FORENSIC INVESTIGATION REPORT
Alexander Brothers / Max Wandtke / North Salem Wedding
Epstein DOJ Files -- Three-Lead Deep Investigation
Date: 2026-02-08 (Updated)
TABLE OF CONTENTS
[LEAD 1: Alexander Brothers (Alon, Oren, Tal)](#lead-1-alexander-brothers)
[LEAD 2: Max Wandtke](#lead-2-max-wandtke)
[LEAD 3: North Salem Wedding](#lead-3-north-salem-wedding)
[Cross-Lead Analysis](#cross-lead-analysis)
[Database Search Summary](#database-search-summary)
[Recommendations](#recommendations)
LEAD 1: ALEXANDER BROTHERS (ALON, OREN, TAL)
EFTA01660651 -- NTOC Tips Compilation">1a. Primary Document: EFTA01660651 -- NTOC Tips Compilation
Document Overview
EFTA01660651 is an FBI National Threat Operations Center (NTOC) tips compilation document. It is a multi-page spreadsheet-style compilation of tips received by the FBI from the public, with columns for tip content, named persons of interest, FBI follow-up actions, and criminal history checks. The email chain carrying this document is dated
August 6-7, 2025 and was circulated internally with the subject line "FW: NTOC Names" / "RE: NTOC Names."
The Alexander Brothers Tip -- FULL TEXT
Source: EFTA01660651, pages 0 and 3 (two formatting versions of the same tip)
Database IDs: record #742675 (page 0) and id 742688 (page 3)
Confidence: 0.99
Tip Summary (page 0, compact format):
"At age 16, while modeling, caller attended 8 parties at Epstein's New York residence. On one occasion, caller reported she was sexually assaulted by Epstein. On another occasion, two twin brothers, Allen and Oren, lured caller and her friend upstairs but they escaped back downstairs. Caller stated Oren raped her best friend and a third brother, Tal, raped a 14 year old girl named Katie LNU. Caller named other individuals involved in 'big orgy parties' with her, other young girls, and older Victoria's Secret models, including Bill Clinton and Donald Trump."
FBI Annotation (sidebar/Notable Names column, page 3 expanded version):
"Allen, Oren, Tal (LNU, possibly identifiable as Alexander brothers)"
"Epstein's 'British Socialite'"
"Bill Clinton"
"Donald Trump"
"Jeffrey Epstein"
FBI Follow-Up Column for this tip: "None" -- no documented follow-up action.
Key Analytical Notes on the Tip
"Allen" = "Alon": The caller used the Anglicized form "Allen" for what is actually "Alon" -- a common transliteration of the Hebrew name. The FBI correctly tentatively matched this.
"LNU" notation: The FBI annotated "LNU" (Last Name Unknown) for the three brothers, indicating the caller did not provide a surname. The FBI's analytical annotation "possibly identifiable as Alexander brothers" shows they conducted some level of identification analysis.
"At age 16, while modeling": The caller was a teenage model, consistent with the known profile of Epstein's victims (modeling industry pipeline, Victoria's Secret connection).
"8 parties at Epstein's New York residence": Multiple visits to the 9 East 71st Street townhouse.
"big orgy parties": Describes large-scale sexual events involving "other young girls, and older Victoria's Secret models."
EFTA01660679">Duplicate Document: EFTA01660679
A near-identical version exists at EFTA01660679 (pages 0 and 3), with minor OCR variations. This version is dated "Thursday, August 7, 2025 11:41:01 AM" and has subject "RE: NTOC Names." The email chain shows:
- Page 0 header: "bject: RE: NTOC Names"
- Page 3 header: "Wednesday, August 6, 2025 4:00 PM" (original send)
- Page 5 header: "bject: NTOC Names" (original subject)
Previously, the companion document EFTA01660679 was reported to contain an attachment "NTOC - Alexander Brothers.pdf" with an FBI Child Exploitation agent requesting the "full NTOC report" to "interview regarding the Alexander brother allegations." In this search, the relevant email header fragments are partially recovered (pages 0, 3, 5) but the specific attachment reference and CEHTF agent request text were not re-extracted in full from the redaction database. The agent request is documented in the prior session's investigation report.
1b. Complete "Alexander" Search Results Across ALL Databases
Redaction Analysis v2 Database (1.8M records) -- 68+ hits
Category 1: Alexander Brothers (NTOC tips) -- DIRECTLY RELEVANT
| ------- | ------ | ------ | --------- |
| 742675 | EFTA01660651 | 0 | Full tip text (compact) with "Allen and Oren... Alexander brothers" |
| 742688 | EFTA01660651 | 3 | Full tip text (expanded) with FBI annotation |
Category 2: Eileen Alexanderson (Epstein associate/employee) -- 3,548+ records (DS9/DS11 full corpus)
Eileen Alexanderson appears in 3,548 documents across DS9/DS11, overwhelmingly in Epstein's daily calendars as a member of the Leon Black financial team. Representative calendar entries include "Appt w/Eileen Alexanderson and team at Leon Black's" (EFTA00284747), "JE to Go See Eileen Alexanderson and Ada Clapp at Leon Black's" (EFTA00284793), and "Black Family Meeting: Larry Delson, Rich Joslin, Eileen Alexanderson, Ada Clapp, Rich D'Agostino, Heather Gray, Alan Dlugash, Rich Kahn, Darren" (EFTA00284982). One entry (EFTA00299816) mentions "Katie Newman and August Sangovese" as "Eileen Alexanderson's people" -- this "Katie" is a colleague, NOT the victim "Katie LNU" from the Alexander brothers tip. Alexanderson is NOT connected to the Alexander brothers; the surname overlap is a coincidence. Key observations from earlier databases:
- Regularly corresponds with: Lesley Groff (Epstein's executive assistant), Jeffrey Epstein, Richard Joslin, Ada Clapp, Heather Gray, Melanie Spinella
- One record (EFTA02137987, id 1628841): "leen Alexanderson* 05/23/2013 07:53 -- 2:30 Jeffrey Epstein meeting" -- scheduling Epstein meetings
- One record (EFTA02147265): "Eileen Alexanderson at her office" -- she had an office
- Entity: elysllc.com email domain visible (EFTA02097966) -- connected to Elysium Management LLC (Leon Black's family office entity)
- Connected to: EFTA02128454 -- email to Melanie Spinella from Alexanderson
Category 3: R. Alexander Acosta (U.S. Attorney) -- 15+ records
- EFTA01718407, page 17: "Meeting (US: Alexander Acosta)" -- 2007 meeting reference
- Single unique EFTA with "Alexander Acosta" in redactions: EFTA01718407
Category 4: Alexander Rossmiller (SDNY Prosecutor) -- 2 records
- EFTA01649316, page 0: "r, Alexander (USANYS)" in email distribution list alongside "Moe, Alison (USANYS)", "Riso, Laura B. (NY) (FBI)", "Allen, Amanda L. (DO) (FBI)"
- EFTA01654555, page 0: "ler, Alexander USANYS" -- same prosecutor on case team
Category 5: Miscellaneous
- EFTA01265994, page 9: "Alexander/Wes" -- financial/invoice context ($190.75, $464.70, $293.50)
- EFTA01854206: "www.alexandertechworks.com" -- a technology company website reference
- EFTA00021350: NYT URL about Alexander Wang sexual accusations
- EFTA02025789: "Ross Alexander" CC'd on email from "Aamir Khandwala"
Redaction Analysis DS10 Database (532MB)
Duplicates the v2 results exactly. Same EFTA01660651 and EFTA01660679 entries. No additional unique Alexander brothers references.
OCR Database (68MB)
Alexander Acosta dominates: 15,000+ characters across 20+ documents relating to the NPA.
Additional:
- EFTA00037094: "Harriet Alexander" (journalist) -- irrelevant
- EFTA02730477: FBI research on "Roderic Alexander Hamilton, a Person of Interest for Alleged Defense Witnesses in the Ghislaine Maxwell Trial" -- separate investigation, not the Alexander brothers
- EFTA00038950: "JUDKA, ALEXANDER L." at CBP DHS -- Alexander Judka, a CBP witness
- EFTA00038817: "Rossmiller, Alexander (USANYS)" -- the SDNY prosecutor
Image Analysis Database (20K images)
- EFTA00001728: Employee list including "Kevin Alexander -- Houseman & Extra help" at Little St. James island
- No images of the Alexander brothers
Knowledge Graph Database
- Alexander Fekkai: Person, auto-created from flight logs. Traveled with Frederic Fekkai (celebrity hairstylist) and Audrey Blaise
- No entries for Oren, Tal, Alon, or "Alexander brothers"
1c. Individual Name Searches: Allen/Alon, Oren, Tal
"Oren" with relevant context
Only hits: EFTA01660651 and EFTA01660679 (the NTOC tips). Zero other documents mention "Oren" in any Epstein-related context.
"Tal" with relevant context
Only hits: EFTA01660651 and EFTA01660679. No standalone relevant references.
"Alon" / "Allen"
"Allen" is too common for targeted search (Amanda L. Allen at FBI, Woody Allen, etc.). "Alon" yields zero relevant hits beyond the NTOC tip.
Finding: The Alexander brothers appear in 3 EFTA numbers: EFTA01660651 and EFTA01660679 (the same NTOC document in two versions), plus EFTA01207741 -- a browser screenshot from a seized device showing someone browsing Oren Alexander's photo page on BFA.com (a society photography site), specifically a photo from the 22nd Annual Watermill Center Summer Benefit (July 25, 2015). The browser tabs in the screenshot include "Inspiring Capital" and French-language settings ("Accueil"), indicating the user may be associated with that venture platform. Two additional EFTA documents reference BFA.com in Epstein's network: EFTA00850564 (Epstein emailing a BFA.com link about a "russian girl from moscow" attempting to "blackmail a group of powerful biznessman in New York") and EFTA01198259 (another seized-device Firefox screenshot browsing BFA.com). BFA.com is a widely used society photography site, and browsing it does not inherently indicate surveillance activity. However, the presence of Oren Alexander's photos on a seized Epstein device, combined with the separate "russian girl" blackmail email, documents that BFA.com content was accessed within Epstein's network.
1d. "Katie" as Victim Reference
"Katie LNU" Search
Only hits: EFTA01660651 pages 0 and 3 -- the NTOC tip itself.
"Katie" with victim context (rape, 14, victim, girl, LNU)
- EFTA00028106: "Katielynn Boyd Townsend ktownsend@rcf" -- legal professional, not a victim
- No other victim named Katie identified in any database
Finding: "Katie LNU" remains unidentified. "LNU" (Last Name Unknown) confirms the FBI had no surname for this 14-year-old victim at time of tip.
1e. FBI Follow-Up Documents
Search for Follow-Up
- Zero FBI 302 (interview) documents referencing the Alexander brothers
- Zero case management documents referencing them
- The NTOC tip shows "None" in the follow-up column
NTOC Document Chain
The NTOC compilation circulated via internal FBI email August 6-7, 2025. Three separate versions of a "PROMINENT NAMES" briefing also exist (EFTA01656173, EFTA01656152, EFTA01656198, EFTA01660622) -- these are 17-page FBI briefing summaries. The Alexander brothers do NOT appear in any Prominent Names briefing -- they appear only in the raw NTOC tips compilation.
The Prominent Names briefings do contain a line: "*Numerous anonymous NTOC's were received with allegations against prominent individuals." This generic reference is the only acknowledgment of NTOC tips in the formal briefing documents.
1f. Public Identification -- Web Search Results (CONFIRMED)
The Alexander brothers have been publicly identified and are currently on trial:
Identities:
- Alon Alexander (age 38, born July 5, 1986) -- twin of Oren. Executive at Kent Security (family's private security firm).
- Oren Alexander (age 38, born July 5, 1986) -- twin of Alon. Luxury real estate agent, co-founded "Official."
- Tal Alexander (age 39, born July 2, 1987) -- older brother. Luxury real estate agent, co-founded "Official" with Oren.
Criminal Case:
- Arrested: December 11, 2024, by FBI in Miami Beach, FL
- Court: U.S. District Court, Southern District of New York
- Judge: Valerie E. Caproni
- Charges: 12 counts including sex trafficking, sex trafficking conspiracy, sexual abuse by physical incapacitation
- Alleged victims: 60+ women (8+ expected to testify)
- Alleged pattern (2008-2021): Luring women to luxury destinations (Hamptons, Bahamas), drugging and sexually assaulting them
- Jury selection: January 20, 2026
- Trial start: January 26, 2026
- Pleas: Not guilty (all three)
- Potential sentences: 15 years to life if convicted
- Bail status: Held without bail since December 2024
Epstein Files Impact on Trial:
- January 30, 2026: Epstein files released naming Alexander brothers
- Defense attorney Marc Agnifilo (representing Oren) moved for mistrial
- Defense lawyer Deanna Paul argued prosecutors "destroyed the possibility of a fair trial"
- Judge Caproni individually questioned jurors; all denied exposure
- Judge denied the mistrial request but ordered government to withhold further Epstein material naming the brothers
- DOJ temporarily took down Epstein files to fix redactions that may have exposed the victim's identity
Key Public Sources:
1g. Knowledge Graph Entries
- Alexander Fekkai: Person from flight logs (unrelated -- celebrity hairstylist traveling with family)
- No entries for Oren, Tal, Alon, or "Alexander brothers"
- Steve Tuckerman / Judy Tuckerman: Flight log passengers (relevant to Lead 3, not Lead 1)
LEAD 2: MAX WANDTKE
EFTA00004800, Page 9">2a. Primary Evidence: EFTA00004800, Page 9
Binder Overview
EFTA00004800 is FBI evidence binder "Book 17" -- a 98-page catalog of seized digital media (CDs, DVDs). The cover page (page 1) is labeled:
- "LSJ/BOAT" (Little St. James island / boat)
- "MISC CLOUDS" (sky/nature photography)
- "WEDDING/TUCKER/N SALEM" (wedding at North Salem, NY)
- "BOOK 17" (binder number)
The Max Wandtke CD -- Page 9 Detail
Source: EFTA00004800, page 9
Image DB: id 4872, image
EFTA00004800_p9_i0_5fec0e4fb2494b7b.png
Image Analysis:
"PEOPLE: There are no people visible in the image."
"TEXT: The text on the CD reads 'Max Wandtke.'"
"OBJECTS: A CD in a clear plastic sleeve with a black bar covering part of the label. The CD has a label with the text 'Max Wandtke' written on it."
"NOTABLE: The CD is labeled with the name 'Max Wandtke,' which could be significant if this person is a public figure or if the CD contains important information. The black bar covering part of the label is unusual and may indicate that the CD is not meant to be viewed or shared publicly."
Surrounding Pages Context
| 7 | People posing/"modeling" in bedroom, faces obscured by black bars | image #4851 |
| 8 | "ITEM WAS NOT SCANNED -- DESCRIPTION: 2 CD'S" | image #4862 |
| 9 | CD labeled "Max Wandtke" with black bar on label | image #4872 |
| 10 | Philips CD-R80, handwritten note "pics" | image #4775 |
| 11 | "ITEM WAS NOT SCANNED -- DESCRIPTION: DVD" | image #4776 |
| 12 | DVD-R disc, 4.7GB, Apple logo | image #4777 |
| 13 | "ITEM WAS NOT SCANNED -- DESCRIPTION: CD" | image #4778 |
| 15 | model_1.jpg through model_11.jpg -- ALL BLACKED OUT | image #4780 |
| 16 | model_12.jpg through model_21.jpg -- ALL BLACKED OUT | image #4781 |
| 20 | "CSAM NOT SCANNED -- Official DocLab Instruction(s) -- Revised March 10th, 2025" | image #4786 |
| 79 | "CSAM NOT SCANNED -- Official DocLab Instruction(s) -- Revised March 10th, 2025" | image #4850 |
2b-2c. Complete Database Search: "Wandtke" and "Max Wandtke"
| Database | Search Term | Results |
| ---------- | ------------- | --------- |
| primary document text database (1.8M records) | "Wandtke" | 0 hits |
| Dataset 10 document text database (532MB) | "Wandtke" | 0 hits |
| OCR text extraction database (68MB) | "Wandtke" | 0 hits |
| image catalog database (20K images) | "Wandtke" | 1 hit (page 9 CD only) |
| entity relationship database | "Wandtke" | 0 hits |
| All databases | "Max Wandtke" | Same as above |
Finding: "Max Wandtke" appears exactly ONCE in the entire Epstein file collection -- on a handwritten CD label in evidence binder EFTA00004800, page 9.
2d. Web Search Results
"Max Wandtke Epstein"
Zero relevant results. No public reporting connects any "Max Wandtke" to the Epstein case. Search results returned only unrelated Epstein-related articles.
"Max Wandtke" Generally
No identifiable public figure by this exact name. Web searches returned:
- Max Wanger (Los Angeles wedding/commercial photographer -- different person)
- Paul Wandtke (ex-Trivium drummer)
- Terrence R. Wandtke (author)
- A "wandke-photography" account on ViewBug.com and 500px.com (note: "Wandke" without the 't' -- possibly related?)
"Max Wandtke" CD Evidence
Zero relevant results. No connection to evidence or legal proceedings found.
EFTA00004348 -- "Max" in Another Binder">2e. Cross-Reference: EFTA00004348 -- "Max" in Another Binder
Evidence binder EFTA00004348 contains CDs with folder labels "JE 50 Bday, Max, 727" (Jeffrey Epstein's 50th birthday, a person named Max, and the Boeing 727). Key pages:
| ------ | --------- | ----------- |
| 29 | "JE 50 Bday, Max, 727" -- photos of 727 airplane at "JET AVIATION" | image #4344 |
| 32 | "JE 50 Bday Max, 727" -- LSJ aerial photos + "Max & Paula0.JPG" through "Max & Paula4.JPG" -- photos of people and dogs at pool | image #4348 |
| 37 | "JE 50 Bday, Max, 727" -- "Arpia.jpg" (helicopter in jungle) | image #4353 |
| 39 | Memorex CD-R labeled "MAX IN SHOW" and "727 STRIPED" and "in Hel" | image #4355 |
OCR text (EFTA00004348): "Max in snow2.JPG", "Max in snow5.JPG", "Max in snow0.JPG", "Max in snow1.JPG" -- photos of "Max" in snow
Assessment: This "Max" attended Epstein's 50th birthday (January 20, 2003), was photographed with someone named "Paula" at a pool (likely LSJ island), and had personal snow photos stored on the same CD. The CD also contains LSJ aerial photos and 727 airplane photos.
Whether this "Max" is the same person as "Max Wandtke" in EFTA00004800 cannot be determined from the available data. The binders are separate evidence collections. However, the co-occurrence of a "Max" in personal photo CDs at Epstein's events across two different evidence binders is notable.
- Zero "Wandtke" in flight logs (knowledge graph)
- Zero "Wandtke" in DS10 emails
- Zero "Wandtke" in any contact list or address book
- Zero "Wandtke" in financial records
Assessment: Max Wandtke is a complete ghost in the Epstein files. The name appears on one handwritten CD label in an evidence binder that also contains CSAM-flagged material (pages 20, 79) and redacted "model" photos (pages 15-16). The CD itself was among "2 CDs" that the preceding page (8) noted were "NOT SCANNED." It is unknown whether the FBI ever examined the contents of this particular CD.
LEAD 3: NORTH SALEM WEDDING
EFTA00004800, Pages 88-96">3a. Primary Evidence: EFTA00004800, Pages 88-96
Binder Cover Reference
Page 1 of EFTA00004800 lists "WEDDING/TUCKER/N SALEM" as one of the content categories. Full-text corpus search of DS9 reveals the complete folder label is actually "North Salem/Kidd Wedding/Tucker" (visible in EFTA00245479, EFTA00245481, and EFTA00245483), adding the surname "Kidd" to identify the wedding couple or family.
Wedding Photo Pages (Image Analysis Database)
| Page | DB ID | Description | Key Details |
| ------ | ------- | ------------- | ------------- |
| 88 | 4860 | Wedding photos (CIMG series) | Outdoor: pool, grassy areas, trees. People in formal attire. Faces blurred. Dogs present. Camera/photographer visible. |
| 89 | 4861 | Wedding photos | Faces blurred, no distinguishing features visible |
| 90 | 4863 | Wedding photos (indoor) | Fireplace, table with tablecloth, camera, drinks. "Cozy, intimate setting" -- evening/night |
| 91 | 4864 | Wedding photos | Multiple rooms, fireplace, sky views. "Wedding context noted" |
| 92 | 4865 | Nature/water photos | Body of water, lighthouse, ship. Some images intentionally blacked out |
| 93 | 4866 | NOT SCANNED notice | "ITEM WAS NOT SCANNED -- DESCRIPTION" (CD not digitized) |
| 94 | 4867 | Wedding CD | Sony CD-R 700MB, handwritten: "wedding/ N. Salem" |
| 95 | 4868 | Wedding photos (DSCF series) | File names DSCF0001_1.TIF etc. Faces obscured by black bars. Label: "photo" |
| 96 | 4869 | Wedding photos | Pixelated faces, no text |
Photo File Series (from OCR Database)
Camera 1 (CIMG -- Casio Exilim):
- CIMG0528.JPG through CIMG0566.JPG (~38 still photos)
- 3 AVI video files: CIMG0554.AVI, CIMG0555.AVI, CIMG0556.AVI
Camera 2 (DSC -- Nikon):
- DSC01734.JPG through DSC01764.JPG (~30 photos)
- Specifically labeled "North Salem/Kidd Wedding/Tucker"
Camera 3 (DSCF -- high-resolution scans/TIF format):
- DSCF0001_1.TIF through DSCF0037_1.TIF (~37 images)
Total estimated wedding documentation: ~105+ still photos + 3 video files from at least 3 cameras.
3b. Database Searches: "North Salem" and Variants
| Database | Search Terms | Results |
| ---------- | ------------- | --------- |
| primary document text database | "North Salem", "N. Salem", "N Salem" | 0 hits |
| Dataset 10 document text database | Same | 0 hits |
| OCR text extraction database | "North Salem", "N. Salem", "N Salem" | 2 hits -- both EFTA00004800 (OCR ids 10166 and 14564) |
| image catalog database | "Salem" or "wedding" in EFTA00004800 | Multiple hits (pages 1, 88-96) |
| entity relationship database | "North Salem", "Salem", "Westchester" | 0 hits |
Finding (original databases only): "North Salem" appeared only in
EFTA00004800 in the original databases.
UPDATED: Full-text corpus search of DS9/DS11 reveals extensive North Salem references -- the property is the
Glenn and Eva Dubin estate at 12 June Road, North Salem, NY. See Section 3e below for the complete Dubin identification evidence and the deposition allegation that Epstein "brought young girls on multiple occasions to north salem."
3c. "Tucker" Search Results
EFTA00004800 References">EFTA00004800 References
- Page 1 (cover): "WEDDING/TUCKER/N SALEM"
- Image analysis confirms this label
Document Text Databases
| DB ID | EFTA | Page | Content | Relevance |
| ------- | ------ | ------ | --------- | ----------- |
| 699395 | EFTA01652971 | 6 | "Tucker & Lauri, LLP -- INTELLECTUAL PROPERTY LAW" (anti-trafficking org partner) | NOT RELEVANT |
| 710745 | EFTA01655577 | 2 | "5 Tucker R" (fragment) | INSUFFICIENT CONTEXT |
OCR Database -- All "Tucker" Hits
- Tucker Carlson (TV host): EFTA00035791 -- Fox News segment about Epstein's jail death. EFTA00025392 -- workplace harassment lawsuit mention.
- Tucker Levin PLLC: EFTA00023920 -- legal commentator on Epstein case
- Tucker v. State (case citation): EFTA00013811 -- FL legal precedent
Knowledge Graph
- Steve Tuckerman (person, from flight logs): Traveled on Epstein flights
- Judy Tuckerman (person, from flight logs): Traveled on Epstein flights
- No entity named simply "Tucker"
Assessment: The "Tucker" on the binder cover cannot be definitively matched to any known individual. Chris Tucker flew on Epstein's plane but no evidence connects him to a North Salem wedding. The Tuckermans appear in flight logs. Now that the full folder label is known to be "North Salem/Kidd Wedding/Tucker" and the property is identified as the Dubin estate, "Tucker" most likely refers to a guest, family member, or the photographer associated with the wedding event itself -- not Chris Tucker, Tucker Carlson, or the Tuckermans from flight logs. The identity remains unresolved but is contextually narrowed.
3d. "LSJ" Reference Context
The binder cover abbreviation "LSJ" appears extensively across the corpus and stands for Little St. James -- Epstein's private island:
Key OCR references:
- EFTA00037340: "FBI/NYPD team will reach Little St James (LSJ) and execute the search warrant"
- EFTA00020141: "photographs appear to be labeled with file names that include 'LSJ,' which I believe stands for Little St. James"
- EFTA00004577: "LSJ girls -- Girls dancing18.JPG Girls dancing19.JPG..."
Within EFTA00004800 specifically:
- Page 47 (image #4815): DVD labeled "MISCLSJ" (Miscellaneous Little St. James)
- Page 54 (image #4823): DVD with "LSJ" text visible
This confirms the evidence binder contains material from multiple Epstein locations: LSJ (island), PB (Palm Beach), and N. Salem (North Salem wedding).
3e. North Salem Property Identified: Glenn and Eva Dubin, 12 June Road
CORRECTION (full-text corpus revisit, 2026-02-12): The original investigation found no Epstein-owned property in North Salem and no specific Epstein associate owning property there. The full-text corpus of DS9/DS11 definitively identifies the property as the
Glenn and Eva Dubin estate at 12 June Road, North Salem, NY.
Property Identification Evidence
| EFTA00300312 | 9 | Formal invitation: "PLEASE JOIN EVA AND GLENN FOR DINNER & DANCING SATURDAY, JUNE 10, 2017... 12 JUNE ROAD... North Salem, NY... SHUTTLE AVAILABLE FROM MANHATTAN" |
| EFTA00315414 | 9 | Calendar: "Glen Dubin's Birthday Party, Cocktails 8:00pm Dinner & Dancing 12 June Road, North Salem, NY" |
| EFTA02347618 | 11 | Lesley Groff email: "Glen Dubin's office called to confirm you will NOT go to Glen's party on June 10th... 7:00pm Cocktails, 8:00pm Dinner & Dancing, North Salem, NY" |
| EFTA00669252 | 9 | Eva Dubin to Epstein: "Leaving today at 4.30 for North Salem" (April 14, 2017) |
| EFTA00664138 | 9 | Eva Dubin to Epstein: "I can have the couple from North Salem pick it up" (March 24, 2011) |
| EFTA01022237 | 9 | Eva Dubin to Epstein: "In North Salem coming back tonight" (Sept 22, 2018) |
| EFTA02555266 | 11 | Eva Dubin to Epstein: "North salem" -- reply to "Where ar you" (May 28, 2012) |
| EFTA02589174 | 11 | Eva Dubin to Epstein: "North Salem" -- reply to "where are you?" (Aug 17, 2014) |
| EFTA02453633 | 11 | Eva Dubin: "I am in North Salem" (Aug 28, 2016) |
| EFTA00784306 | 9 | iMessage: Eva says "In north salem with Jordan maya and clay... mommy and poppy in the city with grandma" (March 30, 2019) |
Epstein Email Regarding Deposition About "Young Girls" at North Salem
EFTA00825777 (DS9) contains an email from Epstein to Glenn Dubin, June 13, 2016:
"fyi. renaldo. gave a depo and said i brought young girls on multiple occassions to north salem. nonsense but i thought you shoudl know"
Glenn Dubin's reply (EFTA00825780), 2 minutes later:
"uuugghh"
Duplicate copies exist in DS11 at EFTA02459952 and EFTA02460024.
Epstein explicitly acknowledges that a deposition has been given alleging he brought "young girls on multiple occasions" to the Dubins' North Salem property. Epstein dismisses this as "nonsense." Dubin's single-word response — "uuugghh" — expresses displeasure but is ambiguous; it could reflect frustration at the allegation, concern about its implications, or any number of reactions. The exchange does not establish whether Dubin had knowledge of the alleged conduct.
"Renaldo" Identified as Eva Dubin's Staff Member
The "Renaldo" who gave the deposition was Eva Dubin's household staff member:
- EFTA02552296 (DS11): Lesley Groff to Epstein (March 19, 2012): "Please confirm it is ok for Renaldo, eva's staff person, to stay at the PB house staff quarters. He would be alone and just sleep there. He knows not to go into the kitchen. March 23-25"
- EFTA01212224 (DS9, iMessage March 18, 2019): Epstein texts: "renaldo a real creep" -- Response: "He is the worst!!!"
Renaldo had access to both the Dubins' properties and Epstein's Palm Beach house. He later gave deposition testimony stating Epstein brought young girls to North Salem.
Janusz Banasiak: Epstein Staff Placement at Dubin Property
Multiple emails show Epstein placing his own employee Janusz Banasiak at the Dubins' North Salem property:
| ------ | ----- | ------ | --------- |
| EFTA00630164 | 9 | Jul 29, 2016 | Epstein to Eva: "would you consdier taking janusch and his wife for north salem" |
| EFTA00636112 | 9 | Jul 29, 2016 | Eva reply: "Yes! But I don't think they want to move from Florida...." |
| EFTA01058566 | 9 | Dec 23, 2016 | Epstein: "do you want janusch for north salem?" |
| EFTA01058334 | 9 | Dec 27, 2016 | Eva: "interested in exploring Janusz and Ofelia taking a couples position in North Salem" |
EFTA00040278 (DS9) is a 7-page FBI 302 interview of Janusz Banasiak (October 19, 2021). Banasiak was Epstein's Palm Beach house manager (2005-2016+). Key excerpt:
"When EPSTEIN would arrive with the girls BANASIAK would try to give them space or privacy so he wouldn't answer as many phone calls during that time." The emails document Epstein recommending his own employee — who separately told the FBI he witnessed Epstein "arriving with girls" — for a position at the Dubins' North Salem property. Whether this recommendation had any purpose beyond ordinary employment placement is not established by the available documents.
Kevin Vanacore / Old Salem Farm
EFTA00309497 (DS9) contains the resume of Kevin F. Vanacore, who was Property Manager at Old Salem Farm, North Salem, NY from 1994-1998. Documents show Epstein interviewed Vanacore via Skype in June 2012 for a property management position.
Lesley Groff Hiring Caretaker for Dubins' Property
EFTA00396552 (DS9) shows Lesley Groff (Epstein's assistant) emailing about a "Caretaker for South Salem" position (January 31, 2013) for Eva Dubin, demonstrating Epstein's staff was directly involved in hiring for the Dubins' household. (South Salem is the hamlet directly adjacent to North Salem.)
3f. Geographic Anomaly
Image analysis of page 92 noted "views of a body of water, including a lighthouse and a ship." North Salem is landlocked. This could indicate:
The wedding CD also contains photos from a different location
The property has views of nearby reservoirs (Titicus Reservoir, Cross River Reservoir)
The "ship" and "lighthouse" descriptions may be decorative elements
CROSS-LEAD ANALYSIS
EFTA00004800 Binder Structure (Leads 2 and 3)">EFTA00004800 Binder Structure (Leads 2 and 3)
The Wandtke CD (Lead 2) and North Salem Wedding CD (Lead 3) are in the SAME evidence binder:
| 1 | Cover: "LSJ/BOAT, PB, MISC CLOUDS, WEDDING/TUCKER/N SALEM, BOOK 17" | 3 |
| 2-6 | Photos (faces obscured/blacked out) | -- |
| 7 | People "modeling" in bedroom, faces obscured | 2 |
| 9 | CD labeled "Max Wandtke" | 2 |
| 15-16 | "model_1.jpg" through "model_21.jpg" -- ALL BLACKED OUT | 2 |
| 21-78 | Various photos/CDs/DVDs from multiple locations | -- |
| 88-92 | Wedding photos (North Salem) | 3 |
| 94 | CD labeled "wedding/ N. Salem" | 3 |
| 95-96 | More wedding photos | 3 |
Total CSAM-flagged pages in binder: 2 (pages 20, 79)
Total "NOT SCANNED" media items: 19+
Total images in binder: 98 pages
Lead 1 and Leads 2/3 Connection Status
The Alexander brothers (Lead 1) appear in NTOC tips documents (EFTA01660651/EFTA01660679) and in the Oren Alexander browser screenshot (EFTA01207741). No direct connection between the Alexander brothers and the Dubin North Salem property has been established. The Alexander brothers tip describes events at "Epstein's New York residence" (9 East 71st Street), not North Salem. However, the Oren Alexander screenshot shows someone in Epstein's network browsing his society photos, and the brothers' luxury real estate business operated in the same social circuit as the Dubins. Both the Alexander brothers tip and the North Salem evidence involve allegations of bringing young women/girls to social events.
The connection between Leads 2 (Wandtke) and 3 (North Salem) is now substantially strengthened: the North Salem wedding photos were taken at the Glenn and Eva Dubin property, where deposition testimony alleges Epstein brought "young girls on multiple occasions," and where Epstein recommended his own employee Banasiak — who separately told the FBI he witnessed Epstein "arriving with girls" — for a household position.
"Max" Across Binders
A person named "Max" appears in:
EFTA00004800, page 9: "Max Wandtke" CD
EFTA00004348: "JE 50 Bday, Max, 727" -- with "Max & Paula" photos and "Max in snow" photos at Epstein's 50th birthday and LSJ island
Whether these are the same person cannot be confirmed.
DATABASE SEARCH SUMMARY
| Search Term | v2 DB | DS10 DB | OCR DB | Image DB | Knowledge Graph |
| ------------- | ------- | --------- | -------- | ---------- | ----------------- |
| Alexander (all) | 68+ hits | 56+ hits | 30+ hits | 1 hit (employee) | 1 hit (Fekkai) |
| Alexander brothers specifically | 4 hits (2 EFTAs) | 4 hits (2 EFTAs) | 0 | 0 | 0 |
| Max Wandtke | 0 | 0 | 0 | 1 hit (CD) | 0 |
| North Salem | 0 | 0 | 2 hits (1 EFTA) | 6 hits (1 EFTA) | 0 |
| N. Salem / N Salem | 0 | 0 | 2 hits (1 EFTA) | 2 hits (1 EFTA) | 0 |
| Tucker (relevant only) | 0 relevant | 0 relevant | 0 relevant | 1 hit (cover page) | 2 (Tuckermans) |
| Katie LNU | 2 hits (1 EFTA) | 2 hits (1 EFTA) | 0 | 0 | 0 |
| Oren (relevant) | 4 hits (2 EFTAs) | 4 hits (2 EFTAs) | 0 | 0 | 0 |
| NTOC | 30+ hits | 30+ hits | 10+ | 0 | 0 |
| LSJ | 20+ hits | 20+ hits | 20+ hits | 10+ | 0 |
RECOMMENDATIONS
Lead 1: Alexander Brothers -- HIGH PRIORITY
Trial Relevance (ACTIVE): The Alexander brothers are currently on trial in Manhattan federal court on sex trafficking charges. They have pleaded not guilty to all counts. An NTOC tip in EFTA01660651 alleges their presence at Epstein's NY parties and alleges sexual assaults. NTOC tips are unverified public tips to the FBI and do not constitute findings of fact. The tip's relevance to the current prosecution is for investigators and the court to evaluate.
Pattern Allegation: The tip alleges a pattern — brothers working in concert at social events — that is similar to the pattern charged in the current case (2008-2021). If the tip's allegations are accurate, they would extend the alleged conduct back to the late 1990s/early 2000s. The tip is unverified and the brothers have not been charged in connection with the Epstein investigation.
Katie LNU Identification: The 14-year-old victim "Katie LNU" remains unidentified. If she was 14 in the late 1990s, she would be approximately 40 years old now. Her identity may be known to prosecutors but is not in the released files.
FBI Follow-Up Gap: No documented follow-up exists for this tip. An FBI Child Exploitation agent previously requested the full report to "interview regarding the Alexander brother allegations" -- the outcome of that request is unknown.
Redaction Failure: DOJ redaction failures initially exposed identifying information about the victim who made this tip, leading to a temporary file takedown. This should be investigated as a potential witness safety issue.
Lead 2: Max Wandtke -- IDENTITY UNKNOWN
Complete Ghost: Max Wandtke appears nowhere in the Epstein files except on one CD label. No emails, travel records, financial records, phone records, or other references exist.
CD Contents Unknown: The CD was photographed but its data contents are not characterized in any database. Page 8 indicates the surrounding CDs were "NOT SCANNED."
Proximity Concern: The CD is in the same binder section as CSAM-flagged material (pages 20, 79) and redacted "model" photos (pages 15-16). The contents warrant investigation.
EFTA00004348 Cross-Reference: The "Max" in the "JE 50 Bday, Max, 727" binder should be cross-referenced. "Max & Paula" photos at the LSJ pool could help identify this individual.
Web Identity: No public figure named "Max Wandtke" could be identified. The "wandke-photography" accounts on photo-sharing sites (without the 't') may be worth investigating.
Lead 3: North Salem Wedding -- PROPERTY IDENTIFIED, WEDDING PARTIALLY RESOLVED
Property Identified: The North Salem property is the Glenn and Eva Dubin estate at 12 June Road, North Salem, NY. The Dubins are extensively documented Epstein associates (54+ documents in original databases, thousands in DS9/DS11, 34+ flights, "lent out" prosecution testimony).
Wedding Identified as "Kidd Wedding": Full-text corpus reveals the folder label is "North Salem/Kidd Wedding/Tucker" -- the surname Kidd identifies the wedding couple or family.
"Tucker" Identity Narrowed: In the context "North Salem/Kidd Wedding/Tucker" at the Dubin estate, "Tucker" most likely refers to a guest, family member, or photographer associated with the wedding -- not Chris Tucker, Tucker Carlson, or the Tuckermans.
Deposition Allegation: EFTA00825777 documents Epstein informing Glenn Dubin that a staff member (Renaldo) gave deposition testimony alleging Epstein "brought young girls on multiple occasions to north salem."
Staff Connections: Epstein recommended his own Palm Beach house manager (Janusz Banasiak) for a position at the Dubins' North Salem property, and Epstein's assistant (Lesley Groff) was directly involved in hiring household staff for the Dubins.
Video Evidence: Three AVI video files from the wedding exist. These may contain audio and clearer identification of attendees than the blurred still photos.
Scale of Documentation: 105+ photos from 3 cameras plus 3 videos indicates this was a significant event warranting extensive documentation.
APPENDIX: KEY EFTA NUMBERS
| EFTA Number | Description | Lead | Pages |
| ------------- | ------------- | ------ | ------- |
| EFTA01660651 | NTOC Tips Compilation (primary Alexander brothers reference) | 1 | 6 pp |
| EFTA01660679 | NTOC Tips Compilation (duplicate/forwarded version) | 1 | 6 pp |
| EFTA01656173 | FBI Prominent Names briefing (no Alexander brothers) | 1 | 17 pp |
| EFTA01660622 | FBI Prominent Names briefing (NTOC reference) | 1 | 17 pp |
| EFTA00004800 | FBI "Book 17" evidence binder (Wandtke CD + Wedding + CSAM) | 2, 3 | 98 pp |
| EFTA01207741 | Browser screenshot: Oren Alexander on BFA.com, Watermill Center Benefit 2015 | 1 | 1 p |
| EFTA00825777 | Epstein to Glenn Dubin: "renaldo gave a depo... brought young girls... to north salem" | 3 | 1 p |
| EFTA00300312 | Glenn Dubin birthday invitation, 12 June Road, North Salem | 3 | 1 p |
| EFTA00040278 | FBI 302: Janusz Banasiak interview -- witnessed "arriving with girls" | 2/3 | 7 pp |
| EFTA02552296 | Groff: "Renaldo, eva's staff person, to stay at PB house staff quarters" | 3 | 1 p |
| EFTA00245479 | Evidence photos: "North Salem/Kidd Wedding/Tucker" | 3 | 2 pp |
| EFTA00630164 | Epstein to Eva: "janusch and his wife for north salem" | 3 | 1 p |
| EFTA00396552 | Groff hiring caretaker for Dubins' South Salem property | 3 | 2 pp |
| EFTA00850564 | Epstein email with BFA.com link re: Russian blackmail scheme | 1 | 1 p |
SOURCES
Internal Databases Searched
- the primary document text database (1.8M records)
- the Dataset 10 document text database (532MB)
- the OCR text extraction database (68MB)
- the image catalog database (199MB, 20K images)
- the entity relationship database (524 entities)
- the financial transaction database
Web Sources
Report generated: 2026-02-08 (Revised 2026-02-12 with full-text corpus revisit)
Total records searched: ~2.4 million across 6 databases + 1.38M full-text corpus documents (DS9/DS11)
Web searches conducted: 10+
Revisit new documents identified: 40+
All file paths are absolute.