30 0:14 41:46 MT (NIOP:VCORR1 244 04/17/20 01:54:30 0:15 41:46 NO (Ni-fil 245 04/17/20 15:23:40 0:06 0:00 MT 246 04/17/20 21:16:10 0:07 0:00 MT (Ni-ri:NIOPI 247 04/21/20 00:50:15 0:15 0:00 MT (MIOP:00,1 248 04/21/20 00:50:15 0:16 0:00 NO (Ni-fil 249 04/21/20 00:50:39 0:21 0:00 MT (MIOP:00,1 250 04/21/20 00:50:42 0:24 0:32 MT (NIOP:CFNA:001:VM1 251 04/21/20 00:50:42 0:24 0:32 NO (1 252 04/21/20 00:53:30 0:11 0:00 MT 253 04/21/20 00:53:31 0:12 0:09 NO (VCORR1 254 04/21/20 00:53:31 0:12 0:09 MT (NIOP:CtUR:VM1 255 04/21/20 03:11:37 0:11 0:00 MT (NIOP1 256 04/21/20 03:11:38 0:12 0:30 MT (NIOP:CtUR:VM1 257 04/22/20 20:59:27 0:17 0:00 MT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 14 SDNY_GM_00170897 EFTA01342955 P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm \1/4 .77: 11 00 "-a AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (OTC) CT Originating Terminating EMI IMSI Number Number CT Feature 258 04/22/20 21:49:51 0:28 0:02 NO (VCORR1 259 04/22/20 21:51:33 0:06 0:05 NO (VCORR1 260 04/25/20 14:13:47 0:00 0:00 NO (1 261 04/25/20 14:14:08 0:01 0:14 NO (NIOR:VM1 262 04/28/20 19:16:39 0:21 0:00 NT -Fi:NIOR1 263 04/28/20 19:16:39 0:21 0:00 NT -Fi:NIOR1 264 04/28/20 19:16:43 0:25 0:02 NT (MI - ri:NIOR:CFNA:Vbil 265 04/28/20 19:16:43 0:25 0:02 NO (MI —Fi:NIOR1 266 04/28/20 19:44:14 0:03 45:03 MO (Ni-ri:NIOR1 267 04/28/20 21:03:10 0:17 36:49 MO (Ni-ri:NIOR1 268 04/28/20 23:39:52 0:24 0:00 MT (NIOR1 269 04/28/20 23:40:00 0:32 0:35 MT (NIOR:CFNA:VM1 270 04/28/20 23:40:00 0:32 0:35 MO (MI -Fi:NIOR1 271 04/28/20 23:45:33 0:22 0:00 MT (MI -Fi:NIOR1 272 04/28/20 23:45:33 0:22 0:00 NT (MI -Fi:NIOR1 273 04/28/20 23:45:37 0:26 0:03 NT (MI - ri:NIOR:CFNA:Vbil 274 04/28/20 23:45:38 0:27 0:02 MO (MI —Fi:NIOR1 275 04/29/20 00:07:11 0:22 0:00 NT (MI -Fi:NIOR1 276 04/29/20 00:07:11 0:22 0:00 MT (MI -Fi:NIOR1 277 04/29/20 00:07:15 0:26 0:02 MT (MI - Fi:NIOR:CFNA:VM1 The information contained here is for use by authorized persons only and is not for general distribution. Page 15 SDNY_GM_00170898 EFTA01342956 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. in AT&T Run Dato: Run Time: Voice Osage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tim Sum (VC) ET Originating Terminating LORI Number number CT Feature 278 04/29/20 00:07:15 0:26 0:02 NO (Ni-Pi:NIOR1 279 04/29/20 16:53:22 0:05 0:00 MT (Ni-Pi:NIOR1 280 04/29/20 16:53:22 0:05 0:00 MT (Ni-Pi:NIOR1 281 04/29/20 16:53:22 0:05 0:00 NO (Ni-Pi:NIOR1 282 04/29/20 16:54:04 0:21 0:00 MT (Ni-ri:NIOPI 283 04/29/20 16:54:04 0:21 0:00 MT (Ni-ri:NIOPI 284 04/29/20 16:54:08 0:25 0:02 MT (WI- ri:NIOP:ClNA:VN1 285 04/29/20 16:54:08 0:25 0:02 NO (Ni-Pil 286 04/29/20 19:29:51 0:03 1:01 NO (Ni-Pil 287 04/29/20 20:52:10 0:07 0:00 MT (Ni-ri:NIOPI 288 04/29/20 20:52:10 0:07 19:48 NO 289 04/29/20 20:52:10 0:07 4:08 MT (Wi -Pi:NIOP1 290 04/29/20 20:56:18 0:00 15:40 MT (NIOP:VCORR1 291 04/30/20 20:14:09 0:22 0:01 MT (Wi -Pi:NIOP1 292 04/30/20 20:14:09 0:22 0:01 MT (NIOP1 293 04/30/20 20:14:13 0:26 0:05 MT (NIOP:CPNA:VN1 294 04/30/20 20:14:13 0:26 0:05 NO (Ni-Pil 295 04/30/20 21:11:42 0:22 0:00 MT (Wi -Pi:NIOP1 296 04/30/20 21:11:42 0:22 0:00 MT (NIOP1 297 04/30/20 21:11:47 0:27 0:02 MT (NIOP:ClNA:VN1 298 04/30/20 21:11:47 0:28 0:01 NO (Wi -Pi1 299 04/30/20 21:26:48 0:07 28:07 NO (Wi -Pi1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 16 SDNY_GPV1_00170899 EFTA01342957 MOBILITY P.020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run pato: Run Time: Voice Doane For: Item Conn. Date 06/17/2020 Conn. Time (urc) Seizure Sum ZT Originating Terminating flax LO)r Member Number CT Feature 300 04/30/20 23:47:42 0:08 5:05 NO (Ni-Pit 301 05/01/20 00:19:46 0:22 0:00 MT (Ni -Pi:NIOP1 302 05/01/20 00:19:46 0:22 0:00 MT (NIOP1 303 05/01/20 00:19:50 0:26 0:01 MT (NIOP:CPNA:VN1 304 05/01/20 00:19:50 0:26 0:01 NO (Ni-Pit 305 05/01/20 01:27:25 0:04 22:24 NO (Ni-Pit 306 05/01/20 01:27:25 0:04 22:24 MT (NIOP:VCORAI 307 05/01/20 20:59:25 0:21 0:00 MT (Wi -fi:NIOP1 308 05/01/20 20:59:25 0:21 0:00 MT (Wi -fi:NIOP1 309 05/01/20 20:59:30 0:26 0:01 MT (Wi- fi:NIOP:CZNA:VM] 310 05/01/20 20:59:30 0:26 0:01 NO (Ni-Pit 311 05/04/20 22:10:28 0:14 17:33 MT (NIOP:VCORR1 312 05/04/20 22:10:28 0:15 17:33 NO (Ni-Pit 313 05/04/20 22:49:00 0:22 0:00 MT (Ni-fi:NIOP1 314 05/04/20 22:49:00 0:22 0:00 MT (Ni-fi:NIOPI 315 05/04/20 22:49:04 0:26 0:02 MT (Wi- fi:NIOP:CZNA:VM] 316 05/04/20 22:49:04 0:26 0:02 MO (Ni-Pit 317 05/04/20 23:22:53 0:21 0:00 MT (Wi-fi:NIOP1 318 05/04/20 23:22:53 0:21 0:00 MT (Wi-fi:NIOPI 319 05/04/20 23:22:58 0:26 0:02 MT (Wi- fi:NIOP:CZNA:VM] 320 05/04/20 23:22:58 0:27 0:02 MO (Ni-fit 321 05/05/20 20:49:17 0:21 0:00 MT (Ni-fi:NI08) 322 05/05/20 20:49:17 0:21 0:00 MT (Ni-fi:NI08) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 17 SDNY_GNL00170900 EFTA01342958 .111020 MOBILITY illir AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4 --s ""s `41 t AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in 4Ctoleli OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Ma= Conn. Seizure Tim Time (urc) ET Originating Terminating flax DO3I CT Number Number Feature 323 05/05/20 20:49:21 0:25 0:02 MT (Ni- Fi:NIOP:CFNA:VN( 324 05/05/20 20:49:21 0:25 0:02 MO -fil 325 05/05/20 21:25:15 0:22 0:00 MT (Ni-ri:NIOPI 326 05/05/20 21:25:15 0:22 0:00 MT 327 05/05/20 21:25:19 0:26 0:05 MT ri:NIOP:ClNA:VM] 328 05/05/20 21:25:19 0:27 0:05 MO (Ni-fil 329 05/05/20 21:37:14 0:38 0:03 MO -ril 330 05/06/20 00:41:07 0:23 0:00 MT (Ni-ri:NIOP) 331 05/06/20 00:41:07 0:23 0:00 MT (Ni-ri:NIOPI 332 05/06/20 00:41:11 0:27 0:02 MT ri:NIOP:CfNA:VM] 333 05/06/20 00:41:11 0:28 0:02 MO (Ni-fil 334 05/06/20 00:41:32 0:00 0:00 MO (Ni-ril 335 05/06/20 00:41:43 0:08 0:00 MO (Ni-ril 336 05/06/20 00:41:53 0:06 0:03 MO (Ni-ril 337 05/07/20 14:49:32 0:23 0:00 MT (Ni-ri:NIOPI 338 05/07/20 14:49:39 0:30 0:02 MT ri:NIOP:CINA:VM] 339 05/07/20 14:49:39 0:31 0:02 MO (Ni-fil 340 05/07/20 17:03:16 0:23 0:00 MT (Ni-ri:NIOPI 341 05/07/20 17:03:27 0:34 0:01 MT ri:NIOP:CINA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 18 SDNY_GNL00170901 EFTA01342959 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Time Sum (OTC) ZT Originating Terminating EMU DWI Mmber Number CT Feature 342 05/07/20 17:03:27 0:34 0:01 NO (Ni-ril 343 05/07/20 17:48:17 0:24 0:00 NT (Ni-Fi:NIOP( 344 05/07/20 17:48:23 0:30 0:02 NT (Ni- Pi:NIOP:CPNA:VN( 345 05/07/20 17:48:23 0:31 0:02 NO -ril 346 05/07/20 19:12:18 0:22 0:00 NT (Ni-Fi:NIOP( 347 05/07/20 19:12:24 0:28 0:02 NT (Ni- Pi:NIOP:CFNA:VN( 348 05/07/20 19:12:24 0:28 0:02 NO -ril 349 05/07/20 19:16:22 0:07 0:00 NO (Mi 350 05/07/20 23:33:08 0:21 0:00 NT (Ni-ri:NIOP) 351 05/07/20 23:33:08 0:21 0:00 NT (Ni-ri:NIOPI 352 05/07/20 23:33:13 0:26 0:02 NT ri:NIOP:ClNA:VM] 353 05/07/20 23:33:13 0:26 0:02 NO (Ni-ril 354 05/07/20 23:33:46 0:01 0:00 NT (Ni-ri:NIOPI 355 05/07/20 23:33:46 0:01 0:00 NT (Ni-ri:NIOP1 356 05/07/20 23:33:46 0:01 0:00 NO (Ni-ril 357 05/07/20 23:34:32 0:39 0:03 NO (Mi 358 05/08/20 00:19:18 0:21 0:00 MT (Ni-ri:NIOPI 359 05/08/20 00:19:18 0:21 0:00 ST (NIOP:CHNI 360 05/08/20 00:19:22 0:25 0:03 ST (NIOP:ClNA:CHN:VM] 361 05/08/20 00:19:23 0:27 0:02 NO (Mi AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 19 SDNY_GNL00170902 EFTA01342960 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ....`t-e ad° 1/4"". AT&T Run Date: Run Time: voice Osage For: Item Conn. Date 06/17/2020 Ma= Conn. Seizure Time Time (OTC) ET Originating Terminating L@I nut CT Number Number Feature 362 05/08/20 14:29:29 0:05 74:10 NO (Ni-PSI 363 05/08/20 17:49:44 0:32 0:02 NO (Ni-PSI 364 05/08/20 17:58:22 0:21 0:23 NO (Ni-PSI 365 05/09/20 17:19:42 0:27 0:00 NT (Ni-ri:MIOP) 366 05/09/20 17:19:44 0:29 1:16 NT ri:NIOP:CfNA:VM] 367 05/11/20 13:49:51 0:16 0:55 NO (Ni-PSI 368 05/11/20 13:52:24 0:12 3:10 NO (Ni-PSI 369 05/11/20 13:55:47 0:08 15:51 NO (Ni-PSI 370 05/11/20 17:48:07 0:16 0:00 NO (Ni-PSI 371 05/11/20 20:27:52 0:09 0:29 NT -ri:MIOPI 372 05/11/20 21:18:16 0:11 0:30 NT -ri:MIOPI 373 05/11/20 21:39:04 0:12 1:11 NO (Ni-PSI 374 05/11/20 21:51:53 0:07 0:28 NT -ri:MIOPI 375 05/11/20 23:14:44 0:01 0:00 NO (Ni-PSI 376 05/11/20 23:15:02 0:07 33:55 NT (NIOP:VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 20 SDNY_GNL00170903 EFTA01342961 020 MOBILITY 4MIN0 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 SS= Conn. Seizure Time Time (UTC) Cr Originating Number Terminating Number ENE' 1NSI CT Feature 377 05/11/20 23:15:02 0:07 33:55 19785258484 13038983895 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 378 05/12/20 13:53:18 0:00 0:00 19785258484 14158666097 NT (NIOP) 379 05/12/20 13:53:19 0:01 0:11 19785258484 14158666097 NT (NIOP:CFNI:VNI 12096078210(t) 380 05/12/20 13:53:21 0:09 0:07 19785258484 442032862047 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 381 05/12/20 15:01:44 0:08 30:55 19785258484 19177695374 NT (NIOP:VCORR) 382 05/12/20 15:01:44 0:09 30:55 19785258484 19177695374 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 383 05/12/20 15:33:00 0:10 19:49 19785258484 13036196231 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 384 05/12/20 16:50:53 0:27 0:00 19785258484 19786751300 MT (Ni-Pi:NIOP) 385 05/12/20 16:50:58 0:32 0:07 19785258484 19786751300 MT (Ni- 14013693201(t) ri:NIOP:CINA:VNI 386 05/12/20 16:50:58 0:33 0:07 19785258484 19786751300 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE9 387 05/12/20 18:18:51 0:08 8:56 19785258484 12128217058 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 388 05/12/20 19:13:25 0:05 7:33 19785258484 15165822707 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 389 05/12/20 19:29:15 0:23 0:00 19785258484 19786751300 MT (NIOR) 390 05/12/20 19:29:20 0:28 0:06 19785258484 19786751300 MT (NIOR:CPNA:VNI 14013693201(P) 391 05/12/20 19:29:20 0:29 0:06 19785258484 19786751300 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE8 392 05/12/20 22:00:31 0:05 28:33 19785258484 19177695374 3587080982063726 310410214827503 NO (Ni-Pi:NIOR) APPLE IPHONE9 393 05/12/20 22:00:31 0:05 28:33 19785258484 19177695374 MT (NIOR:VCORR) 394 05/13/20 18:07:12 0:39 0:03 19785258484 13036196231 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 395 05/13/20 18:08:35 0:24 0:00 19785258484 19177695374 MT (NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 21 SDNY_GNL00170904 EFTA01342962 .111020 MOBILITY `~~ AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Dato: Run Time: Voice Usage For: Item Conn. Date 04/17/2020 dildimmo Conn. Seizure r10.0 Time (OTC) LT Originating Terminating IMMI INS1 Member Number R Feature 396 05/13/20 18:08:41 0:30 0:02 MO (Ni-Pit 397 05/13/20 18:08:41 0:30 0:02 MT (NIOP:CZNA:VMI 398 05/13/20 19:00:16 0:09 15:49 MO (Ni-Pit 399 05/13/20 19:00:16 0:09 15:49 MT (NIOP:VCORAI 400 05/13/20 19:52:36 0:22 0:00 MT (Mi-fi:NIOPI 401 05/13/20 19:52:46 0:32 0:02 MT (Mi - fi:NIOP:CZNA:VM] 402 05/13/20 19:52:46 0:33 0:02 NO (Ni-Pit 403 05/13/20 19:53:03 0:06 1:39 MT -Pi:NIOP1 404 05/13/20 19:54:59 0:06 4:35 NO (Ni-Pit 405 05/13/20 21:05:54 0:11 0:00 MT (NIOP1 406 05/13/20 21:05:55 0:12 0:07 MT (NIOP:CPNR:VM] 407 05/13/20 21:35:50 0:07 13:47 MO (Ni-Pit 408 05/13/20 22:14:50 0:23 0:00 MT (NIOP1 409 05/13/20 22:14:56 0:29 0:01 MT (NIOP:CfNA:Vbil 410 05/13/20 22:14:56 0:30 0:01 MO (Ni—Pit 411 05/13/20 23:54:11 0:26 0:00 MT (Mt —ri:MIOP) 412 05/13/20 23:54:12 0:27 0:05 MT - ri:NIOP:CFNA:VM] 413 05/13/20 23:54:12 0:27 0:05 MO (VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 22 SDNY_GNL00170905 EFTA01342963 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm " S it' AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Dato: Run Time: Voice Usage For: Item Conn. Date 08/17/2020 dila= Conn. Seizure Tillie Sum (UTC) ET Originating Terminating EMBI IIISI CT Number Number Feature 414 05/13/20 23:54:27 0:02 17:46 NO (Ni-Pil 415 05/13/20 23:54:27 0:02 17:46 NT (NIOP:VCORR1 416 05/14/20 14:39:29 0:22 0:00 NT -Pi:NIOP1 417 05/14/20 14:39:37 0:30 0:01 NT (MI - ri:NIOP:CIPNA:VM1 418 05/14/20 14:39:37 0:31 0:01 NO (Mt -Pil 419 05/14/20 14:39:48 0:10 0:00 NT (Ili -Pi:NIOP:0611 420 05/14/20 15:52:43 0:08 1:09 NO -Pil 421 05/14/20 16:15:14 0:16 0:54 NT -Pi:NIOP1 422 05/14/20 17:11:25 0:13 0:00 NT (1 423 05/14/20 17:11:25 0:24 0:00 ST (NIOP1 424 05/14/20 17:11:26 0:25 0:11 ST (NI08:CfNA:VM] 425 05/14/20 17:20:45 0:06 0:00 NT (NIOP1 426 05/14/20 17:20:45 0:06 8:46 NT (NIOP:VCORR1 427 05/14/20 17:20:45 0:06 8:46 NO -Pil 428 05/14/20 17:42:04 0:10 0:01 NT (NIOP1 429 05/14/20 17:42:05 0:11 0:03 NT (NIOP:CENR:VM1 430 05/14/20 18:14:46 0:04 0:00 NT -Pi:NIOP1 431 05/14/20 18:14:46 0:04 1:31 NT (NIOP1 432 05/14/20 18:14:46 0:05 1:31 NO -Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 23 SDNY_GM_00170906 EFTA01342964 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ...„,,,,,o •ftaid %"""° AT&T Run Date: Run Tame: Voice Usage For: Item Conn. Date 0""n.. Skim Conn. Seizure Time Time (UTC) ET Originating Terminating IMMI IN= Member Member CT Feature 433 05/14/20 19:41:13 0:28 0:00 MT (ML-Pi:NIOP1 434 05/14/20 19:41:16 0:31 0:04 MT (MI- ri:NIOP:CPNA:VM1 435 05/17/20 21:54:23 0:06 3:05 MO (MI-Pi:NIOR1 436 05/19/20 01:55:50 0:00 0:00 MO (MI-Pi:NIOR1 437 05/19/20 20:41:12 0:09 8:05 MO (MI-Pi:NIOR1 438 05/19/20 20:49:29 0:05 2:33 MO (MI-Pi:NIOR1 439 05/19/20 21:14:58 0:23 0:00 NT (NIOR1 440 05/19/20 21:15:04 0:29 0:03 NO (MI-Pi:NIOR1 441 05/19/20 21:15:04 0:29 0:03 NT (NIOR:CFNA:VM1 442 05/19/20 22:29:37 0:22 0:00 NT (NIOR1 443 05/19/20 22:29:44 0:29 0:02 MT (NIOR:CFNA:VM1 444 05/19/20 22:29:44 0:30 0:02 MO (MI-Pi:NIOR1 445 05/19/20 23:03:59 0:22 0:00 MT (NIOR1 446 05/19/20 23:03:59 0:22 0:00 NO (Ni-ri:NIOnl 447 05/19/20 23:04:28 0:06 2:13 MT (NIOP:VCORR1 448 05/19/20 23:04:28 0:06 2:13 MO (MI-Pil 449 05/20/20 18:53:54 0:10 0:52 MT (MI-Pi:NIOPI 450 05/20/20 21:41:19 0:23 0:00 MT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 24 SDNY_GM_00170907 EFTA01342965 .111020 MOBILITY 4 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/477i# ""s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Data 06/17/2020 Conn. Time (DSC) Seizure Sum ET Originating Terminating MEI INSI CT Number number Feature 451 05/20/20 21:41:26 0:30 0:03 MT (NIOP:CFNA:VN1 452 05/20/20 21:41:26 0:30 0:03 NO (Ni-Fi) 453 05/20/20 21:58:25 0:23 0:00 NT (NIOP) 454 05/20/20 21:58:31 0:29 0:02 NT (NIOP:CFNA:VN1 455 05/20/20 21:58:31 0:30 0:02 NO (Ni-Fi) 456 05/20/20 21:59:01 0:01 0:00 NO (Ni-Fi) 457 05/20/20 21:59:40 0:37 0:04 NO (Ni-Fi) 458 05/20/20 22:00:20 0:22 0:00 NT (NIOP) 459 05/20/20 22:00:28 0:30 0:02 NT (NIOP:CFNA:VN1 460 05/20/20 22:00:28 0:31 0:02 NO (Ni-Fi) 461 05/21/20 00:31:09 0:03 35:29 NO (Ni-Fi) 462 05/21/20 00:31:09 0:03 54:04 MT (NIOP:VCORR) 463 05/21/20 01:06:38 0:00 0:21 NO (VCORR) 464 05/21/20 01:06:59 0:00 18:14 NO (Ni-Fi) 465 05/21/20 15:07:09 0:07 0:05 NO (Ni-Fi) 466 05/21/20 20:31:30 0:07 0:04 NO (Ni-Fi) 467 05/21/20 21:23:59 0:19 0:00 NT (Ni-Pi:NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 25 SDNY_GNL00170908 EFTA01342966 P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ....,• ••••-•a"" . AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Date 0""n.. dildimmo Conn. Seizure Tine Time (UTC) LT Originating Terminating LORI nNSI CT Number Number Feature 468 05/21/20 21:31:01 0:15 26:49 MO (Mi-fil 469 05/22/20 00:18:09 0:24 0:01 MT (Mi-Pi:NIOP1 470 05/22/20 00:18:11 0:26 0:32 MT (Ili- ri:NIOP:CPNA:VM1 471 05/22/20 00:20:52 0:28 0:00 MT (Mi-Pi:NIOP1 472 05/22/20 00:20:53 0:29 0:04 MT ri:NIOP:CPNA:VM1 473 05/22/20 16:23:16 0:14 0:00 MT (1 474 05/22/20 16:23:16 0:25 0:00 ST (NIOP1 475 05/22/20 16:23:17 0:26 0:15 ST (NIOP:CPNA:VM1 476 05/22/20 17:37:15 0:06 22:47 MT (Mi-Pi:NIOP1 477 05/22/20 18:00:20 0:05 7:06 MO (Mi-Pil 478 05/22/20 18:33:59 0:23 0:00 MT (NIOP:044141 479 05/22/20 18:34:08 0:32 0:02 MO (Mi-Pil 480 05/22/20 18:34:08 0:32 0:02 MT (NIOP:CPNA:CMN:VM1 481 05/22/20 21:26:30 0:25 0:00 MT -Pi:NIOP1 482 05/22/20 21:26:31 0:26 0:05 MT (Mi- ri:NIOP:CPNA:VM1 483 05/22/20 21:26:31 0:26 0:05 MO (VCOAR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 26 SDNY_GM_00170909 EFTA01342967 P.020 MOBILITY illir AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm ...1/477 i1 L# -6 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Time (UTC) ET Originating Terminating LORI INS1 CT Number Member Feature 484 05/22/20 21:43:41 0:13 0:40 NO (Ni-fil 485 05/22/20 21:43:41 0:13 0:40 NT (NIOP:VCORR1 486 05/22/20 21:45:43 0:06 30:22 NO -ril 487 05/22/20 22:26:24 0:21 0:00 NT -ri:NIOPI 488 05/22/20 22:26:24 0:21 0:00 NT -ri:NIOPI 489 05/22/20 22:26:29 0:26 0:01 NT - ri:NIOP:CfNA:VM1 490 05/22/20 22:26:29 0:27 0:01 NO -fil 491 05/22/20 22:26:36 0:07 0:45 NT (Ni-ri:NIOP:0611 492 05/22/20 22:26:36 0:08 0:35 NO (Ni-fil 493 05/22/20 22:27:11 0:00 0:12 NO (1 494 05/22/20 22:27:21 0:00 6:09 NT (NIOP:CMN:VCORR1 495 05/22/20 22:27:23 0:00 6:07 NO -fil 496 05/22/20 22:46:06 0:18 0:00 NT -ri:NIOPI 497 05/22/20 22:46:06 0:18 3:09 NO -fil 498 05/22/20 22:46:06 0:18 0:38 NT -ri:NIOPI 499 05/22/20 22:46:44 0:00 0:29 NT (NIOP1 500 05/22/20 22:47:13 0:00 2:01 NT -ri:NIOPI 501 05/22/20 22:49:14 0:00 0:32 NT (NIOP1 502 05/22/20 22:49:15 0:00 0:54 NO (VCORRI 503 05/22/20 22:49:46 0:00 3:10 NT -ri:NIOPI 504 05/22/20 22:50:09 0:00 2:52 NO -fil 505 05/22/20 22:52:56 0:00 2:53 NT (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 27 SDNY_GM_00170910 EFTA01342968 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ‘•-• 40 ".". AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Dato 06/17/2020 dildimmo Conn. Seizure Tame Time (OTC) ET Originating Terminating L@I INSI CT Number Number Feature 506 05/22/20 22:53:01 0:00 17:28 MO (VCOAN 507 05/22/20 22:55:49 0:00 14:40 MT (Mi -Pi:NIOP1 508 05/23/20 22:54:43 0:08 30:48 MT (NIOP:VCOAN 509 05/23/20 22:54:43 0:08 30:48 MO (Mi-Pi( 510 05/23/20 23:25:49 0:07 11:42 MT (NIOP:VCOAN 511 05/23/20 23:25:49 0:07 11:42 MO (Mi-Pi( 512 05/26/20 14:10:35 0:09 0:00 MT (Mi -Pi:NIOP1 513 05/26/20 18:03:44 0:24 0:00 MT (NIOP1 514 05/26/20 18:03:52 0:32 0:05 MT (NIOP:CPNA:VM1 515 05/26/20 18:03:52 0:32 0:05 MO (Mi-Pi( 516 05/26/20 19:02:46 0:23 0:00 MT (NIOP1 517 05/26/20 19:02:52 0:29 0:00 MT (NIOP:CPNA:VM1 518 05/26/20 19:02:52 0:29 0:00 MO (Mi-Pi( 519 05/26/20 19:13:13 0:25 0:00 MT (Mi -Pi:NIOP1 520 05/26/20 19:13:14 0:26 0:15 MT (Mi- ri:NIOP:CFNA:VM] 521 05/26/20 19:19:54 0:06 0:42 MO (Mi-Pi( 522 05/26/20 19:20:51 0:05 0:00 MO (Mi-Pi( 523 05/26/20 19:21:17 0:01 0:00 MT (NIOP:04M1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 28 SDNY_GM_00170IM1 EFTA01342969 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Date 04/17/2020 Conn. Time Curc) Seizure Time LT Originating Terminating flax CT Number Number Feature 524 05/26/20 19:21:17 0:01 0:04 MT (NIOP:CMCNN:VN1 525 05/26/20 19:21:18 0:22 0:00 MT (Ni-Pi:NIOP1 526 05/26/20 19:21:25 0:29 0:03 MT (Ni- ri:NIOP:CPNA:VN1 527 05/26/20 19:21:25 0:30 0:03 MO (Ni-Pil 528 05/26/20 19:21:36 0:06 6:58 MT (Ni-Pi:NIOP1 529 05/26/20 20:00:30 0:02 5:29 MO (Ni-Pil 530 05/26/20 20:06:12 0:02 0:42 MO (Ni-Pil 531 05/26/20 22:47:03 0:37 0:05 MO (Ni-Pil 532 05/27/20 19:58:08 0:23 0:00 MT (Ni-Pi:NIOP1 533 05/27/20 19:58:12 0:27 0:02 MT (Ni- ri:NIOP:CPNA:VN1 534 05/27/20 19:58:13 0:28 0:01 MO (Ni-Pil 535 05/27/20 20:19:38 0:10 2:16 MT (Ni-Pi:NIOP1 536 05/27/20 20:19:38 0:11 0:09 MO (Ni-Pil 537 05/27/20 20:19:47 0:00 0:15 MO (1 538 05/27/20 20:20:02 0:00 1:45 MO (Ni-PSI 539 05/27/20 20:21:47 0:00 0:09 MO (VCORR1 540 05/27/20 20:21:54 0:00 0:02 MT (NIOP:VCORR1 541 05/27/20 20:22:21 0:00 0:08 MO (Ni-Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 29 SDNY_GNL00170912 EFTA01342970 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t —IsS e s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Time Sum (UTC) tt Originating Terminating nez =SI Number Member CT Feature 542 05/27/20 20:22:21 0:08 0:00 NO (1 543 05/27/20 20:22:48 0:02 0:00 MT (NIOP1 544 05/27/20 20:22:49 0:18 0:00 ST (NIOP1 545 05/27/20 20:22:49 0:18 0:00 NO (Ni-ril 546 05/27/20 20:27:06 0:08 0:06 NO (Ni-ril 547 05/27/20 20:27:17 0:02 0:09 MT (Ni-ri:NIOPI 548 05/27/20 20:27:17 0:03 0:13 NO (Ni-ril 549 05/27/20 20:27:26 0:00 1:25 MT (NIOP1 550 05/27/20 20:27:30 0:00 2:23 NO (1 551 05/27/20 20:28:51 0:00 0:59 MT (Ni-ri:NIOPI 552 05/27/20 20:29:50 0:00 0:03 MT (NIOP:VCORR1 553 05/27/20 20:31:27 0:02 0:00 MT (NIOP:CMW] 554 05/27/20 20:31:27 0:03 0:00 NO (Ni-ril 555 05/27/20 20:34:42 0:21 8:33 MT (Ni-ri:NIOP1 556 05/27/20 20:43:15 0:00 7:44 MT (NIOP:VCORR1 557 05/27/20 20:51:20 0:10 38:47 MT (NIOP:CMN:VCORR1 558 05/27/20 20:51:20 0:10 0:02 NO (1 559 05/27/20 20:51:22 0:00 38:45 NO (Ni-ril 560 05/27/20 21:37:25 0:22 0:00 MT (Ni-ri:NIOP1 561 05/27/20 21:37:34 0:31 0:01 MT (Wi- ri:NIOP:CYNA:VM] AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 30 SDNY_GN1_00170913 EFTA01342971 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 Skim Conn. Seizure Tillie Time (OTC) IT Originating Terminating IMMI INSI Number Humber CT Feature 562 05/27/20 21:37:34 0:31 0:01 MO (Mi-Pil 563 05/28/20 16:49:41 0:24 0:00 NT (NIOP1 564 05/28/20 16:49:50 0:33 0:02 NT (NIOP:CPNA:VM1 565 05/28/20 16:49:50 0:33 0:02 MO (Mi-Pil 566 05/28/20 16:50:02 0:00 0:00 MT (NIOP:0041 567 05/28/20 16:50:05 0:03 0:01 MT (NIOP:CPB:CMN:VM1 568 05/28/20 16:50:05 0:04 0:01 MO (Mi-Pil 569 05/28/20 16:50:38 0:20 0:03 MO (Mi-Pil 570 05/28/20 16:50:53 0:08 0:00 MT (NIOP1 571 05/28/20 16:50:53 0:08 0:00 MO (Mi-Pil 572 05/28/20 17:10:11 0:10 3:58 MT (Mi-Pi:NIOP1 573 05/28/20 17:14:19 0:05 22:33 MT (Mi-Pi:NIOP1 574 05/28/20 17:14:19 0:06 22:33 MO (VCORR1 575 05/29/20 18:23:50 0:12 8:19 MO (Mi-Pil 576 05/29/20 18:32:09 0:00 6:19 MO (VCORR1 577 05/29/20 18:52:27 0:08 24:52 MO (Mi-Pil 578 05/29/20 18:52:27 0:08 27:53 MT (NIOP:VCORR1 579 05/29/20 19:17:19 0:00 3:01 MO (VCORR1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 31 SDNY_GM_00170914 EFTA01342972 ..020 MOBILITY illk, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/17/2020 dildimmo Conn. Seizure Tame Time (VC) ET Originating Terminating nez INS1 CT Number Number Feature 580 05/30/20 15:17:28 0:21 0:00 MT (Ni-ri:NIOPI 581 05/30/20 15:17:29 0:22 0:14 MT (WI- ri:NIOP:CtRA:VM1 582 05/30/20 15:23:39 0:05 36:20 NO (Ni-fil 583 06/02/20 14:44:00 0:10 17:35 MT (NIOP:VCORR1 584 06/02/20 14:44:00 0:11 10:35 NO (Ni-ril 585 06/02/20 14:54:35 0:00 0:19 NO (VCORRI 586 06/02/20 14:54:54 0:00 6:41 NO (Ni-fil 587 06/02/20 17:04:25 0:03 10:19 MT (NIOP:VCORR1 588 06/02/20 17:04:25 0:04 10:19 NO (Ni-fil 589 06/02/20 17:33:58 0:10 0:54 MT (Ni-ri:NIOPI 590 06/03/20 00:07:18 0:16 6:39 MT (NIOP:VCORR1 591 06/03/20 00:07:18 0:16 6:39 NO (Ni-ril 592 06/03/20 19:09:20 0:23 0:00 MT (NIOP:04141 593 06/03/20 19:09:26 0:29 0:02 NO (Ni-fil 594 06/03/20 19:09:26 0:29 0:02 MT (NIOP:CrNA:CMN:VM1 595 06/03/20 20:31:08 0:07 17:32 MO (Ni-ri1 596 06/03/20 20:31:08 0:07 60:39 MT (NIOP:VCORR1 597 06/03/20 20:48:40 0:00 21:03 MO (1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 32 SDNY_GNL00170915 EFTA01342973 .111020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e .....0 ‘•--00 AT&T Run Date: Run Fine: Voice Usage For: Item Conn. Date 08/17/2020 dildimmo Conn. Seizure 1.10.0 Time (UMC) ET Originating Terminating flax ntsI CT Number Number Feature 598 06/03/20 21:09:43 0:00 22:05 NO (Ai-Vi) 599 06/04/20 14:30:08 0:11 1:42 NT (Ai -Vi:NIOV) 600 06/05/20 19:34:05 0:26 0:00 NT (Ai -Vi:NIOV) 601 06/05/20 19:34:06 0:27 0:02 NO (VCORR) 602 06/05/20 19:34:06 0:27 0:02 NT (MI - Vi:NADV:CVNA:VM1 603 06/05/20 19:34:36 0:25 0:00 NT (Ai -Vi:NIOV) 604 06/05/20 19:34:38 0:27 0:02 NO (VCORR) 605 06/05/20 19:34:38 0:27 0:02 NT (NI- Fi:NIOP:CFNA:VN( 606 06/05/20 20:45:34 0:24 0:00 NT (NIOP) 607 06/05/20 20:45:41 0:31 0:02 NT (NIOV:CVNA:VM1 608 06/05/20 20:45:41 0:31 0:02 NO (Ai-Pi) 609 06/05/20 20:46:31 0:24 0:00 NT (NIOP) 610 06/05/20 20:46:37 0:30 0:02 NT (NIOV:CVNA:VM1 611 06/05/20 20:46:37 0:30 0:02 NO (Ai-Pi) 612 06/06/20 22:41:11 0:23 0:00 NT (NIOP) 613 06/06/20 22:41:16 0:28 1:04 NT (NIOV:CVNA:VM1 614 06/06/20 22:41:16 0:28 0:06 NO (Ai-Pi) 615 06/06/20 22:41:22 0:00 0:58 NO (VCORR) 616 06/06/20 22:43:40 0:04 3:36 NO (VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 33 SDNY_GNL00170916 EFTA01342974 P.020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e AT&T Run Dato: Run Time: Voice 'imago For: Item Conn. Date 06/17/2020 MI= Conn. Seizure Tim Time Co2c) Er Originating Terminating INS' Meter amber CT Feature 617 06/06/20 22:43:40 0:04 1:01 MT (NIOP:VCORR1 618 06/06/20 22:44:41 0:00 2:35 MT -22:NIOPI 619 06/09/20 20:00:48 0:01 2:22 MO -ril 620 06/09/20 20:59:57 0:10 40:05 MT (NIOP:VCORR1 621 06/09/20 20:59:57 0:11 40:05 MO (Ni-Pil 622 06/09/20 21:46:06 0:39 0:03 MO (Ni-Pil 623 06/09/20 21:46:34 0:11 0:00 MT (Ni -Pi:NIOP1 624 06/09/20 21:46:34 0:11 0:00 MT (NIOP1 625 06/09/20 21:46:39 0:16 0:01 MT (NIOP:CPS:VM1 626 06/09/20 21:46:39 0:17 0:01 MO (Ni-Pil 627 06/09/20 23:19:32 0:10 0:03 MO (Ni-Pil 628 06/09/20 23:19:41 0:03 0:00 MT (Ni -Pi:NIOP1 629 06/09/20 23:19:41 0:03 0:00 MT (Ni -Pi:NIOP1 630 06/09/20 23:19:46 0:08 0:02 MT (Ni-ri:NIOP:CPB:VM1 631 06/09/20 23:19:46 0:09 0:02 MO (Ni-Pil 632 06/09/20 23:58:57 0:02 0:00 MT (Ni -Pi:NIOP1 633 06/09/20 23:58:57 0:02 0:00 MT (Ni -Pi:NIOP1 634 06/09/20 23:59:00 0:05 0:02 MT (Ni-ri:NIOP:CPS:VM1 635 06/09/20 23:59:00 0:06 0:02 MO (Ni-Pil 636 06/10/20 14:55:12 0:23 0:00 MT (NIOP1 637 06/10/20 14:55:12 0:23 0:00 MT (Ni -Pi:NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 34 SDNY_GM_00170917 EFTA01342975 .111020 MOBILITY 4III, AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm •3/4--s "--6 \ 'AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .tor lYSI OTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 08/17/2020 dildimmo Conn. Seizure 1.10.0 Time (OTC) Er Originating Terminating n@I INSI Number 'lumber CT Feature 638 06/10/20 14:55:16 0:27 0:02 MT (Wi- fi:NIOV:CZNA:VM1 639 06/10/20 14:55:16 0:27 0:02 MO (Ni-PSI 640 06/10/20 14:55:36 0:10 0:05 MO (Ni-PSI 641 06/10/20 18:51:20 0:23 0:00 MT (NI001 642 06/10/20 18:51:27 0:30 0:02 MT (NIOV:CZNA:VMI 643 06/10/20 18:51:27 0:31 0:02 MO (Ni-PSI 644 06/10/20 19:11:49 0:21 0:00 MT (NIOVI 645 06/10/20 19:11:53 0:25 0:02 MO (Ni-PSI 646 06/10/20 19:11:53 0:25 0:02 MT (NIOV:CZNA:VMI 647 06/10/20 22:21:12 0:23 0:00 MT (NIOVI 648 06/10/20 22:21:17 0:28 0:02 MO (Ni-PSI 649 06/10/20 22:21:17 0:28 0:02 MT (NIOV:CZNA:VMI 650 06/11/20 00:50:40 0:22 0:00 MT (MI001 651 06/11/20 00:50:40 0:22 0:00 MT (NS-fi:NIOVI 652 06/11/20 00:50:45 0:27 0:01 MT - fi:NIOV:CZNA:VMI 653 06/11/20 00:50:45 0:27 0:01 MO (Ni-PSI 654 06/11/20 01:00:17 0:06 44:39 MT (NIOV:VCOARI 655 06/11/20 01:00:17 0:07 44:39 MO (Ni-PSI 656 06/11/20 14:12:28 0:38 0:03 MO (Ni-PSI 657 06/11/20 23:57:41 0:00 0:00 MT (NI00:0011 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 35 SDNY_GM_00170918 EFTA01342976 MOBILITY .111020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 411. AT&T Run Dato: Run Tine: Voice Osage For: Item Conn. Dato 06/17/2020 dildimmo Conn. Soisurn Till* Time (VMC) ZS Originating Terminating DMZ INBI Mager Maims CT Feature 658 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CPS:CMN:VM1 659 06/11/20 23:57:47 0:07 0:04 NO (Ni-Pil 660 06/12/20 00:35:53 0:39 0:04 NO (Ni-Pil 661 06/12/20 00:36:33 0:24 0:00 MT (NIOP1 662 06/12/20 00:36:39 0:30 0:02 MT (NIOP:CPNA:VM1 663 06/12/20 00:36:39 0:31 0:02 NO (Ni-Pil 664 06/12/20 13:40:56 0:17 0:38 MT (Ni-Pi:NIOP1 665 06/12/20 13:41:49 0:02 0:00 NO (Ni-Pil 666 06/12/20 16:43:56 0:25 0:00 MT (Ni-Pi:NIOP1 667 06/12/20 16:43:57 0:26 0:05 MT (Ili- ri:NIOP:CPNA:VM1 668 06/12/20 16:44:48 0:06 0:00 MT (Ni-Pi:NIOP1 669 06/12/20 16:47:03 0:36 0:03 NO (Ni-Pil 670 06/12/20 16:47:08 0:00 0:00 NO (Ni-Pil 671 06/12/20 16:47:56 0:35 0:05 NO (Ni-Pil 672 06/12/20 16:48:26 0:18 0:00 NO (Ni-Pil AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 36 SDNY_GM_00170919 EFTA01342977 .111020 MOBILITY 4Illo AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm traes `'s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: 0""n.. Voice Usage For: Item Conn. Conn. Seizure LT Originating Terminating flax INSI CT Feature Date Time Time (UTC) 673 06/12/20 16:49:51 0:13 0:43 NO (Mt -ril AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 37 SDNY_GM_00170920 EFTA01342978 pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cre ‘•- . ia AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 NM= Conn. Tama (OTC/ Originating ET Bytos Up Bytes Apn Dn EBBE IMBI MAKE MODEL 1 03/01/20 05:38:22 1:22 0 0 ims APPLE 'PHONES 2 03/01/20 05:41:28 60:00 11858 8720 ims APPLE 'PHONES 3 03/01/20 05:55:39 60:00 924 840 nxtgenpho ne APPLE 'PHONES 4 03/01/20 06:41:28 41:54 2580 1324 ims APPLE 'PHONES 5 03/01/20 06:55:39 60:00 865 525 nxtgenpho ne APPLE 'PHONES 6 03/01/20 07:23:22 60:00 11920 4220 ims APPLE 'PHONES 7 03/01/20 07:55:39 60:00 919 1036 nxtgenpho ne APPLE 'PHONES 8 03/01/20 08:23:22 60:00 6956 2648 ims APPLE 'PHONES 9 03/01/20 08:55:39 60:00 692 420 nxtgenpho ne APPLE 'PHONES 10 03/01/20 09:23:22 17:52 3424 1324 ims APPLE 'PHONES 11 03/01/20 09:44:39 60:00 11862 8772 ims APPLE 'PHONES 12 03/01/20 09:55:39 60:00 872 735 nxtgenpho ne APPLE 'PHONES 13 03/01/20 10:44:39 60:00 5192 2664 ims APPLE 'PHONES 14 03/01/20 10:55:39 60:00 635 525 nxtgenpho ne APPLE 'PHONES 15 03/01/20 11:44:39 60:00 5192 2648 ims APPLE 'PHONES 16 03/01/20 11:55:39 60:00 1038 630 nxtgenpho ne APPLE 'PHONES 17 03/01/20 12:44:39 27:07 2580 1324 ims APPLE 'PHONES 18 03/01/20 12:55:39 60:00 3838 5118 nxtgenpho ne APPLE 'PHONES 19 03/01/20 13:11:46 10:55 3424 1340 ims APPLE 'PHONES 20 03/01/20 13:25:26 18:05 7402 6102 ims APPLE 'PHONES 21 03/01/20 13:43:31 39:19 10252 4128 ims APPLE 'PHONES 22 03/01/20 13:55:39 60:00 7138 6900 nxtgenpho ne APPLE 'PHONES 23 03/01/20 14:24:05 0:19 9754 7358 ims APPLE 'PHONES 24 03/01/20 14:24:24 8:29 5180 1696 ims APPLE 'PHONES 25 03/01/20 14:38:56 60:00 13027 7566 ims 26 03/01/20 14:55:39 9:59 173 105 nxtgenpho ne APPLE 'PHONES 27 03/01/20 15:05:38 3:44 6742 4956 nxtgenpho ne APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170921 The information contained here is for use by authorized persons only and is not for general distribution. Page 1 EFTA01342979 PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 "MI= Conn. Time (OTC/ Originating Number ET Bytes Up Bytes Apn Dn IN/LI IMSI MAKS MODEL 28 03/01/20 15:09:22 0:12 0 0 nxtgonpho no APPLE 'PROMS 29 03/01/20 15:09:55 2:27 5220 5991 nxtgonpho no APPLE 'PEONES 30 03/01/20 15:09:56 2:27 5991 4932 nxtgenpho no APPLE 'PEONES 31 03/01/20 15:12:23 19:15 8268 7175 nxtgonphe ne APPLE 'PEONES 32 03/01/20 15:31:38 4:48 8406 5288 nxtgonpho no APPLE 'PHONES 33 03/01/20 15:36:25 1:43 6726 6727 nxtgonpho no APPLE 'PHONES 34 03/01/20 15:36:26 1:43 6727 6438 nxtgenpho ne APPLE 'PHONES 35 03/01/20 15:38:09 1:35 7450 5003 nxtgonphe ne APPLE 'PHONES 36 03/01/20 15:38:56 60:00 3532 1324 ims 37 03/01/20 15:39:44 0:22 5221 5991 nxtgonpho no APPLE 'PHONES 38 03/01/20 15:39:45 0:22 5991 4933 nxtgonphe no APPLE 'PHONES 39 03/01/20 15:40:07 31:31 21318 19563 nxtgenphe ne APPLE 'PHONES 40 03/01/20 16:02:35 17:49 9902 6262 ims 41 03/01/20 16:11:37 2:55 4504 5759 nxtgenpho ne APPLE 'PHONES 42 03/01/20 16:11:38 2:55 5759 4216 nxtgonphe no APPLE 'PHONES 43 03/01/20 16:14:33 0:05 0 0 nxtgonphe no APPLE 'PHONES 44 03/01/20 16:27:22 21:33 8365 6084 ims 45 03/01/20 16:29:19 1:40 7396 4952 nxtgonpho no APPLE 'PHONES 46 03/01/20 16:30:58 1:31 5220 5991 nxtgonpho no APPLE 'PHONES 47 03/01/20 16:30:59 1:31 5991 4932 nxtgonpho no APPLE 'PHONES 48 03/01/20 16:32:30 6:30 6040 4939 nxtgonpho no APPLE 'PHONES 49 03/01/20 16:38:56 60:00 0 0 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170922 The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA01342980 pu020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. casso r ‘•- . 0° AT&T Run Date: Run Tine: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (uzz) 50 03/01/20 16:38:59 51 03/01/20 16:39:00 52 03/01/20 16:43:59 53 03/01/20 16:50:30 54 03/01/20 16:50:37 55 03/01/20 16:50:38 56 03/01/20 16:51:00 57 03/01/20 17:08:38 58 03/01/20 17:08:39 59 03/01/20 17:09:47 60 03/01/20 17:38:56 61 03/01/20 17:50:30 62 03/01/20 17:51:25 63 03/01/20 17:51:32 64 03/01/20 17:51:33 65 03/01/20 18:01:09 66 03/01/20 18:06:21 67 03/01/20 18:13:49 68 03/01/20 18:25:49 69 03/01/20 18:35:07 70 03/01/20 18:36:35 71 03/01/20 18:44:38 72 03/01/20 18:44:39 73 03/01/20 18:50:30 74 03/01/20 18:50:53 Originating Number ET Bytos Bytes Apn MEI INSI MAKE MODEL Up Dn 4:59 6299 7586 nxtgonpho APPLE !PHONES no 4:59 7586 5915 nxtgonpho APPLE !PHONES no 6:39 7933 19165 nxtgonpho APPLE !PHONES no 60:00 24775 18430 ims 0:21 288 48 nxtgonpho APPLE !PHONES no 0:22 48 0 nxtgonpho APPLE !PHONES no 17:39 19037 30448 nxtgonpho APPLE !PHONES no 1:08 5117 6043 nxtgonpho APPLE !PHONES no 1:08 6043 4829 nxtgonpho APPLE !PHONES no 41:45 65228 67623 nxtgonpho APPLE !PHONES no 12:29 0 0 ims 60:00 0 0 ims 6:34 8423 6138 ims 45:02 14269 13073 nxtgonpho APPLE !PHONES no 45:02 13073 17918 nxtgonpho APPLE !PHONES ne 2:30 8313 6090 ims 5:55 11275 10058 ims 8:59 8187 6296 ims 5:48 8263 7472 ims 26:02 8371 6016 ims 8:04 43532 18469 nxtgonpho APPLE !PHONES no 6:14 10852 13435 nxtgonpho APPLE !PHONES no 6:14 13435 21886 nxtgonpho APPLE !PHONES no 60:00 0 0 ims 2:02 9758 6565extgonpho APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170923 The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA01342981 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Dunbar ET Bytes Up Bytes Apn Dn MBE! IMSI MARE MODEL 75 03/01/20 18:50:54 2:02 6565 9470 nxtgonpho ne APPLE 'PHONES 76 03/01/20 18:52:56 60:00 19262 29639 nxtgonpho ne APPLE 'PHONES 77 03/01/20 19:02:56 60:00 22413 16301 ims 78 03/01/20 19:50:30 60:00 0 0 ims 79 03/01/20 19:52:56 9:07 173 105 nxtgonpho no APPLE 'PHONES 80 03/01/20 19:58:23 0:05 0 3613 ims 81 03/01/20 20:02:02 2:03 5218 5973 nxtgonpho no APPLE 'PHONES 82 03/01/20 20:02:03 2:03 5973 4930 nxtgenpho ne APPLE 'PHONES 83 03/01/20 20:02:56 60:00 6956 2864 ims 84 03/01/20 20:04:06 60:00 32943 15861 nxtgonpho ne APPLE 'PHONES 85 03/01/20 20:50:30 58:40 0 0 ims 86 03/01/20 21:02:56 32:46 8480 3004 ims 87 03/01/20 21:04:06 3:13 0 0 nxtgonpho ne APPLE 'PHONES 88 03/01/20 21:07:19 40:44 7436 11745 nxtgonpho no APPLE 'PHONES 89 03/01/20 21:43:30 0:16 48 0 ims APPLE 'PHONES 90 03/01/20 21:43:46 51:58 11627 7387 ims APPLE 'PHONES 91 03/01/20 21:48:02 2:57 5221 6043 nxtgonpho no APPLE 'PHONES 92 03/01/20 21:48:03 2:57 6043 4933 nxtgonpho no APPLE 'PHONES 93 03/01/20 21:51:00 2:13 6040 4892 nxtgonpho no APPLE 'PHONES 94 03/01/20 21:53:12 2:03 5221 5991 nxtgonpho no APPLE 'PHONES 95 03/01/20 21:53:13 2:03 5991 4933 nxtgonpho ne APPLE 'PHONES 96 03/01/20 21:55:16 15:41 9091 5311 nxtgonpho no APPLE 'PHONES 97 03/01/20 22:10:56 2:03 5177 6103 nxtgonpho no APPLE 'PHONES 98 03/01/20 22:10:57 2:03 6103 4889 nxtgonpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170924 The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA01342982 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Date: Run Tine: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Timm (OTC) Originating Number ET Bytes Up Bytes Apn Dn LBSI IMSI MAKE 99 03/01/20 22:13:00 60:00 6976 5733 nxtgonpho ne APPLE 100 03/01/20 22:42:34 13:34 6778 6105 ims APPLE 101 03/01/20 22:56:08 40:20 7172 3696 ims APPLE 102 03/01/20 23:13:00 60:00 1471 4996 nxtgonpho no APPLE 103 03/01/20 23:38:48 0:05 0 0 ims APPLE 104 03/01/20 23:53:31 42:44 17191 8099 ims 105 03/02/20 00:13:00 60:00 4177 4210 nxtgonpho no APPLE 106 03/02/20 00:47:05 36:22 8553 7960 ims 107 03/02/20 01:13:00 58:51 4775 11416 nxtgonpho ne APPLE 108 03/02/20 01:28:01 19:50 8228 7855 ims APPLE 109 03/02/20 01:47:51 2:30 3532 1340 ims APPLE 110 03/02/20 01:58:42 60:00 13603 7860 ims 111 03/02/20 02:11:50 2:11 5221 6043 nxtgonpho no APPLE 112 03/02/20 02:11:51 2:11 6043 4933 nxtgonpho no APPLE 113 03/02/20 02:14:02 60:00 7529 5854 nxtgonpho no APPLE 114 03/02/20 02:58:42 59:06 13444 4516 ims 115 03/02/20 03:14:02 60:00 1746 1500 nxtgonpho no APPLE 116 03/02/20 03:58:49 60:00 12186 9034 ims APPLE 117 03/02/20 04:14:02 60:00 1320 1250 nxtgonpho no APPLE 118 03/02/20 04:58:49 60:00 5192 2664 ims APPLE 119 03/02/20 05:14:02 60:00 1095 1341 nxtgonpho ne APPLE 120 03/02/20 05:58:49 60:00 5192 2664 ims APPLE 121 03/02/20 06:14:02 60:00 639 375 nxtgonpho no APPLE 122 03/02/20 06:58:49 41:03 2596 1324 ims APPLE 123 03/02/20 07:14:02 25:50 369 375 nxtgonpho no APPLE 124 03/02/20 07:39:52 0:15 495 293 nxtgonpho no APPLE 125 03/02/20 07:39:52 0:07 0 0 ims APPLE MODEL 'PEONES IPEOME8 'PEONES 'PHONED 'PHONED 'PHONED 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internee enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170925 The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA01342983 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:56:66pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Timm: Data Usage For: Item Conn. Data 06/17/2020 WM= Conn. Time (UTC) Originating Numbor ET Bytes Up Bytes Apn Dn neer IMSI MAKE MODEL 126 03/02/20 07:39:59 22:50 4840 1572 Las APPLE !PHONES 127 03/02/20 07:40:07 60:00 582 572 nxtgonpho no APPLE !PHONES 128 03/02/20 08:07:09 29:52 9262 7340 Las APPLE !PHONES 129 03/02/20 08:37:01 6:04 8728 7072 Las APPLE !PHONES 130 03/02/20 08:40:07 2:56 252 269 nxtgonpho no APPLE !PHONES 131 03/02/20 12:01:08 29:41 103877 370807 nxtgonpho no APPLE !PHONES 132 03/02/20 12:01:11 29:38 14032 12064 Las APPLE !PHONES 133 03/02/20 16:16:03 30:50 152117 587017 nxtgonpho no APPLE !PHONES 134 03/02/20 16:16:05 1:10 8816 6194 Las APPLE !PHONES 135 03/02/20 16:17:15 60:00 79112 44236 Las APPLE !PHONES 136 03/02/20 16:34:35 0:04 0 2210 Las APPLE !PHONES 137 03/02/20 16:34:56 0:23 7149 31933 ims APPLE !PHONES 138 03/02/20 16:35:59 0:06 5581 12969 ims APPLE !PHONES 139 03/02/20 16:36:44 0:56 117835 139892 ims APPLE !PHONES 140 03/02/20 16:43:41 0:09 11001 4562 ims APPLE !PHONES 141 03/02/20 16:44:01 2:12 235412 454074 ims APPLE !PHONES 142 03/02/20 16:46:52 2:07 5464 7722 nxtgonpho no APPLE !PHONES 143 03/02/20 16:46:53 2:07 7722 5176 nxtgonpho no APPLE !PHONES 144 03/02/20 16:48:59 21:34 10832 12811 nxtgonpho no APPLE !PHONES 145 03/02/20 17:10:33 44:52 11500 13087 nxtgonpho no APPLE !PHONES 146 03/02/20 17:10:34 44:52 13087 13674 nxtgonpho no APPLE !PHONES 147 03/02/20 17:17:15 8:46 0 0 ims APPLE !PHONES 148 03/02/20 17:28:07 14:50 8207 7090 ims 149 03/02/20 17:48:50 11:14 8225 6088 ims 150 03/02/20 17:55:26 3:03 7794 5274 nxtgonpho ne APPLE !PHONES 151 03/02/20 17:58:28 18:22 321797 68055 nxtgonpho ne APPLE !PHONES 152 03/02/20 17:58:29 18:22 68055 350874 nxtgonpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170926 The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA01342984 PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating CT Time Number (UTC) Bytes Up Bytes Apn Dn DOLT INS! MANE Merl. 153 03/02/20 18:04:26 12:24 6316 6778 ims APPLE 'PHONED 154 03/02/20 18:04:27 12:24 6670 5964 ims APPLE 'PHONED 155 03/02/20 18:15:35 17:29 10178 6494 ims 156 03/02/20 18:16:51 8:26 5439 6387 nxtgenpho ne APPLE 'PHONED 157 03/02/20 18:16:52 8:26 6387 5151 nxtgenpho ne APPLE 'PHONED 158 03/02/20 18:25:18 15:26 8963 10970 nxtgenpho ne APPLE 'PHONED 159 03/02/20 18:36:22 13:47 8199 5999 ims APPLE IPHONEO 160 03/02/20 18:40:43 2:07 13092 7135 nxtgenpho ne APPLE 'PHONES 161 03/02/20 18:40:44 2:07 7135 12804 nxtgenpho ne APPLE 'PHONES 162 03/02/20 18:42:51 60:00 11769 17044 nxtgenpho ne APPLE 'PHONES 163 03/02/20 18:50:09 2:18 2984 1340 ims APPLE 'PHONES 164 03/02/20 18:50:09 2:18 2812 1340 ims APPLE 'PHONES 165 03/02/20 18:52:27 4:13 3424 1448 ims APPLE 'PHONES 166 03/02/20 18:58:32 4:46 0 0 ims 167 03/02/20 19:14:25 15:41 9323 6918 ims 168 03/02/20 19:32:47 17:39 8477 6283 ims 169 03/02/20 19:42:51 54:20 10545 9322 nxtgenpho ne APPLE 'PHONES 170 03/02/20 19:56:40 10:31 0 0 ims 171 03/02/20 20:09:27 60:00 16978 9252 ims 172 03/02/20 20:37:10 2:07 5578 6598 nxtgenpho ne APPLE !PHONES 173 03/02/20 20:37:11 2:07 6457 5290 nxtgenpho ne APPLE !PHONES 174 03/02/20 20:39:18 27:09 8245 11360 nxtgenpho ne APPLE !PHONES 175 03/02/20 21:06:26 2:18 6296 8106 nxtgenpho ne APPLE !PHONES 176 03/02/20 21:06:27 2:19 8106 6008 nxtgenpho ne APPLE !PHONES 177 03/02/20 21:08:46 38:39 8309 6108 nxtgenpho ne APPLE !PHONES 178 03/02/20 21:09:27 15:00 0 0 ims 179 03/02/20 21:32:03 20:42 8203 5998 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170927 The information contained here is for use by authorized persons only and is not for general distribution. Page 7 EFTA01342985 PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number CT Bytes Up Bytes Apn Dn DMZ IBS! ISAN2L MOMS 180 03/02/20 21:47:24 12:15 17860 39013 nxtgonpho no APPLE 'PHONES 181 03/02/20 21:47:25 12:16 39013 17476 nxtgenpho no APPLE IPHONE8 182 03/02/20 21:58:20 30:21 0 0 isms 183 03/02/20 21:59:40 34:23 32299 48475 nxtgonpho no APPLE 'PHONES 184 03/02/20 21:59:41 34:23 48475 32752 nxtgonpho no APPLE !PHONES 185 03/02/20 22:06:58 22:20 10591 8188 ims 186 03/02/20 22:28:40 5:23 6305 6732 isms APPLE !PHONES 187 03/02/20 22:28:41 5:23 6732 6041 isms APPLE !PHONES 188 03/02/20 22:31:33 6:26 10063 8268 isms 189 03/02/20 22:34:03 7:05 8089 10976 nxtgonpho no APPLE !PHONES 190 03/02/20 22:34:05 7:04 10976 7801 nxtgonpho no APPLE !PHONES 191 03/02/20 22:40:32 32:40 19107 12870 isms 192 03/02/20 22:41:09 1:04 8543 5515 nxtgonpho no APPLE !PHONES 193 03/02/20 22:42:12 2:10 5792 7397 nxtgonpho no APPLE !PHONES 194 03/02/20 22:42:13 2:10 7397 5504 nxtgonpho no APPLE !PHONES 195 03/02/20 22:44:23 12:58 8379 5971 nxtgonpho no APPLE !PHONES 196 03/02/20 22:57:20 10:17 9677 19783 nxtgenpho no APPLE !PHONES 197 03/02/20 22:57:21 10:17 19783 9389 nxtgenpho no APPLE !PHONES 198 03/02/20 23:07:38 0:51 7248 5395 nxtgenpho no APPLE !PHONES 199 03/02/20 23:08:29 99:47 12346 13625 nxtgenpho no APPLE !PHONES 200 03/02/20 23:08:30 60:00 6907 8351 nxtgonpho no APPLE !PHONES 201 03/02/20 23:13:34 94:42 9570 9722 isms APPLE !PHONES 202 03/02/20 23:13:35 60:00 9614 9414 isms APPLE !PHONES 203 03/02/20 23:14:47 0:01 0 0 isms 204 03/02/20 23:17:19 34:17 11811 7693 isms AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170928 The information contained here is for use by authorized persons only and is not for general distribution. Page 8 EFTA01342986 MOBILITY PRI020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:30:50pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Ma= Conn. TIM* (OTC/ Originating B2 Bytes up Bytes Apn EMU IMSI MAKE 0n MODEL 205 03/02/20 23:56:48 60:00 14766 7840 ims 206 03/03/20 00:08:30 39:48 6718 6727 nxtgenpho ne APPLE 'PEONES 207 03/03/20 00:13:35 34:43 0 0 ims APPLE 'PEONES 208 03/03/20 00:48:17 4:13 7806 5708 nxtgenpho ne APPLE 'PEONES 209 03/03/20 00:52:30 14:10 64691 46658 nxtgenpho ne APPLE 'PEONES 210 03/03/20 00:52:35 56:22 20187 11190 ims 211 03/03/20 00:56:48 60:00 0 0 ims 212 03/03/20 01:06:40 2:06 5584 6435 nxtgenpho ne APPLE 'PHONES 213 03/03/20 01:06:41 2:06 6435 5296 nxtgenpho ne APPLE 'PHONES 214 03/03/20 01:08:47 2:21 7926 5519 nxtgenpho ne APPLE 'PHONES 215 03/03/20 01:11:07 1:20 5584 6507 nxtgenpho ne APPLE 'PHONES 216 03/03/20 01:11:08 1:19 6507 5296 nxtgenpho ne APPLE 'PHONES 217 03/03/20 01:12:28 30:56 17894 13813 nxtgenpho ne APPLE 'PHONES 218 03/03/20 01:43:23 14:47 6083 6888 nxtgenpho ne APPLE 'PHONES 219 03/03/20 01:43:24 14:47 6888 5795 nxtgenpho ne APPLE 'PHONES 220 03/03/20 01:53:38 32:27 16630 8649 ims 221 03/03/20 01:56:48 60:00 0 0 ims 222 03/03/20 01:58:11 60:00 8925 7567 nxtgenpho ne APPLE 'PHONES 223 03/03/20 02:35:26 60:00 13553 7876 ims 224 03/03/20 02:56:48 60:00 0 0 ims 225 03/03/20 02:58:11 60:00 852 500 nxtgenpho ne APPLE 'PHONES 226 03/03/20 03:35:26 60:00 13444 4360 ims 227 03/03/20 03:56:48 45:12 0 0 ims 228 03/03/20 03:58:11 60:00 6285 9286 nxtgenpho ne APPLE 'PHONES 229 03/03/20 04:35:26 11:25 0 0 ims 230 03/03/20 04:54:33 26:00 11002 6192 ims AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170929 The information contained here is for use by authorized persons only and is not for general distribution. Page 9 EFTA01342987 ..020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 45, AT&T Run Data: Run Tine: Data Usage For: Item Conn. Date 06/17/2020 Conn. TIM* (07C) Originating BT Bytos Up Bytes Apn Dn IMAI IIS! MAKE MODEL 231 03/03/20 04:58:11 60:00 1008 750 nxtgenpho ne APPLE 'PEONES 232 03/03/20 05:28:33 5:32 0 0 ims 233 03/03/20 05:42:12 11:36 8451 6230 ims 234 03/03/20 05:58:11 30:15 426 250 nxtgenpho ne APPLE 'PEONES 235 03/03/20 06:05:52 0:25 9552 7198 ims APPLE 'PEONES 236 03/03/20 06:06:17 60:00 12012 4560 ims APPLE 'PEONES 237 03/03/20 06:28:26 2:10 5221 6055 nxtgenpho ne APPLE 'PEONES 238 03/03/20 06:28:27 2:10 6055 4933 nxtgonpho no APPLE !PHONES 239 03/03/20 06:30:37 12:02 6265 5017 nxtgonpho no APPLE !PHONES 240 03/03/20 06:42:39 61:49 6703 7688 nxtgonpho no APPLE !PHONES 241 03/03/20 06:42:40 60:00 7515 6310 nxtgenpho ne APPLE 'PHONES 242 03/03/20 07:06:17 7:58 0 0 ims APPLE !PHONES 243 03/03/20 07:23:35 20:53 7325 6792 ims APPLE !PHONES 244 03/03/20 07:23:36 20:53 6792 7061 ims APPLE !PHONES 245 03/03/20 07:23:52 10:34 11234 6390 ims 246 03/03/20 07:42:38 38:41 13368 7571 ims 247 03/03/20 07:42:40 1:49 173 105 nxtgenpho ne APPLE !PHONES 248 03/03/20 07:44:29 15:24 7635 5218 nxtgenpho ne APPLE !PHONES 249 03/03/20 07:59:52 8:49 7621 7231 nxtgenpho ne APPLE !PHONES 250 03/03/20 07:59:53 8:49 7231 7237 nxtgenpho ne APPLE !PHONES 251 03/03/20 08:08:42 0:48 6870 4955 nxtgenpho no APPLE !PHONES 252 03/03/20 08:09:29 0:48 5116 6055 nxtgenpho ne APPLE !PHONES 253 03/03/20 08:09:30 0:48 6055 4828 nxtgenpho ne APPLE !PHONES 254 03/03/20 08:10:18 0:40 6112 4952 nxtgenpho ne APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 10 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00170930 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342988 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn LBSS IMSI MAKE MODEL 255 03/03/20 08:10:57 2:36 5117 6055 nxtgonpho no APPLE 'PEONES 256 03/03/20 08:10:58 2:36 6055 4829 nxtgonpho no APPLE 'PEONES 257 03/03/20 08:13:33 8:22 5113 6105 nxtgonpho no APPLE 'PEONES 258 03/03/20 08:13:35 8:21 6105 4825 nxtgonpho ne APPLE 'PEONES 259 03/03/20 08:21:56 60:00 7213 5837 nxtgenpho ne APPLE 'PEONES 260 03/03/20 08:31:42 16:37 9802 6142 ims 261 03/03/20 08:49:57 41:51 14587 7694 ims 262 03/03/20 09:21:56 5:17 173 105 nxtgenpho ne APPLE 'PEONES 263 03/03/20 09:27:12 2:06 5116 6055 nxtgenpho ne APPLE 'PEONES 264 03/03/20 09:27:13 2:06 6055 4828 nxtgenpho ne APPLE 'PEONES 265 03/03/20 09:29:19 60:00 8500 5638 nxtgenpho ne APPLE 'PEONES 266 03/03/20 09:43:56 4:50 0 0 ims 267 03/03/20 09:58:18 3:50 11004 6250 ims 268 03/03/20 10:07:18 25:12 9679 6398 ims 269 03/03/20 10:29:19 60:00 8133 2343 nxtgenpho ne APPLE 'PHONES 270 03/03/20 10:47:22 0:14 48 0 ims APPLE 'PHONES 271 03/03/20 10:47:36 34:54 13747 8456 ism APPLE 'PHONES 272 03/03/20 11:29:05 33:39 13398 7586 ims 273 03/03/20 11:29:19 37:34 9542 6573 nxtgonpho no APPLE 'PHONES 274 03/03/20 12:06:52 8:49 5221 6055 nxtgenpho ne APPLE 'PHONES 275 03/03/20 12:06:54 8:48 6055 4933 nxtgenpho ne APPLE 'PHONES 276 03/03/20 12:07:05 60:00 18679 8370 ims 277 03/03/20 12:15:42 2:09 5216 6053 nxtgenpho ne APPLE 'PHONES 278 03/03/20 12:15:43 2:09 6053 4928 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170931 The information contained here is for use by authorized persons only and is not for general distribution. Page 11 EFTA01342989 MOBILITY ..020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cro AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating Time Number ET Bytes Up Bytes Apn Dn TAINT MANZ MODEL. (UTC) 279 03/03/20 12:17:52 19:55 7630 6275 nxtgenpho ne APPLE 'PEONES 280 03/03/20 12:37:46 2:06 5532 9011 nxtgenpho no APPLE 'PEONES 281 03/03/20 12:37:47 2:06 9011 5244 nxtgenpho no APPLE 'PEONES 282 03/03/20 12:39:53 31:03 7586 5843 nxtgenpho no APPLE 'PEONES 283 03/03/20 13:07:05 22:45 4964 1572 ims 284 03/03/20 13:10:55 0:40 5325 6280 nxtgenpho ne APPLE 'PHONES 285 03/03/20 13:10:56 0:40 6280 5037 nxtgonpho no APPLE 'PHONES 286 03/03/20 13:11:36 7:06 9026 5966 nxtgenpho no APPLE 'PHONES 287 03/03/20 13:18:41 8:16 5217 6105 nxtgenpho no APPLE 'PHONES 288 03/03/20 13:18:42 8:16 6105 4929 nxtgenpho no APPLE 'PHONES 289 03/03/20 13:26:58 0:46 6870 4956 nxtgenpho ne APPLE 'PHONES 290 03/03/20 13:27:43 2:06 10413 7087 nxtgenpho ne APPLE 'PHONES 291 03/03/20 13:27:44 2:06 7087 10125 nxtgenpho ne APPLE 'PHONES 292 03/03/20 13:29:50 38:38 13586 8797 nxtgenpho ne APPLE 'PHONES 293 03/03/20 13:33:07 0:25 16290 13240 ims APPLE 'PHONES 294 03/03/20 13:33:32 33:21 10840 10928 ims APPLE 'PHONES 295 03/03/20 14:08:27 6:02 5221 6055 nxtgenpho no APPLE 'PHONES 296 03/03/20 14:08:28 6:02 6055 4933 nxtgenpho no APPLE 'PHONES 297 03/03/20 14:14:30 46:03 26448 21682 nxtgenpho no APPLE 'PHONES 298 03/03/20 14:14:32 10:03 8808 6173 ims APPLE 'PHONES 299 03/03/20 14:24:35 29:19 8248 3004 ims APPLE 'PHONES 300 03/03/20 14:54:30 0:29 8098 7128 ims APPLE 'PHONES 301 03/03/20 14:54:59 39:09 9804 3052 ims APPLE 'PHONES 302 03/03/20 15:00:32 13:07 24019 14458 nxtgenpho no APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GNL00170932 The information contained here is for use by authorized persons only and is not for general distribution. Page 12 EFTA01342990 PRI020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ce. AT&T Run Dato: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC/ 303 03/03/20 15:00:33 13:07 14458 23635 nxtgonpho no 304 03/03/20 15:13:40 58:17 7179 6785 nxtgenpho no 305 03/03/20 15:35:15 0:06 0 0 ims 306 03/03/20 15:43:23 5:03 18043 11424 ims 307 03/03/20 15:48:44 55:52 13475 8142 ims 308 03/03/20 16:20:12 2:10 7680 8328 nxtgonpho no 309 03/03/20 16:20:13 2:10 8328 7392 nxtgonpho no 310 03/03/20 16:22:23 52:40 60305 22538 nxtgonpho no 311 03/03/20 16:45:35 60:00 12603 7786 ims 312 03/03/20 17:15:02 2:07 13534 92096 nxtgonpho no 313 03/03/20 17:15:03 2:07 92096 13246 nxtgonpho no 314 03/03/20 17:17:10 40:59 10564 6373 nxtgonpho no 315 03/03/20 17:45:35 29:47 5088 1572 ims 316 03/03/20 17:58:08 11:42 11259 12573 nxtgenpho no 317 03/03/20 17:58:09 11:42 12573 24067 nxtgonpho no 318 03/03/20 18:09:51 35:52 6810 5733 nxtgonpho no 319 03/03/20 18:17:26 18:56 6670 5963 ims 320 03/03/20 18:36:22 60:00 11996 4328 ims 321 03/03/20 18:45:42 2:07 5218 6105 nxtgonpho ne 322 03/03/20 18:45:43 2:07 6105 4930 nxtgonpho no 323 03/03/20 18:47:50 2:26 9442 11383 nxtgonpho no 324 03/03/20 18:50:15 2:15 5535 9029 nxtgonpho ne 325 03/03/20 18:50:16 2:15 9029 5247 nxtgonpho ne 326 03/03/20 18:52:31 21:26 15301 35155 nxtgenpho no Originating Number BT Bytes Bytes Apn DIRT IM9I NAM MODEL Up Dn APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 13 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGNL00170933 The information contained here is for use by authorized persons only and is not for general distribution. EFTA01342991

Technical Artifacts (12)

View in Artifacts Browser

Email addresses, URLs, phone numbers, and other technical indicators extracted from this document.

Phone12096078210

Phone12128217058

Phone13036196231

Phone13038983895

Phone14013693201

Phone14158666097

Phone14827503

Phone15165822707

Phone19177695374

Phone19785258484

Phone19786751300

Tail #N101

Summary

Ask AI About This Document

Extracted Text (OCR)

Technical Artifacts (12)

Link to Specific Page

Related Documents (6)

MOBILITY

a Deutsche Bank

*UBS

III111111020

'aunt NUM

065 Fewncial Services Inc.

Forum Discussions