90A-NY-3151227-GJ Serial 1 FD-1057 (Rcv. 5-8-I0) UNCLASSIFIED FEDERAL BUREAU OF INVESTIGATION Electronic Communication Title: (U) Subfile Opening Document Date: 12/03/2019 From: NEW YORK NY-C19 Contact: Approved By: A/SSA Drafted By: Case ID #: 90A-NY-3151227-GJ (U) UNSUB(S); JEFFREY EPSTEIN - VICTIM; DEATH INVESTIGATION Synopsis: (U) Grand Jury Subfile Opening Document Details: Writer requests the opening of a Grand Jury Subfile for Grand Jury information received during this investigation. •• UNCLASSIFIED EFTA00133349

90A-NY-3151227-GJ Serial 2 FD-302 (Rev. 5-8-10) •1 of 1. FEDERAL BUREAU OF INVESTIGATION Date of entry 12/06/2039 Pursuant to a Federal Grand Jury subpoena served by the Southern District of New York, 4Chan provided the attached response, dated August 14, 2019. Investigation on 08 / 1 4/2019 at Fik# 90A-NY-3151227-GJ New York, New York, United States (Email) Date drafted 12/06/2019 by This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents arc not to be distributed outside your agency. EFTA00133350

Report #2093 enerated on 2019-08-14 10:04:26 EDT. Requested b Case ID: 2019R01059. Records provided pursuant to a subpoena. All records made and kept in the regular course of business. This report was generated using the following inputs: Post Numbers: /po1/222 520442 /pol/222518349 /po1/222520257 /poU2225 18664 Associated IPs (2): Post times (4): /po1/222520442 was posted by on 08/10/2019 08:47:56 EDT. /po1/222518349 was posted by on 08/10/2019 08:16:36 EDT. /pol/222520257 was posted by on 08/10/2019 08:44:55 EDT. /po1/2225 18664 was posted by on 08/10/2019 08:21:58 EDT. Deletion records (1): Deletion #30169564 Cleared: this entry doesn't correspond to a deletion. Cleared on: 08/10/2019 09:46:22 EDT Board: /pol/ Post No.: 222520257 Reply to thread No.: 222518349 Name: Anonymous Subject: Comment: Not saying anything after this pls do not try to dox me but last night after 0415 count they took him medical in a wheelchair front cuffed but not 1 triage nurse says they spoke to him. Next thing we know a trip van shows up? We do not do releases on the weekends unless a judge orders it. Next thing we know, he's put in a single man cell and hangs himself? Heres the thing, the trip van did NOT sign in and we did not record the plate number and a guy in a green dress military outfit was in the back of the van according to the tower guy who let him thru the gate. You guys i am shaking right now but i think they switched him out. EFTA00133351

EFTA00133352

From: To: Ce: Subject: Date: Attachments: 4rhan LEO SUDDOrt 4chan Subpoena Response (Report #2093) Wednesday, August 19, 2019 10:08:38 AM 4rhan Report 2093 (Case ID 2019R010591 pd AngDOLIKL Dear Mr.IM In reference to your subpoena dated 08/14/2019 (Case ID: 2019R01059), please find as file: "4chan Report 2093 (Case ID: 2019R0 I 059).txt" Please be advised that the Custodian of Records for 4chan Community Support LLC alternate form available for certifying records that does not have this requirement, or requirement be waived? Please let us know if you have any additional questions or require further assistance. Regards, 4chan LEO Support attached the requested records is not a US citizen. Is there an failing that, can the declaration EFTA00133353

90A-NY-3151227-GJ Serial 3 FD-302 (Rev. 5-8-10) •1 of 1. FEDERAL BUREAU OF INVESTIGATION Date of entry 12/06/2039 Pursuant to a Federal Grand Jury subpoena served by the Southern District of New York, Apple provided the attached response, dated September 19, 2019. Investigation on 09/19/2019 at Fik# 90A-NY-3151227-GJ New York, New York, United States (Email) Date drafted 12/06/2019 by This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents arc not to be distributed outside your agency. EFTA00133354

From: To: Subject: Apple Response; Case Number: 2019R01059; (19271022) Date: Thursday, September 19, 2019 5:12:17 PM Dear AUSA Pursuant to your legal request, Apple has provided you with a file containing customer personally identifying information (PII). As previously advised, for data security and customer confidentiality purposes, Apple's production of data containing customer Pll is encrypted using GPG encryption software. Law enforcement officers who receive Apple data containing customer Pll must be able to manage production files encrypted with the GPG format without technical assistance from Apple. Technical information relating to GPG encryption software is available at: kluy/AvvAv gng4win orghlorienigng4win-rompentlium Wml. Information in relation to installing GPG on Windows OS is included in this link under the heading 'Installing Gpg4win'. If you require further technical assistance/information, please consult your agency's Information Technology Department. The password for the encrypted file(s): GPG Installation & Decryption Instructions When decrypting the gpg file be sure that you have read write permissions on the drive that you are copying to and that the drive is formatted with NTFS (there are limitations with FAT32 file systems where long file paths are not supported, which will cause expansion of some productions to fail to properly unzip). Access the GPG encrypted file by using the following steps (please note that this should not be considered a comprehensive description of the process as the user rights on the machine may not permit certain steps outlined herein). For Windows: I. Install GPG for Windows (bup•//www gng4win ore) There is a light version of gpg that doesn't include Kleopatra that you can install with this link: Wiwi/filet crig4win orgfrog4win-light-2 I 0 eve 2. Copy the file to a drive that the user can write to 3. If you restart your computer you should be able to double click on the file and it will prompt you for the password, if not: open a command prompt (run cmd.exe) 4. Type: gpg 5. Press the space bar button 6. Drag the file into the command window If done properly your text should look similar to the following: gpg c:/Documents and Settings/myuser/Desktop/Production16000017.zip.gpg Mac: 7. Press the "Enter" button 8. Type the password I. Install MacGPG (Dapyllengtools org) amazonawssonkortools/GPG%20Suite%20- EFTA00133355

%202013 OR 06 (brig] 2. Copy the file to a drive that the user can write to 3. If you restart your computer you should be able to double click on the file and it will prompt you for the password, if not open a Terminal window (/Applicationalltilitiesiferminal.app) 4. Type: gpg -o 5. Press the space bar button 6. Drag the file into the command window 7. Delete ".gpg" from the text string 8. Press the space bar button 9. Type: -d 10. Press the space bar button 11. Drag the file into the command window If done properly your text should look similar to the following: gpg -o /Users/myuseriDesktop/Production16000017.zip -d /Users/myuser/Desktop/Production16000017.zip.gpg 12. Press the "Enter" button 13. Type the password This will decrypt the file to the same location as the file. The file is zipped so you will need to unzip it and the files will be available for viewing. This transmission may contain confidential information intended only for the person(s) named above. Any other distribution, re-transmission, copying or disclosure is strictly prohibited. If you have received this transmission in error, please notify immediately and delete this file/message from your system. EFTA00133356

From: To: Subject: Apple Response; Case Number: 2019R01059; (19271022) Date: Thursday, September 19, 2019 5:11:01 PM Attachments: 12271022EugluclanZlI2M12 Via Email Delivery AUSA United States Attorney's Office One St. Andrew's Plaza New York, NY Dear AUSA Apple Inc. ("Apple") is providing APL000001 through APL000004 in response to the legal request received by Apple on 2019-08-13. These files are true copies of the data Apple has located based on a reasonable search of the last 12 months of its data using the criteria and information provided in the legal request. Said files were prepared by Apple personnel in the ordinary course of business. For data security and customer confidentiality purposes, Apple's production of data containing customer personally identifying information is encrypted using GPG encryption software. Law enforcement officers who receive Apple data must be able to manage production files encrypted with the GPG format without technical assistance from Apple. Technical information relating to GPG encryption software is available at: bttpi/www gpg4win org/doc/en/gRg4win-compendium hull'. Information in relation to installing GPG on Windows OS is included in this link under the heading `Installing Gpg4win'. If you require further technical assistance/information, please consult your agency's Information Technology Department. The password for the GPG file will be provided in a separate email. Please note, any .xls files will need to be opened in "Read Only" mode. You may note entries from IP addresses beginning with "17." and/or "10." for any available connection logs provided. IP addresses beginning with "17." are assigned to Apple and their occurrence in these logs is reflective of activity on Apple internal servers and not an indication of any user connections. IP addresses beginning with "10." in relation to Find My iPhone ("FMIP") logs are also reflective of activity on Apple internal servers and not an indication of any user connections. All evidence preservation pursuant to the herein request response is the responsibility of the requesting law enforcement agency. Sincerely, Ian Apple Privacy & Law Enforcement Compliance EFTA00133357

bttp://www apple com/privacy/ Enclosures For more information about Apple's Legal Process Guidelines for U.S. Law Enforcement, please visit: lutp.//vvv,rw apple.com/legallprivacy/law-enforcement-guidelines-uc pdf ****************************************************************************** This transmission may contain confidential information intended only for the person(s) named above. Any other distribution, re-transmission, copying or disclosure is strictly prohibited. If you have received this transmission in error, please notify immediately and delete this file/message from your system. EFTA00133358

90A-NY-3151227-GJ Serial 4 FD-302 (Rev. 5-8-10) •1 of 1. FEDERAL BUREAU OF INVESTIGATION Date of entry 12/06/2039 Pursuant to a Federal Grand Jury subpoena served by the Southern District of New York, AT&T provided the attached response, dated August 15, 2019. Investigation on 08 / 1 5/2019 at New York, New York, United States (, Other (Unknown)) Fact, 90A-NY-3151227-GJ Date drafted 12/06/2019 by This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents arc not to be distributed outside your agency. EFTA00133359

RESPONSE COVER SHEET AT&T 11760 US HWY 1, SUITE 300 NORTH PALM BEACH FL 33408 Phoneme Facsimile To: AUSA AUSA NEW YORK 10007 I ST ANDREWS PLAZA NEW YORK NY 10007 Phone Number: Fax Number: 1 Case Number: Case Name: File Code: 2790840 From: DAD Request Dated: 8!I112019 Number of Page. Received On: 8/15/2019 Date: 8/15/2019 After conducting a thorough search of all identifiers listed in the legal demand. all :nail:dile information responsive to this demand is enclosed. CONFIDEVEIALITY NOTICE This cover sheet, and any document which may accompany it, contains information from the Global Legal Ikmand Center which is intended for use only by the individual to whom it is addressed, and which may contain information that is privileged, confidential and/or otherwise exempt from disclosure under applicable law. If the reader of this message is not the intended incipient or the person responsible for delivering this message to the intended recipient. any review, disclosure. dissemination, distribution. copying or other use of this message or its substance is strictly prohibited. If you have received this communication in error, please notify us immediately by telephone to arrange for the return of this communication to us at our expense. Thank you. EFTA00133360

Declaration of Custodian of Records Pursuant to 28 U.S.C. § 1746. I, the undersigned. hereby declare: My name is Daniel Dixon maw of declarant) I am a United States citizen and I am over eighteen years of age. I am the custodian of records of the business named below, or I am otherwise qualified as a result of my position with the business named below to make this declaration. I • of a Grand Jur• Subpoena, dated August II, 2019. and signed by Assistant United States Attorney requesting specified records of the business named below. Pursuant to Rules 902(11) and 803(6) of le .e era ules of Evidence. I hereby certify that the records provided herewith and in response to the Subpoena: (I) were made at or near the time of the occurrence of the matters set forth in the records, by. or from information transmitted bs. a person with knowledge of those matters: (2) were kept in the course of regularly conducted business activity: and (3) were made by the regularly conducted business activity as a regular practice. I declare under penalty of perjury that the foregoing is true and correct. Executed on 8/15/2019 (dale) 'Coon. (sign:gun: ordeclarant) Daniel Dixon Compliance Analyst (mane and Itik of *damn° AT&T (03111C of him, le ) 11760 US Highway One STE 300 i hnanc., ,,ddiw) North Palm Beach, FL 33408 Definitions or terms used above: As defined in Fed. R. Evid. 803(6). "record" includes a memorandum, report. record, or data compilation, in any form. °facts. events. conditions. opinions, or diagnoses. The term "business" as used in Fed. R. Evid. 803(6) and the above declaration includes business, institution, association. profession, occupation. and calling of every kind. whether or not conducted for profit. EFTA00133361

2790840 DAD AT&T 11760 US HWY 1. SUITE 300 NORTH PALM BEACH FL 33408 (Fax) CERTIFICATE OF AUTHENTICITY OF DOMESTIC RECORDS PURSUANT TO FEDERAL RULES OF EVIDENCE 902(11) AND 992(13) I, Daniel Dixon, attest, under penalties of perjury by the laws of the United States of America pursuant to 28 U.S.C. § 1746, that the information contained in this certification is true and correct. I am employed by AT&T, and my title is Legal Compliance Analyst. I am qualified to authenticate the records attached hereto because I am familiar with how the records were created, managed, stored, and retrieved. I state that the records attached hereto are true duplicates of the original records in the custody of AT&T. I further state that: a. All records attached to this certificate were made at or near the time of the occurrence of the matter set forth by, or from information transmitted by, a person with knowledge of those matters, they were kept in the ordinary course of the regularly conducted business activity of AT&T , and they were made by AT&T as a regular practice; and b. Such records were generated by AT&T's electronic process or system that produces an accurate result, to wit: I. The records were copied from electronic device(s), storage medium(s), or file(s) in the custody of AT&T in a manner to ensure that they are true duplicates of the original records; and 2. The process or system is regularly verified by AT&T, and at all times pertinent to the records certified here the process and system functioned properly and normally. I further state that this certification is intended to satisfy Rules 902(11) and 902(13) of the Federal Rules of Evidence. August 15, 2019 Date Signature EFTA00133362

Grand Jury Subpoena PtiteboStzxtespistrict Court SOUTHERN DISTRICT OF NEW YORK TO: National Compliance Center AT&T Corporation 11760 U.S. Highway 1 North Palm Beach, FL 33408 GREETINGS: WE COMMAND YOU that all and singular business and excuses being laid aside, you appear and attend before the GRAND JURY of the people of the United States for the Southern District of New York, at the United States Courthouse, 40 Foley Square, Room 220, in the Borough of Manhattan, City of New York, New York, in the Southern District of New York, at the following date, time and place: Appearance Date: August 13, 2019 Appearance Time: 10:00 a.m. to testify and give evidence in regard to an alleged violation of : 18 U.S.C. §§ 371, 1001, 1519 and not to depart the Grand Jury without leave thereof, or of the United States Attorney, and that you bring with you and produce at the above time and place the following: Please see attached rider. Personal appearance is not uired if the requested records are (1) produced on or before the return date to Assistant U.S. Attorney of the United States Attorney's Office, I St. Andrew's Plaza, New York, NY 10007. Tel: , and (2) accompanied by an executed copy of the attached Declaration of Custodian of Records. Ref No. JE08112019. Failure to attend and produce any items hereby demanded will constitute contempt of court and will subject you to civil sanctions and criminal penalties, in addition to other penalties of the Law. DATED: New York, New York August 11, 2019 640 Cfa-SS, Fbes-v% GEOFFREY S. BERMAN At" Ltlfir United States Attorney for the Southern District ofNew York Assistant United States Attorney One St. Andrew's Plaza New York, New York 10007 Telephone: Email: rev. 02.01.12 EFTA00133363

RIDER (Grand Jury Subpoena to AT&T, dated August 11, 2019) Ref. No. JE08112019 REOUEST: For the following telephone numbers: • Please provide any and all documents, to include, but not limited to those identified below, for the period July 6, 2019 until the present: I. All subscriber identifying information, including, but not limited to, name(s), address(es), date of birth, social security number(s), email addresses, and secondary telephone number; 2. All billing identifying information, including, but not limited to, name(s), address(es), date of birth, social security number(s), email addresses, secondary telephone number, and method of payment; 3. Physical location or intemet protocol ("IP") address where the account was registered; 4. Phone type (e.g. cellular, payphone, calling card, land line); 5. Electronic Serial Number ("ESN"), International Mobile Equipment Identity rimEn, International Mobile Subscriber Identity ("IMSI"), Media Access Control ("MAC") address, SIM number, ICCID number, UDID number, and/or device serial number; 6. All call detail information, including, but not limited to, local, long distance and toll records, including incoming and outgoing calls; 7. Toll information for text messages (timing and numbers associated with incoming and outgoing text messages); 8. All other telephone numbers registered to or listed on the same account; 9. Length of service, including the date the account was established and the date the account was disconnected, if applicable. In lieu of an appearance you may comply with this subpoena by providing the requested information, alon with a business records certification pursuant to Fed. R. Evid. 803(6) to Assistant U.S. Attorney of the United States Attorne 's Office, 1 St. Andrew's Plaza, New York, NY 10007. Tel: , email: EFTA00133364

RESPONSE COVER SHEET AT&T 11760 US HWY 1, SUITE 300 NORTH PALM BEACH FL 33408 Phoneme Facsimile To: AUSA AUSA NEW YORK 10007 I ST ANDREWS PLAZA NEW YORK NY 10007 File Code: 2790842 From: DAD Phone Number: Request Dated: 8/1412019 Number of Pages: Fax Number: I Received On: 8/142019 Date: 8/1512019 Case Number: Case Name: AT&T is unable to provide any information in response to the Legal Demand because AT&T does not maintain records in the normal course of business that associate individual accounts or devices with wireless dynamic IP addresses. The IP address(es) listed in the Legal Demand is/are allocated to AT&T Mobility LLC, AT&T Global Network Services, and/or Service Provider Corporation in conjunction with AT&T Wireless. These blocks of IP addresses are used by AT&T Wireless for internet access and web based applications for wireless devices (such as web enabled cell phones and air cards). CONFIDEVEIALITY NOTICE This cover sheet, and any document which may accompany it, contains information from the Global Legal Ikmand Center which is intended for use only by the individual to whom it is addressed, and which may contain information that is privileged, confidential and/or otherwise exempt from disclosure under applicable law. If the reader of this message is not the intended incipient or the person responsible for delivering this message to the intended recipient. any review, disclosure. dissemination, distribution. copying or other use of this message or its substance is strictly prohibited. If you have received this communication in error, please notify us immediately by telephone to arrange for the return of this communication to us at our expense. Thank you. EFTA00133365

2790842 DAD AT&T 11760 US HWY I, SUITE 300 NORTH PALM BEACH FL 33408 (Fax) DECLARATION OF AUTHENTICITY OF AT&T RECORDS STATE OF FLORIDA COUNTY OF PALM BEACH My name is Daniel Dixon. I am over the age of 18 and qualified to make this affidavit. I am employed by AT&T as a Compliance Security Analyst and also serve as the Custodian of Records for AT&T. I have been employed by AT&T since 10/12/2009. After a thorough search of the documents relied on in the course of my duties as Custodian of Records and Compliance Security Analyst, I was unable to find any information responsive to your request regarding: Pursuant to 28 U.S.C. Sec.1746, I declare, under penalty of perjury, that the foregoing is true and correct. Executed on August 15, 2019 J nn IX:ren Compliance Security Analyst EFTA00133366

Grand Jury Subpoena Prato,States pistrirt Trani SOUTHERN DISTRICT OF NEW YORK TO: National Compliance Center AT&T Corporation 11760 U.S. Highway 1 North Palm Beach, FL 33408 GREETINGS: WE COMMAND YOU that all and singular business and excuses being laid aside, you appear and attend before the GRAND JURY of the people of the United States for the Southern District of New York, at the United States Courthouse, 40 Foley Square, Room 220, in the Borough of Manhattan, City of New York, New York, in the Southern District of New York, at the following date, time and place: Appearance Date: August 21, 2019 Appearance Time: 10:00 a.m. to testify and give evidence in regard to an alleged violation of : 18 U.S.C. §§ 371, 1001, 1519, 2 and not to depart the Grand Jury without leave thereof, or of the United States Attorney, and that you bring with you and produce at the above time and place the following: Please see attached rider. Personal appeara required if the requested records are (1) produced on or before the return date to Assistant U.S. Attorney of the United States Attorne s Office, 1 St. Andrew's Plaza, New York, NY 10007. Tel: . email: and (2) accompanied by an executed copy of the attached Declaration of Custodian of Records. Ref No. 2019R01059. Failure to attend and produce any items hereby demanded will constitute contempt of court and will subject you to civil sanctions and criminal penalties, in addition to other penalties of the Law. DATED: New York, New York August 14, 2019 6e0C6s-ss• GEOFFREY S. BERMAN At" Ltlfir United States Attorney for the Southern District of New York Assistant United States Attorney One St. Andrew's Plaza New York, New York 10007 Telephone: Email: rev. 02.01.12 EFTA00133367

RIDER (Grand Jury Subpoena to AT&T, dated August 14, 2019) Ref. No. 2019R01059 REOUEST: For the Internet Protocol ("IP") addresses listed below at the following dates and times, please provide the following information: on 08/10/2019 08:47:56 EDT on 08/10/2019 08:16:36 EDT on 08/10/2019 08:21:58 EDT I. All subscriber identifying information including, but not limited to: a. Name; b. User name or other subscriber identity or number; c. Address; d. Primary and alternate telephone numbers; e. Primary and alternate email addresses; f. Date of birth; g. Social Security number; h. Any temporarily assigned network address; i. MAC address; and j. Browser and operating system information. 2. Records of session times and durations and any IP addresses used by the subscriber at the beginning, end, and anytime during these sessions. 3. Length of service, including start date and types of service utilized. 4. Means and source of payment for services (including any credit card or bank account numbers). 5. Subscriber's call detail information for the period from January 1, 2014 to the present. 6. Account notes and logs, including any customer service communications or other correspondence with the subscriber. 7. Investigative files or user complaints concerning the subscriber. In lieu of an appearance you may comply with this subpoena by providing the requested information, alon with a business records certification pursuant to Fed. R. Evid. 803(6) to Assistant U.S. Attorney of the United States Attorne 's Office, I St. Andrew's Plaza, New York, NY 10007. Tel: , email: EFTA00133368

AT&T Records key AT&T searches all available databases to ensure all responsive records are provided. Multiple reports may be provided in response to your request. Note: For each record described in this key, all times are stored and provided in UTC AT&T Mobility Voice Descriptions Column/Field Name Description Item Row Number Conn.Date Connection Date. The date of the call. Conn.Time(UTC) Connection Time. The time the call was connected. Time is in UTC. Times is expressed in military time as HH:MM:SS. Conn Date Time Connection date and time- Date and Time the call was connected. Displayed as one column on the Landline Call Detail Records. SeizureTime The time it takes to connect the call measured from the moment the caller presses "Send" to when the call is connected. ET (Elapsed Time) Duration of the transaction. Duration is in NIM:SS Originating Number The phone number the call/text originated from. For data records, this does not necessarily mean the number originated the data transaction. The network constantly communicates with intemet enabled devices and the data records do not indicate if a customer initiated a data transaction. Terminating Number The number the transaction terminated to. DIALED (D) The number that the originating party dialed. Appears in subsequent line of the same row in the Originating Number column. (Note: only appears if the Tennis:ming number Offers from the Dialed number) A = *, B = # FORWARDED (F) The number the terminated number forwarded the call to. Appears in subsequent line of the same row in the Originating Number column. TRANSLATED (T) Indicates if a number was translated to a different number. For example, if the number called is 911, then that gets translated to a ten-digit number for routing to a 911 dispatch center. The (T) indicates the number the translation was from, not the number translated to. ORIGINAL ORIGINATING (00) Denotes the number that originated the call before call forwarding was invoked. Appears in subsequent line of the same row in the Originating Number column. ill Represents no record found or available. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Pagel. of 9 EFTA00133369

IMEI International Mobile Equipment Identifier A 15-digit number that uniquely identifies an individual wireless device Only the IMEI of the number requested is displayed. IMSI International Mobile Subscriber Identity The IMSI is a globally-unique code number that identifies a GSM subscriber to the network. The IMSI is linked to your account information with the carrier. The IMSI resides in the SIM card which can be moved from one GSM phone to another. Only the IMSI of the number requested in the legal demand is displayed. CT (Call Type) Denotes if the leg of a call is an originating leg or terminating leg. Mobile Originating (MO) Mobile Terminating (MT) Service Originating (SO) Service Terminating (ST) A leg of a call represents each time the call is processed through a network switch. Calls may go through several switches in AT&Ts network in order to reach the intended party. A service record is generated when the network generates a leg of a call to reach a service on the network. For example, a leg connecting to the voicemail platform denotes a service invoked on the network and may show up as a service record. Feature This column represents the type of call that occurred as recorded by our network and used for purposes of processing a call on AT&Ts network. These are not necessarily indicative of features on a customer's account or the types of services subscribed too. Make The Make of the handset used in the transaction. Model The Model of the handset used in the transaction. Cell Location Identifiers: 3G Network cell Site= LAC/CID 4G Network Cell Site= ECGI Examples: 3G Network Cell Site. [27077/11621:-80.05629:26.74779:350:90.0] LAC/CID L0NG:LAT Sector:Beamwidth AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 of 9 EFTA00133370

4G Network Cell Site M3151247:520122: -96.912452:33.013937:358:4.0 ECGI:ENB-ID LONG:LAT Sector:Beamwidth Definitions: LAC-Location Area Code. This number identifies the specific region a cell tower is located in. The number is used internally in AT&T and for network purposes. CID-Cell Identity. This number identifies the location of the tower within a specified region. The number is used internally in AT&T and for network purposes. ECGI-Enhanced cell global identity. A nine digit number that indicates the location of a cell tower when 4G technology is being used. The number is used internally in AT&T and for network purposes. ENB-ID- Evolved Node B (eNodeB) Hardware connected to the AT&T mobility network that communicates directly with a mobile device. This number is used internally to AT&T to identify a specific antenna on a tower when 4G technology is used. Longitude - A geographic coordinate that specifies an East-West Position of a point on the earth's surface. The Latitude represented is of the cell tower. Latitude - A geographic coordinate that specifies a North-South Position of a point on the earth's surface. The Longitude represented is of the cell tower. Sector-A number out of 360 degrees that indicates the side of the cell site antenna used in processing the call. Beamwidth-A number out of the 360 degrees that specifies the angle of coverage of the RE signal coming from a particular cell site sector. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 of 9 EFTA00133371

Feature Definitions for Mobility Voice Report Features represents the type of call that occurred as recorded by our network and used for purposes of processing a call on AT&Ts network. These are not necessarily indicative of features on a customer's account or the types of services subscribed to. Feature Acronym Feature Definition 'ADD' Unstructured Supplementary Service Data 'CBI' Barring of All Incoming Calls 'CBIOP' Incoming Operator Determined Barring i 'CBIP' Barring of All Incoming Calls Roaming Outside Public Land Mobile Network 'CBIUK' Barring of Incoming Calls 'CBO' Barring of All Outgoing Calls 'CBOI' Barring of All Outgoing Intl Calls 'CROW' Barring of All Outgoing Intl Calls Except to Public Land Mobile Network 'CBOOP' Outgoing Operator Determined Barring 'CBOUK' Barring of Outgoing Calls 'CBUK' All Barring 'CFB' Call Forwarding Subscriber Busy 'CFC' Call Forwarding All Conditional i 'CFNA' Call Forwarding No Reply 'CFNR' Call Forwarding Not Reachable I 'CFO' Call Forwarding in Gateway (Unknown) 'CFU' Call Forwarding Unconditional 'CFUK' All Forwarding 'CGC' a Advice of Charge Charging 'CGI' Advice of Charge Information 'CIAC' Account Code Service 'CICUG' Closed user Groups Service 'CIPCI' Proprietary Customer Information a 'CMH' Call Hold AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 of 9 EFTA00133372

'CMPRL' Proprietary Release Link Trunk Service 'CNIPVAII Proprietary Voice Mail Call Drophack 'CMR' Call Re-origination 'CMRC' Call Re-Origination By Cause 'CMW' Call Waiting 'ECT' Explicit Call Transfer 'GREW Enhanced Multi 'INIOR' Invoke Calling Number Identity Restriction 'MPS' Multiparty Services 'NIND' Proprietary Calling Name Delivery 'NIOP' Calling Number Identity Presentation INIOR' Calling Number Identity Restriction 'NITP' Connected Line Identity Presentation 'NITR' Connected Line Identity Restriction 'NSDA' Directory Assistance Service Call 'OACR' Anonymous Call Rejection 'OEXT' Extension Service 'ONICT' Malicious Call Trace 'O11ISC MSC 'OOW Optimal Routing (of Late Call Forwarding) 'SUBCMH' Call hold Call hold, Invoke, Invoked by Subscriber V2G Volte to 3G. It indicates the call was handed off from one Volte (a VOID call) to the 3G network (circuit switched call) VM Voicemail involved in transaction VCORR 4G Cell site was correlated with additional database FCID "flexible Caller ID" This indicates a secondary device, such as a watch or tablet, originated the call. The number indicated as the Original Originating (00) is the native number belonging to the secondary device that originated the call. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page S of 9 EFTA00133373

Feature Definitions for Mobility Voice and Mobility SMS Report Features represents the type of Call/SMS that occurred as recorded by our network and used for purposes of processing a Call/SMS on AT&Ts network. These are not necessarily indicative of features on a customer's account or the types of services subscribed to. Feature Acronym Feature Definition 'Wi-Fi' Er • This denotes when a Call/SMS was carried over Wi-Fi. No cell sites or any type of location information is available on these transactions because AT&T does not store this information. q AT&T Mobility SMS Descriptions Column Name Description Originating Number Number that originated the SMS Terminating Number Number that received the SMS Descrip If known, describes the direction of the SMS SMSO (SMS originating) SMST (SMS terminating) AT&T Mobility SMS-Email Descriptions Column Name Description i ll r — Email address associated Email Status SEND/RCVD MT MO (Mobile originating) (Mobile terminating) AO (Application originating) AT (Application terminating) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 of 9 EFTA00133374

AT&T Mobility Data Descriptions Column Name Description Bytes Up The number of bytes sent from mobile station to the network. Bytes Dn The number of bytes from the network to the mobile station. Originating Number For data records, the Originating Number does not necessarily mean the number originated the data transaction. The network constantly communicates with intemet enabled devices and the data records do not indicate if a customer initiated a data transaction. AT&T Wi-Fi Data Descriptions This report signifies data transactions where the customer is connected to Wi-Fi using AT&T VPN service. Column Name Description Bytes Up The number of bytes sent from mobile station to the network. Bytes Dn The number of bytes from the network to the mobile station. Originating Number For data records. the Originating Number does not necessarily mean the number originated the data transaction. The network constantly communicates with internet enabled devices and the data records do not indicate if a customer initiated a data transaction. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 of 9 EFTA00133375

AT&T Wireline Descriptions Column Name Description Sec. ()rig Secondary Originating Number. A secondary number associated with the call transaction. This number can either be a wireline or mobility number. As an example, if it is a non-mobility number, this could be a number that sits behind a customer's internal phone network such as a PBX. There are other numerous situations when secondary originating numbers are part of a call transaction. C IC Carrier Identification Code. The number in this column translates to identifying the interexchange carrier of the call. A public listing of CIC codes can be found at the following url: http://www.nanpa.com/repons/reports cic.hitni Call Code Represents the type of call that was processed on the wireline network. ()rig. Acc. Originating Access ID. When a call is received from another carrier and traverses AT&Ts VoIP network. This number translates to what carrier sent AT&T the call. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 of 9 EFTA00133376

AT&T International Descriptions Column Name Description Orig Country The country the call originated from based on the NPA-NXX of the party that placed the call. Dial Country The country of the number dialed based on the NPA-NXX of the dialed number. In Country Inbound Country. The country AT&T terminated the call to. This does not necessarily mean the called party is in the listed country. This represents the country that AT&T directed the call to in order to properly route the call to its final destination. Other carriers may pick up the call after the call has left the AT&T network. Out Country Outbound Country. The country AT&T routed the call from. This does not necessarily mean the call originated from the listed country. This represents the country AT&Ts network was used in to properly route the call to its final destination. Ans Ind Indicates if the call was answered. From C PN From Calling Party Number. Indicates if the call originated from the Originating Number. AT&T Common Scenarios I Scenarios Description Zero Duration Calls Voice usage reports showing all calls with zero durations in the Elapsed Time "ET" column indicate calls that were not connected. Numbers such as this are commonly used for routing purposes. AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 9 of 9 EFTA00133377

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date OS/15/2019 Sim Conn. Seizure Time Time (uTc) ET Originating Terminating "CI Number Number INSI CT Feature 1 07/06/19 13:10:44 0:13 1:33 3594090814785818 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 2 07/06/19 13:10:45 0:00 1:33 MO (1 3 07/06/19 13:14:17 0:00 0:21 MT (1 4 07/06/19 13:14:17 0:00 0:21 MT (1 5 07/06/19 13:14:18 0:11 0:20 ST (NIOP1 6 07/06/19 13:14:18 0:11 0:20 3594090814785818 310410662903025 NO (Ni-ril APPLE IPHONEX 7 07/06/19 14:03:21 0:00 0:52 35940908147858 310410662903025 MT (1 APPLE IPHONEX 8 07/06/19 14:03:21 0:29 0:52 NO (Ni-Pil 9 07/06/19 14:03:21 0:29 0:52 ST (NIOP1 APPLE IPHONEX 10 07/06/19 21:35:13 0:15 1:38 3594090814785818 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 11 07/06/19 21:35:13 0:16 1:38 MO -Pil 12 07/06/19 22:43:26 0:09 0:20 MO (VCORR1 13 07/06/19 22:43:26 0:09 0:20 3594090814785818 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 14 07/06/19 23:11:48 0:17 1:16 MT (NIOP:CbM:VCORR1 15 07/06/19 23:11:48 0:18 1:16 3594090814785818 310410662903025 MO —Pil APPLE IPHONEX 16 07/06/19 23:13:38 0:22 0:00 MT (NIOP1 17 07/06/19 23:13:40 0:24 0:02 MT (NIOP:ClNA:VM1 18 07/06/19 23:13:40 0:25 0:02 3594090814785818 310410662903025 MO (Ni APPLE IPHONEX 19 07/06/19 23:14:26 0:30 0:01 ST (NIOP1 20 07/06/19 23:14:29 0:33 0:03 MT (NIOP:ClNA:VM1 21 07/06/19 23:14:29 0:33 0:03 3594090814785818 310410662903025 MO (Ni APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 1 EFTA00133378

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in .....„• •••--s`"" 6 AT&T UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date OS/15/2019 Sim Conn. seizure Time Time (OTC) Cf Originating Terminating ticI Number Number IMFI CT Feature 22 07/06/19 23:17:09 0:11 0:14 I 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 23 07/06/19 23:17:51 0:23 0:00 MT (Ni-Pi:NIOP1 24 07/06/19 23:17:53 0:25 0:01 MT (Ni- ri:NIOP:CPNA:VN1 25 07/06/19 23:17:53 0:25 0:01 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 26 07/06/19 23:28:28 0:23 0:00 MT (Ni-Pi:NIOP1 27 07/06/19 23:28:30 0:25 0:02 MT (Ni-ri:NIOP:CPS:VN1 28 07/06/19 23:28:30 0:25 0:02 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 29 07/06/19 23:34:33 0:23 0:00 MT (NIOP1 30 07/06/19 23:34:34 0:24 0:03 MT (NIOP:CFNA:VN1 31 07/06/19 23:34:34 0:24 0:03 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 32 07/06/19 23:35:06 0:07 0:19 MT (NIOP:VCORR1 33 07/06/19 23:35:06 0:08 0:19 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 34 07/06/19 23:40:35 0:05 0:00 MT (Ni -Pi:NIOP1 35 07/06/19 23:40:37 0:07 0:02 MT (Ni -Pi:NIOP:CPS:VN1 36 07/06/19 23:40:37 0:08 0:02 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 37 07/06/19 23:43:00 0:05 1:47 3594090814785818 310410662903025 MT (Ni -Pi:NIOP1 APPLE IPHONEX 38 07/07/19 00:04:50 0:31 0:02 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 39 07/07/19 00:13:07 0:05 2:18 NO (VCORR1 40 07/07/19 00:13:07 0:05 2:18 3594090814785818 310410662903025 MT (Ni-Pi:NIOP1 APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA00133379

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. a AT&T Run Date: Run Tine: voice Usage For: Item Conn. Date 08/IS/2019 Conn. Tine (vrc) Seizure Time ET Originating Terminating Number Number IMGI INSI CT Feature 41 07/07/19 00:23:17 0:02 0:03 3594090814785818 310410662903025 MO (Mi-Pil APPLE IPHONEX 42 07/07/19 00:23:54 0:31 0:01 3594090814785818 310410662903025 MO (Mi-Pil APPLE IPHONEX 43 07/07/19 00:25:46 0:05 4:06 3594090814785818 310410662903025 MT (Ni-ri:NIOPI APPLE IPHONEX 44 07/07/19 00:42:31 0:05 2:53 MO (VCORR1 45 07/07/19 00:42:31 0:05 2:53 3594090814785818 310410662903025 MT (Ni-ri:NIOPI APPLE IPHONEX 46 07/07/19 02:23:14 0:06 5:32 MO (1 47 07/07/19 02:23:14 0:06 5:32 3594090814785818 310410662903025 MT (Ni-ri:NIOPI APPLE IPHONEX 48 07/07/19 14:19:42 0:03 0:00 3594090814785818 310410662903025 MT (Mi -Pi:NIOP1 APPLE IPHONEX 49 07/07/19 14:19:43 0:04 0:03 3594090814785818 310410662903025 MT (Ni-ri:NIOP:CPS:VN1 APPLE IPHONEX 50 07/07/19 14:19:43 0:06 0:03 MO (1 51 07/07/19 14:23:22 0:12 40:11 3594090814785818 310410662903025 MO (Mi-Pil APPLE IPHONEX 52 07/07/19 14:23:22 0:05 40:11 MT (NIOP1 53 07/07/19 15:54:24 0:20 0:00 MT (NIOP1 54 07/07/19 15:54:44 0:29 0:00 3594090814785818 310410662903025 MO (Ni-Pil APPLE IPHONEX 55 07/07/19 18:44:06 0:23 0:02 MT (NIOP:CfNA:VN1 56 07/07/19 18:44:06 0:27 0:02 ST (1 57 07/07/19 18:44:06 0:02 0:03 MO (CPNA:VMI 58 07/07/19 18:44:07 0:29 0:01 3594090814785818 310410662903025 MO (Mi-Pil APPLE IPHONEX 59 07/07/19 18:45:20 0:07 0:00 ST (1 60 07/07/19 18:45:24 0:03 0:00 MT (NIOPI AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA00133380

2790840 08/15/2019 MOBILITY illb. AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm .3/41/4-.t,!• `'s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 08/1S/2019 WNW' Conn. Seizure Tame Time (UTC) BS Originating Terminating Number Number Dal IMSI CT Feature 61 07/07/19 18:45:27 0:08 0:00 3594090914785818 310410662903025 MO (Ni-Fil APPLE IPHONEX 62 07/07/19 21:05:04 0:21 0:00 3594090914785818 310410662903025 MT (Ni-Pi:NIOPI APPLE IPHONEX 63 07/07/19 21:05:05 0:22 0:04 3594090814785818 310410662903025 MT (Wi- APPLE Pi:NIOP:CFNA:VM1 IPHONEX 64 07/07/19 21:58:42 0:07 0:08 3594090814785818 310410662903025 MT (Ni-Pi:NIOP1 APPLE IPHONEX 65 07/07/19 23:03:21 0:10 5:30 3594090914785818 310410662903025 MT (Ni-Pi:NIOP1 APPLE IPHONEX 66 07/07/19 23:03:21 0:10 5:30 MO (VCORRI 67 07/07/19 23:17:18 0:10 1:35 MT (NIOP:VCORR1 68 07/07/19 23:17:18 0:09 0:01 MT (Ni-Pi:NIOPI 69 07/07/19 23:17:19 0:11 1:34 3594090914795918 310410662903025 MO (Ni-Fil APPLE IPHONEX 70 07/07/19 23:32:57 0:03 9:00 3594090914785818 310410662903025 MO (Ni-Fil APPLE IPHONEX 71 07/08/19 08:30:06 0:03 1:35 3594090814785818 310410662903025 MO (Ni-Fil APPLE IPHONEX 72 07/08/19 08:32:12 0:02 0:17 3594090814785818 310410662903025 MO (Ni-Fil APPLE IPHONEX 73 07/08/19 08:32:34 0:03 7:11 3594090814785818 310410662903025 MO (Ni-Fil APPLE IPHONEX 74 07/08/19 13:35:06 0:00 6:37 35940909147958 310410662903025 MT (1 APPLE IPHONEX 75 07/08/19 13:35:07 0:11 6:37 ST (NIOP1 76 07/08/19 14:28:31 0:00 7:05 35940909147958 310410662903025 MO (1 APPLE IPHONEX 77 07/08/19 16:11:02 0:00 0:36 35940908147858 310410662903025 MT (1 APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA00133381

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 411., &•°.„•"" s. AT&T Run Date: Run Tina: Voice Usage For: Item Conn. Date 08/15/2019 WNW' Conn. Seizure Tine Time (OTC) ET Originating Terminating INEI Number Number INS1 CT Feature 78 07/08/19 16:11:04 0:14 0:36 ST (NIOP1 79 07/08/19 18:40:56 0:00 0:45 35940908147858 310410662903025 MT (1 APPLE IPHONEX 80 07/08/19 18:40:57 0:11 0:45 ST (NIOP1 81 07/08/19 19:03:11 0:00 1:29 35940908147858 310410662903025 MT (1 APPLE IPHONEX 82 07/08/19 19:03:12 0:13 1:29 ST (NIOP1 83 07/08/19 19:40:29 0:21 0:02 3594090814785818 310410662903025 NO (Ni-Fil APPLE IPHONEX 84 07/08/19 22:28:52 0:29 0:00 3594090814785818 310410662903025 NO (Ni-Fil APPLE IPHONEX 85 07/08/19 22:33:20 0:04 8:18 3594090814785818 310410662903025 MT (Ni-Pi:NIOPI APPLE IPHONEX 86 07/09/19 09:37:22 0:12 9:58 3594090814785818 310410662903025 MT (Ni-Pi:NIOPI APPLE IPHONEX 87 07/09/19 09:37:22 0:13 9:58 NO (1 88 07/09/19 13:05:41 0:06 0:10 3594090814785818 310410662903025 MT (Ni-Pi:NIOPI APPLE IPHONEX 89 07/09/19 13:15:08 0:00 3:29 35940908147858 310410662903025 NO (1 APPLE IPHONEX 90 07/09/19 13:20:29 0:00 0:54 35940908147858 310410662903025 NO (1 APPLE IPHONEX 91 07/09/19 13:21:47 0:00 2:45 35940908147858 310410662903025 NO (1 APPLE IPHONEX 92 07/09/19 13:57:50 0:00 7:31 35940908147858 310410662903025 MT (1 APPLE IPHONEX 93 07/09/19 13:57:50 0:10 7:31 ST (NIOP1 APPLE IPHONEX 94 07/09/19 14:12:47 0:00 3:08 35940908147858 310410662903025 MT (1 APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA00133382

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Dato: Run Time: Voice Usage For: Item Conn. Date 08/15/2019 Conn. Time (UTC) Seizure Time LT Originating Terminating IIQI Number Number INSI CT Feature 95 07/09/19 14:12:48 0:16 3:07 ST (NIOP) APPLE IPHONEX 96 07/09/19 14:17:20 0:00 4:47 35940908147858 310410662903025 NO () APPLE IPHONEX 97 07/09/19 14:36:41 0:00 1:57 35940908147858 310410662903025 NO () APPLE IPHONEX 98 07/09/19 14:38:52 0:00 10:16 35940908147858 310410662903025 NO () APPLE IPHONEX 99 07/09/19 14:51:05 0:00 0:52 35940908147858 310410662903025 NO () APPLE IPHONEX 100 07/09/19 15:08:52 0:00 13:25 35940908147858 310410662903025 NO () APPLE IPHONEX 101 07/09/19 15:28:08 0:00 11:45 35940908147858 310410662903025 NO () APPLE IPHONEX 102 07/09/19 15:45:39 0:00 0:29 35940908147858 310410662903025 NO () APPLE IPHONEX 103 07/09/19 15:46:25 0:00 5:09 35940908147858 310410662903025 NO () APPLE IPHONEX 104 07/09/19 15:52:18 0:00 1:14 35940908147858 310410662903025 NO () APPLE IPHONEX 105 07/09/19 16:17:16 0:00 0:57 35940908147858 310410662903025 NT () APPLE IPHONEX 106 07/09/19 16:17:17 0:20 0:56 ST (NIOP) APPLE IPHONEX 107 07/09/19 17:06:27 0:00 1:19 35940908147858 310410662903025 NT () APPLE IPHONEX 108 07/09/19 17:06:28 0:12 1:19 ST (NIOP) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA00133383

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tr/s AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 08/IS/2019 Conn. Tine (urc) Seizure Time ET Originating Terminating EMEI Number Number INSI CT Feature 109 07/09/19 17:42:33 0:00 0:01 35940908147858 310410662903025 NO () APPLE IPHONEX 110 07/09/19 17:43:42 0:00 0:03 35940908147858 310410662903025 NO () APPLE IPHONEX 111 07/09/19 17:45:04 0:00 0:23 35940908147858 310410662903025 NO () APPLE IPHONEX 112 07/09/19 17:46:07 0:00 0:02 35940908147858 310410662903025 NO () APPLE IPHONEX 113 07/09/19 19:03:26 0:14 0:00 ST (NIOP) 114 07/09/19 19:03:27 0:15 0:12 ST (NIOP:CFNA:VN1 115 07/09/19 19:05:16 0:34 0:00 ST (NIOP) 116 07/09/19 19:05:18 0:36 1:20 ST (NIOP:CFNA:VN1 117 07/09/19 19:08:51 0:19 0:00 ST (NIOP) 118 07/09/19 19:09:04 0:00 0:44 310410662903025 NT () 119 07/09/19 19:09:05 0:07 0:43 ST (NIOP) 120 07/09/19 19:17:16 0:00 0:03 310410662903025 NO () 121 07/09/19 19:17:36 0:00 0:18 310410662903025 NO () 122 07/09/19 19:28:15 0:00 3:41 35940908147858 310410662903025 NT () APPLE IPHONEX 123 07/09/19 19:28:15 0:17 3:42 ST (NIOP) 124 07/09/19 20:48:03 0:00 0:23 35940908147858 310410662903025 NO () APPLE IPHONEX 125 07/09/19 20:48:38 0:21 0:01 MT (NIOP) 126 07/09/19 20:48:39 0:22 0:01 MT (NIOP:CFNA:VN1 127 07/09/19 20:58:31 0:03 0:19 3594090814785818 310410662903025 NO (Ni-Pi) APPLE IPHONEX 128 07/09/19 20:58:55 0:03 7:11 3594090814785818 310410662903025 NO (Ni-ri:CNH1 APPLE IPHONEX 129 07/09/19 21:04:26 0:17 0:46 3594090814785818 310410662903025 MT (Ni-ri:NIOP:CNN1 APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 EFTA00133384

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ....,• •••--06 `""6 AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 08/15/2019 WNW' Conn. Seizure Time Time (OTC) IT Originating Terminating IMEI Mnnber Number IMSI CT Feature 130 07/09/19 21:07:29 0:03 0:02 3594090814785818 310410662903025 MO (Ni-Pi) APPLE IPHONEX 131 07/09/19 21:07:35 0:02 0:02 3594090814785818 310410662903025 MO (Mt-Y/) APPLE IPHONEX 132 07/09/19 21:07:40 0:02 0:04 3594090814785818 310410662903025 MO (Mt-Y/) APPLE IPHONEX 133 07/09/19 21:56:23 0:03 4:42 3594090814785818 310410662903025 MO (Mt-Y/) APPLE IPHONEX 134 07/10/19 12:56:13 0:10 0:00 ST (NIOP) APPLE IPHONEX 135 07/10/19 12:56:37 0:12 0:00 ST (NIOP) APPLE IPHONEX 136 07/10/19 12:57:17 0:24 0:00 ST (NIOP) APPLE IPHONEX 137 07/10/19 12:58:02 0:26 0:00 ST (NIOP) APPLE IPHONEX 138 07/10/19 12:58:03 0:27 4:28 ST (NIOP:ClNA:VM1 APPLE IPHONEX 139 07/10/19 13:02:46 0:00 0:00 3594090814785818 310410662903025 MT (NIOP) APPLE IPHONEX 140 07/10/19 16:44:40 0:00 2:26 35940908147858 310410662903025 MT () APPLE IPHONEX 141 07/10/19 16:44:41 0:25 2:27 ST (NIOP) APPLE IPHONEX 142 07/10/19 17:09:07 0:00 0:23 35940908147858 310410662903025 MT () APPLE IPHONEX 143 07/10/19 17:09:07 0:23 0:24 ST (NIOP) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 8 EFTA00133385

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e AT&T Run Date: Run Tina: Voice Usage For: Item Conn. Date 08/15/2019 Conn. Tine (OTC) Seizure Time UT Originating Terminating Number Number a@I INS1 CT Feature 144 07/10/19 17:10:03 0:00 1:23 35940908147858 310410662903025 NO () APPLE IPHONEX 145 07/10/19 18:20:17 0:26 0:00 ST (NIOP) 146 07/10/19 18:20:18 0:27 0:07 ST (NIOP:CFNA:VNI 147 07/10/19 18:41:25 0:00 4:41 35940908147858 310410662903025 NT () APPLE IPHONEX 148 07/10/19 18:41:26 0:17 4:39 ST (NIOP) 149 07/10/19 18:47:28 0:00 3:16 35940908147858 310410662903025 NT () APPLE IPHONEX 150 07/10/19 18:47:29 0:07 3:14 ST (NIOP) 151 07/10/19 19:25:17 0:32 0:02 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 152 07/10/19 19:39:59 0:09 1:11 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 153 07/10/19 19:59:09 0:11 1:38 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 154 07/10/19 20:15:39 0:15 5:01 NT (NIOP) 155 07/10/19 20:15:39 0:22 5:01 ST (NIOP) 156 07/10/19 20:15:39 0:22 5:01 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 157 07/10/19 20:48:33 0:06 2:08 MT (NIOP:VCORR) 158 07/10/19 20:48:33 0:06 2:08 3594090814785818 310410662903025 NO (Ni-Pi( APPLE IPHONEX 159 07/11/19 09:53:51 0:27 0:00 ST (NIOP) 160 07/11/19 09:53:51 0:27 0:05 ST (NIOP:CFNA:VNI 161 07/11/19 09:53:52 0:00 0:03 35940908147858 310410662903025 NO () APPLE IPHONEX 162 07/11/19 11:38:46 0:16 5:12 MT (NIOP) 163 07/11/19 11:38:46 0:16 5:12 3594090814785818 310410662903025 NO (Ni-ri) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 9 EFTA00133386

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 08/13/2019 Conn. Time (Urc) Seizure Time ET Originating Terminating INEI Number Number INS1 Cr Feature 164 07/11/19 14:30:32 0:27 0:00 ST (NIOP1 APPLE IPHONEX 165 07/11/19 14:30:33 0:28 0:06 ST (NIOP:CFNA:VN1 APPLE IPHONEX 166 07/11/19 18:05:51 0:03 3:09 3594090814785818 310410662903025 NO (Ni-ri) APPLE IPHONEX 167 07/11/19 18:09:13 0:02 0:21 3594090814785818 310410662903025 NT (Ni-ri:NIOP) APPLE IPHONEX 168 07/11/19 18:09:58 0:03 1:31 3594090814785818 310410662903025 NT (Ni-ri:NIOP) APPLE IPHONEX 169 07/11/19 18:13:06 0:03 4:27 3594090814785818 310410662903025 NO (Ni-ri) APPLE IPHONEX 170 07/11/19 19:07:16 0:31 0:01 3594090814785818 310410662903025 NO (Ni-ril APPLE IPHONEX 171 07/11/19 19:17:01 0:12 3:25 3594090814785818 310410662903025 NO (Ni-ri) APPLE IPHONEX 172 07/11/19 20:02:04 0:00 2:30 35940908147858 310410662903025 NT (1 APPLE IPHONEX 173 07/11/19 20:02:05 0:23 2:30 ST (NIOP1 174 07/11/19 21:26:20 0:07 0:14 3594090814785818 310410662903025 NO (Ni-ri) APPLE IPHONEX 175 07/11/19 23:45:56 0:16 1:54 3594090814785818 310410662903025 NT (Ni-ri:NIOP1 APPLE IPHONEX 176 07/11/19 23:59:43 0:07 1:01 3594090814785818 310410662903025 NT (Ni-ri:NIOPI APPLE IPHONEX 177 07/12/19 00:02:54 0:31 0:02 3594090814785818 310410662903025 NO (Ni-ril APPLE IPHONEX 178 07/12/19 00:03:17 0:02 0:35 3594090814785818 310410662903025 NT (Ni-ri:NIOPI APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 10 EFTA00133387

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 22:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ,,, `•-_--;,!,# """s AT&T Run Date: Run Time: voice Osage For: Item Conn. Date 08/19/2019 WNW' Conn. Seizure Tama Time (Inc) IT Originating Terminating Number Number IMEI INSI CT Feature 179 07/12/19 13:27:18 0:20 3:31 3594090814785818 310410662903025 NO (Ni-Fil APPLE IPHONEX 180 07/12/19 13:40:57 0:42 0:00 3594090814785818 310410662903025 NO (Ni-Fil APPLE IPHONEX 181 07/12/19 13:41:08 0:00 0:22 35940908147858 310410662903025 NO (1 APPLE IPHONEX 182 07/12/19 13:54:33 0:00 0:14 35940908147858 310410662903025 NO (1 APPLE IPHONEX 183 07/12/19 13:59:48 0:03 0:00 3594090814785818 310410662903025 MT (Ni-Pi:NIOPI APPLE IPHONEX 184 07/12/19 15:03:18 0:00 0:14 35940908147858 310410662903025 NO (1 APPLE IPHONEX 185 07/12/19 15:43:43 0:21 0:00 MT (NIOP1 186 07/12/19 15:43:44 0:22 0:00 MT (NIOP:CFNA:VN1 187 07/12/19 15:44:00 0:37 0:00 ST (NIOP1 APPLE IPHONEX 188 07/12/19 15:44:03 0:40 0:26 ST (NIOP:CFNA:VN1 APPLE IPHONEX 189 07/12/19 15:44:38 0:00 0:02 35940908147858 310410662903025 NO (1 APPLE IPHONEX 190 07/12/19 15:45:17 0:00 0:02 35940908147858 310410662903025 NO (1 APPLE IPHONEX 191 07/12/19 15:46:33 0:00 0:02 35940908147858 310410662903025 NO (1 APPLE IPHONEX 192 07/12/19 15:49:43 0:00 0:55 35940908147858 310410662903025 NT (1 APPLE IPHONEX 193 07/12/19 15:49:44 0:11 0:53 ST (NIOP1 APPLE IPHONEX 194 07/12/19 18:48:28 0:06 0:00 ST (NIOP1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 11 EFTA00133388

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. \ i„ aa %ftmlisli° 444.411. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 08/15/2019 Sam Conn. Seizure Time Sum (OTC) ET Originating Terminating IIRI Number Number 1NSI CT Feature 195 07/12/19 18:48:30 0:01 0:00 310410662903025 MT (NIOP1 196 07/12/19 18:50:20 0:11 0:00 ST (NIOP1 197 07/13/19 07:37:48 0:10 0:25 3594090814785818 310410662903025 NO (Ni-Pi) APPLE IPHONEX 198 07/13/19 10:40:31 0:16 0:24 3594090814785818 310410662903025 NO (Ni-Pi) APPLE IPHONEX 199 07/13/19 11:02:40 0:07 0:20 3594090814785818 310410662903025 NT (Ni-Pi:NIOP) APPLE IPHONEX 200 07/13/19 12:05:38 0:01 0:04 NO (CFNR:VM1 201 07/13/19 12:05:39 0:02 0:03 MT (CPNR:VM1 202 07/13/19 12:05:39 0:03 0:03 ST (1 203 07/13/19 12:05:40 0:00 0:01 35940908147858 310410662903025 NO (1 APPLE IPHONEX 204 07/13/19 13:29:16 0:00 9:34 35940908147858 310410662903025 MT (1 APPLE IPHONEX 205 07/13/19 13:29:16 0:10 9:34 ST (NIOP1 APPLE IPHONEX 206 07/14/19 12:43:48 0:11 0:31 35940908147858 310410662903025 NO -fil APPLE IPHONEX 207 07/14/19 12:55:05 0:07 0:08 35940908147858 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 208 07/14/19 14:48:21 0:00 0:18 35940908147858 310410662903025 MT (1 APPLE IPHONEX 209 07/14/19 14:48:21 0:08 0:19 ST (NIOP1 210 07/14/19 17:43:28 0:04 0:00 35940908147858 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 211 07/14/19 20:34:55 0:31 0:02 35940908147858 310410662903025 NO -19.1 APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 12 EFTA00133389

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4111110 AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 01115/2019 WNW' Conn. Seizure Time Time CuTc) ET Originating Terminating IMEI Number Number INSI CT Feature 212 07/14/19 20:35:31 0:02 0:00 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 213 07/14/19 20:35:43 0:07 0:00 35940908147858 310410662903025 MO (Ni -Li( APPLE IPHONEX 214 07/14/19 20:36:43 0:34 0:04 35940908147858 310410662903025 MO (Ni -Li( APPLE IPHONEX 215 07/14/19 22:00:24 0:21 0:00 35940908147858 310410662903025 MT (Ni-ri:NIOP) APPLE IPHONEX 216 07/14/19 22:00:25 0:22 1:11 35940908147858 APPLE 310410662903025 MT (Ni - ri:NIOP:CFNA:VM] 1PHONEX 217 07/15/19 17:46:58 0:00 0:00 35940908147858 310410662903025 MT (NIOP:CMNI APPLE IPHONEX 218 07/15/19 17:46:59 0:01 0:29 35940908147858 310410662903025 MT (NIOP:CPS:CMN:VM] APPLE IPHONEX 219 07/15/19 17:47:01 0:03 0:00 35940908147858 310410662903025 MT (Ni-ri:NIOP) APPLE IPHONEX 220 07/15/19 17:56:11 0:20 12:32 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 221 07/15/19 18:11:04 0:00 16:36 35940908147858 310410662903025 MO () APPLE IPHONEX 222 07/15/19 20:38:27 0:31 0:04 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 223 07/16/19 00:09:10 0:13 2:41 35940908147858 310410662903025 MT (Ni-ri:NIOP) APPLE IPHONEX 224 07/16/19 14:42:06 0:17 0:00 ST (NIOP) 225 07/16/19 18:09:49 0:09 0:00 ST (NIOP) 226 07/16/19 18:14:34 0:00 0:29 35940908147858 310410662903025 MT () APPLE IPHONEX 227 07/16/19 18:14:35 0:13 0:29 ST (NIOR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 13 EFTA00133390

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ....,• •••-•a`m a AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 08/19/2019 Conn. Tim (UTC) Seizure Time ET Originating Terminating "CI Number Number INSI CT Feature 228 07/16/19 20:10:18 0:06 0:00 35940908147858 310410662903025 NO (Ni-Fil APPLE IPHONEX 229 07/16/19 20:10:51 0:16 1:35 35940908147858 310410662903025 NO (Ni-Fil APPLE IPHONEX 230 07/16/19 20:28:47 0:01 0:00 NT (NIOP1 231 07/16/19 20:28:48 0:04 0:00 35940908147858 310410662903025 NO (Ni-Fil APPLE IPHONEX 232 07/16/19 20:36:42 0:34 0:04 35940908147858 310410662903025 NO (Ni-Fil APPLE IPHONEX 233 07/16/19 20:37:30 0:31 0:02 35940908147858 310410662903025 NO (Ni-Fil APPLE IPHONEX 234 07/16/19 21:04:57 0:05 0:09 35940908147858 310410662903025 NT (Ni-ri:NIOP1 APPLE IPHONEX 235 07/16/19 22:16:32 0:35 0:04 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 236 07/17/19 13:52:47 0:27 0:00 ST (NIOP1 237 07/17/19 13:52:48 0:28 0:18 ST (NIOP:CYNA:VN1 238 07/17/19 15:04:09 0:26 0:01 ST (NIOP1 239 07/17/19 15:04:11 0:28 0:48 ST (NIOP:ClNA:VN1 240 07/17/19 15:04:11 0:28 0:48 NO (Ni-ril 241 07/17/19 15:13:06 0:05 0:00 ST (NIOP1 242 07/17/19 15:13:11 0:04 0:00 ST (NIOP1 243 07/17/19 17:41:53 0:31 0:31 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 244 07/17/19 18:20:39 0:15 0:21 35940908147858 310410662903025 NT (Ni-ri:NIOP) APPLE IPHONEX 245 07/17/19 18:22:23 0:00 10:26 35940908147858 310410662903025 NO (1 APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 14 EFTA00133391

2790840 08/15/2019 MOBILITY 4III, AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: Voice Usage For: Item Conn. Date 08/15/2019 WNW' Conn. Seizure Time Time (UTC) ET Originating Terminating Number Number IMEI 1M3I CT Feature 246 07/17/19 20:29:32 0:03 0:00 35940908147858 310410662903025 MT (Ni-Pi:NIOP) APPLE IPHONEX 247 07/18/19 11:01:12 0:03 2:31 35940908147858 310410662903025 NO (Mi-Fi) APPLE IPHONEX 248 07/18/19 14:11:19 0:00 0:12 35940908147858 310410662903025 MT () APPLE IPHONEX 249 07/18/19 14:11:19 0:13 0:13 MO (VCORR) 250 07/18/19 14:11:19 0:13 0:13 ST (NIOP) APPLE IPHONEX 251 07/18/19 14:39:56 0:22 0:00 MO (Ni-Pi) 252 07/18/19 14:39:56 0:22 0:00 ST (NIOP) APPLE IPHONEX 253 07/18/19 15:54:18 0:00 0:02 35940908147858 310410662903025 MO () APPLE IPHONEX 254 07/18/19 15:55:05 0:00 0:05 35940908147858 310410662903025 MO () APPLE IPHONEX 255 07/18/19 16:20:20 0:27 0:00 ST (NIOP:CFNA:VM1 APPLE IPHONEX 256 07/18/19 16:20:20 0:27 0:00 ST (NIOP) APPLE IPHONEX 257 07/18/19 17:39:23 0:36 0:03 35940908147858 310410662903025 MO (Ni-Fi) APPLE IPHONEX 258 07/18/19 17:40:04 0:32 0:02 35940908147858 310410662903025 MO (Ni-Fi) APPLE IPHONEX 259 07/18/19 17:45:10 0:32 0:02 35940908147858 310410662903025 MO (Ni-Fi) APPLE IPHONEX 260 07/18/19 17:46:06 0:30 0:00 35940908147858 310410662903025 MO (Ni-Fi) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 15 EFTA00133392

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 08/15/2019 Conn. Time (urc) Seizure Time ET Originating Terminating IMEI Number Number INSI CT Feature 261 07/18/19 17:47:08 0:07 1:53 35940908147858 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 262 07/18/19 17:50:42 0:00 0:00 MT (NIOP) 263 07/18/19 17:50:44 0:03 6:50 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 264 07/18/19 17:50:44 0:03 6:50 MT (NIOP:VCORR) 265 07/18/19 18:57:08 0:10 20:49 35940908147858 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 266 07/19/19 14:02:20 0:21 0:00 35940908147858 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 267 07/19/19 14:02:21 0:22 0:08 35940908147858 APPLE 310410662903025 MT (Ni- ri:NIOP:ClNA:VM1 IPHONEX 268 07/19/19 18:25:41 0:15 0:00 ST (NIOP) 269 07/19/19 20:08:38 0:28 2:49 35940908147858 310410662903025 NO -19.1 APPLE IPHONEX 270 07/19/19 21:02:59 0:03 12:04 35940908147858 310410662903025 NO (Mt-194 APPLE IPHONEX 271 07/19/19 22:26:28 0:08 7:50 35940908147858 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 272 07/20/19 16:33:42 0:07 13:56 35940908147858 310410662903025 MT -Pi:NIOP1 APPLE IPHONEX 273 07/20/19 18:17:43 0:04 4:34 35940908147858 310410662903025 NO (Mt-194 APPLE IPHONEX 274 07/21/19 09:10:29 0:11 0:30 35940908147858 310410662903025 NO (Mt-194 APPLE IPHONEX 275 07/21/19 09:21:57 0:10 0:14 35940908147858 310410662903025 NO (Mt-194 APPLE IPHONEX 276 07/21/19 16:39:06 0:00 0:24 35940908147858 310410662903025 MT () APPLE IPHONEX 277 07/21/19 16:39:06 0:11 0:24 ST (NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 16 EFTA00133393

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ...`%:--d as ".". AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 06/15/2019 WNW' Conn. Seizure Tine Time (UTC) IT Originating Terminating IIBI Mnmber Number 1NSI CT Feature 278 07/21/19 17:38:31 0:00 31:14 35940908147858 310410662903025 NO (1 APPLE IPHONEX 279 07/22/19 13:29:19 0:08 0:00 35940908147858 310410662903025 MT (NIOP1 APPLE IPHONEX 280 07/22/19 15:23:26 0:22 0:00 ST (NIOP1 281 07/22/19 19:51:38 0:05 0:00 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 282 07/22/19 19:52:53 0:31 0:00 ST (NIOP1 283 07/22/19 19:52:54 0:00 0:00 MT (1 284 07/22/19 19:52:55 0:33 0:05 ST (NIOP:CFNA:VM1 285 07/22/19 19:52:55 0:33 0:05 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 286 07/22/19 19:55:00 0:10 0:43 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 287 07/22/19 20:00:00 0:34 0:03 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 288 07/22/19 20:03:21 0:05 17:35 35940908147858 310410662903025 MT (Ni-ri:NIOP1 APPLE IPHONEX 289 07/22/19 20:32:30 0:11 2:12 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 290 07/22/19 21:49:30 0:35 0:03 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 291 07/22/19 21:51:59 0:33 0:00 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 292 07/22/19 22:06:14 0:37 0:04 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 293 07/22/19 22:13:13 0:35 0:04 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 17 EFTA00133394

2790840 08/15/2019 MOBILITY S AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm ..\--Lesti AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: voice Usage For: Item Conn. Date 08/15/2019 Conn. Time (USC) Seizure Time ET Originating Terminating LNE1 Number Number 1NSI CT Feature 294 07/22/19 22:31:39 0:00 0:00 35940908147858 310410662903025 NT (NIOP1 APPLE IPHONEX 295 07/22/19 22:46:18 0:21 0:00 35940908147858 310410662903025 MT (Ni -Pi:NIOP) APPLE IPHONEX 296 07/22/19 22:46:19 0:22 0:15 35940908147858 APPLE 310410662903025 MT (Ni - ri:NIOP:ClNA:VN1 IPHONEX 297 07/22/19 22:47:11 0:07 0:51 35940908147858 310410662903025 NO (Ni-Pi( APPLE IPHONEX 298 07/23/19 13:21:12 0:27 0:00 ST (NIOP1 299 07/23/19 13:21:13 0:28 0:12 ST (NIOP:CFNA:VN1 300 07/23/19 13:22:12 0:28 0:00 ST (NIOP1 301 07/23/19 13:22:14 0:30 0:03 ST (NIOP:CFNA:VN1 302 07/23/19 15:33:03 0:27 0:00 ST (NIOP1 303 07/23/19 15:33:05 0:29 0:35 ST (NIOP:CFNA:VN1 304 07/23/19 15:33:05 0:30 0:35 NO (VCORR1 305 07/23/19 15:57:54 0:35 0:04 35940908147858 310410662903025 NO (Ni-Pi( APPLE IPHONEX 306 07/23/19 16:11:23 0:01 0:00 NT (NIOP1 307 07/23/19 16:11:29 0:07 0:43 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 308 07/23/19 16:11:29 0:07 0:43 MT (NIOP:VCORR1 309 07/23/19 17:29:07 0:29 0:00 35940908147858 310410662903025 NO (Ni-Pi( APPLE IPHONEX 310 07/23/19 19:47:08 0:34 0:04 35940908147858 310410662903025 NO (Ni-Pi( APPLE IPHONEX 311 07/23/19 19:47:36 0:08 2:00 35940908147858 310410662903025 MT (Ni-Pi:NIOP1 APPLE IPHONEX 312 07/23/19 21:18:09 0:35 0:03 35940908147858 310410662903025 NO (Ni-Pi( APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 18 EFTA00133395

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4.... ....,• •••-ga`""" ° AT&T Run Date: Run Time: voice Usage For: Item Conn. Date 08/15/2019 WNW' Conn. Seizure Time Time (OTC) ET Originating Terminating Number Number CT Feature 313 07/24/19 20:44:20 0:36 0:03 35940908147858 310410662903025 MO (Ni -194 APPLE IPHONEX 314 07/24/19 20:46:40 0:00 13:55 35940908147858 310410662903025 MT () APPLE IPHONEX 315 07/24/19 20:46:41 0:19 13:56 ST (NIOP) 316 07/25/19 09:38:24 0:00 0:02 35940908147858 310410662903025 MO () APPLE IPHONEX 317 07/25/19 09:58:16 0:00 1:39 35940908147858 310410662903025 MT () APPLE IPHONEX 318 07/25/19 09:58:17 0:08 1:39 ST (NIOP) APPLE IPHONEX 319 07/25/19 10:33:31 0:31 0:02 35940908147858 310410662903025 MO (Ni -194 APPLE IPHONEX 320 07/25/19 10:33:40 0:01 0:00 MT (NIOP) 321 07/25/19 10:33:46 0:07 0:41 35940908147858 310410662903025 MO (Ni -194 APPLE IPHONEX 322 07/25/19 10:33:46 0:07 0:41 MT (NIOP:VCORR) 323 07/25/19 10:35:42 0:34 0:03 35940908147858 310410662903025 NO (Ni-ri) APPLE IPHONEX 324 07/25/19 11:16:23 0:08 4:46 35940908147858 310410662903025 MT (Ni-ri:NIOP) APPLE IPHONEX 325 07/25/19 15:03:51 0:12 1:59 35940908147858 310410662903025 MT (Ni-ri:NIOP) APPLE IPHONEX 326 07/25/19 16:39:35 0:00 4:03 35940908147858 310410662903025 MT () APPLE IPHONEX 327 07/25/19 16:39:35 0:23 4:03 ST (NIOP) APPLE IPHONEX 328 07/25/19 21:05:17 0:22 0:00 35940908147858 310410662903025 MT (Xi -ri:NIOP) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 19 EFTA00133396

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. •--..„ Les 1/4-6 AT&T Run Date: Run Tine: Voice Usage For: Item Conn. Date 08/1S/2019 Conn. Tame (OTC) Seizure Time ET Originating Terminating Number Number CT Feature 329 07/25/19 21:05:18 0:23 0:02 35940908147858 APPLE 310410662903025 MT (Ni - ri:NIOP:CFNA:VNI IPHONEX 330 07/25/19 21:13:08 0:07 0:04 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 331 07/25/19 21:38:17 0:05 4:17 35940908147858 310410662903025 NT -ri:NIOP1 APPLE IPHONEX 332 07/25/19 21:55:44 0:33 0:05 35940908147858 310410662903025 NO (Mt-Y/1 APPLE IPHONEX 333 07/25/19 21:56:27 0:22 0:25 35940908147858 310410662903025 NO -ril APPLE IPHONEX 334 07/26/19 14:56:49 0:11 0:43 35940908147858 310410662903025 NT (Ni-ri:NIOPI APPLE IPHONEX 335 07/26/19 17:40:36 0:32 0:04 35940908147858 310410662903025 NO -ril 336 07/26/19 17:41:05 0:23 0:41 APPLE IPHONEX 35940908147858 310410662903025 NO 337 07/26/19 17:42:32 0:35 0:05 APPLE IPHONEX 35940908147858 310410662903025 NO APPLE IPHONEX 338 07/26/19 18:29:10 0:19 6:15 35940908147858 310410662903025 NT -ri:NIOP1 339 07/26/19 18:50:17 0:10 0:41 APPLE IPHONEX 35940908147858 310410662903025 NO APPLE IPHONEX 340 07/26/19 18:51:11 0:01 0:00 35940908147858 310410662903025 NT -ri:NIOP1 APPLE IPHONEX 341 07/26/19 18:51:30 0:04 11:21 35940908147858 310410662903025 NT -ri:NIOP1 342 07/26/19 19:04:12 0:21 8:20 APPLE IPHONEX 35940908147858 310410662903025 NO APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 20 EFTA00133397

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided UTC. t•-_-es ,,i `a. AT&T in %ft....toy Run Date: Run Time: voice Usage For: Item Conn. Date 08/13/2019 Conn. Time (urc) Seizure Time ES Originating Terminating L@I Number Number IKSI CT Feature 343 07/26/19 19:13:11 0:31 0:07 35940908147858 310410662903025 NO (Ni-Pil APPLE IPHONEX 344 07/26/19 19:22:36 0:14 0:00 NT (NIOP1 345 07/26/19 19:22:36 0:14 0:00 MT (NIOP1 346 07/26/19 19:22:38 0:16 0:02 NT (NIOP:CPS:VM1 347 07/26/19 19:22:38 0:16 0:02 35940908147858 310410662903025 MO (Ni-Pil APPLE IPHONEX 348 07/26/19 19:23:17 0:31 0:03 35940908147858 310410662903025 MO (Ni-Pil APPLE IPHONEX 349 07/26/19 19:41:19 0:31 0:02 35940908147858 310410662903025 NO (Ni-Pil APPLE IPHONEX 350 07/26/19 19:52:04 0:22 0:00 NT (NIOP1 351 07/26/19 19:52:04 0:22 0:00 NT (NIOP1 352 07/26/19 19:52:06 0:24 0:02 NT (NIOP:CPNA:VM1 353 07/26/19 19:52:06 0:24 0:02 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 354 07/26/19 19:55:34 0:32 0:04 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 355 07/26/19 19:56:11 0:16 2:46 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 356 07/26/19 19:59:38 0:05 6:52 35940908147858 310410662903025 NT (Ni-Pi:NIOP) APPLE IPHONEX 357 07/26/19 20:10:52 0:17 12:44 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 358 07/27/19 11:19:35 0:04 0:17 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 359 07/27/19 11:19:59 0:05 16:24 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and for general distribution. is not Page 21 EFTA00133398

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1/4.00 AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 04/15/2019 Conn. Time (urC) Seizure Time ET Originating Terminating LMEI Number Number INSI CT Feature 360 07/27/19 19:04:44 0:00 0:04 35940908147858 310410662903025 NO () APPLE IPHONEX 361 07/27/19 19:26:28 0:11 3:29 35940908147858 310410662903025 MT (Ni-ri:NIOP) APPLE IPHONEX 362 07/27/19 19:30:46 0:19 0:00 35940908147858 310410662903025 MO (Ni-ri) APPLE IPHONEX 363 07/27/19 19:31:05 0:16 0:00 35940908147858 310410662903025 NO (Ni-ri) APPLE IPHONEX 364 07/27/19 19:32:06 0:04 0:14 35940908147858 310410662903025 MT (Ni-fi:NIOP) APPLE IPHONEX 365 07/27/19 19:32:32 0:08 7:19 35940908147858 310410662903025 NO (Ni-ri) APPLE IPHONEX 366 07/27/19 20:01:58 0:15 0:00 35940908147858 310410662903025 NO (Ni-ri) APPLE IPHONEX 367 07/27/19 20:04:21 0:18 0:00 35940908147858 310410662903025 NO (Ni-ri) APPLE IPHONEX 368 07/28/19 13:20:30 0:00 0:26 35940908147858 310410662903025 NO () APPLE IPHONEX 369 07/28/19 13:21:04 0:00 35:54 35940908147858 310410662903025 NO () APPLE IPHONEX 370 07/28/19 14:10:59 0:00 6:07 35940908147858 310410662903025 NO () APPLE IPHONEX 371 07/28/19 14:53:54 0:00 0:16 35940908147858 310410662903025 NO () APPLE IPHONEX 372 07/28/19 14:54:19 0:00 20:01 35940908147858 310410662903025 NO () APPLE IPHONEX 373 07/28/19 22:10:02 0:06 0:18 35940908147858 310410662903025 MT (Ni-ri:NIOP) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 22 EFTA00133399

2790840 08/15/2019 MOBILITY AMIN, AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm ..•zed es Lai AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Tine: Voice Usage For: Item Conn. Date 08/15/2019 Conn. Tina Curc) Seizure Time ET Originating Terminating IMEI Number Number IMSI CT Feature 374 07/28/19 22:10:32 0:03 0:15 35940908147858 310410662903025 MT (Mi-ri:NIOPI APPLE IPHONEX 375 07/28/19 22:11:10 0:08 0:14 35940908147858 310410662903025 NO (Mi-ril APPLE IPHONEX 376 07/28/19 22:12:13 0:04 0:08 35940908147858 310410662903025 MT (Mi-ri:NIOPI APPLE IPHONEX 377 07/28/19 22:19:44 0:29 0:00 35940908147858 310410662903025 NO (Mi-ril APPLE IPHONEX 378 07/28/19 22:19:53 0:04 6:20 35940908147858 310410662903025 MT (Mi-ri:NIOPI APPLE IPHONEX 379 07/29/19 12:13:55 0:05 0:19 35940908147858 310410662903025 NO (Mi-ril APPLE IPHONEX 380 07/29/19 12:14:20 0:04 17:06 35940908147858 310410662903025 NO (Mi-ril APPLE IPHONEX 381 07/29/19 13:14:49 0:34 0:03 35940908147858 310410662903025 NO (Mi-ril APPLE IPHONEX 382 07/29/19 13:15:45 0:04 0:19 35940908147858 310410662903025 NO (Mi-ril APPLE IPHONEX 383 07/29/19 13:16:11 0:03 24:04 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 384 07/29/19 13:47:58 0:26 0:04 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 385 07/29/19 14:01:12 0:09 11:33 35940908147858 310410662903025 MT (Ni-ri:NIOP1 APPLE IPHONEX 386 07/29/19 14:52:58 0:04 27:41 35940908147858 310410662903025 NO (Ni-ril APPLE IPHONEX 387 07/29/19 15:29:59 0:08 0:10 35940908147858 310410662903025 MT (Ni-ri:NIOP1 APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 23 EFTA00133400

2790840 08/15/2019 MOBILITY 41110 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm tri `s-'s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. Run Date: Hun Tine: Voice Usage For: Item Conn. Date Oa/15/2019 Conn. Tine (OTC) Seizure Time LT Originating Terminating LKEI Number Number INSI CT Feature 388 07/29/19 22:11:36 0:09 11:12 35940908147858 310410662903025 MT -ri:NIOP1 APPLE IPHONEX 389 07/30/19 11:34:50 0:39 0:04 35940908147858 310410662903025 MO (Mt-Y/1 APPLE IPHONEX 390 07/30/19 11:36:27 0:04 1:31 35940908147858 310410662903025 MT (Ni-Yi:NIOP( APPLE IPHONEX 391 07/30/19 15:09:27 0:06 30:27 35940908147858 310410662903025 MT (Ni-Yi:NIOP( APPLE IPHONEX 392 07/30/19 16:57:07 0:03 4:08 35940908147858 310410662903025 MT (Ni-Yi:NIOP( APPLE IPHONEX 393 07/30/19 20:39:16 0:33 0:05 35940908147858 310410662903025 NO (Mt-Y/1 APPLE IPHONEX 394 07/30/19 21:04:43 0:14 0:56 35940908147858 310410662903025 NO (Mt-Y/1 APPLE IPHONEX 395 07/30/19 21:13:08 0:06 1:49 35940908147858 310410662903025 MT -ri:NIOP1 APPLE IPHONEX 396 07/30/19 21:34:27 0:12 2:03 35940908147858 310410662903025 MT -ri:NIOP1 APPLE IPHONEX 397 07/31/19 08:18:10 0:00 6:37 35940908147858 310410662903025 NO (1 APPLE IPHONEX 398 07/31/19 15:19:19 0:34 0:04 35940908147858 310410662903025 NO (Mt-Y/1 APPLE IPHONEX 399 07/31/19 16:14:17 0:18 0:04 35940908147858 310410662903025 NO (Mt-Y/1 APPLE IPHONEX 400 07/31/19 17:44:29 0:20 0:10 35940908147858 310410662903025 MT (Ni-ri:NIOPI APPLE IPHONEX 401 07/31/19 21:34:54 0:33 0:04 35940908147858 310410662903025 NO (Mt-Y/1 APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 24 EFTA00133401

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e ...LS AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 08/15/2019 Conn. Tim Curc) Seizure Time ST Originating Terminating MEI Member Number 1NSI CT Feature 402 08/01/19 14:07:59 0:35 0:03 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 403 08/01/19 15:36:51 0:21 0:00 35940908147858 310410662903025 MT (Ni-Pi:NIOP) APPLE IPHONEX 404 08/01/19 15:36:52 0:22 0:03 35940908147858 310410662903025 MT (Ili- APPLE IPHONEX Pi:NIOP:CFNA:VM1 405 08/01/19 15:53:32 0:19 6:03 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 406 08/02/19 01:03:42 0:22 0:00 35940908147858 310410662903025 MT (Ni-Pi:NIOP) APPLE IPHONEX 407 08/02/19 01:03:43 0:23 0:03 35940908147858 APPLE 310410662903025 MT (Ili- ri:NIOP:CFNA:VM1 IPHONEX 408 08/02/19 11:48:33 0:30 0:00 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 409 08/02/19 13:07:37 0:10 1:25 35940908147858 310410662903025 MT (Ni-Pi:NIOP) APPLE IPHONEX 410 08/02/19 18:11:22 0:02 0:00 35940908147858 310410662903025 MT (NIOP:CMN1 APPLE IPHONEX 411 08/02/19 18:11:22 0:04 0:00 35940908147858 310410662903025 MT (NIOP) APPLE IPHONEX 412 08/02/19 18:28:59 0:00 0:03 35940908147858 310410662903025 NO () APPLE IPHONEX 413 08/02/19 20:37:57 0:09 0:00 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 414 08/02/19 20:38:08 0:05 0:00 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 415 08/02/19 20:39:22 0:35 0:00 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 25 EFTA00133402

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .,. `•-_--s afts `-'s AT&T Run Date: Hun Tim: Voice Usage For: Item Conn. Date 08/1S/2019 Conn. Tine (um) Seizure Time IT Originating Terminating IMEI Mater Number INSI CT Feature 416 08/02/19 20:40:48 0:35 0:03 35940908147858 310410662903025 NO (NJ -fi) APPLE IPHONEX 417 08/02/19 21:38:53 0:21 0:00 35940908147858 310410662903025 NT (Ni -Pi:NIOP) APPLE IPHONEX 418 08/02/19 21:38:55 0:23 0:04 35940908147858 APPLE 310410662903025 NT (Ni - ri:NIOP:CPNA:VN1 IPHONEX 419 08/02/19 22:37:59 0:08 21:37 35940908147858 310410662903025 NT (Ni -Pi:NIOP) APPLE IPHONEX 420 08/03/19 10:27:35 0:06 0:00 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 421 08/03/19 10:29:59 0:33 0:00 35940908147858 310410662903025 NO (Ni-Pi) 422 08/03/19 13:26:17 0:09 0:00 APPLE IPHONEX 35940908147858 310410662903025 NO 423 08/03/19 13:27:20 0:44 0:00 APPLE IPHONEX 35940908147858 310410662903025 NO 424 08/03/19 14:29:53 0:35 0:00 APPLE IPHONEX 35940908147858 310410662903025 NO APPLE IPHONEX 425 08/03/19 14:51:02 0:17 0:00 35940908147858 310410662903025 NT (NIOP) APPLE IPHONEX 426 08/03/19 14:51:04 0:19 0:36 35940908147858 310410662903025 MT (NIOP:CPNR:VN1 APPLE IPHONEX 427 08/03/19 14:57:14 0:11 21:00 35940908147858 310410662903025 NO -fil 428 08/03/19 15:19:07 0:34 0:09 APPLE IPHONEX 35940908147858 310410662903025 NO APPLE IPHONEX 429 08/03/19 20:13:43 0:10 0:09 35940908147858 310410662903025 NT (Ni -Pi:NIOP) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 26 EFTA00133403

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. .„,,,• •••--s`""" ° AT&T Run Date: Run Titre: Voice Usage For: Item Conn. Date 08/15/2019 Conn. Time CUTC) Seizure Time ET Originating Terminating IMEI Number Number INSI CT Feature 430 08/03/19 20:42:21 0:05 0:04 35940908147858 310410662903025 NO -ril APPLE IPHONEX 431 08/04/19 08:31:32 0:19 0:21 35940908147858 310410662903025 MO -fil APPLE IPHONEX 432 08/04/19 08:34:21 0:16 1:21 35940908147858 310410662903025 MO (Mi-fil APPLE IPHONEX 433 08/04/19 08:55:16 0:01 0:00 35940908147858 310410662903025 MO (Mi -ril APPLE IPHONEX 434 08/04/19 08:55:58 0:33 0:00 35940908147858 310410662903025 MO (Mi-fil APPLE IPHONEX 435 08/04/19 11:03:19 0:15 0:38 35940908147858 310410662903025 MO (Mi-fil APPLE IPHONEX 436 08/04/19 11:30:17 0:45 0:00 35940908147858 310410662903025 MO (Mi-fil APPLE IPHONEX 437 08/04/19 11:31:21 0:27 0:42 35940908147858 310410662903025 MO -fil APPLE IPHONEX 438 08/04/19 19:01:40 0:11 4:09 35940908147858 310410662903025 MO -fil APPLE IPHONEX 439 08/04/19 19:13:10 0:34 0:04 35940908147858 310410662903025 MO -fil APPLE IPHONEX 440 08/04/19 19:15:58 0:06 13:59 35940908147858 310410662903025 MT -ri:NIOPI APPLE IPHONEX 441 08/04/19 19:47:08 0:30 0:00 35940908147858 310410662903025 MO -fil APPLE IPHONEX 442 08/05/19 06:43:23 0:35 0:02 35940908147858 310410662903025 MO -fil APPLE IPHONEX 443 08/05/19 06:45:33 0:14 0:25 35940908147858 310410662903025 MO -fil APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 27 EFTA00133404

2790840 08/15/2019 MOBILITY 4' s 41110 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm ...=) AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Time: voice Usage For: Item Conn. Date 08/13/2019 Conn. Time (UTC) Seizure Time ST Originating Terminating DWI Number Number INSI CT Feature 444 08/05/19 18:35:47 0:10 3:37 35940908147858 310410662903025 NO APPLE IPHONEX 445 08/05/19 20:17:32 0:10 1:01 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 446 08/05/19 21:02:43 0:11 0:35 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 447 08/05/19 21:04:12 0:00 0:38 35940908147858 310410662903025 NO (1 APPLE IPHONEX 448 08/05/19 21:05:15 0:00 41:22 35940908147858 310410662903025 NO (1 APPLE IPHONEX 449 08/05/19 21:54:49 0:00 1:49 35940908147858 310410662903025 NO (1 APPLE IPHONEX 450 08/06/19 16:04:23 0:00 0:05 35940908147858 310410662903025 NO (1 APPLE IPHONEX 451 08/06/19 17:41:39 0:00 0:01 35940908147858 310410662903025 NO (1 APPLE IPHONEX 452 08/06/19 17:42:20 0:00 0:05 35940908147858 310410662903025 NO (1 APPLE IPHONEX 453 08/06/19 20:02:56 0:00 0:05 35940908147858 310410662903025 NO (1 APPLE IPHONEX 454 08/06/19 20:04:09 0:00 16:40 NT (1 455 08/06/19 21:04:09 0:00 16:40 35940908147858 310410662903025 MT (1 APPLE IPHONEX 456 08/06/19 21:04:11 0:24 16:39 ST (NIOP1 APPLE IPHONEX 457 08/06/19 21:24:49 0:21 0:15 35940908147858 310410662903025 MT (Ni-ri:NIOPI APPLE IPHONEX 458 08/06/19 21:26:36 0:21 0:00 35940908147858 310410662903025 MT (Ni-ri:NIOPI APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 28 EFTA00133405

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. e AT&T Run Date: Run Tina: Voice Usage For: Item Conn. Date 08/16/2019 Conn. Tina (OTC) Seizure Time IT Originating Terminating EKE' Member Number IMSI CT Feature 459 08/06/19 21:26:38 0:23 0:11 35940908147858 APPLE 310410662903025 MT ri:NIOP:CFNA:VM1 IPHONEX 460 08/06/19 21:38:43 0:18 0:09 35940908147858 310410662903025 MO (Mi-Pil APPLE IPHONEX 461 08/06/19 21:39:08 0:08 6:36 35940908147858 310410662903025 MO (Mi-Pil APPLE IPHONEX 462 08/07/19 11:10:40 0:30 0:00 35940908147858 310410662903025 MO (Mi-Pil APPLE IPHONEX 463 08/07/19 15:00:05 0:00 2:53 MT (1 464 08/07/19 16:00:05 0:00 2:53 35940908147858 310410662903025 MT (1 APPLE IPHONEX 465 08/07/19 16:00:05 0:12 2:52 ST (NIOP1 APPLE IPHONEX 466 08/08/19 04:32:31 0:08 0:00 35940908147858 310410662903025 MT (Mi-Pi:NIOP1 APPLE IPHONEX 467 08/08/19 10:47:17 0:00 11:04 MT (1 468 08/08/19 11:34:11 0:00 11:14 35940908147858 310410662903025 MO (1 APPLE IPHONEX 469 08/08/19 11:47:17 0:00 11:04 35940908147858 310410662903025 MT (1 APPLE IPHONEX 470 08/08/19 11:47:17 0:09 11:04 ST (NIOP1 APPLE IPHONEX 471 08/08/19 15:11:06 0:00 0:50 35940908147858 310410662903025 MO (1 APPLE IPHONEX 472 08/08/19 15:49:50 0:00 0:11 MT (1 473 08/08/19 16:49:50 0:00 0:11 35940908147858 310410662903025 MT (1 APPLE IPHONEX 474 08/08/19 16:49:51 0:22 0:11 ST (NIOP1 475 08/08/19 17:56:57 0:00 4:23 MT (1 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 29 EFTA00133406

2790840 08/15/2019 MOBILITY 0 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm ...•rdl as AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Tillie: Voice Usage For: Item Conn. Date 08/15/2019 Conn. Time (Umc) Seizure Time ET Originating Terminating Number Number CT Feature 476 08/08/19 18:28:34 0:00 0:08 35940908147858 310410662903025 MO () APPLE IPHONEX 477 08/08/19 18:56:57 0:00 4:23 35940908147858 310410662903025 MT () 478 08/08/19 18:56:58 0:18 4:22 APPLE IPHONEX ST (NIOP) 479 08/09/19 11:07:17 0:00 0:08 35940908147858 310410662903025 MO () APPLE IPHONEX 480 08/09/19 11:07:41 0:00 0:09 35940908147858 310410662903025 MO () APPLE IPHONEX 481 08/09/19 11:18:14 0:06 0:04 35940908147858 310410662903025 MO (Mt-194 APPLE IPHONEX 482 08/09/19 21:22:48 0:35 0:00 35940908147858 310410662903025 MO APPLE IPHONEX 483 08/09/19 22:58:16 0:35 0:00 35940908147858 310410662903025 MO APPLE IPHONEX 484 08/09/19 22:59:13 0:08 20:49 35940908147858 310410662903025 MT (Xi-ri:NIOP) APPLE IPHONEX 485 08/09/19 23:02:08 0:21 0:00 35940908147858 310410662903025 NT (Xi -ri:NIOP:CMN1 APPLE IPHONEX 486 08/09/19 23:02:09 0:22 0:05 35940908147858 APPLE 310410662903025 MT (Ni- ri:NIOP:CfNA:CMN:VM IPHONEX 1 487 08/09/19 23:20:33 0:21 10:33 35940908147858 310410662903025 MO (Xi-Li) APPLE IPHONEX 488 08/10/19 09:53:48 0:04 1:12 35940908147858 310410662903025 MO (Xi-Li) APPLE IPHONEX 489 08/10/19 09:55:16 0:11 2:54 35940908147858 310410662903025 MO (Ni-Pi) APPLE IPHONEX 490 08/10/19 09:58:25 0:11 5:09 35940908147858 310410662903025 MO (Ni-Li) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 30 EFTA00133407

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Voice visage For: Item Conn. Date 08/16/2019 WNW' Conn. Seizure Time Time (vrc) LT Originating Terminating DTI Number Number 1NSI CT Feature 491 08/10/19 13:53:45 0:15 2:25 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 492 08/10/19 13:57:07 0:33 0:04 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 493 08/10/19 13:58:16 0:02 4:48 35940908147858 310410662903025 MT (Mi -Fi:NIOP) APPLE IPHONEX 494 08/10/19 14:03:25 0:02 1:07 35940908147858 310410662903025 MT (Mi -Fi:NIOP) APPLE IPHONEX 495 08/10/19 14:04:55 0:14 1:49 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 496 08/10/19 14:05:42 0:20 0:01 35940908147858 310410662903025 MT (Ni-ri:NIOP:CNNI APPLE IPHONEX 497 08/10/19 14:05:44 0:22 0:34 35940908147858 APPLE 310410662903025 MT (Mt- ri:NIOP:CFNA:CNN:VN IPHONEX ) 498 08/10/19 14:09:30 0:19 0:02 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 499 08/10/19 14:29:16 0:32 0:03 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 500 08/10/19 15:20:47 0:14 3:16 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 501 08/10/19 16:36:37 0:07 0:00 35940908147858 310410662903025 MT (Mi -Fi:NIOP) 502 08/10/19 16:36:37 0:07 0:00 APPLE IPHONEX NO (Ni-Pi) 503 08/10/19 20:12:43 0:13 6:27 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX 504 08/10/19 20:19:10 0:08 3:19 35940908147858 310410662903025 MT (Ni-ri:NIOP:CNNI APPLE IPHONEX 505 08/10/19 20:23:21 0:08 6:40 35940908147858 310410662903025 NO (Ni-Pi) APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 31 EFTA00133408

2790840 08/15/2019 MOBILITY a AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm t1/4-11 )1 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. Run Date: Run Tim: Voice Usage For: Item Conn. Date 08/13/2019 Conn. Time (OTC) Seizure Time ET Originating Terminating INEI Number Number INSI CT Feature 506 08/10/19 20:31:23 0:08 5:20 35940908147858 310410662903025 MO (Wi APPLE IPHONEX 507 08/10/19 21:38:46 0:21 0:01 35940908147858 310410662903025 MT (Ni -Pi:NIOP1 APPLE IPHONEX 508 08/10/19 21:38:48 0:23 0:20 35940908147858 APPLE 310410662903025 MT (Ni- ri:NIOP:ClNA:VN1 IPHONEX 509 08/11/19 13:05:06 0:32 0:02 35940908147858 310410662903025 MO (Ni-ril 510 08/11/19 13:15:41 0:00 0:00 APPLE IPHONEX MT (NIOP1 511 08/11/19 13:15:56 0:15 5:27 35940908147858 310410662903025 NO (Ni-ril 512 08/11/19 13:15:56 0:15 5:27 APPLE IPHONEX NT (NIOP:VCORR1 513 08/11/19 13:30:22 0:09 10:32 35940908147858 310410662903025 MO (Ni-ril 514 08/11/19 14:35:29 0:05 0:00 APPLE IPHONEX MT (NIOP1 515 08/11/19 16:17:11 0:11 2:31 35940908147858 310410662903025 MO (Ni-ril APPLE IPHONEX 516 08/11/19 19:17:01 0:34 0:04 35940908147858 310410662903025 MO (Ni-ril APPLE IPHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 32 EFTA00133409

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e trzs 4"4 AT&T Run Date: Run Time: Osage For: 08/15/2019 Item Conn. Conn. Originating Terminating IIEI INS! Deno Feature Date Time Number Number (UTC) 1 07/07/19 05:08:26 SMST Ni-Fi 2 07/07/19 19:26:40 SMST Ni-Fi 3 07/07/19 19:26:40 SMST Ni-Fi 4 07/07/19 19:26:40 SMSO 5 07/07/19 19:26:40 310410662903025 SMST 6 07/08/19 13:04:05 35940908147858 310410662903025 SMST APPLE 1PHONEX 7 07/08/19 13:04:07 35940908147858 310410662903025 SMST APPLE IPHONEX 8 07/08/19 15:19:23 310410662903025 SMSO 9 07/08/19 15:19:23 SMST 10 07/08/19 15:19:23 310410662903025 SMSO 11 07/08/19 15:19:23 SMST 12 07/08/19 16:03:04 35940908147858 310410662903025 SMST APPLE IPHONEX 13 07/08/19 16:03:05 35940908147858 310410662903025 SMST APPLE IPHONEX 14 07/08/19 16:30:36 310410662903025 SMST 15 07/08/19 16:30:36 310410662903025 SMST 16 07/08/19 16:30:36 SMSO 17 07/08/19 16:30:36 310410662903025 SMST 18 07/08/19 16:30:48 35940908147858 310410662903025 SMST APPLE IPHONEX 19 07/08/19 16:32:04 35940908147858 310410662903025 SMST APPLE 1PHONEX 20 07/08/19 16:39:19 310410662903025 SMSO 21 07/08/19 16:39:19 SMST 22 07/08/19 16:39:19 310410662903025 SMSO 23 07/06/19 16:39:19 SMST 24 07/09/19 14:59:14 310410662903025 SMST 25 07/09/19 15:02:33 35940908147858 310410662903025 SMSO APPLE IPHONEX 26 07/09/19 15:02:33 SNSO AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 1. EFTA00133410

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. cm% ••- .0# AT&T Run Data: Run Tim: MG Usage For: Item Conn. Data 08/15/2019 Conn. Originating Terminating INEI Time Number Number (UTC) 1NSI peso Feature 27 07/09/19 15:14:25 310410662903025 SNST 28 07/09/19 15:23:51 35940908147858 310410662903025 SNSO APPLE IPHONEX 29 07/09/19 15:23:51 SNSO 30 07/09/19 19:06:37 310410662903025 SNST 31 07/09/19 19:07:21 310410662903025 SNST 32 07/09/19 19:07:23 310410662903025 SNST 33 07/09/19 19:07:42 310410662903025 SNST 34 07/09/19 19:07:44 310410662903025 SNST 35 07/09/19 21:15:17 SNST Ni-Pi 36 07/09/19 21:15:27 310410662903025 SNST 37 07/09/19 21:15:29 35940908147858 310410662903025 SNST APPLE 1PHONEX 38 07/09/19 21:31:43 SNST Ni-Pi 39 07/09/19 21:31:43 SNST Ni-Pi 40 07/10/19 13:02:32 310410662903025 SNST 41 07/10/19 13:02:33 35940908147858 310410662903025 SNST APPLE 1PHONEX 42 07/10/19 13:02:34 35940908147858 310410662903025 SNST APPLE IPHONEX 43 07/10/19 14:10:29 35940908147858 310410662903025 SNST APPLE IPHONEX 44 07/10/19 16:11:03 SNSO 45 07/10/19 16:11:03 SNSO 46 07/10/19 16:11:03 310410662903025 SNST 47 07/10/19 16:11:05 35940908147858 310410662903025 SNST APPLE IPHONEX 48 07/10/19 16:11:05 SNSO 49 07/10/19 16:11:05 SNSO 50 07/10/19 16:11:05 310410662903025 SNST 51 07/10/19 16:11:06 35940908147858 310410662903025 SNST APPLE IPHONEX 52 07/10/19 19:15:28 310410662903025 SNST AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA00133411

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. trasy AT&T Run Run SIG Item Date: Time: Osage For: Conn. Date 04/13/2019 Conn. Tine (UTC) Originating Terminating Member Number INEI IMSI Deac Feature 53 07/10/19 19:15:29 35940908147858 310410662903025 MOT APPLE IPHONEX 54 07/10/19 21:27:26 MOT Wi -Pi 55 07/10/19 21:27:26 MOT Wi -Pi 56 07/10/19 21:27:26 MOO 57 07/10/19 21:27:26 310410662903025 &MST 58 07/10/19 22:49:54 &MST Ni-Pi 59 07/11/19 19:16:32 310410662903025 MOO 60 07/11/19 19:16:32 &MST 61 07/11/19 19:16:32 310410662903025 MOO 62 07/11/19 19:16:32 SMST 63 07/11/19 19:20:16 &MST Ni-Pi 64 07/11/19 19:20:16 &MST Ni-Pi 65 07/11/19 19:20:16 MOO 66 07/11/19 19:20:16 310410662903025 &MST 67 07/11/19 19:44:18 &MST Ni-Pi 68 07/11/19 19:44:18 MOT Ni-Pi 69 07/11/19 19:44:18 MOO 70 07/11/19 19:44:18 310410662903025 MOT 71 07/11/19 21:15:17 MOT Ni-Pi 72 07/11/19 21:27:04 MOO 73 07/11/19 21:27:04 MOO 74 07/11/19 21:27:04 &MST Ni-Pi 75 07/11/19 21:28:45 MOO Ni-Pi 76 07/11/19 21:28:46 SMST 77 07/11/19 21:28:47 &MST 78 07/12/19 11:44:48 MOO 79 07/12/19 11:44:48 MOO 80 07/12/19 11:44:48 310410662903025 MOT 81 07/12/19 11:44:50 35940908147858 310410662903025 MOT APPLE 1PHONEX 82 07/12/19 15:44:40 310410662903025 MIST 83 07/12/19 15:44:42 35940908147858 310410662903025 MIST APPLE 1PHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA00133412

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cre AT&T Run Run SIG Item Date: Time: Usage For: Conn. Data 08/1S/2019 Conn. Originating Terminating IMEI Time Number Number luTC) 1MSI Dasc Feature 84 07/12/19 15:44:51 35940908147858 310410662903025 SNST APPLE 1PHONEX 85 07/12/19 15:45:43 35940908147858 310410662903025 SNST APPLE 1PHONEX 86 07/12/19 15:45:52 35940908147858 310410662903025 SNST APPLE 1PHONEX 87 07/12/19 16:12:08 SNST Ni-Fi 88 07/14/19 19:36:14 SNSO 89 07/14/19 19:36:14 310410662903025 SNST 90 07/14/19 19:36:15 SNST Ni-Fi 91 07/14/19 19:36:15 SNST Ni-Fi 92 07/14/19 22:01:37 SNST Ni-Fi 93 07/15/19 17:47:29 SNST Ni-Fi 94 07/17/19 11:00:17 310410662903025 SNST 95 07/17/19 11:00:17 310410662903025 SNST 96 07/17/19 11:00:18 35940908147858 310410662903025 SNST APPLE 1PHONEX 97 07/17/19 11:00:19 35940908147858 310410662903025 SNST APPLE IPNONEX 98 07/17/19 15:05:00 310410662903025 SNST 99 07/17/19 15:05:01 35940908147858 310410662903025 SNST APPLE IPNONEX 100 07/17/19 15:05:02 35940908147858 310410662903025 SNST APPLE IPNONEX 101 07/17/19 15:55:13 35940908147858 310410662903025 SNST APPLE 1PHONEX 102 07/19/19 20:52:59 SNST Ni-Fi 103 07/21/19 10:11:28 310410662903025 SNST 104 07/21/19 10:11:30 310410662903025 SNST 105 07/22/19 19:54:34 SNST Ni-Fi 106 07/23/19 15:33:41 310410662903025 SNST AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA00133413

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e • •-•rns AT&T Run Run SIG Item Date: T104: Osage For: Conn. Data 08/15/2019 Conn. Originating Terminating ICI T131.0 Number Number )OTC) IMSI Dose Feature 107 07/23/19 15:33:42 35940908147858 310410662903025 SNST APPLE 1PHONEX 108 07/23/19 15:33:43 35940908147858 310410662903025 SNST APPLE IPHONEX 109 07/23/19 22:59:17 310410662903025 SNST 110 07/23/19 22:59:19 35940908147858 310410662903025 SNST APPLE IPHONEX 111 07/24/19 22:51:28 SNSO Ni -Pi 112 07/25/19 15:17:03 SNST Ni-Fi 113 07/27/19 11:01:48 SNST Ni-Fi 114 07/28/19 12:57:40 310410662903025 SNST 115 07/28/19 12:57:45 35940908147858 310410662903025 SNST APPLE IPHONEX 116 07/28/19 12:57:46 35940908147858 310410662903025 SNST APPLE IPHONEX 117 07/29/19 18:02:43 SNST Ni-Fi 118 07/31/19 06:45:22 35940908147858 310410662903025 SNST APPLE IPHONEX 119 07/31/19 08:24:37 35940908147858 310410662903025 SNST APPLE IPHONEX 120 07/31/19 08:26:05 310410662903025 SNST 121 07/31/19 08:26:09 35940908147858 310410662903025 SNST APPLE IPHONEX 122 07/31/19 08:26:11 35940908147858 310410662903025 SNST APPLE IPHONEX 123 07/31/19 10:33:19 35940908147858 310410662903025 SNST APPLE 1PHONEX 124 07/31/19 10:49:25 35940908147858 310410662903025 SNST APPLE 1PHONEX 125 08/01/19 12:00:09 SNSO Ni-Fi 126 08/01/19 20:50:01 SNSO AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA00133414

2790840 08/15/2019 MOBILITY AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e ta AT&T Run Date: Run Time: ENS Usage For: Item Conn. Date 08/15/2019 Conn. Tim (Luc) Originating Terminating Number Number INEI INSI Desc Feature 127 08/01/19 20:50:01 310410662903025 SMST 128 06/01/19 20:50:02 SMST Wi-Fi 129 06/01/19 20:50:02 SMST Wi-Fi 130 06/03/19 14:51:41 SMST Wi-Fi 131 08/04/19 18:44:01 SMST Wi-Fi 132 08/04/19 20:02:28 SMST Wi-Fi 133 06/05/19 07:33:56 310410662903025 SMST 134 06/05/19 07:33:58 310410662903025 SMST 135 06/06/19 15:52:32 310410662903025 SMST 136 06/07/19 16:44:19 310410662903025 SMST 137 08/07/19 16:51:18 35940908147858 310410662903025 MOO APPLE 1PHONEX 138 08/07/19 16:51:19 MOO 139 08/07/19 16:53:38 310410662903025 SMST 140 08/08/19 13:22:28 310410662903025 SMST 141 08/09/19 10:52:38 310410662903025 SMST 142 08/09/19 10:58:40 35940908147858 310410662903025 MOO APPLE 1PHONEX 143 06/09/19 10:58:40 MOO 144 06/09/19 10:58:43 310410662903025 SMST 145 06/09/19 16:44:35 35940908147858 310410662903025 SMST APPLE 1PHONEX 146 08/09/19 16:44:39 35940908147858 310410662903025 SMST APPLE 1PHONEX 147 08/10/19 14:06:19 SMST Wi-Fi 148 08/10/19 14:34:46 SMST Wi-Fi 149 08/10/19 15:01:08 MOO 150 08/10/19 15:01:08 MOO 151 08/10/19 15:01:12 310410662903025 SMST 152 08/10/19 15:01:21 35940908147858 310410662903025 SMST APPLE 1PHONEX 153 06/10/19 16:19:18 SMST Ni-Fi 154 08/11/19 14:01:12 MOO Ni-Fi 155 08/11/19 15:07:15 310410662903025 SMST AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA00133415

MOBILITY 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 45, AT&T Run Date: Run Time: SIG Usage For: 08/15/2019 Mid= Item Conn. Conn. Originating Terminating IMEI IMSI Dasc Feature Data Tine Number (DTC) Number 156 08/11/19 15:07:18 35940908147858 310410662903025 SMST APPLE 1PHONEX AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 7 EFTA00133416

2790840 08/15/2019 WIRELESS SUBSCRIBER INFORMATION AT&T Financial Liable Party Name: Credit Address: SWAIN, NY 14884 Customer Since: 02/27/2014 Photo ID Type: Photo ID State:l Photo ID Number: DOB: SSN/TaxID/FEIN:I Contact Name: Contact Home Phone: Contact Home Email: Contact Work Phone: Contact Work Email: Billing Party Account Number: Name: Billing Address: SWAIN, NY 14884 Account Status: Active I Billing Cycle:I31 User Information NSISDN: IMSI:l MSISDN Active: 05/16/2014 - Current Name: KARYNA B User Address: NEW YORK, NY 10065 Service Start Date: 05/16/2014 Dealer Info:1810NR SIONR SWDNR Payment Type: Postpaid Contact Name: KARYNA B Contact Home Phone: Contact Work Phone: Contact Home Email: Contact Work Email: Status Change History Status Change Reason Status Change Date AT&T PROPRIETARY The information contained here is for use by authorized person only and is not for general distribution. Page l dl EFTA00133417

2790840 08/15/2019 WIRELESS SUBSCRIBER INFORMATION AT&T Financial Liable Party Name: Credit Address: SWAIN, NY 14884 Customer Since: 02/27/2014 Photo ID Type: Photo ID State: Photo ID Number: DOB: SSN/TaxID/FEIN: Contact Name: Contact Home Phone: Contact Work Phone: Contact Home Email: Contact Work Email: Billing Party Account Number: Name: Billing Address: SWAIN, NY 14884 Account Status: Active I Billing Cycle:I31 User Information MSISDN: INSI: MSISDN Active: 09/19/2016 - Current Name: User Address: APT 8H, NEW YORK, NY 10065 Service Start Date: 09/19/2016 I Dealer Info:IZJETE ZJETE ZJETE Payment Type: Postpaid Contact Name: Contact Home Phone: Contact Work Phone: Contact Home Email: Contact Work Email: Status Change History Status Change Reason Status Change Date AT&T PROPRIETARY The information contained here is for use by authorized person only and is not for general distribution. Page l dl EFTA00133418

2790840 08/15/2019 WIRELESS SUBSCRIBER INFORMATION AT&T Financial Liable Party Name: Credit Address: SWAIN, NY 14884 Customer Since: 02/27/2014 Photo ID Type: Photo ID State:l Photo ID Number: DOB: SSN/TaxID/FEIN:I Contact Name: Contact Home Phone: Contact Home Email: Contact Work Phone: Contact Work Email: Billing Party Account Number: Name: Billing Address: SWAIN, NY 14884 Account Status: Active I Billing Cycle: I31 User Information MSISDN: IMSI: MSISDN Active: 02/27/2014 - Current Name: User Address: NEW YORK, NY 10065 Service Start Date: 10/18/2012 Dealer Info:II9PZ1 19PZ1 19PZ1 Payment Type: Postpaid Contact Name: Contact Home Phone: Contact Work Phone: Contact Home Email: Contact Work Email: Status Change History Status Change Reason Status Change Date AT&T PROPRIETARY The information contained here is for use by authorized person only and is not for general distribution. Page I dl EFTA00133419

2790840 08/15/2019 INTERNATIONAL AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, .••-es AT&T Run Date: 08/15/2019 Run Time: Voice Usage For: Item ConnDataTima Originating Sec. Dialed Elapsed Orig Dial In Out Answer From (UTC) Number Originating Number Time Country Country Country Country Ind CPN Number 1 07/06/19 13:10:45 15:33 usa usa usa Una Tee No 2 07/06/19 13:14:10 0:00 usa frnce yea Una No No 3 07/06/19 13:14:17 0:20 usa frnce usa Una Tee No 4 07/07/19 21:05:06 0:21 uk usa yea Una Tee No 5 07/08/19 19:03:12 14:51 uk usa yea Una Tee No 6 07/11/19 09:53:27 0:00 usa uk yea Una No No 7 07/11/19 09:53:53 0:00 usa uk yea Una No No 8 07/12/19 13:27:00 0:00 usa switz yea Una No Tea 9 07/12/19 13:27:18 3:32 usa switz yea ewitz Tee Tea 10 07/12/19 13:40:17 0:00 usa switz yea Una No Tea 11 07/12/19 13:41:00 0:00 usa switz yea Una No Tea 12 07/13/19 07:37:40 0:00 usa switz yea Una No No 13 07/13/19 07:37:49 0:26 usa switz yea Una Tee No 14 07/13/19 10:40:17 0:00 usa switz yea Una No No 15 07/13/19 10:40:33 0:25 usa switz yea Una Tee No 16 07/14/19 12:43:39 0:00 usa switz yea Una No No 17 07/14/19 12:43:50 0:31 usa switz yea Una Tee No 18 07/14/19 17:43:27 0:00 uk usa yea Una Tee No 19 07/14/19 20:35:31 0:00 usa newzd yea nawzd No No 20 07/14/19 20:35:38 0:00 usa newzd yea nawzd No Tea 21 07/20/19 18:17:41 0:00 usa blrus yea Una No No 22 07/20/19 18:17:42 4:36 usa blrus yea blrus Tee No 23 07/21/19 09:10:20 0:00 usa switz yea Una No Tea 24 07/21/19 09:10:31 0:30 usa switz yea Una Tee Tea 25 07/21/19 09:21:49 0:00 usa switz yea Una No No 26 07/21/19 09:21:58 0:15 usa switz yea Una Tee No 27 07/25/19 09:51:34 0:00 usa yam belgm Una No Tea 28 07/27/19 20:01:44 0:00 usa blrus yea Una No No 29 07/27/19 20:01:59 0:00 usa blrus yea blrus No No 30 07/27/19 20:04:05 0:00 usa blrus yea Una No Tea 31 07/27/19 20:04:22 0:00 usa blrus yea blrus No Tea 32 07/27/19 20:06:33 0:00 blrus yam yea unkno No Tea 33 08/02/19 13:07:37 1:26 frnce usa usa Una Tee Tea 34 08/03/19 10:29:59 0:00 usa russa yam illOna No No 35 08/03/19 13:26:38 0:00 usa blrus usa Una No Tea 36 08/03/19 13:27:21 0:00 usa blrus usa blrus No Tea 37 08/03/19 14:29:20 0:00 usa blrus usa usa No Tea AT&T Proprietary ICDR indicates the call record was obtained from AT&T's International Call Detail Records report. AT&T may not have handled the call from end to end. AT&T handled the leg of the call as presented in this call detail record. Page 1 The information contained here is for use by authorized persons only and is not for general distribution. EFTA00133420

INTERNATIONAL 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Date: 0S/1512019 Run Time: Voice Usage For: Item ConnDaterime Originating Soc. Dialed Elapsed Orig Dial In Out Answer From (OTC) Number Originating Number Time Country Country Country Country Ind CPR Number 38 08/03/19 14:29:53 0:00 usa blrus usa blrus No Yes 39 08/04/19 08:31:15 0:00 usa blrus usa usa No No 40 08/04/19 08:31:31 0:22 usa blrus usa blrus Yes No 41 08/04/19 08:34:07 0:00 usa blrus usa usa No Yes 42 08/04/19 08:34:21 1:21 usa blrus usa blrus Yes Yes 43 08/04/19 08:55:17 0:00 usa blrus usa usa No No 44 08/04/19 08:55:26 0:00 usa blrus usa usa No No 45 08/04/19 08:55:59 0:00 usa blrus usa blrus No No 46 08/04/19 11:03:18 0:40 usa russa usa russa Yes No 47 08/04/19 11:30:17 0:00 usa russa usa isrel No No 48 08/04/19 11:31:21 0:43 usa russa usa russa Yes No 49 08/04/19 19:01:39 4:11 usa russa usa russa Yes No 50 08/04/19 19:47:09 0:00 usa russa usa russa No No 51 08/05/19 06:42:50 0:00 usa blrus usa usa No No 52 08/05/19 06:43:22 0:03 usa blrus usa blrus Yes No 53 08/05/19 06:45:21 0:00 usa blrus usa usa No No 54 08/05/19 06:45:33 0:26 usa blrus usa blrus Yes No 55 08/08/19 04:32:31 0:00 blrus usa usa usa No Yea 56 08/09/19 11:18:12 0:07 usa russa usa isrel Yes No 57 08/10/19 09:53:46 0:00 usa blrus usa usa No Yea 58 08/10/19 09:53:47 1:13 usa blrus usa blrus Yes Yes 59 08/10/19 09:55:07 0:00 usa blrus usa usa No No 60 08/10/19 09:55:16 2:55 usa blrus usa blrus Yes No 61 08/10/19 09:58:16 0:00 usa blrus usa usa No No 62 08/10/19 09:58:25 5:08 usa blrus usa blrus Yes No 63 08/10/19 14:09:13 0:00 usa blrus usa usa No No 64 08/10/19 14:09:29 0:04 usa blrus usa blrus Yes No 65 08/11/19 14:35:08 0:00 usa usa usa unkno No Yea 66 08/11/19 14:35:34 0:00 usa usa usa usa No Yea AT&T Proprietary ICDR indicates the call record was obtained from AT&T's International Call Detail Records report. AT&T may not have handled the call from end to end. AT&T handled the leg of the call as presented in this call detail record. Page 2 The information contained here is for use by authorized persons only and is not for general distribution. EFTA00133421

WIRELINE 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 4. 0.• AT&T Run Date: 08/15/2019 Ron Tine: Voice Usage For: Item ConnbataTime Originating Sec. Orig. Terminating Dialed Elapsed lure) Number Number Number Time CIC Call Code brag. ACC. 1 07/06/19 13:14:18 0:20 314 306 202 2 07/06/19 23:17:09 0:14 343 3 07/06/19 23:43:01 1:47 829 601 4 07/07/19 00:04:50 0:02 829 5 07/07/19 00:23:17 0:03 829 6 07/07/19 00:23:54 0:01 829 7 07/07/19 00:25:46 4:06 829 601 8 07/07/19 23:32:53 9:00 288 141 9 07/07/19 23:32:55 0:35 100 10 07/07/19 23:33:31 8:26 877 11 07/07/19 23:33:31 8:26 325 12 07/08/19 08:30:03 1:34 288 141 13 07/08/19 08:30:05 0:56 100 14 07/08/19 08:31:02 0:39 100 15 07/08/19 08:32:09 0:16 288 141 16 07/08/19 08:32:11 0:17 100 17 07/08/19 08:32:33 0:36 100 18 07/08/19 08:32:33 7:12 288 141 19 07/08/19 08:33:09 6:37 877 20 07/08/19 08:33:09 6:36 325 21 07/08/19 13:35:07 6:37 829 601 22 07/08/19 14:28:31 0:38 100 23 07/08/19 14:29:09 6:26 877 24 07/08/19 14:29:11 6:26 325 25 07/08/19 14:29:11 6:26 2 343 26 07/08/19 19:40:29 0:02 829 27 07/08/19 22:28:52 0:00 829 28 07/08/19 22:33:21 8:17 829 601 29 07/09/19 17:06:28 1:19 829 30 07/09/19 19:05:18 1:20 829 601 31 07/09/19 19:28:15 3:42 829 601 32 07/09/19 20:58:27 0:19 288 141 33 07/09/19 20:58:30 0:20 100 34 07/09/19 20:58:51 7:10 288 141 35 07/09/19 20:58:54 0:36 100 36 07/09/19 20:59:30 6:35 877 37 07/09/19 20:59:30 6:35 325 38 07/09/19 21:07:29 0:02 829 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 1 EFTA00133422

WIRELINE 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cato AT&T Run Date: Run Time: Voice Usage Item OS/15/2019 For: Connbatenme Originating Sec. Orig. Terminating Dialed Elapsed (OTC) Number Number Number Time CIC Call Code Orig. ACC. 39 07/09/19 21:07:35 0:02 829 40 07/09/19 21:07:40 0:04 829 41 07/09/19 21:56:23 4:42 829 42 07/10/19 16:44:41 2:27 829 601 43 07/10/19 18:20:19 0:07 829 601 44 07/10/19 19:25:17 0:02 829 45 07/10/19 19:40:00 1:11 314 306 11 46 07/10/19 19:59:09 1:38 829 47 07/11/19 18:05:50 0:34 100 48 07/11/19 18:05:50 3:09 288 141 49 07/11/19 18:06:25 2:36 877 50 07/11/19 18:06:25 2:36 325 51 07/11/19 18:09:16 0:20 2 129 52 07/11/19 18:10:01 1:31 129 53 07/11/19 18:13:02 4:27 288 141 54 07/11/19 18:13:05 0:35 100 55 07/11/19 18:13:40 3:53 877 56 07/11/19 18:13:40 3:53 325 57 07/11/19 18:13:40 3:53 2 343 58 07/11/19 19:07:16 0:02 829 59 07/11/19 19:17:01 3:25 829 60 07/11/19 20:02:05 2:30 829 601 61 07/11/19 21:26:20 0:14 829 62 07/11/19 23:45:56 1:54 829 601 63 07/11/19 23:59:43 1:01 829 601 64 07/12/19 00:02:54 0:02 829 65 07/12/19 00:03:17 0:35 829 66 07/12/19 13:27:18 3:31 314 60 11 67 07/12/19 13:59:48 0:00 827 514 68 07/12/19 15:44:03 0:26 829 601 69 07/12/19 15:49:44 0:53 829 601 70 07/13/19 07:37:46 0:25 314 342 11 71 07/13/19 07:37:47 0:25 314 306 11 72 07/13/19 10:40:33 0:24 314 306 11 73 07/13/19 11:02:41 0:19 827 514 74 07/13/19 13:29:16 9:34 829 601 75 07/14/19 12:43:47 0:30 314 342 11 76 07/14/19 12:43:48 0:31 314 306 11 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 2 EFTA00133423

WIRELINE 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e t. AT&T Run Date: Run Time: Voice Osage Item 09/15/2019 For: Sim ConnDateThoo Originating Sec. Orig. Terminating Dialed Elapsed IDTC) Number Number Number Time CIC Call Code Orig. Ace. 77 07/14/19 12:55:05 0:09 827 514 78 07/14/19 20:34:55 0:02 829 79 07/14/19 20:35:30 0:00 314 60 80 07/14/19 20:36:43 0:04 343 81 07/15/19 17:56:10 12:32 314 60 24 82 07/15/19 17:56:10 12:32 314 60 83 07/15/19 20:38:27 0:04 829 84 07/16/19 18:09:49 0:00 829 601 85 07/16/19 18:14:35 0:29 829 601 86 07/16/19 20:10:51 1:36 343 87 07/16/19 20:36:42 0:05 343 88 07/16/19 20:37:30 0:02 829 89 07/16/19 22:16:32 0:04 343 90 07/17/19 17:41:53 0:31 829 91 07/18/19 11:01:11 1:10 100 92 07/18/19 11:01:11 2:31 288 141 93 07/18/19 11:02:21 1:21 100 94 07/18/19 17:39:22 0:04 343 95 07/18/19 17:40:04 0:02 829 96 07/18/19 17:45:10 0:02 829 97 07/18/19 17:45:37 0:00 343 98 07/18/19 17:47:09 1:52 829 601 99 07/19/19 20:08:36 2:49 314 306 11 100 07/19/19 21:03:01 12:04 314 306 11 101 07/20/19 18:17:40 4:35 314 306 24 102 07/20/19 18:17:43 4:34 314 60 103 07/21/19 09:10:29 0:29 314 60 11 104 07/21/19 09:21:58 0:14 314 306 202 105 07/22/19 19:51:33 0:00 314 342 202 106 07/22/19 19:51:35 0:00 314 342 202 107 07/22/19 19:59:59 0:04 343 108 07/22/19 20:32:30 2:12 343 109 07/22/19 21:49:30 0:04 343 110 07/22/19 21:51:26 0:00 343 111 07/22/19 22:06:13 0:05 343 112 07/22/19 22:13:13 0:04 343 113 07/22/19 22:47:11 0:51 343 114 07/23/19 13:22:14 0:03 827 602 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 3 EFTA00133424

WIRELINE 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. e s, AT&T Run Date: Run Time: Voice Usage Item 08/15/2019 For: Sim ConnDataTime Originating Sec. Orig. Terminating Dialed Elapsed (OTC) Number Number Number Time CIC Call Coda Orig. Ace. 115 07/23/19 15:57:53 0:06 343 116 07/23/19 17:28:39 0:00 343 117 07/23/19 19:47:08 0:05 343 118 07/23/19 21:18:09 0:03 343 119 07/24/19 20:44:19 0:04 343 120 07/25/19 09:58:17 1:39 827 514 121 07/25/19 10:33:31 0:02 829 122 07/25/19 10:35:41 0:04 343 123 07/25/19 21:13:08 0:05 343 124 07/25/19 21:55:44 0:05 829 125 07/26/19 17:40:36 0:04 829 126 07/26/19 17:42:32 0:06 343 127 07/26/19 18:50:17 0:41 829 128 07/26/19 18:51:11 0:00 829 601 129 07/26/19 19:04:12 8:20 343 130 07/26/19 19:13:11 0:08 829 131 07/26/19 19:23:17 0:03 829 132 07/26/19 19:41:19 0:02 829 133 07/26/19 19:55:34 0:04 829 134 07/26/19 19:56:11 2:46 343 135 07/26/19 19:59:38 6:52 829 601 136 07/27/19 11:19:36 0:18 314 306 202 137 07/27/19 11:19:57 16:24 314 306 24 138 07/27/19 11:19:58 16:24 314 60 139 07/27/19 19:30:28 0:00 343 140 07/27/19 19:30:49 0:00 343 141 07/27/19 19:32:32 7:19 343 142 07/28/19 22:11:10 0:14 343 143 07/28/19 22:19:16 0:00 343 144 07/29/19 12:13:53 0:19 314 306 11 145 07/29/19 12:14:19 17:07 314 306 24 146 07/29/19 12:14:22 17:04 314 60 147 07/29/19 13:14:48 0:04 343 148 07/29/19 13:16:12 24:04 314 306 202 149 07/29/19 13:47:58 0:04 343 150 07/29/19 14:52:57 27:41 314 306 24 151 07/29/19 14:52:58 27:41 314 60 152 07/30/19 11:34:50 0:05 343 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 4 EFTA00133425

2790840 08/15/2019 WIRELINE AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cre 1/4-4.4 AT&T Run Data: Run Time: Voice usage Item 06/13/2019 For: ConnhataTima Originating Sec. Orig. Terminating Dialed Elapsed (UTC) Number Number Number Time CIC Call Coda Orig. Acc. 153 07/30/19 20:39:16 0:05 343 154 07/31/19 08:18:11 1:07 288 100 155 07/31/19 08:18:11 6:38 9 720 156 07/31/19 08:19:19 5:32 100 157 07/31/19 15:19:19 0:04 343 158 07/31/19 16:14:17 0:04 343 159 07/31/19 21:34:54 0:04 343 160 08/01/19 14:07:59 0:04 343 161 08/01/19 15:53:32 6:03 343 162 08/02/19 01:03:43 0:03 827 602 163 08/02/19 11:48:04 0:00 343 164 08/02/19 15:11:22 0:00 827 644 165 08/02/19 18:11:22 0:00 9020 827 898 166 08/02/19 20:37:49 0:00 343 167 08/02/19 20:38:03 0:00 343 168 08/02/19 20:39:22 0:01 343 169 08/02/19 20:40:47 0:05 343 170 08/02/19 21:38:55 0:03 827 602 171 08/03/19 10:29:58 0:00 314 342 11 172 08/03/19 10:29:59 0:00 314 342 11 173 08/03/19 14:51:04 0:36 829 601 174 08/03/19 14:57:14 21:00 829 175 08/03/19 15:19:07 0:10 343 176 08/03/19 20:42:21 0:04 343 177 08/04/19 08:31:31 0:21 314 342 11 178 08/04/19 08:31:32 0:21 314 306 11 179 08/04/19 08:34:21 1:21 314 60 11 180 08/04/19 11:03:17 0:39 314 342 202 181 08/04/19 11:03:19 0:39 314 306 202 182 08/04/19 11:31:20 0:42 314 342 11 183 08/04/19 11:31:21 0:42 314 306 11 184 08/04/19 19:01:40 4:09 314 60 185 08/04/19 19:01:41 4:10 314 306 24 186 08/04/19 19:13:10 0:04 343 187 08/05/19 06:43:21 0:02 314 342 11 188 08/05/19 06:43:22 0:02 314 60 11 189 08/05/19 06:45:34 0:26 314 306 202 190 08/05/19 18:35:46 3:36 314 60 11 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 5 EFTA00133426

WIRELINE 2790840 08/15/2019 AT&T has queried for records from 07/06/2019 12:00:00am to 08/11/2019 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. cro AT&T Run pato: Run Time: voice usage Item 06/15/2019 For: Connoatonsua Originating Sec. Orig. Terminating Dialed Elapsed (UTC) Number Number Number Timo CIC Call Coda Orig. Acc. 191 08/05/19 21:02:43 0:35 314 60 11 192 08/06/19 21:38:44 0:09 314 306 11 193 08/06/19 21:39:08 6:36 829 194 08/07/19 11:10:10 0:00 343 195 08/09/19 11:18:12 0:05 314 342 202 196 08/09/19 11:18:14 0:06 314 306 202 197 08/09/19 21:22:48 0:00 343 198 08/09/19 22:58:16 0:00 343 199 08/09/19 23:20:33 10:33 343 200 08/10/19 09:53:49 1:12 314 60 11 201 08/10/19 09:55:18 2:54 314 306 202 202 08/10/19 09:58:25 5:07 314 60 203 08/10/19 09:58:25 5:08 314 306 24 204 08/10/19 13:53:45 2:25 829 205 08/10/19 13:57:07 0:05 343 206 08/10/19 13:58:16 4:48 829 601 207 08/10/19 14:03:25 1:07 829 601 208 08/10/19 14:04:54 1:50 343 209 08/10/19 14:05:44 0:34 829 601 210 08/10/19 14:09:31 0:03 314 306 202 211 08/10/19 14:29:16 0:03 829 212 08/10/19 15:20:47 3:16 829 213 08/10/19 20:12:43 6:27 343 214 08/10/19 20:19:10 3:19 829 601 215 08/10/19 20:23:21 6:40 829 216 08/10/19 20:31:23 5:20 829 217 08/11/19 13:05:06 0:02 829 218 08/11/19 13:30:22 10:32 829 219 08/11/19 16:17:11 2:31 829 220 08/11/19 19:17:00 0:05 343 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. Page 6 EFTA00133427

2790840 08/15/2019 PAYMENT INFORMATION t.S-7-sf, AT&T Transactions Payment Posted Date Amount Type Payment Method 07/19/2019 $377.74 PMT ACH AT&T PROPRIETARY The information contained here is for use by authorized person only and is not for general distribution. Page1oll EFTA00133428

90A-NY-3151227-GJ Serial 5 FD-302 (Rev. 5-8-10) •1 of 1. FEDERAL BUREAU OF INVESTIGATION Date of entry 12/09/2039 Pursuant to a Federal Grand Jury subpoena served by the Southern District of New York, Citibank provided the attached response, dated September 3, 2019. Investigation on 09/03/2019 at New York, New York, United States (, Other (Unknown)) Fik# 90A-NY-3151227-GJ Date drafted 12/06/2019 by This document contains neither recommendations nor conclusions of the FBI. It is the property of the FBI and is loaned to your agency; it and its contents arc not to be distributed outside your agency. EFTA00133429

AFFIDAVIT STATE OF TEXAS) ) SS: COUNTY OF BEXAR) I, Melissa Leal, do hereby state and dedarc as follows: 1. I am an employee of and a duly authorized custodian of the records for Citibank, N.A. (hereinafter "CBNA") and have authority to certify the attached records. 2. The testimony in this affidavit is based upon my personal knowledge, and the facts contained herein are true and correct. 3. The accounts in question arc or were owned and issued by CBNA. 4. The attached records arc copies or duplicates of the available records requested in the Subpoena. 5. These records were prepared by the personnel of the business in the ordinary course of business at or near the time of the act, condition or event. 6. Documents attached arc in the matter of Refit 2019801059, Citibank reference number LSI-08192019-326826. I certify under penalty of perjury that the foregoing is true and correct. Executed on September 3, 2019 at San Antonio, TX. 1 G 1 Melissa Leal, Legal Support Specialist Citibank, N.A. Subscribed and sworn to before me on September 3, 2019. AMANDA V MONTEMAVOR Commission # 125885194 My Commission Expires October 1. 2019 tl , ree ,14-+ ri My commission expires /0- . • Notary Public EFTA00133430

Account Details for Rank-No. MVP, Account-No. Branch-No. 00357 Expense Code 00357 Account Title ROBERTO GRIJALVA Currency USD Language Indicator English Product Type 001 / 001 Opening Date 7/9/07 Fraud Indicator Account closed Not for Automatic Verification Restriction No restriction valid till Special Instructions Fraud Years Very Important Business (VIB) EFTA00133431

Account Details for Bank-No. [rep Account-No. Branch-No. Expense Code 00616 Account Title ROBERTO GRDALVA Currency USD Language Indicator English Product Type 009 / 070 Opening Date 11/11/18 Fraud Indicator Account closed Not for Automatic Verification 00616 Restriction No restriction valid till Special Instructions Fraud Years Very Important Business (VIB) EFTA00133432

Signatory Details for GRIJALVA, ROBERTO Signatory Notes Last Name First Name Middle Name Role Title Customer ID* Birth Date Member of Group(s) GRIJALVA ROBERTO signatory None Valid until Image Captured as static monochrome signature Date Signed 2/22/12 Special Instructions Right Amount Currency From Until Who With whom Single No Limit GRIJALVA, ROBERTO EFTA00133433

Citibank, N.A. Subpoena Compliance Unit 100 Citibank Dr., Bldg.1, Flr. 2 San Antonio, TX 78245 September 3, 2019 United States Attorne 's Office Attn: AUSA 1 St. Andrew's Plaza New York, NY 10007 RE: Grand Jury Subpoena Ref# 2019R01059 Citibank File No.: LSI-08192019-326826 Dear Mr. This letter is in response to the above referenced subpoena. We have enclosed a CD containing bank records. Please email me for the password. cep Please note we were unable to locate the original account applications and/or signature cards. The enclosed electronic signature is the only information we were able to obtain regarding account ownership. It is our understanding that by providing you with the enclosed records Citibank has complied with your request. Should ou have an questions or require further information, please contact the undersigned at . Strely, ( A ILI Melissa Leal Litigation Support Unit Fax: a EFTA00133434

A00-19-2019 10:43 US ATTORNEY SDNY F. CC? U.S. Department oraariee Washington. D.C. 20530 Request for Financial Information Under the Right to Financial Privacy Act (REPA) (Authorisation, Purchase Order and Receiving Report) The aver aka be need whin ~aline Anexial watt or inewatera ate IlauStelt• Orrin et Vidnr Inkritletak WS" 6 7473A- 1 lacking Neater 2 omeOrder Prepense: 3 ~O Number. 2019R01059 &din .4 - Authorized« and Purchase Order 4 Name and Addtclai of Ficastial warmest Citibank , _. B inn) Citibanlc, N.A./Subpoena Compliance now ire, Certification lt 100 Citibank Dr., Bdg.1, F1.2, San Antonio, TX 1:SUS-- Ater,,,Incagisi S aasu e ton_ 5 Deliver Records To: Sped Completed USA-21 litorin fa InvoiceTo: 6 Ream Date l.5. enorary. craw • 31/Na See attached subpoena fOr dOSMOry instruCtiOne hear t ewer tee See attached att fromens. strari. IN 5bacit Nor York, NY I 0402 41 1"..ZinErrX .—"År.rat • re 7 Remit- De not promo Met terminate if the total cost win aimed 5 500.00 without mor au.oval. TO0703n al/Pftwal. call the ra4LtatC« listed in Item it. If Invoicing kr there teNiee$ 0 expected us exceed :20 day.. plow nasty the United Sates Attorneys Office trreneetwely to ensve funds remain evadable tor pigment Vita. co the attached fraportam Notice for additional information on invoMng end other reguitttne NS for reimbutfeiment. Is Name of AUSA ISM ID Date of requosc 8/19/2019 Siff B - Financial Inetitution Invoke Payment Mango Med. Veins boinsern AN Itemized Below Or Sa Path On Yoe Attaches' Invoice II* Invoke Number: 1113 TSX ID Number. I IC Sennee()•Records Provided A. Searching OM proceseing costs (clerical or rcchnMal personnel) R. Searching and proccoing tom (rnartagcmcntisupervieory personnel) C. Searching end ramming cum (computer support specialist) D. Reproduction Costa (Photocopying) • "Nora: Copy charge< will he disallowed If the information b stored eloomnioally. unless the US Attorney's Office requests parer. E. Reproduction Costa (Paper Copies of Mierofiche: provide j usti fientem) F. Reproduction Cosb (T)uplitale Microfiche: provide justification) U. Storage Webs Cost (e.g.. Compeer Dine. OVD. era , at Actual Cost) Trqnspormion Costs (Direct Costa Only) Nude in Item Ull. I certify, ttict pro narvines invoiced above were mol reeformed relalvg m any cone= account' in only la acOtrialli inditid111113 and pannamps of nve or fewer mdi Shah 12 S F: aid Instil 1 LlakPrka Con Amount $22.00 HOOr 130.00 Horr 130.00 HOur 50.25 Page 10.25 Frans I 10.50 Witutlfithe 1 ni l 6.2 cd 13 Date Sired 09/03/2019 Taal AmounClanad kly e Mired Maslen 22.00 6.21 33.21 Sidles C -Retch-lei Report I certify that the wholes and somas listed mat Melted: 1IS Mac Received. Id Duallowasee rift .4110Clit_± 17 Went., Pinaneiai inatkution 13 Rs le viewed Privacy -Psialk Law 95430 U.S.C. 3401.3422) Request Pwcauit (Cleat One Old>) OBJECT L9 Stemmer of Approving Official: SECTION CLASS rØ CtiMemer Authorization 2545 20 Funding Source IS' 3405 Administrative Subpoena ix Smears 2525 ACCettnting Cede r 3406 r 3407 Smelt Warant Jacket Subpoena 2545 I 2545 PrOLIVID1 I 21 Other Aceountineifund Lat "b": r 3403 Fennel Written Request 2545 r 3413 r 3114 Omrad Jary Subgall 5peelel Peciandwas 2545 2545 74OVON Code: WA PrObact Codis. KiA YPI.G1.113C' Carl Rumba risotto/in 32 Reamer OM. Mania (YRIA0) Tax ID Nueribx Te Th. Sal nf no. lieneolac. the fØ1 rented. manned. Swine we ate tees billed see acre title edieldael or perbienisip of in er freer reclirelonla. &gone et United Sinn Altrennys011k• itaproraniatoe Oars FORM tr5A.:11 P3 R. :11 14 TOTAL P.OO7 EFTA00133435

ROBERT GRIJALVA/CHARLENE NIEVES ACCOUNT NO. TRANSACTION ITEMS 1/1/2019 THROUGH PRESENT EFTA00133436

Friday. August 30, 2019 9:09:37 AM Dollar amour); Tr date From Account To Account 200.00 20190112 06:04:18 200.00 20190126 06:04:24 1300.00 20190130 06:14:38 1000.00 20190201 07:28:02 1000.00 20190208 06:05:08 200.00 20190209 06:04:38 1000.00 20190224 12:19:40 200.00 20190223 06:04:34 100.00 20190302 11:46:34 200.00 20190309 06:04:42 1000.00 20190322 06:55:26 200.00 20190323 06:04:56 1000.00 20190330 19:46:18 200.00 20190406 06:04:14 100.00 20190406 08:47:34 200.00 20190420 06:05:26 200.00 20190504 06:04:34 200.00 20190518 06:04:34 200.00 20190601 05:09:02 200.00 20190615 06:04:44 200.00 20190629 06:05:38 2500.00 20190629 20:36:56 200.00 20190713 06:04:38 2000.00 20190713 10:56:28 200.00 20190727 06:04:04 200.00 20190810 06:04:52 Page 1 of 1 EFTA00133437

Electronic Deposit Image DATE-11ME: 2019-01-25 07:46:39 ATM Terminal ID: 80012012 Transa • • 18 CARD: Signer1: ROBERTO GRIJALVA Signer2: CHARLENE NIEVES 5833-0200 28 $1OO.OO EFTA00133438

FRANCISCO MENDEZ 419 147IZIO NY 13111 -agia S/DV ACHNTOtIOX032 BankofAmericalP" wwraw r-, a EFTA00133439

Electronic Deposit image DATE-T1ME 2019-06-03 07:20:53 ATM Terminal ID: 80076511 Transaction Se uence: 678536 CARD: SIgner1: A Slgner2 CHARLENE NIEVES =NMI =MI =IIN ill $446.20 EFTA00133440

Tb Ranting Document Fold end The Along VS Parfasslion Er-r:a? E.I.:3 r.;:a 'Cr_;,7,3; E7,'!3• C;Z: r-..".41; 1:2—,',..,-. I ' i ;PT a ,I1 ‘II ! ' I; i' !: ill' I I ,!. i III ' 1! 4. ; iv. .; • ,i , , . 4: • ..: I. ; ;; ;..e, I It i: 1 i:! i• ill .; i , i; Iv . i fit I- i ., ,••; i Ii 1 ic ;; i . .it. 3 • '; i Ir I lul ; i I, ; , r ',1;s: Irhi i 'der • I ; .., ! ! • 1 i ri i LH ;:i ..; I . • ill' ! i •• •1 i ; ; ; ; • li' ;; 1; ;. •:: j H -.; Ill i 1 ;IIiI I;IIIIIIIIII - 1.I , III.; I!. ; ; I ill ri I i id's.., HI. ihil, ; ; ; IA, Th. 1: ,II I bi,... . ;I li I. I I .I.' II iii: I II• till! .• ! ' ' j. • ii I I .4 • 41, .',I i • • • mi I .,., , I r! I. • ; I. I i 'lli I 1-;; II ' I h i' , . I 3.-I I I :Pt i i' l • !,I • h .1; III i ;. I Li ; • } • ; i; I I '• I. ' Jr; ; i , • 0 pill,' I , II 1 1' 4: •I m I I,P;i i:;; ,;s EFTA00133441

Electronic Deposit Image DATE-TIME: 2019-07-27 16:24:02 ATM Terminal ID: 80012011 Transa CARD: Signerl: ROBERTO GRIJALVA Signer2: CHARLENE NIEVES I $76.50 EFTA00133442

III:l United Sorviceg Automobill Assoc! PO Box 33498, u • Ban Antonio, *PIC 78265 PAT **Seventy-six end 50/100 TO ROBERTO ORIJALVA THE ORDER OP: ULLA lit 4170077 0 UT 11 ll MAMMA 0 PATIATIAO Parson tapir 41110164 Coverage SOWIT0 e11JNVA, 2012 MVO TAUNUS 40 AXA lwAt 01 MAMMA • MATITIO•3. CT VOID 1•3 DAYS PADS IMAM DATI $ • * Co Co CO ND ND ND goil9 CT 0026707747 DATE 07/02/2019 CHECK AMOUNT $**76.50 5iO4(924_, AUTOOMISO INNATE* EFTA00133443

Electronic Deposit Image DATE-TIME: 2019-08-09 05:49:21 ATM Terminal ID: 80076512 Transa 93 CARD: Signed: ROBERTO GRIJALVA Signer2: CHARLENE NIEVES $6860.50 EFTA00133444

illi!! lel Il , ,I,11/1. . United Serviipibutoniohill'il ~q PO 8ox 3349gow 1 ii,1 li U • San Antonio, TA 78265 1 0028005429 cm DATE 81,6/119 C? 08/02/2019 CHECK ANOVN? $**6,860.50 PAY **Sle ?bonnene !light Hundred 8ixty and 50/100 als* TO ROPER OltIJALVA AND ~RUNE GRIJALVA YIN AND DUA Pa 0881111 Or: ISA st Ul la %Åla OP nasa rrarralan ariarar ler e ars ~a ka ita"crAditlre•ATIGIA ar vom ISO DAVS tnt I OATI 5 111(4C 712 1/1— , AU11401111,0 SIONATull Co co co cn Co co co EFTA00133445

Electronic Deposit image DATE-TIME: 2019-08-11 15:58:26 ATM Terminal ID: 80012011 Transa 39 CARD: Signerl: ROBERTO GRIJALVA Signer2 CHARLENE NIEVES I $431.10 EFTA00133446

Pay to lb. ceder of ROBERTO ORUALVA Lid;Ilaï tfaitIls O* tr y4nno n 1.4 L•dr WM ma OMok Numb«, 0000141469 ***Four Hundred Thirtt0n• dollars and 10/100*** For 0670177173 Kt mutes CD CO CO gel O C Beg Data, Auiptet 6, 2019 — Win row S.M. $431.10 EFTA00133447

ROBERT GRIJALVA/CHARLENE NIEVES ACCOUNT NO. TRANSACTION ITEMS 1/1/2019 THROUGH PRESENT EFTA00133448