Skip to main content
Skip to content
Case File
efta-efta01251208DOJ Data Set 9Other

MOBILITY

Date
Unknown
Source
DOJ Data Set 9
Reference
efta-efta01251208
Pages
558
Persons
0
Integrity

Summary

Ask AI About This Document

0Share
PostReddit

Extracted Text (OCR)

EFTA Disclosure
Text extracted via OCR from the original document. May contain errors from the scanning process.
MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in arc. 41111. tra i as `a. AT&T Run Date: Run Time: Voice Usage For: 06/17/2020 Item Conn. Conn. Seizure ET Originating Terminating IMEI CT Feature Date Time Time Number Number (OTC) 1 03/01/20 19:58:27 0:09 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 2 03/02/20 16:34:38 0:03 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 3 03/02/20 16:35:15 0:10 0:00 MT (1 4 03/02/20 16:35:19 0:24 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 S 03/02/20 16:36:05 0:06 0:00 MT (NIOR) 6 03/02/20 16:36:05 0:07 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 7 03/02/20 16:36:53 0:09 0:47 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 8 03/02/20 16:43:46 0:09 0:04 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 9 03/02/20 16:44:06 0:06 2:06 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 10 03/03/20 21:36:01 0:07 30:41 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 11 03/04/20 18:52:26 0:08 1:40 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 12 03/04/20 19:46:37 0:20 0:05 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 13 03/04/20 22:07:25 0:05 47:57 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 14 03/04/20 23:04:25 0:03 0:39 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 15 03/05/20 00:56:24 0:33 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 1 SDNY_GM_00002608 EFTA_00116684 EFTA01251208 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 41011, tra '`si s AT&T Run Date: Run Time: Voice usage For: Item Conn. Date 06/17/2020 18:55:22 Conn. Time (OTC) Seizure Time ET Originating Terminating IMEI Thaber Number INS/ CT Feature 16 03/05/20 00:58:14 0:07 0:26 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 17 03/05/20 13:22:45 0:11 1:13 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 18 03/05/20 14:04:59 0:20 0:00 3587080982063725 310410214827503 MT (MOP) APPLE IPHONE8 19 03/05/20 15:49:47 0:29 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 20 03/05/20 15:49:48 0:30 0:01 3587080982063725 310410214827503 MT (Wi- APPLE IPHONE8 Fi:NIOP:CFMA:VM) 21 03/05/20 15:50:04 0:08 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 22 03/05/20 17:14:12 0:02 0:34 3587080982063725 310410214827503 1.0 (Wi-Fi:NIOR) APPLE IPHONE8 23 03/05/20 17:15:32 0:07 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 24 03/05/20 18:27:34 0:19 0:05 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 25 03/05/20 18:29:16 0:20 0:04 3587080982063725 310410214827503 MO (Wi-Fi) APPLE IPHONE8 26 03/05/20 18:42:42 0:20 0:03 3587080982063725 310410214827503 MO (Ni-Fi) APPLE IPHONE8 27 03/05/20 20:38:46 0:10 9:04 3587080982063725 310410214827503 MO (VCORR) APPLE IPHONE8 28 03/05/20 20:51:35 0:05 0:00 3587080982063725 310410214827503 MO () APPLE IPRONE8 29 03/06/20 15:08:17 0:04 1:07 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 2 SDNY_GM_00002609 EFTA_00116685 EFTA01251209 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 MiiiIIIII Conn. Seizure Time Time (UTC) ET Originating Terminating IMZI Mater Number INS/ CT Feature 30 03/06/20 20:02:56 0:20 0:05 3587080982063725 310410214827503 MO (14i-Fi) APPLE !PHONES 31 03/06/20 20:51:24 0:03 0:58 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE 'PHONES 32 03/06/20 21:03:38 0:14 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 33 03/06/20 21:04:01 0:08 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 34 03/06/20 21:04:33 0:03 0:16 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 35 03/06/20 21:09:32 0:03 0:51 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 36 03/06/20 21:32:36 0:03 1:11 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 37 03/07/20 00:02:25 0:13 0:00 310410214827503 MT (1 38 03/07/20 00:02:25 0:24 0:00 ST 11410P) APPLE !PHONES 39 03/07/20 00:02:26 0:25 0:05 ST (1410P:CFNA:VM) APPLE !PHONES 40 03/07/20 16:17:45 0:15 0:00 ST 11410P) APPLE !PHONES 41 03/07/20 18:21:38 0:05 0:08 MT (NITR:INIOR) 42 03/07/20 18:21:40 0:25 0:04 3587080982063725 310410214827503 MO (Mi-Fi:NIOR) APPLE !PHONES 43 03/07/20 18:39:48 0:06 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 44 03/08/20 00:01:01 0:22 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 3 SDNY_GM_00002610 EFTA_00116686 EFTA01251210 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Data: Run Tuna: Voice Osage For: Item Conn. Date 06/17/2020 18:33:22 Conn. Time (UTC) Seizure Time FM Originating Terminating IMEI Number Number CT Feature 45 03/08/20 18:09:41 0:11 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 46 03/08/20 18:23:28 0:13 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 47 03/09/20 00:45:20 0:27 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 48 03/09/20 00:45:22 0:29 0:01 3587080982063725 310410214827503 MT (Wi- 49 03/09/20 01:30:41 0:17 18:35 APPLE 'PHONES MT Fl:NIOP:CFNA:VM) (NIOR:VCORR) SO 03/09/20 01:30:41 0:18 18:35 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES Si 03/09/20 14:52:35 0:17 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES S2 03/09/20 15:46:24 0:07 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S3 03/09/20 18:49:59 0:04 0:00 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES 54 03/10/20 17:41:33 0:14 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 55 03/10/20 17:43:58 0:23 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S6 03/10/20 17:44:00 0:25 0:58 3587080982063725 310410214827503 MT (Wi- APPLE 'PHONES Fi:NIOR:CFNA:VM) S7 03/10/20 18:36:22 0:13 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S8 03/10/20 23:20:53 0:01 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE 'PHONES S9 03/10/20 23:20:57 0:02 0:00 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 4 SDNY_GM_00002611 EFTA_00116687 EFTA01251211 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c`tsgs AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 MI= Conn. Seizure Time Time (UTC) ST Originating Terminating IMEI Hunter Number INS/ CT Feature 60 03/11/20 20:57:26 0:20 0:04 3587080982063725 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 61 03/11/20 21:36:41 0:20 0:04 3587080982063725 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 62 03/11/20 21:48:29 0:20 0:05 3587080982063725 310410214827503 NO (Mi-Fi) APPLE IPHONE8 63 03/11/20 21:56:49 0:21 0:04 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 64 03/12/20 00:33:30 0:02 0:00 3587080982063725 310410214827503 MT (NIOP) APPLE IPHONE8 65 03/12/20 16:00:34 0:08 7:20 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 66 03/12/20 18:12:35 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 67 03/12/20 19:34:27 0:06 1:09 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 68 03/12/20 19:39:16 0:12 0:00 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 69 03/12/20 19:49:52 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 70 03/13/20 16:33:25 0:21 0:04 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 71 03/13/20 17:59:47 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 72 03/14/20 15:39:45 0:28 0:00 3587080982063725 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONE8 73 03/14/20 15:39:45 0:28 0:00 3587080982063725 310410214827503 MT (Mi- APPLE Fi:NIOP:CFNA:VM) IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 5 SDNY_GM_00002612 EFTA_00116688 EFTA01251212 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. tr_Ii`" 1. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. T1mo (OTC) Seizure Time ET Originating Terminating IMNI Mater Number DUI CT Feature 74 03/14/20 20:56:04 0:03 0:02 3587080982063725 310410214827503 100 (Wi-Fi) APPLE IPHONE8 75 03/14/20 20:56:10 0:02 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 76 03/14/20 20:56:19 0:05 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 77 03/14/20 20:56:42 0:02 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 78 03/14/20 22:49:35 0:19 0:00 3587080982063725 310410214827503 MT (1410P) APPLE IPHONE8 79 03/14/20 22:49:36 0:20 0:04 3587080982063725 310410214827503 MT (NIOP:CFNR:VN) APPLE IPHONE8 80 03/14/20 23:33:17 0:14 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 81 03/15/20 00:44:05 0:02 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 82 03/15/20 00:44:23 0:11 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 83 03/15/20 00:44:23 0:11 0:09 3587080982063726 310410214827503 MT (1410P:CFNR:VM) APPLE IPHONE8 84 03/15/20 15:46:15 0:18 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOR) APPLE IPHONE8 85 03/16/20 00:36:19 0:14 0:00 310410214827503 MT (1 86 03/16/20 00:36:19 0:25 0:00 ST (NIOR) APPLE IPHONE8 87 03/16/20 00:36:21 0:27 0:07 ST (NIOR:CFNA:VN) APPLE IPHONE8 88 03/19/20 16:30:35 0:39 0:00 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 6 SDNY_GM_00002613 EFTA_001(6689 EFTA01251213 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Time ET Originating Number Terminating INS1 Number HISS CT Feature 89 03/19/20 19:26:50 0:18 0:00 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 90 03/23/20 03:56:33 0:14 0:00 310410214827503 MT (1 91 03/23/20 03:56:33 0:25 0:00 ST (1410P) APPLE IPHONE8 92 03/23/20 03:56:35 0:27 0:03 ST (NIOP:CFNA:VH) APPLE IPHONE8 93 03/23/20 04:01:36 0:26 0:00 3587080982063726 310410214827503 MT APPLE IPHONE8 94 03/24/20 00:20:32 0:24 0:00 MT (Ni-Fi:NIOP) 95 03/24/20 00:20:32 0:24 0:00 MT (Ni-Fi:NIOP) 96 03/24/20 00:20:38 0:30 0:05 MT Fi:N1OP:CFNA:VM) 97 03/24/20 00:20:38 0:30 0:05 3587080982063726 310410214827503 NO (Nit) APPLE IPHONE8 98 03/24/20 23:44:26 0:06 0:06 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 99 03/24/20 23:45:05 0:22 0:00 MT (Ni-ri:NIOP) 100 03/24/20 23:45:05 0:22 0:00 MT (NIOP:01041 101 03/24/20 23:45:12 0:29 0:04 MT (NIOP:CFNA:CMN:V141 102 03/24/20 23:45:12 0:29 0:04 3587080982063726 310410214827503 MO (Nit) APPLE 'PHONES 103 03/26/20 23:55:56 0:20 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 104 03/27/20 02:21:32 0:13 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 105 03/27/20 14:05:36 0:06 0:00 NT [1410P) 106 03/27/20 14:05:42 0:13 0:00 ST [1410P) 107 03/27/20 14:05:42 0:14 0:00 3587080982063726 310410214827503 NO [Nit) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 7 SDNY_GM_00002614 EFTA_0011 16690 EFTA01251214 MOBILITY 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00em to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 411111i %---is`—‘ AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 1 ' '22 Conn. Time (OTC) Seizure Time ST Originating Terminating INSI Number Number INS/ CT Feature 108 03/27/20 20:17:37 0:05 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 109 03/27/20 20:52:41 0:11 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 110 03/30/20 23:55:43 0:21 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 111 03/31/20 17:28:06 0:01 0:00 3587080982063726 310410214827503 MO (Mi-Pi) APPLE 'PHONES 112 03/31/20 17:28:18 0:07 4:39 3587080982063726 310410214827503 MO (Mi-Pi) APPLE 'PRONGS 113 04/01/20 16:49:44 0:12 0:00 MT 114 04/01/20 16:49:44 0:12 0:00 MT 115 04/01/20 16:49:48 0:16 0:03 MT pli-Pi:MIOP:CPB:V241 116 04/01/20 16:49:48 0:16 0:03 3587080982063726 310410214827503 MO (Mi-Pi) APPLE IPHONZ8 117 04/01/20 16:50:01 0:04 44:44 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 118 04/01/20 16:50:01 0:04 14:01 NO (Mi-Pi) 119 04/01/20 17:04:02 0:00 0:12 NO (1 120 04/01/20 17:04:14 0:00 12:58 NO (Mi-Pi) 121 04/01/20 17:17:12 0:00 0:12 NO (1 122 04/01/20 17:17:24 0:00 0:15 NO (Mi-Pi) 123 04/01/20 17:17:39 0:00 0:11 MO (1 124 04/01/20 17:17:50 0:00 3:32 MO (Mi-Pi) 125 04/01/20 17:21:22 0:00 0:12 NO (1 126 04/01/20 17:21:34 0:00 5:33 NO (Mi-Pi) 127 04/01/20 17:27:07 0:00 0:11 NO (1 128 04/01/20 17:27:18 0:00 2:26 MO (Mi-Pi) 129 04/01/20 17:29:44 0:00 0:11 MO (1 130 04/01/20 17:29:55 0:00 0:21 NO (Mi-Pi) 131 04/01/20 17:30:16 0:00 0:11 NO (1 132 04/01/20 17:30:27 0:00 4:18 MO (Mi-Pi) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 8 SDNY_GM_00002615 EF-EA_00116691 EFTA01251215 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. %----0 `—‘ AT&T ',tee Run Data: Run Time: Voice Moog° For: Item Conn. Date 06/17/2020 18:S3:22 Conn. Time (UTC) Seizure Time ET Originating Number Terminating Number INZI INSI CT Feature 133 04/01/20 21:54:18 0:21 0:00 MT (Wi-Fi:NIOP) 134 04/01/20 21:54:18 0:21 0:00 MT (Wi-Fi:NIOP) 135 04/01/20 21:54:22 0:25 0:02 MT (Wi- Fi:NIOP:CFNA:VM) 136 04/01/20 21:54:22 0:25 0:02 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPRONE8 137 04/01/20 22:49:44 0:10 4:27 MO (111.-Fi) 138 04/01/20 22:49:44 0:10 61:40 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE IPRONE8 139 04/01/20 22:54:11 0:00 0:11 MO (1 140 04/01/20 22:54:22 0:00 13:02 MO (Wi-Fi) 141 04/01/20 23:07:24 0:00 0:09 NO (1 142 04/01/20 23:07:33 0:00 13:50 NO (Wi-Fi) 143 04/01/20 23:21:23 0:00 0:10 NO (1 144 04/01/20 23:21:33 0:00 2:28 NO (Wi-Fi) 145 04/01/20 23:24:01 0:00 0:12 NO (1 146 04/01/20 23:24:13 0:00 13:03 NO (Wi-Fi) 147 04/01/20 23:37:16 0:00 0:21 NO (1 148 04/01/20 23:37:37 0:00 6:17 NO (Wi-Fi) 149 04/01/20 23:43:54 0:00 0:12 NO (1 150 04/01/20 23:44:06 0:00 0:53 NO (Wi-Fi) 151 04/01/20 23:44:59 0:00 6:25 MO (VCORR) 152 04/03/20 14:24:29 0:15 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 153 04/03/20 20:07:32 0:03 0:27 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PHONES 154 04/03/20 20:08:13 0:04 0:57 3587080982063726 310410214827503 NO (111.-Fi) APPLE IPHONE8 155 04/06/20 21:07:53 0:02 0:00 MT (Wi-Fi:NIOP) 156 04/06/20 21:08:13 0:22 0:00 MT (Wi-Fi:NIOP) 157 04/06/20 21:08:17 0:26 0:01 MT (Wi- Fi:NIOP:CFNA:VM) 158 04/06/20 21:08:17 0:26 0:01 3587080982063726 310410214827503 NO (Wi-Fi) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 9 SDNY_GM_00002616 EFTA_00ll6692 EFTA01251216 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411., %----0 `-‘ AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 18:65:22 Conn. Time (UTC) Seizure Time 2T Originating Terminating ICI Thaber Number 1145I CT Feature 159 04/06/20 21:08:54 0:09 5:49 NO (Ni-Fi) 160 04/06/20 21:08:54 0:09 5:49 3587080982063726 310410214827503 MT (Ni-Fi: NIOP) APPLE 'PHONES 161 04/06/20 21:15:03 0:03 12:03 NO 162 04/06/20 21:15:03 0:03 12:03 3587080982063726 310410214827503 NT (MOP) APPLE 'PHONES 163 04/06/20 22:56:05 0:01 0:00 3587080982063726 310410214827503 NO APPLE 'PHONES 164 04/06/20 22:57:06 0:21 0:00 MT (Ni-Fi:NIOP) 165 04/06/20 22:57:06 0:21 0:00 MT (Ni-Fi:NIOP) 166 04/06/20 22:57:10 0:25 0:02 MT (Ni- Fi.:NIOP:CFNA:V14) 167 04/06/20 22:57:10 0:26 0:02 3587080982063726 310410214827503 NO (Ni -Pi) APPLE 'PHONES 168 04/06/20 22:58:08 0:39 0:00 3587080982063726 310410214827503 NO (Ni -Pi) APPLE 'PHONES 169 04/06/20 23:18:27 0:23 0:00 MT (Ni-Fi:NIOP) 170 04/06/20 23:18:27 0:23 0:00 MT (Ni-Fi:NIOP) 171 04/06/20 23:18:31 0:27 0:04 MT - Fi.:NIOP:CFNA:V14) 172 04/06/20 23:18:31 0:28 0:04 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 173 04/06/20 23:28:26 0:22 0:00 MT (Ni-Fi:NIOP) 174 04/06/20 23:28:26 0:22 0:00 MT (Ni-Fi:NIOP) 175 04/06/20 23:28:29 0:25 0:01 MT (Ni- Fi.:NIOP:CFNA:V14) 176 04/06/20 23:28:29 0:25 0:01 3587080982063726 310410214827503 NO (Ni -Pi) APPLE 'PHONES 177 04/07/20 00:15:42 0:23 0:00 3587080982063726 310410214827503 NT (Ni-Fi: NIOP) APPLE 'PHONES 178 04/07/20 00:15:44 0:25 0:07 3587080982063726 310410214827503 MT (Ni- APPLE Fi.:NIOP:CFNA:VM) 'PHONES 179 04/07/20 00:15:44 0:26 0:07 NO AT&T Proprietary The information contained here is for use by authorized persons only for general distribution. CONFIDENTIAL and is not Page 10 SDNY_GM_00002617 EFTA_00116693 EFTA01251217 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 4111. tr as i ssi ‘ini. AT&T Run Data: Run Time: Voice Moat:. For: Item Conn. Date 06/17/2020 16:66:22 Conn. Time (OTC) Seizure Time RT Originating Terminating IIOII Number Number DUI CT Feature 180 04/07/20 00:31:15 0:14 0:00 MT (141-Fi:NIOP) 181 04/07/20 00:31:15 0:14 18:52 MT (141-Fi:NIOP) 182 04/07/20 00:31:15 0:14 18:52 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 183 04/07/20 14:35:18 0:07 48:52 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 184 04/07/20 17:03:18 0:22 0:00 MT (141-Fi:NIOP) 185 04/07/20 17:03:18 0:22 0:00 MT (Ni-Fi:NIOP) 186 04/07/20 17:03:23 0:27 0:02 MT (Ni- Fi.:NIOP:CFMA:VM) 187 04/07/20 17:03:23 0:28 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 188 04/07/20 21:49:43 0:04 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 189 04/07/20 22:24:55 0:22 0:00 MT (141-Fi:NIOP) 190 04/07/20 22:24:55 0:22 0:00 MT (141-Fi:NIOP) 191 04/07/20 22:25:00 0:27 0:06 MT (141- Fi.:NIOP:CFNA:VM) 192 04/07/20 22:25:00 0:27 0:06 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 193 04/08/20 19:59:50 0:03 18:27 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 194 04/09/20 14:31:59 0:19 7:35 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 195 04/09/20 19:29:43 0:16 0:00 MT (141-Fi:NIOP) 196 04/09/20 19:29:43 0:16 0:00 MT (141-Fi:NIOP) 197 04/09/20 19:29:43 0:16 0:00 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 198 04/09/20 19:30:14 0:22 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 199 04/09/20 19:30:16 0:24 0:10 MO (Ni-Fi) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 11 SDNY_GM_00002618 EFTA_001(6694 EFTA01251218 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in USG. 41111, AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Number Terminating Number INEI THAI CT Feature 200 04/09/20 19:30:16 0:24 0:10 3587080982063726 310410214827503 NT (NIOP:CFNA:VN) APPLE IPHONEB 201 04/09/20 19:37:50 0:23 0:00 MT (Wi-Fi:NIOP) 202 04/09/20 19:37:50 0:23 0:00 MT (Wi-Fi:NIOP) 203 04/09/20 19:37:51 0:24 0:02 MT (Wi- Pi:NIOP:CFNA:VN) 204 04/09/20 19:37:51 0:25 0:02 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 205 04/09/20 19:48:23 0:01 0:00 MT (Wi-Fi:NIOP) 206 04/09/20 19:48:23 0:01 0:00 MT (NIOP) 207 04/09/20 19:48:23 0:02 0:00 3587080982063726 310410214827503 MO (1 APPLE IPHONZ8 208 04/09/20 20:39:36 0:22 0:00 MT (NIOP) 209 04/09/20 20:39:38 0:24 0:02 3587080982063726 310410214827503 MO (1 APPLE IPHONZ8 210 04/09/20 20:39:38 0:24 0:02 MT (NIOP:CFNA:VN) 211 04/09/20 21:03:46 0:10 22:09 MT (NIOP:VCORR) 212 04/09/20 21:03:46 0:11 22:09 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 213 04/09/20 21:29:49 0:05 27:57 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 214 04/09/20 22:33:59 0:06 13:20 3587080982063726 310410214827503 HO (NIOR) APPLE IN/ONES 215 04/09/20 22:49:27 0:04 4:06 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 216 04/09/20 23:32:11 0:05 0:29 3587080982063726 310410214827503 MT (NIOP:VCORR) APPLE IPHONZ8 217 04/09/20 23:32:11 0:06 0:05 MO (Ni -Pi) 218 04/09/20 23:32:16 0:00 0:13 MO (1 219 04/09/20 23:32:29 0:00 0:11 MO (Ni -Pi) 220 04/09/20 23:33:32 0:04 0:00 (14i-Ti:NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 12 SDNY_GM_00002619 EFTA_001(6695 EFTA01251219 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Tune: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Terminating LEI Number Number INS/ CT Feature 221 04/09/20 23:33:32 0:04 0:21 MT (Wi-Fi:NIOP) 222 04/09/20 23:33:32 0:04 0:21 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 223 04/09/20 23:33:53 0:00 0:00 MT (NIOP:VCORR) 224 04/10/20 00:24:44 0:13 1:54 MO (Ni-Fi) 225 04/10/20 00:24:44 0:13 1:54 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 226 04/10/20 18:26:36 0:27 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 227 04/10/20 18:26:38 0:29 0:14 3587080982063726 310410214827503 MT (Wi- APPLE Fi:NIOP:CFNA:VM) 'PHONES 228 04/13/20 15:24:09 0:12 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 229 04/15/20 21:58:10 0:08 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 230 04/15/20 22:54:21 0:21 0:00 MT (Wi-Fi:NIOP) 231 04/15/20 22:54:21 0:21 0:00 MT (NIOP:CMW) 232 04/15/20 22:54:25 0:25 0:03 MT (NIOP:CFNA:CNN:VM) 233 04/15/20 22:54:25 0:25 0:03 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 234 04/15/20 23:06:43 0:10 25:16 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 235 04/15/20 23:06:43 0:10 3:54 MO () 236 04/15/20 23:10:37 0:00 13:18 MO (Ni-Fi) 237 04/15/20 23:23:55 0:00 1:52 MD () 238 04/15/20 23:25:47 0:00 6:12 MO (Ni-Fi) 239 04/16/20 22:15:29 0:22 0:00 3587080982063726 310410214827503 MT (1410P) APPLE 'PHONES 240 04/16/20 22:15:30 0:23 1:02 3587080982063726 310410214827503 MT (1410P:CFNA:VM) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 13 SDNY_GM_00002620 EFTA_001(6696 EFTA01251220 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. sicts a`s . AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 18:55:23 Conn. Time (OTC) Seizure Time ET Originating Terminating INSI Number Number CT Feature 241 04/16/20 22:30:40 0:01 0:00 3587080982063726 310410214827503 Kt (NIOP) APPLE 'PHONES 242 04/17/20 00:28:51 0:07 0:04 3587080982063726 310410214827503 NO (Nit) APPLE 'PHONES 243 04/17/20 01:54:30 0:14 41:46 MT (NIOP:VCORR) 244 04/17/20 01:54:30 0:15 41:46 3587080982063726 310410214827503 NO (Nit) APPLE 'PHONES 245 04/17/20 15:23:40 0:06 0:00 3587080982063726 310410214827503 NT (NIOP) APPLE 'PHONES 246 04/17/20 21:16:10 0:07 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 247 04/21/20 00:50:15 0:15 0:00 MT (NIOP:CMW) 248 04/21/20 00:50:15 0:16 0:00 3587080982063726 310410214827503 MO (Nit) APPLE 'PHONES 249 04/21/20 00:50:39 0:21 0:00 MT (NIOP:CMW) 250 04/21/20 00:50:42 0:24 0:32 MT (NIOP:CFNA:CMW:VM) 251 04/21/20 00:50:42 0:24 0:32 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 252 04/21/20 00:53:30 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 253 04/21/20 00:53:31 0:12 0:09 MO (VCORR) 254 04/21/20 00:53:31 0:12 0:09 3587080982063726 310410214827503 MT (NIOP:CFNR:VM) APPLE 'PHONES 255 04/21/20 03:11:37 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 256 04/21/20 03:11:38 0:12 0:30 3587080982063726 310410214827503 MT (NIOP:CFNR:VN) APPLE 'PHONES 257 04/22/20 20:59:27 0:17 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 14 SDNY_GM_00002621 EFTA_001(6697 EFTA01251221 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41011, .. •-tae "-"° AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Time ET Originating Terminating INEI Number Number 1145I CT Feature 258 04/22/20 21:49:51 0:28 0:02 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 259 04/22/20 21:51:33 0:06 0:05 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 260 04/25/20 14:13:47 0:00 0:00 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 261 04/25/20 14:14:08 0:01 0:14 3587080982063726 310410214827503 MO (NIOR:VN) APPLE 'PHONES 262 04/28/20 19:16:39 0:21 0:00 MT (Mi-Fi:NIOR) 263 04/28/20 19:16:39 0:21 0:00 MT (Mi-Fi:NIOR) 264 04/28/20 19:16:43 0:25 0:02 MT (Mi - Fi:NIOR:CFNA:VM) 265 04/28/20 19:16:43 0:25 0:02 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 266 04/28/20 19:44:14 0:03 45:03 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 267 04/28/20 21:03:10 0:17 36:49 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 268 04/28/20 23:39:52 0:24 0:00 ML (NIOR) 269 04/28/20 23:40:00 0:32 0:35 ML (NIOR:CFNA:VN) 270 04/28/20 23:40:00 0:32 0:35 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 271 04/28/20 23:45:33 0:22 0:00 MT (Mi-Fi:NIOR) 272 04/28/20 23:45:33 0:22 0:00 MT (Mi-Fi:NIOR) 273 04/28/20 23:45:37 0:26 0:03 MT (Mi- Fi:NIOR:CFNA:VM) 274 04/28/20 23:45:38 0:27 0:02 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 275 04/29/20 00:07:11 0:22 0:00 MT (Mi-Fi:NIOR) 276 04/29/20 00:07:11 0:22 0:00 MT (Mi-Fi:NIOR) 277 04/29/20 00:07:15 0:26 0:02 MT (Mi- Fi:NIOR:CFMA:VM) AT&T Proprietary The information contained here is for use by authorized persons only for general distribution. CONFIDENTIAL and is not Page 15 SDNY_GM_00002622 EFTA_001(6698 EFTA01251222 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 410. .. ••=1$ `-'s AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 18:53:23 Conn. Time (OTC) Seizure Time ET Originating Terminating IMEI Number Number 1145I CT Feature 278 04/29/20 00:07:15 0:26 0:02 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 279 04/29/20 16:53:22 0:05 0:00 MT (Mi-Fi:NIOR) 280 04/29/20 16:53:22 0:05 0:00 MT (Mi-Fi:NIOR) 281 04/29/20 16:53:22 0:05 0:00 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 282 04/29/20 16:54:04 0:21 0:00 (14i-Fi:NIOP) 283 04/29/20 16:54:04 0:21 0:00 MT (Mi-Fi:NIOP) 284 04/29/20 16:54:08 0:25 0:02 MT Fi:NIOP:CFNA:V14) 285 04/29/20 16:54:08 0:25 0:02 3587080982063726 310410214827503 APPLE 'PHONES 286 04/29/20 19:29:51 0:03 1:01 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 287 04/29/20 20:52:10 0:07 0:00 (14i-Fi:NIOP) 288 04/29/20 20:52:10 0:07 19:48 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 289 04/29/20 20:52:10 0:07 4:08 MT (Mi-Fi:NIOP) 290 04/29/20 20:56:18 0:00 15:40 MT (NIOP:VCORR) 291 04/30/20 20:14:09 0:22 0:01 MT (Mi-Fi:NIOP) 292 04/30/20 20:14:09 0:22 0:01 MT (NIOP) 293 04/30/20 20:14:13 0:26 0:05 MT (NIOP:CFNA:VN) 294 04/30/20 20:14:13 0:26 0:05 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 295 04/30/20 21:11:42 0:22 0:00 MT (Mi-Fi:NIOP) 296 04/30/20 21:11:42 0:22 0:00 MT (NIOP) 297 04/30/20 21:11:47 0:27 0:02 MT (NIOP:CFNA:VN) 298 04/30/20 21:11:47 0:28 0:01 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 299 04/30/20 21:26:48 0:07 28:07 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only for general distribution. CONFIDENTIAL and is not Page 16 SDNY_GM_00002623 EFTA_001(6699 EFTA01251223 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ter-,4 AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 10:53:23 Conn. Time (UTC) Seizure Time ET Originating Number Terminating Number INEI CT Feature 300 04/30/20 23:47:42 0:08 5:05 3587080982063726 310410214827503 MO APPLE 'PHONES 301 05/01/20 00:19:46 0:22 0:00 MT (Ni-Fi:NIOP) 302 05/01/20 00:19:46 0:22 0:00 MT (NIOP) 303 05/01/20 00:19:50 0:26 0:01 MT (NIOP:CFNA:VM) 304 05/01/20 00:19:50 0:26 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 305 05/01/20 01:27:25 0:04 22:24 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 306 05/01/20 01:27:25 0:04 22:24 MT (NIOP:VCORR) 307 05/01/20 20:59:25 0:21 0:00 (Ni-Fi:NIOP) 308 05/01/20 20:59:25 0:21 0:00 (Ni-Fi:NIOP) 309 05/01/20 20:59:30 0:26 0:01 (Wi- Fi:NIOP:CfMA:VM) 310 05/01/20 20:59:30 0:26 0:01 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 311 05/04/20 22:10:28 0:14 17:33 KT (NIOP:VCORR) 312 05/04/20 22:10:28 0:15 17:33 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 313 05/04/20 22:49:00 0:22 0:00 MT (Ni-Fi:NIOP) 314 05/04/20 22:49:00 0:22 0:00 MT 315 05/04/20 22:49:04 0:26 0:02 MT Fi:NIOP:CFNA:VM) 316 05/04/20 22:49:04 0:26 0:02 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 317 05/04/20 23:22:53 0:21 0:00 MT (Ni-Fi:NIOP) 318 05/04/20 23:22:53 0:21 0:00 MT (Ni-Fi:NIOP) 319 05/04/20 23:22:58 0:26 0:02 MT Fi:NIOP:CFNA:VM) 320 05/04/20 23:22:58 0:27 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 321 05/05/20 20:49:17 0:21 0:00 322 05/05/20 20:49:17 0:21 0:00 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 17 SDNY_GM_00002624 EFTA_00I (6700 EFTA01251224 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. trad es `a. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Number Terminating SOLI Number DUI CT Feature 323 05/05/20 20:49:21 0:25 0:02 MT (Wi- Fi:NIOP:CFMA:VM) 324 05/05/20 20:49:21 0:25 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 325 05/05/20 21:25:15 0:22 0:00 MT (Wi-Fi:NIOP) 326 05/05/20 21:25:15 0:22 0:00 MT (Wi-Fi:NIOP) 327 05/05/20 21:25:19 0:26 0:05 MT (Wi- Fi:NIOP:CFMA:VM) 328 05/05/20 21:25:19 0:27 0:05 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 329 05/05/20 21:37:14 0:38 0:03 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PHONES 330 05/06/20 00:41:07 0:23 0:00 MT (Wi-Fi:NIOP) 331 05/06/20 00:41:07 0:23 0:00 MT (Wi-Fi:NIOP) 332 05/06/20 00:41:11 0:27 0:02 MT (Wi- Fi:NIOP:CFMA:VM) 333 05/06/20 00:41:11 0:28 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 334 05/06/20 00:41:32 0:00 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 335 05/06/20 00:41:43 0:08 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 336 05/06/20 00:41:53 0:06 0:03 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 337 05/07/20 14:49:32 0:23 0:00 MT (Wi-Fi:NIOP) 338 05/07/20 14:49:39 0:30 0:02 MT (Wi- Fi:NIOP:CFMA:VM) 339 05/07/20 14:49:39 0:31 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 340 05/07/20 17:03:16 0:23 0:00 MT (Wi-Fi:NIOP) 341 05/07/20 17:03:27 0:34 0:01 MT (Wi- Fi:NIOP:CFNA:VM) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 18 SDNY_GM_00002625 EF-EA_001(6701 EFTA01251225 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. a tt-ta. AT&T Run Data: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 14:63:23 Conn. Time (OTC) Seizure Time ET Originating Number Terminating IMEI Number INSI CT Feature 342 05/07/20 17:03:27 0:34 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE IPHONE8 343 05/07/20 17:48:17 0:24 0:00 MT (Mi-Fi:NIOP) 344 05/07/20 17:48:23 0:30 0:02 MT (Mi- Fi.:NIOP:CFMA:VM) 345 05/07/20 17:48:23 0:31 0:02 3587080982063726 310410214827503 MO APPLE 'PHONES 346 05/07/20 19:12:18 0:22 0:00 MT (Mi-Fi:NIOP) 347 05/07/20 19:12:24 0:28 0:02 MT (Mi- Fi.:NIOP:CFMA:VM) 348 05/07/20 19:12:24 0:28 0:02 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 349 05/07/20 19:16:22 0:07 0:00 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 350 05/07/20 23:33:08 0:21 0:00 MT (Mi-Fi:NIOP) 351 05/07/20 23:33:08 0:21 0:00 MT (Mi-Fi:NIOP) 352 05/07/20 23:33:13 0:26 0:02 MT (Mi- Fi.:NIOP:CFMA:VM) 353 05/07/20 23:33:13 0:26 0:02 3587080982063726 310410214827503 M0 (Mi-Fi) APPLE 'PHONES 354 05/07/20 23:33:46 0:01 0:00 MT (Mi-Fi:NIOP) 355 05/07/20 23:33:46 0:01 0:00 MT (Mi-Fi:NIOP) 356 05/07/20 23:33:46 0:01 0:00 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 357 05/07/20 23:34:32 0:39 0:03 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 358 05/08/20 00:19:18 0:21 0:00 MT (Mi-Fi:NIOP) 359 05/08/20 00:19:18 0:21 0:00 ST (NIOP:CMM) 360 05/08/20 00:19:22 0:25 0:03 ST (NIOP:CFNA:CMN:VM) 361 05/08/20 00:19:23 0:27 0:02 3587080982063726 310410214827503 I40 (Mi-Fi) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 19 SDNY_GM_00002626 EFTA 00//6702 EFTA01251226 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 18:55:23 Conn. Time (OTC) Seizure Time ET Originating Number Terminating Number IIOII 1MSI CT Feature 362 05/08/20 14:29:29 0:05 74:10 3587080982063726 310410214827503 163 (Ni-Fi) APPLE IPHONZ8 363 05/08/20 17:49:44 0:32 0:02 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 364 05/08/20 17:58:22 0:21 0:23 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 365 05/09/20 17:19:42 0:27 0:00 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 366 05/09/20 17:19:44 0:29 1:16 3587080982063726 310410214827503 MT (Ni- APPLE IPHONZ8 Fi:NIOP:CFNA:VM) 367 05/11/20 13:49:51 0:16 0:55 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONZ8 368 05/11/20 13:52:24 0:12 3:10 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 369 05/11/20 13:55:47 0:08 15:51 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 370 05/11/20 17:48:07 0:16 0:00 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 371 05/11/20 20:27:52 0:09 0:29 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 372 05/11/20 21:18:16 0:11 0:30 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 373 05/11/20 21:39:04 0:12 1:11 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 374 05/11/20 21:51:53 0:07 0:28 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 375 05/11/20 23:14:44 0:01 0:00 3587080982063726 310410214827503 NO (Ni-Fi) 376 05/11/20 23:15:02 0:07 33:55 APPLE IPHONZ8 MT (NIOP:VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 20 SDNY_GM_00002627 EF-EA_001(6703 EFTA01251227 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111i AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Time ET Originating Terminating IMEI Number Number INSI CT Feature 377 05/11/20 23:15:02 0:07 33:55 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 378 05/12/20 13:53:18 0:00 0:00 KT (NIOP) 379 05/12/20 13:53:19 0:01 0:11 KT (NIOP:CFNR:VM) 380 05/12/20 13:53:21 0:09 0:07 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 381 05/12/20 15:01:44 0:08 30:55 MT (NIOP:VCORR) 382 05/12/20 15:01:44 0:09 30:55 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 383 05/12/20 15:33:00 0:10 19:49 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 384 05/12/20 16:50:53 0:27 0:00 HT 385 05/12/20 16:50:58 0:32 0:07 HT (Ni- Fi:NIOP:CFNA:VM) 386 05/12/20 16:50:58 0:33 0:07 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 387 05/12/20 18:18:51 0:08 8:56 3587080982063726 310410214827503 NO APPLE IPHONE8 388 05/12/20 19:13:25 0:05 7:33 3587080982063726 310410214827503 M0 APPLE IPHONE8 389 05/12/20 19:29:15 0:23 0:00 MT (NIOR) 390 05/12/20 19:29:20 0:28 0:06 MT (NIOR:CFNA:VN) 391 05/12/20 19:29:20 0:29 0:06 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE IPRONZ8 392 05/12/20 22:00:31 0:05 28:33 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE IPRONZ8 393 05/12/20 22:00:31 0:05 28:33 MT (NIOR:VCORR) 394 05/13/20 18:07:12 0:39 0:03 3587080982063726 310410214827503 MO (Ni -Fi) APPLE IPHONZ8 395 05/13/20 18:08:35 0:24 0:00 MT (NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 21 SDNY_GM_00002628 EFTA 001(6704 EFTA01251228 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. trad s. "-se AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 18:53:23 Conn. Time (UTC) Seizure Time ET Originating Terminating MST Number Number IMI CT Feature 396 05/13/20 18:08:41 0:30 0:02 3587080982063726 310410214827503 143 (Wi-Fi) APPLE 'PRONGS 397 05/13/20 18:08:41 0:30 0:02 MT (1410P:CFNA:VM) 398 05/13/20 19:00:16 0:09 15:49 3587080982063726 310410214827503 143 (NZ-Pi) APPLE IPHONZ8 399 05/13/20 19:00:16 0:09 15:49 MT (NIOP:VOORE) 400 05/13/20 19:52:36 0:22 0:00 MT (Mi-FZ:NIOP) 401 05/13/20 19:52:46 0:32 0:02 MT (Mi- Fi.:NIOP:CFMA:VM) 402 05/13/20 19:52:46 0:33 0:02 3587080982063726 310410214827503 MO (NZ-Pi) APPLE IPRONE8 403 05/13/20 19:53:03 0:06 1:39 3587080982063726 310410214827503 MT (Mi-FZ:NIOP) APPLE IPRONE8 404 05/13/20 19:54:59 0:06 4:35 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPRONE8 405 05/13/20 21:05:54 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE IPRONE8 406 05/13/20 21:05:55 0:12 0:07 3587080982063726 310410214827503 MT (NIOP:CFNE:VM) APPLE IPRONE8 407 05/13/20 21:35:50 0:07 13:47 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPRONE8 408 05/13/20 22:14:50 0:23 0:00 MT (1410P) 409 05/13/20 22:14:56 0:29 0:01 MT (NIOP:CFNA:VM) 410 05/13/20 22:14:56 0:30 0:01 3587080982063726 310410214827503 MO (NZ-Pi) APPLE IPRONE8 411 05/13/20 23:54:11 0:26 0:00 ,3587080982063726 310410214827503 MT (Mi-FZ:NIOP) APPLE IPRONE8 412 05/13/20 23:54:12 0:27 0:05 3587080982063726 310410214827503 MT (Mi- APPLE Fi:NIOP:CFMA:VM) IPRONE8 413 05/13/20 23:54:12 0:27 0:05 M3 (VOOER) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 22 SDNY_GM_00002629 EFTA_00I (6705 EFTA01251229 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in LTC. %---0 `'s AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Time MI Originating Terminating IMEI Number Number INSI CT Feature 414 05/13/20 23:54:27 0:02 17:46 3587080982063726 310410214827503 MO (M1-Fi) APPLE 'PHONES 415 05/13/20 23:54:27 0:02 17:46 MT (NIOP:VCORR) 416 05/14/20 14:39:29 0:22 0:00 MT (Mi-Fi:NIOP) 417 05/14/20 14:39:37 0:30 0:01 MT (Mi- Fi:NIOP:CFNA:VM) 418 05/14/20 14:39:37 0:31 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 419 05/14/20 14:39:48 0:10 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP:CMW) APPLE 'PHONES 420 05/14/20 15:52:43 0:08 1:09 3587080982063726 310410214827503 MO (Mi-Fi) APPLE IPHONE8 421 05/14/20 16:15:14 0:16 0:54 3587080982063726 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 422 05/14/20 17:11:25 0:13 0:00 310410214827503 MT (1 423 05/14/20 17:11:25 0:24 0:00 ST (1410P) APPLE 'PHONES 424 05/14/20 17:11:26 0:25 0:11 ST (1410P:CFNA:VM) APPLE 'PHONES 425 05/14/20 17:20:45 0:06 0:00 MT (1410P) 426 05/14/20 17:20:45 0:06 8:46 MT (NIOP:VCORR) 427 05/14/20 17:20:45 0:06 8:46 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 428 05/14/20 17:42:04 0:10 0:01 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 429 05/14/20 17:42:05 0:11 0:03 3587080982063726 310410214827503 MT (NIOP:CFNR:VN) APPLE IPHONZ8 430 05/14/20 18:14:46 0:04 0:00 MT (Wi-Fi:NIOP) 431 05/14/20 18:14:46 0:04 1:31 MT (IMP) 432 05/14/20 18:14:46 0:05 1:31 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 23 SDNY_GM_00002630 EFTA_001(6706 EFTA01251230 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c` sssis o `—‘ AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 16:66:23 Conn. Time (OTC) Seizure Time ET Originating Number Terminating IlCI Number INSI CT Feature 433 05/14/20 19:41:13 0:28 0:00 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE 'PHONES 434 05/14/20 19:41:16 0:31 0:04 3587080982063726 310410214827503 MT (Ni- APPLE Fi:NIOP:CFNA:VM) 'PHONES 435 05/17/20 21:54:23 0:06 3:05 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 436 05/19/20 01:55:50 0:00 0:00 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 437 05/19/20 20:41:12 0:09 8:05 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 438 05/19/20 20:49:29 0:05 2:33 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 439 05/19/20 21:14:58 0:23 0:00 MT (NIOR) 440 05/19/20 21:15:04 0:29 0:03 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 441 05/19/20 21:15:04 0:29 0:03 MT (NIOR:CFNA:VM) 442 05/19/20 22:29:37 0:22 0:00 MT (NIOR) 443 05/19/20 22:29:44 0:29 0:02 MT (NIOR:CFNA:VM) 444 05/19/20 22:29:44 0:30 0:02 3587080982063726 310410214827503 NO (Ni-Fi:NIOR) APPLE 'PHONES 445 05/19/20 23:03:59 0:22 0:00 MT (NIOR) 446 05/19/20 23:03:59 0:22 0:00 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 447 05/19/20 23:04:28 0:06 2:13 MT (NIOP:VCORR) 448 05/19/20 23:04:28 0:06 2:13 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 449 05/20/20 18:53:54 0:10 0:52 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE 'PHONES 450 05/20/20 21:41:19 0:23 0:00 MT (NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 24 SDNY_GM_00002631 EF-EA_00116707 EFTA01251231 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm %---s`" 1. AT&T AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. Run Data: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 1S:53:21 Conn. Time (UTC) Seizure Time ET Originating Terminating 122I Number Number IN21 CT Feature 451 05/20/20 21:41:26 0:30 0:03 MT (210P:CFNA:VM) 452 05/20/20 21:41:26 0:30 0:03 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 453 05/20/20 21:58:25 0:23 0:00 MT (210P) 454 05/20/20 21:58:31 0:29 0:02 MT (210P:CFNA:VM) 455 05/20/20 21:58:31 0:30 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PRONGS 456 05/20/20 21:59:01 0:01 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PRONGS 457 05/20/20 21:59:40 0:37 0:04 3587080982063726 310410214827503 MO (WL-Fi) APPLE 'PRONGS 458 05/20/20 22:00:20 0:22 0:00 MT (210P) 459 05/20/20 22:00:28 0:30 0:02 MT (210P:CFNA:VM) 460 05/20/20 22:00:28 0:31 0:02 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 461 05/21/20 00:31:09 0:03 35:29 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 462 05/21/20 00:31:09 0:03 54:04 MT (210P:VCORR) 463 05/21/20 01:06:38 0:00 0:21 3587080982063727 310410214827503 MO (VCORR) APPLE 'PRONGS 464 05/21/20 01:06:59 0:00 18:14 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 465 05/21/20 15:07:09 0:07 0:05 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 466 05/21/20 20:31:30 0:07 0:04 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 467 05/21/20 21:23:59 0:19 0:00 3587080982063726 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PRONGS AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 25 SDNY_GM_00002632 EF-EA_001(6708 EFTA01251232 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41011, tra `si a. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 16:53:23 Conn. Time (OTC) Seizure Time ET Originating Number Terminating IM5I Number INSI CT Feature 468 05/21/20 21:31:01 0:15 26:49 3587080982063726 310410214827503 NO (Wi-ri) APPLE 'PHONES 469 05/22/20 00:18:09 0:24 0:01 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 470 05/22/20 00:18:11 0:26 0:32 3587080982063726 310410214827503 MT (Wi- APPLE Fi:NIOP:CFNA:VN) 'PHONES 471 05/22/20 00:20:52 0:28 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 472 05/22/20 00:20:53 0:29 0:04 3587080982063726 310410214827503 MT (Wi- APPLE Fi:NIOP:CFNA:VM) 'PHONES 473 05/22/20 16:23:16 0:14 0:00 310410214827503 MT () 474 05/22/20 16:23:16 0:25 0:00 ST (NIOP) APPLE 'PHONES 475 05/22/20 16:23:17 0:26 0:15 ST (NIOP:CFNA:VN) APPLE 'PHONES 476 05/22/20 17:37:15 0:06 22:47 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 477 05/22/20 18:00:20 0:05 7:06 3587080982063726 310410214827503 MO (Wit) APPLE 'PHONES 478 05/22/20 18:33:59 0:23 0:00 MT (NIOP:OMW) 479 05/22/20 18:34:08 0:32 0:02 3587080982063726 310410214827503 NO (Wit) APPLE 'PHONES 480 05/22/20 18:34:08 0:32 0:02 MT (NIOP:CFNA:CMW:VM) 481 05/22/20 21:26:30 0:25 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 482 05/22/20 21:26:31 0:26 0:05 3587080982063726 310410214827503 MT (Ni- APPLE Fi:NIOP:CFNA:VM) 'PHONES 483 05/22/20 21:26:31 0:26 0:05 MO (VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 26 SDNY_GM_00002633 EFTA_001 16709 EFTA01251233 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 IIIIIIIII Conn. Seizure Time Time (UTC) ET Originating Terminating INEI Number Number INSI CT Feature 484 05/22/20 21:43:41 0:13 0:40 3587080982063726 310410214827503 NO (141 -Pi) APPLE 'PHONES 485 05/22/20 21:43:41 0:13 0:40 MT (NIOP:VCORR) 486 05/22/20 21:45:43 0:06 30:22 3587080982063726 310410214827503 NO (141-Fi) APPLE 'PHONES 487 05/22/20 22:26:24 0:21 0:00 MT (Ni-Fi:NIOP) 488 05/22/20 22:26:24 0:21 0:00 KT (Ni-Fi:NIOP) 489 05/22/20 22:26:29 0:26 0:01 MT (Ni- Fi:NIOP:CFMA:V14) 490 05/22/20 22:26:29 0:27 0:01 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 491 05/22/20 22:26:36 0:07 0:45 3587080982063726 310410214827503 MT (Ni-Fi:NIOP:CMN) APPLE 'PHONES 492 05/22/20 22:26:36 0:08 0:35 NO (Wi-Fi) 493 05/22/20 22:27:11 0:00 0:12 NO (1 494 05/22/20 22:27:21 0:00 6:09 3587080982063727 310410214827503 NT (NIOP:CMM:VCORR) APPLE 'PHONES 495 05/22/20 22:27:23 0:00 6:07 NO (Wi-Fi) 496 05/22/20 22:46:06 0:18 0:00 NT (Ni-Fi:NIOP) 497 05/22/20 22:46:06 0:18 3:09 35870809820637 310410214827503 NO (Ni-Fi) APPLE 'PHONES 498 05/22/20 22:46:06 0:18 0:38 MT (Ni-Fi:NIOP) 499 05/22/20 22:46:44 0:00 0:29 MT [MOP) 500 05/22/20 22:47:13 0:00 2:01 MT (Ni-Fi:NIOP) 501 05/22/20 22:49:14 0:00 0:32 MT [MOP) 502 05/22/20 22:49:15 0:00 0:54 3587080982063727 310410214827503 M0 [VCORR) APPLE 'PHONES 503 05/22/20 22:49:46 0:00 3:10 MT (Ni-Fi:NIOP) 504 05/22/20 22:50:09 0:00 2:52 35870809820637 310410214827503 M0 (Ni-Fi) APPLE 'PHONES SOS 05/22/20 22:52:56 0:00 2:53 MT [1110P) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 27 SDNY_GM_00002634 EF-EAJVII67(0 EFTA01251234 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tra d "`s 1. AT&T Run Data: Run Time: Voice Usage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Terminating INEI Number Number INSI CT Feature 506 05/22/20 22:53:01 0:00 17:28 3587080982063727 310410214827503 NO (VCOP11) APPLE 'PHONES 507 05/22/20 22:55:49 0:00 14:40 MT 508 05/23/20 22:54:43 0:08 30:48 MT (NIOP:VCORA) 509 05/23/20 22:54:43 0:08 30:48 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 510 05/23/20 23:25:49 0:07 11:42 MT (NIOP:VCORA) 511 05/23/20 23:25:49 0:07 11:42 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 512 05/26/20 14:10:35 0:09 0:00 3587080982063727 310410214827503 MT APPLE 'PHONES 513 05/26/20 18:03:44 0:24 0:00 MT (NIOP) 514 05/26/20 18:03:52 0:32 0:05 MT (NIOP:CFNA:VN) 515 05/26/20 18:03:52 0:32 0:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE !PHONES 516 05/26/20 19:02:46 0:23 0:00 MT (NIOP) 517 05/26/20 19:02:52 0:29 0:00 MT (NIOP:CFNA:VN) 518 05/26/20 19:02:52 0:29 0:00 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 519 05/26/20 19:13:13 0:25 0:00 3587080982063727 310410214827503 MT APPLE 'PHONES 520 05/26/20 19:13:14 0:26 0:15 3587080982063727 310410214827503 MT (Ni - APPLE Fi:NIOP:CFNA:VM) 'PHONES 521 05/26/20 19:19:54 0:06 0:42 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 522 05/26/20 19:20:51 0:05 0:00 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 523 05/26/20 19:21:17 0:01 0:00 3587080982063727 310410214827503 MT (NIOP :CNN] APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only for general distribution. CONFIDENTIAL and is not Page 28 SDNY_GM_00002635 EF-EA_001(67(1 EFTA01251235 MOBILITY 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00em to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41111. trad s. "'s AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 MIMS Conn. Seizure T1me Time (UTC) ET Originating Number Terminating Number IMEI Ian CT Feature 524 05/26/20 19:21:17 0:01 0:04 3587080982063727 310410214827503 MT (NIOP:CFB:CMW:VM) APPLE 'PHONES 525 05/26/20 19:21:18 0:22 0:00 MT (Wi-Fi:NIOP) 526 05/26/20 19:21:25 0:29 0:03 MT (Wi- Fi:NIOP:CFMA:VM) 527 05/26/20 19:21:25 0:30 0:03 3587080982063727 310410214827503 140 (Wi-Fi) APPLE 'PHONES 528 05/26/20 19:21:36 0:06 6:58 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 529 05/26/20 20:00:30 0:02 5:29 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 530 05/26/20 20:06:12 0:02 0:42 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 531 05/26/20 22:47:03 0:37 0:05 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 532 05/27/20 19:58:08 0:23 0:00 MT (Wi-Fi:NIOP) 533 05/27/20 19:58:12 0:27 0:02 MT (Wi- Fi:NIOP:CFMA:VM) 534 05/27/20 19:58:13 0:28 0:01 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 535 05/27/20 20:19:38 0:10 2:16 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 536 05/27/20 20:19:38 0:11 0:09 NO (Wi-Fi) 537 05/27/20 20:19:47 0:00 0:15 MO (1 538 05/27/20 20:20:02 0:00 1:45 MO (Wi-Fi) 539 05/27/20 20:21:47 0:00 0:09 MO (VCORR) 540 05/27/20 20:21:54 0:00 0:02 3587080982063727 310410214827503 MT (NIOP:VCORA) APPLE 'PHONES 541 05/27/20 20:22:21 0:00 0:08 3587080982063727 310410214827503 140 (141-Fi.) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 29 SDNY_GM_00002636 EF-EAJVII6712 EFTA01251236 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 41011, tra / al. ‘"1. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Onto 06/17/2020 IIIIIIIIII Conn. Seizure Time Time (UTC) ET Originating Terminating IWCI Number Number INSI CT Feature 542 05/27/20 20:22:21 0:08 0:00 3587080982063727 310410214827503 MO (1 APPLE 'PHONES 543 05/27/20 20:22:48 0:02 0:00 MT (1410P) 544 05/27/20 20:22:49 0:18 0:00 ST (1410P) 545 05/27/20 20:22:49 0:18 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 546 05/27/20 20:27:06 0:08 0:06 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 547 05/27/20 20:27:17 0:02 0:09 MT (Wi-Fi:NIOP) 548 05/27/20 20:27:17 0:03 0:13 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES S49 05/27/20 20:27:26 0:00 1:25 MT (NIOP) S50 05/27/20 20:27:30 0:00 2:23 3587080982063727 310410214827503 MO (1 APPLE 'PHONES S51 05/27/20 20:28:51 0:00 0:59 MT (Wi-Fi:NIOP) S52 05/27/20 20:29:50 0:00 0:03 MT (NIOP:VCORR) S53 05/27/20 20:31:27 0:02 0:00 MT (NIOP:CMW) S54 05/27/20 20:31:27 0:03 0:00 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 555 05/27/20 20:34:42 0:21 8:33 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES S56 05/27/20 20:43:15 0:00 7:44 3587080982063727 310410214827503 MT (NIOP:VCORR) APPLE 'PHONES S57 05/27/20 20:51:20 0:10 38:47 MT (NIOP:CMW:VCORR) S58 05/27/20 20:51:20 0:10 0:02 3587080982063727 310410214827503 MO (1 APPLE 'PHONES S59 05/27/20 20:51:22 0:00 38:45 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES S60 05/27/20 21:37:25 0:22 0:00 MT (Wi-Fi:NIOP) S61 05/27/20 21:37:34 0:31 0:01 MT (Wi- Fi:NIOP:CFNA:VM) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 30 SDNY_GM_00002637 EF-EAJVII67(3 EFTA01251237 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. %----0 `-‘ AT&T Run Data: Run Time; Vol.:004.ga For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Tine ET Originating Manor Terminating Number SMEI INSI CT Feature 562 05/27/20 21:37:34 0:31 0:01 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPNONZ8 563 05/28/20 16:49:41 0:24 0:00 MT [MOP) 564 05/28/20 16:49:50 0:33 0:02 MT (NIOP:CFNA:VM) 565 05/28/20 16:49:50 0:33 0:02 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 566 05/28/20 16:50:02 0:00 0:00 NT INIOP:OMMI 567 05/28/20 16:50:05 0:03 0:01 NT (NIOP:CPB:OMM:VM) 568 05/28/20 16:50:05 0:04 0:01 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 569 05/28/20 16:50:38 0:20 0:03 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 570 05/28/20 16:50:53 0:08 0:00 MT (1410P) 571 05/28/20 16:50:53 0:08 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 572 05/28/20 17:10:11 0:10 3:58 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 573 05/28/20 17:14:19 0:05 22:33 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 574 05/28/20 17:14:19 0:06 22:33 MO (VCORR) 575 05/29/20 18:23:50 0:12 8:19 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 576 05/29/20 18:32:09 0:00 6:19 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES 577 05/29/20 18:52:27 0:08 24:52 3587080982063727 310410214827503 NO (Mi-Fi) APPLE 'PHONES 578 05/29/20 18:52:27 0:08 27:53 MT (NIOP:VCORR) 579 05/29/20 19:17:19 0:00 3:01 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 31 SDNY_GM_00002638 EF-EAJVII67(4 EFTA01251238 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41.1, AT&T "tittle Run Date: Run Time: Voice Osage For: 06/17/2020 18:55:26 Item Conn. Date Conn. Time (OTC) Seizure Time ET Originating Number 580 05/30/20 15:17:28 0:21 0:00 581 05/30/20 15:17:29 0:22 0:14 582 05/30/20 15:23:39 0:05 36:20 583 06/02/20 14:44:00 0:10 17:35 584 06/02/20 14:44:00 0:11 10:35 585 06/02/20 14:54:35 0:00 0:19 586 06/02/20 14:54:54 0:00 6:41 587 06/02/20 17:04:25 0:03 10:19 588 06/02/20 17:04:25 0:04 10:19 589 06/02/20 17:33:58 0:10 0:54 590 06/03/20 00:07:18 0:16 6:39 591 06/03/20 00:07:18 0:16 6:39 592 06/03/20 19:09:20 0:23 0:00 593 06/03/20 19:09:26 0:29 0:02 594 06/03/20 19:09:26 0:29 0:02 595 06/03/20 20:31:08 0:07 17:32 596 06/03/20 20:31:08 0:07 60:39 597 06/03/20 20:48:40 0:00 21:03 Terminating Number IMEI DUI CT Feature 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPRONE8 3587080982063727 310410214827503 MT (Mi- APPLE Fi:NIOP:CFMA:VM) IPRONE8 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 MT (NIOP:VCORR) 3587080982063727 310410214827503 1.0 (M1-Fi) APPLE IPRONE8 3587080982063727 310410214827503 MO (VCORR) APPLE IPRONE8 3587080982063727 310410214827503 1.0 APPLE IPHONE8 MT (NIOP:VCORR) 3587080982063727 310410214827503 1.0 (Mit) APPLE IPRONE8 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPRONE8 MT (NIOP:VCORR) 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 MT (NIOP:OMM) 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 MT (NIOP:CFNA:CMH:VM) 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 MT (NIOP:VCORR) 3587080982063727 310410214827503 1.0 (1 APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 32 SDNY_GM_00002639 EF-EA_001(67(5 EFTA01251239 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, sr a m • i s #/ . ‘41.1° AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 18:55:26 Conn. Time (UTCI Seizure Time ET Originating Terminating 1EEI Number Number INSI CT Feature 598 06/03/20 21:09:43 0:00 22:05 3587080982063727 310410214827503 NO (Mi-Fi) APPLE 'PHONES 599 06/04/20 14:30:08 0:11 1:42 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 600 06/05/20 19:34:05 0:26 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 601 06/05/20 19:34:06 0:27 0:02 NO (VCORR) 602 06/05/20 19:34:06 0:27 0:02 3587080982063727 310410214827503 MT (Mi- APPLE Fi.:NIOP:CFNA:VM) 'PHONES 603 06/05/20 19:34:36 0:25 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 604 06/05/20 19:34:38 0:27 0:02 NO (VCORR) 605 06/05/20 19:34:38 0:27 0:02 3587080982063727 310410214827503 MT (Mi- APPLE Fi.:NIOP:CFMA:VM) 'PHONES 606 06/05/20 20:45:34 0:24 0:00 KT (NIOP) 607 06/05/20 20:45:41 0:31 0:02 NT (NIOP:CFNA:VM) 608 06/05/20 20:45:41 0:31 0:02 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 609 06/05/20 20:46:31 0:24 0:00 MT (NIOPI 610 06/05/20 20:46:37 0:30 0:02 MT (NIOP:CFNA:VNI 611 06/05/20 20:46:37 0:30 0:02 3587080982063727 310410214827503 NO APPLE 'PHONES 612 06/06/20 22:41:11 0:23 0:00 MT (NIOP) 613 06/06/20 22:41:16 0:28 1:04 MT (NIOP:CFNA:VM) 614 06/06/20 22:41:16 0:28 0:06 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 615 06/06/20 22:41:22 0:00 0:58 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES 616 06/06/20 22:43:40 0:04 3:36 MO (VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 33 SDNY_GM_00002640 EFTA_001(67(6 EFTA01251240 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 411., %----0 `-‘ AT&T Run Data: Run Time: Voice Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Seizure Time ET Originating Terminating IMEI Number Number INS/ CT Feature 617 06/06/20 22:43:40 0:04 1:01 3587080982063727 310410214827503 MT (NIOP:VCORR) APPLE IPHOWE8 618 06/06/20 22:44:41 0:00 2:35 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHOWE8 619 06/09/20 20:00:48 0:01 2:22 3587080982063727 310410214827503 WO (Ni-Fi) APPLE IPHOWE8 620 06/09/20 20:59:57 0:10 40:05 MT (NIOP:VCORR) 621 06/09/20 20:59:57 0:11 40:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 622 06/09/20 21:46:06 0:39 0:03 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 623 06/09/20 21:46:34 0:11 0:00 MT (Wi-Fi:NIOP) 624 06/09/20 21:46:34 0:11 0:00 MT (NIOP) 625 06/09/20 21:46:39 0:16 0:01 MT (NIOP:CFB:VN) 626 06/09/20 21:46:39 0:17 0:01 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHONE8 627 06/09/20 23:19:32 0:10 0:03 3587080982063727 310410214827503 NO (Ni-Fi) APPLE IPHONE8 628 06/09/20 23:19:41 0:03 0:00 MT (Wi-Fi:NIOP) 629 06/09/20 23:19:41 0:03 0:00 MT (Wi-Fi:NIOP) 630 06/09/20 23:19:46 0:08 0:02 MT (Ni-Fi:NIOP:CFB:VM) 631 06/09/20 23:19:46 0:09 0:02 3587080982063727 310410214827503 HO (Ni-Fi) APPLE IPHOWE8 632 06/09/20 23:58:57 0:02 0:00 MT (Wi-Fi:NIOP) 633 06/09/20 23:58:57 0:02 0:00 MT (Wi-Fi:NIOP) 634 06/09/20 23:59:00 0:05 0:02 MT (Ni-Fi:NIOP:CFB:VM) 635 06/09/20 23:59:00 0:06 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 636 06/10/20 14:55:12 0:23 0:00 MT (NIOP) 637 06/10/20 14:55:12 0:23 0:00 MT (Wi-Fi:NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 34 SDNY_GM_00002641 EF-EA_00116717 EFTA01251241 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 18:55:26 Conn. Time (OTC) Seizure Time RT Originating Terminating IbtEI Number Number INSI CT Feature 638 06/10/20 14:55:16 0:27 0:02 MT (Ni- Fi:NIOP:CFNA:VN) 639 06/10/20 14:55:16 0:27 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 640 06/10/20 14:55:36 0:10 0:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 641 06/10/20 18:51:20 0:23 0:00 MT (NIOP) 642 06/10/20 18:51:27 0:30 0:02 MT (NIOP:CFNA:VN) 643 06/10/20 18:51:27 0:31 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 644 06/10/20 19:11:49 0:21 0:00 MT (NIOP) 645 06/10/20 19:11:53 0:25 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 646 06/10/20 19:11:53 0:25 0:02 MT (NIOP:CFNA:VN) 647 06/10/20 22:21:12 0:23 0:00 MT (NIOP) 648 06/10/20 22:21:17 0:28 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 649 06/10/20 22:21:17 0:28 0:02 MT (NIOP:CFNA:VN) 650 06/11/20 00:50:40 0:22 0:00 MT (NIOP) 651 06/11/20 00:50:40 0:22 0:00 MT (Ni-Fi:NIOP) 652 06/11/20 00:50:45 0:27 0:01 MT (Ni- Fi:NIOP:CFNA:VM) 653 06/11/20 00:50:45 0:27 0:01 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 654 06/11/20 01:00:17 0:06 44:39 MT (NIOP :VCORR) 655 06/11/20 01:00:17 0:07 44:39 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 656 06/11/20 14:12:28 0:38 0:03 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 657 06/11/20 23:57:41 0:00 0:00 Mr (NIOP :CNN) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 35 SDNY_GM_00002642 EF-EA_001(67(8 EFTA01251242 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Terminating 1MEI Number Number 17481 CT Feature 658 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CFB:CMM:VM) 659 06/11/20 23:57:47 0:07 0:04 3587080982063727 310410214827503 MO [Mi-Fi) APPLE 'PHONES 660 06/12/20 00:35:53 0:39 0:04 3587080982063727 310410214827503 MO [Mi-Fi) APPLE IPHONES 661 06/12/20 00:36:33 0:24 0:00 MT 11410P) 662 06/12/20 00:36:39 0:30 0:02 MT INIOP:CFNA:VM) 663 06/12/20 00:36:39 0:31 0:02 3587080982063727 310410214827503 MO [Wi-Fi) APPLE IPHONES 664 06/12/20 13:40:56 0:17 0:38 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONES 665 06/12/20 13:41:49 0:02 0:00 3587080982063727 310410214827503 MO [Wi-Fi) APPLE IPHONES 666 06/12/20 16:43:56 0:25 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONES 667 06/12/20 16:43:57 0:26 0:05 3587080982063727 310410214827503 MT (Mi- APPLE Fi:MIOP:CFMA:VM) IPHONES 668 06/12/20 16:44:48 0:06 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONE8 669 06/12/20 16:47:03 0:36 0:03 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 670 06/12/20 16:47:08 0:00 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 671 06/12/20 16:47:56 0:35 0:05 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 672 06/12/20 16:48:26 0:18 0:00 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 36 SDNY_GM_00002643 EF-EA_001(67(9 EFTA01251243 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ••-•20 `-‘ AT&T Run Date: Run Time: Voice Usage For: 06/17/2020 1S:53:26 Item Conn. Conn. Seizure ET Originating Terminating Date Time Time Number Number (OTC) 673 06/12/20 16:49:51 0:13 0:43 MEI CT Feature 3587080982063727 310410214827503 MO APPLE 114HONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 37 SDNY_GM_00002644 EFTA 00116720 EFTA01251244 MOBILITY The information contained hora(F341::)N iff::tli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. ap. AT&T Run Date: Run Tame: Data Usage Tor: Item Conn. Date 06/17/2020 10:55:33 Conn. Time (UTC) Originating Number ET Bytes up Bytoa Apn Dn INZI INSI MARL 1 03/01/20 05:38:22 1:22 0 0 ims 3587080982063725 310410214827503 APPLE 2 03/01/20 05:41:28 60:00 11858 8720 ims 3587080982063725 310410214827503 APPLE 3 03/01/20 05:55:39 60:00 924 840 nxtgonpho no 3587080982063725 310410214827503 APPLE 4 03/01/20 06:41:28 41:54 2580 1324 ims 3587080982063725 310410214827503 APPLE 5 03/01/20 06:55:39 60:00 865 525 nxtgonpho no 3587080982063725 310410214827503 APPLE 6 03/01/20 07:23:22 60:00 11920 4220 ims 3587080982063725 310410214827503 APPLE 7 03/01/20 07:55:39 60:00 919 1036 nxtgonpho no 3587080982063725 310410214827503 APPLE 8 03/01/20 08:23:22 60:00 6956 2648 ims 3587080982063725 310410214827503 APPLE 9 03/01/20 08:55:39 60:00 692 420 nxtgonpho no 3587080982063725 310410214827503 APPLE 10 03/01/20 09:23:22 17:52 3424 1324 ims 3587080982063725 310410214827503 APPLE 11 03/01/20 09:44:39 60:00 11862 8772 ims 3587080982063725 310410214827503 APPLE 12 03/01/20 09:55:39 60:00 872 735 nxtgonpho no 3587080982063725 310410214827503 APPLE 13 03/01/20 10:44:39 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE 14 03/01/20 10:55:39 60:00 635 525 nxtgonpho no 3587080982063725 310410214827503 APPLE 15 03/01/20 11:44:39 60:00 5192 2648 ims 3587080982063725 310410214827503 APPLE 16 03/01/20 11:55:39 60:00 1038 630 nxtgonpho no 3587080982063725 310410214827503 APPLE 17 03/01/20 12:44:39 27:07 2580 1324 ims 3587080982063725 310410214827503 APPLE 18 03/01/20 12:55:39 60:00 3838 5118 nxtgonpho no 3587080982063725 310410214827503 APPLE 19 03/01/20 13:11:46 10:55 3424 1340 ims 3587080982063725 310410214827503 APPLE 20 03/01/20 13:25:26 18:05 7402 6102 ims 3587080982063725 310410214827503 APPLE 21 03/01/20 13:43:31 39:19 10252 4128 ims 3587080982063725 310410214827503 APPLE 22 03/01/20 13:55:39 60:00 7138 6900 nxtgonpho no 3587080982063725 310410214827503 APPLE 23 03/01/20 14:24:05 0:19 9754 7358 ims 3587080982063725 310410214827503 APPLE 24 03/01/20 14:24:24 8:29 5180 1696 ims 3587080982063725 310410214827503 APPLE 25 03/01/20 14:38:56 60:00 13027 7566 ims -1 310410214827503 26 03/01/20 14:55:39 9:59 173 105 nxtgonpho no 3587080982063725 310410214827503 APPLE 27 03/01/20 15:05:38 3:44 6742 4956 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL IPHOME8 IPHOME8 IPHOME8 IPHOME8 'PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 'PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002645 NTstAlt not for general distribution. Page 1 EFTA 00116721 EFTA01251245 MOBILITY The information contained heraCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. 4111. ......,0 ••--s""a AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INEI IMEI MAKE 28 03/01/20 15:09:22 0:12 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 29 03/01/20 15:09:55 2:27 5220 5991 nxtgonpho no 3587080982063725 310410214827503 APPLE 30 03/01/20 15:09:56 2:27 5991 4932 nxtgonpho no 3587080982063725 310410214827503 APPLE 31 03/01/20 15:12:23 19:15 8268 7175 nxtgonpho no 3587080982063725 310410214827503 APPLE 32 03/01/20 15:31:38 4:48 8406 5288 nxtgonpho no 3587080982063725 310410214827503 APPLE 33 03/01/20 15:36:25 1:43 6726 6727 nxtgonpho no 3587080982063725 310410214827503 APPLE 34 03/01/20 15:36:26 1:43 6727 6438 nxtgonpho no 3587080982063725 310410214827503 APPLE 35 03/01/20 15:38:09 1:35 7450 5003 nxtgonpho no 3587080982063725 310410214827503 APPLE 36 03/01/20 15:38:56 60:00 3532 1324 imp -1 310410214827503 37 03/01/20 15:39:44 0:22 5221 5991 nxtgonpho no 3587080982063725 310410214827503 APPLE 38 03/01/20 15:39:45 0:22 5991 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE 39 03/01/20 15:40:07 31:31 21318 19563 nxtgonpho no 3587080982063725 310410214827503 APPLE 40 03/01/20 16:02:35 17:49 9902 6262 imp -1 310410214827503 41 03/01/20 16:11:37 2:55 4504 5759 nxtgonpho no 3587080982063725 310410214827503 APPLE 42 03/01/20 16:11:38 2:55 5759 4216 nxtgonpho no 3587080982063725 310410214827503 APPLE 43 03/01/20 16:14:33 0:05 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 44 03/01/20 16:27:22 21:33 8365 6084 imp -1 310410214827503 45 03/01/20 16:29:19 1:40 7396 4952 nxtgonpho no 3587080982063725 310410214827503 APPLE 46 03/01/20 16:30:58 1:31 5220 5991 nxtgonpho no 3587080982063725 310410214827503 APPLE 47 03/01/20 16:30:59 1:31 5991 4932 nxtgonpho no 3587080982063725 310410214827503 APPLE 48 03/01/20 16:32:30 6:30 6040 4939 nxtgonpho no 3587080982063725 310410214827503 APPLE 49 03/01/20 16:38:56 60:00 0 0 imp -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002646 NeTiliAL not for general distribution. Page 2 EFTA 00116722 EFTA01251246 MOBILITY The information contained hereeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. 4111. trads. `"1° AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 18:63:33 Conn. Originating ET Tino Number (UTC) Bytes Up Bytes Apn Dn IBEX INSI MARL NICOLL 50 03/01/20 16:38:59 4:59 6299 7586 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONZ8 51 03/01/20 16:39:00 4:59 7586 5915 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 52 03/01/20 16:43:59 6:39 7933 19165 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 53 03/01/20 16:50:30 60:00 24775 18430 imp -1 310410214827503 54 03/01/20 16:50:37 0:21 288 48 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 55 03/01/20 16:50:38 0:22 48 Ormagonpho no 3587080982063725 310410214827503 APPLE 1PROME8 56 03/01/20 16:51:00 17:39 19037 30448 nxtgonpho no 3587080982063725 310410214827503 APPLE 'PHONES 57 03/01/20 17:08:38 1:08 5117 6043 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 58 03/01/20 17:08:39 1:08 6043 4829 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 59 03/01/20 17:09:47 41:45 65228 67623 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 60 03/01/20 17:38:56 12:29 0 0 imp -1 310410214827503 61 03/01/20 17:50:30 60:00 0 0 imp -1 310410214827503 62 03/01/20 17:51:25 6:34 8423 6138 imp -1 310410214827503 63 03/01/20 17:51:32 45:02 14269 13073 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 64 03/01/20 17:51:33 45:02 13073 17918 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 65 03/01/20 18:01:09 2:30 8313 6090 imp -1 310410214827503 66 03/01/20 18:06:21 5:55 11275 10058 imp -1 310410214827503 67 03/01/20 18:13:49 8:59 8187 6296 imp -1 310410214827503 68 03/01/20 18:25:49 5:48 8263 7472 imp -1 310410214827503 69 03/01/20 18:35:07 26:02 8371 6016 imp -1 310410214827503 70 03/01/20 18:36:35 8:04 43532 18469 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 71 03/01/20 18:44:38 6:14 10852 13435 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 72 03/01/20 18:44:39 6:14 13435 21886 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 73 03/01/20 18:50:30 60:00 0 0 imp -1 310410214827503 74 03/01/20 18:50:53 2:02 9758 6565 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002647 MT V& not for general distribution. Page 3 EF-EAJVII6723 EFTA01251247 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111, trm s1 /00 . I I AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Mambos ET Bytes Up Byte. Apn On INCI IMBI MODEL 75 03/01/20 18:50:54 2:02 6565 9470 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 76 03/01/20 18:52:56 60:00 19262 29639 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 77 03/01/20 19:02:56 60:00 22413 16301 imo -1 310410214827503 78 03/01/20 19:50:30 60:00 0 0 ipso -1 310410214827503 79 03/01/20 19:52:56 9:07 173 105 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 80 03/01/20 19:58:23 0:05 0 3613 ipso -1 310410214827503 81 03/01/20 20:02:02 2:03 5218 5973 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 82 03/01/20 20:02:03 2:03 5973 4930 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 83 03/01/20 20:02:56 60:00 6956 2864 ipso -1 310410214827503 84 03/01/20 20:04:06 60:00 32943 15861 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 85 03/01/20 20:50:30 58:40 0 0 ipso -1 310410214827503 86 03/01/20 21:02:56 32:46 8480 3004 ipso -1 310410214827503 87 03/01/20 21:04:06 3:13 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 88 03/01/20 21:07:19 40:44 7436 11745 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 89 03/01/20 21:43:30 0:16 48 0 ipso 3587080982063725 310410214827503 APPLE 1PROME8 90 03/01/20 21:43:46 51:58 11627 7387 ipso 3587080982063725 310410214827503 APPLE 1PROME8 91 03/01/20 21:48:02 2:57 5221 6043 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 92 03/01/20 21:48:03 2:57 6043 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 93 03/01/20 21:51:00 2:13 6040 4892 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 94 03/01/20 21:53:12 2:03 5221 5991 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 95 03/01/20 21:53:13 2:03 5991 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 96 03/01/20 21:55:16 15:41 9091 5311 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 97 03/01/20 22:10:56 2:03 5177 6103 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 98 03/01/20 22:10:57 2:03 6103 4889 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002648 NeTniliAL not for general distribution. Page 4 EFTA 00116724 EFTA01251248 MOBILITY The information contained hereeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 411111, AT&T Run Date: Run Tame: Data Usage For: Item Conn. Date 06/17/2020 16:56:33 Conn. originating ET Time Number (UTC) Bytes Up Bytoa Ann Dn ANTI IMS1 (WM 99 03/01/20 22:13:00 60:00 6976 5733 nxtgonpho no 3587080982063725 310410214827503 APPLE 100 03/01/20 22:42:34 13:34 6778 6105 ims 3587080982063725 310410214827503 APPLE 101 03/01/20 22:56:08 40:20 7172 3696 ims 3587080982063725 310410214827503 APPLE 102 03/01/20 23:13:00 60:00 1471 4996ruftgonpho no 3587080982063725 310410214827503 APPLE 103 03/01/20 23:38:48 0:05 0 0 ims 3587080982063725 310410214827503 APPLE 104 03/01/20 23:53:31 42:44 17191 8099 ims -1 310410214827503 105 03/02/20 00:13:00 60:00 4177 4210 nxtgonpho no 3587080982063725 310410214827503 APPLE 106 03/02/20 00:47:05 36:22 8553 7960 ims -1 310410214827503 107 03/02/20 01:13:00 58:51 4775 11416 nxtgonpho no 3587080982063725 310410214827503 APPLE 108 03/02/20 01:28:01 19:50 8228 7855 ims 3587080982063725 310410214827503 APPLE 109 03/02/20 01:47:51 2:30 3532 1340 ims 3587080982063725 310410214827503 APPLE 110 03/02/20 01:58:42 60:00 13603 7860 ims -1 310410214827503 111 03/02/20 02:11:50 2:11 5221 6043 nxtgonpho no 3587080982063725 310410214827503 APPLE 112 03/02/20 02:11:51 2:11 6043 4933ruftgonpho no 3587080982063725 310410214827503 APPLE 113 03/02/20 02:14:02 60:00 7529 5854ruftgonpho no 3587080982063725 310410214827503 APPLE 114 03/02/20 02:58:42 59:06 13444 4516 ims -1 310410214827503 115 03/02/20 03:14:02 60:00 1746 1500 nxtgonpho no 3587080982063725 310410214827503 APPLE 116 03/02/20 03:58:49 60:00 12186 9034 ims 3587080982063725 310410214827503 APPLE 117 03/02/20 04:14:02 60:00 1320 1250 nxtgonpho no 3587080982063725 310410214827503 APPLE 118 03/02/20 04:58:49 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE 119 03/02/20 05:14:02 60:00 1095 1341ruftgonpho no 3587080982063725 310410214827503 APPLE 120 03/02/20 05:58:49 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE 121 03/02/20 06:14:02 60:00 639 375ruftgonpho no 3587080982063725 310410214827503 APPLE 122 03/02/20 06:58:49 41:03 2596 1324 ims 3587080982063725 310410214827503 APPLE 123 03/02/20 07:14:02 25:50 369 375ruftgonpho no 3587080982063725 310410214827503 APPLE 124 03/02/20 07:39:52 0:15 495 293ruftgonpho no 3587080982063725 310410214827503 APPLE 125 03/02/20 07:39:52 0:07 0 0 ims 3587080982063725 310410214827503 APPLE NICOLL !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES 1PROME8 DRONES DRONES DRONES DRONES DRONES !PHONES !PRONGS !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002649 NaTiliAL not for general distribution. Page 5 EF-EAJVII6725 EFTA01251249 MOBILITY The information contained hereleenNyR 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in (ITC. 41011, AT&T Run pato: Run Time: Data usage For: Item corm. Date 06/17/2020 Conn. Originating ET Timo Number (OTC) Bytes Up Bytes Apn on INEI IMBI taxi 126 03/02/20 07:39:59 22:50 4840 1572 imp 3587080982063725 310410214827503 APPLE 127 03/02/20 07:40:07 60:00 582 572nxtgonpho no 3587080982063725 310410214827503 APPLE 128 03/02/20 08:07:09 29:52 9262 7340 ims 3587080982063725 310410214827503 APPLE 129 03/02/20 08:37:01 6:04 8728 7072 ims 3587080982063725 310410214827503 APPLE 130 03/02/20 08:40:07 2:56 252 269rumgonpho no 3587080982063725 310410214827503 APPLE 131 03/02/20 12:01:08 29:41 103877 370807rumgonpho no 3587080982063725 310410214827503 APPLE 132 03/02/20 12:01:11 29:38 14032 12064 ims 3587080982063725 310410214827503 APPLE 133 03/02/20 16:16:03 30:50 152117 587017rumgonpho no 3587080982063725 310410214827503 APPLE 134 03/02/20 16:16:05 1:10 8816 6194 ims 3587080982063725 310410214827503 APPLE 135 03/02/20 16:17:15 60:00 79112 44236 ims 3587080982063725 310410214827503 APPLE 136 03/02/20 16:34:35 0:04 0 2210 ims 3587080982063725 310410214827503 APPLE 137 03/02/20 16:34:56 0:23 7149 31933 ims 3587080982063725 310410214827503 APPLE 138 03/02/20 16:35:59 0:06 5581 12969 ims 3587080982063725 310410214827503 APPLE 139 03/02/20 16:36:44 0:56 117835 139892 ims 3587080982063725 310410214827503 APPLE 140 03/02/20 16:43:41 0:09 11001 4562 ims 3587080982063725 310410214827503 APPLE 141 03/02/20 16:44:01 2:12 235412 454074 ims 3587080982063725 310410214827503 APPLE 142 03/02/20 16:46:52 2:07 5464 7722rumgonpho no 3587080982063725 310410214827503 APPLE 143 03/02/20 16:46:53 2:07 7722 5176rumgonpho no 3587080982063725 310410214827503 APPLE 144 03/02/20 16:48:59 21:34 10832 12811rumgonpho no 3587080982063725 310410214827503 APPLE 145 03/02/20 17:10:33 44:52 11500 13087rumgonpho no 3587080982063725 310410214827503 APPLE 146 03/02/20 17:10:34 44:52 13087 13674rumgonpho no 3587080982063725 310410214827503 APPLE 147 03/02/20 17:17:15 8:46 0 0 ims 3587080982063725 310410214827503 APPLE 148 03/02/20 17:28:07 14:50 8207 7090 ims -1 310410214827503 149 03/02/20 17:48:50 11:14 8225 6088 ims -1 310410214827503 150 03/02/20 17:55:26 3:03 7794 5274 nxtgonpho no 3587080982063725 310410214827503 APPLE 151 03/02/20 17:58:28 18:22 321797 68055rumgonpho no 3587080982063725 310410214827503 APPLE 152 03/02/20 17:58:29 18:22 68055 350874rumgonpho no 3587080982063725 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES IPHONE8 'PHONES !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 'PHONES DRONES DRONES DRONES IPRONE8 !PHONES !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002650 NeTniliAL not for general distribution. Page 6 EFTA 00116726 EFTA01251250 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ...,,,• ••—ss` a. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. originating ET Time Number (UTC) Bytes Up Bytoa Apn Dn IND I INSI 153 03/02/20 18:04:26 12:24 6316 6778 imp 3587080982063725 310410214827503 154 03/02/20 18:04:27 12:24 6670 5964 imp 3587080982063725 310410214827503 155 03/02/20 18:15:35 17:29 10178 6494 imp -1 310410214827503 156 03/02/20 18:16:51 8:26 5439 6387 nxtgonpho no 3587080982063725 310410214827503 157 03/02/20 18:16:52 8:26 6387 5151 nxtgonpho no 3587080982063725 310410214827503 158 03/02/20 18:25:18 15:26 8963 10970 nxtgonpho no 3587080982063725 310410214827503 159 03/02/20 18:36:22 13:47 8199 5999 imp 3587080982063725 310410214827503 160 03/02/20 18:40:43 2:07 13092 7135 nxtgonpho no 3587080982063725 310410214827503 161 03/02/20 18:40:44 2:07 7135 12804 nxtgonpho no 3587080982063725 310410214827503 162 03/02/20 18:42:51 60:00 11769 17044 nxtgonpho no 3587080982063725 310410214827503 163 03/02/20 18:50:09 2:18 2984 1340 imo 3587080982063725 310410214827503 164 03/02/20 18:50:09 2:18 2812 1340 imo 3587080982063725 310410214827503 165 03/02/20 18:52:27 4:13 3424 1448 imo 3587080982063725 310410214827503 166 03/02/20 18:58:32 4:46 0 0 imo -1 310410214827503 167 03/02/20 19:14:25 15:41 9323 6918 imo -1 310410214827503 168 03/02/20 19:32:47 17:39 8477 6283 imp -1 310410214827503 169 03/02/20 19:42:51 54:20 10545 9322 nxtgonpho no 3587080982063725 310410214827503 170 03/02/20 19:56:40 10:31 0 0 imp -1 310410214827503 171 03/02/20 20:09:27 60:00 16978 9252 imp -1 310410214827503 172 03/02/20 20:37:10 2:07 5578 6598 nxtgonpho no 3587080982063725 310410214827503 173 03/02/20 20:37:11 2:07 6457 5290 nxtgonpho no 3587080982063725 310410214827503 174 03/02/20 20:39:18 27:09 8245 11360 nxtgonpho no 3587080982063725 310410214827503 175 03/02/20 21:06:26 2:18 6296 8106 nxtgonpho no 3587080982063725 310410214827503 176 03/02/20 21:06:27 i:19 8106 6008 nxtgonpho no 3587080982063725 310410214827503 177 03/02/20 21:08:46 38:39 8309 6108 nxtgonpho no 3587080982063725 310410214827503 178 03/02/20 21:09:27 15:00 0 0 imo -1 310410214827503 179 03/02/20 21:32:03 20:42 8203 5998 imp -1 310410214827503 MAfl NICOLL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002651 NeTniliAL not for general distribution. Page 7 EFTA 00116727 EFTA01251251 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am tO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time 20ne. AT&T's records are stored and provided in OTC. 4111. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 16:53:33 Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INLI INS' NAfl 180 03/02/20 21:47:24 12:15 17860 39013 nxtgonpho no 3587080982063725 310410214827503 APPLE 181 03/02/20 21:47:25 12:16 39013 17476 nxtgonpho no 3587080982063725 310410214827503 APPLE 182 03/02/20 21:58:20 30:21 0 0 ims -1 310410214827503 183 03/02/20 21:59:40 34:23 32299 48475 nxtgonpho no 3587080982063725 310410214827503 APPLE 184 03/02/20 21:59:41 34:23 48475 32752 nxtgonpho no 3587080982063725 310410214827503 APPLE 185 03/02/20 22:06:58 22:20 10591 8188 ims -1 310410214827503 186 03/02/20 22:28:40 5:23 6305 6732 ims 3587080982063725 310410214827503 APPLE 187 03/02/20 22:28:41 5:23 6732 6041 ims 3587080982063725 310410214827503 APPLE 188 03/02/20 22:31:33 6:26 10063 8268 ims -1 310410214827503 189 03/02/20 22:34:03 7:05 8089 10976 nxtgonpho no 3587080982063725 310410214827503 APPLE 190 03/02/20 22:34:05 7:04 10976 7801 nxtgonpho no 3587080982063725 310410214827503 APPLE 191 03/02/20 22:40:32 32:40 19107 12870 ims -1 310410214827503 192 03/02/20 22:41:09 1:04 8543 5515 nxtgonpho no 3587080982063725 310410214827503 APPLE 193 03/02/20 22:42:12 2:10 5792 7397 nxtgonpho no 3587080982063725 310410214827503 APPLE 194 03/02/20 22:42:13 2:10 7397 5504 nxtgonpho no 3587080982063725 310410214827503 APPLE 195 03/02/20 22:44:23 12:58 8379 5971 nxtgonpho no 3587080982063725 310410214827503 APPLE 196 03/02/20 22:57:20 10:17 9677 19783 nxtgonpho no 3587080982063725 310410214827503 APPLE 197 03/02/20 22:57:21 10:17 19783 9389 nxtgonpho no 3587080982063725 310410214827503 APPLE 198 03/02/20 23:07:38 0:51 7248 5395 nxtgonpho no 3587080982063725 310410214827503 APPLE 199 03/02/20 23:08:29 99:47 12346 13625 nxtgonpho no 3587080982063725 310410214827503 APPLE 200 03/02/20 23:08:30 60:00 6907 8351 nxtgonpho no 3587080982063725 310410214827503 APPLE 201 03/02/20 23:13:34 94:42 9570 9722 ims 3587080982063725 310410214827503 APPLE 202 03/02/20 23:13:35 60:00 9614 9414 ims 3587080982063725 310410214827503 APPLE 203 03/02/20 23:14:47 0:01 0 0 ims -1 310410214827503 204 03/02/20 23:17:19 34:17 11811 7693 ims -1 310410214827503 NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002652 NeTniliAL not for general distribution. Page 8 EF-EAJVII6728 EFTA01251252 MOBILITY The information contained heraCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ...„,,• ••-s` a. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apr. Dn INS' 205 03/02/20 23:56:48 60:00 14766 7840 imp -1 310410214827503 206 03/03/20 00:08:30 39:48 6718 6727 nxtgonpho no 3587080982063725 310410214827503 207 03/03/20 00:13:35 34:43 0 0 imp 3587080982063725 310410214827503 208 03/03/20 00:48:17 4:13 7806 5708 nxtgonpho no 3587080982063725 310410214827503 209 03/03/20 00:52:30 14:10 64691 46658 nxtgonpho no 3587080982063725 310410214827503 210 03/03/20 00:52:35 56:22 20187 11190 imp -1 310410214827503 211 03/03/20 00:56:48 60:00 0 0 imp -1 310410214827503 212 03/03/20 01:06:40 2:06 5584 6435 nxtgonpho no 3587080982063725 310410214827503 213 03/03/20 01:06:41 2:06 6435 5296 nxtgonpho no 3587080982063725 310410214827503 214 03/03/20 01:08:47 2:21 7926 5519 nxtgonpho no 3587080982063725 310410214827503 215 03/03/20 01:11:07 1:20 5584 6507 nxtgonpho no 3587080982063725 310410214827503 216 03/03/20 01:11:08 1:19 6507 5296 nxtgonpho no 3587080982063725 310410214827503 217 03/03/20 01:12:28 30:56 17894 13813 nxtgonpho no 3587080982063725 310410214827503 218 03/03/20 01:43:23 14:47 6083 6888 nxtgonpho no 3587080982063725 310410214827503 219 03/03/20 01:43:24 14:47 6888 5795 nxtgonpho no 3587080982063725 310410214827503 220 03/03/20 01:53:38 32:27 16630 8649 ism -1 310410214827503 221 03/03/20 01:56:48 60:00 0 0 imp -1 310410214827503 222 03/03/20 01:58:11 60:00 8925 7567 nxtgonpho no 3587080982063725 310410214827503 223 03/03/20 02:35:26 60:00 13553 7876 ism -1 310410214827503 224 03/03/20 02:56:48 60:00 0 0 imp -1 310410214827503 225 03/03/20 02:58:11 60:00 852 500 nxtgonpho no 3587080982063725 310410214827503 226 03/03/20 03:35:26 60:00 13444 4360 imp -1 310410214827503 227 03/03/20 03:56:48 45:12 0 0 imp -1 310410214827503 228 03/03/20 03:58:11 60:00 6285 9286 nxtgonpho no 3587080982063725 310410214827503 229 03/03/20 04:35:26 11:25 0 0 imp -1 310410214827503 230 03/03/20 04:54:33 26:00 11002 6192 imp -1 310410214827503 MAKE NODEL APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002653 NTniliAL not for general distribution. Page 9 EFTAJVII6729 EFTA01251253 MOBILITY The information contained heraleeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and (ITC. provided in %- ..zissi" —". AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating IT Time Hunter (UTC) Bytes UP Bytom Apn Dn INLI IMBI MAfl NICOLL 231 03/03/20 04:58:11 60:00 1008 750 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 232 03/03/20 05:28:33 5:32 0 0 in -1 310410214827503 233 03/03/20 05:42:12 11:36 8451 6230 in -1 310410214827503 234 03/03/20 05:58:11 30:15 426 250 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 235 03/03/20 06:05:52 0:25 9552 7198 imp 3587080982063725 310410214827503 APPLE IPHONEB 236 03/03/20 06:06:17 60:00 12012 4560 imp 3587080982063725 310410214827503 APPLE IPHONEB 237 03/03/20 06:28:26 2:10 5221 6055 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 238 03/03/20 06:28:27 2:10 6055 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 239 03/03/20 06:30:37 12:02 6265 5017 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 240 03/03/20 06:42:39 61:49 6703 7688 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 241 03/03/20 06:42:40 60:00 7515 6310 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 242 03/03/20 07:06:17 7:58 0 0 imp 3587080982063725 310410214827503 APPLE IPHONEB 243 03/03/20 07:23:35 20:53 7325 6792 imp 3587080982063725 310410214827503 APPLE IPHONEB 244 03/03/20 07:23:36 20:53 6792 7061 imp 3587080982063725 310410214827503 APPLE IPHONEB 245 03/03/20 07:23:52 10:34 11234 6390 imp -1 310410214827503 246 03/03/20 07:42:38 38:41 13368 7571 imp -1 310410214827503 247 03/03/20 07:42:40 1:49 173 105 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 248 03/03/20 07:44:29 15:24 7635 5218 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 249 03/03/20 07:59:52 8:49 7621 7231 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 250 03/03/20 07:59:53 8:49 7231 7237 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 251 03/03/20 08:08:42 0:48 6870 4955 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 252 03/03/20 08:09:29 0:48 5116 6055 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 253 03/03/20 08:09:30 0:48 6055 4828 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 254 03/03/20 08:10:18 0:40 6112 4952 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002654 NeTniiiikE not for general distribution. Page 10 EFTA_OOII6730 EFTA01251254 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 4111. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 MS= Conn. Originating ET Time Number (UTC) Bytes Up Bytoa Apn On ICI IMSI MARS 255 03/03/20 08:10:57 2:36 5117 6055 nxtgenpho no 3587080982063725 310410214827503 APPLE 256 03/03/20 08:10:58 2:36 6055 4829ruagenpho no 3587080982063725 310410214827503 APPLE 257 03/03/20 08:13:33 8:22 5113 6105ruagenpho no 3587080982063725 310410214827503 APPLE 258 03/03/20 08:13:35 8:21 6105 4825ruagenpho no 3587080982063725 310410214827503 APPLE 259 03/03/20 08:21:56 60:00 7213 5837roftgenpho no 3587080982063725 310410214827503 APPLE 260 03/03/20 08:31:42 16:37 9802 6142 imp -1 310410214827503 261 03/03/20 08:49:57 41:51 14587 7694 imp -1 310410214827503 262 03/03/20 09:21:56 5:17 173 105ruagenpho no 3587080982063725 310410214827503 APPLE 263 03/03/20 09:27:12 2:06 5116 6055ruagenpho no 3587080982063725 310410214827503 APPLE 264 03/03/20 09:27:13 2:06 6055 4828ruagenpho no 3587080982063725 310410214827503 APPLE 265 03/03/20 09:29:19 60:00 8500 5638ruagenpho no 3587080982063725 310410214827503 APPLE 266 03/03/20 09:43:56 4:50 0 0 imp -1 310410214827503 267 03/03/20 09:58:18 3:50 11004 6250 imp -1 310410214827503 268 03/03/20 10:07:18 25:12 9679 6398 imp -1 310410214827503 269 03/03/20 10:29:19 60:00 8133 2343 nxtgenpho no 3587080982063725 310410214827503 APPLE 270 03/03/20 10:47:22 0:14 48 0 imp 3587080982063725 310410214827503 APPLE 271 03/03/20 10:47:36 34:54 13747 8456 imp 3587080982063725 310410214827503 APPLE 272 03/03/20 11:29:05 33:39 13398 7586 imp -1 310410214827503 273 03/03/20 11:29:19 37:34 9542 6573 nxtgenpho no 3587080982063725 310410214827503 APPLE 274 03/03/20 12:06:52 8:49 5221 6055ruagenpho no 3587080982063725 310410214827503 APPLE 275 03/03/20 12:06:54 8:48 6055 4933ruagenpho no 3587080982063725 310410214827503 APPLE 276 03/03/20 12:07:05 60:00 18679 8370 imp -1 310410214827503 277 03/03/20 12:15:42 2:09 5216 6053 nxtgenpho no 3587080982063725 310410214827503 APPLE 278 03/03/20 12:15:43 2:09 6053 4928ruagenpho no 3587080982063725 310410214827503 APPLE MOLL IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 11 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002655 NTntAlt not for general distribution. EF-EA_00116731 EFTA01251255 The information contained heraCteNyFtli (um) 279 03/03/20 12:17:52 19:55 7630 6275 nxtgonpho no 3587080982063725 310410214827503 280 03/03/20 12:37:46 2:06 5532 9011 nxtgonpho no 3587080982063725 310410214827503 281 03/03/20 12:37:47 2:06 9011 5244 nxtgonpho no 3587080982063725 310410214827503 282 03/03/20 12:39:53 31:03 7586 5843 nxtgonpho no 3587080982063725 310410214827503 283 03/03/20 13:07:05 22:45 4964 1572 ims -1 310410214827503 284 03/03/20 13:10:55 0:40 5325 6280 nxtgonpho no 3587080982063725 310410214827503 285 03/03/20 13:10:56 0:40 6280 5037 nxtgonpho no 3587080982063725 310410214827503 286 03/03/20 13:11:36 7:06 9026 5966 nxtgonpho no 3587080982063725 310410214827503 287 03/03/20 13:18:41 8:16 5217 6105 nxtgonpho no 3587080982063725 310410214827503 288 03/03/20 13:18:42 8:16 6105 4929 nxtgonpho no 3587080982063725 310410214827503 289 03/03/20 13:26:58 0:46 6870 4956 nxtgonpho no 3587080982063725 310410214827503 290 03/03/20 13:27:43 2:06 10413 7087 nxtgonpho no 3587080982063725 310410214827503 291 03/03/20 13:27:44 2:06 7087 10125 nxtgonpho no 3587080982063725 310410214827503 292 03/03/20 13:29:50 38:38 13586 8797 nxtgonpho no 3587080982063725 310410214827503 293 03/03/20 13:33:07 0:25 16290 13240 ims 3587080982063725 310410214827503 294 03/03/20 13:33:32 33:21 10840 10928 ims 3587080982063725 310410214827503 295 03/03/20 14:08:27 6:02 5221 6055 nxtgonpho no 3587080982063725 310410214827503 296 03/03/20 14:08:28 6:02 6055 4933 nxtgonpho no 3587080982063725 310410214827503 297 03/03/20 14:14:30 46:03 26448 21682 nxtgonpho no 3587080982063725 310410214827503 298 03/03/20 14:14:32 10:03 8808 6173 ims 3587080982063725 310410214827503 299 03/03/20 14:24:35 29:19 8248 3004 ims 3587080982063725 310410214827503 300 03/03/20 14:54:30 0:29 8098 7128 ims 3587080982063725 310410214827503 301 03/03/20 14:54:59 39:09 9804 3052 ims 3587080982063725 310410214827503 302 03/03/20 15:00:32 13:07 24019 14458 nxtgonpho no 3587080982063725 310410214827503 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4101. ,....... ../ %""a‘S ° AT&T Run Date: Run Time: Data Osage For: 06/17/2020 10:55:34 Item Conn. Conn. Originating ET Sytes Bytoa Apn IKI INSI MARE MODEL Data Time Number OP Dn APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 12 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00002656 PsiTn iliAL not for general distribution. EFTA 00116732 EFTA01251256 MOBILITY The information contained heraCtopeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am CO 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in ......,0 ••—•st"" e AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Data Time (OTC) Originating Number ET Bytes Up Bytes Dn Apn INEI IMBI 303 03/03/20 15:00:33 13:07 14458 23635 nxtgonpho no 3587080982063725 310410214827503 304 03/03/20 15:13:40 58:17 7179 6785 nxtgonpho no 3587080982063725 310410214827503 305 03/03/20 15:35:15 0:06 0 0 imp -1 310410214827503 306 03/03/20 15:43:23 5:03 18043 11424 imp -1 310410214827503 307 03/03/20 15:48:44 55:52 13475 8142 imp -1 310410214827503 308 03/03/20 16:20:12 2:10 7680 8328 nxtgonpho no 3587080982063725 310410214827503 309 03/03/20 16:20:13 2:10 8328 7392 nxtgonpho no 3587080982063725 310410214827503 310 03/03/20 16:22:23 52:40 60305 22538 nxtgonpho no 3587080982063725 310410214827503 311 03/03/20 16:45:35 60:00 12603 7786 imp -1 310410214827503 312 03/03/20 17:15:02 2:07 13534 92096 nxtgonpho no 3587080982063725 310410214827503 313 03/03/20 17:15:03 2:07 92096 13246 nxtgonpho no 3587080982063725 310410214827503 314 03/03/20 17:17:10 40:59 10564 6373 nxtgonpho no 3587080982063725 310410214827503 315 03/03/20 17:45:35 29:47 5088 1572 ism -1 310410214827503 316 03/03/20 17:58:08 11:42 11259 12573 nxtgonpho no 3587080982063725 310410214827503 317 03/03/20 17:58:09 11:42 12573 24067 nxtgonpho no 3587080982063725 310410214827503 318 03/03/20 18:09:51 35:52 6810 5733 nxtgonpho no 3587080982063725 310410214827503 319 03/03/20 18:17:26 18:56 6670 5963 imp 3587080982063725 310410214827503 320 03/03/20 18:36:22 60:00 11996 4328 imp 3587080982063725 310410214827503 321 03/03/20 18:45:42 2:07 5218 6105 nxtgonpho no 3587080982063725 310410214827503 322 03/03/20 18:45:43 2:07 6105 4930 nxtgonpho no 3587080982063725 310410214827503 323 03/03/20 18:47:50 2:26 9442 11383 nxtgonpho no 3587080982063725 310410214827503 324 03/03/20 18:50:15 2:15 5535 9029 nxtgonpho no 3587080982063725 310410214827503 325 03/03/20 18:50:16 2:15 9029 5247 nxtgonpho no 3587080982063725 310410214827503 326 03/03/20 18:52:31 21:26 15301 35155 nxtgonpho no 3587080982063725 310410214827503 MUT MODEL APPLE DRONES APPLE DRONES APPLE IPHONEB APPLE DRONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE DRONES APPLE IPHONEB APPLE DRONES APPLE DRONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002657 NeTifikE not for general distribution. Page 13 EF-EA_00116733 EFTA01251257 MOBILITY The information contained heraCteNyHt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in LTC. ap. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn IKI INSI MARE 327 03/03/20 19:13:55 2:25 5768 7851 nxtgonpho no 3587080982063725 310410214827503 APPLE 328 03/03/20 19:13:57 2:24 7851 5480 nxtgonpho no 3587080982063725 310410214827503 APPLE 329 03/03/20 19:16:20 52:45 731753 3170468 nxtgonpho no 3587080982063725 310410214827503 APPLE 330 03/03/20 19:16:21 52:45 3170468 731465 nxtgonpho no 3587080982063725 310410214827503 APPLE 331 03/03/20 19:36:22 60:00 6956 2880 imam 3587080982063725 310410214827503 APPLE 332 03/03/20 20:09:06 1:12 7245 5092 nxtgonpho no 3587080982063725 310410214827503 APPLE 333 03/03/20 20:10:18 12:53 8802 7894 nxtgonpho no 3587080982063725 310410214827503 APPLE 334 03/03/20 20:10:19 12:53 7894 8514 nxtgonpho no 3587080982063725 310410214827503 APPLE 335 03/03/20 20:23:12 2:10 7526 5166 nxtgonpho no 3587080982063725 310410214827503 APPLE 336 03/03/20 20:25:21 2:09 5345 7525 nxtgonpho no 3587080982063725 310410214827503 APPLE 337 03/03/20 20:25:22 2:09 7525 5057 nxtgonpho no 3587080982063725 310410214827503 APPLE 338 03/03/20 20:27:31 3:08 6340 5292 nxtgonpho no 3587080982063725 310410214827503 APPLE 339 03/03/20 20:30:38 14:54 5752 7585 nxtgonpho no 3587080982063725 310410214827503 APPLE 340 03/03/20 20:30:39 14:54 7585 5464 nxtgonpho no 3587080982063725 310410214827503 APPLE 341 03/03/20 20:36:22 16:16 3532 1324 ims 3587080982063725 310410214827503 APPLE 342 03/03/20 20:45:32 0:06 0 48 nxtgonpho no 3587080982063725 310410214827503 APPLE 343 03/03/20 20:45:34 0:05 48 Oruftgonpho no 3587080982063725 310410214827503 APPLE 344 03/03/20 20:45:47 1:55 5221 6055 nxtgonpho no 3587080982063725 310410214827503 APPLE 345 03/03/20 20:45:48 1:56 6055 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE 346 03/03/20 20:47:44 13:12 9776 11284 nxtgonpho no 3587080982063725 310410214827503 APPLE 347 03/03/20 20:53:28 0:34 19114 16639 imam 3587080982063725 310410214827503 APPLE 348 03/03/20 20:54:02 28:56 8836 3160 imam 3587080982063725 310410214827503 APPLE MODEL IPHONEB IPHONEB !PHONES !PHONES 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 !PHONES !PHONES 1PROME8 DRONES DRONES DRONES DRONES DRONES 1PROME8 1PROME8 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 14 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002658 PsisTiliAL not for general distribution. EF-EA_00116734 EFTA01251258 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time Originating ET Bytes Bytes Apn IMEI DWI MARE MODEL Number Up Dn (UTC) 349 03/03/20 21:00:55 2:06 5117 350 03/03/20 21:00:56 2:06 6055 351 03/03/20 21:03:02 4:40 7630 352 03/03/20 21:07:41 2:07 5281 353 03/03/20 21:07:42 2:07 6115 354 03/03/20 21:09:49 0:05 0 355 03/03/20 21:09:58 25:19 7879 356 03/03/20 21:24:20 8:46 0 357 03/03/20 21:35:17 113:52 6856 358 03/03/20 21:35:18 60:00 192 359 03/03/20 21:35:20 112:43 7134 360 03/03/20 21:35:21 60:00 6744 361 03/03/20 21:35:37 60:00 32623 362 03/03/20 21:35:54 30:49 5373088 363 03/03/20 22:35:18 53:52 10936 364 03/03/20 22:35:21 52:43 0 365 03/03/20 22:35:37 37:55 3532 366 03/03/20 23:15:41 8:11 0 367 03/03/20 23:27:35 0:59 6262 368 03/03/20 23:27:36 0:59 6666 369 03/03/20 23:28:02 0:03 0 370 03/03/20 23:28:09 1:00 7266 371 03/03/20 23:28:10 1:00 6798 372 03/03/20 23:28:33 58:37 18422 373 03/03/20 23:29:10 0:36 7462 374 03/03/20 23:29:45 24:20 30213 375 03/03/20 23:29:46 24:20 52870 6055 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 4829 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 5224 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 6115 nxtgenpho 3587080982063725 310410214827503 APPLE TUMMIES no 4993 nxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no Onxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no 5848 nxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no 0 ims -1 310410214827503 11128 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 6744 ims 3587080982063725 310410214827503 APPLE !PROMS 6978 ims 3587080982063725 310410214827503 APPLE !PROMS 20498 ims -1 310410214827503 4436025 ims -1 310410214827503 6280 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 0 imp 3587080982063725 310410214827503 APPLE DRONES 1340 imp -1 310410214827503 0 imp -1 310410214827503 6666 ims 3587080982063725 310410214827503 APPLE DRONES 5998 ims 3587080982063725 310410214827503 APPLE !PROMS 0 imp -1 310410214827503 6862 ims 3587080982063725 310410214827503 APPLE !PROMS 7002 ims 3587080982063725 310410214827503 APPLE DRONES 9574 ims -1 310410214827503 5052 nxtgenpho 3587080982063725 310410214827503 APPLE DRONES no 52870 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 29925 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002659 WAAL not for general distribution. EF-EA_00116735 EFTA01251259 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in 411111, .....„,,,• ••-s`" 1. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (UTC) Originating ET Bytes Bytes Apn INFI Number Up Dn ISIS I teal NDDEL 376 03/03/20 23:54:06 15:46 17645 20423 nxtgonpho no 3587080982063725 310410214827503 377 03/03/20 23:54:07 15:47 20423 17069 nxtgonpho no 3587080982063725 310410214827503 378 03/04/20 00:09:54 0:46 11507 6439 nxtgonpho no 3587080982063725 310410214827503 379 03/04/20 00:10:39 52:20 56711 52938 nxtgonpho no 3587080982063725 310410214827503 380 03/04/20 00:10:40 52:20 52938 68486 nxtgonpho no 3587080982063725 310410214827503 381 03/04/20 00:32:25 2:30 0 0 ims -1 310410214827503 382 03/04/20 00:45:06 17:53 6510 8370 ims 3587080982063725 310410214827503 383 03/04/20 00:45:07 17:53 8302 6354 ims 3587080982063725 310410214827503 384 03/04/20 00:45:49 0:03 0 0 ims -1 310410214827503 385 03/04/20 00:46:19 60:00 15323 9894 ims -1 310410214827503 386 03/04/20 01:03:00 0:59 48 Oruagonpho no 3587080982063725 310410214827503 387 03/04/20 01:03:58 30:52 55514 57373 nxtgonpho no 3587080982063725 310410214827503 388 03/04/20 01:03:59 30:52 57373 56180 nxtgonpho no 3587080982063725 310410214827503 389 03/04/20 01:34:51 0:06 0 Oruagonpho no 3587080982063725 310410214827503 390 03/04/20 01:37:32 21:01 25916 28070 nxtgonpho no 3587080982063725 310410214827503 391 03/04/20 01:37:33 21:01 28070 25517 nxtgonpho no 3587080982063725 310410214827503 392 03/04/20 01:46:19 55:23 8620 2928 ims -1 310410214827503 393 03/04/20 01:58:34 63:59 105999 112162 nxtgonpho no 3587080982063725 310410214827503 394 03/04/20 01:58:35 60:00 111873 105108 nxtgonpho no 3587080982063725 310410214827503 395 03/04/20 02:49:16 12:28 264 112 ims 3587080982063725 310410214827503 396 03/04/20 02:49:17 12:28 48 0 ims 3587080982063725 310410214827503 397 03/04/20 02:50:28 6:33 0 0 ims -1 310410214827503 398 03/04/20 02:58:35 3:59 289 315 nxtgonpho no 3587080982063725 310410214827503 399 03/04/20 03:01:22 0:25 7234 6788 ims 3587080982063725 310410214827503 400 03/04/20 03:01:23 0:26 6788 6970 mos 3587080982063725 310410214827503 401 03/04/20 03:01:44 0:05 2567 1210 ims -1 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 16 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002660 PsiTifikE not for general distribution. EF-EA_00116736 EFTA01251260 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59Om AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. trad '`s s AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 illIll'Ill Conn. Originating ET Time Number op (OTC) Bytes Byte. Apn Dn ICI INSI 402 03/04/20 03:01:47 0:46 6360 6670 ims 3587080982063725 310410214827503 403 03/04/20 03:01:48 0:46 6670 6096 ims 3587080982063725 310410214827503 404 03/04/20 03:02:11 39:31 14275 8051 ims -1 310410214827503 405 03/04/20 03:02:34 0:39 0 0 nxtopanpho no 3587080982063725 310410214827503 406 03/04/20 03:03:12 73:18 28513 15701 nxtopanpho no 3587080982063725 310410214827503 407 03/04/20 03:03:13 60:00 7682 13726nxtopanpho no 3587080982063725 310410214827503 408 03/04/20 03:53:13 23:17 7231 6796 ims 3587080982063725 310410214827503 409 03/04/20 03:53:14 23:17 6796 7075 ims 3587080982063725 310410214827503 410 03/04/20 03:54:40 14:02 9119 6273 ims -1 310410214827503 411 03/04/20 04:03:13 13:18 8019 14307 nxtgenpho no 3587080982063725 310410214827503 412 03/04/20 04:13:39 36:38 13443 7848 ims -1 310410214827503 413 03/04/20 04:16:31 6:11 6032 5599 nxtgenpho no 3587080982063725 310410214827503 414 03/04/20 04:22:41 20:00 11994 13097 nxtgenpho no 3587080982063725 310410214827503 415 03/04/20 04:22:42 60:00 65817 44943 nxtgenpho no 3587080982063725 310410214827503 416 03/04/20 04:42:41 62:23 34539 53298nxtopanpho no 3587080982063725 310410214827503 417 03/04/20 04:48:51 56:13 7374 39842 ims 3587080982063725 310410214827503 418 03/04/20 04:48:52 56:13 6794 7110 ims 3587080982063725 310410214827503 419 03/04/20 05:05:48 60:00 15313 8908 ims -1 310410214827503 420 03/04/20 05:22:42 22:23 578 630nxtopanpho no 3587080982063725 310410214827503 421 03/04/20 05:45:05 2:17 5221 6023nxtopanpho no 3587080982063725 310410214827503 422 03/04/20 05:45:06 2:17 6023 4933nxtopanpho no 3587080982063725 310410214827503 423 03/04/20 05:47:23 37:45 27157 37423 nxtgenpho no 3587080982063725 310410214827503 424 03/04/20 05:47:24 37:45 37423 26773 nxtgenpho no 3587080982063725 310410214827503 425 03/04/20 06:05:48 16:56 0 0 ims -1 310410214827503 426 03/04/20 06:25:10 48:24 9251 11190 nxtgenpho no 3587080982063725 310410214827503 427 03/04/20 06:26:41 13:02 8491 6410 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained heraCtoNyFti MARL NICOLL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES SDNY_GM_ 00002661 NeTtikE not for general distribution. Page 17 EF-EAJVII6737 EFTA01251261 MOBILITY The information contained hereCoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 41011, AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INEI INSI MARL 428 03/04/20 06:46:22 60:00 13338 7746 ins -1 310410214827503 429 03/04/20 07:13:33 2:05 5222 6075 nxtgenpho no 3587080982063725 310410214827503 APPLE 430 03/04/20 07:13:34 2:05 6075 4934 nxtgenpho no 3587080982063725 310410214827503 APPLE 431 03/04/20 07:15:39 60:00 8970 6813 nxtgenpho no 3587080982063725 310410214827503 APPLE 432 03/04/20 07:46:22 0:17 0 0 ins -1 310410214827503 433 03/04/20 07:51:19 6:15 48 0 ins 3587080982063725 310410214827503 APPLE 434 03/04/20 07:57:34 60:00 15137 8951 ins 3587080982063725 310410214827503 APPLE 435 03/04/20 08:15:39 60:00 58544 77226 nxtgenpho no 3587080982063725 310410214827503 APPLE 436 03/04/20 08:57:34 9:27 0 0 ins 3587080982063725 310410214827503 APPLE 437 03/04/20 09:11:30 8:59 0 0 ins -1 310410214827503 438 03/04/20 09:15:39 60:00 1723 3095 nxtgenpho no 3587080982063725 310410214827503 APPLE 439 03/04/20 09:25:04 60:00 16490 8950 ins -1 310410214827503 440 03/04/20 10:15:39 60:00 1384 968 nxtgenpho no 3587080982063725 310410214827503 APPLE 441 03/04/20 10:25:04 49:47 8388 3036 ins -1 310410214827503 442 03/04/20 11:15:39 60:00 22590 24929 nxtgenpho no 3587080982063725 310410214827503 APPLE 443 03/04/20 11:18:22 46:42 14778 8892 ins -1 310410214827503 444 03/04/20 12:09:39 15:38 8367 6072 ins -1 310410214827503 445 03/04/20 12:15:39 19:26 21920 25058 nxtgenpho no 3587080982063725 310410214827503 APPLE 446 03/04/20 12:32:29 15:21 14115 12665 ins -1 310410214827503 447 03/04/20 12:35:04 2:56 5221 6023 nxtgenpho no 3587080982063725 310410214827503 APPLE 448 03/04/20 12:35:05 2:56 6023 4933 nxtgenpho no 3587080982063725 310410214827503 APPLE 449 03/04/20 12:38:01 11:43 7596 6216 nxtgenpho no 3587080982063725 310410214827503 APPLE 450 03/04/20 12:49:44 34:12 15878 18653 nxtgenpho no 3587080982063725 310410214827503 APPLE 451 03/04/20 12:49:45 34:12 18653 16658 nxtgonpho no 3587080982063725 310410214827503 APPLE 452 03/04/20 12:49:49 2:11 8453 6430 vas -1 310410214827503 453 03/04/20 12:51:43 0:05 0 0 vas 3587080982063725 310410214827503 APPLE 454 03/04/20 12:52:18 26:35 6262 6670 ins 3587080982063725 310410214827503 APPLE MODEL !PHONES !PHONES IPHOME8 !PHONES IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002662 NeTnilikk. not for general distribution. EF-EAJVII6738 EFTA01251262 MOBILITY The information contained heraleeNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and UTC. provided in ....,„# ••-•°"" s AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 10:55:34 Conn. Originating LT Time Number (OTC) Bytes Up Bytes Apn On INLI IMSI MARL 455 03/04/20 12:52:19 26:35 6670 6106 ims 3587080982063725 310410214827503 APPLE 456 03/04/20 12:52:35 16:07 8313 5982 ims -1 310410214827503 457 03/04/20 13:13:15 1:38 0 0 Sums -1 310410214827503 458 03/04/20 13:17:35 6:21 6248 6666 hams 3587080982063725 310410214827503 APPLE 459 03/04/20 13:17:36 6:21 6666 6092 ims 3587080982063725 310410214827503 APPLE 460 03/04/20 13:18:53 60:00 16575 9018 ims -1 310410214827503 461 03/04/20 13:23:57 2:15 14505 5862 nxtgenpho no 3587080982063725 310410214827503 APPLE 462 03/04/20 13:26:12 1:08 5112 6021 nxtgenpho no 3587080982063725 310410214827503 APPLE 463 03/04/20 13:26:13 1:08 6021 4824 nxtgenpho no 3587080982063725 310410214827503 APPLE 464 03/04/20 13:27:21 2:26 6020 4893 nxtgenpho no 3587080982063725 310410214827503 APPLE 465 03/04/20 13:29:46 2:07 5222 6196 nxtgenpho no 3587080982063725 310410214827503 APPLE 466 03/04/20 13:29:47 2:07 6196 4934 nxtgenpho no 3587080982063725 310410214827503 APPLE 467 03/04/20 13:31:54 60:00 25665 13703 nxtgenpho no 3587080982063725 310410214827503 APPLE 468 03/04/20 14:18:53 46:08 8496 2820 ims -1 310410214827503 469 03/04/20 14:31:54 60:00 341 1155 nxtgenpho no 3587080982063725 310410214827503 APPLE 470 03/04/20 15:04:19 60:00 0 0 ims -1 310410214827503 471 03/04/20 15:05:01 26:14 11655 7628 ims -1 310410214827503 472 03/04/20 15:31:54 9:53 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 473 03/04/20 15:42:35 60:00 16282 9102 ims -1 310410214827503 474 03/04/20 16:04:19 11:00 0 0 ims -1 310410214827503 475 03/04/20 16:08:38 60:00 16925 11000 nxtgenpho no 3587080982063725 310410214827503 APPLE 476 03/04/20 16:15:18 0:07 0 0 ims -1 310410214827503 477 03/04/20 16:17:32 19:08 9817 6348 ins -1 310410214827503 478 03/04/20 16:40:18 1:19 7364 6104 ins 3587080982063725 310410214827503 APPLE 479 03/04/20 16:41:37 60:00 12028 4220 ins 3587080982063725 310410214827503 APPLE 480 03/04/20 16:42:35 60:00 0 0 ins -1 310410214827503 481 03/04/20 17:08:38 11:35 237 210 nxtgenpho no 3587080982063725 310410214827503 APPLE MODEL IPHOME8 IPHOME8 IPHONEB !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES !PROMS !PROMS !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002663 N:FilleAsk not for general distribution. Page 19 EF-EA_00116739 EFTA01251263 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 LL:59:59pm Time Zone. AT&T's records ere stored and provided in %..„„ 00 %. " 11. ‘"Ii. AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Originating ET Bytes Byte. Apn INCI IMBI MAKE MOD= Date Time Number Up Dn (UTC) 482 03/04/20 17:20:12 2:07 5222 6023 nxtgonpho no 3587080982063725 310410214827503 483 03/04/20 17:20:13 2:07 6023 4934ruftgonpho no 3587080982063725 310410214827503 484 03/04/20 17:22:20 17:42 15481 6441ruftgonpho no 3587080982063725 310410214827503 485 03/04/20 17:40:01 21:24 22364 19777ruftgonpho no 3587080982063725 310410214827503 486 03/04/20 17:40:02 21:24 19777 21884ruftgonpho no 3587080982063725 310410214827503 487 03/04/20 17:41:37 60:00 6956 2756 imp 3587080982063725 310410214827503 488 03/04/20 17:42:35 60:00 0 0 imo -1 310410214827503 489 03/04/20 18:01:26 34:35 31417 25433ruftgonpho no 3587080982063725 310410214827503 490 03/04/20 18:36:01 10:11 123900 267707ruftgonpho no 3587080982063725 310410214827503 491 03/04/20 18:41:37 44:17 18788 8828 imp 3587080982063725 310410214827503 492 03/04/20 18:42:35 41:54 0 0 imp -1 310410214827503 493 03/04/20 18:46:11 14:32 2738331 1371751ruftgonpho no 3587080982063725 310410214827503 494 03/04/20 18:46:12 14:32 1371751 2737947ruftgonpho no 3587080982063725 310410214827503 495 03/04/20 18:52:22 1:45 146201 318486 imp 3587080982063725 310410214827503 496 03/04/20 19:00:44 16:05 54281 30349ruftgonpho no 3587080982063725 310410214827503 497 03/04/20 19:16:48 4:26 8112 8235 nxtgonpho no 3587080982063725 310410214827503 498 03/04/20 19:16:49 4:26 8235 7824 nxtgonpho no 3587080982063725 310410214827503 499 03/04/20 19:21:15 5:10 12167 13427ruftgonpho no 3587080982063725 310410214827503 500 03/04/20 19:21:16 5:10 13427 11783ruftgonpho no 3587080982063725 310410214827503 501 03/04/20 19:24:28 1:57 7266 6862 imp 3587080982063725 310410214827503 502 03/04/20 19:24:29 1:57 6794 7002 imp 3587080982063725 310410214827503 503 03/04/20 19:26:27 4:02 11620 6086ruftgonpho no 3587080982063725 310410214827503 504 03/04/20 19:26:28 60:00 29067 17646 imp -1 310410214827503 SOS 03/04/20 19:30:28 8:16 5707 6616 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002664 NTailiAL not for general distribution. EFTA_00I 16740 EFTA01251264 MOBILITY The information contained heraleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in AT&T Run Date: Run Time: Data Osage For: 06/17/2020 18:55:34 Item Conn. Conn. Originating ET Bytes Date Time Number UP (OTC) S06 03/04/20 19:30:29 8:16 6616 507 03/04/20 19:38:45 42:09 22349 508 03/04/20 19:46:18 0:24 27681 S09 03/04/20 20:20:53 7:50 7092 510 03/04/20 20:20:54 7:50 7276 511 03/04/20 20:26:28 55:05 8604 512 03/04/20 20:28:44 0:05 0 513 03/04/20 20:30:50 93:46 76696 S14 03/04/20 20:30:51 60:00 52778 515 03/04/20 21:25:15 39:21 8517 516 03/04/20 21:25:16 39:21 8758 517 03/04/20 21:29:51 60:00 25598 518 03/04/20 21:30:51 33:46 36194 S19 03/04/20 22:04:37 4:46 6080 S20 03/04/20 22:07:20 48:02 5023984 S21 03/04/20 22:09:22 1:51 5584 S22 03/04/20 22:09:23 1:51 6403 S23 03/04/20 22:11:14 4:08 7260 S24 03/04/20 22:15:21 2:11 5436 525 03/04/20 22:15:22 2:11 6473 S26 03/04/20 22:17:32 15:05 14750 S27 03/04/20 22:17:33 15:05 26225 S28 03/04/20 22:29:51 60:00 20512 S29 03/04/20 22:32:38 18:11 11974 Bytom On Apn 5419 nxtgenpho no 17236 nxtgenpho no 51638 imp 7276 nxtgenpho no 6708 nxtgenpho no 3036 imp 0 nxtgenpho no 88972 nxtgenpho no 46425 nxtgenpho no 8866 imp 8253 imp 14171 imp 29351 nxtgenpho no 4929 nxtgenpho no 9542836 imp 6403 nxtgenpho no 5296 nxtgenpho no 6155 nxtgenpho no 6473 nxtgenpho no 5148 nxtgenpho no 26225 nxtgenpho no 15206 nxtgenpho no 12964 imp 14957 nxtgenpho no INEI 3587080982063725 3587080982063725 -1 3587080982063725 3587080982063725 -1 3587080982063725 3587080982063725 3587080982063725 3587080982063725 3587080982063725 -1 3587080982063725 3587080982063725 -1 3587080982063725 3587080982063725 3587080982063725 3587080982063725 3587080982063725 3587080982063725 3587080982063725 -1 3587080982063725 INSI MAfl MODEL 310410214827503 APPLE 18HOME8 310410214827503 APPLE 18HOME8 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE 18HOME8 310410214827503 APPLE 18HOME8 310410214827503 310410214827503 APPLE DRONES 310410214827503 APPLE DRONES 310410214827503 310410214827503 APPLE !PROMS 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE INIONE8 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE 18HOME8 310410214827503 310410214827503 APPLE 18HOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002665 N:FoleikE not for general distribution. Page 21 EF-EA_00116741 EFTA01251265 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4111. °M assid ‘ini° AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Ilea Conn. Conn. Originating ET Bytes Date Time Number Op (OTC) 530 03/04/20 22:32:39 18:11 14957 531 03/04/20 22:50:50 3:38 9791 532 03/04/20 22:54:27 1:02 5221 533 03/04/20 22:54:28 1:02 6023 534 03/04/20 22:55:30 4:48 136342 535 03/04/20 23:00:17 9:59 16815 536 03/04/20 23:00:19 9:58 14603 537 03/04/20 23:04:22 0:43 92872 538 03/04/20 23:10:17 4:26 8747 539 03/04/20 23:14:42 8:28 5220 540 03/04/20 23:14:43 8:28 6075 541 03/04/20 23:23:11 5:52 6866 542 03/04/20 23:29:02 8:29 5282 543 03/04/20 23:29:04 8:28 6135 544 03/04/20 23:29:51 22:47 4980 545 03/04/20 23:37:32 4:06 6018 546 03/04/20 23:41:37 8:28 6755 547 03/04/20 23:41:38 8:28 6847 548 03/04/20 23:50:06 35:32 11569 549 03/04/20 23:54:57 24:22 9623 550 03/05/20 00:22:15 0:19 96 551 03/05/20 00:23:33 25:46 20534 552 03/05/20 00:25:37 3:04 5117 Bytes Apn INLI DUI MARL Dn 11590 nxtgonpho no 3587080982063725 310410214827503 APPLE 5778 nxtgonpho no 3587080982063725 310410214827503 APPLE 6023 nxtgonpho no 3587080982063725 310410214827503 APPLE 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE 110705 nxtgonpho no 3587080982063725 310410214827503 APPLE 14603 nxtgonpho no 3587080982063725 310410214827503 APPLE 16431 nxtgonpho no 3587080982063725 310410214827503 APPLE 57448 ims -1 310410214827503 5322 nxtgonpho no 3587080982063725 310410214827503 APPLE 6075 nxtgonpho no 3587080982063725 310410214827503 APPLE 4932 nxtgonpho no 3587080982063725 310410214827503 APPLE 5015 nxtgonpho no 3587080982063725 310410214827503 APPLE 6135 nxtgonpho no 3587080982063725 310410214827503 APPLE 4994 nxtgonpho no 3587080982063725 310410214827503 APPLE 1588 ims -1 310410214827503 4936 nxtgonpho no 3587080982063725 310410214827503 APPLE 6847 nxtgonpho no 3587080982063725 310410214827503 APPLE 6467 nxtgonpho no 3587080982063725 310410214827503 APPLE 7003 nxtgonpho no 3587080982063725 310410214827503 APPLE 6213 ims -1 310410214827503 0 ims 3587080982063725 310410214827503 APPLE 11770 ims -1 310410214827503 6023 nxtgonpho 3587080982063725 310410214827503 APPLE no MOLL IPHONEB IPHONEB !PHONES !PHONES IPHONEB !PHONES !PHONES !PHONES !PHONES IPHONEB !PHONES !PHONES IPHONEB !PHONES !PHONES !PHONES !PHONES IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 22 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002666 PsiTn iliAL not for general distribution. EFTA 00116742 EFTA01251266 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 1L:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. tra‘'`si AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating Time Number (OTC) LT Bytes Up Byte. npn Dn ICI IMBI Min 553 03/05/20 00:25:38 3:04 6023 4829 nxtgenpho no 3587080982063725 310410214827503 APPLE 554 03/05/20 00:28:41 6:06 6068 6035ruagenpho no 3587080982063725 310410214827503 APPLE 555 03/05/20 00:28:42 6:06 6035 578Ormagenpho no 3587080982063725 310410214827503 APPLE 556 03/05/20 00:34:48 7:20 7430 4957ruagenpho no 3587080982063725 310410214827503 APPLE 557 03/05/20 00:42:07 0:52 5221 6075ruagenpho no 3587080982063725 310410214827503 APPLE 558 03/05/20 00:42:08 0:52 6075 4933ruagenpho no 3587080982063725 310410214827503 APPLE 559 03/05/20 00:43:00 2:32 6193 5009ruagenpho no 3587080982063725 310410214827503 APPLE 560 03/05/20 00:45:31 2:07 5118 6023ruagenpho no 3587080982063725 310410214827503 APPLE 561 03/05/20 00:45:33 2:06 6023 483Ormagenpho no 3587080982063725 310410214827503 APPLE 562 03/05/20 00:47:40 5:43 16247 12433ruagenpho no 3587080982063725 310410214827503 APPLE 563 03/05/20 00:51:15 0:00 0 0 imp 3587080982063725 310410214827503 APPLE 564 03/05/20 00:51:24 11:26 31254 20844 imp -1 310410214827503 565 03/05/20 00:53:22 6:04 7012 10966ruagenpho no 3587080982063725 310410214827503 APPLE 566 03/05/20 00:53:23 6:04 10966 6724 nxtgenpho no 3587080982063725 310410214827503 APPLE 567 03/05/20 00:55:51 0:33 1723 0 imp -1 310410214827503 568 03/05/20 00:58:09 0:32 74020 62275 imp -1 310410214827503 569 03/05/20 00:59:27 8:23 6804 4951 nxtgenpho no 3587080982063725 310410214827503 APPLE 570 03/05/20 01:07:12 22:51 10774 6954 imp -1 310410214827503 571 03/05/20 01:07:49 8:29 5113 6021 nxtgenpho no 3587080982063725 310410214827503 APPLE 572 03/05/20 01:07:50 8:29 6021 4825 nxtgenpho no 3587080982063725 310410214827503 APPLE 573 03/05/20 01:16:19 15:28 7603 5208 nxtgenpho no 3587080982063725 310410214827503 APPLE 574 03/05/20 01:31:46 2:06 5784 6614 nxtgenpho no 3587080982063725 310410214827503 APPLE 575 03/05/20 01:31:47 2:06 6614 5496 nxtgenpho no 3587080982063725 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES /PHONES /PHONES !PHONES !PHONES /PHONES /PHONES !PHONES /PHONES /PHONES /PHONES /PHONES /PHONES /PHONES /PHONES /PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 23 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002667 NTniliAL not for general distribution. EF-EAJVII6743 EFTA01251267 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in LTC. 411111i •. 00 %.' ssi ‘inli. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:55:34 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn INC' IMBI 576 03/05/20 01:32:07 1:45 6262 6666 imp 3587080982063725 310410214827503 577 03/05/20 01:32:08 1:45 6666 5998 imp 3587080982063725 310410214827503 578 03/05/20 01:33:54 35:09 33154 14141 nxtgenpho no 3587080982063725 310410214827503 579 03/05/20 01:33:59 49:38 15602 8058 ims -1 310410214827503 580 03/05/20 02:09:03 27:21 708 1490 nxtgenpho no 3587080982063725 310410214827503 581 03/05/20 02:24:41 6:43 8962 7128 ims 3587080982063725 310410214827503 582 03/05/20 02:31:24 60:00 12336 4468 ims 3587080982063725 310410214827503 583 03/05/20 02:36:23 2:33 5583 6387ruftgenpho no 3587080982063725 310410214827503 584 03/05/20 02:36:24 2:33 6387 5295ruftgenpho no 3587080982063725 310410214827503 585 03/05/20 02:38:56 12:47 5709 6616ruftgenpho no 3587080982063725 310410214827503 586 03/05/20 02:38:57 12:47 6616 5421 nxtgenpho no 3587080982063725 310410214827503 587 03/05/20 02:51:44 2:18 0 Oruftgenpho no 3587080982063725 310410214827503 588 03/05/20 02:54:01 3:01 5535 6475ruftgenpho no 3587080982063725 310410214827503 589 03/05/20 02:54:02 3:01 6475 5247ruftgenpho no 3587080982063725 310410214827503 590 03/05/20 02:57:03 2:04 5435 6401 nxtgenpho no 3587080982063725 310410214827503 591 03/05/20 02:57:04 2:04 6401 5147ruftgenpho no 3587080982063725 310410214827503 592 03/05/20 02:59:08 13:23 6613 5266ruftgenpho no 3587080982063725 310410214827503 593 03/05/20 03:12:30 8:47 5499 6678ruftgenpho no 3587080982063725 310410214827503 594 03/05/20 03:12:31 8:47 6678 5211 nxtgenpho no 3587080982063725 310410214827503 595 03/05/20 03:21:18 10:02 8179 5715ruftgenpho no 3587080982063725 310410214827503 596 03/05/20 03:31:20 26:07 8414 6032 nxtgenpho no 3587080982063725 310410214827503 597 03/05/20 03:31:24 2:30 0 0 ims 3587080982063725 310410214827503 598 03/05/20 03:41:55 22:09 10019 6550 ims -1 310410214827503 599 03/05/20 03:57:28 4:01 7810 5394 nxtgenpho no 3587080982063725 310410214827503 MARL MODEL APPLE IPHONZ8 APPLE IPHONZ8 APPLE IPHONZ8 APPLE IPHOME8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 24 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002668 NIT IAL not for general distribution. EF-EA_00116744 EFTA01251268 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn IMBI MAfl 600 03/05/20 04:01:29 16:23 7079 6004 nxtgonpho no 3587080982063725 310410214827503 APPLE 601 03/05/20 04:09:31 1:17 48 0 los 3587080982063725 310410214827503 APPLE 602 03/05/20 04:10:48 43:41 13523 7927 los 3587080982063725 310410214827503 APPLE 603 03/05/20 04:17:53 0:58 6388 5102 nxtgonpho no 3587080982063725 310410214827503 APPLE 604 03/05/20 04:18:50 8:54 5584 6475 nxtgonpho no 3587080982063725 310410214827503 APPLE 605 03/05/20 04:18:51 8:54 6475 5296 nxtgonpho no 3587080982063725 310410214827503 APPLE 606 03/05/20 04:27:44 10:33 5438 6475 nxtgonpho no 3587080982063725 310410214827503 APPLE 607 03/05/20 04:27:45 10:33 6475 6150 nxtgonpho no 3587080982063725 310410214827503 APPLE 608 03/05/20 04:38:18 16:10 6658 5674 nxtgonpho no 3587080982063725 310410214827503 APPLE 609 03/05/20 04:54:28 5:33 6030 5595 nxtgonpho no 3587080982063725 310410214827503 APPLE 610 03/05/20 04:59:22 60:00 16731 9110 ims -1 310410214827503 611 03/05/20 05:00:01 2:05 5221 6075 nxtgonpho no 3587080982063725 310410214827503 APPLE 612 03/05/20 05:00:02 2:06 6075 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE 613 03/05/20 05:02:07 7:01 7430 4955 nxtgonpho no 3587080982063725 310410214827503 APPLE 614 03/05/20 05:09:08 3:15 6866 5015 nxtgonpho no 3587080982063725 310410214827503 APPLE 615 03/05/20 05:12:23 6:13 6080 4953 nxtgonpho no 3587080982063725 310410214827503 APPLE 616 03/05/20 05:18:36 2:04 5281 6083 nxtgonpho no 3587080982063725 310410214827503 APPLE 617 03/05/20 05:18:37 2:04 6083 4993 nxtgonpho no 3587080982063725 310410214827503 APPLE 618 03/05/20 05:20:41 13:47 7603 5112 nxtgonpho no 3587080982063725 310410214827503 APPLE 619 03/05/20 05:34:29 0:29 6231 5060 nxtgonpho no 3587080982063725 310410214827503 APPLE 620 03/05/20 05:34:58 4:52 6806 4955 nxtgonpho no 3587080982063725 310410214827503 APPLE 621 03/05/20 05:39:49 2:06 288 48 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL DRONES DRONES DRONES DRONES DRONES DRONES IDNONE8 DRONES DRONES IDNONE8 IDNONZ8 !DRONES DRONES DRONES !DRONES DRONES DRONES 110MONE8 DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002669 NaTtAti not for general distribution. Page 25 EF-EA_00116745 EFTA01251269 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 41111, AT&T Run Data: Run Tina: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes UP Bytes Apn On IKI IN3I MARL 622 03/05/20 05:39:51 2:05 48 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 623 03/05/20 05:41:56 23:40 6364 5098 nxtgenpho no 3587080982063725 310410214827503 APPLE 624 03/05/20 05:59:22 15:46 0 0 ims -1 310410214827503 625 03/05/20 06:05:35 2:05 5221 6075 nxtgenpho no 3587080982063725 310410214827503 APPLE 626 03/05/20 06:05:36 2:05 6075 4933 nxtgenpho no 3587080982063725 310410214827503 APPLE 627 03/05/20 06:07:41 13:59 7847 5533 nxtgenpho no 3587080982063725 310410214827503 APPLE 628 03/05/20 06:16:28 8:43 0 0 imo -1 310410214827503 629 03/05/20 06:21:40 4:18 6866 5017 nxtgenpho no 3587080982063725 310410214827503 APPLE 630 03/05/20 06:25:58 14:03 7847 5582 nxtgenpho no 3587080982063725 310410214827503 APPLE 631 03/05/20 06:30:52 47:56 23127 9750 imo -1 310410214827503 632 03/05/20 06:40:01 0:54 7546 5108 nxtgenpho no 3587080982063725 310410214827503 APPLE 633 03/05/20 06:40:55 0:44 48 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 634 03/05/20 06:41:38 2:06 288 48nxtgenpho no 3587080982063725 310410214827503 APPLE 635 03/05/20 06:41:40 2:05 48 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 636 03/05/20 06:43:45 12:14 6193 5044 nxtgenpho no 3587080982063725 310410214827503 APPLE 637 03/05/20 06:55:58 2:17 5281 6135 nxtgenpho no 3587080982063725 310410214827503 APPLE 638 03/05/20 06:56:00 2:16 6135 4993 nxtgenpho no 3587080982063725 310410214827503 APPLE 639 03/05/20 06:58:16 22:26 7546 6684 nxtgenpho no 3587080982063725 310410214827503 APPLE 640 03/05/20 07:08:46 1:37 0 0 imo -1 310410214827503 641 03/05/20 07:18:49 60:00 20702 10498 imo -1 310410214827503 642 03/05/20 07:34:11 10:14 8655 5731 nxtgenpho no 3587080982063725 310410214827503 APPLE 643 03/05/20 08:18:49 3:30 0 0 imo -1 310410214827503 644 03/05/20 08:29:56 16:06 8407 6169 imo -1 310410214827503 645 03/05/20 08:49:39 9:48 8187 5998 ims -1 310410214827503 NICOLL IPHOME8 IPHOME8 IPHONZ8 IPHOME8 IPHOME8 IPHONZ8 IPHOME8 IPHONZ8 IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002670 NeTniliAL not for general distribution. Page 26 EFTAJVII6746 EFTA01251270 MOBILITY The information contained heraCtopeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Date: Run Time: Data Usage Tor: Itea Conn. Date 06/17/2020 1S:45:34 Conn. Time (UTC) originating Hunter Tf Bytes Up Bytom Apn Dn INT I IMSI MARL 646 03/05/20 09:06:19 60:00 16685 9202 imp -1 310410214827503 647 03/05/20 10:06:19 16:47 0 0 imp -1 310410214827503 648 03/05/20 10:09:57 19:22 6191 5041 nxtgonpho no 3587080982063725 310410214827503 APPLE 649 03/05/20 10:28:37 60:00 15269 8862 imp -1 310410214827503 650 03/05/20 10:29:19 14:38 5326 6248 nxtgonpho no 3587080982063725 310410214827503 APPLE 651 03/05/20 10:29:20 14:38 6248 5038ruftgonpho no 3587080982063725 310410214827503 APPLE 652 03/05/20 10:43:58 55:27 7625 8243ruftgonpho no 3587080982063725 310410214827503 APPLE 653 03/05/20 11:28:37 18:22 0 0 imp -1 310410214827503 654 03/05/20 11:39:26 60:00 12056 9665 nxtgonpho no 3587080982063725 310410214827503 APPLE 655 03/05/20 11:48:45 4:26 0 0 imp 3587080982063725 310410214827503 APPLE 656 03/05/20 11:53:11 0:00 0 0 imp 3587080982063725 310410214827503 APPLE 657 03/05/20 11:53:11 0:00 0 0 imp 3587080982063725 310410214827503 APPLE 658 03/05/20 12:00:53 60:00 19677 10140 imp -1 310410214827503 659 03/05/20 12:39:26 53:45 36378 21287 nxtgonpho no 3587080982063725 310410214827503 APPLE 660 03/05/20 13:00:53 54:06 19612 10568 imp -1 310410214827503 661 03/05/20 13:22:35 1:24 123162 257851 imp -1 310410214827503 662 03/05/20 13:33:11 0:21 5381 6256 nxtgonpho no 3587080982063725 310410214827503 APPLE 663 03/05/20 13:33:12 0:21 6256 5093ruftgonpho no 3587080982063725 310410214827503 APPLE 664 03/05/20 13:33:33 32:14 9598 8370roftgonpho no 3587080982063725 310410214827503 APPLE 665 03/05/20 13:57:56 7:15 17920 16272 imp 3587080982063725 310410214827503 APPLE 666 03/05/20 14:04:43 0:17 0 24131 imp 3587080982063725 310410214827503 APPLE 667 03/05/20 14:05:11 60:00 15448 4980 imp 3587080982063725 310410214827503 APPLE 668 03/05/20 14:05:46 2:07 5554 9296ruftgonpho no 3587080982063725 310410214827503 APPLE 669 03/05/20 14:05:48 2:06 9296 5266ruftgonpho no 3587080982063725 310410214827503 APPLE 670 03/05/20 14:07:54 35:19 26806 16478ruagonpho no 3587080982063725 310410214827503 APPLE 671 03/05/20 14:43:12 2:07 5222 6075ruagonpho no 3587080982063725 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPMONE8 IPH01428 IPH01428 !PHONES !PHONES !PHONES !PHONES IPMONE8 IPMONE8 IPMONE8 !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002671 WInfikE not for general distribution. EF-EA_00116747 EFTA01251271 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 16:53:33 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn INC' DWI MARL 672 03/05/20 14:43:13 2:07 6075 4934 natmanpho no 3587080982063725 310410214827503 APPLE 673 03/05/20 14:45:20 9:32 6659 6136 natmanpho no 3587080982063725 310410214827503 APPLE 674 03/05/20 14:54:52 2:02 12120 10092 natmanpho no 3587080982063725 310410214827503 APPLE 675 03/05/20 14:56:54 2:09 5221 6023 natmanpho no 3587080982063725 310410214827503 APPLE 676 03/05/20 14:56:55 2:09 6023 4933 natmanpho no 3587080982063725 310410214827503 APPLE 677 03/05/20 14:59:05 13:21 7223 5581 natmanpho no 3587080982063725 310410214827503 APPLE 678 03/05/20 15:05:11 56:38 38340 20760 ims 3587080982063725 310410214827503 APPLE 679 03/05/20 15:12:25 2:07 5116 6023 natmanpho no 3587080982063725 310410214827503 APPLE 680 03/05/20 15:12:27 2:06 6023 4828 natmanpho no 3587080982063725 310410214827503 APPLE 681 03/05/20 15:14:33 15:06 33334 21642 natmanpho no 3587080982063725 310410214827503 APPLE 682 03/05/20 15:29:38 2:07 5117 6023 natmanpho no 3587080982063725 310410214827503 APPLE 683 03/05/20 15:29:39 2:07 6023 4829 natmanpho no 3587080982063725 310410214827503 APPLE 684 03/05/20 15:31:46 13:19 7667 5217 natmanpho no 3587080982063725 310410214827503 APPLE 685 03/05/20 15:45:05 8:11 5220 6023 natmanpho no 3587080982063725 310410214827503 APPLE 686 03/05/20 15:45:06 8:11 6023 4932 natmanpho no 3587080982063725 310410214827503 APPLE 687 03/05/20 15:49:25 0:22 0 1254 ims 3587080982063725 310410214827503 APPLE 688 03/05/20 15:49:58 0:07 0 1548 ims 3587080982063725 310410214827503 APPLE 689 03/05/20 15:53:17 15:34 12631 10152 natmanpho no 3587080982063725 310410214827503 APPLE 690 03/05/20 16:02:35 60:00 11799 7322 ims -1 310410214827503 691 03/05/20 16:08:50 2:18 5221 6023 natmanpho no 3587080982063725 310410214827503 APPLE 692 03/05/20 16:08:51 2:18 6023 4933 natmanpho no 3587080982063725 310410214827503 APPLE 693 03/05/20 16:11:08 1:25 5221 6075 natmanpho no 3587080982063725 310410214827503 APPLE MOLL IPHONEB IPHONEB !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONEB !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 28 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002672 NeTniliAL not for general distribution. EF-EA_00116748 EFTA01251272 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. tris"" a AT&T Run Date: Run Time: Data usage For: Item cone. Date 06/17/2020 18:55:35 Conn. Time (OTC) originating Number ET Bytes Op Bytes Apn Dn flei INS I teal 694 03/05/20 16:11:09 1:25 6075 4933 nxtgenpho no 3587080982063725 310410214827503 APPLE 695 03/05/20 16:12:34 0:49 12388 5896rumgonpho no 3587080982063725 310410214827503 APPLE 696 03/05/20 16:13:22 14:41 5839 6939rumgonpho no 3587080982063725 310410214827503 APPLE 697 03/05/20 16:13:23 14:41 6939 5551nxtgonpho no 3587080982063725 310410214827503 APPLE 698 03/05/20 16:28:04 1:36 0 0rumgonpho no 3587080982063725 310410214827503 APPLE 699 03/05/20 16:29:39 1:14 5218 6073rumgonpho no 3587080982063725 310410214827503 APPLE 700 03/05/20 16:29:40 1:14 6073 4930mmgonpho no 3587080982063725 310410214827503 APPLE 701 03/05/20 16:30:54 10:00 9273 7536mmgonpho no 3587080982063725 310410214827503 APPLE 702 03/05/20 16:40:53 8:56 12853 8449mmgonpho no 3587080982063725 310410214827503 APPLE 703 03/05/20 16:40:54 8:56 8449 12565mmgonpho no 3587080982063725 310410214827503 APPLE 704 03/05/20 16:49:50 0:05 0 0mmgonpho no 3587080982063725 310410214827503 APPLE 705 03/05/20 16:50:18 23:43 11746 8806mmgonpho no 3587080982063725 310410214827503 APPLE 706 03/05/20 17:02:35 60:00 30884 17448 ims -1 310410214827503 707 03/05/20 17:14:00 0:51 5118 6023 rumgonpho no 3587080982063725 310410214827503 APPLE 708 03/05/20 17:14:02 0:50 6023 4830rumgonpho no 3587080982063725 310410214827503 APPLE 709 03/05/20 17:14:10 0:37 24028 73435 imam -1 310410214827503 710 03/05/20 17:14:52 9:12 39449 28212rumgonpho no 3587080982063725 310410214827503 APPLE 711 03/05/20 17:15:25 0:08 3465 13132 imam -1 310410214827503 712 03/05/20 17:24:04 6:01 14748 12013rumgonpho no 3587080982063725 310410214827503 APPLE 713 03/05/20 17:30:04 2:10 8275 9000rumgonpho no 3587080982063725 310410214827503 APPLE 714 03/05/20 17:30:06 2:09 9000 7891rumgonpho no 3587080982063725 310410214827503 APPLE 715 03/05/20 17:32:15 48:36 34297 24332rumgonpho no 3587080982063725 310410214827503 APPLE NICOLL IPH0NZ8 IPHONEB !PHONES !PHONES IPH0ME8 IPH0ME8 IPH0ME8 IPH0ME8 IPH0ME8 !PHONES !PHONES IPH0ME8 IPH0ME8 IPH0ME8 IPH0ME8 IPH0ME8 !PHONES !PHONES IPH0ME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002673 NaTtAti not for general distribution. EFTA_OOI 16749 EFTA01251273 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern (ITC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 10:56:16 Item Conn. Conn. Originating ET Bytes Byte. Apn IN= IMSI MARX MOD= Date Time Numbor Up On (UTC) 716 03/05/20 18:02:35 52:23 43408 717 03/05/20 18:20:51 1:46 5318 718 03/05/20 18:20:52 1:46 6071 719 03/05/20 18:22:38 27:23 63753 720 03/05/20 18:27:15 0:24 12736 721 03/05/20 18:28:56 0:24 15889 722 03/05/20 18:42:22 0:24 16574 723 03/05/20 18:50:00 2:09 5113 724 03/05/20 18:50:01 2:09 6073 725 03/05/20 18:52:10 1:34 6020 726 03/05/20 18:53:43 15:50 377833 727 03/05/20 18:53:44 15:50 91974 728 03/05/20 18:54:57 10:21 7160 729 03/05/20 18:54:58 10:21 6746 730 03/05/20 19:02:11 10:31 11538 731 03/05/20 19:05:18 4:15 6316 732 03/05/20 19:05:19 4:15 6646 733 03/05/20 19:09:34 16:58 56922 734 03/05/20 19:09:37 16:55 8904 735 03/05/20 19:26:32 0:41 2654 736 03/05/20 19:26:32 0:41 0 737 03/05/20 19:27:13 0:42 3250 738 03/05/20 19:27:13 0:42 0 739 03/05/20 19:27:55 0:30 0 740 03/05/20 19:27:55 0:30 0 741 03/05/20 19:28:25 21:30 1429910 742 03/05/20 19:28:25 60:00 7788 28432 imp -1 310410214827503 6071 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 4934 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 41374 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 49564 ins -1 310410214827503 46520 ins -1 310410214827503 44337 imp -1 310410214827503 6073 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 4825 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 4941 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 92026 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 379105 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 6814 imp 3587080982063725 310410214827503 APPLE !PHONES 7004 imp 3587080982063725 310410214827503 APPLE !PHONES 6746 imp -1 310410214827503 6646 ins 3587080982063725 310410214827503 APPLE !PHONES 5964 imp 3587080982063725 310410214827503 APPLE !PHONES 89719 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 7985 imp 3587080982063725 310410214827503 APPLE !PHONES 4560 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 0 imp 3587080982063725 310410214827503 APPLE !PHONES 7682 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 0 imp 3587080982063725 310410214827503 APPLE !PHONES Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 0 imp 3587080982063725 310410214827503 APPLE !PROMS 18614505 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 4128 imp 3587080982063725 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002674 NeTniliAL not for general distribution. EFTA_00I 16750 EFTA01251274 MOBILITY The information contained horeOiNyFtit 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in .....,0• `•—•°"" e AT&T Run Data: Run Time: Data Osage For: 06/17/2020 Itea Conn. Conn. Data Time (OTC) Originating Number ET Bytes Byte. Apn Up Dn INSI taltE NICOLL 743 03/05/20 19:49:55 32:08 1214122 3567455 nxtgonpho no 3587080982063725 310410214827503 744 03/05/20 20:22:03 5:52 351921 19649061 nxtgonpho no 3587080982063725 310410214827503 745 03/05/20 20:27:55 35:39 1936311 18204765 nxtgonpho no 3587080982063725 310410214827503 746 03/05/20 20:28:25 60:00 23956 16172 imp 3587080982063725 310410214827503 747 03/05/20 20:38:36 9:14 1550472 1193028 imp 3587080982063725 310410214827503 748 03/05/20 20:51:31 0:04 2449 10497 imp 3587080982063725 310410214827503 749 03/05/20 21:03:34 20:51 824545 926983 nxtgonpho no 3587080982063725 310410214827503 750 03/05/20 21:24:25 9:16 676408 792894 nxtgonpho no 3587080982063725 310410214827503 751 03/05/20 21:28:25 5:16 0 0 imp 3587080982063725 310410214827503 752 03/05/20 21:33:41 0:50 0 Oruftgonpho no 3587080982063725 310410214827503 753 03/05/20 21:33:41 0:50 0 0 imp 3587080982063725 310410214827503 754 03/05/20 21:34:31 1:02 0 Oruftgonpho no 3587080982063725 310410214827503 755 03/05/20 21:34:31 1:02 0 0 imp 3587080982063725 310410214827503 756 03/05/20 21:35:33 1:43 0 Oruftgonpho no 3587080982063725 310410214827503 757 03/05/20 21:35:33 1:43 0 0 imp 3587080982063725 310410214827503 758 03/05/20 21:37:16 8:54 22653 43544 nxtgonpho no 3587080982063725 310410214827503 759 03/05/20 21:37:16 8:54 0 0 imp 3587080982063725 310410214827503 760 03/05/20 21:46:09 3:53 21998 14343 nxtgonpho no 3587080982063725 310410214827503 761 03/05/20 21:46:10 3:52 6246 6668 imp 3587080982063725 310410214827503 762 03/05/20 21:46:10 3:53 14343 21710 nxtgonpho no 3587080982063725 310410214827503 763 03/05/20 21:46:11 3:52 6668 5982 imp 3587080982063725 310410214827503 764 03/05/20 21:50:03 1:12 13504 14911 nxtgonpho no 3587080982063725 310410214827503 765 03/05/20 21:50:05 1:10 6666 5964 imp 3587080982063725 310410214827503 766 03/05/20 21:51:14 8:20 913741 108412 nxtgonpho no 3587080982063725 310410214827503 767 03/05/20 21:51:16 8:18 6226 6774 imp 3587080982063725 310410214827503 768 03/05/20 21:51:16 8:19 108412 927006 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONZ8 APPLE IPM0NE8 APPLE !PROMS APPLE !PROMS APPLE IPM0NE8 APPLE IPM0NE8 APPLE IPM0NE8 APPLE !PROMS APPLE IPM0NE8 APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE IPM0NE8 APPLE IPM0NE8 APPLE !PROMS APPLE IPM0NE8 APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 31 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002675 WAAL not for general distribution. EF-EA_00116751 EFTA01251275 The information contained her is 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T \-77S"61# ‘6"11. Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Date Conn. Originating 2T Time Humber (UTC) Bytes UP Bytom Apn Dn IKE I ISIS I MAfl NICOLL 769 03/05/20 21:51:17 8:18 6666 5962 ims 3587080982063725 310410214827503 APPLE !PROMS 770 03/05/20 21:59:34 1:24 15373 13467 nxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 771 03/05/20 21:59:35 1:23 6316 6778 ims 3587080982063725 310410214827503 APPLE DRONES 772 03/05/20 21:59:35 1:24 13467 20245 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 773 03/05/20 21:59:37 1:22 6670 5964 ims 3587080982063725 310410214827503 APPLE DRONES 774 03/05/20 22:00:58 5:42 5220 6023 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 775 03/05/20 22:00:59 5:42 6023 4932 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 776 03/05/20 22:01:03 10:56 8523 6446 vas -1 310410214827503 777 03/05/20 22:04:31 2:09 7114 6846 vas 3587080982063725 310410214827503 APPLE DRONES 778 03/05/20 22:04:32 2:09 6738 6850 vas 3587080982063725 310410214827503 APPLE DRONES 779 03/05/20 22:06:41 0:06 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 780 03/05/20 22:08:13 16:17 20308 20681 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 781 03/05/20 22:08:14 14:56 6262 6782 ims 3587080982063725 310410214827503 APPLE DRONES 782 03/05/20 22:08:14 16:18 20681 39271 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 783 03/05/20 22:08:15 14:56 6674 5998 ims 3587080982063725 310410214827503 APPLE DRONES 784 03/05/20 22:23:11 0:00 0 0 ims 3587080982063725 310410214827503 APPLE DRONES 785 03/05/20 22:23:12 1:18 6263 6674 ims 3587080982063725 310410214827503 APPLE DRONES 786 03/05/20 22:23:13 1:19 6674 5999 ims 3587080982063725 310410214827503 APPLE DRONES 787 03/05/20 22:24:32 5:58 9126 5538 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 788 03/05/20 22:24:34 4:29 8898 8820 ims 3587080982063725 310410214827503 APPLE DRONES 789 03/05/20 22:29:07 1:23 7958 6082 ims 3587080982063725 310410214827503 APPLE DRONES 790 03/05/20 22:30:29 3:34 7691 8133 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 791 03/05/20 22:30:31 3:32 7136 6852 ims 3587080982063725 310410214827503 APPLE DRONES 792 03/05/20 22:30:31 3:33 8133 9592 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 793 03/05/20 22:30:32 3:32 6744 6872 ims 3587080982063725 310410214827503 APPLE DRONES 794 03/05/20 22:33:37 0:33 144 144 ims 3587080982063725 310410214827503 APPLE DRONES 795 03/05/20 22:34:04 15:16 19427 29128 nxtgonpho no 3587080982063725 310410214827503 APPLE 'PHONES 796 03/05/20 22:34:10 1:36 8070 6138 ims 3587080982063725 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 32 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002676 NTifikE not for general distribution. EF-EAJVII6752 EFTA01251276 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 411111, tr . I 1 200 " I. AT&T Run Date: Run Timo: Data Osage For: Item Cows. Date 06/17/2020 1A:55:15 Conn. Time (OTC) Originating Number 22 Bytes Up Bytoa Apn Dn INEI IMBI 797 03/05/20 22:34:10 1:36 8006 6138 imp 3587080982063725 310410214827503 798 03/05/20 22:35:46 6:23 3408 1340 imp 3587080982063725 310410214827503 799 03/05/20 22:42:09 7:11 3344 1464 imp 3587080982063725 310410214827503 800 03/05/20 22:42:09 7:11 3280 1464 imp 3587080982063725 310410214827503 801 03/05/20 22:49:20 17:10 7929 6401 nxtgonpho no 3587080982063725 310410214827503 802 03/05/20 22:49:21 17:09 6458 7404 imp 3587080982063725 310410214827503 803 03/05/20 22:49:21 17:10 6401 8586ruftgonpho no 3587080982063725 310410214827503 804 03/05/20 22:49:22 17:09 7404 6214 imp 3587080982063725 310410214827503 805 03/05/20 22:54:28 7:36 16014 11770 imp -1 310410214827503 806 03/05/20 23:06:31 42:29 1120699 1146855ruftgonpho no 3587080982063725 310410214827503 807 03/05/20 23:06:34 42:26 10802 10151 ins 3587080982063725 310410214827503 808 03/05/20 23:48:59 12:42 13580 47470ruftgonpho no 3587080982063725 310410214827503 809 03/05/20 23:49:00 12:42 46210 16744ruftgonpho no 3587080982063725 310410214827503 810 03/05/20 23:49:01 12:40 6248 31006 imp 3587080982063725 310410214827503 811 03/05/20 23:49:02 12:40 6670 6092 imp 3587080982063725 310410214827503 812 03/05/20 23:56:25 60:00 18177 10135 imp -1 310410214827503 813 03/06/20 00:01:42 39:39 13061 11748ruftgonpho no 3587080982063725 310410214827503 814 03/06/20 00:41:22 60:00 14747 12058ruftgonpho no 3587080982063725 310410214827503 815 03/06/20 00:56:25 48:52 7032 2772 imp -1 310410214827503 816 03/06/20 01:41:22 60:00 11245 7612 nxtgonpho no 3587080982063725 310410214827503 817 03/06/20 01:47:30 20:33 10047 6550 ims 3587080982063725 310410214827503 818 03/06/20 02:08:03 0:01 0 0 ims 3587080982063725 310410214827503 819 03/06/20 02:08:03 0:01 0 0 ims 3587080982063725 310410214827503 820 03/06/20 02:08:08 4:01 8573 6344 imp -1 310410214827503 821 03/06/20 02:14:21 21:21 8307 6048 imp -1 310410214827503 822 03/06/20 02:38:29 41:02 16240 8162 imp -1 310410214827503 823 03/06/20 02:41:22 60:00 1322 1155 nxtgonpho no 3587080982063725 310410214827503 824 03/06/20 03:25:05 7:24 0 0 imp -1 310410214827503 825 03/06/20 03:37:25 60:00 16650 9085 imp -1 310410214827503 teat MOLL APPLE !PHONES APPLE !PHONES APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE !PRONGS APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 33 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002677 PsiTn iliAL not for general distribution. EF-EA_00116753 EFTA01251277 The information contained herself:04R 2996479 06/17/2020 MOBILITY `-'s AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t—ase,0 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ''..mmes0/ arc. Run Date: Run Time: Data Usage For: Itea Conn. Date 06/17/2020 18:55:35 Conn. Time (OTC) Originating Number ET Bytes Up Bytom Apn On EMI IMBI MAKE MODEL 826 03/06/20 03:41:22 60:00 49981 10993 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONZ8 827 03/06/20 04:37:25 22:28 4964 1588 ims -1 310410214827503 828 03/06/20 04:41:22 60:00 1433 1513 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 829 03/06/20 05:06:31 30:16 8371 6046 ims -1 310410214827503 830 03/06/20 05:41:22 60:00 1270 1050 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 831 03/06/20 05:45:39 34:57 8373 6162 ims -1 310410214827503 832 03/06/20 06:24:30 5:56 0 0 ims -1 310410214827503 833 03/06/20 06:37:01 60:00 16695 9034 ims -1 310410214827503 834 03/06/20 06:41:22 60:00 1211 735 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 835 03/06/20 07:37:01 13:53 0 0 ims -1 310410214827503 836 03/06/20 07:41:22 60:00 1270 1050 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 837 03/06/20 07:52:58 11:23 8199 5962 ims -1 310410214827503 838 03/06/20 08:07:51 60:00 11735 7554 ims -1 310410214827503 839 03/06/20 08:41:22 60:00 865 525 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 840 03/06/20 09:07:51 13:42 3424 1340 ims -1 310410214827503 841 03/06/20 09:25:04 26:28 8311 6214 ims -1 310410214827503 842 03/06/20 09:41:22 60:00 1038 630 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 843 03/06/20 09:58:33 60:00 11769 7519 ims -1 310410214827503 844 03/06/20 10:41:22 60:00 986 589 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 845 03/06/20 10:58:33 13:38 3532 1324 ims -1 310410214827503 846 03/06/20 11:14:49 60:00 11623 7556 ims -1 310410214827503 847 03/06/20 11:41:22 5:25 510 3082 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 848 03/06/20 11:46:46 1:46 5440 6475 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 849 03/06/20 11:46:47 1:46 6475 5152 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 850 03/06/20 11:48:33 14:26 7666 5214 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 851 03/06/20 12:02:58 12:46 28108 29261 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 34 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002678 NeTniliAL not for general distribution. EFTA_00I16754 EFTA01251278 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111, trad '"s s AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:55:35 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn Tier ISIS I MAKE 852 03/06/20 12:02:59 12:46 29261 27532 nxtgonpho no 3587080982063725 310410214827503 APPLE 853 03/06/20 12:14:49 17:54 5072 1572 ims -1 310410214827503 854 03/06/20 12:15:45 18:55 8345 5919 nxtgonpho no 3587080982063725 310410214827503 APPLE 855 03/06/20 12:34:17 60:00 15887 8782 ims -1 310410214827503 856 03/06/20 12:34:40 2:06 5931 10717 nxtgonpho no 3587080982063725 310410214827503 APPLE 857 03/06/20 12:34:41 2:06 10717 5643 nxtgonpho no 3587080982063725 310410214827503 APPLE 858 03/06/20 12:36:47 60:00 8424 7148 nxtgonpho no 3587080982063725 310410214827503 APPLE 859 03/06/20 13:34:17 33:45 3424 1324 ims -1 310410214827503 860 03/06/20 13:36:47 60:00 2159 5574 nxtgonpho no 3587080982063725 310410214827503 APPLE 861 03/06/20 14:11:36 33:17 11410 7501 ims 3587080982063725 310410214827503 APPLE 862 03/06/20 14:36:47 31:10 11189 6538 nxtgonpho no 3587080982063725 310410214827503 APPLE 863 03/06/20 14:44:53 28:56 20364 11140 ims 3587080982063725 310410214827503 APPLE 864 03/06/20 15:07:56 1:30 5668 7321 nxtgonpho no 3587080982063725 310410214827503 APPLE 865 03/06/20 15:07:57 1:30 7321 5380 nxtgonpho no 3587080982063725 310410214827503 APPLE 866 03/06/20 15:08:13 1:12 183147 212153 ims 3587080982063725 310410214827503 APPLE 867 03/06/20 15:09:27 4:49 7244 5221 nxtgonpho no 3587080982063725 310410214827503 APPLE 868 03/06/20 15:14:15 8:18 5583 6403 nxtgonpho no 3587080982063725 310410214827503 APPIB 869 03/06/20 15:14:16 8:18 6403 5295 nxtgonpho no 3587080982063725 310410214827503 APPLE 870 03/06/20 15:15:16 4:51 8435 6304 ins -1 310410214827503 871 03/06/20 15:22:34 3:06 7244 5269 nxtgonpho no 3587080982063725 310410214827503 APPLE 872 03/06/20 15:22:49 10:49 8203 5938 ims -1 310410214827503 873 03/06/20 15:25:40 4:52 5644 6401 nxtgonpho no 3587080982063725 310410214827503 APPLE 874 03/06/20 15:25:41 4:52 6401 5356 nxtgonpho no 3587080982063725 310410214827503 APPLE 875 03/06/20 15:30:33 28:38 19589 13840 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002679 PsiTa thE not for general distribution. Page 35 EF-EA_00116755 EFTA01251279 MOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 411., .....,0 ••-is`a. AT&T Run Data: Run Tina: Data Osage For: Item Conn. Data 06/17/2020 SIM Conn. Time (OTC) Originating Number Up ET Bytes Bytom Apn Dn IND I INSI 876 03/06/20 15:40:47 4:29 7400 6103 imo 3587080982063725 310410214827503 877 03/06/20 15:45:16 12:01 5072 1572 imo 3587080982063725 310410214827503 878 03/06/20 15:58:22 0:24 8256 7072 imo 3587080982063725 310410214827503 879 03/06/20 15:58:46 60:00 10688 4144 imo 3587080982063725 310410214827503 880 03/06/20 15:59:10 2:07 5236 6256 nxtgenpho no 3587080982063725 310410214827503 881 03/06/20 15:59:11 2:07 6256 4948 nxtgenpho no 3587080982063725 310410214827503 882 03/06/20 16:01:18 44:18 16273 12620 nxtgenpho no 3587080982063725 310410214827503 883 03/06/20 16:45:35 2:10 10586 7639 nxtgenpho no 3587080982063725 310410214827503 884 03/06/20 16:45:36 2:10 7639 10298 nxtgenpho no 3587080982063725 310410214827503 885 03/06/20 16:47:46 60:00 12772 15399 nxtgenpho no 3587080982063725 310410214827503 886 03/06/20 16:58:46 2:08 0 0 ims 3587080982063725 310410214827503 887 03/06/20 17:47:46 24:54 369 1125 nxtgenpho no 3587080982063725 310410214827503 888 03/06/20 18:01:13 3:34 11022 6113 ims -1 310410214827503 889 03/06/20 18:12:39 30:26 36081 41844 nxtgenpho no 3587080982063725 310410214827503 890 03/06/20 18:12:40 30:26 41844 39403 nxtgenpho no 3587080982063725 310410214827503 891 03/06/20 18:12:47 11:23 0 0 ims -1 310410214827503 892 03/06/20 18:23:51 19:14 6426 8082 imo 3587080982063725 310410214827503 893 03/06/20 18:23:52 19:14 8082 6162 imo 3587080982063725 310410214827503 894 03/06/20 18:24:10 60:00 16795 9035 imo -1 310410214827503 895 03/06/20 18:43:06 6:32 9119 5813 nxtgenpho no 3587080982063725 310410214827503 896 03/06/20 18:49:37 4:09 7995 10045 nxtgenpho no 3587080982063725 310410214827503 897 03/06/20 18:49:38 4:10 10045 7611 nxtgenpho no 3587080982063725 310410214827503 898 03/06/20 18:53:48 3:51 15430 12196 nxtgenpho no 3587080982063725 310410214827503 899 03/06/20 18:57:38 8:24 7732 18371 nxtgenpho no 3587080982063725 310410214827503 900 03/06/20 18:57:40 8:23 18371 7444 nxtgenpho no 3587080982063725 310410214827503 MARL NICOLL APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002680 PsiTifikE not for general distribution. Page 36 EF-EA_00116756 EFTA01251280 MOBILITY The information contained heraleoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried Ler records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in 4111. ters„,„01" AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 10:55:35 Item Conn. Conn. Date Time (UTC) Originating ET Bytes Bytes Apn INEI Number Up Dn INS I NAfl NICOLL 901 03/06/20 19:06:03 7:13 8502 6668 nxtgonpho no 3587080982063725 310410214827503 902 03/06/20 19:13:16 1:04 6478 5616 nxtgonpho no 3587080982063725 310410214827503 903 03/06/20 19:14:19 2:09 5117 6075 nxtgonpho no 3587080982063725 310410214827503 904 03/06/20 19:14:20 2:09 6075 4829 nxtgonpho no 3587080982063725 310410214827503 905 03/06/20 19:16:29 35:51 7480 6950 nxtgonpho no 3587080982063725 310410214827503 906 03/06/20 19:24:10 21:10 3424 1340 ims -1 310410214827503 907 03/06/20 19:48:01 31:02 23529 15801 ims 3587080982063725 310410214827503 908 03/06/20 19:52:19 1:11 7184 7637 nxtgonpho no 3587080982063725 310410214827503 909 03/06/20 19:52:20 1:11 7637 6896 nxtgonpho no 3587080982063725 310410214827503 910 03/06/20 19:53:31 4:27 9262 7982 nxtgonpho no 3587080982063725 310410214827503 911 03/06/20 19:57:58 8:17 10717 21377 nxtgonpho no 3587080982063725 310410214827503 912 03/06/20 19:57:59 8:17 21377 10429 nxtgonpho no 3587080982063725 310410214827503 913 03/06/20 20:02:36 0:25 13104 53930 ims -1 310410214827503 914 03/06/20 20:06:16 16:56 14116 29041 nxtgonpho no 3587080982063725 310410214827503 915 03/06/20 20:19:03 0:15 6520 1432 ims 3587080982063725 310410214827503 916 03/06/20 20:19:03 0:15 2920 1432 ims 3587080982063725 310410214827503 917 03/06/20 20:19:18 12:10 3424 1324 ims 3587080982063725 310410214827503 918 03/06/20 20:23:11 24:11 394055 54947 nxtgonpho no 3587080982063725 310410214827503 919 03/06/20 20:23:12 24:11 54947 400921 nxtgonpho no 3587080982063725 310410214827503 920 03/06/20 20:43:57 3:25 6245 6668 ims 3587080982063725 310410214827503 921 03/06/20 20:43:58 3:25 6668 5981 ims 3587080982063725 310410214827503 922 03/06/20 20:47:23 1:05 0 Onatgonpho no 3587080982063725 310410214827503 923 03/06/20 20:47:28 1:00 11916 9299 ims 3587080982063725 310410214827503 924 03/06/20 20:48:27 5:26 192 Onmtgonpho no 3587080982063725 310410214827503 APPLE 110)(0=8 APPLE 110)(0=8 APPLE !PHONES APPLE !PROMS APPLE !PHONES APPLE 'PHONES APPLE !PROMS APPLE !PROMS APPLE 'PHONES APPLE !PROMS APPLE !PROMS APPLE 'PHONES APPLE DRONES APPLE DRONES APPLE !PROMS APPLE !PROMS APPLE DRONES APPLE DRONES APPLE 'PHONES APPLE !PROMS APPLE !PROMS APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 37 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002681 NTAtikE not for general distribution. EF-EA_00116757 EFTA01251281 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Osage Tor: Ilea Conn. Date 06/17/2020 MN= Conn. Originating Time Number moo) ET Byte. UP Byte. Apn on IKE' IMSI MARL MODEL 925 03/06/20 20:48:28 5:25 6572 6657 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 926 03/06/20 20:48:28 5:26 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 927 03/06/20 20:48:29 5:25 6657 6284 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 928 03/06/20 20:48:35 60:00 95655 55560 ims -1 310410214827503 929 03/06/20 20:51:21 1:02 137665 211390 ims -1 310410214827503 930 03/06/20 20:53:54 10:42 6979 5113 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 931 03/06/20 21:03:26 0:13 0 22616 ims -1 310410214827503 932 03/06/20 21:03:56 0:05 0 14202 ims -1 310410214827503 933 03/06/20 21:04:30 0:19 18001 51945 ims -1 310410214827503 934 03/06/20 21:04:35 3:32 5374 9015 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 935 03/06/20 21:04:36 3:32 9015 5086 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 936 03/06/20 21:08:08 1:34 7428 4951 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 937 03/06/20 21:09:30 0:53 98149 136719 ims -1 310410214827503 938 03/06/20 21:09:41 2:20 5116 6023 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 939 03/06/20 21:09:42 2:20 6023 4828 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 940 03/06/20 21:12:01 2:32 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 941 03/06/20 21:12:02 2:31 5222 6075 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 942 03/06/20 21:12:03 2:32 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 943 03/06/20 21:12:03 2:32 6075 4934 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 944 03/06/20 21:14:34 1:26 6212 6824 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 945 03/06/20 21:14:35 1:26 6824 5924 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 946 03/06/20 21:16:01 1:08 6400 5239 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 947 03/06/20 21:17:09 20:41 16484 135032 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002682 not for general distribution. EF-EA_00116758 EFTA01251282 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. 411111, AT&T Run Data: Run Tama: Data Usage For: Item Conn. Data 06/17/2020 1S:55:15 Conn. Tina (UTC) Originating Number ET Bytes UP Bytom Apn Dn INEI IMBI MAKE MODEL 948 03/06/20 21:17:10 20:41 135032 16196ruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 949 03/06/20 21:32:33 1:15 142654 181807 ims -1 310410214827503 950 03/06/20 21:37:51 13:04 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 951 03/06/20 21:48:35 20:48 0 108 ims -1 310410214827503 952 03/06/20 21:50:54 7:15 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 953 03/06/20 21:50:55 7:15 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 954 03/06/20 21:58:10 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 955 03/06/20 22:10:04 0:00 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 956 03/06/20 22:13:03 60:00 15339 9716 ims -1 310410214827503 957 03/06/20 22:58:10 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 958 03/06/20 23:13:03 23:49 3532 1448 ims -1 310410214827503 959 03/06/20 23:37:22 0:00 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 960 03/06/20 23:37:36 12:30 10990 7899 ims -1 310410214827503 961 03/06/20 23:56:38 3:34 12230 6730 ims -1 310410214827503 962 03/06/20 23:58:10 8:40 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 963 03/07/20 00:03:08 0:16 8078 6944 ims 3587080982063725 310410214827503 APPLE !PHONES 964 03/07/20 00:03:24 60:00 12120 4328 ims 3587080982063725 310410214827503 APPLE !PHONES 965 03/07/20 00:06:49 8:17 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 966 03/07/20 00:06:50 8:17 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 967 03/07/20 00:15:07 16:29 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 968 03/07/20 00:31:35 20:57 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 969 03/07/20 00:31:36 20:57 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 970 03/07/20 00:52:34 3:34 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 971 03/07/20 00:56:07 2:06 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 972 03/07/20 00:56:08 2:06 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 39 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002683 not for general distribution. EF-EA_00116759 EFTA01251283 MOBILITY The information contained hereleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ...,,,• ••-s`' s AT&T Run Date: Run Time: Data Osage For: Item cone. Date 06/17/2020 18:55:35 Conn. Time (UTC) Originating Number ET Byte. Up Byte. Apn on fun INSI MAKE 973 03/07/20 00:58:14 39:51 0 0 rumgenpho no 3587080982063725 310410214827503 APPLE 974 03/07/20 01:03:24 0:24 0 0 ims 3587080982063725 310410214827503 APPLE 975 03/07/20 01:19:41 4:34 8150 6944 ims 3587080982063725 310410214827503 APPLE 976 03/07/20 01:24:15 8:15 12056 6904 ims 3587080982063725 310410214827503 APPLE 977 03/07/20 01:33:01 0:45 17026 8556 ims -1 310410214827503 978 03/07/20 01:34:01 16:43 9644 6054 ims -1 310410214827503 979 03/07/20 01:38:05 3:37 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 980 03/07/20 01:41:41 3:20 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 981 03/07/20 01:41:42 3:20 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 982 03/07/20 01:45:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 983 03/07/20 01:56:42 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 984 03/07/20 01:56:50 34:11 11647 9620 ims -1 310410214827503 985 03/07/20 02:34:49 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 986 03/07/20 02:35:17 2:31 9694 6126 ims -1 310410214827503 987 03/07/20 02:42:07 60:00 18887 9464 ims -1 310410214827503 988 03/07/20 02:45:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 989 03/07/20 03:42:07 1:22 0 0 ims -1 310410214827503 990 03/07/20 03:45:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 991 03/07/20 03:47:37 3:47 9867 6478 ims -1 310410214827503 992 03/07/20 03:55:04 16:39 8367 6072 ims -1 310410214827503 993 03/07/20 04:13:11 60:00 15051 8988 ims -1 310410214827503 994 03/07/20 04:45:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 995 03/07/20 05:13:11 59:03 6848 2664 ims -1 310410214827503 996 03/07/20 05:45:02 0:02 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 997 03/07/20 05:45:06 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 998 03/07/20 06:16:12 6:17 8203 6000 ims -1 310410214827503 999 03/07/20 06:31:28 60:00 15055 8878 ims -1 310410214827503 !PROMS SPROUTS !PHONES 1PROME8 1PROME8 !PHONES !PHONES 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGM1100002684 NeTniliAL not for general distribution. EF-EA_00116760 EFTA01251284 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried Ler records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41111, is.. sof alt ‘inli. AT&T Run Date: Run Time: Data Osage for: 06/17/2020 10:55:14 Item Conn. Conn. Dote Time (OTC) 1000 03/07/20 06:45:06 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 1001 03/07/20 07:31:28 24:58 3408 1448 imp -1 310410214827503 1002 03/07/20 07:45:06 60:00 0 Oruftgenpho no 3587080982063725 310410214827503 1003 03/07/20 08:02:56 3:28 8315 6122 imp -1 310410214827503 1004 03/07/20 08:11:04 60:00 16811 9252 imp -1 310410214827503 1005 03/07/20 08:45:06 60:01 0 Onxtgenpho no 3587080982063725 310410214827503 1006 03/07/20 09:11:04 5:47 0 0 imp -1 310410214827503 1007 03/07/20 09:20:15 60:00 18679 10125 men -1 310410214827503 1008 03/07/20 09:45:09 60:00 0 Onxtgenpho no 3587080982063725 310410214827503 1009 03/07/20 10:20:15 37:07 3424 1324 men -1 310410214827503 1010 03/07/20 10:45:09 60:00 0 Onxtgenpho no 3587080982063725 310410214827503 1011 03/07/20 11:05:29 22:12 8311 6104 men -1 310410214827503 1012 03/07/20 11:32:57 0:00 0 0 men 3587080982063725 310410214827503 1013 03/07/20 11:35:38 12:17 8455 6338 men -1 310410214827503 1014 03/07/20 11:45:09 60:00 0 Onxtgenpho no 3587080982063725 310410214827503 1015 03/07/20 11:51:55 56:14 21443 9826 imp -1 310410214827503 1016 03/07/20 12:45:09 60:00 0 Oruftgenpho no 3587080982063725 310410214827503 1017 03/07/20 12:48:09 6:31 8453 6214 imp -1 310410214827503 1018 03/07/20 12:57:22 47:41 13399 7751 imp -1 310410214827503 1019 03/07/20 13:45:09 0:01 0 0 nxtgenpho no 3587080982063725 310410214827503 1020 03/07/20 13:45:12 14:28 0 Oruftgenpho no 3587080982063725 310410214827503 1021 03/07/20 13:47:32 60:00 17165 9495 imp -1 310410214827503 1022 03/07/20 13:59:40 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 1023 03/07/20 14:47:32 38:17 5072 1572 imp -1 310410214827503 1024 03/07/20 14:59:40 12:27 0 0 nxtgenpho no 3587080982063725 310410214827503 1025 03/07/20 15:12:06 8:21 192 Onxtgenpho no 3587080982063725 310410214827503 1026 03/07/20 15:12:08 8:20 0 0 nxtgenpho no 3587080982063725 310410214827503 Originating ET Bytes Bytoa Apn INEI IMBI MAKE MODEL Number Up Dn APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 41 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002685 PsisTfikE not for general distribution. EF-EAJVII6761 EFTA01251285 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in .....,0• ••-s`' s AT&T Run pato: Run Time: Data Osage for: 06/17/2020 18:55:36 Item Conn. Conn. Date Time (OTC) 1027 03/07/20 15:20:28 57:46 0 0 nxtgonpho no 3587080982063725 310410214827503 1028 03/07/20 15:32:55 0:00 0 0 ins 3587080982063725 310410214827503 1029 03/07/20 15:33:04 16:06 9491 6883 ins -1 310410214827503 1030 03/07/20 15:59:08 16:46 11990 6446 ins -1 310410214827503 1031 03/07/20 16:18:14 0:52 0 Oruftgonpho no 3587080982063725 310410214827503 1032 03/07/20 16:18:18 14:21 8203 5996 ins -1 310410214827503 1033 03/07/20 16:19:05 1:52 192 Oruftgonpho no 3587080982063725 310410214827503 1034 03/07/20 16:19:06 1:52 0 Oruftgonpho no 3587080982063725 310410214827503 1035 03/07/20 16:20:58 2:59 0 Oruftgonpho no 3587080982063725 310410214827503 1036 03/07/20 16:23:56 2:09 192 Oruftgonpho no 3587080982063725 310410214827503 1037 03/07/20 16:23:57 2:09 0 Oruftgonpho no 3587080982063725 310410214827503 1038 03/07/20 16:26:06 23:35 0 Oruftgonpho no 3587080982063725 310410214827503 1039 03/07/20 16:36:56 0:15 7488 5572 ins 3587080982063725 310410214827503 1040 03/07/20 16:37:11 59:00 14696 8116 ins 3587080982063725 310410214827503 1041 03/07/20 16:49:40 8:18 192 Oruftgonpho no 3587080982063725 310410214827503 1042 03/07/20 16:49:42 8:17 0 Oruftgonpho no 3587080982063725 310410214827503 1043 03/07/20 16:57:59 1:02 0 Oruftgonpho no 3587080982063725 310410214827503 1044 03/07/20 16:59:00 2:18 192 Onxtgonpho no 3587080982063725 310410214827503 1045 03/07/20 16:59:01 2:18 0 Onxtgonpho no 3587080982063725 310410214827503 1046 03/07/20 17:01:18 6:06 192 Onxtgonpho no 3587080982063725 310410214827503 1047 03/07/20 17:01:19 6:06 0 Onxtgonpho no 3587080982063725 310410214827503 1048 03/07/20 17:07:25 3:58 0 Onxtgonpho no 3587080982063725 310410214827503 1049 03/07/20 17:11:22 8:26 192 Onxtgonpho no 3587080982063725 310410214827503 Originating ET Bytes Byte. Apn per IMBI MAKE MOLL Number Up Dn APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 42 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002686 N s not for general distribution. EFTA 00/16762 EFTA01251286 MOBILITY The information contained heraCtoNyFti (Uc) 1050 03/07/20 17:11:23 8:26 0 Onxtgenpho no 3587080982063725 310410214827503 1051 03/07/20 17:19:49 11:27 0 Oruftgenpho no 3587080982063725 310410214827503 1052 03/07/20 17:31:15 0:50 192 Oruftgenpho no 3587080982063725 310410214827503 1053 03/07/20 17:31:17 0:49 0 Oruftgenpho no 3587080982063725 310410214827503 1054 03/07/20 17:32:06 3:19 0 Oruftgenpho no 3587080982063725 310410214827503 1055 03/07/20 17:35:24 2:06 192 Oruftgenpho no 3587080982063725 310410214827503 1056 03/07/20 17:35:25 2:06 0 Oruftgenpho no 3587080982063725 310410214827503 1057 03/07/20 17:35:52 1:38 7318 8814 imp 3587080982063725 310410214827503 1058 03/07/20 17:35:54 1:37 8814 7054 imp 3587080982063725 310410214827503 1059 03/07/20 17:36:11 60:00 45387 23034 imp -1 310410214827503 1060 03/07/20 17:37:31 34:49 0 Oruftgenpho no 3587080982063725 310410214827503 1061 03/07/20 18:12:19 2:41 192 Oruftgenpho no 3587080982063725 310410214827503 1062 03/07/20 18:12:20 2:41 0 Oruftgenpho no 3587080982063725 310410214827503 1063 03/07/20 18:15:01 4:44 192 Oruftgenpho no 3587080982063725 310410214827503 1064 03/07/20 18:15:02 4:44 0 Oruftgenpho no 3587080982063725 310410214827503 1065 03/07/20 18:19:46 7:15 0 Oruftgenpho no 3587080982063725 310410214827503 1066 03/07/20 18:21:16 0:34 61632 26652 imp -1 310410214827503 1067 03/07/20 18:27:00 1:05 192 Oruftgenpho no 3587080982063725 310410214827503 1068 03/07/20 18:27:02 1:04 0 Oruftgenpho no 3587080982063725 310410214827503 1069 03/07/20 18:28:06 13:15 0 Oruftgenpho no 3587080982063725 310410214827503 1070 03/07/20 18:36:11 30:45 13316 7812 imp -1 310410214827503 1071 03/07/20 18:39:44 0:05 0 2318 imp -1 310410214827503 1072 03/07/20 18:41:19 2:07 192 Oruftgenpho no 3587080982063725 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ....,,,• ••--s"" e AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 1S:55:36 Item Conn. Conn. Originating ET Bytes Bytes Apn IKI IMS1 MARL MODEL Date Time Number Up Dn APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 43 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002687 PsiTniliAL not for general distribution. EF-EA_00116763 EFTA01251287 NOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run pato: Run Time: Data Osage for: Item Conn. Date 06/17/2020 18:55:36 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn on ICI INSt ten tarn 1073 03/07/20 18:41:21 2:06 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1074 03/07/20 18:43:27 26:50 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1075 03/07/20 19:10:16 2:07 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1076 03/07/20 19:10:17 2:07 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 1077 03/07/20 19:10:35 1:48 7213 6790 mss 3587080982063725 310410214827503 APPLE !PHONES 1078 03/07/20 19:10:36 1:48 6790 6949 mss 3587080982063725 310410214827503 APPLE !PHONES 1079 03/07/20 19:11:08 15:58 8311 6213 I. -1 310410214827503 1080 03/07/20 19:12:24 4:40 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1081 03/07/20 19:17:03 8:47 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1082 03/07/20 19:17:05 8:46 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1083 03/07/20 19:25:50 2:22 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 1084 03/07/20 19:25:52 2:21 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1085 03/07/20 19:28:12 6:09 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 1086 03/07/20 19:28:13 6:09 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 1087 03/07/20 19:34:23 0:37 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1088 03/07/20 19:34:29 60:00 19394 10386 mes -1 310410214827503 1089 03/07/20 19:35:00 21:20 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1090 03/07/20 19:35:01 21:20 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1091 03/07/20 19:56:20 2:09 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1092 03/07/20 19:56:21 2:09 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 1093 03/07/20 19:58:30 1:27 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1094 03/07/20 19:59:57 21:10 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 44 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002688 not for general distribution. EFTA 00116764 EFTA01251288 MOBILITY The information contained hereCtoNels 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ..... a • ••-s` a. AT&T Run Data: Run Time: Data Osage Tor: 06/17/2020 18:55:36 Item Conn. Conn. Date SLAW (OTC) Originating Rumbas LT Bytes Byte. Apn Up Dn ICI IMBI MAfl NICOLL 1095 03/07/20 19:59:58 21:10 0 0 nxtgonpho no 3587080982063725 310410214827503 1096 03/07/20 20:21:07 2:24 192 Ormtganpho no 3587080982063725 310410214827503 1097 03/07/20 20:21:08 2:24 0 Ormtganpho no 3587080982063725 310410214827503 1098 03/07/20 20:23:31 6:07 192 Onatgarapho no 3587080982063725 310410214827503 1099 03/07/20 20:23:33 6:06 0 Onatganpho no 3587080982063725 310410214827503 1100 03/07/20 20:29:39 4:48 0 Onatganpho no 3587080982063725 310410214827503 1101 03/07/20 20:34:26 71:33 192 Onatganpho no 3587080982063725 310410214827503 1102 03/07/20 20:34:27 60:00 0 Ormtganpho no 3587080982063725 310410214827503 1103 03/07/20 20:34:29 3:10 0 0 ins -1 310410214827503 1104 03/07/20 20:43:44 52:50 6354 6668 ins 3587080982063725 310410214827503 1105 03/07/20 20:43:45 52:50 6668 6090 ins 3587080982063725 310410214827503 1106 03/07/20 20:47:45 30:08 14287 8338 ins -1 310410214827503 1107 03/07/20 21:32:01 13:58 7228 6718 ins 3587080982063725 310410214827503 1108 03/07/20 21:32:02 13:58 6718 6964 ins 3587080982063725 310410214827503 1109 03/07/20 21:34:27 11:33 0 0 nxtgenpho no 3587080982063725 310410214827503 1110 03/07/20 21:36:33 4:51 11664 7557 ins -1 310410214827503 1111 03/07/20 21:46:00 3:06 0 Ormtganpho no 3587080982063725 310410214827503 1112 03/07/20 21:49:05 2:10 192 Onatganpho no 3587080982063725 310410214827503 1113 03/07/20 21:49:07 2:09 0 Onatganpho no 3587080982063725 310410214827503 1114 03/07/20 21:49:18 1:57 7112 6720 ins 3587080982063725 310410214827503 1115 03/07/20 21:49:19 1:57 6720 6848 ins 3587080982063725 310410214827503 1116 03/07/20 21:51:16 0:39 0 Onatganpho no 3587080982063725 310410214827503 1117 03/07/20 21:51:18 0:00 0 0 ins 3587080982063725 310410214827503 1118 03/07/20 21:51:54 27:15 192 Onatganpho no 3587080982063725 310410214827503 1119 03/07/20 21:51:55 27:15 0 Onxtganpho no 3587080982063725 310410214827503 APPLE 1PHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PRONGS APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE DRONES APPLE DRONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 45 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002689 PsiTn iliAL not for general distribution. EF-EA_00116765 EFTA01251289 MOBILITY The information contained heraCteNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4111. tt gO as# ‘"S° AT&T Run Date: Run Time: Data Osage For: 06/17/2020 MI= Item Conn. Date Conn. Time (OTC) Originating Number ET Bytes Up 1120 03/07/20 21:52:20 26:49 7262 1121 03/07/20 21:52:21 26:49 6746 1122 03/07/20 21:53:58 14:15 10099 1123 03/07/20 22:19:10 2:09 192 1124 03/07/20 22:19:11 2:08 6246 1125 03/07/20 22:19:11 2:09 0 1126 03/07/20 22:19:12 2:08 6672 1127 03/07/20 22:21:20 0:37 0 1128 03/07/20 22:21:21 0:01 0 1129 03/07/20 22:21:29 10:12 11698 1130 03/07/20 22:21:57 21:16 192 1131 03/07/20 22:21:58 21:16 0 1132 03/07/20 22:37:29 5:44 6316 1133 03/07/20 22:37:30 5:44 6670 1134 03/07/20 22:41:47 33:34 15774 1135 03/07/20 22:43:14 0:36 0 1136 03/07/20 22:43:49 15:04 192 1137 03/07/20 22:43:50 15:04 0 1138 03/07/20 22:58:54 27:38 192 1139 03/07/20 22:58:55 27:38 0 1140 03/07/20 23:26:32 34:00 192 1141 03/07/20 23:26:33 34:00 0 1142 03/07/20 23:26:37 33:55 6370 1143 03/07/20 23:26:38 33:55 6674 1144 03/07/20 23:27:04 39:15 42891 1145 03/08/20 00:00:33 5:46 0 1146 03/08/20 00:00:45 0:16 0 Bytes Apn INE' IMEI HAKE MODEL Dn 6854 imo 3587080982063725 310410214827503 APPLE !PHONES 6998 imo 3587080982063725 310410214827503 APPLE !PHONES 6418 imo -1 310410214827503 0 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 6672 imo 3587080982063725 310410214827503 APPLE 'PHONES Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 5982 imp 3587080982063725 310410214827503 APPLE !PHONES Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 0 imp 3587080982063725 310410214827503 APPLE 'PHONES 6686 imo -1 310410214827503 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 6778 imp 3587080982063725 310410214827503 APPLE 'PHONES 5964 imp 3587080982063725 310410214827503 APPLE 'PHONES 8758 imo -1 310410214827503 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 6674 imp 3587080982063725 310410214827503 APPLE 'PHONES 6106 imp 3587080982063725 310410214827503 APPLE 'PHONES 24018 imo -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 55513 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 46 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMJ10002690 NTnilikk not for general distribution. EFTAJVII6766 EFTA01251290 The information contained heraCtoNyFti 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. trts AT&T Run Date: Run Time: Data Osage for: Item Conn. Date 06/17/2020 Conn. Time (Inc) Originating Number CT Bytes Up Byte. Apn On IME1 IMBI MA= NADEL 1147 03/08/20 15:41:04 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1148 03/08/20 15:41:06 0:17 8148 6924 imp 3587080982063725 310410214827503 APPLE !PHONES 1149 03/08/20 15:41:23 60:00 14740 4576 imp 3587080982063725 310410214827503 APPLE !PHONES 1150 03/08/20 16:41:04 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1151 03/08/20 16:41:23 60:00 10020 3144 imp 3587080982063725 310410214827503 APPLE !PHONES 1152 03/08/20 17:41:04 43:30 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1153 03/08/20 17:41:23 60:00 42980 20732 imp 3587080982063725 310410214827503 APPLE !PHONES 1154 03/08/20 18:09:35 0:06 0 6927 imp 3587080982063725 310410214827503 APPLE !PHONES 1155 03/08/20 18:23:21 0:07 0 7700 imp 3587080982063725 310410214827503 APPLE !PHONES 1156 03/08/20 18:24:33 2:09 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1157 03/08/20 18:24:34 2:09 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1158 03/08/20 18:26:43 14:23 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1159 03/08/20 18:41:06 3:35 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1160 03/08/20 18:41:23 60:00 3408 1432 imp 3587080982063725 310410214827503 APPLE !PHONES 1161 03/08/20 18:44:41 16:06 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1162 03/08/20 18:55:40 0:00 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 1163 03/08/20 18:55:48 60:00 16793 8983 imp -1 310410214827503 1164 03/08/20 19:00:46 7:34 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1165 03/08/20 19:00:47 7:34 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1166 03/08/20 19:08:21 0:32 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1167 03/08/20 19:08:51 5:10 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1168 03/08/20 19:08:53 5:09 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1169 03/08/20 19:14:02 0:06 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1170 03/08/20 19:14:24 3:41 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 47 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002691 PsisTfikE not for general distribution. EF-EA_00116767 EFTA01251291 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage for: Item Conn. Date 06/17/2020 Conn. Originating LT Time Hurter /OTC) Byte. Op Byte. Apn On INLI INBI teUtt 1171 03/08/20 19:14:25 3:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1172 03/08/20 19:18:06 5:01 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1173 03/08/20 19:18:07 5:01 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1174 03/08/20 19:23:08 13:33 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1175 03/08/20 19:23:09 13:34 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1176 03/08/20 19:36:43 1:33 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1177 03/08/20 19:38:15 2:10 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1178 03/08/20 19:38:17 2:09 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1179 03/08/20 19:40:26 3:26 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1180 03/08/20 19:41:23 60:00 0 0 ims 3587080982063725 310410214827503 APPLE 1181 03/08/20 19:43:52 16:56 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1182 03/08/20 19:43:53 16:56 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1183 03/08/20 19:55:48 60:00 12652 3408 ims -1 310410214827503 1184 03/08/20 20:00:49 16:17 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1185 03/08/20 20:17:06 4:04 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1186 03/08/20 20:17:07 4:04 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1187 03/08/20 20:21:11 0:56 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1188 03/08/20 20:22:06 2:38 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1189 03/08/20 20:22:07 2:38 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1190 03/08/20 20:24:44 6:10 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1191 03/08/20 20:24:46 6:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE SCOTS IPHONZ8 !PROMS !PROMS !PHONES IPHONZ8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are.powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 48 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002692 PsisTiliAL not for general distribution. EF-EA_00116768 EFTA01251292 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time lone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn INEI INBI tun 1192 03/08/20 20:30:55 4:54 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1193 03/08/20 20:35:48 14:11 192 Ormtganpho no 3587080982063725 310410214827503 APPLE 1194 03/08/20 20:35:49 14:11 0 Ormtganpho no 3587080982063725 310410214827503 APPLE 1195 03/08/20 20:41:23 60:00 0 0 imp 3587080982063725 310410214827503 APPLE 1196 03/08/20 20:50:00 12:34 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1197 03/08/20 20:50:01 12:34 0 Ormtganpho no 3587080982063725 310410214827503 APPLE 1198 03/08/20 20:55:48 60:00 10580 4096 imp -1 310410214827503 1199 03/08/20 21:02:34 6:10 192 Ormtganpho no 3587080982063725 310410214827503 APPLE 1200 03/08/20 21:02:35 6:10 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1201 03/08/20 21:08:45 60:00 0 Onatgarapho no 3587080982063725 310410214827503 APPLE 1202 03/08/20 21:41:23 60:00 0 0 imp 3587080982063725 310410214827503 APPLE 1203 03/08/20 21:55:48 60:00 6924 2772 imp -1 310410214827503 1204 03/08/20 22:08:45 0:58 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1205 03/08/20 22:09:43 1:38 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1206 03/08/20 22:11:22 22:21 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1207 03/08/20 22:33:42 2:10 192 Onatganpho no 3587080982063725 310410214827503 APPLE 1208 03/08/20 22:33:43 2:10 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1209 03/08/20 22:35:53 6:31 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1210 03/08/20 22:41:23 18:00 0 0 imp 3587080982063725 310410214827503 APPLE 1211 03/08/20 22:42:23 2:10 192 Onatganpho no 3587080982063725 310410214827503 APPLE 1212 03/08/20 22:42:25 2:09 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1213 03/08/20 22:44:34 4:14 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1214 03/08/20 22:48:47 2:27 192 Onatganpho no 3587080982063725 310410214827503 APPLE NICOLL 1PHONZ8 !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHONE8 !PHONES !PHONES IPHOME8 IPHONE8 !PHONES IPHOME8 IPHONE8 IPHONE8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 49 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002693 N:FroliAL not for general distribution. EFTA_OOI 16769 EFTA01251293 MOBILITY The information contained hereetoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 4111. AT&T Run pato: Run Time: Data Osage For: 06/17/2020 18:53:36 Item Conn. Conn. Date Time (OTC) 1215 03/08/20 22:48:48 1216 03/08/20 22:51:14 1217 03/08/20 22:51:15 1218 03/08/20 22:55:48 1219 03/08/20 23:03:45 1220 03/08/20 23:05:49 1221 03/08/20 23:05:50 1222 03/08/20 23:14:33 1223 03/08/20 23:55:48 1224 03/09/20 00:14:33 1225 03/09/20 00:44:58 1226 03/09/20 00:51:16 1227 03/09/20 00:51:17 1228 03/09/20 00:51:17 1229 03/09/20 00:51:18 1230 03/09/20 00:55:02 1231 03/09/20 00:55:32 1232 03/09/20 00:55:33 1233 03/09/20 00:56:28 1234 03/09/20 01:14:08 1235 03/09/20 01:16:09 1236 03/09/20 01:16:10 1237 03/09/20 01:30:23 1238 03/09/20 01:30:29 1239 03/09/20 01:40:58 Originating Number ET Bytes Bytom Ann IBEX INSI NAfl MODEL Up Dn 2:27 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 12:30 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 12:30 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 60:00 10160 3144 inn -1 310410214827503 2:05 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 8:43 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPRONZ8 8:43 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPRONZ8 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 55:14 51404 17880 inn -1 310410214827503 36:44 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 0:23 0 43856 inn -1 310410214827503 22:51 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 22:51 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 4:16 7160 6810 inn 3587080982063725 310410214827503 APPLE IPRONZ8 4:16 6742 6896 imo 3587080982063725 310410214827503 APPLE IPRONZ8 0:31 756 0 imo -1 310410214827503 18:35 7376 6794 imo 3587080982063725 310410214827503 APPLE IPRONZ8 18:35 6794 7112 inn 3587080982063725 310410214827503 APPLE IPRONZ8 60:00 24207 16162 inn -1 310410214827503 2:02 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 14:18 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 14:18 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 18:53 3007685 3052551 imo -1 310410214827503 10:30 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 18:18 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 50 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002694 NeTniliAL not for general distribution. EFTA_00I 16770 EFTA01251294 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and arc. provided in te.,-. as s. `"Ie AT&T Run pato: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn IMBI MARL MODEL 1240 03/09/20 01:40:59 18:18 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONE8 1241 03/09/20 01:56:28 60:00 6940 2896 ins -1 310410214827503 1242 03/09/20 01:59:17 0:54 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONE8 1243 03/09/20 02:00:10 5:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1244 03/09/20 02:00:11 5:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1245 03/09/20 02:05:19 8:38 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1246 03/09/20 02:05:20 8:38 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1247 03/09/20 02:13:58 5:51 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1248 03/09/20 02:13:59 5:51 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1249 03/09/20 02:19:50 55:27 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1250 03/09/20 02:56:28 60:00 6848 2788 ins -1 310410214827503 1251 03/09/20 03:15:16 20:00 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1252 03/09/20 03:15:17 59:01 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1253 03/09/20 03:56:28 60:00 8496 2928 imo -1 310410214827503 1254 03/09/20 04:14:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1255 03/09/20 04:56:28 60:00 16884 6232 ins -1 310410214827503 1256 03/09/20 05:14:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1257 03/09/20 05:56:28 60:00 8496 2928 imo -1 310410214827503 1258 03/09/20 06:14:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1259 03/09/20 06:56:28 60:00 8496 3160 Imo -1 310410214827503 1260 03/09/20 07:14:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1261 03/09/20 07:56:28 60:00 8496 2928 imo -1 310410214827503 1262 03/09/20 08:14:18 0:01 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1263 03/09/20 08:47:44 2:23 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002695 N:FroliAL not for general distribution. Page 51 EF-EA_00116771 EFTA01251295 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ....a f •--ssi `'s AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 18:65:36 Conn. Originating LT Time Number (OTC) Bytes Up Bytoa Apn Dn IBEX INBI teat 1264 03/09/20 08:47:46 2:22 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1265 03/09/20 08:50:07 6:02 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1266 03/09/20 08:50:08 6:03 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1267 03/09/20 08:56:10 3:22 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1268 03/09/20 08:56:11 3:22 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1269 03/09/20 08:56:28 60:00 11812 4484 ism -1 310410214827503 1270 03/09/20 08:59:33 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1271 03/09/20 09:56:28 60:00 12044 4552 imp -1 310410214827503 1272 03/09/20 09:59:33 51:11 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1273 03/09/20 10:50:44 10:15 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1274 03/09/20 10:50:45 10:15 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1275 03/09/20 10:56:28 60:00 6832 2680 imp -1 310410214827503 1276 03/09/20 11:01:00 56:23 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1277 03/09/20 11:56:28 60:00 13352 4732 imp -1 310410214827503 1278 03/09/20 11:57:22 2:59 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1279 03/09/20 11:57:23 2:59 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1280 03/09/20 12:00:21 20:57 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1281 03/09/20 12:00:22 20:57 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1282 03/09/20 12:21:18 7:42 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1283 03/09/20 12:21:20 7:41 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1284 03/09/20 12:29:01 13:08 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1285 03/09/20 12:29:02 13:08 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL DRONES DRONES !PROMS DRONES DRONES DRONES DRONES DRONES DRONES !PROMS !PROMS DRONES DRONES DRONES !PROMS DRONES DRONES !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 52 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002696 NeTniiiikE not for general distribution. EFTA 00116772 EFTA01251296 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and (ITC. provided in AT&T Run Data: Run Tame: Data Osage Tor: Item Conn. Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number Up ET Bytes Bytes Apn Dn INLI 'NIX Mal 1286 03/09/20 12:42:11 23:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1287 03/09/20 12:56:28 60:00 7064 2804 ims -1 310410214827503 1288 03/09/20 13:05:42 8:24 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1289 03/09/20 13:05:43 8:24 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1290 03/09/20 13:14:07 13:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1291 03/09/20 13:27:48 2:10 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1292 03/09/20 13:27:50 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1293 03/09/20 13:29:59 14:10 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1294 03/09/20 13:44:08 5:25 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1295 03/09/20 13:44:09 5:25 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1296 03/09/20 13:49:34 5:02 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1297 03/09/20 13:54:35 9:50 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1298 03/09/20 13:54:36 9:50 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1299 03/09/20 13:56:28 60:00 23568 10996 ims -1 310410214827503 1300 03/09/20 14:04:25 5:32 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1301 03/09/20 14:04:27 5:31 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1302 03/09/20 14:09:58 9:08 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1303 03/09/20 14:19:05 0:44 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1304 03/09/20 14:19:06 0:44 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1305 03/09/20 14:19:50 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1306 03/09/20 14:52:26 0:10 0 6685 ims -1 310410214827503 1307 03/09/20 14:56:28 60:00 29368 14756 ims -1 310410214827503 MODEL IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002697 NTroleiNE not for general distribution. Page 53 EF-EAJVII6773 EFTA01251297 MOBILITY The information contained her 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, .....,,,• 1/4-s ""s AT&T Run Dato: Run Time: Data Usage Tor: Itea Conn. Date 06/17/2020 14:63:37 Conn. Originating Cr Time Humber (UTC) Bytes OP Bytom Apn Dn Tarr IH3I ten 1308 03/09/20 15:19:50 52:16 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1309 03/09/20 15:46:20 0:04 0 8568 ins -1 310410214827503 1310 03/09/20 15:56:28 50:29 8820 3468 ins -1 310410214827503 1311 03/09/20 16:37:57 2:26 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1312 03/09/20 16:37:58 2:26 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1313 03/09/20 16:40:24 6:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1314 03/09/20 16:46:46 18:32 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1315 03/09/20 16:46:47 18:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1316 03/09/20 16:46:56 18:22 7240 7554 ins 3587080982063725 310410214827503 APPLE 1317 03/09/20 16:46:57 18:22 7486 6976 ins 3587080982063725 310410214827503 APPLE 1318 03/09/20 17:05:19 14:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1319 03/09/20 17:05:21 7:10 7406 6121 ins 3587080982063725 310410214827503 APPLE 1320 03/09/20 17:12:31 10:30 5180 1696 ins 3587080982063725 310410214827503 APPLE 1321 03/09/20 17:14:37 60:00 16620 9004 ins -1 310410214827503 1322 03/09/20 17:20:00 9:52 288 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1323 03/09/20 17:20:01 9:52 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1324 03/09/20 17:29:53 5:29 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1325 03/09/20 17:29:54 5:29 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1326 03/09/20 17:35:23 3:53 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1327 03/09/20 17:39:15 2:16 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1328 03/09/20 17:39:16 2:16 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1329 03/09/20 17:41:32 15:20 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1330 03/09/20 17:41:33 15:20 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1331 03/09/20 17:56:53 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002698 NTratAL not for general distribution. Page 54 EF-EA_00116774 EFTA01251298 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 411111, AT&T Run Date: Run Time: Data Osage for: Item Conn. Data 06/17/2020 1S:53:37 Conn. Originating ET rime Number (OTC) Bytes OP Bytes, Min Dn INCI INSI MUM 1332 03/09/20 18:14:37 60:00 14340 6952 ims -1 310410214827503 1333 03/09/20 18:49:56 0:04 0 104 ims -1 310410214827503 1334 03/09/20 18:56:53 29:12 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1335 03/09/20 19:14:37 60:00 9960 3144 ims -2 310410214827503 1336 03/09/20 19:26:04 2:09 192 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1337 03/09/20 19:26:05 2:09 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1338 03/09/20 19:28:14 37:51 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1339 03/09/20 20:06:04 2:10 192 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1340 03/09/20 20:06:06 2:09 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1341 03/09/20 20:08:15 0:47 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1342 03/09/20 20:09:01 8:34 192 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1343 03/09/20 20:09:02 8:34 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1344 03/09/20 20:14:37 60:00 8604 3020 ims -2 310410214827503 1345 03/09/20 20:17:36 0:59 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1346 03/09/20 20:18:35 15:42 192 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1347 03/09/20 20:18:36 15:42 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1348 03/09/20 20:34:18 5:53 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1349 03/09/20 20:40:11 3:12 192 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1350 03/09/20 20:40:12 3:12 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1351 03/09/20 20:43:24 6:12 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1352 03/09/20 20:49:35 8:31 192 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1353 03/09/20 20:49:36 8:31 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE MOLL IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB !PHONES !PHONES !PHONES IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB !PHONES !PHONES !PHONES IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 55 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002699 NTroliAL not for general distribution. EFTA_00116775 EFTA01251299 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Tame: Data Usage Tor: Item Conn. Date 06/17/2020 14:54:37 Conn. Originating ET Time Number (UTC) Bytes UP Byte. Apn Dn ICI INSI NUM 1354 03/09/20 20:58:07 9:29 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1355 03/09/20 21:07:35 1:02 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1356 03/09/20 21:07:36 1:02 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1357 03/09/20 21:08:38 3:54 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1358 03/09/20 21:12:31 2:56 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1359 03/09/20 21:12:32 2:56 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1360 03/09/20 21:14:37 18:28 3408 1324 ins -1 310410214827503 1361 03/09/20 21:15:28 1:22 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1362 03/09/20 21:16:49 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1363 03/09/20 21:16:50 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1364 03/09/20 21:18:59 10:53 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1365 03/09/20 21:29:52 20:16 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1366 03/09/20 21:29:53 20:15 6244 6740 ins 3587080982063725 310410214827503 APPLE 1367 03/09/20 21:29:53 20:16 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1368 03/09/20 21:29:54 20:15 6672 5980 ins 3587080982063725 310410214827503 APPLE 1369 03/09/20 21:46:37 60:00 18655 9854 ins -1 310410214827503 1370 03/09/20 21:50:09 2:03 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1371 03/09/20 21:52:11 9:24 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1372 03/09/20 21:52:12 9:25 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1373 03/09/20 22:01:37 30:59 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1374 03/09/20 22:32:36 17:41 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1375 03/09/20 22:32:36 17:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1376 03/09/20 22:46:37 46:07 10160 6456 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was initiated AT&T's network initiated the data customer or transaction. The information contained hereeNyFtli NICOLL IPHOME8 !PHONES !PHONES !PHONES IPHOME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 SDNY_GM_ 00002700 PsiTifikE not for general distribution. Page 56 EFTA_00116776 EFTA01251300 MOBILITY The information contained hereeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Usage for: Item Conn. Data 06/17/2020 10:54:37 Conn. Originating ET Time Number (OTC) Bytes Up Rytoa Rpn Dn INE1 IMS1 ten 1377 03/09/20 22:50:17 1:16 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1378 03/09/20 22:50:18 1:16 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1379 03/09/20 22:51:34 5:52 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1380 03/09/20 22:57:25 3:58 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1381 03/09/20 22:57:27 3:57 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1382 03/09/20 23:01:24 4:13 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1383 03/09/20 23:05:36 3:35 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1384 03/09/20 23:05:37 3:35 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1385 03/09/20 23:09:12 11:34 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1386 03/09/20 23:20:45 2:21 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1387 03/09/20 23:20:46 2:21 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1388 03/09/20 23:23:07 11:56 0 OruMgonpho no 3587080982063725 310410214827503 APPLE 1389 03/09/20 23:33:05 0:34 840 72 ims 3587080982063725 310410214827503 APPLE 1390 03/09/20 23:33:39 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 1391 03/09/20 23:33:39 0:01 0 0 ims 3587080982063725 310410214827503 APPLE 1392 03/09/20 23:33:43 60:00 18363 9389 ims -1 310410214827503 1393 03/09/20 23:35:02 7:16 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1394 03/09/20 23:35:03 7:16 0 OruMgonpho no 3587080982063725 310410214827503 APPLE 1395 03/09/20 23:42:19 5:00 0 Oructgonpho no 3587080982063725 310410214827503 APPLE 1396 03/09/20 23:47:18 1:15 192 OruMgonpho no 3587080982063725 310410214827503 APPLE 1397 03/09/20 23:47:20 1:14 0 OruMgonpho no 3587080982063725 310410214827503 APPLE 1398 03/09/20 23:48:34 3:06 0 OruMgonpho no 3587080982063725 310410214827503 APPLE MODEL !PROMS !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PROME8 !PHONES !PHONES !PHONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 57 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002701 NTatiadt not for general distribution. EFTA_00116777 EFTA01251301 MOBILITY The information contained heraleOuNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ap. trad est ""‘ AT&T Run pato: Run Time: Data usage For: Item cone. Date 06/17/2020 18:55:37 Conn. Time (UTC) originating Number ET Bytes Up Bytom Apn on INEI INBI tun 1399 03/09/20 23:51:40 5:17 192 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1400 03/09/20 23:51:41 5:17 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1401 03/09/20 23:56:58 8:46 192 0 natgonpho no 3587080982063725 310410214827503 APPLE 1402 03/09/20 23:56:59 8:46 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1403 03/10/20 00:05:45 12:31 192 0 natgonpho no 3587080982063725 310410214827503 APPLE 1404 03/10/20 00:05:46 12:31 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1405 03/10/20 00:18:17 23:13 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1406 03/10/20 00:33:43 60:00 8604 3052 ims -1 310410214827503 1407 03/10/20 00:41:29 8:25 192 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1408 03/10/20 00:41:31 8:24 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1409 03/10/20 00:49:55 17:25 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1410 03/10/20 01:07:20 58:34 192 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1411 03/10/20 01:07:21 58:34 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1412 03/10/20 01:33:43 60:00 9928 3176 ims -1 310410214827503 1413 03/10/20 02:05:55 60:00 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1414 03/10/20 02:33:43 60:00 8496 3160 ims -1 310410214827503 1415 03/10/20 03:05:55 50:07 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1416 03/10/20 03:33:43 60:00 8012 2804 ims -1 310410214827503 1417 03/10/20 03:56:02 16:34 192 0 natgonpho no 3587080982063725 310410214827503 APPLE 1418 03/10/20 03:56:03 16:34 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1419 03/10/20 04:12:37 41:56 192 0 natgonpho no 3587080982063725 310410214827503 APPLE 1420 03/10/20 04:12:38 41:56 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1421 03/10/20 04:33:43 60:00 16636 6232 ins -1 310410214827503 won 11)4(0=8 110)(0=8 !PHONES !PHONES 110)(0=8 !PHONES !PHONES 110)(0=8 110)(0=8 110)(0=8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 110)(0=8 110)(0=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 58 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002702 PsisT fikE not for general distribution. EF-EAJVII6778 EFTA01251302 MOBILITY The information contained her 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes UP Bytom Apn On INEI INSI MAKE 1422 03/10/20 04:54:34 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1423 03/10/20 05:33:43 60:00 8604 3252 imo -1 310410214827503 1424 03/10/20 05:54:34 50:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1425 03/10/20 06:33:43 60:00 6848 2680 imo -1 310410214827503 1426 03/10/20 06:44:57 28:57 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1427 03/10/20 06:44:58 28:57 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1428 03/10/20 07:13:55 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1429 03/10/20 07:33:43 60:00 8496 3052 imo -1 310410214827503 1430 03/10/20 08:13:55 49:45 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1431 03/10/20 08:33:43 60:00 11596 4160 imo -1 310410214827503 1432 03/10/20 09:03:39 2:23 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1433 03/10/20 09:03:40 2:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1434 03/10/20 09:06:03 9:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1435 03/10/20 09:06:04 9:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1436 03/10/20 09:15:12 9:23 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1437 03/10/20 09:15:13 9:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1438 03/10/20 09:24:36 6:46 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1439 03/10/20 09:24:37 6:46 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1440 03/10/20 09:31:23 56:05 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1441 03/10/20 09:33:43 60:00 15092 4908 imo -1 310410214827503 1442 03/10/20 10:27:27 14:56 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1443 03/10/20 10:27:28 14:56 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1444 03/10/20 10:33:43 60:00 9928 3176 imo -1 310410214827503 NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PHONE8 1PHONE8 !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002703 NeTtikE not for general distribution. Page 59 EFTA_00116779 EFTA01251303 MOBILITY The information contained her is 1445 03/10/20 10:42:24 2:10 0 Onxtgonpho no 3587080982063725 310410214827503 1446 03/10/20 10:44:34 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 1447 03/10/20 10:44:34 84:53 192 Onxtgonpho no 3587080982063725 310410214827503 1448 03/10/20 11:33:43 60:00 6956 2680 imp -1 310410214827503 1449 03/10/20 11:44:34 24:54 0 Onxtgonpho no 3587080982063725 310410214827503 1450 03/10/20 12:09:28 34:27 0 Oruftgonpho no 3587080982063725 310410214827503 1451 03/10/20 12:33:43 60:00 9928 3176 imp -1 310410214827503 1452 03/10/20 12:43:54 2:10 192 Oruftgonpho no 3587080982063725 310410214827503 1453 03/10/20 12:43:55 2:10 0 Onxtgonpho no 3587080982063725 310410214827503 1454 03/10/20 12:46:05 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 1455 03/10/20 13:33:43 60:00 8604 3052 imp -1 310410214827503 1456 03/10/20 13:46:05 19:47 0 Oruftgonpho no 3587080982063725 310410214827503 1457 03/10/20 14:05:51 0:40 192 Oruftgonpho no 3587080982063725 310410214827503 1458 03/10/20 14:05:52 0:40 0 Oruftgonpho no 3587080982063725 310410214827503 1459 03/10/20 14:06:32 1:23 0 Oruftgonpho no 3587080982063725 310410214827503 1460 03/10/20 14:07:54 8:25 192 Oruftgonpho no 3587080982063725 310410214827503 1461 03/10/20 14:07:56 8:24 0 Oruftgonpho no 3587080982063725 310410214827503 1462 03/10/20 14:16:20 58:09 0 Oruftgonpho no 3587080982063725 310410214827503 1463 03/10/20 14:33:43 60:00 13912 6092 imp -1 310410214827503 1464 03/10/20 15:14:28 1:16 192 Oruftgonpho no 3587080982063725 310410214827503 1465 03/10/20 15:14:30 1:16 0 Oruftgonpho no 3587080982063725 310410214827503 1466 03/10/20 15:15:46 2:14 0 Oruftgonpho no 3587080982063725 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ......„,„• 1/4-s `'s AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Ilea Conn. Conn. Originating ET Bytes Bytoa Apn IKI IMSI MAKE MODEL Date Time Number Up Dn (UTC) APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 60 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002704 PsiTniliAL not for general distribution. EFTA_00116780 EFTA01251304 MOBILITY The information contained heraleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .....,./ `•-s"" s AT&T Run Date: Run Time: Data Osage Tor: Itea Conn. Date 06/17/2020 10:55:37 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn INC1 IMBI MARL MOLL 1467 03/10/20 15:17:59 0:57 192 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1468 03/10/20 15:18:00 0:57 0 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1469 03/10/20 15:18:57 4:52 0 Orumgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1470 03/10/20 15:23:48 20:00 192 Orumgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1471 03/10/20 15:23:49 27:14 0 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1472 03/10/20 15:33:43 53:28 16092 5276 imo -1 310410214827503 1473 03/10/20 15:51:03 36:17 0 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1474 03/10/20 16:27:20 1:23 192 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1475 03/10/20 16:27:21 1:22 7232 6864 mos 3587080982063725 310410214827503 APPLE !PHONES 1476 03/10/20 16:27:21 1:23 0 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1477 03/10/20 16:27:22 1:22 6796 6968 mos 3587080982063725 310410214827503 APPLE !PHONES 1478 03/10/20 16:28:35 60:00 18395 12138 mos -1 310410214827503 1479 03/10/20 16:28:44 0:05 0 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1480 03/10/20 16:29:06 1:09 192 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1481 03/10/20 16:29:07 1:09 0 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1482 03/10/20 16:30:16 7:18 0 Onamgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1483 03/10/20 16:37:33 2:30 192 Onamgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1484 03/10/20 16:37:34 2:31 0 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1485 03/10/20 16:40:04 24:25 192 Orumgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1486 03/10/20 16:40:05 24:25 0 Orumgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1487 03/10/20 17:04:31 0:36 0 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1488 03/10/20 17:05:06 2:10 192 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 61 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002705 NTifikE not for general distribution. EF-EA_00116781 EFTA01251305 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. 411., AT&T Run Date: Run Tame: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Hunter ET Byte. Up Byte. Apn Dn INLI INBI HAKE 1489 03/10/20 17:05:07 2:10 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1490 03/10/20 17:07:17 6:45 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1491 03/10/20 17:14:01 2:09 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1492 03/10/20 17:14:02 2:09 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1493 03/10/20 17:16:11 1:26 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1494 03/10/20 17:17:36 4:47 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1495 03/10/20 17:17:37 4:47 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1496 03/10/20 17:22:25 2:41 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1497 03/10/20 17:25:06 18:51 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1498 03/10/20 17:28:35 60:00 25256 17492 imo -1 310410214827503 1499 03/10/20 17:41:29 0:04 0 4743 imo -1 310410214827503 1500 03/10/20 17:43:37 0:21 0 40524 imp -1 310410214827503 1501 03/10/20 17:43:57 38:21 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1502 03/10/20 17:43:58 38:21 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1503 03/10/20 18:22:19 2:30 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1504 03/10/20 18:24:49 0:40 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1505 03/10/20 18:24:50 0:40 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1506 03/10/20 18:25:30 4:37 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1507 03/10/20 18:28:35 60:00 16008 10668 imp -1 310410214827503 1508 03/10/20 18:30:06 2:10 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1509 03/10/20 18:30:07 2:10 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1510 03/10/20 18:32:17 5:41 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1511 03/10/20 18:36:19 0:03 0 4743 in -1 310410214827503 MOLL IPHONEB IPHONEB !PHONES !PHONES 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 62 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002706 NeTilikk not for general distribution. EF-EAJVII6782 EFTA01251306 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and (ITC. provided in 41011, AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:66:37 Conn. Originating ET Time Humber (OTC) Bytes Up Byte. Apn Dn INEI IMBI MARL NICOLL 1512 03/10/20 18:37:58 52:57 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1513 03/10/20 18:37:59 52:57 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1514 03/10/20 19:28:35 60:00 13460 4500 imp -1 310410214827503 1515 03/10/20 19:30:56 54:37 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1516 03/10/20 20:25:32 2:14 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1517 03/10/20 20:25:33 2:14 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1518 03/10/20 20:27:47 19:12 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1519 03/10/20 20:28:35 60:00 6924 2788 imp -1 310410214827503 1520 03/10/20 20:46:58 15:19 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1521 03/10/20 20:46:59 15:19 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1522 03/10/20 21:02:18 21:25 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1523 03/10/20 21:23:42 3:11 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1524 03/10/20 21:23:43 3:11 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1525 03/10/20 21:26:53 8:23 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1526 03/10/20 21:26:54 8:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1527 03/10/20 21:28:35 60:00 10656 4288 imp -1 310410214827503 1528 03/10/20 21:35:17 1:15 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1529 03/10/20 21:36:32 7:33 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1530 03/10/20 21:44:05 10:19 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1531 03/10/20 21:44:06 10:19 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1532 03/10/20 21:54:25 2:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1533 03/10/20 21:54:26 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002707 not for general distribution. Page 63 EF-EA_00116783 EFTA01251307 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 16:53:37 Conn. Originating ET Time flusher (OTC) Bytes 017 Byte. Apn Dn INEZ IMEI MARL 1534 03/10/20 21:56:35 27:45 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1535 03/10/20 22:24:20 64:28 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1536 03/10/20 22:24:21 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1537 03/10/20 22:28:35 60:00 24512 11828 imo -1 310410214827503 1538 03/10/20 23:20:52 0:01 0 0 imo -1 310410214827503 1539 03/10/20 23:20:55 0:03 0 1356 imo -1 310410214827503 1540 03/10/20 23:24:21 4:28 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1541 03/10/20 23:28:35 60:00 11796 4376 imo -1 310410214827503 1542 03/10/20 23:28:49 47:34 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1543 03/11/20 00:16:23 0:54 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1544 03/11/20 00:17:16 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1545 03/11/20 00:17:17 2:10 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1546 03/11/20 00:19:26 5:58 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1547 03/11/20 00:25:23 5:22 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1548 03/11/20 00:25:24 5:22 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1549 03/11/20 00:28:35 60:00 7048 2912 imo -1 310410214827503 1550 03/11/20 00:30:46 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1551 03/11/20 01:28:35 59:42 8604 3160 imo -1 310410214827503 1552 03/11/20 01:30:46 52:17 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1553 03/11/20 02:24:15 2:47 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1554 03/11/20 02:27:01 70:00 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1555 03/11/20 02:27:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1556 03/11/20 02:27:28 15:13 6353 33200 imp 3587080982063725 310410214827503 APPLE 1557 03/11/20 02:27:29 15:13 6672 6089 ims 3587080982063725 310410214827503 APPLE NADEL 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 64 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002708 PsisTfikE not for general distribution. EF-EAJVII6784 EFTA01251308 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ••-..„,ed "."1. AT&T Run Date: Run Tama: Data Usage Tor: Item Conn. Data 06/17/2020 10:56:37 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apn Dn INEZ IMISI MARL 1558 03/11/20 02:28:17 60:00 8371 6178 imp -1 310410214827503 1559 03/11/20 02:42:36 60:00 15069 8676 imp -1 310410214827503 1560 03/11/20 03:27:02 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1561 03/11/20 03:28:17 60:00 0 0 imp -1 310410214827503 1562 03/11/20 03:42:36 56:47 13320 5856 imp -1 310410214827503 1563 03/11/20 04:27:02 4:24 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1564 03/11/20 04:28:17 3:12 0 0 imp -1 310410214827503 1565 03/11/20 04:31:26 3:35 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1566 03/11/20 04:31:29 0:00 0 0 imp 3587080982063725 310410214827503 APPLE 1567 03/11/20 04:35:00 7:56 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1568 03/11/20 04:35:01 7:56 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1569 03/11/20 04:39:23 60:00 16467 9128 imp -1 310410214827503 1570 03/11/20 04:42:57 21:02 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1571 03/11/20 05:03:58 8:20 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1572 03/11/20 05:03:59 8:20 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1573 03/11/20 05:12:19 8:19 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1574 03/11/20 05:20:37 21:06 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1575 03/11/20 05:20:38 21:06 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1576 03/11/20 05:39:23 60:00 7032 2756 imp -1 310410214827503 1577 03/11/20 05:41:44 29:04 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1578 03/11/20 06:10:47 2:09 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1579 03/11/20 06:10:49 2:08 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1580 03/11/20 06:12:58 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1581 03/11/20 06:39:23 60:00 6816 2540 imp -1 310410214827503 MODEL !PHONES !PRONGS !PHONES !PHONES IPHONEB !PHONES !PHONES IPHONEB IPHOME8 !PHONES !PHONES IPHOME8 !PHONES !PHONES !PHONES IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 65 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002709 NsToliAL not for general distribution. EF-EA_00116785 EFTA01251309 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Data: Run Tama: Data usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating ',umber Er Ayres Op Bytom Apn on IKI IMBI mon 1582 03/11/20 07:12:58 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1583 03/11/20 07:39:23 60:00 8388 3144 imo -1 310410214827503 1584 03/11/20 08:12:58 33:16 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1585 03/11/20 08:39:23 60:00 6816 2896 imp -1 310410214827503 1586 03/11/20 08:46:13 2:09 192 Onatgonpho no 3587080982063725 310410214827503 APPLE 1587 03/11/20 08:46:14 2:09 0 Onatgonpho no 3587080982063725 310410214827503 APPLE 1588 03/11/20 08:48:23 55:08 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1589 03/11/20 09:39:23 60:00 13524 5520 imp -1 310410214827503 1590 03/11/20 09:43:30 2:09 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1591 03/11/20 09:43:31 2:09 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1592 03/11/20 09:45:40 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1593 03/11/20 10:39:23 60:00 7140 2788 into -1 310410214827503 1594 03/11/20 10:45:40 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1595 03/11/20 11:39:23 44:33 3516 1340 into -1 310410214827503 1596 03/11/20 11:45:40 36:54 0 Onatgonpho no 3587080982063725 310410214827503 APPLE 1597 03/11/20 12:22:33 2:10 192 Onatgonpho no 3587080982063725 310410214827503 APPLE 1598 03/11/20 12:22:34 2:10 0 Onatgonpho no 3587080982063725 310410214827503 APPLE 1599 03/11/20 12:22:38 2:05 6439 8606 into 3587080982063725 310410214827503 APPLE 1600 03/11/20 12:22:39 2:05 8462 6175 into 3587080982063725 310410214827503 APPLE 1601 03/11/20 12:23:56 60:00 16789 9202 into -1 310410214827503 1602 03/11/20 12:24:44 22:13 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1603 03/11/20 12:46:56 8:20 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1604 03/11/20 12:46:57 8:20 0 Onatgonpho no 3587080982063725 310410214827503 APPLE 1605 03/11/20 12:55:17 60:00 0 Onatgonpho no 3587080982063725 310410214827503 APPLE !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 TPRONE8 !PHONES !PHONES !PHONES IPHONE8 TPRONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 66 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002710 N:FroliAL not for general distribution. EFTAJVII6786 EFTA01251310 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. ap. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 ISM Conn. Originating LT Time Number (OTC) Bytes UP Bytes Apn Dn INZI INS' MARL 1606 03/11/20 13:23:56 60:00 6956 2988 ins -1 310410214827503 1607 03/11/20 13:55:17 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1608 03/11/20 14:23:56 60:00 6940 2756 ins -1 310410214827503 1609 03/11/20 14:55:17 19:02 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1610 03/11/20 15:14:18 2:01 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1611 03/11/20 15:14:19 2:01 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1612 03/11/20 15:16:20 0:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1613 03/11/20 15:16:51 2:10 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1614 03/11/20 15:16:52 2:10 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1615 03/11/20 15:19:02 32:43 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1616 03/11/20 15:23:56 16:09 3532 1324 ins 3587080982063725 310410214827503 APPLE 1617 03/11/20 15:40:05 0:24 2768 1324 ins 3587080982063725 310410214827503 APPLE 1618 03/11/20 15:40:05 0:24 2704 1324 ins 3587080982063725 310410214827503 APPLE 1619 03/11/20 15:40:29 11:44 4964 1680 ins 3587080982063725 310410214827503 APPLE 1620 03/11/20 15:51:45 2:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1621 03/11/20 15:51:46 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1622 03/11/20 15:52:12 1:05 6370 7972 ins 3587080982063725 310410214827503 APPLE 1623 03/11/20 15:52:13 1:05 7972 6106 ins 3587080982063725 310410214827503 APPLE 1624 03/11/20 15:52:58 0:21 11358 6562 ins -1 310410214827503 1625 03/11/20 15:53:16 0:38 6244 6668 ins 3587080982063725 310410214827503 APPLE 1626 03/11/20 15:53:17 0:38 6668 5980 ins 3587080982063725 310410214827503 APPLE 1627 03/11/20 15:53:46 0:56 8511 6170 ins -1 310410214827503 1628 03/11/20 15:53:55 0:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1629 03/11/20 15:54:36 2:10 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1630 03/11/20 15:54:37 2:10 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1631 03/11/20 15:54:40 2:06 6262 6666 imp 3587080982063725 310410214827503 APPLE 1632 03/11/20 15:54:42 2:05 6666 5998 imp 3587080982063725 310410214827503 APPLE NICOLL IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002711 NeTtAdti not for general distribution. Page 67 EF-EA_00116787 EFTA01251311 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tras ""i s AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:66:37 Conn. Time (UTC) originating Number ET Bytes Up Bytes Apn Dn INEZ IMSI MARL MODEL 1633 03/11/20 15:55:34 60:00 18402 10186 ims -1 310410214827503 1634 03/11/20 15:56:47 23:07 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1635 03/11/20 16:19:54 2:19 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1636 03/11/20 16:19:55 2:20 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1637 03/11/20 16:22:15 31:18 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1638 03/11/20 16:53:32 8:20 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1639 03/11/20 16:53:33 8:21 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONEB 1640 03/11/20 16:55:34 60:00 8496 3144 ims -1 310410214827503 1641 03/11/20 17:01:53 7:53 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1642 03/11/20 17:09:46 0:47 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1643 03/11/20 17:10:32 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1644 03/11/20 17:10:33 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1645 03/11/20 17:12:42 30:27 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1646 03/11/20 17:43:08 2:10 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1647 03/11/20 17:43:10 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1648 03/11/20 17:45:19 11:39 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE /PHONES 1649 03/11/20 17:55:34 60:00 8496 3036 ims -1 310410214827503 1650 03/11/20 17:56:58 61:35 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1651 03/11/20 17:56:59 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1652 03/11/20 18:55:34 60:00 8588 3052 ims -1 310410214827503 1653 03/11/20 18:56:59 1:35 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1654 03/11/20 18:58:34 6:44 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002712 not for general distribution. Page 68 EF-EAJVII6788 EFTA01251312 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. .....,0 ••—••• `"Ie AT&T Run Data: Run Time: Data Osage For: Ilea Conn. Data 06/17/2020 18:55:38 Conn. Time (OTC) originating Sumter ET Bytes Up Byte. Apn On IIBI IMBI MAfl SCOEL 1655 03/11/20 19:05:17 21:01 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1656 03/11/20 19:05:18 21:01 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1657 03/11/20 19:26:19 14:15 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1658 03/11/20 19:40:33 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1659 03/11/20 19:40:34 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPROME8 1660 03/11/20 19:42:43 10:04 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1661 03/11/20 19:52:46 2:10 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1662 03/11/20 19:52:48 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1663 03/11/20 19:54:57 27:31 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1664 03/11/20 19:55:34 60:00 7188 2804 ims -1 310410214827503 1665 03/11/20 20:22:27 4:17 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1666 03/11/20 20:22:28 4:17 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1667 03/11/20 20:26:45 31:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1668 03/11/20 20:55:34 60:00 41608 20964 ims -1 310410214827503 1669 03/11/20 20:57:06 0:24 19460 45298 ims -1 310410214827503 1670 03/11/20 20:57:54 5:20 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1671 03/11/20 20:57:55 5:20 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1672 03/11/20 21:03:16 24:05 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1673 03/11/20 21:27:20 2:10 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1674 03/11/20 21:27:21 2:10 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1675 03/11/20 21:29:31 5:23 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1676 03/11/20 21:34:53 2:45 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 11080=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002713 not for general distribution. Page 69 EFTA_00116789 EFTA01251313 MOBILITY The information contained hereleoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT4T'S records ere stored and provided in (ITC. 4110. tera d ei ‘ing° AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number TT Bytes Up Bytom Apn On Tier IMBI teUtr MODEL 1677 03/11/20 21:34:54 2:45 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONE8 1678 03/11/20 21:36:21 0:24 16926 44638 ims -1 310410214827503 1679 03/11/20 21:37:38 8:33 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONZ8 1680 03/11/20 21:37:39 8:33 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1681 03/11/20 21:46:12 2:53 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1682 03/11/20 21:48:10 0:24 36612 45576 ims -1 310410214827503 1683 03/11/20 21:49:04 1:41 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONZ8 1684 03/11/20 21:49:05 1:41 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1685 03/11/20 21:50:45 2:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1686 03/11/20 21:50:46 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONE8 1687 03/11/20 21:52:55 4:37 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1688 03/11/20 21:55:34 60:00 23372 11084 ipso -1 310410214827503 1689 03/11/20 21:56:29 0:24 15044 47925 ipso -1 310410214827503 1690 03/11/20 21:57:31 2:32 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONZ8 1691 03/11/20 21:57:32 2:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1692 03/11/20 22:00:04 16:53 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1693 03/11/20 22:16:57 2:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1694 03/11/20 22:16:58 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONE8 1695 03/11/20 22:19:08 33:25 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1696 03/11/20 22:52:32 8:24 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1697 03/11/20 22:52:33 8:24 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1698 03/11/20 22:55:34 11:56 0 0 imp -1 310410214827503 1699 03/11/20 23:00:57 1:54 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002714 not for general distribution. Page 70 EF-EA_00116790 EFTA01251314 The information contained heraleeNe 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and arc. provided in 411111i AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 16:55:36 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn On INZI IMaI MARL 1700 03/11/20 23:02:51 14:31 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1701 03/11/20 23:02:52 14:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1702 03/11/20 23:03:05 14:17 6204 6742 imo 3587080982063725 310410214827503 APPLE 1703 03/11/20 23:03:06 14:18 6674 5940 ims 3587080982063725 310410214827503 APPLE 1704 03/11/20 23:17:24 10:02 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1705 03/11/20 23:17:29 60:00 16825 9216 imo -1 310410214827503 1706 03/11/20 23:27:25 8:34 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1707 03/11/20 23:27:26 8:34 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1708 03/11/20 23:36:00 40:21 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1709 03/12/20 00:16:20 6:06 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1710 03/12/20 00:16:21 6:06 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1711 03/12/20 00:17:29 9:41 0 0 ims -1 310410214827503 1712 03/12/20 00:22:27 39:48 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1713 03/12/20 00:32:04 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 1714 03/12/20 00:32:10 0:16 6670 5998 ims 3587080982063725 310410214827503 APPLE 1715 03/12/20 00:32:26 3:19 13976 7532 ims 3587080982063725 310410214827503 APPLE 1716 03/12/20 00:35:45 0:32 4276 1696 ims 3587080982063725 310410214827503 APPLE 1717 03/12/20 00:36:17 60:00 12136 4376 ims 3587080982063725 310410214827503 APPLE 1718 03/12/20 01:02:14 14:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1719 03/12/20 01:02:15 14:10 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1720 03/12/20 01:16:25 20:21 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1721 03/12/20 01:36:17 54:55 8388 3020 ims 3587080982063725 310410214827503 APPLE 1722 03/12/20 01:36:46 14:19 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1723 03/12/20 01:51:04 2:35 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1724 03/12/20 01:51:05 2:35 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL INIONE8 110MONE8 110MONE8 DRONES !PHONES /DRONES DRONES DRONES !PHONES !PHONES DRONES DRONES DRONES DRONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES DRONES AT&T Proprietary The AT&T network constahtly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002715 NeTiliAL not for general distribution. Page 71 EF-EA_00116791 EFTA01251315 The information contained heraleeNeli 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 1/4 ..zeo `'. AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 111:65:38 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn INEI IMSI Ma= MODEL 1725 03/12/20 01:53:40 8:44 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONZ8 1726 03/12/20 01:53:41 8:44 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 1727 03/12/20 02:02:25 4:58 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1728 03/12/20 02:07:22 90:00 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1729 03/12/20 02:07:23 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1730 03/12/20 02:31:11 70:00 6226 6646 ins 3587080982063725 310410214827503 APPLE IPROME8 1731 03/12/20 02:31:12 60:00 6646 6070 ins 3587080982063725 310410214827503 APPLE IPROME8 1732 03/12/20 02:33:14 60:00 16043 9169 ins -1 310410214827503 1733 03/12/20 03:07:23 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1734 03/12/20 03:31:12 55:35 0 0 ins 3587080982063725 310410214827503 APPLE IPROME8 1735 03/12/20 03:33:14 60:00 6816 2648 ins -1 310410214827503 1736 03/12/20 04:07:23 19:24 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1737 03/12/20 04:26:46 240:03 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1738 03/12/20 04:26:47 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1739 03/12/20 04:33:14 60:00 6816 2788 imp -1 310410214827503 1740 03/12/20 05:26:47 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1741 03/12/20 05:33:14 60:00 8836 3144 imp -1 310410214827503 1742 03/12/20 06:26:47 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1743 03/12/20 06:33:14 60:00 6816 2680 ims -1 310410214827503 1744 03/12/20 07:26:47 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1745 03/12/20 07:33:14 60:00 15312 6108 ims -1 310410214827503 1746 03/12/20 08:26:47 0:03 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1747 03/12/20 08:33:14 60:00 6924 2680 ims -1 310410214827503 1748 03/12/20 08:48:31 114:46 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1749 03/12/20 08:48:32 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 72 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002716 PsiTifikE not for general distribution. EF-EAJVII6792 EFTA01251316 MOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. tt amaii/ ‘"I° AT&T Run Data: Run Time: Data Osage for: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Op Byte. Apn Dn IMEI INSI 1750 03/12/20 09:33:14 60:00 6816 '2680 ims -1 310410214827503 1751 03/12/20 09:48:32 54:46 0 Onxtgonpho no 3587080982063725 310410214827503 1752 03/12/20 10:33:14 60:00 13352 4716 ims -1 310410214827503 1753 03/12/20 10:43:18 55:17 192 Onxtgonpho no 3587080982063725 310410214827503 1754 03/12/20 10:43:19 55:17 0 Onxtgonpho no 3587080982063725 310410214827503 1755 03/12/20 11:33:14 60:00 7048 2696 ims -1 310410214827503 1756 03/12/20 11:38:36 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 1757 03/12/20 12:33:14 46:01 23828 16392 ims -1 310410214827503 1758 03/12/20 12:38:36 10:29 0 Oruftgonpho no 3587080982063725 310410214827503 1759 03/12/20 12:49:04 1:58 192 Oruftgonpho no 3587080982063725 310410214827503 1760 03/12/20 12:49:06 1:57 0 Oruftgonpho no 3587080982063725 310410214827503 1761 03/12/20 12:51:03 4:18 0 Oruftgonpho no 3587080982063725 310410214827503 1762 03/12/20 12:55:20 2:13 192 Onxtgonpho no 3587080982063725 310410214827503 1763 03/12/20 12:55:21 2:13 0 Onxtgonpho no 3587080982063725 310410214827503 1764 03/12/20 12:57:34 5:28 0 Oruftgonpho no 3587080982063725 310410214827503 1765 03/12/20 13:03:01 3:17 192 Onxtgonpho no 3587080982063725 310410214827503 1766 03/12/20 13:03:02 3:17 0 Onxtgonpho no 3587080982063725 310410214827503 1767 03/12/20 13:06:19 0:37 0 Oruftgonpho no 3587080982063725 310410214827503 1768 03/12/20 13:06:55 8:47 192 Oruftgonpho no 3587080982063725 310410214827503 1769 03/12/20 13:06:56 8:48 0 Oruftgonpho no 3587080982063725 310410214827503 1770 03/12/20 13:15:43 2:19 192 Oruftgonpho no 3587080982063725 310410214827503 1771 03/12/20 13:15:44 2:19 0 Oruftgonpho no 3587080982063725 310410214827503 MARL MODEL APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 73 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002717 PsiTniliAL not for general distribution. EF-EAJVII6793 EFTA01251317 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41011, AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Data Time (UTC) Originating ET Bytes Byte. Apn INTI IMBI Han MOTS Number Up On 1772 03/12/20 13:18:03 2:44 0 1773 03/12/20 13:20:16 1:19 19792 1774 03/12/20 13:20:46 1:39 192 1775 03/12/20 13:20:48 1:38 0 1776 03/12/20 13:22:26 2:48 0 1777 03/12/20 13:22:28 2:46 8904 1778 03/12/20 13:25:14 2:09 192 1779 03/12/20 13:25:15 2:08 7096 1780 03/12/20 13:25:15 2:09 0 1781 03/12/20 13:25:16 2:08 6742 1782 03/12/20 13:26:04 60:00 16699 1783 03/12/20 13:27:24 60:00 0 1784 03/12/20 14:26:04 60:00 7188 1785 03/12/20 14:27:24 60:00 0 1786 03/12/20 15:26:04 60:00 24520 1787 03/12/20 15:27:24 60:00 0 1788 03/12/20 16:00:27 7:27 1180538 1789 03/12/20 16:26:04 60:00 7064 1790 03/12/20 16:27:24 60:01 0 1791 03/12/20 17:26:04 60:00 12044 1792 03/12/20 17:27:26 45:17 0 1793 03/12/20 18:08:59 0:00 0 1794 03/12/20 18:09:58 60:00 25799 1795 03/12/20 18:12:16 0:23 30532 1796 03/12/20 18:12:42 8:26 192 1797 03/12/20 18:12:43 8:26 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 12737 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no 7088 imp 3587080982063725 310410214827503 APPLE 110)(01428 Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no 6742 ims 3587080982063725 310410214827503 APPLE INIONE8 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 6832 ims 3587080982063725 310410214827503 APPLE INIONE8 9051 ims -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 2896 ims -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 13060 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1151123 ins -1 310410214827503 2896 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 4672 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 0 ins 3587080982063725 310410214827503 APPLE INIONE8 15893 ins -1 310410214827503 40404 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 74 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002718 NeTtikE not for general distribution. EF-EA_00116794 EFTA01251318 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records are stored and provided in 4111. c• ad `s-'s AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 10:55:38 Item Conn. Conn. Date Time (OTC) Originating CT Bytes Bytes Apn INEZ IMSI NIUM MOLL Number Up Dn 1798 03/12/20 18:21:09 55:07 0 0 nxtgonpho no 3587080982063725 310410214827503 1799 03/12/20 18:26:04 55:32 0 0 ims -1 310410214827503 1800 03/12/20 19:09:58 9:30 4856 2712 ims -1 310410214827503 1801 03/12/20 19:16:15 2:10 192 Ormagenpho no 3587080982063725 310410214827503 1802 03/12/20 19:16:16 2:10 0 Onmtgenpho no 3587080982063725 310410214827503 1803 03/12/20 19:18:26 1:37 0 0 nxtgonpho no 3587080982063725 310410214827503 1804 03/12/20 19:20:02 6:01 192 0 nxtgonpho no 3587080982063725 310410214827503 1805 03/12/20 19:20:03 6:00 6352 6648 ims 3587080982063725 310410214827503 1806 03/12/20 19:20:03 6:01 0 0 nxtgonpho no 3587080982063725 310410214827503 1807 03/12/20 19:20:04 6:00 6648 6088 ims 3587080982063725 310410214827503 1808 03/12/20 19:21:36 0:56 15122 11060 ims -1 310410214827503 1809 03/12/20 19:22:44 0:30 13547 10699 ims -1 310410214827503 1810 03/12/20 19:23:30 60:00 44687 29586 ims -1 310410214827503 1811 03/12/20 19:26:04 7:32 0 0 nxtgonpho no 3587080982063725 310410214827503 1812 03/12/20 19:33:35 2:10 192 Ormagenpho no 3587080982063725 310410214827503 1813 03/12/20 19:33:36 2:10 0 Ormagenpho no 3587080982063725 310410214827503 1814 03/12/20 19:34:21 1:15 167363 118968 ims -1 310410214827503 1815 03/12/20 19:35:46 5:54 0 0 nxtgonpho no 3587080982063725 310410214827503 1816 03/12/20 19:39:03 0:14 0 0 ims -1 310410214827503 1817 03/12/20 19:41:40 2:09 192 Onmtgenpho no 3587080982063725 310410214827503 1818 03/12/20 19:41:41 2:09 0 Onmtgenpho no 3587080982063725 310410214827503 1819 03/12/20 19:43:50 1:07 0 Onmtgenpho no 3587080982063725 310410214827503 1820 03/12/20 19:44:56 2:12 192 Ormagenpho no 3587080982063725 310410214827503 1821 03/12/20 19:44:57 2:12 0 Ormagenpho no 3587080982063725 310410214827503 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE IPMONE8 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 75 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002719 NeTniiiikE not for general distribution. EF-EAJVII6795 EFTA01251319 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in (ITC. 411111, AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating TT Time Number (OTC) Bytes Up Byte. Apn Dn IKI IMBI MAfl 1822 03/12/20 19:47:09 2:44 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1823 03/12/20 19:49:32 0:24 51463 45228 ins -1 310410214827503 1824 03/12/20 19:49:52 0:43 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1825 03/12/20 19:49:53 0:43 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1826 03/12/20 19:50:36 30:57 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1827 03/12/20 20:21:32 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1828 03/12/20 20:21:33 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1829 03/12/20 20:23:30 60:00 7048 3004 ins -1 310410214827503 1830 03/12/20 20:23:42 42:51 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1831 03/12/20 21:06:32 14:44 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1832 03/12/20 21:06:33 14:44 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1833 03/12/20 21:21:17 8:01 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1834 03/12/20 21:23:30 60:00 6924 2788 ins -1 310410214827503 1835 03/12/20 21:29:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1836 03/12/20 22:23:30 60:00 13476 4500 ins -1 310410214827503 1837 03/12/20 22:29:18 45:03 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1838 03/12/20 23:14:22 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1839 03/12/20 23:23:30 60:00 10300 3408 imp -1 310410214827503 1840 03/13/20 00:14:22 51:33 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1841 03/13/20 00:23:30 60:00 14864 4872 imp -1 310410214827503 1842 03/13/20 01:05:54 92:25 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1843 03/13/20 01:05:55 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1844 03/13/20 01:23:30 60:00 14600 4656 ims -1 310410214827503 1845 03/13/20 02:05:55 32:25 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE MOLL !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002720 NeTniliAL not for general distribution. Page 76 EFTA_00116796 EFTA01251320 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage Tor: Ilea Conn. Date 06/17/2020 Conn. originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INZI INS' KARL NICOLL 1846 03/13/20 02:23:30 60:00 8820 3252 ins -1 310410214827503 1847 03/13/20 02:38:20 60:00 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1848 03/13/20 02:38:21 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1849 03/13/20 03:23:30 40:50 12092 6752 ins -1 310410214827503 1850 03/13/20 03:38:21 12:11 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1851 03/13/20 03:50:31 2:55 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1852 03/13/20 03:50:32 2:55 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1853 03/13/20 03:53:27 10:51 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1854 03/13/20 03:53:28 10:51 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1855 03/13/20 04:08:13 34:28 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1856 03/13/20 04:08:14 34:28 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1857 03/13/20 04:08:52 0:44 7459 8824 ins 3587080982063725 310410214827503 APPLE !PHONES 1858 03/13/20 04:08:53 0:44 8824 7107 ins 3587080982063725 310410214827503 APPLE IPMONE8 1859 03/13/20 04:09:08 0:01 0 0 ins -1 310410214827503 1860 03/13/20 04:09:21 0:19 6244 6754 in 3587080982063725 310410214827503 APPLE IPMONE8 1861 03/13/20 04:09:22 0:19 6690 5980 in 3587080982063725 310410214827503 APPLE !PHONES 1862 03/13/20 04:09:37 0:03 2565 1210 in -1 310410214827503 1863 03/13/20 04:09:39 0:20 6344 6674 in 3587080982063725 310410214827503 APPLE !PHONES 1864 03/13/20 04:09:40 0:20 6674 6080 in 3587080982063725 310410214827503 APPLE !PHONES 1865 03/13/20 04:09:56 0:04 2565 1212 in -1 310410214827503 1866 03/13/20 04:09:59 0:36 8342 8629 1ms 3587080982063725 310410214827503 APPLE !PHONES 1867 03/13/20 04:10:00 0:36 8629 8078 ime 3587080982063725 310410214827503 APPLE !PHONES 1868 03/13/20 04:10:14 0:01 0 0 ins -1 310410214827503 1869 03/13/20 04:10:19 32:22 7376 6864 imp 3587080982063725 310410214827503 APPLE IPMONE8 1870 03/13/20 04:10:20 32:22 6800 7112 imp 3587080982063725 310410214827503 APPLE IPMONE8 1871 03/13/20 04:10:35 60:00 15405 9050 imp -1 310410214827503 1872 03/13/20 04:42:08 0:35 3412 9535 nxtgonpho no -1 310410214827503 1873 03/13/20 04:42:42 82:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002721 not for general distribution. Page 77 EF-EAJVII6797 EFTA01251321 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 411.1 trad '`s s AT&T Run Data: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn ICI IMSI MARL MOLL 1874 03/13/20 04:42:43 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1875 03/13/20 05:10:35 60:00 6848 2664 imp -1 310410214827503 1876 03/13/20 05:42:43 22:11 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1877 03/13/20 06:04:53 2:22 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1878 03/13/20 06:04:54 2:22 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1879 03/13/20 06:07:15 6:06 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1880 03/13/20 06:07:17 6:05 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1881 03/13/20 06:10:35 60:00 8372 2912 imp -1 310410214827503 1882 03/13/20 06:13:22 0:47 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1883 03/13/20 06:14:09 18:41 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1884 03/13/20 06:14:10 18:41 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1885 03/13/20 06:32:51 58:16 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1886 03/13/20 07:10:35 60:00 6956 2788 imo -1 310410214827503 1887 03/13/20 08:10:35 60:00 17084 7312 imo -1 310410214827503 1888 03/13/20 09:10:35 60:00 8496 3036 imo -1 310410214827503 1889 03/13/20 10:10:35 60:00 9912 3176 in -1 310410214827503 1890 03/13/20 11:10:35 60:00 10052 3284 ims -1 310410214827503 1891 03/13/20 12:10:35 60:00 11920 4268 isms -1 310410214827503 1892 03/13/20 12:38:02 9:35 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1893 03/13/20 12:38:03 9:35 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1894 03/13/20 12:47:37 25:08 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1895 03/13/20 12:47:38 25:08 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1896 03/13/20 13:10:35 10:57 0 0 imp -1 310410214827503 1897 03/13/20 13:12:46 2:03 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 78 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002722 NeTniliAL not for general distribution. EF-EA_00116798 EFTA01251322 MOBILITY The information contained hereCoNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in .....al s# 46.4.."1. AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 14:55:38 Item Conn. Conn. Date Time Originating Number ET Bytes Up Byte. Dn Apn IKE I INSI MODEL (UTC) 1898 03/13/20 13:12:47 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 1899 03/13/20 13:14:50 21:25 0 0 nxtgonpho no 3587080982063726 310410214827503 1900 03/13/20 13:21:33 60:00 15267 8752 lee -1 310410214827503 1901 03/13/20 13:36:15 4:11 0 0 nxtgonpho no 3587080982063726 310410214827503 1902 03/13/20 13:40:25 120:00 192 0 nxtgonpho no 3587080982063726 310410214827503 1903 03/13/20 13:40:26 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 1904 03/13/20 14:21:33 60:00 8372 3112 lee -1 310410214827503 1905 03/13/20 14:40:26 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 1906 03/13/20 15:21:33 60:00 8512 3912 lee -1 310410214827503 1907 03/13/20 15:40:26 55:16 0 0 nxtgonpho no 3587080982063726 310410214827503 1908 03/13/20 16:21:33 59:35 18408 11284 lee -1 310410214827503 1909 03/13/20 16:33:05 0:25 42857 50460 lee -1 310410214827503 1910 03/13/20 16:35:42 1:50 0 0 nxtgonpho no 3587080982063726 310410214827503 1911 03/13/20 16:37:31 2:17 192 Onxtgonpho no 3587080982063726 310410214827503 1912 03/13/20 16:37:32 2:17 0 0 nxtgonpho no 3587080982063726 310410214827503 1913 03/13/20 16:39:49 22:25 0 0 nxtgonpho no 3587080982063726 310410214827503 1914 03/13/20 16:54:03 22:47 15237 10960 imo -1 310410214827503 1915 03/13/20 17:02:13 5:32 192 0 nxtgonpho no 3587080982063726 310410214827503 1916 03/13/20 17:02:14 5:32 0 0 nxtgonpho no 3587080982063726 310410214827503 1917 03/13/20 17:07:46 13:19 192 0 nxtgonpho no 3587080982063726 310410214827503 1918 03/13/20 17:07:47 13:19 0 0 nxtgonpho no 3587080982063726 310410214827503 1919 03/13/20 17:17:55 8:43 8193 6048 lee -1 310410214827503 1920 03/13/20 17:21:06 39:09 192 0 nxtgonpho no 3587080982063726 310410214827503 1921 03/13/20 17:21:07 39:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE ITMONE8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002723 NeTnilikk not for general distribution. Page 79 EFTA_00116799 EFTA01251323 MOBILITY The information contained heraleeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and OTC. provided in 411., AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Byte. apn Dn fuzz INS I MAKE 1922 03/13/20 17:21:08 0:00 0 0 imp 3587080982063726 310410214827503 APPLE 1923 03/13/20 17:21:15 39:00 6372 6676 imp 3587080982063726 310410214827503 APPLE 1924 03/13/20 17:21:16 39:00 6676 6108 imp 3587080982063726 310410214827503 APPLE 1925 03/13/20 17:29:41 60:00 25131 14008 imp -1 310410214827503 1926 03/13/20 17:59:27 0:23 14717 40025 imp -1 310410214827503 1927 03/13/20 18:00:17 10:30 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1928 03/13/20 18:10:46 79:05 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1929 03/13/20 18:10:47 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1930 03/13/20 18:29:41 60:00 7156 2988 imp -1 310410214827503 1931 03/13/20 19:10:47 19:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1932 03/13/20 19:29:41 60:00 6816 2756 imp -1 310410214827503 1933 03/13/20 19:29:51 53:02 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1934 03/13/20 19:29:52 53:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1935 03/13/20 20:22:54 8:56 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1936 03/13/20 20:29:41 30:16 3640 1448 imp -1 310410214827503 1937 03/13/20 20:31:49 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1938 03/13/20 20:31:50 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1939 03/13/20 20:33:54 3:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1940 03/13/20 20:37:16 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1941 03/13/20 20:37:17 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1942 03/13/20 20:39:20 5:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1943 03/13/20 20:44:59 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1944 03/13/20 20:45:00 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1945 03/13/20 20:47:04 0:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL INIONE8 INIONE8 INIONE8 DRONES INIONE8 INIONE8 IrMONZ8 IrMONZ8 INIONE8 INIONE8 IrMONZ8 INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002724 PsiTniliAL not for general distribution. Page 80 EF-EA_00116800 EFTA01251324 MOBILITY The information contained here(34E:)upSiyf::tli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ..„,,,• ••-s` a. AT&T Run Data: Run Time: Data Usage For: 06/17/2020 18:55:38 Ilea Conn. Conn. Data Time Originating Rumbas TT Bytes Byte. Min Up Dn INBI teUtt NICOLL (UTC) 1946 03/13/20 20:47:40 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 1947 03/13/20 20:47:41 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 1948 03/13/20 20:49:45 1:18 0 0 nxtgonpho no 3587080982063726 310410214827503 1949 03/13/20 20:51:02 8:51 192 0 nxtgonpho no 3587080982063726 310410214827503 1950 03/13/20 20:51:03 8:51 0 0 nxtgonpho no 3587080982063726 310410214827503 1951 03/13/20 20:51:10 13:44 8373 6106 ins -1 310410214827503 1952 03/13/20 20:59:54 2:10 192 Onxtgonpho no 3587080982063726 310410214827503 1953 03/13/20 20:59:55 2:11 0 Onxtgonpho no 3587080982063726 310410214827503 1954 03/13/20 20:59:56 2:08 7136 6746 ins 3587080982063726 310410214827503 1955 03/13/20 20:59:57 2:09 6746 6872 ins 3587080982063726 310410214827503 1956 03/13/20 21:02:06 3:47 0 0 nxtgonpho no 3587080982063726 310410214827503 1957 03/13/20 21:05:53 5:41 192 0 nxtgonpho no 3587080982063726 310410214827503 1958 03/13/20 21:05:54 5:42 0 0 nxtgonpho no 3587080982063726 310410214827503 1959 03/13/20 21:07:53 2:08 5700 4896 ins -1 310410214827503 1960 03/13/20 21:09:59 1:35 8160 6868 ins 3587080982063726 310410214827503 1961 03/13/20 21:10:00 1:36 6868 7896 Ins 3587080982063726 310410214827503 1962 03/13/20 21:11:36 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 1963 03/13/20 21:12:09 26:51 192 0 nxtgonpho no 3587080982063726 310410214827503 1964 03/13/20 21:12:10 26:51 0 0 nxtgonpho no 3587080982063726 310410214827503 1965 03/13/20 21:17:20 10:53 8073 10078 ins -1 310410214827503 1966 03/13/20 21:24:14 6:02 0 0 ins -1 310410214827503 1967 03/13/20 21:28:12 3:25 14031 10764 ins -1 310410214827503 1968 03/13/20 21:32:41 2:10 7138 6754 ins 3587080982063726 310410214827503 1969 03/13/20 21:32:42 2:10 6754 6874 ins 3587080982063726 310410214827503 1970 03/13/20 21:34:37 1:31 84 288 ins -1 310410214827503 1971 03/13/20 21:34:50 2:14 7116 6744 ins 3587080982063726 310410214827503 1972 03/13/20 21:34:51 2:14 6744 6852 ins 3587080982063726 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 2880=8 APPLE !PHONES APPLE !PHONES APPLE 1880=8 APPLE 1880=8 APPLE 1880=8 APPLE IPHONZ8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1880=8 APPLE 1880=8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 81 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002725 WAAL not for general distribution. EFTA_00116801 EFTA01251325 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in trio` a. AT&T Run Data: Run Time: Data Osage For: 06/17/2020 18:55:38 Item Conn. Conn. Data flea Originating Number Er Bytes Byte. Apn Up Dn (OTC) 1973 03/13/20 21:36:09 0:56 6601 1974 03/13/20 21:37:04 1:56 7234 1975 03/13/20 21:37:05 1:56 6798 1976 03/13/20 21:39:01 1:17 0 1977 03/13/20 21:39:06 1:12 8122 1978 03/13/20 21:40:17 2:04 192 1979 03/13/20 21:40:18 2:03 6056 1980 03/13/20 21:40:18 2:04 0 1981 03/13/20 21:40:19 2:03 6330 1982 03/13/20 21:42:22 0:06 0 1983 03/13/20 21:42:39 0:45 0 1984 03/13/20 21:42:41 0:43 7940 1985 03/13/20 21:43:23 8:15 192 1986 03/13/20 21:43:24 8:14 6202 1987 03/13/20 21:43:24 8:15 0 1988 03/13/20 21:43:25 8:14 6676 1989 03/13/20 21:51:39 12:14 0 1990 03/13/20 21:51:43 12:10 19770 1991 03/13/20 22:03:52 2:10 192 1992 03/13/20 22:03:53 2:09 6225 1993 03/13/20 22:03:53 2:10 0 1994 03/13/20 22:03:54 2:09 6668 1995 03/13/20 22:06:03 6:11 0 1996 03/13/20 22:06:06 6:08 12060 1997 03/13/20 22:12:13 2:16 192 1998 03/13/20 22:12:14 2:15 6228 1999 03/13/20 22:12:14 2:16 0 INZI INSI MARL MODEL 5083 ism -1 310410214827503 6798 ism 3587080982063726 310410214827503 APPLE !PHONES 6970 ins 3587080982063726 310410214827503 APPLE !PHONES 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6924 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6330 ins 3587080982063726 310410214827503 APPLE !PHONES Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5792 imp 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7712 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6676 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5938 ins 3587080982063726 310410214827503 APPLE !PHONES Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 12004 ins 3587080982063726 310410214827503 APPLE !PHONES Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6776 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5961 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9324 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 6774 ins 3587080982063726 310410214827503 APPLE IPRONE8 Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 82 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002726 N s not for general distribution. EF-EA_00II6802 EFTA01251326 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, tr: ma/ ed ‘"Ii° AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn Tier IMBI RAMC MODEL 2000 03/13/20 22:12:16 2:14 6666 1964 imp 3587080982063726 310410214827503 APPLE !PHONES 2001 03/13/20 22:14:30 2:24 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2002 03/13/20 22:14:34 2:20 18586 10968 imp 3587080982063726 310410214827503 APPLE /PHONES 2003 03/13/20 22:16:53 2:04 192 Onatgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2004 03/13/20 22:16:55 2:02 7268 6904 imp 3587080982063726 310410214827503 APPLE /PHONES 2005 03/13/20 22:16:55 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2006 03/13/20 22:16:56 2:02 6796 7004 imp 3587080982063726 310410214827503 APPLE /PHONES 2007 03/13/20 22:18:58 1:09 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2008 03/13/20 22:19:00 1:07 8992 6178 imp 3587080982063726 310410214827503 APPLE /PHONES 2009 03/13/20 22:20:06 5:12 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2010 03/13/20 22:20:07 3:30 7136 6846 imp 3587080982063726 310410214827503 APPLE /PHONES 2011 03/13/20 22:20:07 5:12 0 Onatgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2012 03/13/20 22:20:08 3:30 6738 6872 imp 3587080982063726 310410214827503 APPLE /PHONES 2013 03/13/20 22:23:40 1:38 6242 6670 imp 3587080982063726 310410214827503 APPLE /PHONES 2014 03/13/20 22:23:42 1:37 6670 5978 imp 3587080982063726 310410214827503 APPLE 'PROMS 2015 03/13/20 22:25:19 2:37 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2016 03/13/20 22:25:21 2:35 6676 5999 imp 3587080982063726 310410214827503 APPLE /PHONES 2017 03/13/20 22:27:55 2:07 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2018 03/13/20 22:27:56 2:06 6386 7516 imp 3587080982063726 310410214827503 APPLE /PHONES 2019 03/13/20 22:27:56 2:07 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2020 03/13/20 22:27:58 2:05 7408 6122 imp 3587080982063726 310410214827503 APPLE IPHOME8 2021 03/13/20 22:30:03 0:05 0 Onatgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2022 03/13/20 22:30:19 16:13 0 Onatgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2023 03/13/20 22:30:22 12:57 7408 6122 lam 3587080982063726 310410214827503 APPLE /PHONES 2024 03/13/20 22:43:19 0:12 640 372 lam 3587080982063726 310410214827503 APPLE /PHONES 2025 03/13/20 22:46:31 24:52 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2026 03/13/20 22:46:32 24:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 83 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002727 PIETIAL not for general distribution. EF-EA_00116803 EFTA01251327 NOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 1S:53:39 Conn. Time (UTC) Originating fluster ET Bytes Up Byte. Apn Dn IEI IMEI MARE MODEL 2027 03/13/20 22:46:32 1:30 6244 6670 imo 3587080982063726 310410214827503 APPLE IPHONZ8 2028 03/13/20 22:46:33 1:30 6670 5980 Sins 3587080982063726 310410214827503 APPLE IPHONZ8 2029 03/13/20 22:46:52 11:25 9869 7850 ins -1 310410214827503 2030 03/13/20 22:48:02 23:21 7320 6790 imp 3587080982063726 310410214827503 APPLE IPHONZ8 2031 03/13/20 22:48:03 23:21 6790 7056 imp 3587080982063726 310410214827503 APPLE !PHONES 2032 03/13/20 22:58:17 20:53 12027 6926 imp -1 310410214827503 2033 03/13/20 23:11:24 1:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2034 03/13/20 23:12:28 3:14 192 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 2035 03/13/20 23:12:29 3:14 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2036 03/13/20 23:14:33 0:07 0 0 imp -1 310410214827503 2037 03/13/20 23:15:43 12:51 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2038 03/13/20 23:15:47 5:59 9909 6354 imp -1 310410214827503 2039 03/13/20 23:19:10 60:00 0 0 imp -1 310410214827503 2040 03/13/20 23:21:46 60:00 15283 8910 imp -1 310410214827503 2041 03/13/20 23:28:33 1:36 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2042 03/13/20 23:28:35 1:35 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2043 03/13/20 23:30:10 1:48 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2044 03/13/20 23:31:58 31:47 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2045 03/13/20 23:31:59 31:47 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2046 03/14/20 00:03:45 8:26 192 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2047 03/14/20 00:03:46 8:26 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2048 03/14/20 00:12:12 3:18 192 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2049 03/14/20 00:12:13 3:18 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 2050 03/14/20 00:15:31 0:59 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 2051 03/14/20 00:16:29 4:05 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONG8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 84 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002728 not for general distribution. EFTA 00116804 EFTA01251328 MOBILITY The information contained hereetlaNyR 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. trasi. "-s AT&T Run pato: Run Time: Data Osage For: Itom Conn. Date 06/17/2020 18:55:39 Conn. Originating Cr Time Number (U2C) Bytes UP Bytoa Apn Dn IND I INSI War MODEL 2052 03/14/20 00:16:30 4:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2053 03/14/20 00:19:10 60:00 0 0 ins -1 310410214827503 2054 03/14/20 00:20:35 0:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2055 03/14/20 00:21:14 15:25 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2056 03/14/20 00:21:15 15:25 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2057 03/14/20 00:21:46 60:00 6816 2648 imp -1 310410214827503 2058 03/14/20 00:36:39 12:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2059 03/14/20 00:36:40 12:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2060 03/14/20 00:49:06 1:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2061 03/14/20 00:50:14 12:34 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2062 03/14/20 00:50:14 12:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2063 03/14/20 01:02:48 1:18 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2064 03/14/20 01:02:50 1:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2065 03/14/20 01:04:06 36:37 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2066 03/14/20 01:04:07 36:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2067 03/14/20 01:19:10 60:00 0 0 imp -1 310410214827503 2068 03/14/20 01:21:46 60:00 7156 2880 imp -1 310410214827503 2069 03/14/20 01:40:44 34:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2070 03/14/20 02:14:44 2:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2071 03/14/20 02:14:46 2:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2072 03/14/20 02:16:54 15:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2073 03/14/20 02:19:10 60:00 0 0 imp -1 310410214827503 2074 03/14/20 02:21:46 60:00 16096 4716 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002729 PsiTnilikk not for general distribution. Page 85 EF-EA_00116805 EFTA01251329 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41011, .....,,,• `•—•st‘' s AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 18:55:39 Conn. Originating ET Time Buster (OTC) Bytes Up Byte. Apn Dn INEI IMBI HARM MODEL 2075 03/14/20 02:32:24 2:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2076 03/14/20 02:32:25 2:32 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2077 03/14/20 02:34:56 6:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2078 03/14/20 02:34:57 6:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2079 03/14/20 02:41:01 11:31 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2080 03/14/20 02:52:32 2:14 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2081 03/14/20 02:52:33 2:14 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2082 03/14/20 02:54:47 28:35 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2083 03/14/20 03:19:10 0:01 0 0 imo -1 310410214827503 2084 03/14/20 03:21:46 60:00 6940 3740 imo -1 310410214827503 2085 03/14/20 03:23:21 8:26 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2086 03/14/20 03:23:22 8:27 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2087 03/14/20 03:31:49 1:43 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2088 03/14/20 03:33:31 2:10 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2089 03/14/20 03:33:32 2:10 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2090 03/14/20 03:35:42 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2091 03/14/20 04:21:46 60:00 11904 4612 imo -1 310410214827503 2092 03/14/20 04:35:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2093 03/14/20 05:21:46 60:00 6924 2648 imo -1 310410214827503 2094 03/14/20 05:35:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2095 03/14/20 06:21:46 60:00 10068 3144 as -1 310410214827503 2096 03/14/20 06:35:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2097 03/14/20 07:21:46 60:00 8388 2896 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 86 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00002730 PsiTniliAL not for general distribution. EFTA_00116806 EFTA01251330 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111i AT&T Run Date: Run Tame: Data Usage For: Item Conn. Date 06/17/2020 1S:53:39 Conn. Time (OTC) Originating Number ET Bytes Up Bytoa Apn Dn IKI IMSI MARL 2098 03/14/20 07:35:42 0:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2099 03/14/20 07:35:45 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2100 03/14/20 08:21:46 60:00 11580 4112 imp -1 310410214827503 2101 03/14/20 08:35:45 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2102 03/14/20 09:21:46 60:00 16496 5124 imp -1 310410214827503 2103 03/14/20 09:35:45 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2104 03/14/20 10:21:46 60:00 8496 2896 imp -1 310410214827503 2105 03/14/20 10:35:45 60:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2106 03/14/20 11:21:46 60:00 6924 2756 imp -1 310410214827503 2107 03/14/20 11:35:47 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2108 03/14/20 12:21:46 21:19 3408 1324 imp -1 310410214827503 2109 03/14/20 12:35:47 2:40 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2110 03/14/20 12:38:26 0:27 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2111 03/14/20 12:38:27 0:27 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2112 03/14/20 12:38:54 1:51 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2113 03/14/20 12:39:01 1:58 8327 7901 imp 3587080982063726 310410214827503 APPLE 2114 03/14/20 12:40:45 1:14 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2115 03/14/20 12:40:59 0:33 5864 2431 imp 3587080982063726 310410214827503 APPLE 2116 03/14/20 12:40:59 0:33 5800 2431 imp 3587080982063726 310410214827503 APPLE 2117 03/14/20 12:41:32 5:59 32741 23233 imp 3587080982063726 310410214827503 APPLE 2118 03/14/20 12:41:58 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2119 03/14/20 12:41:59 2:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2120 03/14/20 12:43:33 0:29 8162 8180 imp 3587080982063726 310410214827503 APPLE 2121 03/14/20 12:43:34 0:29 6872 7898 imp 3587080982063726 310410214827503 APPLE 2122 03/14/20 12:44:04 1:27 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2123 03/14/20 12:44:07 1:24 8138 8664 imp 3587080982063726 310410214827503 APPLE MODEL !PHONES !PRONGS !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 87 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002731 PsiTifiNE not for general distribution. EF-EA_00116807 EFTA01251331 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. ...,,,,f `•-s` a. AT&T Run pato: Run T1mo: Data Osage For: Itea Conn. Date 06/17/2020 18:55:39 Conn. Originating ST Time Number Up (OTC) Sytes Bytes Apn Dn IMLI IMSI MUM MODEL 2124 03/14/20 12:45:31 1:59 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2125 03/14/20 12:45:36 0:34 756 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2126 03/14/20 12:46:10 0:27 172 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2127 03/14/20 12:46:10 0:27 0 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2128 03/14/20 12:46:37 60:00 8917 6504 was 3587080982063726 310410214827503 APPLE 'PHONES 2129 03/14/20 12:47:29 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2130 03/14/20 12:47:30 2:03 6224 6666 ims 3587080982063726 310410214827503 APPLE 'PHONES 2131 03/14/20 12:47:30 2:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2132 03/14/20 12:47:32 2:02 6666 5960 ims 3587080982063726 310410214827503 APPLE 'PHONES 2133 03/14/20 12:49:34 0:35 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2134 03/14/20 12:49:38 27:19 15352 14059 ims -1 310410214827503 2135 03/14/20 12:50:08 8:34 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2136 03/14/20 12:50:09 8:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2137 03/14/20 12:58:43 55:56 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2138 03/14/20 13:28:54 0:01 0 0 ims -1 310410214827503 2139 03/14/20 13:46:37 13:30 0 0 ims 3587080982063726 310410214827503 APPLE 'PHONES 2140 03/14/20 13:54:38 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2141 03/14/20 13:54:39 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2142 03/14/20 13:54:45 9:09 8607 6380 ims -1 310410214827503 2143 03/14/20 13:56:42 0:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2144 03/14/20 13:57:39 16:49 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2145 03/14/20 13:57:40 16:49 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2146 03/14/20 14:00:06 14:22 6366 6792 ims 3587080982063726 310410214827503 APPLE !PHONES 2147 03/14/20 14:00:07 14:22 6684 6102 ims 3587080982063726 310410214827503 APPLE !PHONES 2148 03/14/20 14:03:54 23:55 14461 10712 ims -1 310410214827503 2149 03/14/20 14:14:29 12:50 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 88 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002732 not for general distribution. EF-EA_00116808 EFTA01251332 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in 4.11, '...„, 00 .11. ‘"I° AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time Origlnatirq Number TT Bytes Bytes Apn Up Dn INLI (UTC) 2150 03/14/20 14:27:18 1:57 192 0 nxtgonpho no 3587080982063726 310410214827503 2151 03/14/20 14:27:19 1:57 0 0 nxtgonpho no 3587080982063726 310410214827503 2152 03/14/20 14:27:48 1:27 6262 6672 imp 3587080982063726 310410214827503 2153 03/14/20 14:27:49 1:27 6672 5998 imp 3587080982063726 310410214827503 2154 03/14/20 14:29:16 31:24 0 0 nxtgonpho no 3587080982063726 310410214827503 2155 03/14/20 14:29:18 10:23 8170 6962 imp 3587080982063726 310410214827503 2156 03/14/20 14:39:41 60:00 3532 1340 imp 3587080982063726 310410214827503 2157 03/14/20 15:00:39 0:35 192 0 nxtgonpho no 3587080982063726 310410214827503 2158 03/14/20 15:00:41 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 2159 03/14/20 15:01:15 0:44 0 0 nxtgonpho no 3587080982063726 310410214827503 2160 03/14/20 15:01:20 0:39 8898 7086 imp 3587080982063726 310410214827503 2161 03/14/20 15:01:59 0:59 192 0 nxtgonpho no 3587080982063726 310410214827503 2162 03/14/20 15:01:59 0:59 7134 6746 imp 3587080982063726 310410214827503 2163 03/14/20 15:02:00 0:59 0 0 nxtgonpho no 3587080982063726 310410214827503 2164 03/14/20 15:02:01 0:58 6746 6870 imp 3587080982063726 310410214827503 2165 03/14/20 15:02:59 2:41 0 0 nxtgonpho no 3587080982063726 310410214827503 2166 03/14/20 15:03:01 0:18 1690 6443 imp 3587080982063726 310410214827503 2167 03/14/20 15:03:19 60:00 33670 22735 imp 3587080982063726 310410214827503 2168 03/14/20 15:05:39 20:24 192 0 nxtgonpho no 3587080982063726 310410214827503 2169 03/14/20 15:05:40 20:24 0 0 nxtgonpho no 3587080982063726 310410214827503 2170 03/14/20 15:26:04 4:38 0 0 nxtgonpho no 3587080982063726 310410214827503 2171 03/14/20 15:30:41 2:26 192 0 nxtgonpho no 3587080982063726 310410214827503 2172 03/14/20 15:30:43 2:25 0 0 nxtgonpho no 3587080982063726 310410214827503 2173 03/14/20 15:33:07 10:00 192 0 nxtgonpho no 3587080982063726 310410214827503 MODAL APPLE ITHOME8 APPLE ITHOME8 APPLE DRONES APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE ITMONZ8 APPLE ITMONZ8 APPLE ITROME8 APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 89 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002733 NeTniiiikE not for general distribution. EFTA_001 16809 EFTA01251333 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 411111, `c,sts ""e AT&T Run Date: Run Time: Data Usage for: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytom Apn On ICI INSI MAL 2174 03/14/20 15:33:08 14:57 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2175 03/14/20 15:39:23 0:22 0 30887 ims 3587080982063726 310410214827503 APPLE 2176 03/14/20 15:39:41 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 2177 03/14/20 15:48:05 53:21 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2178 03/14/20 15:48:06 53:21 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2179 03/14/20 16:03:19 60:00 8512 3988 ims 3587080982063726 310410214827503 APPLE 2180 03/14/20 16:39:41 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 2181 03/14/20 16:41:27 64:11 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2182 03/14/20 16:41:28 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2183 03/14/20 17:03:19 60:00 7064 2880 imp 3587080982063726 310410214827503 APPLE 2184 03/14/20 17:39:41 60:00 0 0 imp 3587080982063726 310410214827503 APPLE 2185 03/14/20 17:41:28 4:11 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2186 03/14/20 17:45:39 40:01 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2187 03/14/20 17:45:40 40:01 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2188 03/14/20 18:03:19 60:00 7064 2772 imp 3587080982063726 310410214827503 APPLE 2189 03/14/20 18:25:41 2:43 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2190 03/14/20 18:28:23 8:21 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2191 03/14/20 18:28:24 8:21 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2192 03/14/20 18:36:45 1:40 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2193 03/14/20 18:38:24 108:33 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2194 03/14/20 18:38:25 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2195 03/14/20 18:39:41 2:22 0 0 imp 3587080982063726 310410214827503 APPLE 2196 03/14/20 19:03:19 60:00 17008 6092 imp 3587080982063726 310410214827503 APPLE 2197 03/14/20 19:38:25 48:33 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2198 03/14/20 20:03:19 60:00 44644 28772 imp 3587080982063726 310410214827503 APPLE AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Thesd communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was initiated AT&T's network initiated the data customer or transaction. The information contained hereCtoNyFti MODEL !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES SDNY_GM_ 00002734 NTailiAL not for general distribution. Page 90 EF-EA_O0116810 EFTA01251334 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. trasO ssi. ‘"le. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:55:39 Conn. Time (UTC) Originating Butter ET Bytes Up Byte. Min Dn IM41 IMSI Ma1Q MODEL 2199 03/14/20 20:26:58 9:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2200 03/14/20 20:35:58 2:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 2201 03/14/20 20:35:59 2:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2202 03/14/20 20:38:03 6:44 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2203 03/14/20 20:44:46 9:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRO1428 2204 03/14/20 20:44:47 9:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2205 03/14/20 20:53:51 0:52 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2206 03/14/20 20:54:42 2:17 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2207 03/14/20 20:54:43 2:17 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2208 03/14/20 20:56:02 0:05 4279 12317 ins 3587080982063726 310410214827503 APPLE !PHONES 2209 03/14/20 20:56:08 0:05 2482 11716 ins 3587080982063726 310410214827503 APPLE DRONES 2210 03/14/20 20:56:15 0:08 4618 14384 ins 3587080982063726 310410214827503 APPLE DRONES 2211 03/14/20 20:56:41 0:04 3092 10606 ins 3587080982063726 310410214827503 APPLE DRONES 2212 03/14/20 20:57:00 0:55 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2213 03/14/20 20:57:55 16:22 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2214 03/14/20 20:57:56 16:23 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2215 03/14/20 21:03:19 39:39 3532 3952 imp 3587080982063726 310410214827503 APPLE !PHONES 2216 03/14/20 21:14:18 163:28 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2217 03/14/20 21:14:19 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2218 03/14/20 21:38:59 22:35 7232 6866 imp 3587080982063726 310410214827503 APPLE DRONES 2219 03/14/20 21:39:00 22:35 6798 6968 imp 3587080982063726 310410214827503 APPLE !PHONES 2220 03/14/20 21:58:06 3:29 8874 10570 imp -1 310410214827503 2221 03/14/20 22:01:34 3:23 7356 6800 imp 3587080982063726 310410214827503 APPLE !PHONES 2222 03/14/20 22:01:35 3:23 6800 7004 imp 3587080982063726 310410214827503 APPLE DRONES 2223 03/14/20 22:04:21 0:37 4618 4712 imp -1 310410214827503 2224 03/14/20 22:04:56 13:03 7474 6796 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 91 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002735 ?e V& not for general distribution. EF-EA_00ll6811 EFTA01251335 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, trad s. `"I° AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating Time Buster (UTC) LT Bytes Up Bytes Apn Dn INC' IMISI MARL MOLL 2225 03/14/20 22:04:57 13:03 6796 7210 1ms 3587080982063726 310410214827503 APPLE IPHONZ8 2226 03/14/20 22:08:30 0:39 5686 4904 ims -1 310410214827503 2227 03/14/20 22:11:41 8:46 6261 6676 ims 3587080982063726 310410214827503 APPLE IPHONZ8 2228 03/14/20 22:11:43 8:45 6676 5997 ims 3587080982063726 310410214827503 APPLE IPHONZ8 2229 03/14/20 22:14:19 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2230 03/14/20 22:18:29 4:24 10009 10506 ims -1 310410214827503 2231 03/14/20 22:20:27 31:59 6226 6672 ims 3587080982063726 310410214827503 APPLE !PHONES 2232 03/14/20 22:20:27 32:00 6672 6070 ims 3587080982063726 310410214827503 APPLE !PHONES 2233 03/14/20 22:22:53 32:36 24446 33790 ims -1 310410214827503 2234 03/14/20 22:52:25 65:21 6371 6672 ims 3587080982063726 310410214827503 APPLE !PHONES 2235 03/14/20 22:52:26 60:00 6672 6107 ims 3587080982063726 310410214827503 APPLE !PHONES 2236 03/14/20 22:55:29 60:00 32305 24638 ims -1 310410214827503 2237 03/14/20 23:14:19 43:28 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2238 03/14/20 23:33:09 0:09 0 7031 ims -1 310410214827503 2239 03/14/20 23:52:26 5:21 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2240 03/14/20 23:55:29 35:09 4964 1804 ims -1 310410214827503 2241 03/14/20 23:57:47 0:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 2242 03/14/20 23:58:20 8:13 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 2243 03/14/20 23:58:21 8:13 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2244 03/15/20 00:06:35 4:30 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2245 03/15/20 00:11:04 34:40 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 2246 03/15/20 00:11:05 34:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2247 03/15/20 00:28:17 17:27 6264 6676 ims 3587080982063726 310410214827503 APPLE !PHONES 2248 03/15/20 00:28:18 17:27 6676 6108 ims 3587080982063726 310410214827503 APPLE !PHONES 2249 03/15/20 00:30:39 10:18 9704 6134 ims -1 310410214827503 2250 03/15/20 00:40:57 60:00 22558 16428 ims -1 310410214827503 2251 03/15/20 00:45:44 1:24 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2252 03/15/20 00:45:45 1:24 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Thesb communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 92 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002736 Nei-4AL not for general distribution. EF-EA_00ll6812 EFTA01251336 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:55:40 Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn Dn INLI IMSI NUM MOLL 2253 03/15/20 00:47:09 21:54 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2254 03/15/20 00:47:10 21:54 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2255 03/15/20 01:09:04 0:59 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2256 03/15/20 01:10:02 58:23 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2257 03/15/20 01:10:03 58:23 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2258 03/15/20 01:40:57 60:00 10176 3252 imp -1 310410214827503 2259 03/15/20 02:08:26 6:18 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2260 03/15/20 02:14:44 2:17 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2261 03/15/20 02:14:45 2:17 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2262 03/15/20 02:17:02 6:28 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2263 03/15/20 02:23:29 80:00 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2264 03/15/20 02:23:30 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2265 03/15/20 02:40:57 60:00 7016 2540 imp -1 310410214827503 2266 03/15/20 03:23:30 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2267 03/15/20 03:40:57 60:00 6800 2756 imp -1 310410214827503 2268 03/15/20 04:23:30 60:00 0 Oruftgon0o no 3587080982063726 310410214827503 APPLE !PHONES 2269 03/15/20 04:40:57 60:00 16652 5952 imp -1 310410214827503 2270 03/15/20 05:23:30 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2271 03/15/20 05:40:57 60:00 3624 1448 imp -1 310410214827503 2272 03/15/20 06:18:55 60:00 19980 10414 ins -1 310410214827503 2273 03/15/20 06:23:30 0:02 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2274 03/15/20 06:40:57 60:00 0 0 imp -1 310410214827503 2275 03/15/20 07:18:55 60:00 6816 3004 imp -1 310410214827503 2276 03/15/20 07:40:57 60:00 0 0 imp -1 310410214827503 2277 03/15/20 08:18:55 60:00 8496 3144 ism -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do notemecessarily indicate a customer initiated a transaction. Page 93 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002737 not for general distribution. EF-EA_O0116813 EFTA01251337 MOBILITY The information contained heraCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. •---.,.. ,e,0 01. `"1. AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:45:40 Conn. Time (LTC) Originating Nutter ET Bytes UP Bytes Apn on INZI IMSI NUM MOLL 2278 03/15/20 08:40:57 60:00 0 0 ims -1 310410214827503 2279 03/15/20 09:18:55 50:48 7172 2944 ims -1 310410214827503 2280 03/15/20 09:37:51 11:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2281 03/15/20 09:37:52 11:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2282 03/15/20 09:40:57 24:11 0 0 ims -1 310410214827503 2283 03/15/20 09:48:56 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2284 03/15/20 10:05:07 60:00 0 0 imp -1 310410214827503 2285 03/15/20 10:09:42 60:00 18781 9775 imp -1 310410214827503 2286 03/15/20 10:48:56 2:47 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2287 03/15/20 10:51:42 0:42 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 2288 03/15/20 10:51:43 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2289 03/15/20 10:52:25 27:29 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2290 03/15/20 11:05:07 60:00 0 0 imp -1 310410214827503 2291 03/15/20 11:09:42 60:00 8480 2896 imp -1 310410214827503 2292 03/15/20 11:19:54 14:38 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2293 03/15/20 11:19:55 14:38 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2294 03/15/20 11:34:33 45:07 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2295 03/15/20 12:05:07 17:00 0 0 imp -1 310410214827503 2296 03/15/20 12:09:42 10:37 3580 1852 ins -1 310410214827503 2297 03/15/20 12:19:39 1:03 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2298 03/15/20 12:19:40 1:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2299 03/15/20 12:20:43 0:36 0 OruMgenpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2300 03/15/20 12:21:18 7:53 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2301 03/15/20 12:21:19 7:52 6229 6670 as 3587080982063726 310410214827503 APPLE 1PRONE8 2302 03/15/20 12:21:20 7:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 94 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002738 NTniliAL not for general distribution. EF-EA_O0116814 EFTA01251338 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in (ITC. 411111i ...,,,• ••-s` a. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 1S:53:40 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn ISM' IMSI 2303 03/15/20 12:21:21 7:51 6670 6073 imam 3587080982063726 310410214827503 2304 03/15/20 12:22:07 14:05 10288 6713 imam -1 310410214827503 2305 03/15/20 12:29:12 2:10 0 0 nxtgenpho no 3587080982063726 310410214827503 2306 03/15/20 12:31:20 10:33 10716 12922 ims -1 310410214827503 2307 03/15/20 12:31:21 2:04 192 Onxtgenpho no 3587080982063726 310410214827503 2308 03/15/20 12:31:22 2:05 0 Onxtgenpho no 3587080982063726 310410214827503 2309 03/15/20 12:33:26 1:09 0 Onxtgenpho no 3587080982063726 310410214827503 2310 03/15/20 12:34:34 8:20 192 0 nxtgenpho no 3587080982063726 310410214827503 2311 03/15/20 12:34:35 8:20 0 Oruagenpho no 3587080982063726 310410214827503 2312 03/15/20 12:36:10 6:44 6246 6666 ims 3587080982063726 310410214827503 2313 03/15/20 12:36:11 6:44 6666 5982 ims 3587080982063726 310410214827503 2314 03/15/20 12:42:55 42:16 0 Oruagenpho no 3587080982063726 310410214827503 2315 03/15/20 12:42:57 42:14 9358 8200 ims 3587080982063726 310410214827503 2316 03/15/20 13:25:11 14:44 0 Onxtgenpho no 3587080982063726 310410214827503 2317 03/15/20 13:25:13 1:31 6646 5899 ims 3587080982063726 310410214827503 2318 03/15/20 13:26:44 0:21 11780 13060 ims 3587080982063726 310410214827503 2319 03/15/20 13:35:22 10:29 1491 132 ims -1 310410214827503 2320 03/15/20 13:39:54 8:21 192 Oruagenpho no 3587080982063726 310410214827503 2321 03/15/20 13:39:55 8:21 0 Oruagenpho no 3587080982063726 310410214827503 2322 03/15/20 13:40:00 8:15 8434 9028 ims 3587080982063726 310410214827503 2323 03/15/20 13:40:01 8:15 8968 8170 ims 3587080982063726 310410214827503 2324 03/15/20 13:46:03 60:00 16716 9893 ims -1 310410214827503 2325 03/15/20 13:48:16 4:58 0 0 nxtgenpho no 3587080982063726 310410214827503 2326 03/15/20 13:53:13 2:14 192 Onxtgenpho no 3587080982063726 310410214827503 2327 03/15/20 13:53:15 2:14 0 Onxtgenpho no 3587080982063726 310410214827503 2328 03/15/20 13:55:29 43:50 0 Onxtgenpho no 3587080982063726 310410214827503 NAfl NICOLL APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 95 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002739 The information contained hereeNyFtli NaTtikEl not for general distribution. EF-EA_00ll6815 EFTA01251339 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Humber 2T Bytes Up Bytes Apn Dn pa= IMBI teUtT NICOLL 2329 03/15/20 14:37:06 1:42 6666 5959 ims 3587080982063726 310410214827503 APPLE IrMONZ8 2330 03/15/20 14:38:48 60:00 12476 4360 ims 3587080982063726 310410214827503 APPLE IrMONZ8 2331 03/15/20 14:39:18 21:07 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IrMONZ8 2332 03/15/20 14:39:19 21:07 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2333 03/15/20 14:46:03 60:00 0 0 ims -1 310410214827503 2334 03/15/20 15:00:26 22:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 2335 03/15/20 15:23:17 20:00 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IrROME8 2336 03/15/20 15:23:18 21:30 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IrROME8 2337 03/15/20 15:38:48 60:00 22664 10248 ims 3587080982063726 310410214827503 APPLE DRONES 2338 03/15/20 15:44:48 1:01 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2339 03/15/20 15:45:48 1:32 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2340 03/15/20 15:45:49 1:32 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2341 03/15/20 15:46:02 0:14 0 6648 ims 3587080982063726 310410214827503 APPLE DRONES 2342 03/15/20 15:46:03 60:00 0 0 ims -1 310410214827503 2343 03/15/20 15:47:21 59:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 2344 03/15/20 16:38:48 36:33 3872 1572 ims 3587080982063726 310410214827503 APPLE DRONES 2345 03/15/20 16:46:03 24:31 0 0 ims -1 310410214827503 2346 03/15/20 16:46:54 172:16 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2347 03/15/20 16:46:55 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 2348 03/15/20 17:10:33 0:10 440 144 ims 3587080982063726 310410214827503 APPLE DRONES 2349 03/15/20 17:10:34 0:10 144 0 ims 3587080982063726 310410214827503 APPLE DRONES 2350 03/15/20 17:10:46 22:56 7340 6794 ims 3587080982063726 310410214827503 APPLE DRONES 2351 03/15/20 17:10:46 22:57 6794 7076 ims 3587080982063726 310410214827503 APPLE DRONES 2352 03/15/20 17:15:21 18:56 8373 6012 ims -1 310410214827503 2353 03/15/20 17:33:42 125:28 13506 17240 ims 3587080982063726 310410214827503 APPLE DRONES 2354 03/15/20 17:33:43 60:00 12048 10594 ims 3587080982063726 310410214827503 APPLE DRONES 2355 03/15/20 17:34:18 10:22 0 0 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 96 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002740 not for general distribution. EF-EA_00116816 EFTA01251340 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. tra d "`s 1° AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (DSC) Originating Muster ET Bytes Up Bytoa Apn Dn MCI IMBI MARC MODEL 2356 03/15/20 17:46:55 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROSES 2357 03/15/20 18:33:43 60:00 5192 2648 was 3587080982063726 310410214827503 APPLE !PRONGS 2358 03/15/20 18:46:55 52:16 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 2359 03/15/20 19:28:15 60:00 16707 8924 was -1 310410214827503 2360 03/15/20 19:33:43 5:28 0 0 was 3587080982063726 310410214827503 APPLE !PHONES 2361 03/15/20 19:39:11 18:26 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2362 03/15/20 19:57:36 2:09 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2363 03/15/20 19:57:37 2:10 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2364 03/15/20 19:59:47 14:14 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE /PHONES 2365 03/15/20 20:14:00 68:02 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2366 03/15/20 20:14:01 60:00 0 Onxtgenpho nm 3587080982063726 310410214827503 APPLE /PHONES 2367 03/15/20 20:28:15 0:34 0 0 was -1 310410214827503 2368 03/15/20 20:28:49 60:00 0 0 was -1 310410214827503 2369 03/15/20 20:32:18 60:00 19964 9565 was -1 310410214827503 2370 03/15/20 21:14:01 8:02 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE /PHONES 2371 03/15/20 21:22:03 6:02 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE /PHONES 2372 03/15/20 21:28:04 2:05 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2373 03/15/20 21:28:06 2:04 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2374 03/15/20 21:28:49 60:00 0 0 was -1 310410214827503 2375 03/15/20 21:30:10 18:17 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2376 03/15/20 21:32:18 60:00 7032 2680 was -1 310410214827503 2377 03/15/20 21:48:27 42:37 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2378 03/15/20 21:48:28 42:37 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2379 03/15/20 22:28:49 60:00 0 0 was -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002741 NaTiliAL not for general distribution. Page 97 EF-EA_O0116817 EFTA01251341 NOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ...,,,,• ••—est `' . AT&T Run Date: Run Time: Data Osage For: 06/17/2020 16:56:40 Item Conn. Conn. Date Time (OTC) originating Hunter 2380 03/15/20 22:31:05 2:50 0 0 nxtgenpho no 3587080982063726 310410214827503 2381 03/15/20 22:32:18 60:00 8604 3052 ims -1 310410214827503 2382 03/15/20 22:33:54 8:19 192 Oruftgenpho no 3587080982063726 310410214827503 2383 03/15/20 22:33:55 8:19 0 Onxtgenpho no 3587080982063726 310410214827503 2384 03/15/20 22:42:14 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 2385 03/15/20 23:28:49 60:00 0 0 ims -1 310410214827503 2386 03/15/20 23:32:18 60:00 6924 2788 ims -1 310410214827503 2387 03/15/20 23:42:14 11:41 0 Onxtgenpho no 3587080982063726 310410214827503 2388 03/15/20 23:53:54 0:37 192 0 nxtgenpho no 3587080982063726 310410214827503 2389 03/15/20 23:53:55 0:37 0 0 nxtgenpho no 3587080982063726 310410214827503 2390 03/15/20 23:54:32 2:37 288 0 nxtgenpho no 3587080982063726 310410214827503 2391 03/15/20 23:54:33 2:37 0 Onxtgenpho no 3587080982063726 310410214827503 2392 03/15/20 23:57:10 1:22 0 Oruftgenpho no 3587080982063726 310410214827503 2393 03/15/20 23:58:31 7:13 192 Oruftgenpho no 3587080982063726 310410214827503 2394 03/15/20 23:58:32 7:13 0 Oruftgenpho no 3587080982063726 310410214827503 2395 03/16/20 00:05:45 2:43 192 Oruftgenpho no 3587080982063726 310410214827503 2396 03/16/20 00:05:46 2:43 0 Oruftgenpho no 3587080982063726 310410214827503 2397 03/16/20 00:08:29 1:58 0 0 nxtgenpho no 3587080982063726 310410214827503 2398 03/16/20 00:10:26 2:04 192 Oruftgenpho no 3587080982063726 310410214827503 2399 03/16/20 00:10:28 2:03 0 Oruftgenpho no 3587080982063726 310410214827503 2400 03/16/20 00:12:32 4:09 0 Oruftgenpho no 3587080982063726 310410214827503 2401 03/16/20 00:16:40 3:53 192 0 nxtgenpho no 3587080982063726 310410214827503 ET Byte. Byte. Apn INLI IMBI NAZI MOLL Op Dn APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PROMS APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE !PHONES APPLE !PHONES APPLE IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 98 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002742 NTroliAL not for general distribution. EF-EA_00116818 EFTA01251342 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, •- ...rsai ""e AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes UP Bytes Apn Dn INZI IMSI MARL 2402 03/16/20 00:16:41 3:53 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2403 03/16/20 00:20:33 4:14 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2404 03/16/20 00:20:34 4:14 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2405 03/16/20 00:24:47 2:05 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2406 03/16/20 00:24:48 2:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2407 03/16/20 00:26:53 9:29 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2408 03/16/20 00:28:49 0:01 0 0 ins -1 310410214827503 2409 03/16/20 00:32:18 13:27 5088 2084 ins -1 310410214827503 2410 03/16/20 00:36:22 3:12 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2411 03/16/20 00:39:34 16:30 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2412 03/16/20 00:39:35 16:30 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2413 03/16/20 00:51:49 3:35 13841 10953 ins -1 310410214827503 2414 03/16/20 00:55:27 25:51 20087 13330 ins -1 310410214827503 2415 03/16/20 00:56:05 3:43 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2416 03/16/20 00:59:47 8:32 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2417 03/16/20 00:59:49 8:31 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2418 03/16/20 01:08:20 3:17 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2419 03/16/20 01:11:36 2:09 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2420 03/16/20 01:11:37 2:09 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2421 03/16/20 01:13:46 10:15 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2422 03/16/20 01:22:33 60:00 19156 9476 ins -1 310410214827503 2423 03/16/20 01:24:01 19:07 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 2424 03/16/20 01:24:02 19:07 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE NICOLL 'PHONES 'PHONES !PHONES !PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 99 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002743 NTifikE not for general distribution. EFTA_OOI 16819 EFTA01251343 MOBILITY The information contained hereSCONels 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .....„0/ `•-s`' s AT&T Run Date: Run Time: Data Usage For: 06/17/2020 1S:53:40 Item Conn. Conn. Date Timo (OTC) 2425 03/16/20 01:43:09 2426 03/16/20 02:05:31 2427 03/16/20 02:05:33 2428 03/16/20 02:07:37 2429 03/16/20 02:08:44 2430 03/16/20 02:08:45 2431 03/16/20 02:10:49 2432 03/16/20 02:22:33 2433 03/16/20 02:58:39 2434 03/16/20 02:58:40 2435 03/16/20 03:10:37 2436 03/16/20 03:13:56 2437 03/16/20 03:13:57 2438 03/16/20 03:22:33 2439 03/16/20 03:33:25 2440 03/16/20 03:44:39 2441 03/16/20 03:44:40 2442 03/16/20 03:50:14 2443 03/16/20 03:53:10 2444 03/16/20 03:53:11 2445 03/16/20 04:22:33 2446 03/16/20 04:53:11 originating Number CT Bytes Bytom Apn MCI INSI MARL NICOLL UP Dn 22:23 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2:05 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1:08 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2:04 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 47:51 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 60:00 8496 3036 ism -1 310410214827503 11:57 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 11:57 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 3:19 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 19:28 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 19:28 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 60:00 7048 2804 ism -1 310410214827503 11:15 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5:34 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5:34 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2:57 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 93:54 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 60:00 8388 2928 ism -1 310410214827503 33:54 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 100 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002744 NeTnilikk not for general distribution. EF-EA_O0116820 EFTA01251344 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and OTC. provided in 411.1 tr. 20‘I"`1 AT&T Run Data: Run Tame: Data Usage For: Item Conn. Data 06/17/2020 ET Sye•• UP Byte. Apn Dn INLI INBI Conn. Time (OTC) Originating Number 2447 03/16/20 05:22:33 60:00 11580 4160 ims -1 310410214827503 2448 03/16/20 05:27:04 129:59 192 Onxtgonpho no 3587080982063726 310410214827503 2449 03/16/20 05:27:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2450 03/16/20 06:22:33 60:00 10624 4396 ims -1 310410214827503 2451 03/16/20 06:27:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2452 03/16/20 07:22:33 60:00 8388 2928 ims -1 310410214827503 2453 03/16/20 07:27:05 9:59 0 0 nxtgonpho no 3587080982063726 310410214827503 2454 03/16/20 07:37:04 240:01 192 0 nxtgonpho no 3587080982063726 310410214827503 2455 03/16/20 07:37:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2456 03/16/20 08:22:33 60:00 8388 3036 ims -1 310410214827503 2457 03/16/20 08:37:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2458 03/16/20 09:22:33 60:00 8388 2928 ims -1 310410214827503 2459 03/16/20 09:37:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2460 03/16/20 10:22:33 60:00 10564 4252 ims -1 310410214827503 2461 03/16/20 10:37:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2462 03/16/20 11:22:33 60:00 11796 4536 ims -1 310410214827503 2463 03/16/20 11:37:05 0:01 0 0 nxtgonpho no 3587080982063726 310410214827503 2464 03/16/20 11:37:14 61:22 192 0 nxtgonpho no 3587080982063726 310410214827503 2465 03/16/20 11:37:15 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2466 03/16/20 12:22:33 60:00 8388 2928 ims -1 310410214827503 2467 03/16/20 12:37:15 1:22 0 0 nxtgonpho no 3587080982063726 310410214827503 2468 03/16/20 12:38:37 11:24 0 0 nxtgonpho no 3587080982063726 310410214827503 2469 03/16/20 12:50:01 47:24 192 0 nxtgonpho no 3587080982063726 310410214827503 2470 03/16/20 12:50:02 47:24 0 0 nxtgonpho no 3587080982063726 310410214827503 MAKE MODEL APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE APPLE APPLE !PHONES !PHONES !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE APPLE APPLE IPHONE8 IPHONE8 IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not neceksarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002745 PsisTiliAL not for general distribution. Page 101 EF-EA_O0116821 EFTA01251345 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. trad es. `"s AT&T Run Date: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating I. all,. ET Bytes Up Bytes Apn Dn INC' INSI MARL NICOLL 2471 03/16/20 13:22:33 60:00 8496 2928 ims -1 310410214827503 2472 03/16/20 13:37:26 12:23 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2473 03/16/20 13:49:48 2:05 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2474 03/16/20 13:49:49 2:05 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2475 03/16/20 13:51:54 7:21 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2476 03/16/20 13:59:14 6:36 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2477 03/16/20 13:59:15 6:36 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no . 2478 03/16/20 14:05:51 1:15 0 Onxtgenpho no 3587080982063726 310410214827503 AMA !PHONES 2479 03/16/20 14:07:05 3:27 192 Onxtgenpho no 3587080982063726 310410214827503 AMA IPHOME8 2480 03/16/20 14:07:06 3:27 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2481 03/16/20 14:10:33 2:06 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2482 03/16/20 14:12:38 8:31 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2483 03/16/20 14:12:39 8:31 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2484 03/16/20 14:21:10 4:53 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2485 03/16/20 14:22:33 60:00 8388 2928 ims -1 310410214827503 2486 03/16/20 14:26:02 20:41 192 0 nxtgenpho no 3587080982063726 310410214827503 AMA !PHONES 2487 03/16/20 14:26:03 20:41 0 Onxtgenpho no 3587080982063726 310410214827503 AMA !PHONES 2488 03/16/20 14:46:44 0:40 0 Onxtgenpho no 3587080982063726 310410214827503 AMA IPHOME8 2489 03/16/20 14:47:23 8:22 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2490 03/16/20 14:47:25 8:21 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2491 03/16/20 14:55:46 0:38 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002746 NTroliAL not for general distribution. Page 102 EF-EA_00ll6822 EFTA01251346 MOBILITY The information contained horaCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ap. ....,,,,• ••-•°"" s AT&T Run Date: 06/17/2020 Run Time: 18:55:40 Data Usage For: INIMPOOPOPM. Item Conn. Date Conn. Originating ET Time Number (UTC) Bytes Up Byte. npn Dn INEI IMBI 2492 03/16/20 14:56:23 14:42 192 0 nxtgonpho no 3587080982063726 310410214827503 2493 03/16/20 14:56:24 14:42 0 0 nxtgonpho no 3587080982063726 310410214827503 2494 03/16/20 15:11:06 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2495 03/16/20 15:22:33 60:00 15156 4872 ipso -1 310410214827503 2496 03/16/20 16:11:06 18:59 0 0 nxtgonpho no 3587080982063726 310410214827503 2497 03/16/20 16:22:33 60:00 6940 2804 ipso -1 310410214827503 2498 03/16/20 16:30:04 8:21 192 0 nxtgonpho no 3587080982063726 310410214827503 2499 03/16/20 16:30:05 8:21 0 0 nxtgonpho no 3587080982063726 310410214827503 2500 03/16/20 16:38:26 2:54 0 0 nxtgonpho no 3587080982063726 310410214827503 2501 03/16/20 16:41:20 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 2502 03/16/20 16:41:21 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 2503 03/16/20 16:43:24 10:32 0 0 nxtgonpho no 3587080982063726 310410214827503 2504 03/16/20 16:53:55 2:15 192 0 nxtgonpho no 3587080982063726 310410214827503 2505 03/16/20 16:53:56 2:15 0 0 nxtgonpho no 3587080982063726 310410214827503 2506 03/16/20 16:56:11 1:06 0 0 nxtgonpho no 3587080982063726 310410214827503 2507 03/16/20 16:57:16 4:52 192 0 nxtgonpho no 3587080982063726 310410214827503 2508 03/16/20 16:57:17 4:52 0 0 nxtgonpho no 3587080982063726 310410214827503 2509 03/16/20 17:02:09 0:33 0 0 nxtgonpho no 3587080982063726 310410214827503 2510 03/16/20 17:02:41 14:45 192 0 nxtgonpho no 3587080982063726 310410214827503 2511 03/16/20 17:02:42 14:45 0 0 nxtgonpho no 3587080982063726 310410214827503 2512 03/16/20 17:17:27 0:50 0 0 nxtgonpho no 3587080982063726 310410214827503 MARL NADEL APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 103 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002747 NsToliAL not for general distribution. EF-EA_00ll6823 EFTA01251347 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 41011, AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Si= Item Conn. Data Conn. Originating LT Time Rumbas (OTC) Bytes UP Byte. Apn Dn ICI IMBI 2513 03/16/20 17:18:16 53:17 192 0 nxtgonpho no 3587080982063726 310410214827503 2514 03/16/20 17:18:17 53:17 0 0 nxtgonpho no 3587080982063726 310410214827503 2515 03/16/20 17:22:33 60:00 12120 4660 ins -1 310410214827503 2516 03/16/20 18:11:34 2:55 0 Onxtgonpho no 3587080982063726 310410214827503 2517 03/16/20 18:14:28 1:08 192 Onxtgonpho no 3587080982063726 310410214827503 2518 03/16/20 18:14:29 1:08 0 0 nxtgonpho no 3587080982063726 310410214827503 2519 03/16/20 18:15:37 7:10 0 0 nxtgonpho no 3587080982063726 310410214827503 2520 03/16/20 18:22:33 60:00 8388 3712 imp -1 310410214827503 2521 03/16/20 18:22:46 204:00 192 0 nxtgonpho no 3587080982063726 310410214827503 2522 03/16/20 18:22:47 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2523 03/16/20 19:22:33 60:00 15172 5888 ins -1 310410214827503 2524 03/16/20 19:22:47 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2525 03/16/20 20:22:33 60:00 10068 3408 imp -1 310410214827503 2526 03/16/20 20:22:47 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 2527 03/16/20 21:22:33 39:47 13568 5136 imp -1 310410214827503 2528 03/16/20 21:22:47 24:00 0 Onxtgonpho no 3587080982063726 310410214827503 2529 03/16/20 21:46:47 0:06 0 Onxtgonpho no 3587080982063726 310410214827503 2530 03/16/20 21:47:15 40:04 192 Onxtgonpho no 3587080982063726 310410214827503 2531 03/16/20 21:47:16 40:04 0 Onxtgonpho no 3587080982063726 310410214827503 2532 03/16/20 22:09:00 18:19 7689 12910 imp 3587080982063726 310410214827503 2533 03/16/20 22:09:01 18:19 12842 7533 imp 3587080982063726 310410214827503 2534 03/16/20 22:09:17 0:01 0 0 imp -1 310410214827503 2535 03/16/20 22:10:19 23:51 10036 6592 imp -1 310410214827503 2536 03/16/20 22:27:20 0:35 0 0 nxtgonpho no 3587080982063726 310410214827503 MAC NICOLL APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE !PHONES APPLE 1PRONE8 APPLE 'PHONES APPLE DRONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002748 PsiTifikE not for general distribution. Page 104 EFTA 00116824 EFTA01251348 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Tama: Data Usage For: Item Conn. Date 06/17/2020 16:55:40 Conn. Time (UTC) Originating Humber ET Bytes UP Byte, Apn Dn IN= INBI HARE 2537 03/16/20 22:27:55 40:08 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2538 03/16/20 22:27:56 40:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2539 03/16/20 22:31:07 36:56 7604 10041 ins 3587080982063726 310410214827503 APPLE 2540 03/16/20 22:31:08 36:56 9952 7340 ins 3587080982063726 310410214827503 APPLE 2541 03/16/20 23:08:04 0:41 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 2542 03/16/20 23:08:06 0:39 8822 7071 ins 3587080982063726 310410214827503 APPLE 2543 03/16/20 23:08:44 8:33 192 Oruagenpho no 3587080982063726 310410214827503 APPLE 2544 03/16/20 23:08:45 8:32 7158 6748 ins 3587080982063726 310410214827503 APPLE 2545 03/16/20 23:08:45 8:33 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2546 03/16/20 23:08:46 8:32 6748 6894 ins 3587080982063726 310410214827503 APPLE 2547 03/16/20 23:17:18 0:49 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 2548 03/16/20 23:17:20 0:47 12596 13562 ins 3587080982063726 310410214827503 APPLE 2549 03/16/20 23:18:07 53:36 288 Oruagenpho no 3587080982063726 310410214827503 APPLE 2550 03/16/20 23:18:08 53:35 9000 11994 ins 3587080982063726 310410214827503 APPLE 2551 03/16/20 23:18:08 53:36 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2552 03/16/20 23:18:09 53:35 11866 8736 ins 3587080982063726 310410214827503 APPLE 2553 03/17/20 00:11:44 22:41 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2554 03/17/20 00:11:55 60:00 19480 9443 ins -2 310410214827503 2555 03/17/20 00:34:24 2:03 192 Oruagenpho no 3587080982063726 310410214827503 APPLE 2556 03/17/20 00:34:25 2:03 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 2557 03/17/20 00:36:28 10:12 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 2558 03/17/20 00:46:39 2:10 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2559 03/17/20 00:46:41 2:09 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2560 03/17/20 00:48:50 28:49 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2561 03/17/20 01:11:55 60:00 8388 2928 ins -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES DRONES 'PHONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES DRONES DRONES DRONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 105 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002749 N:infiNE not for general distribution. EF-EA_O0116825 EFTA01251349 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411., ..... a f •---s`' s AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:55:40 Conn. Time (UTC) Originating Number ET Bytes UP Byte. Apn Dn IKE' IMSI MARL MOLL 2562 03/17/20 01:17:39 27:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2563 03/17/20 01:17:40 27:32 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2564 03/17/20 01:45:12 1:07 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2565 03/17/20 01:46:18 8:35 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2566 03/17/20 01:46:19 8:35 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2567 03/17/20 01:54:54 8:15 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2568 03/17/20 02:03:08 6:37 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2569 03/17/20 02:03:09 6:37 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2570 03/17/20 02:09:46 4:54 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2571 03/17/20 02:11:55 60:00 9928 3376 imp -1 310410214827503 2572 03/17/20 02:14:40 2:03 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2573 03/17/20 02:14:41 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2574 03/17/20 02:16:44 0:34 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2575 03/17/20 02:17:17 2:18 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2576 03/17/20 02:17:18 2:18 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2577 03/17/20 02:19:35 3:07 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2578 03/17/20 02:19:37 3:06 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2579 03/17/20 02:22:43 9:31 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2580 03/17/20 02:32:14 3:31 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2581 03/17/20 02:35:44 8:26 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2582 03/17/20 02:35:45 8:26 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 106 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002750 not for general distribution. EFTA 00116826 EFTA01251350 MOBILITY The information contained heraleeNyEti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41011, AT&T Run Date: Run Time: Data Osage For: 06/17/2020 18:56:40 Item Conn. Conn. Originating ET Bytes Bytes Apn IKI IMSI MARL MODEL Date Time Number Op Dn (OTC) 2583 03/17/20 02:44:11 4:18 0 Onxtgenpho no 3587080982063726 310410214827503 2584 03/17/20 02:48:29 0:44 0 Orumgenpho no 3587080982063726 310410214827503 2585 03/17/20 02:49:13 34:19 192 Orumgenpho no 3587080982063726 310410214827503 2586 03/17/20 02:49:14 34:19 0 Orumgenpho no 3587080982063726 310410214827503 2587 03/17/20 03:11:55 15:38 3424 1340 ims -1 310410214827503 2588 03/17/20 03:23:33 17:56 0 Orumgenpho no 3587080982063726 310410214827503 2589 03/17/20 03:28:08 0:26 6930 4178 ims 3587080982063726 310410214827503 2590 03/17/20 03:28:34 60:00 17131 11098 ims 3587080982063726 310410214827503 2591 03/17/20 03:41:28 27:16 192 Orumgenpho no 3587080982063726 310410214827503 2592 03/17/20 03:41:29 27:16 0 Orumgenpho no 3587080982063726 310410214827503 2593 03/17/20 04:08:45 9:13 0 Orumgenpho no 3587080982063726 310410214827503 2594 03/17/20 04:17:58 8:29 192 Onamgenpho no 3587080982063726 310410214827503 2595 03/17/20 04:17:59 8:29 0 Onamgenpho no 3587080982063726 310410214827503 2596 03/17/20 04:26:28 23:45 0 Onamgenpho no 3587080982063726 310410214827503 2597 03/17/20 04:28:34 24:06 5072 1572 ims 3587080982063726 310410214827503 2598 03/17/20 04:50:12 55:06 192 Onamgenpho no 3587080982063726 310410214827503 2599 03/17/20 04:50:13 60:00 0 Orumgenpho no 3587080982063726 310410214827503 2600 03/17/20 04:54:18 60:00 15007 8738 I. -1 310410214827503 2601 03/17/20 05:50:13 60:00 0 Orumgenpho no 3587080982063726 310410214827503 2602 03/17/20 05:54:18 3:03 0 0 I. -1 310410214827503 2603 03/17/20 06:05:16 1:38 0 0 I. -1 310410214827503 2604 03/17/20 06:09:29 14:57 8629 6424 I. -1 310410214827503 2605 03/17/20 06:35:42 11:59 8189 6016 I. -1 310410214827503 2606 03/17/20 06:50:13 60:00 0 Orumgenpho no 3587080982063726 310410214827503 2607 03/17/20 06:53:34 11:08 8249 6072 I. -1 310410214827503 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE 1PRONE8 APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 107 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002751 PsisTiliAL not for general distribution. EF-EA_O0116827 EFTA01251351 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in 41111, AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:55:40 Conn. originating LT Time Number (OTC) Bytes UP Byte. Apn Dn INr2 IMSI ten MODEL 2608 03/17/20 07:06:33 1:38 0 0 ins -1 310410214827503 2609 03/17/20 07:10:15 11:07 9759 6207 ins -1 310410214827503 2610 03/17/20 07:26:34 0:07 O 0 ins -1 310410214827503 2611 03/17/20 07:31:09 3:34 8189 6046 ins -1 310410214827503 2612 03/17/20 07:42:29 60:00 15005 8986 ins -1 310410214827503 2613 03/17/20 07:50:13 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2614 03/17/20 08:42:29 60:00 6924 2680 imp -1 310410214827503 2615 03/17/20 08:50:13 0:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2616 03/17/20 09:42:29 9:49 0 0 imp -1 310410214827503 2617 03/17/20 09:56:08 60:00 16577 9082 imp -1 310410214827503 2618 03/17/20 10:56:08 53:28 8496 2928 imp -1 310410214827503 2619 03/17/20 11:52:58 20:02 8351 6051 imp -1 310410214827503 2620 03/17/20 12:19:55 20:03 8361 5998 ins -1 310410214827503 2621 03/17/20 12:30:21 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONZ8 2622 03/17/20 12:31:17 0:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2623 03/17/20 12:31:29 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2624 03/17/20 12:42:30 13:58 9768 6196 imp -1 310410214827503 2625 03/17/20 13:03:49 59:58 19046 9302 ins -1 310410214827503 2626 03/17/20 13:31:29 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONZ8 2627 03/17/20 14:14:13 60:00 19300 9472 ins -1 310410214827503 2628 03/17/20 14:31:29 11:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONZ8 2629 03/17/20 14:42:33 30:03 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2630 03/17/20 14:42:34 30:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2631 03/17/20 15:12:37 0:33 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2632 03/17/20 15:13:09 2:14 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2633 03/17/20 15:13:11 2:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2634 03/17/20 15:14:13 60:00 8744 5976 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002752 not for general distribution. Page 108 EF-EAJVII6828 EFTA01251352 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, AT&T Run Dato: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating TT Time Number (OTC) Bytes UP Bytoa Dn Apn INCI INSt teUtT 2635 03/17/20 15:15:24 0:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2636 03/17/20 15:15:58 2:03 192 e Onxtgonpho no 3587080982063726 310410214827503 APPLE 2637 03/17/20 15:15:59 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2638 03/17/20 15:18:02 1:55 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2639 03/17/20 15:19:56 2:09 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2640 03/17/20 15:19:58 2:08 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2641 03/17/20 15:22:06 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2642 03/17/20 16:14:13 6:00 0 0 imp -1 310410214827503 2643 03/17/20 16:20:14 60:00 21092 10632 imp -1 310410214827503 2644 03/17/20 16:22:06 3:35 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2645 03/17/20 16:25:40 20:42 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2646 03/17/20 16:25:41 20:42 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2647 03/17/20 16:46:23 4:40 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2648 03/17/20 16:51:02 2:06 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2649 03/17/20 16:51:04 2:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2650 03/17/20 16:53:09 2:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2651 03/17/20 16:56:06 31:00 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2652 03/17/20 16:56:07 31:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2653 03/17/20 17:20:14 60:00 9944 3408 ins -1 310410214827503 2654 03/17/20 17:27:07 51:24 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2655 03/17/20 18:18:30 155:32 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2656 03/17/20 18:18:31 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PRONGS !PRONGS !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES !PRONGS !PRONGS !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 109 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002753 N:FrliAL not for general distribution. EF-EA_00ll6829 EFTA01251353 MOBILITY The information contained hereleoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 411111, AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 16:53:41 Conn. 21mo (USC) Originating Number LT Bytes Up Bytes Apn Dn INZI IMSI NUM 2657 03/17/20 18:20:14 60:00 11516 4300 ims -1 310410214827503 2658 03/17/20 19:18:31 60:00 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE 2659 03/17/20 19:20:14 55:38 12244 4408 imo -1 310410214827503 2660 03/17/20 20:15:28 38:34 7306 6810 imo 3587080982063726 310410214827503 APPLE 2661 03/17/20 20:15:28 38:35 6742 6954 am 3587080982063726 310410214827503 APPLE 2662 03/17/20 20:15:51 60:00 20945 14596 am -1 310410214827503 2663 03/17/20 20:18:31 35:32 0 Oruftgonpho c no 3587080982063726 310410214827503 APPLE 2664 03/17/20 20:54:03 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2665 03/17/20 21:15:51 60:00 8604 3052 ins -1 310410214827503 2666 03/17/20 21:54:03 4:43 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2667 03/17/20 21:58:45 8:40 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 2668 03/17/20 21:58:46 8:40 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 2669 03/17/20 22:07:26 31:55 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 2670 03/17/20 22:15:51 60:00 10268 3424 ins -1 310410214827503 2671 03/17/20 22:39:20 2:10 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2672 03/17/20 22:39:21 2:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2673 03/17/20 22:41:31 1:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2674 03/17/20 22:42:41 68:13 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2675 03/17/20 22:42:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2676 03/17/20 23:15:51 60:00 11844 3624 ins -1 310410214827503 2677 03/17/20 23:42:42 8:13 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2678 03/17/20 23:50:54 18:33 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 2679 03/17/20 23:50:55 18:33 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 2680 03/18/20 00:09:28 8:46 0 Onatgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PHONE8 !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 110 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002754 NaTtAdti not for general distribution. EF-EA_O0116830 EFTA01251354 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in 4111. ....,,f ••-s""s AT&T Run Data: Run Tama: Data Usage Tor: Item Conn. Data 06/17/2020 10:55:41 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apr. Dn INZI INSI MAKE MODEL 2681 03/18/20 00:15:51 60:00 13804 6628 isms -1 310410214827503 2682 03/18/20 00:18:14 10:53 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2683 03/18/20 00:18:14 10:54 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2684 03/18/20 00:29:08 56:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2685 03/18/20 01:15:51 60:00 10036 3176 ins -1 310410214827503 2686 03/18/20 01:25:18 21:55 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2687 03/18/20 01:25:19 21:55 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2688 03/18/20 01:47:13 19:14 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2689 03/18/20 01:47:14 19:14 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2690 03/18/20 02:06:28 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2691 03/18/20 02:15:51 60:00 10252 3300 ins -1 310410214827503 2692 03/18/20 03:06:28 6:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2693 03/18/20 03:12:50 28:42 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2694 03/18/20 03:12:51 28:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2695 03/18/20 03:15:51 60:00 10380 4252 ins -1 310410214827503 2696 03/18/20 03:41:33 15:21 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2697 03/18/20 03:56:54 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2698 03/18/20 04:15:51 60:00 6848 2896 ins -1 310410214827503 2699 03/18/20 05:15:51 60:00 12028 4536 ins -1 310410214827503 2700 03/18/20 06:15:51 60:00 10272 4236 ins -1 310410214827503 2701 03/18/20 07:15:51 60:00 6956 2912 ins -1 310410214827503 2702 03/18/20 08:15:51 60:00 6956 2788 ins -1 310410214827503 2703 03/18/20 09:15:51 60:00 8496 3160 ins -1 310410214827503 2704 03/18/20 10:15:51 60:00 8604 3160 ins -1 310410214827503 2705 03/18/20 11:15:51 31:46 15236 6264 lms -1 310410214827503 2706 03/18/20 11:47:31 5:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002755 not for general distribution. Page 111 EF-EA_O0116831 EFTA01251355 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. trad s. `"" AT&T Run Date: Run Time: Data Osage For: Itea Conn. Date 06/17/2020 1S:55:41 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn INS' NAfl NICOLL 2707 03/18/20 11:52:50 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2708 03/18/20 11:52:52 60:00 14426 11616 ins 3587080982063726 310410214827503 APPLE IPHONE8 2709 03/18/20 12:52:50 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2710 03/18/20 12:52:52 60:00 5408 2756 • ins 3587080982063726 310410214827503 APPLE IPHONE8 2711 03/18/20 13:52:50 36:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2712 03/18/20 13:52:52 26:54 2596 1324 ins 3587080982063726 310410214827503 APPLE !PHONES 2713 03/18/20 14:19:46 3:57 3316 1324 imo 3587080982063726 310410214827503 APPLE !PHONES 2714 03/18/20 14:23:43 4:05 3952 1448 ins 3587080982063726 310410214827503 APPLE IPHONE8 2715 03/18/20 14:27:48 60:00 8012 2772 imo 3587080982063726 310410214827503 APPLE IPHONE8 2716 03/18/20 14:29:08 2:23 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2717 03/18/20 14:29:09 2:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2718 03/18/20 14:31:31 3:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2719 03/18/20 14:31:33 2:59 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2720 03/18/20 14:34:31 52:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2721 03/18/20 15:02:33 60:00 18492 9824 ins -1 310410214827503 2722 03/18/20 15:26:53 2:31 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2723 03/18/20 15:26:54 2:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2724 03/18/20 15:27:48 4:43 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 2725 03/18/20 15:29:25 43:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2726 03/18/20 15:32:31 60:00 22853 16088 ins -1 310410214827503 2727 03/18/20 16:02:33 55:23 0 0 ins -1 310410214827503 2728 03/18/20 16:12:31 1:13 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2729 03/18/20 16:12:32 1:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2730 03/18/20 16:13:44 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2731 03/18/20 16:13:46 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002756 NsToliAL not for general distribution. Page 112 EF-EA_O0116832 EFTA01251356 MOBILITY The information contained heralCONelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in .._____,, %•—•°"" e AT&T Run pato: Run Time: Data Osage for: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating ET Bytes Bytes Apn INEZ Number Up Dn INSI KAM MODEL 2732 03/18/20 16:15:49 43:56 0 0 nxtgonpho no 3587080982063726 310410214827503 2733 03/18/20 16:32:31 60:00 5072 1696 ism -1 310410214827503 2734 03/18/20 16:57:55 60:00 19408 10910 ism -1 310410214827503 2735 03/18/20 16:59:44 8:18 192 0 nxtgonpho no 3587080982063726 310410214827503 2736 03/18/20 16:59:45 8:18 0 0 nxtgonpho no 3587080982063726 310410214827503 2737 03/18/20 17:08:03 49:11 0 0 nxtgonpho no 3587080982063726 310410214827503 2738 03/18/20 17:32:31 29:42 0 0 ins -1 310410214827503 2739 03/18/20 17:57:13 6:34 192 0 nxtgonpho no 3587080982063726 310410214827503 2740 03/18/20 17:57:14 6:34 0 0 nxtgonpho no 3587080982063726 310410214827503 2741 03/18/20 17:57:55 4:18 0 0 ins -1 310410214827503 2742 03/18/20 18:02:11 1:36 6264 6820 ins 3587080982063726 310410214827503 2743 03/18/20 18:02:13 1:35 6676 6000 ins 3587080982063726 310410214827503 2744 03/18/20 18:03:04 60:00 18853 10233 ins -1 310410214827503 2745 03/18/20 18:03:48 3:10 0 0 nxtgonpho no 3587080982063726 310410214827503 2746 03/18/20 18:06:57 9:07 192 0 nxtgonpho no 3587080982063726 310410214827503 2747 03/18/20 18:06:59 9:06 0 0 nxtgonpho no 3587080982063726 310410214827503 2748 03/18/20 18:16:05 2:18 0 0 nxtgonpho no 3587080982063726 310410214827503 2749 03/18/20 18:18:22 8:15 192 0 nxtgonpho no 3587080982063726 310410214827503 2750 03/18/20 18:18:23 8:15 0 0 nxtgonpho no 3587080982063726 310410214827503 2751 03/18/20 18:26:38 1:07 0 0 nxtgonpho no 3587080982063726 310410214827503 2752 03/18/20 18:27:44 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 2753 03/18/20 18:27:45 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 2754 03/18/20 18:29:48 21:07 0 0 nxtgonpho no 3587080982063726 310410214827503 2755 03/18/20 18:50:54 8:34 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 113 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002757 NToliAlt not for general distribution. EF-EA_O0116833 EFTA01251357 MOBILITY The information contained heraleop+Ftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:56:41 Conn. Originating ET Time Number (UTC) Bytes Op Bytom Apn Dn Urn IMSI Man 2756 03/18/20 18:50:55 8:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2757 03/18/20 18:59:29 39:33 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2758 03/18/20 19:03:04 58:01 8048 3588 imp -1 310410214827503 2759 03/18/20 19:39:01 14:50 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2760 03/18/20 19:39:02 14:50 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2761 03/18/20 19:53:52 5:18 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2762 03/18/20 19:59:09 8:18 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2763 03/18/20 19:59:10 8:18 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2764 03/18/20 20:00:39 1:21 7096 6816 imp 3587080982063726 310410214827503 APPLE 2765 03/18/20 20:00:40 1:21 6748 6832 imp 3587080982063726 310410214827503 APPLE 2766 03/18/20 20:01:05 2:01 8095 5982 imp -1 310410214827503 2767 03/18/20 20:01:59 5:28 6334 6666 imp 3587080982063726 310410214827503 APPLE 2768 03/18/20 20:02:01 5:27 6666 6070 imp 3587080982063726 310410214827503 APPLE 2769 03/18/20 20:03:06 20:56 11686 8040 imp -1 310410214827503 2770 03/18/20 20:07:28 0:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2771 03/18/20 20:07:44 39:49 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2772 03/18/20 20:18:47 28:46 6666 5980 vas 3587080982063726 310410214827503 APPLE 2773 03/18/20 20:47:32 4:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2774 03/18/20 20:47:33 4:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2775 03/18/20 20:51:44 13:13 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2776 03/18/20 20:51:45 13:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2777 03/18/20 20:52:00 12:57 6336 6988 vas 3587080982063726 310410214827503 APPLE 2778 03/18/20 20:52:01 12:57 6864 6072 vas 3587080982063726 310410214827503 APPLE 2779 03/18/20 21:04:58 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2780 03/18/20 21:39:56 0:01 0 0 imp -1 310410214827503 2781 03/18/20 21:46:22 50:48 25152 16800 imp 3587080982063726 310410214827503 APPLE !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 114 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002758 NTailiAL not for general distribution. EF-EA_00ll6834 EFTA01251358 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 410. tr. g ma# S 1/4 . AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes arm Dn INEI DMZ MUM MODEL 2782 03/18/20 22:04:58 60:00 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2783 03/18/20 22:37:10 60:00 15448 5088 ins 3587080982063726 310410214827503 APPLE 'PHONES 2784 03/18/20 23:04:58 40:02 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2785 03/18/20 23:37:10 30:08 5072 1572 ins 3587080982063726 310410214827503 APPLE 'PHONES 2786 03/18/20 23:44:59 19:47 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2787 03/18/20 23:45:00 19:47 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2788 03/19/20 00:04:47 1:21 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2789 03/19/20 00:06:07 8:21 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2790 03/19/20 00:06:08 8:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2791 03/19/20 00:06:19 8:09 7226 6814 ins 3587080982063726 310410214827503 APPLE 'PHONES 2792 03/19/20 00:06:20 8:09 6746 6962 ins 3587080982063726 310410214827503 APPLE 'PHONES 2793 03/19/20 00:07:18 15:11 9894 8570 ins -1 310410214827503 2794 03/19/20 00:14:29 6:44 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2795 03/19/20 00:21:12 8:04 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2796 03/19/20 00:21:13 8:04 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2797 03/19/20 00:22:27 1:34 6263 6744 ims 3587080982063726 310410214827503 APPLE 'PHONES 2798 03/19/20 00:22:29 1:33 6676 5999 ims 3587080982063726 310410214827503 APPLE 'PHONES 2799 03/19/20 00:24:02 17:34 8528 6160 ims 3587080982063726 310410214827503 APPLE 'PHONES 2800 03/19/20 00:29:17 2:55 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2801 03/19/20 00:32:12 6:23 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2802 03/19/20 00:32:13 6:23 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2803 03/19/20 00:38:36 3:08 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2804 03/19/20 00:41:43 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2805 03/19/20 00:41:44 2:02 6225 6672 ims 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 115 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002759 not for general distribution. EF-EAJVII6835 EFTA01251359 NOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ., •---_:e0 "."1° AT&T Run Data: Run Tuna: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Rumbas (Inc) Bytes Up Byte. Rpn on IN= IMPI ten NOD= 2806 03/19/20 00:41:44 2:03 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2807 03/19/20 00:41:45 2:02 6672 5961 imp 3587080982063726 310410214827503 APPLE IPHONE8 2808 03/19/20 00:43:47 3:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2809 03/19/20 00:43:49 1:05 6692 6000 imp 3587080982063726 310410214827503 APPLE IPM01428 2810 03/19/20 00:44:54 0:20 3872 1572 ins 3587080982063726 310410214827503 APPLE IPHONE8 2811 03/19/20 00:45:14 1:39 2644 1324 ins 3587080982063726 310410214827503 APPLE !PHONES 2812 03/19/20 00:46:52 19:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2813 03/19/20 00:46:53 19:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2814 03/19/20 00:46:54 19:02 6351 6674 ins 3587080982063726 310410214827503 APPLE !PHONES 2815 03/19/20 00:46:55 19:02 6674 6087 ins 3587080982063726 310410214827503 APPLE !PHONES 2816 03/19/20 00:47:12 60:00 20306 9690 ins -1 310410214827503 2817 03/19/20 01:05:57 7:41 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2818 03/19/20 01:13:37 2:15 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2819 03/19/20 01:13:38 2:15 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2820 03/19/20 01:15:53 2:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2821 03/19/20 01:18:50 2:14 192 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2822 03/19/20 01:18:51 2:14 0 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2823 03/19/20 01:21:05 0:47 0 Onattgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2824 03/19/20 01:21:51 8:14 192 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2825 03/19/20 01:21:52 8:14 0 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2826 03/19/20 01:30:06 5:35 0 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2827 03/19/20 01:35:40 14:38 192 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2828 03/19/20 01:35:41 14:38 0 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2829 03/19/20 01:47:12 60:00 7064 2880 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 116 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002760 PsisTili AL not for general distribution. EF-EA_O0116836 EFTA01251360 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. %C.7,,a 4 ‘ing° AT&T Run Data: Run Tuna: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating LT Time Number (OTC) Bytes UP Byte. Apn Dn ICI INSI MARL MODEL 2830 03/19/20 01:50:19 2:48 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2831 03/19/20 01:53:06 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2832 03/19/20 01:53:07 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2833 03/19/20 01:55:17 3:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2834 03/19/20 01:58:21 2:05 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2835 03/19/20 01:58:23 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2836 03/19/20 02:00:27 4:49 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2837 03/19/20 02:05:15 18:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2838 03/19/20 02:05:16 18:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2839 03/19/20 02:23:41 7:51 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2840 03/19/20 02:23:42 7:51 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2841 03/19/20 02:31:33 8:23 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2842 03/19/20 02:31:34 8:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2843 03/19/20 02:39:56 6:12 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2844 03/19/20 02:39:57 6:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2845 03/19/20 02:46:09 12:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2846 03/19/20 02:47:12 60:00 8388 2896 imp -1 310410214827503 2847 03/19/20 02:58:31 2:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2848 03/19/20 02:58:32 2:11 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2849 03/19/20 03:00:43 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2850 03/19/20 03:01:16 40:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002761 not for general distribution. Page 117 EFIA_OCIII6837 EFTA01251361 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, ...,,,,• ••-s`' s AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating Cr Time Rumbas (UTC) Bytes UP Byte. Apn Dn INLI INS/ KAM NICOLL 2851 03/19/20 03:01:17 52:53 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2852 03/19/20 03:47:12 60:00 11596 4004 ins -1 310410214827503 2853 03/19/20 03:54:10 2:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2854 03/19/20 03:54:11 2:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2855 03/19/20 03:56:20 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2856 03/19/20 03:56:53 8:33 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2857 03/19/20 03:56:54 8:33 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2858 03/19/20 04:05:26 8:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2859 03/19/20 04:05:28 8:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2860 03/19/20 04:13:59 19:14 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2861 03/19/20 04:33:12 14:52 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2862 03/19/20 04:33:13 14:52 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2863 03/19/20 04:47:12 60:00 8604 3112 imp -1 310410214827503 2864 03/19/20 04:48:05 1:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2865 03/19/20 04:49:34 21:18 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2866 03/19/20 04:49:34 21:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2867 03/19/20 05:10:52 27:29 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2868 03/19/20 05:10:53 27:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2869 03/19/20 05:38:22 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2870 03/19/20 05:38:55 72:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2871 03/19/20 05:38:56 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2872 03/19/20 05:47:12 36:19 6848 2932 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002762 NaTtAdti not for general distribution. Page 118 EF-EA_O0116838 EFTA01251362 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ......„0 ••-s`"1. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating CT Timo Number (OTC) Byte. Up Bytoa Apn On INEI IMSI MUM MODEL 2873 03/19/20 06:24:17 26:48 6246 6666 imp 3587080982063726 310410214827503 APPLE IPHONEB 2874 03/19/20 06:24:18 26:48 6666 5982 imp 3587080982063726 310410214827503 APPLE IPHONEB 2875 03/19/20 06:38:56 12:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPROME8 2876 03/19/20 06:51:06 0:51 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2877 03/19/20 06:51:56 21:18 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2878 03/19/20 06:51:57 21:18 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2879 03/19/20 06:56:36 60:00 16703 9200 imp -1 310410214827503 2880 03/19/20 07:13:15 8:39 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2881 03/19/20 07:13:16 8:39 0 Onatgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2882 03/19/20 07:21:55 46:41 192 Onatgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2883 03/19/20 07:21:56 46:41 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2884 03/19/20 07:56:36 60:00 6972 2664 imp -1 310410214827503 2885 03/19/20 08:08:36 21:07 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2886 03/19/20 08:08:37 21:07 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2887 03/19/20 08:29:44 0:36 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2888 03/19/20 08:30:19 40:22 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2889 03/19/20 08:30:20 40:22 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2890 03/19/20 08:56:36 60:00 10236 3360 imp -1 310410214827503 2891 03/19/20 09:10:42 14:55 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2892 03/19/20 09:10:43 14:55 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2893 03/19/20 09:25:37 33:55 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2894 03/19/20 09:25:38 33:55 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2895 03/19/20 09:56:36 60:00 9928 3252 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 119 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002763 not for general distribution. EF-EA_O0116839 EFTA01251363 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number CT Byte. Up Bytom Apn Dn TM= IMS1 NICOLL 2896 03/19/20 09:59:33 0:38 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2897 03/19/20 10:00:10 2:49 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2898 03/19/20 10:00:11 2:49 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2899 03/19/20 10:03:00 0:33 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2900 03/19/20 10:03:32 28:46 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2901 03/19/20 10:03:33 28:46 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2902 03/19/20 10:32:19 55:25 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2903 03/19/20 10:56:36 60:00 8264 2772 ims -1 310410214827503 2904 03/19/20 11:27:43 31:53 192 Onatgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2905 03/19/20 11:27:44 31:53 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2906 03/19/20 11:56:36 60:00 13568 4752 ims -1 310410214827503 2907 03/19/20 11:59:37 11:37 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2908 03/19/20 11:59:38 11:37 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2909 03/19/20 12:11:15 8:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2910 03/19/20 12:19:15 15:40 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2911 03/19/20 12:19:16 15:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2912 03/19/20 12:34:55 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2913 03/19/20 12:47:26 60:00 18813 9516 imo -1 310410214827503 2914 03/19/20 12:56:36 60:00 0 0 imp -1 310410214827503 2915 03/19/20 13:34:55 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2916 03/19/20 13:47:26 60:00 8372 3036 imo -1 310410214827503 2917 03/19/20 13:56:36 60:00 0 0 imp -1 310410214827503 2918 03/19/20 14:34:55 32:28 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2919 03/19/20 14:47:26 60:00 4748 2248 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 120 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002764 s bn mild is not for general distribution. EF-EAJVII6840 EFTA01251364 MOBILITY The information contained her is 2996479 06/17/2020 ATET has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. ....,,,• ••-"s" -". AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 la:SS:41 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Min Dn IN= IM9I 2920 03/19/20 14:56:36 4:16 0 0 ims -1 310410214827503 2921 03/19/20 15:00:52 60:00 19541 11190 ins -1 310410214827503 2922 03/19/20 15:07:22 2:06 192 0 nxtgonpho no 3587080982063726 310410214827503 2923 03/19/20 15:07:23 2:06 0 0 nxtgonpho no 3587080982063726 310410214827503 2924 03/19/20 15:09:29 2:19 0 Onxtgonpho no 3587080982063726 310410214827503 2925 03/19/20 15:11:48 2:02 192 Onxtgonpho no 3587080982063726 310410214827503 2926 03/19/20 15:11:49 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 2927 03/19/20 15:13:52 1:14 0 Onxtgonpho no 3587080982063726 310410214827503 2928 03/19/20 15:15:05 1:56 192 Oruftgonpho no 3587080982063726 310410214827503 2929 03/19/20 15:15:06 1:56 0 Oruftgonpho no 3587080982063726 310410214827503 2930 03/19/20 15:17:02 4:44 0 0 nxtgonpho no 3587080982063726 310410214827503 2931 03/19/20 15:21:45 20:00 192 Onxtgonpho no 3587080982063726 310410214827503 2932 03/19/20 15:21:46 35:07 0 Onxtgonpho no 3587080982063726 310410214827503 2933 03/19/20 15:47:26 60:00 0 0 ims -1 310410214827503 2934 03/19/20 15:56:53 0:34 0 Onxtgonpho no 3587080982063726 310410214827503 2935 03/19/20 15:57:27 38:59 192 0 nxtgonpho no 3587080982063726 310410214827503 2936 03/19/20 15:57:27 39:00 0 Onxtgonpho no 3587080982063726 310410214827503 2937 03/19/20 16:00:52 60:00 15244 12636 ims -1 310410214827503 2938 03/19/20 16:29:56 0:40 1857 0 ims -1 310410214827503 2939 03/19/20 16:36:27 12:41 0 Onxtgonpho no 3587080982063726 310410214827503 2940 03/19/20 16:47:26 23:01 0 0 ims -1 310410214827503 2941 03/19/20 16:49:07 2:21 192 Onxtgonpho no 3587080982063726 310410214827503 2942 03/19/20 16:49:09 2:20 0 Onxtgonpho no 3587080982063726 310410214827503 MKT MOD= APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 121 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002765 NTifikE not for general distribution. EF-EA_00116841 EFTA01251365 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating Time Number (OTC) CT Byte. UP Byte. Apn Dn INSI MARL MODEL 2943 03/19/20 16:51:29 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2944 03/19/20 16:52:10 2:41 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2945 03/19/20 16:52:11 2:41 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2946 03/19/20 16:54:52 2:22 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2947 03/19/20 16:54:53 2:22 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPROME8 2948 03/19/20 16:57:15 41:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2949 03/19/20 17:00:52 14:42 4840 2680 imp -1 310410214827503 2950 03/19/20 17:10:27 43:09 15853 12072 imp -1 310410214827503 2951 03/19/20 17:38:32 17:57 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2952 03/19/20 17:38:33 17:57 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2953 03/19/20 17:53:12 3:17 7220 6844 imp 3587080982063726 310410214827503 APPLE !PHONES 2954 03/19/20 17:53:13 3:17 6736 6956 imp 3587080982063726 310410214827503 APPLE !PHONES 2955 03/19/20 17:53:36 60:00 11309 6742 imp -1 310410214827503 2956 03/19/20 17:56:30 8:45 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2957 03/19/20 18:05:14 2:18 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2958 03/19/20 18:05:16 2:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2959 03/19/20 18:07:11 0:21 6244 6674 imp 3587080982063726 310410214827503 APPLE !PHONES 2960 03/19/20 18:07:12 0:21 6674 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 2961 03/19/20 18:07:33 1:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2962 03/19/20 18:07:34 0:01 0 0 as 3587080982063726 310410214827503 APPLE 1PROME8 2963 03/19/20 18:07:42 0:40 6672 5964 as 3587080982063726 310410214827503 APPLE !PHONES 2964 03/19/20 18:08:22 60:00 13768 4700 as 3587080982063726 310410214827503 APPLE !PHONES 2965 03/19/20 18:09:06 5:51 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2966 03/19/20 18:09:07 5:51 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2967 03/19/20 18:14:58 0:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 122 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002766 not for general distribution. EF-EAJVII6842 EFTA01251366 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage for: Item Conn. Date 06/17/2020 Conn. Originating ST Time Number (um) Bytes Up Bytes Apn Dn IMBI NICOLL 2968 03/19/20 18:15:29 81:06 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2969 03/19/20 18:15:30 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2970 03/19/20 18:53:36 54:41 0 0 ims -1 310410214827503 2971 03/19/20 19:08:22 45:19 13716 7424 ims 3587080982063726 310410214827503 APPLE !PHONES 2972 03/19/20 19:15:30 21:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2973 03/19/20 19:26:32 0:19 0 520 ims 3587080982063726 310410214827503 APPLE !PHONES 2974 03/19/20 19:36:36 5:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2975 03/19/20 19:41:37 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2976 03/19/20 19:41:38 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2977 03/19/20 19:43:48 2:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2978 03/19/20 19:45:59 2:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2979 03/19/20 19:46:00 2:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2980 03/19/20 19:48:09 40:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2981 03/19/20 19:48:16 0:01 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2982 03/19/20 19:48:30 0:04 48 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2983 03/19/20 19:54:35 60:00 26556 11232 ims -1 310410214827503 2984 03/19/20 20:28:45 8:30 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2985 03/19/20 20:28:46 8:30 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2986 03/19/20 20:37:16 6:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2987 03/19/20 20:43:26 8:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2988 03/19/20 20:43:27 8:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2989 03/19/20 20:51:53 39:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2990 03/19/20 20:54:35 47:17 3424 1340 ims -1 310410214827503 2991 03/19/20 21:30:57 61:25 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002767 not for general distribution. Page 123 EF-EA_00116843 EFTA01251367 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tri sO AT&T Run Oato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 16:55:45 Conn. Time (OTC) Originating Number UP ET Bytes Bytes Apn Dn ItCEI INS' MARL MODEL 2992 03/19/20 21:30:58 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2993 03/19/20 21:51:45 40:37 8164 6868 ins 3587080982063726 310410214827503 APPLE !PHONES 2994 03/19/20 21:51:46 40:37 6868 8008 ins 3587080982063726 310410214827503 APPLE !PHONES 2995 03/19/20 21:52:05 9:49 10815 8812 isms -1 310410214827503 2996 03/19/20 22:01:54 30:28 9700 10530 isms 3587080982063726 310410214827503 APPLE !PHONES 2997 03/19/20 22:01:55 30:28 10530 9436 isms 3587080982063726 310410214827503 APPLE !PHONES 2998 03/19/20 22:30:58 1:25 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2999 03/19/20 22:32:23 1:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3000 03/19/20 22:33:48 8:41 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3001 03/19/20 22:33:49 8:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3002 03/19/20 22:36:21 60:00 21342 12618 isms -1 310410214827503 3003 03/19/20 22:42:30 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3004 03/19/20 22:42:59 37:24 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3005 03/19/20 22:43:00 37:24 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3006 03/19/20 23:20:24 8:28 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3007 03/19/20 23:28:52 43:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3008 03/19/20 23:28:53 43:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3009 03/19/20 23:36:21 60:00 8496 3020 isms -1 310410214827503 3010 03/20/20 00:12:05 17:27 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3011 03/20/20 00:29:32 11:20 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3012 03/20/20 00:29:33 11:20 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3013 03/20/20 00:36:21 60:00 8728 3128 ins -1 310410214827503 3014 03/20/20 00:40:53 4:32 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3015 03/20/20 00:45:24 2:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002768 PsiTniliAL not for general distribution. Page 124 EFTA_00116844 EFTA01251368 MOBILITY The information contained heralCoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tri t si ng° AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn On IKE' IMS1 MARE MODEL 3016 03/20/20 00:45:25 2:11 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3017 03/20/20 00:47:36 0:39 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3018 03/20/20 00:48:15 8:45 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3019 03/20/20 00:48:16 8:45 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3020 03/20/20 00:57:01 1:40 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3021 03/20/20 00:58:40 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3022 03/20/20 00:58:41 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3023 03/20/20 01:00:44 14:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3024 03/20/20 01:15:24 14:56 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3025 03/20/20 01:15:24 14:57 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3026 03/20/20 01:30:21 1:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3027 03/20/20 01:31:31 39:34 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3028 03/20/20 01:31:32 39:34 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3029 03/20/20 01:36:21 24:43 3424 1432 ims -1 310410214827503 3030 03/20/20 02:01:02 10:03 7228 6804 ims 3587080982063726 310410214827503 APPLE IPHOME8 3031 03/20/20 02:01:03 10:03 6736 6964 ims 3587080982063726 310410214827503 APPLE IPHOME8 3032 03/20/20 02:02:44 60:00 15057 8834 I. -1 310410214827503 3033 03/20/20 02:11:05 2:11 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3034 03/20/20 02:11:06 2:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3035 03/20/20 02:13:17 10:19 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3036 03/20/20 02:23:35 8:16 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3037 03/20/20 02:23:36 8:16 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 125 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002769 NTroliAL not for general distribution. EF-EA_00116845 EFTA01251369 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in ....,0• ••--s`' s AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 18:55:45 Conn. originating ET Time Number op (OTC) Bytes Bytes Apn Dn IND I INSI MARL 3038 03/20/20 02:31:52 39:29 0 OruMgonpho no 3587080982063726 310410214827503 APPLE 3039 03/20/20 03:02:44 60:00 8388 3004 ims -1 310410214827503 3040 03/20/20 03:11:21 30:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3041 03/20/20 03:11:22 35:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3042 03/20/20 03:46:32 2:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3043 03/20/20 03:46:33 2:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3044 03/20/20 03:48:42 1:14 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3045 03/20/20 03:49:55 21:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3046 03/20/20 03:49:56 21:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3047 03/20/20 04:02:44 60:00 8388 3020 ims -1 310410214827503 3048 03/20/20 04:11:08 50:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3049 03/20/20 05:01:08 28:52 192 OruMgonpho no 3587080982063726 310410214827503 APPLE 3050 03/20/20 05:01:09 28:52 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3051 03/20/20 05:02:44 60:00 10036 3176 ims -1 310410214827503 3052 03/20/20 05:30:02 21:58 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3053 03/20/20 05:51:59 14:46 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3054 03/20/20 05:52:00 14:46 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3055 03/20/20 06:02:44 60:00 16992 6140 ims -1 310410214827503 3056 03/20/20 06:06:46 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3057 03/20/20 07:02:44 60:00 7064 2788 imp -1 310410214827503 3058 03/20/20 07:06:46 8:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3059 03/20/20 07:15:39 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3060 03/20/20 07:15:41 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002770 NaTtAdti not for general distribution. Page 126 EF-EAJVII6846 EFTA01251370 MOBILITY The information contained heraleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in •.,...,sa m% ‘..S. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 16:55:45 Conn. Time (DSC) Originating Number Cr Bytes UP Byte. Alan Dn INLI INBI Mal MODEL 3061 03/20/20 07:17:44 3:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3062 03/20/20 07:20:49 3:21 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3063 03/20/20 07:20:50 3:21 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3064 03/20/20 07:24:11 34:08 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3065 03/20/20 07:24:12 34:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3066 03/20/20 07:58:20 54:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3067 03/20/20 08:02:44 60:00 8388 2928 ins -1 310410214827503 3068 03/20/20 08:53:00 15:29 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3069 03/20/20 08:53:01 15:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3070 03/20/20 09:02:44 60:00 7172 2912 ins -1 310410214827503 3071 03/20/20 09:08:30 8:35 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3072 03/20/20 09:08:31 8:35 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3073 03/20/20 09:17:06 0:53 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3074 03/20/20 09:17:58 9:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3075 03/20/20 09:17:59 9:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3076 03/20/20 09:27:11 162:37 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3077 03/20/20 09:27:12 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3078 03/20/20 10:02:44 60:00 10256 4236 ins -1 310410214827503 3079 03/20/20 10:27:12 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3080 03/20/20 11:02:44 60:00 15016 4924 ins -1 310410214827503 3081 03/20/20 11:27:12 42:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3082 03/20/20 12:02:44 60:00 6956 2896 imp -1 310410214827503 3083 03/20/20 12:09:48 9:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002771 NTroliAL not for general distribution. Page 127 EF-EA_00116847 EFTA01251371 The information contained herceoNftli 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tr,"`"Ird AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 MI= Item Conn. Date Conn. Originating ET Time Number (OTC) Bytes Op Bytes Apn Dn INCI IMSI 3084 03/20/20 12:09:50 9:25 0 Onxtgonpho no 3587080982063726 310410214827503 3085 03/20/20 12:19:14 6:07 192 Onxtgonpho no 3587080982063726 310410214827503 3086 03/20/20 12:19:15 6:07 0 Onxtgonpho no 3587080982063726 310410214827503 3087 03/20/20 12:25:22 0:05 0 Onxtgonpho no 3587080982063726 310410214827503 3088 03/20/20 12:25:38 40:55 0 Onxtgonpho no 3587080982063726 310410214827503 3089 03/20/20 13:02:44 60:00 11580 4252 ims -1 310410214827503 3090 03/20/20 13:06:32 2:04 192 Oruagonpho no 3587080982063726 310410214827503 3091 03/20/20 13:06:34 2:03 0 Oruagonpho no 3587080982063726 310410214827503 3092 03/20/20 13:08:37 42:12 0 Onxtgonpho no 3587080982063726 310410214827503 3093 03/20/20 13:50:48 2:21 192 Onxtgonpho no 3587080982063726 310410214827503 3094 03/20/20 13:50:50 2:20 0 Onxtgonpho no 3587080982063726 310410214827503 3095 03/20/20 13:53:10 21:26 0 Onxtgonpho no 3587080982063726 310410214827503 3096 03/20/20 14:02:44 60:00 9784 3300 ims -1 310410214827503 3097 03/20/20 14:14:36 8:05 192 Onxtgonpho no 3587080982063726 310410214827503 3098 03/20/20 14:14:37 8:05 0 Onxtgonpho no 3587080982063726 310410214827503 3099 03/20/20 14:22:42 5:08 0 Onxtgonpho no 3587080982063726 310410214827503 3100 03/20/20 14:27:49 18:33 192 Oruagonpho no 3587080982063726 310410214827503 3101 03/20/20 14:27:50 18:33 0 Onxtgonpho no 3587080982063726 310410214827503 3102 03/20/20 14:46:23 5:23 0 Onxtgonpho no 3587080982063726 310410214827503 3103 03/20/20 14:51:45 15:28 192 Onxtgonpho no 3587080982063726 310410214827503 3104 03/20/20 14:51:46 15:28 0 Onxtgonpho no 3587080982063726 310410214827503 3105 03/20/20 15:02:44 60:00 8668 4176 ims 310410214827503 MARL I03DLL APPLE IPH01428 APPLE IPH01428 APPLE !PHONES APPLE !PHONES APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 AT&T Proprietary The AT&T network constantly communicates [truncated]

Technical Artifacts (16)

View in Artifacts Browser

Email addresses, URLs, phone numbers, and other technical indicators extracted from this document.

IPv6F341::
Phone14827503
Phone18204765
Phone18614505
Phone2738331
Phone2996479
Phone3007685
Phone3052551
Phone3170468
Phone3567455
Phone4436025
Phone5023984
Phone5373088
Phone9542836
Phone9820637
Tail #N1OP

Forum Discussions

This document was digitized, indexed, and cross-referenced with 1,400+ persons in the Epstein files. 100% free, ad-free, and independent.

Annotations powered by Hypothesis. Select any text on this page to annotate or highlight it.