EFTA01251208

MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in arc. 41111. tr`a.a asi AT&T Run Date: Run Time: Voice Usage For: 06/17/2020 Item Conn. Conn. Seizure ET Originating Terminating IMEI CT Feature Date Time Time Number Number (OTC) 1 03/01/20 19:58:27 0:09 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 2 03/02/20 16:34:38 0:03 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 3 03/02/20 16:35:15 0:10 0:00 MT (1 4 03/02/20 16:35:19 0:24 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 S 03/02/20 16:36:05 0:06 0:00 MT (NIOR) 6 03/02/20 16:36:05 0:07 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 7 03/02/20 16:36:53 0:09 0:47 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 8 03/02/20 16:43:46 0:09 0:04 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 9 03/02/20 16:44:06 0:06 2:06 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 10 03/03/20 21:36:01 0:07 30:41 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 11 03/04/20 18:52:26 0:08 1:40 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 12 03/04/20 19:46:37 0:20 0:05 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 13 03/04/20 22:07:25 0:05 47:57 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 14 03/04/20 23:04:25 0:03 0:39 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 15 03/05/20 00:56:24 0:33 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 1 SDNY_GM_00002608 EFTA_00116684 EFTA01251208 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 41011, tr'`si as AT&T Run Date: Run Time: Voice usage For: Item Conn. Date 06/17/2020 18:55:22 Conn. Time (OTC) Seizure Time ET Originating Terminating IMEI Thaber Number INS/ CT Feature 16 03/05/20 00:58:14 0:07 0:26 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 17 03/05/20 13:22:45 0:11 1:13 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 18 03/05/20 14:04:59 0:20 0:00 3587080982063725 310410214827503 MT (MOP) APPLE IPHONE8 19 03/05/20 15:49:47 0:29 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 20 03/05/20 15:49:48 0:30 0:01 3587080982063725 310410214827503 MT (Wi￾APPLE IPHONE8 Fi:NIOP:CFMA:VM) 21 03/05/20 15:50:04 0:08 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 22 03/05/20 17:14:12 0:02 0:34 3587080982063725 310410214827503 1.0 (Wi-Fi:NIOR) APPLE IPHONE8 23 03/05/20 17:15:32 0:07 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 24 03/05/20 18:27:34 0:19 0:05 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE IPHONE8 25 03/05/20 18:29:16 0:20 0:04 3587080982063725 310410214827503 MO (Wi-Fi) APPLE IPHONE8 26 03/05/20 18:42:42 0:20 0:03 3587080982063725 310410214827503 MO (Ni-Fi) APPLE IPHONE8 27 03/05/20 20:38:46 0:10 9:04 3587080982063725 310410214827503 MO (VCORR) APPLE IPHONE8 28 03/05/20 20:51:35 0:05 0:00 3587080982063725 310410214827503 MO () APPLE IPRONE8 29 03/06/20 15:08:17 0:04 1:07 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 2 SDNY_GM_00002609 EFTA_00116685 EFTA01251209 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 MiiiIIIII Conn. Seizure Time Time (UTC) ET Originating Terminating IMZI Mater Number INS/ CT Feature 30 03/06/20 20:02:56 0:20 0:05 3587080982063725 310410214827503 MO (14i-Fi) APPLE !PHONES 31 03/06/20 20:51:24 0:03 0:58 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE 'PHONES 32 03/06/20 21:03:38 0:14 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 33 03/06/20 21:04:01 0:08 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 34 03/06/20 21:04:33 0:03 0:16 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 35 03/06/20 21:09:32 0:03 0:51 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 36 03/06/20 21:32:36 0:03 1:11 3587080982063725 310410214827503 MO (Mi-Ti:NIOA) APPLE !PHONES 37 03/07/20 00:02:25 0:13 0:00 310410214827503 MT (1 38 03/07/20 00:02:25 0:24 0:00 ST 11410P) APPLE !PHONES 39 03/07/20 00:02:26 0:25 0:05 ST (1410P:CFNA:VM) APPLE !PHONES 40 03/07/20 16:17:45 0:15 0:00 ST 11410P) APPLE !PHONES 41 03/07/20 18:21:38 0:05 0:08 MT (NITR:INIOR) 42 03/07/20 18:21:40 0:25 0:04 3587080982063725 310410214827503 MO (Mi-Fi:NIOR) APPLE !PHONES 43 03/07/20 18:39:48 0:06 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES 44 03/08/20 00:01:01 0:22 0:00 3587080982063725 310410214827503 MT (Mi-Ti:NIOP) APPLE !PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 3 SDNY_GM_00002610 EFTA_00116686 EFTA01251210 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. AT&T Run Data: Run Tuna: Voice Osage For: Item Conn. Date 06/17/2020 18:33:22 Conn. Time (UTC) Seizure Time FM Originating Terminating IMEI Number Number CT Feature 45 03/08/20 18:09:41 0:11 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 46 03/08/20 18:23:28 0:13 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 47 03/09/20 00:45:20 0:27 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 48 03/09/20 00:45:22 0:29 0:01 3587080982063725 310410214827503 MT (Wi￾49 03/09/20 01:30:41 0:17 18:35 APPLE 'PHONES MT Fl:NIOP:CFNA:VM) (NIOR:VCORR) SO 03/09/20 01:30:41 0:18 18:35 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES Si 03/09/20 14:52:35 0:17 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES S2 03/09/20 15:46:24 0:07 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S3 03/09/20 18:49:59 0:04 0:00 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES 54 03/10/20 17:41:33 0:14 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 55 03/10/20 17:43:58 0:23 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S6 03/10/20 17:44:00 0:25 0:58 3587080982063725 310410214827503 MT (Wi￾APPLE 'PHONES Fi:NIOR:CFNA:VM) S7 03/10/20 18:36:22 0:13 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOR) APPLE 'PHONES S8 03/10/20 23:20:53 0:01 0:00 3587080982063725 310410214827503 MO (Wi-Fi:NIOR) APPLE 'PHONES S9 03/10/20 23:20:57 0:02 0:00 3587080982063725 310410214827503 NO (Wi-Fi:NIOR) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 4 SDNY_GM_00002611 EFTA_00116687 EFTA01251211 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c` tsgs AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 MI= Conn. Seizure Time Time (UTC) ST Originating Terminating IMEI Hunter Number INS/ CT Feature 60 03/11/20 20:57:26 0:20 0:04 3587080982063725 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 61 03/11/20 21:36:41 0:20 0:04 3587080982063725 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 62 03/11/20 21:48:29 0:20 0:05 3587080982063725 310410214827503 NO (Mi-Fi) APPLE IPHONE8 63 03/11/20 21:56:49 0:21 0:04 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 64 03/12/20 00:33:30 0:02 0:00 3587080982063725 310410214827503 MT (NIOP) APPLE IPHONE8 65 03/12/20 16:00:34 0:08 7:20 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 66 03/12/20 18:12:35 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 67 03/12/20 19:34:27 0:06 1:09 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 68 03/12/20 19:39:16 0:12 0:00 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 69 03/12/20 19:49:52 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 70 03/13/20 16:33:25 0:21 0:04 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 71 03/13/20 17:59:47 0:20 0:03 3587080982063725 310410214827503 MO (Mi-Fi) APPLE IPHONE8 72 03/14/20 15:39:45 0:28 0:00 3587080982063725 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONE8 73 03/14/20 15:39:45 0:28 0:00 3587080982063725 310410214827503 MT (Mi￾APPLE Fi:NIOP:CFNA:VM) IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 5 SDNY_GM_00002612 EFTA_00116688 EFTA01251212 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. tr_Ii`" 1. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. T1mo (OTC) Seizure Time ET Originating Terminating IMNI Mater Number DUI CT Feature 74 03/14/20 20:56:04 0:03 0:02 3587080982063725 310410214827503 100 (Wi-Fi) APPLE IPHONE8 75 03/14/20 20:56:10 0:02 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 76 03/14/20 20:56:19 0:05 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 77 03/14/20 20:56:42 0:02 0:03 3587080982063725 310410214827503 WO (Wi-Fi) APPLE IPHONE8 78 03/14/20 22:49:35 0:19 0:00 3587080982063725 310410214827503 MT (1410P) APPLE IPHONE8 79 03/14/20 22:49:36 0:20 0:04 3587080982063725 310410214827503 MT (NIOP:CFNR:VN) APPLE IPHONE8 80 03/14/20 23:33:17 0:14 0:00 3587080982063725 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHONE8 81 03/15/20 00:44:05 0:02 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 82 03/15/20 00:44:23 0:11 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 83 03/15/20 00:44:23 0:11 0:09 3587080982063726 310410214827503 MT (1410P:CFNR:VM) APPLE IPHONE8 84 03/15/20 15:46:15 0:18 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOR) APPLE IPHONE8 85 03/16/20 00:36:19 0:14 0:00 310410214827503 MT (1 86 03/16/20 00:36:19 0:25 0:00 ST (NIOR) APPLE IPHONE8 87 03/16/20 00:36:21 0:27 0:07 ST (NIOR:CFNA:VN) APPLE IPHONE8 88 03/19/20 16:30:35 0:39 0:00 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 6 SDNY_GM_00002613 EFTA_001(6689 EFTA01251213 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Time ET Originating Number Terminating INS1 Number • HISS CT Feature 89 03/19/20 19:26:50 0:18 0:00 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 90 03/23/20 03:56:33 0:14 0:00 310410214827503 MT (1 91 03/23/20 03:56:33 0:25 0:00 ST (1410P) APPLE IPHONE8 92 03/23/20 03:56:35 0:27 0:03 ST (NIOP:CFNA:VH) APPLE IPHONE8 93 03/23/20 04:01:36 0:26 0:00 3587080982063726 310410214827503 MT APPLE IPHONE8 94 03/24/20 00:20:32 0:24 0:00 MT (Ni-Fi:NIOP) 95 03/24/20 00:20:32 0:24 0:00 MT (Ni-Fi:NIOP) 96 03/24/20 00:20:38 0:30 0:05 MT Fi:N1OP:CFNA:VM) 97 03/24/20 00:20:38 0:30 0:05 3587080982063726 310410214827503 NO (Nit) APPLE IPHONE8 98 03/24/20 23:44:26 0:06 0:06 3587080982063726 310410214827503 NO (Ni-Pi) APPLE IPHONE8 99 03/24/20 23:45:05 0:22 0:00 MT (Ni-ri:NIOP) 100 03/24/20 23:45:05 0:22 0:00 MT (NIOP:01041 101 03/24/20 23:45:12 0:29 0:04 MT (NIOP:CFNA:CMN:V141 102 03/24/20 23:45:12 0:29 0:04 3587080982063726 310410214827503 MO (Nit) APPLE 'PHONES 103 03/26/20 23:55:56 0:20 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 104 03/27/20 02:21:32 0:13 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 105 03/27/20 14:05:36 0:06 0:00 NT [1410P) 106 03/27/20 14:05:42 0:13 0:00 ST [1410P) 107 03/27/20 14:05:42 0:14 0:00 3587080982063726 310410214827503 NO [Nit) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 7 SDNY_GM_00002614 EFTA_0011 16690 EFTA01251214 MOBILITY 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00em to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 411111i %---is`—‘ AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 1 ' '22 Conn. Time (OTC) Seizure Time • ST Originating Terminating INSI Number Number INS/ CT Feature 108 03/27/20 20:17:37 0:05 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 109 03/27/20 20:52:41 0:11 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 110 03/30/20 23:55:43 0:21 0:00 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 111 03/31/20 17:28:06 0:01 0:00 3587080982063726 310410214827503 MO (Mi-Pi) APPLE 'PHONES 112 03/31/20 17:28:18 0:07 4:39 3587080982063726 310410214827503 MO (Mi-Pi) APPLE 'PRONGS 113 04/01/20 16:49:44 0:12 0:00 MT 114 04/01/20 16:49:44 0:12 0:00 MT 115 04/01/20 16:49:48 0:16 0:03 MT pli-Pi:MIOP:CPB:V241 116 04/01/20 16:49:48 0:16 0:03 3587080982063726 310410214827503 MO (Mi-Pi) APPLE IPHONZ8 117 04/01/20 16:50:01 0:04 44:44 3587080982063726 310410214827503 MT (Mi-Ti:NIOP) APPLE 'PHONES 118 04/01/20 16:50:01 0:04 14:01 NO (Mi-Pi) 119 04/01/20 17:04:02 0:00 0:12 NO (1 120 04/01/20 17:04:14 0:00 12:58 NO (Mi-Pi) 121 04/01/20 17:17:12 0:00 0:12 NO (1 122 04/01/20 17:17:24 0:00 0:15 NO (Mi-Pi) 123 04/01/20 17:17:39 0:00 0:11 MO (1 124 04/01/20 17:17:50 0:00 3:32 MO (Mi-Pi) 125 04/01/20 17:21:22 0:00 0:12 NO (1 126 04/01/20 17:21:34 0:00 5:33 NO (Mi-Pi) 127 04/01/20 17:27:07 0:00 0:11 NO (1 128 04/01/20 17:27:18 0:00 2:26 MO (Mi-Pi) 129 04/01/20 17:29:44 0:00 0:11 MO (1 130 04/01/20 17:29:55 0:00 0:21 NO (Mi-Pi) 131 04/01/20 17:30:16 0:00 0:11 NO (1 132 04/01/20 17:30:27 0:00 4:18 MO (Mi-Pi) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 8 SDNY_GM_00002615 EF-EA_00116691 EFTA01251215 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. %---- `—‘ 0 AT&T ' ,tee Run Data: Run Time: Voice Moog° For: Item Conn. Date 06/17/2020 18:S3:22 Conn. Time (UTC) Seizure Time ET Originating Number Terminating Number INZI INSI CT Feature 133 04/01/20 21:54:18 0:21 0:00 MT (Wi-Fi:NIOP) 134 04/01/20 21:54:18 0:21 0:00 MT (Wi-Fi:NIOP) 135 04/01/20 21:54:22 0:25 0:02 MT (Wi￾Fi:NIOP:CFNA:VM) 136 04/01/20 21:54:22 0:25 0:02 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPRONE8 137 04/01/20 22:49:44 0:10 4:27 MO (111.-Fi) 138 04/01/20 22:49:44 0:10 61:40 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE IPRONE8 139 04/01/20 22:54:11 0:00 0:11 MO (1 140 04/01/20 22:54:22 0:00 13:02 MO (Wi-Fi) 141 04/01/20 23:07:24 0:00 0:09 NO (1 142 04/01/20 23:07:33 0:00 13:50 NO (Wi-Fi) 143 04/01/20 23:21:23 0:00 0:10 NO (1 144 04/01/20 23:21:33 0:00 2:28 NO (Wi-Fi) 145 04/01/20 23:24:01 0:00 0:12 NO (1 146 04/01/20 23:24:13 0:00 13:03 NO (Wi-Fi) 147 04/01/20 23:37:16 0:00 0:21 NO (1 148 04/01/20 23:37:37 0:00 6:17 NO (Wi-Fi) 149 04/01/20 23:43:54 0:00 0:12 NO (1 150 04/01/20 23:44:06 0:00 0:53 NO (Wi-Fi) 151 04/01/20 23:44:59 0:00 6:25 MO (VCORR) 152 04/03/20 14:24:29 0:15 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 153 04/03/20 20:07:32 0:03 0:27 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PHONES 154 04/03/20 20:08:13 0:04 0:57 3587080982063726 310410214827503 NO (111.-Fi) APPLE IPHONE8 155 04/06/20 21:07:53 0:02 0:00 MT (Wi-Fi:NIOP) 156 04/06/20 21:08:13 0:22 0:00 MT (Wi-Fi:NIOP) 157 04/06/20 21:08:17 0:26 0:01 MT (Wi￾Fi:NIOP:CFNA:VM) 158 04/06/20 21:08:17 0:26 0:01 3587080982063726 310410214827503 NO (Wi-Fi) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 9 SDNY_GM_00002616 EFTA_00ll6692 EFTA01251216 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411., %---- `-‘ 0 AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 18:65:22 Conn. Time (UTC) Seizure Time 2T Originating Terminating ICI Thaber Number 1145I CT Feature 159 04/06/20 21:08:54 0:09 5:49 NO (Ni-Fi) 160 04/06/20 21:08:54 0:09 5:49 3587080982063726 310410214827503 MT (Ni-Fi: NIOP) APPLE 'PHONES 161 04/06/20 21:15:03 0:03 12:03 NO 162 04/06/20 21:15:03 0:03 12:03 3587080982063726 310410214827503 NT (MOP) APPLE 'PHONES 163 04/06/20 22:56:05 0:01 0:00 3587080982063726 310410214827503 NO APPLE 'PHONES 164 04/06/20 22:57:06 0:21 0:00 MT (Ni-Fi:NIOP) 165 04/06/20 22:57:06 0:21 0:00 MT (Ni-Fi:NIOP) 166 04/06/20 22:57:10 0:25 0:02 MT (Ni￾Fi.:NIOP:CFNA:V14) 167 04/06/20 22:57:10 0:26 0:02 3587080982063726 310410214827503 NO (Ni -Pi) APPLE 'PHONES 168 04/06/20 22:58:08 0:39 0:00 3587080982063726 310410214827503 NO (Ni -Pi) APPLE 'PHONES 169 04/06/20 23:18:27 0:23 0:00 MT (Ni-Fi:NIOP) 170 04/06/20 23:18:27 0:23 0:00 MT (Ni-Fi:NIOP) 171 04/06/20 23:18:31 0:27 0:04 MT - Fi.:NIOP:CFNA:V14) 172 04/06/20 23:18:31 0:28 0:04 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 173 04/06/20 23:28:26 0:22 0:00 MT (Ni-Fi:NIOP) 174 04/06/20 23:28:26 0:22 0:00 MT (Ni-Fi:NIOP) 175 04/06/20 23:28:29 0:25 0:01 MT (Ni￾Fi.:NIOP:CFNA:V14) 176 04/06/20 23:28:29 0:25 0:01 3587080982063726 310410214827503 NO (Ni -Pi) APPLE 'PHONES 177 04/07/20 00:15:42 0:23 0:00 3587080982063726 310410214827503 NT (Ni-Fi: NIOP) APPLE 'PHONES 178 04/07/20 00:15:44 0:25 0:07 3587080982063726 310410214827503 MT (Ni￾APPLE Fi.:NIOP:CFNA:VM) 'PHONES 179 04/07/20 00:15:44 0:26 0:07 NO AT&T Proprietary The information contained here is for use by authorized persons only for general distribution. CONFIDENTIAL and is not Page 10 SDNY_GM_00002617 EFTA_00116693 EFTA01251217 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 4111. tr‘ini.assii AT&T Run Data: Run Time: Voice Moat:. For: Item Conn. Date 06/17/2020 16:66:22 Conn. Time (OTC) Seizure Time RT Originating Terminating IIOII Number Number DUI CT Feature 180 04/07/20 00:31:15 0:14 0:00 MT (141-Fi:NIOP) 181 04/07/20 00:31:15 0:14 18:52 MT (141-Fi:NIOP) 182 04/07/20 00:31:15 0:14 18:52 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 183 04/07/20 14:35:18 0:07 48:52 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 184 04/07/20 17:03:18 0:22 0:00 MT (141-Fi:NIOP) 185 04/07/20 17:03:18 0:22 0:00 MT (Ni-Fi:NIOP) 186 04/07/20 17:03:23 0:27 0:02 MT (Ni￾Fi.:NIOP:CFMA:VM) 187 04/07/20 17:03:23 0:28 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 188 04/07/20 21:49:43 0:04 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 189 04/07/20 22:24:55 0:22 0:00 MT (141-Fi:NIOP) 190 04/07/20 22:24:55 0:22 0:00 MT (141-Fi:NIOP) 191 04/07/20 22:25:00 0:27 0:06 MT (141- Fi.:NIOP:CFNA:VM) 192 04/07/20 22:25:00 0:27 0:06 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 193 04/08/20 19:59:50 0:03 18:27 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONE8 194 04/09/20 14:31:59 0:19 7:35 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 195 04/09/20 19:29:43 0:16 0:00 MT (141-Fi:NIOP) 196 04/09/20 19:29:43 0:16 0:00 MT (141-Fi:NIOP) 197 04/09/20 19:29:43 0:16 0:00 3587080982063726 310410214827503 MO (1 APPLE IPHONE8 198 04/09/20 19:30:14 0:22 0:00 3587080982063726 310410214827503 MT (1410P) APPLE IPHONE8 199 04/09/20 19:30:16 0:24 0:10 MO (Ni-Fi) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 11 SDNY_GM_00002618 EFTA_001(6694 EFTA01251218 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in USG. 41111, AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Number Terminating Number INEI THAI CT Feature 200 04/09/20 19:30:16 0:24 0:10 3587080982063726 310410214827503 NT (NIOP:CFNA:VN) APPLE IPHONEB 201 04/09/20 19:37:50 0:23 0:00 MT (Wi-Fi:NIOP) 202 04/09/20 19:37:50 0:23 0:00 MT (Wi-Fi:NIOP) 203 04/09/20 19:37:51 0:24 0:02 MT (Wi￾Pi:NIOP:CFNA:VN) 204 04/09/20 19:37:51 0:25 0:02 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 205 04/09/20 19:48:23 0:01 0:00 MT (Wi-Fi:NIOP) 206 04/09/20 19:48:23 0:01 0:00 MT (NIOP) 207 04/09/20 19:48:23 0:02 0:00 3587080982063726 310410214827503 MO (1 APPLE IPHONZ8 208 04/09/20 20:39:36 0:22 0:00 MT (NIOP) 209 04/09/20 20:39:38 0:24 0:02 3587080982063726 310410214827503 MO (1 APPLE IPHONZ8 210 04/09/20 20:39:38 0:24 0:02 MT (NIOP:CFNA:VN) 211 04/09/20 21:03:46 0:10 22:09 MT (NIOP:VCORR) 212 04/09/20 21:03:46 0:11 22:09 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 213 04/09/20 21:29:49 0:05 27:57 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 214 04/09/20 22:33:59 0:06 13:20 3587080982063726 310410214827503 HO (NIOR) APPLE IN/ONES 215 04/09/20 22:49:27 0:04 4:06 3587080982063726 310410214827503 HO (1 APPLE IPHONZ8 216 04/09/20 23:32:11 0:05 0:29 3587080982063726 310410214827503 MT (NIOP:VCORR) APPLE IPHONZ8 217 04/09/20 23:32:11 0:06 0:05 MO (Ni -Pi) 218 04/09/20 23:32:16 0:00 0:13 MO (1 219 04/09/20 23:32:29 0:00 0:11 MO (Ni -Pi) 220 04/09/20 23:33:32 0:04 0:00 (14i-Ti:NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 12 SDNY_GM_00002619 EFTA_001(6695 EFTA01251219 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Tune: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Terminating LEI Number Number INS/ CT Feature 221 04/09/20 23:33:32 0:04 0:21 MT (Wi-Fi:NIOP) 222 04/09/20 23:33:32 0:04 0:21 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 223 04/09/20 23:33:53 0:00 0:00 MT (NIOP:VCORR) 224 04/10/20 00:24:44 0:13 1:54 MO (Ni-Fi) 225 04/10/20 00:24:44 0:13 1:54 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 226 04/10/20 18:26:36 0:27 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 227 04/10/20 18:26:38 0:29 0:14 3587080982063726 310410214827503 MT (Wi￾APPLE Fi:NIOP:CFNA:VM) 'PHONES 228 04/13/20 15:24:09 0:12 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 229 04/15/20 21:58:10 0:08 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 230 04/15/20 22:54:21 0:21 0:00 MT (Wi-Fi:NIOP) 231 04/15/20 22:54:21 0:21 0:00 MT (NIOP:CMW) 232 04/15/20 22:54:25 0:25 0:03 MT (NIOP:CFNA:CNN:VM) 233 04/15/20 22:54:25 0:25 0:03 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 234 04/15/20 23:06:43 0:10 25:16 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 235 04/15/20 23:06:43 0:10 3:54 MO () 236 04/15/20 23:10:37 0:00 13:18 MO (Ni-Fi) 237 04/15/20 23:23:55 0:00 1:52 MD () 238 04/15/20 23:25:47 0:00 6:12 MO (Ni-Fi) 239 04/16/20 22:15:29 0:22 0:00 3587080982063726 310410214827503 MT (1410P) APPLE 'PHONES 240 04/16/20 22:15:30 0:23 1:02 3587080982063726 310410214827503 MT (1410P:CFNA:VM) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 13 SDNY_GM_00002620 EFTA_001(6696 EFTA01251220 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. icts s a`s. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 18:55:23 Conn. Time (OTC) Seizure Time ET Originating Terminating INSI Number Number CT Feature 241 04/16/20 22:30:40 0:01 0:00 3587080982063726 310410214827503 Kt (NIOP) APPLE 'PHONES 242 04/17/20 00:28:51 0:07 0:04 3587080982063726 310410214827503 NO (Nit) APPLE 'PHONES 243 04/17/20 01:54:30 0:14 41:46 MT (NIOP:VCORR) 244 04/17/20 01:54:30 0:15 41:46 3587080982063726 310410214827503 NO (Nit) APPLE 'PHONES 245 04/17/20 15:23:40 0:06 0:00 3587080982063726 310410214827503 NT (NIOP) APPLE 'PHONES 246 04/17/20 21:16:10 0:07 0:00 3587080982063726 310410214827503 MT APPLE 'PHONES 247 04/21/20 00:50:15 0:15 0:00 MT (NIOP:CMW) 248 04/21/20 00:50:15 0:16 0:00 3587080982063726 310410214827503 MO (Nit) APPLE 'PHONES 249 04/21/20 00:50:39 0:21 0:00 MT (NIOP:CMW) 250 04/21/20 00:50:42 0:24 0:32 MT (NIOP:CFNA:CMW:VM) 251 04/21/20 00:50:42 0:24 0:32 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 252 04/21/20 00:53:30 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 253 04/21/20 00:53:31 0:12 0:09 MO (VCORR) 254 04/21/20 00:53:31 0:12 0:09 3587080982063726 310410214827503 MT (NIOP:CFNR:VM) APPLE 'PHONES 255 04/21/20 03:11:37 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 256 04/21/20 03:11:38 0:12 0:30 3587080982063726 310410214827503 MT (NIOP:CFNR:VN) APPLE 'PHONES 257 04/22/20 20:59:27 0:17 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 14 SDNY_GM_00002621 EFTA_001(6697 EFTA01251221 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41011, •-"..t-"ae ° AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Time ET Originating Terminating INEI Number Number 1145I CT Feature 258 04/22/20 21:49:51 0:28 0:02 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 259 04/22/20 21:51:33 0:06 0:05 3587080982063726 310410214827503 MO (VCORR) APPLE 'PHONES 260 04/25/20 14:13:47 0:00 0:00 3587080982063726 310410214827503 MO (1 APPLE 'PHONES 261 04/25/20 14:14:08 0:01 0:14 3587080982063726 310410214827503 MO (NIOR:VN) APPLE 'PHONES 262 04/28/20 19:16:39 0:21 0:00 MT (Mi-Fi:NIOR) 263 04/28/20 19:16:39 0:21 0:00 MT (Mi-Fi:NIOR) 264 04/28/20 19:16:43 0:25 0:02 MT (Mi - Fi:NIOR:CFNA:VM) 265 04/28/20 19:16:43 0:25 0:02 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 266 04/28/20 19:44:14 0:03 45:03 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE 'PHONES 267 04/28/20 21:03:10 0:17 36:49 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 268 04/28/20 23:39:52 0:24 0:00 ML (NIOR) 269 04/28/20 23:40:00 0:32 0:35 ML (NIOR:CFNA:VN) 270 04/28/20 23:40:00 0:32 0:35 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 271 04/28/20 23:45:33 0:22 0:00 MT (Mi-Fi:NIOR) 272 04/28/20 23:45:33 0:22 0:00 MT (Mi-Fi:NIOR) 273 04/28/20 23:45:37 0:26 0:03 MT (Mi￾Fi:NIOR:CFNA:VM) 274 04/28/20 23:45:38 0:27 0:02 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 275 04/29/20 00:07:11 0:22 0:00 MT (Mi-Fi:NIOR) 276 04/29/20 00:07:11 0:22 0:00 MT (Mi-Fi:NIOR) 277 04/29/20 00:07:15 0:26 0:02 MT (Mi￾Fi:NIOR:CFMA:VM) AT&T Proprietary The information contained here is for use by authorized persons only for general distribution. CONFIDENTIAL and is not Page 15 SDNY_GM_00002622 EFTA_001(6698 EFTA01251222 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 410. ••=1$ `..-'s AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 18:53:23 Conn. Time (OTC) Seizure Time ET Originating Terminating IMEI Number Number 1145I CT Feature 278 04/29/20 00:07:15 0:26 0:02 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 279 04/29/20 16:53:22 0:05 0:00 MT (Mi-Fi:NIOR) 280 04/29/20 16:53:22 0:05 0:00 MT (Mi-Fi:NIOR) 281 04/29/20 16:53:22 0:05 0:00 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE 'PHONES 282 04/29/20 16:54:04 0:21 0:00 (14i-Fi:NIOP) 283 04/29/20 16:54:04 0:21 0:00 MT (Mi-Fi:NIOP) 284 04/29/20 16:54:08 0:25 0:02 MT Fi:NIOP:CFNA:V14) 285 04/29/20 16:54:08 0:25 0:02 3587080982063726 310410214827503 APPLE 'PHONES 286 04/29/20 19:29:51 0:03 1:01 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 287 04/29/20 20:52:10 0:07 0:00 (14i-Fi:NIOP) 288 04/29/20 20:52:10 0:07 19:48 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 289 04/29/20 20:52:10 0:07 4:08 MT (Mi-Fi:NIOP) 290 04/29/20 20:56:18 0:00 15:40 MT (NIOP:VCORR) 291 04/30/20 20:14:09 0:22 0:01 MT (Mi-Fi:NIOP) 292 04/30/20 20:14:09 0:22 0:01 MT (NIOP) 293 04/30/20 20:14:13 0:26 0:05 MT (NIOP:CFNA:VN) 294 04/30/20 20:14:13 0:26 0:05 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 295 04/30/20 21:11:42 0:22 0:00 MT (Mi-Fi:NIOP) 296 04/30/20 21:11:42 0:22 0:00 MT (NIOP) 297 04/30/20 21:11:47 0:27 0:02 MT (NIOP:CFNA:VN) 298 04/30/20 21:11:47 0:28 0:01 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES 299 04/30/20 21:26:48 0:07 28:07 3587080982063726 310410214827503 NO (Mi-Fi) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only for general distribution. CONFIDENTIAL and is not Page 16 SDNY_GM_00002623 EFTA_001(6699 EFTA01251223 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ter-,4 AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 10:53:23 Conn. Time (UTC) Seizure Time ET Originating Number Terminating Number INEI CT Feature 300 04/30/20 23:47:42 0:08 5:05 3587080982063726 310410214827503 MO APPLE 'PHONES 301 05/01/20 00:19:46 0:22 0:00 MT (Ni-Fi:NIOP) 302 05/01/20 00:19:46 0:22 0:00 MT (NIOP) 303 05/01/20 00:19:50 0:26 0:01 MT (NIOP:CFNA:VM) 304 05/01/20 00:19:50 0:26 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 305 05/01/20 01:27:25 0:04 22:24 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 306 05/01/20 01:27:25 0:04 22:24 MT (NIOP:VCORR) 307 05/01/20 20:59:25 0:21 0:00 (Ni-Fi:NIOP) 308 05/01/20 20:59:25 0:21 0:00 (Ni-Fi:NIOP) 309 05/01/20 20:59:30 0:26 0:01 (Wi￾Fi:NIOP:CfMA:VM) 310 05/01/20 20:59:30 0:26 0:01 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 311 05/04/20 22:10:28 0:14 17:33 KT (NIOP:VCORR) 312 05/04/20 22:10:28 0:15 17:33 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 313 05/04/20 22:49:00 0:22 0:00 MT (Ni-Fi:NIOP) 314 05/04/20 22:49:00 0:22 0:00 MT 315 05/04/20 22:49:04 0:26 0:02 MT Fi:NIOP:CFNA:VM) 316 05/04/20 22:49:04 0:26 0:02 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 317 05/04/20 23:22:53 0:21 0:00 MT (Ni-Fi:NIOP) 318 05/04/20 23:22:53 0:21 0:00 MT (Ni-Fi:NIOP) 319 05/04/20 23:22:58 0:26 0:02 MT Fi:NIOP:CFNA:VM) 320 05/04/20 23:22:58 0:27 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 321 05/05/20 20:49:17 0:21 0:00 322 05/05/20 20:49:17 0:21 0:00 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 17 SDNY_GM_00002624 EFTA_00I (6700 EFTA01251224 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. tr`ad.es AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Number Terminating SOLI Number DUI CT Feature 323 05/05/20 20:49:21 0:25 0:02 MT (Wi￾Fi:NIOP:CFMA:VM) 324 05/05/20 20:49:21 0:25 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 325 05/05/20 21:25:15 0:22 0:00 MT (Wi-Fi:NIOP) 326 05/05/20 21:25:15 0:22 0:00 MT (Wi-Fi:NIOP) 327 05/05/20 21:25:19 0:26 0:05 MT (Wi￾Fi:NIOP:CFMA:VM) 328 05/05/20 21:25:19 0:27 0:05 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 329 05/05/20 21:37:14 0:38 0:03 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PHONES 330 05/06/20 00:41:07 0:23 0:00 MT (Wi-Fi:NIOP) 331 05/06/20 00:41:07 0:23 0:00 MT (Wi-Fi:NIOP) 332 05/06/20 00:41:11 0:27 0:02 MT (Wi￾Fi:NIOP:CFMA:VM) 333 05/06/20 00:41:11 0:28 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 334 05/06/20 00:41:32 0:00 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 335 05/06/20 00:41:43 0:08 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 336 05/06/20 00:41:53 0:06 0:03 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 337 05/07/20 14:49:32 0:23 0:00 MT (Wi-Fi:NIOP) 338 05/07/20 14:49:39 0:30 0:02 MT (Wi￾Fi:NIOP:CFMA:VM) 339 05/07/20 14:49:39 0:31 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 340 05/07/20 17:03:16 0:23 0:00 MT (Wi-Fi:NIOP) 341 05/07/20 17:03:27 0:34 0:01 MT (Wi￾Fi:NIOP:CFNA:VM) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 18 SDNY_GM_00002625 EF-EA_001(6701 EFTA01251225 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. a tt-ta. AT&T Run Data: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 14:63:23 Conn. Time (OTC) Seizure Time ET Originating Number Terminating IMEI Number INSI CT Feature 342 05/07/20 17:03:27 0:34 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE IPHONE8 343 05/07/20 17:48:17 0:24 0:00 MT (Mi-Fi:NIOP) 344 05/07/20 17:48:23 0:30 0:02 MT (Mi￾Fi.:NIOP:CFMA:VM) 345 05/07/20 17:48:23 0:31 0:02 3587080982063726 310410214827503 MO APPLE 'PHONES 346 05/07/20 19:12:18 0:22 0:00 MT (Mi-Fi:NIOP) 347 05/07/20 19:12:24 0:28 0:02 MT (Mi￾Fi.:NIOP:CFMA:VM) 348 05/07/20 19:12:24 0:28 0:02 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 349 05/07/20 19:16:22 0:07 0:00 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 350 05/07/20 23:33:08 0:21 0:00 MT (Mi-Fi:NIOP) 351 05/07/20 23:33:08 0:21 0:00 MT (Mi-Fi:NIOP) 352 05/07/20 23:33:13 0:26 0:02 MT (Mi￾Fi.:NIOP:CFMA:VM) 353 05/07/20 23:33:13 0:26 0:02 3587080982063726 310410214827503 M0 (Mi-Fi) APPLE 'PHONES 354 05/07/20 23:33:46 0:01 0:00 MT (Mi-Fi:NIOP) 355 05/07/20 23:33:46 0:01 0:00 MT (Mi-Fi:NIOP) 356 05/07/20 23:33:46 0:01 0:00 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 357 05/07/20 23:34:32 0:39 0:03 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 358 05/08/20 00:19:18 0:21 0:00 MT (Mi-Fi:NIOP) 359 05/08/20 00:19:18 0:21 0:00 ST (NIOP:CMM) 360 05/08/20 00:19:22 0:25 0:03 ST (NIOP:CFNA:CMN:VM) 361 05/08/20 00:19:23 0:27 0:02 3587080982063726 310410214827503 I40 (Mi-Fi) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 19 SDNY_GM_00002626 EFTA 00//6702 EFTA01251226 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 18:55:23 Conn. Time (OTC) Seizure Time ET Originating Number Terminating Number IIOII 1MSI CT Feature 362 05/08/20 14:29:29 0:05 74:10 3587080982063726 310410214827503 163 (Ni-Fi) APPLE IPHONZ8 363 05/08/20 17:49:44 0:32 0:02 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 364 05/08/20 17:58:22 0:21 0:23 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 365 05/09/20 17:19:42 0:27 0:00 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 366 05/09/20 17:19:44 0:29 1:16 3587080982063726 310410214827503 MT (Ni￾APPLE IPHONZ8 Fi:NIOP:CFNA:VM) 367 05/11/20 13:49:51 0:16 0:55 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPHONZ8 368 05/11/20 13:52:24 0:12 3:10 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 369 05/11/20 13:55:47 0:08 15:51 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 370 05/11/20 17:48:07 0:16 0:00 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 371 05/11/20 20:27:52 0:09 0:29 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 372 05/11/20 21:18:16 0:11 0:30 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 373 05/11/20 21:39:04 0:12 1:11 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 374 05/11/20 21:51:53 0:07 0:28 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE IPHONZ8 375 05/11/20 23:14:44 0:01 0:00 3587080982063726 310410214827503 NO (Ni-Fi) 376 05/11/20 23:15:02 0:07 33:55 APPLE IPHONZ8 MT (NIOP:VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 20 SDNY_GM_00002627 EF-EA_001(6703 EFTA01251227 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111i AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Time ET Originating Terminating IMEI Number Number INSI CT Feature 377 05/11/20 23:15:02 0:07 33:55 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONZ8 378 05/12/20 13:53:18 0:00 0:00 KT (NIOP) 379 05/12/20 13:53:19 0:01 0:11 KT (NIOP:CFNR:VM) 380 05/12/20 13:53:21 0:09 0:07 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 381 05/12/20 15:01:44 0:08 30:55 MT (NIOP:VCORR) 382 05/12/20 15:01:44 0:09 30:55 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 383 05/12/20 15:33:00 0:10 19:49 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 384 05/12/20 16:50:53 0:27 0:00 HT 385 05/12/20 16:50:58 0:32 0:07 HT (Ni￾Fi:NIOP:CFNA:VM) 386 05/12/20 16:50:58 0:33 0:07 3587080982063726 310410214827503 NO (Ni-Fi) APPLE IPHONE8 387 05/12/20 18:18:51 0:08 8:56 3587080982063726 310410214827503 NO APPLE IPHONE8 388 05/12/20 19:13:25 0:05 7:33 3587080982063726 310410214827503 M0 APPLE IPHONE8 389 05/12/20 19:29:15 0:23 0:00 MT (NIOR) 390 05/12/20 19:29:20 0:28 0:06 MT (NIOR:CFNA:VN) 391 05/12/20 19:29:20 0:29 0:06 3587080982063726 310410214827503 NO (Mi-Fi:NIOR) APPLE IPRONZ8 392 05/12/20 22:00:31 0:05 28:33 3587080982063726 310410214827503 MO (Mi-Fi:NIOR) APPLE IPRONZ8 393 05/12/20 22:00:31 0:05 28:33 MT (NIOR:VCORR) 394 05/13/20 18:07:12 0:39 0:03 3587080982063726 310410214827503 MO (Ni -Fi) APPLE IPHONZ8 395 05/13/20 18:08:35 0:24 0:00 MT (NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 21 SDNY_GM_00002628 EFTA 001(6704 EFTA01251228 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr"-ads.e AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 18:53:23 Conn. Time (UTC) Seizure Time ET Originating Terminating MST Number Number IMI CT Feature 396 05/13/20 18:08:41 0:30 0:02 3587080982063726 310410214827503 143 (Wi-Fi) APPLE 'PRONGS 397 05/13/20 18:08:41 0:30 0:02 MT (1410P:CFNA:VM) 398 05/13/20 19:00:16 0:09 15:49 3587080982063726 310410214827503 143 (NZ-Pi) APPLE IPHONZ8 399 05/13/20 19:00:16 0:09 15:49 MT (NIOP:VOORE) 400 05/13/20 19:52:36 0:22 0:00 MT (Mi-FZ:NIOP) 401 05/13/20 19:52:46 0:32 0:02 MT (Mi￾Fi.:NIOP:CFMA:VM) 402 05/13/20 19:52:46 0:33 0:02 3587080982063726 310410214827503 MO (NZ-Pi) APPLE IPRONE8 403 05/13/20 19:53:03 0:06 1:39 3587080982063726 310410214827503 MT (Mi-FZ:NIOP) APPLE IPRONE8 404 05/13/20 19:54:59 0:06 4:35 3587080982063726 310410214827503 MO (Ni-Fi) APPLE IPRONE8 405 05/13/20 21:05:54 0:11 0:00 3587080982063726 310410214827503 MT (NIOP) APPLE IPRONE8 406 05/13/20 21:05:55 0:12 0:07 3587080982063726 310410214827503 MT (NIOP:CFNE:VM) APPLE IPRONE8 407 05/13/20 21:35:50 0:07 13:47 3587080982063726 310410214827503 MO (Wi-Fi) APPLE IPRONE8 408 05/13/20 22:14:50 0:23 0:00 MT (1410P) 409 05/13/20 22:14:56 0:29 0:01 MT (NIOP:CFNA:VM) 410 05/13/20 22:14:56 0:30 0:01 3587080982063726 310410214827503 MO (NZ-Pi) APPLE IPRONE8 411 05/13/20 23:54:11 0:26 0:00 ,3587080982063726 310410214827503 MT (Mi-FZ:NIOP) APPLE IPRONE8 412 05/13/20 23:54:12 0:27 0:05 3587080982063726 310410214827503 MT (Mi￾APPLE Fi:NIOP:CFMA:VM) IPRONE8 413 05/13/20 23:54:12 0:27 0:05 M3 (VOOER) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 22 SDNY_GM_00002629 EFTA_00I (6705 EFTA01251229 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in LTC. %--- `'s0AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Time MI Originating Terminating IMEI Number Number INSI CT Feature 414 05/13/20 23:54:27 0:02 17:46 3587080982063726 310410214827503 MO (M1-Fi) APPLE 'PHONES 415 05/13/20 23:54:27 0:02 17:46 MT (NIOP:VCORR) 416 05/14/20 14:39:29 0:22 0:00 MT (Mi-Fi:NIOP) 417 05/14/20 14:39:37 0:30 0:01 MT (Mi￾Fi:NIOP:CFNA:VM) 418 05/14/20 14:39:37 0:31 0:01 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 419 05/14/20 14:39:48 0:10 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP:CMW) APPLE 'PHONES 420 05/14/20 15:52:43 0:08 1:09 3587080982063726 310410214827503 MO (Mi-Fi) APPLE IPHONE8 421 05/14/20 16:15:14 0:16 0:54 3587080982063726 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 422 05/14/20 17:11:25 0:13 0:00 310410214827503 MT (1 423 05/14/20 17:11:25 0:24 0:00 ST (1410P) APPLE 'PHONES 424 05/14/20 17:11:26 0:25 0:11 ST (1410P:CFNA:VM) APPLE 'PHONES 425 05/14/20 17:20:45 0:06 0:00 MT (1410P) 426 05/14/20 17:20:45 0:06 8:46 MT (NIOP:VCORR) 427 05/14/20 17:20:45 0:06 8:46 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES 428 05/14/20 17:42:04 0:10 0:01 3587080982063726 310410214827503 MT (NIOP) APPLE 'PHONES 429 05/14/20 17:42:05 0:11 0:03 3587080982063726 310410214827503 MT (NIOP:CFNR:VN) APPLE IPHONZ8 430 05/14/20 18:14:46 0:04 0:00 MT (Wi-Fi:NIOP) 431 05/14/20 18:14:46 0:04 1:31 MT (IMP) 432 05/14/20 18:14:46 0:05 1:31 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 23 SDNY_GM_00002630 EFTA_001(6706 EFTA01251230 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. c``—s‘ ssis o AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 16:66:23 Conn. Time (OTC) Seizure Time ET Originating Number Terminating IlCI Number INSI CT Feature 433 05/14/20 19:41:13 0:28 0:00 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE 'PHONES 434 05/14/20 19:41:16 0:31 0:04 3587080982063726 310410214827503 MT (Ni￾APPLE Fi:NIOP:CFNA:VM) 'PHONES 435 05/17/20 21:54:23 0:06 3:05 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 436 05/19/20 01:55:50 0:00 0:00 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 437 05/19/20 20:41:12 0:09 8:05 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 438 05/19/20 20:49:29 0:05 2:33 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 439 05/19/20 21:14:58 0:23 0:00 MT (NIOR) 440 05/19/20 21:15:04 0:29 0:03 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 441 05/19/20 21:15:04 0:29 0:03 MT (NIOR:CFNA:VM) 442 05/19/20 22:29:37 0:22 0:00 MT (NIOR) 443 05/19/20 22:29:44 0:29 0:02 MT (NIOR:CFNA:VM) 444 05/19/20 22:29:44 0:30 0:02 3587080982063726 310410214827503 NO (Ni-Fi:NIOR) APPLE 'PHONES 445 05/19/20 23:03:59 0:22 0:00 MT (NIOR) 446 05/19/20 23:03:59 0:22 0:00 3587080982063726 310410214827503 MO (Ni-Fi:NIOR) APPLE 'PHONES 447 05/19/20 23:04:28 0:06 2:13 MT (NIOP:VCORR) 448 05/19/20 23:04:28 0:06 2:13 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PHONES 449 05/20/20 18:53:54 0:10 0:52 3587080982063726 310410214827503 MT (Ni-Fi:NIOP) APPLE 'PHONES 450 05/20/20 21:41:19 0:23 0:00 MT (NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 24 SDNY_GM_00002631 EF-EA_00116707 EFTA01251231 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm %---s`" 1. AT&T AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. Run Data: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 1S:53:21 Conn. Time (UTC) Seizure Time ET Originating Terminating 122I Number Number IN21 CT Feature 451 05/20/20 21:41:26 0:30 0:03 MT (210P:CFNA:VM) 452 05/20/20 21:41:26 0:30 0:03 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 453 05/20/20 21:58:25 0:23 0:00 MT (210P) 454 05/20/20 21:58:31 0:29 0:02 MT (210P:CFNA:VM) 455 05/20/20 21:58:31 0:30 0:02 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PRONGS 456 05/20/20 21:59:01 0:01 0:00 3587080982063726 310410214827503 MO (Ni-Fi) APPLE 'PRONGS 457 05/20/20 21:59:40 0:37 0:04 3587080982063726 310410214827503 MO (WL-Fi) APPLE 'PRONGS 458 05/20/20 22:00:20 0:22 0:00 MT (210P) 459 05/20/20 22:00:28 0:30 0:02 MT (210P:CFNA:VM) 460 05/20/20 22:00:28 0:31 0:02 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 461 05/21/20 00:31:09 0:03 35:29 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 462 05/21/20 00:31:09 0:03 54:04 MT (210P:VCORR) 463 05/21/20 01:06:38 0:00 0:21 3587080982063727 310410214827503 MO (VCORR) APPLE 'PRONGS 464 05/21/20 01:06:59 0:00 18:14 3587080982063726 310410214827503 MO (Mi-Fi) APPLE 'PRONGS 465 05/21/20 15:07:09 0:07 0:05 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 466 05/21/20 20:31:30 0:07 0:04 3587080982063726 310410214827503 MO (Wi-Fi) APPLE 'PRONGS 467 05/21/20 21:23:59 0:19 0:00 3587080982063726 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PRONGS AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 25 SDNY_GM_00002632 EF-EA_001(6708 EFTA01251232 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41011, tr`sia. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 16:53:23 Conn. Time (OTC) Seizure Time ET Originating Number Terminating IM5I Number INSI CT Feature 468 05/21/20 21:31:01 0:15 26:49 3587080982063726 310410214827503 NO (Wi-ri) APPLE 'PHONES 469 05/22/20 00:18:09 0:24 0:01 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 470 05/22/20 00:18:11 0:26 0:32 3587080982063726 310410214827503 MT (Wi￾APPLE Fi:NIOP:CFNA:VN) 'PHONES 471 05/22/20 00:20:52 0:28 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 472 05/22/20 00:20:53 0:29 0:04 3587080982063726 310410214827503 MT (Wi￾APPLE Fi:NIOP:CFNA:VM) 'PHONES 473 05/22/20 16:23:16 0:14 0:00 310410214827503 MT () 474 05/22/20 16:23:16 0:25 0:00 ST (NIOP) APPLE 'PHONES 475 05/22/20 16:23:17 0:26 0:15 ST (NIOP:CFNA:VN) APPLE 'PHONES 476 05/22/20 17:37:15 0:06 22:47 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 477 05/22/20 18:00:20 0:05 7:06 3587080982063726 310410214827503 MO (Wit) APPLE 'PHONES 478 05/22/20 18:33:59 0:23 0:00 MT (NIOP:OMW) 479 05/22/20 18:34:08 0:32 0:02 3587080982063726 310410214827503 NO (Wit) APPLE 'PHONES 480 05/22/20 18:34:08 0:32 0:02 MT (NIOP:CFNA:CMW:VM) 481 05/22/20 21:26:30 0:25 0:00 3587080982063726 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 482 05/22/20 21:26:31 0:26 0:05 3587080982063726 310410214827503 MT (Ni￾APPLE Fi:NIOP:CFNA:VM) 'PHONES 483 05/22/20 21:26:31 0:26 0:05 MO (VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 26 SDNY_GM_00002633 EFTA_001 16709 EFTA01251233 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 IIIIIIIII Conn. Seizure Time Time (UTC) ET Originating Terminating INEI Number Number INSI CT Feature 484 05/22/20 21:43:41 0:13 0:40 3587080982063726 310410214827503 NO (141 -Pi) APPLE 'PHONES 485 05/22/20 21:43:41 0:13 0:40 MT (NIOP:VCORR) 486 05/22/20 21:45:43 0:06 30:22 3587080982063726 310410214827503 NO (141-Fi) APPLE 'PHONES 487 05/22/20 22:26:24 0:21 0:00 MT (Ni-Fi:NIOP) 488 05/22/20 22:26:24 0:21 0:00 KT (Ni-Fi:NIOP) 489 05/22/20 22:26:29 0:26 0:01 MT (Ni￾Fi:NIOP:CFMA:V14) 490 05/22/20 22:26:29 0:27 0:01 3587080982063726 310410214827503 NO (Ni-Fi) APPLE 'PHONES 491 05/22/20 22:26:36 0:07 0:45 3587080982063726 310410214827503 MT (Ni-Fi:NIOP:CMN) APPLE 'PHONES 492 05/22/20 22:26:36 0:08 0:35 NO (Wi-Fi) 493 05/22/20 22:27:11 0:00 0:12 NO (1 494 05/22/20 22:27:21 0:00 6:09 3587080982063727 310410214827503 NT (NIOP:CMM:VCORR) APPLE 'PHONES 495 05/22/20 22:27:23 0:00 6:07 NO (Wi-Fi) 496 05/22/20 22:46:06 0:18 0:00 NT (Ni-Fi:NIOP) 497 05/22/20 22:46:06 0:18 3:09 35870809820637 310410214827503 NO (Ni-Fi) APPLE 'PHONES 498 05/22/20 22:46:06 0:18 0:38 MT (Ni-Fi:NIOP) 499 05/22/20 22:46:44 0:00 0:29 MT [MOP) 500 05/22/20 22:47:13 0:00 2:01 MT (Ni-Fi:NIOP) 501 05/22/20 22:49:14 0:00 0:32 MT [MOP) 502 05/22/20 22:49:15 0:00 0:54 3587080982063727 310410214827503 M0 [VCORR) APPLE 'PHONES 503 05/22/20 22:49:46 0:00 3:10 MT (Ni-Fi:NIOP) 504 05/22/20 22:50:09 0:00 2:52 35870809820637 310410214827503 M0 (Ni-Fi) APPLE 'PHONES SOS 05/22/20 22:52:56 0:00 2:53 MT [1110P) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 27 SDNY_GM_00002634 EF-EAJVII67(0 EFTA01251234 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tra"`s1.d AT&T Run Data: Run Time: Voice Usage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Terminating INEI Number Number INSI CT Feature 506 05/22/20 22:53:01 0:00 17:28 3587080982063727 310410214827503 NO (VCOP11) APPLE 'PHONES 507 05/22/20 22:55:49 0:00 14:40 MT 508 05/23/20 22:54:43 0:08 30:48 MT (NIOP:VCORA) 509 05/23/20 22:54:43 0:08 30:48 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 510 05/23/20 23:25:49 0:07 11:42 MT (NIOP:VCORA) 511 05/23/20 23:25:49 0:07 11:42 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 512 05/26/20 14:10:35 0:09 0:00 3587080982063727 310410214827503 MT APPLE 'PHONES 513 05/26/20 18:03:44 0:24 0:00 MT (NIOP) 514 05/26/20 18:03:52 0:32 0:05 MT (NIOP:CFNA:VN) 515 05/26/20 18:03:52 0:32 0:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE !PHONES 516 05/26/20 19:02:46 0:23 0:00 MT (NIOP) 517 05/26/20 19:02:52 0:29 0:00 MT (NIOP:CFNA:VN) 518 05/26/20 19:02:52 0:29 0:00 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 519 05/26/20 19:13:13 0:25 0:00 3587080982063727 310410214827503 MT APPLE 'PHONES 520 05/26/20 19:13:14 0:26 0:15 3587080982063727 310410214827503 MT (Ni - APPLE Fi:NIOP:CFNA:VM) 'PHONES 521 05/26/20 19:19:54 0:06 0:42 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 522 05/26/20 19:20:51 0:05 0:00 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 523 05/26/20 19:21:17 0:01 0:00 3587080982063727 310410214827503 MT (NIOP :CNN] APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only for general distribution. CONFIDENTIAL and is not Page 28 SDNY_GM_00002635 EF-EA_001(67(1 EFTA01251235 MOBILITY 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00em to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41111. tr"'adss. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 MIMS Conn. Seizure T1me Time (UTC) ET Originating Number Terminating Number IMEI Ian CT Feature 524 05/26/20 19:21:17 0:01 0:04 3587080982063727 310410214827503 MT (NIOP:CFB:CMW:VM) APPLE 'PHONES 525 05/26/20 19:21:18 0:22 0:00 MT (Wi-Fi:NIOP) 526 05/26/20 19:21:25 0:29 0:03 MT (Wi￾Fi:NIOP:CFMA:VM) 527 05/26/20 19:21:25 0:30 0:03 3587080982063727 310410214827503 140 (Wi-Fi) APPLE 'PHONES 528 05/26/20 19:21:36 0:06 6:58 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 529 05/26/20 20:00:30 0:02 5:29 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 530 05/26/20 20:06:12 0:02 0:42 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 531 05/26/20 22:47:03 0:37 0:05 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 532 05/27/20 19:58:08 0:23 0:00 MT (Wi-Fi:NIOP) 533 05/27/20 19:58:12 0:27 0:02 MT (Wi￾Fi:NIOP:CFMA:VM) 534 05/27/20 19:58:13 0:28 0:01 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 535 05/27/20 20:19:38 0:10 2:16 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES 536 05/27/20 20:19:38 0:11 0:09 NO (Wi-Fi) 537 05/27/20 20:19:47 0:00 0:15 MO (1 538 05/27/20 20:20:02 0:00 1:45 MO (Wi-Fi) 539 05/27/20 20:21:47 0:00 0:09 MO (VCORR) 540 05/27/20 20:21:54 0:00 0:02 3587080982063727 310410214827503 MT (NIOP:VCORA) APPLE 'PHONES 541 05/27/20 20:22:21 0:00 0:08 3587080982063727 310410214827503 140 (141-Fi.) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 29 SDNY_GM_00002636 EF-EAJVII6712 EFTA01251236 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 41011, tr‘"1.a al./ AT&T Run Date: Run Time: Voice Osage For: Item Conn. Onto 06/17/2020 IIIIIIIIII Conn. Seizure Time Time (UTC) ET Originating Terminating IWCI Number Number INSI CT Feature 542 05/27/20 20:22:21 0:08 0:00 3587080982063727 310410214827503 MO (1 APPLE 'PHONES 543 05/27/20 20:22:48 0:02 0:00 MT (1410P) 544 05/27/20 20:22:49 0:18 0:00 ST (1410P) 545 05/27/20 20:22:49 0:18 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 546 05/27/20 20:27:06 0:08 0:06 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 547 05/27/20 20:27:17 0:02 0:09 MT (Wi-Fi:NIOP) 548 05/27/20 20:27:17 0:03 0:13 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES S49 05/27/20 20:27:26 0:00 1:25 MT (NIOP) S50 05/27/20 20:27:30 0:00 2:23 3587080982063727 310410214827503 MO (1 APPLE 'PHONES S51 05/27/20 20:28:51 0:00 0:59 MT (Wi-Fi:NIOP) S52 05/27/20 20:29:50 0:00 0:03 MT (NIOP:VCORR) S53 05/27/20 20:31:27 0:02 0:00 MT (NIOP:CMW) S54 05/27/20 20:31:27 0:03 0:00 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 555 05/27/20 20:34:42 0:21 8:33 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE 'PHONES S56 05/27/20 20:43:15 0:00 7:44 3587080982063727 310410214827503 MT (NIOP:VCORR) APPLE 'PHONES S57 05/27/20 20:51:20 0:10 38:47 MT (NIOP:CMW:VCORR) S58 05/27/20 20:51:20 0:10 0:02 3587080982063727 310410214827503 MO (1 APPLE 'PHONES S59 05/27/20 20:51:22 0:00 38:45 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES S60 05/27/20 21:37:25 0:22 0:00 MT (Wi-Fi:NIOP) S61 05/27/20 21:37:34 0:31 0:01 MT (Wi￾Fi:NIOP:CFNA:VM) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 30 SDNY_GM_00002637 EF-EAJVII67(3 EFTA01251237 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. %---- `-‘ 0 AT&T Run Data: Run Time; Vol.:004.ga For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Seizure Tine ET Originating Manor Terminating Number SMEI INSI CT Feature 562 05/27/20 21:37:34 0:31 0:01 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPNONZ8 563 05/28/20 16:49:41 0:24 0:00 MT [MOP) 564 05/28/20 16:49:50 0:33 0:02 MT (NIOP:CFNA:VM) 565 05/28/20 16:49:50 0:33 0:02 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 566 05/28/20 16:50:02 0:00 0:00 NT INIOP:OMMI 567 05/28/20 16:50:05 0:03 0:01 NT (NIOP:CPB:OMM:VM) 568 05/28/20 16:50:05 0:04 0:01 3587080982063727 310410214827503 MO (Wi-Fi) APPLE 'PHONES 569 05/28/20 16:50:38 0:20 0:03 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 570 05/28/20 16:50:53 0:08 0:00 MT (1410P) 571 05/28/20 16:50:53 0:08 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 572 05/28/20 17:10:11 0:10 3:58 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 573 05/28/20 17:14:19 0:05 22:33 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 574 05/28/20 17:14:19 0:06 22:33 MO (VCORR) 575 05/29/20 18:23:50 0:12 8:19 3587080982063727 310410214827503 MO (Mi-Fi) APPLE 'PHONES 576 05/29/20 18:32:09 0:00 6:19 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES 577 05/29/20 18:52:27 0:08 24:52 3587080982063727 310410214827503 NO (Mi-Fi) APPLE 'PHONES 578 05/29/20 18:52:27 0:08 27:53 MT (NIOP:VCORR) 579 05/29/20 19:17:19 0:00 3:01 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 31 SDNY_GM_00002638 EF-EAJVII67(4 EFTA01251238 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41.1, AT&T "tittle Run Date: Run Time: Voice Osage For: 06/17/2020 18:55:26 Item Conn. Date Conn. Time (OTC) Seizure Time ET Originating Number 580 05/30/20 15:17:28 0:21 0:00 581 05/30/20 15:17:29 0:22 0:14 582 05/30/20 15:23:39 0:05 36:20 583 06/02/20 14:44:00 0:10 17:35 584 06/02/20 14:44:00 0:11 10:35 585 06/02/20 14:54:35 0:00 0:19 586 06/02/20 14:54:54 0:00 6:41 587 06/02/20 17:04:25 0:03 10:19 588 06/02/20 17:04:25 0:04 10:19 589 06/02/20 17:33:58 0:10 0:54 590 06/03/20 00:07:18 0:16 6:39 591 06/03/20 00:07:18 0:16 6:39 592 06/03/20 19:09:20 0:23 0:00 593 06/03/20 19:09:26 0:29 0:02 594 06/03/20 19:09:26 0:29 0:02 595 06/03/20 20:31:08 0:07 17:32 596 06/03/20 20:31:08 0:07 60:39 597 06/03/20 20:48:40 0:00 21:03 Terminating Number IMEI DUI CT Feature 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPRONE8 3587080982063727 310410214827503 MT (Mi￾APPLE Fi:NIOP:CFMA:VM) IPRONE8 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 MT (NIOP:VCORR) 3587080982063727 310410214827503 1.0 (M1-Fi) APPLE IPRONE8 3587080982063727 310410214827503 MO (VCORR) APPLE IPRONE8 3587080982063727 310410214827503 1.0 APPLE IPHONE8 MT (NIOP:VCORR) 3587080982063727 310410214827503 1.0 (Mit) APPLE IPRONE8 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPRONE8 MT (NIOP:VCORR) 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 MT (NIOP:OMM) 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 MT (NIOP:CFNA:CMH:VM) 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPRONE8 MT (NIOP:VCORR) 3587080982063727 310410214827503 1.0 (1 APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 32 SDNY_GM_00002639 EF-EA_001(67(5 EFTA01251239 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, ‘41.1° sr ma• si#/. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 18:55:26 Conn. Time (UTCI Seizure Time ET Originating Terminating 1EEI Number Number INSI CT Feature 598 06/03/20 21:09:43 0:00 22:05 3587080982063727 310410214827503 NO (Mi-Fi) APPLE 'PHONES 599 06/04/20 14:30:08 0:11 1:42 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 600 06/05/20 19:34:05 0:26 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 601 06/05/20 19:34:06 0:27 0:02 NO (VCORR) 602 06/05/20 19:34:06 0:27 0:02 3587080982063727 310410214827503 MT (Mi￾APPLE Fi.:NIOP:CFNA:VM) 'PHONES 603 06/05/20 19:34:36 0:25 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE 'PHONES 604 06/05/20 19:34:38 0:27 0:02 NO (VCORR) 605 06/05/20 19:34:38 0:27 0:02 3587080982063727 310410214827503 MT (Mi￾APPLE Fi.:NIOP:CFMA:VM) 'PHONES 606 06/05/20 20:45:34 0:24 0:00 KT (NIOP) 607 06/05/20 20:45:41 0:31 0:02 NT (NIOP:CFNA:VM) 608 06/05/20 20:45:41 0:31 0:02 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 609 06/05/20 20:46:31 0:24 0:00 MT (NIOPI 610 06/05/20 20:46:37 0:30 0:02 MT (NIOP:CFNA:VNI 611 06/05/20 20:46:37 0:30 0:02 3587080982063727 310410214827503 NO APPLE 'PHONES 612 06/06/20 22:41:11 0:23 0:00 MT (NIOP) 613 06/06/20 22:41:16 0:28 1:04 MT (NIOP:CFNA:VM) 614 06/06/20 22:41:16 0:28 0:06 3587080982063727 310410214827503 NO (Ni-Fi) APPLE 'PHONES 615 06/06/20 22:41:22 0:00 0:58 3587080982063727 310410214827503 MO (VCORR) APPLE 'PHONES 616 06/06/20 22:43:40 0:04 3:36 MO (VCORR) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 33 SDNY_GM_00002640 EFTA_001(67(6 EFTA01251240 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 411., %---- `-‘ 0 AT&T Run Data: Run Time: Voice Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Seizure Time ET Originating Terminating IMEI Number Number INS/ CT Feature 617 06/06/20 22:43:40 0:04 1:01 3587080982063727 310410214827503 MT (NIOP:VCORR) APPLE IPHOWE8 618 06/06/20 22:44:41 0:00 2:35 3587080982063727 310410214827503 MT (Wi-Fi:NIOP) APPLE IPHOWE8 619 06/09/20 20:00:48 0:01 2:22 3587080982063727 310410214827503 WO (Ni-Fi) APPLE IPHOWE8 620 06/09/20 20:59:57 0:10 40:05 MT (NIOP:VCORR) 621 06/09/20 20:59:57 0:11 40:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 622 06/09/20 21:46:06 0:39 0:03 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 623 06/09/20 21:46:34 0:11 0:00 MT (Wi-Fi:NIOP) 624 06/09/20 21:46:34 0:11 0:00 MT (NIOP) 625 06/09/20 21:46:39 0:16 0:01 MT (NIOP:CFB:VN) 626 06/09/20 21:46:39 0:17 0:01 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHONE8 627 06/09/20 23:19:32 0:10 0:03 3587080982063727 310410214827503 NO (Ni-Fi) APPLE IPHONE8 628 06/09/20 23:19:41 0:03 0:00 MT (Wi-Fi:NIOP) 629 06/09/20 23:19:41 0:03 0:00 MT (Wi-Fi:NIOP) 630 06/09/20 23:19:46 0:08 0:02 MT (Ni-Fi:NIOP:CFB:VM) 631 06/09/20 23:19:46 0:09 0:02 3587080982063727 310410214827503 HO (Ni-Fi) APPLE IPHOWE8 632 06/09/20 23:58:57 0:02 0:00 MT (Wi-Fi:NIOP) 633 06/09/20 23:58:57 0:02 0:00 MT (Wi-Fi:NIOP) 634 06/09/20 23:59:00 0:05 0:02 MT (Ni-Fi:NIOP:CFB:VM) 635 06/09/20 23:59:00 0:06 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE IPHOWE8 636 06/10/20 14:55:12 0:23 0:00 MT (NIOP) 637 06/10/20 14:55:12 0:23 0:00 MT (Wi-Fi:NIOP) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 34 SDNY_GM_00002641 EF-EA_00116717 EFTA01251241 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Voice Usage For: Item Conn. Date 06/17/2020 18:55:26 Conn. Time (OTC) Seizure Time RT Originating Terminating IbtEI Number Number INSI CT Feature 638 06/10/20 14:55:16 0:27 0:02 MT (Ni￾Fi:NIOP:CFNA:VN) 639 06/10/20 14:55:16 0:27 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 640 06/10/20 14:55:36 0:10 0:05 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 641 06/10/20 18:51:20 0:23 0:00 MT (NIOP) 642 06/10/20 18:51:27 0:30 0:02 MT (NIOP:CFNA:VN) 643 06/10/20 18:51:27 0:31 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 644 06/10/20 19:11:49 0:21 0:00 MT (NIOP) 645 06/10/20 19:11:53 0:25 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 646 06/10/20 19:11:53 0:25 0:02 MT (NIOP:CFNA:VN) 647 06/10/20 22:21:12 0:23 0:00 MT (NIOP) 648 06/10/20 22:21:17 0:28 0:02 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 649 06/10/20 22:21:17 0:28 0:02 MT (NIOP:CFNA:VN) 650 06/11/20 00:50:40 0:22 0:00 MT (NIOP) 651 06/11/20 00:50:40 0:22 0:00 MT (Ni-Fi:NIOP) 652 06/11/20 00:50:45 0:27 0:01 MT (Ni￾Fi:NIOP:CFNA:VM) 653 06/11/20 00:50:45 0:27 0:01 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 654 06/11/20 01:00:17 0:06 44:39 MT (NIOP :VCORR) 655 06/11/20 01:00:17 0:07 44:39 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 656 06/11/20 14:12:28 0:38 0:03 3587080982063727 310410214827503 MO (Ni-Fi) APPLE 'PHONES 657 06/11/20 23:57:41 0:00 0:00 Mr (NIOP :CNN) AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 35 SDNY_GM_00002642 EF-EA_001(67(8 EFTA01251242 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Voice Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Seizure Time ET Originating Terminating 1MEI Number Number 17481 CT Feature 658 06/11/20 23:57:47 0:06 0:04 MT (NIOP:CFB:CMM:VM) 659 06/11/20 23:57:47 0:07 0:04 3587080982063727 310410214827503 MO [Mi-Fi) APPLE 'PHONES 660 06/12/20 00:35:53 0:39 0:04 ■ 3587080982063727 310410214827503 MO [Mi-Fi) APPLE IPHONES 661 06/12/20 00:36:33 0:24 0:00 MT 11410P) 662 06/12/20 00:36:39 0:30 0:02 MT INIOP:CFNA:VM) 663 06/12/20 00:36:39 0:31 0:02 3587080982063727 310410214827503 MO [Wi-Fi) APPLE IPHONES 664 06/12/20 13:40:56 0:17 0:38 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONES 665 06/12/20 13:41:49 0:02 0:00 3587080982063727 310410214827503 MO [Wi-Fi) APPLE IPHONES 666 06/12/20 16:43:56 0:25 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONES 667 06/12/20 16:43:57 0:26 0:05 3587080982063727 310410214827503 MT (Mi￾APPLE Fi:MIOP:CFMA:VM) IPHONES 668 06/12/20 16:44:48 0:06 0:00 3587080982063727 310410214827503 MT (Mi-Fi:NIOP) APPLE IPHONE8 669 06/12/20 16:47:03 0:36 0:03 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 670 06/12/20 16:47:08 0:00 0:00 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 671 06/12/20 16:47:56 0:35 0:05 3587080982063727 310410214827503 MO (Mi-Fi) APPLE IPHONE8 672 06/12/20 16:48:26 0:18 0:00 3587080982063727 310410214827503 1.0 (Mi-Fi) APPLE IPHONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 36 SDNY_GM_00002643 EF-EA_001(67(9 EFTA01251243 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ••-•2 `-‘ 0 AT&T Run Date: Run Time: Voice Usage For: 06/17/2020 1S:53:26 Item Conn. Conn. Seizure ET Originating Terminating Date Time Time Number Number (OTC) 673 06/12/20 16:49:51 0:13 0:43 MEI CT Feature 3587080982063727 310410214827503 MO APPLE 114HONE8 AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 37 SDNY_GM_00002644 EFTA 00116720 EFTA01251244 MOBILITY The information contained hora(F341::)Nff::tli i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. ap. AT&T Run Date: Run Tame: Data Usage Tor: Item Conn. Date 06/17/2020 10:55:33 Conn. Time (UTC) Originating Number ET Bytes up Bytoa Apn Dn INZI INSI MARL 1 03/01/20 05:38:22 1:22 0 0 ims 3587080982063725 310410214827503 APPLE 2 03/01/20 05:41:28 60:00 11858 8720 ims 3587080982063725 310410214827503 APPLE 3 03/01/20 05:55:39 60:00 924 840 nxtgonpho no 3587080982063725 310410214827503 APPLE 4 03/01/20 06:41:28 41:54 2580 1324 ims 3587080982063725 310410214827503 APPLE 5 03/01/20 06:55:39 60:00 865 525 nxtgonpho no 3587080982063725 310410214827503 APPLE 6 03/01/20 07:23:22 60:00 11920 4220 ims 3587080982063725 310410214827503 APPLE 7 03/01/20 07:55:39 60:00 919 1036 nxtgonpho no 3587080982063725 310410214827503 APPLE 8 03/01/20 08:23:22 60:00 6956 2648 ims 3587080982063725 310410214827503 APPLE 9 03/01/20 08:55:39 60:00 692 420 nxtgonpho no 3587080982063725 310410214827503 APPLE 10 03/01/20 09:23:22 17:52 3424 1324 ims 3587080982063725 310410214827503 APPLE 11 03/01/20 09:44:39 60:00 11862 8772 ims 3587080982063725 310410214827503 APPLE 12 03/01/20 09:55:39 60:00 872 735 nxtgonpho no 3587080982063725 310410214827503 APPLE 13 03/01/20 10:44:39 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE 14 03/01/20 10:55:39 60:00 635 525 nxtgonpho no 3587080982063725 310410214827503 APPLE 15 03/01/20 11:44:39 60:00 5192 2648 ims 3587080982063725 310410214827503 APPLE 16 03/01/20 11:55:39 60:00 1038 630 nxtgonpho no 3587080982063725 310410214827503 APPLE 17 03/01/20 12:44:39 27:07 2580 1324 ims 3587080982063725 310410214827503 APPLE 18 03/01/20 12:55:39 60:00 3838 5118 nxtgonpho no 3587080982063725 310410214827503 APPLE 19 03/01/20 13:11:46 10:55 3424 1340 ims 3587080982063725 310410214827503 APPLE 20 03/01/20 13:25:26 18:05 7402 6102 ims 3587080982063725 310410214827503 APPLE 21 03/01/20 13:43:31 39:19 10252 4128 ims 3587080982063725 310410214827503 APPLE 22 03/01/20 13:55:39 60:00 7138 6900 nxtgonpho no 3587080982063725 310410214827503 APPLE 23 03/01/20 14:24:05 0:19 9754 7358 ims 3587080982063725 310410214827503 APPLE 24 03/01/20 14:24:24 8:29 5180 1696 ims 3587080982063725 310410214827503 APPLE 25 03/01/20 14:38:56 60:00 13027 7566 ims -1 310410214827503 26 03/01/20 14:55:39 9:59 173 105 nxtgonpho no 3587080982063725 310410214827503 APPLE 27 03/01/20 15:05:38 3:44 6742 4956 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL IPHOME8 IPHOME8 IPHOME8 IPHOME8 'PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 'PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002645 NTstAlt not for general distribution. Page 1 EFTA 00116721 EFTA01251245 MOBILITY The information contained heraCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. 4111. ......, ••--s""a0 AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INEI IMEI MAKE 28 03/01/20 15:09:22 0:12 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 29 03/01/20 15:09:55 2:27 5220 5991 nxtgonpho no 3587080982063725 310410214827503 APPLE 30 03/01/20 15:09:56 2:27 5991 4932 nxtgonpho no 3587080982063725 310410214827503 APPLE 31 03/01/20 15:12:23 19:15 8268 7175 nxtgonpho no 3587080982063725 310410214827503 APPLE 32 03/01/20 15:31:38 4:48 8406 5288 nxtgonpho no 3587080982063725 310410214827503 APPLE 33 03/01/20 15:36:25 1:43 6726 6727 nxtgonpho no 3587080982063725 310410214827503 APPLE 34 03/01/20 15:36:26 1:43 6727 6438 nxtgonpho no 3587080982063725 310410214827503 APPLE 35 03/01/20 15:38:09 1:35 7450 5003 nxtgonpho no 3587080982063725 310410214827503 APPLE 36 03/01/20 15:38:56 60:00 3532 1324 imp -1 310410214827503 37 03/01/20 15:39:44 0:22 5221 5991 nxtgonpho no 3587080982063725 310410214827503 APPLE 38 03/01/20 15:39:45 0:22 5991 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE 39 03/01/20 15:40:07 31:31 21318 19563 nxtgonpho no 3587080982063725 310410214827503 APPLE 40 03/01/20 16:02:35 17:49 9902 6262 imp -1 310410214827503 41 03/01/20 16:11:37 2:55 4504 5759 nxtgonpho no 3587080982063725 310410214827503 APPLE 42 03/01/20 16:11:38 2:55 5759 4216 nxtgonpho no 3587080982063725 310410214827503 APPLE 43 03/01/20 16:14:33 0:05 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 44 03/01/20 16:27:22 21:33 8365 6084 imp -1 310410214827503 45 03/01/20 16:29:19 1:40 7396 4952 nxtgonpho no 3587080982063725 310410214827503 APPLE 46 03/01/20 16:30:58 1:31 5220 5991 nxtgonpho no 3587080982063725 310410214827503 APPLE 47 03/01/20 16:30:59 1:31 5991 4932 nxtgonpho no 3587080982063725 310410214827503 APPLE 48 03/01/20 16:32:30 6:30 6040 4939 nxtgonpho no 3587080982063725 310410214827503 APPLE 49 03/01/20 16:38:56 60:00 0 0 imp -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002646 NeTiliAL not for general distribution. Page 2 EFTA 00116722 EFTA01251246 MOBILITY The information contained hereeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. 4111. tr`"ads. 1° AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 18:63:33 Conn. Originating ET Tino Number (UTC) Bytes Up Bytes Apn Dn IBEX INSI MARL NICOLL 50 03/01/20 16:38:59 4:59 6299 7586 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONZ8 51 03/01/20 16:39:00 4:59 7586 5915 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 52 03/01/20 16:43:59 6:39 7933 19165 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 53 03/01/20 16:50:30 60:00 24775 18430 imp -1 310410214827503 54 03/01/20 16:50:37 0:21 288 48 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 55 03/01/20 16:50:38 0:22 48 Ormagonpho no 3587080982063725 310410214827503 APPLE 1PROME8 56 03/01/20 16:51:00 17:39 19037 30448 nxtgonpho no 3587080982063725 310410214827503 APPLE 'PHONES 57 03/01/20 17:08:38 1:08 5117 6043 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 58 03/01/20 17:08:39 1:08 6043 4829 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 59 03/01/20 17:09:47 41:45 65228 67623 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 60 03/01/20 17:38:56 12:29 0 0 imp -1 310410214827503 61 03/01/20 17:50:30 60:00 0 0 imp -1 310410214827503 62 03/01/20 17:51:25 6:34 8423 6138 imp -1 310410214827503 63 03/01/20 17:51:32 45:02 14269 13073 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 64 03/01/20 17:51:33 45:02 13073 17918 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 65 03/01/20 18:01:09 2:30 8313 6090 imp -1 310410214827503 66 03/01/20 18:06:21 5:55 11275 10058 imp -1 310410214827503 67 03/01/20 18:13:49 8:59 8187 6296 imp -1 310410214827503 68 03/01/20 18:25:49 5:48 8263 7472 imp -1 310410214827503 69 03/01/20 18:35:07 26:02 8371 6016 imp -1 310410214827503 70 03/01/20 18:36:35 8:04 43532 18469 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 71 03/01/20 18:44:38 6:14 10852 13435 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 72 03/01/20 18:44:39 6:14 13435 21886 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 73 03/01/20 18:50:30 60:00 0 0 imp -1 310410214827503 74 03/01/20 18:50:53 2:02 9758 6565 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002647 MT V& not for general distribution. Page 3 EF-EAJVII6723 EFTA01251247 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111, trm.I/00 Is1 AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Mambos ET Bytes Up Byte. Apn On INCI IMBI MODEL 75 03/01/20 18:50:54 2:02 6565 9470 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 76 03/01/20 18:52:56 60:00 19262 29639 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 77 03/01/20 19:02:56 60:00 22413 16301 imo -1 310410214827503 78 03/01/20 19:50:30 60:00 0 0 ipso -1 310410214827503 79 03/01/20 19:52:56 9:07 173 105 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 80 03/01/20 19:58:23 0:05 0 3613 ipso -1 310410214827503 81 03/01/20 20:02:02 2:03 5218 5973 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 82 03/01/20 20:02:03 2:03 5973 4930 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 83 03/01/20 20:02:56 60:00 6956 2864 ipso -1 310410214827503 84 03/01/20 20:04:06 60:00 32943 15861 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 85 03/01/20 20:50:30 58:40 0 0 ipso -1 310410214827503 86 03/01/20 21:02:56 32:46 8480 3004 ipso -1 310410214827503 87 03/01/20 21:04:06 3:13 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 88 03/01/20 21:07:19 40:44 7436 11745 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 89 03/01/20 21:43:30 0:16 48 0 ipso 3587080982063725 310410214827503 APPLE 1PROME8 90 03/01/20 21:43:46 51:58 11627 7387 ipso 3587080982063725 310410214827503 APPLE 1PROME8 91 03/01/20 21:48:02 2:57 5221 6043 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 92 03/01/20 21:48:03 2:57 6043 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 93 03/01/20 21:51:00 2:13 6040 4892 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 94 03/01/20 21:53:12 2:03 5221 5991 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 95 03/01/20 21:53:13 2:03 5991 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 96 03/01/20 21:55:16 15:41 9091 5311 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 97 03/01/20 22:10:56 2:03 5177 6103 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 98 03/01/20 22:10:57 2:03 6103 4889 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002648 NeTniliAL not for general distribution. Page 4 EFTA 00116724 EFTA01251248 MOBILITY The information contained hereeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 411111, AT&T Run Date: Run Tame: Data Usage For: Item Conn. Date 06/17/2020 16:56:33 Conn. originating ET Time Number (UTC) Bytes Up Bytoa Ann Dn ANTI IMS1 (WM 99 03/01/20 22:13:00 60:00 6976 5733 nxtgonpho no 3587080982063725 310410214827503 APPLE 100 03/01/20 22:42:34 13:34 6778 6105 ims 3587080982063725 310410214827503 APPLE 101 03/01/20 22:56:08 40:20 7172 3696 ims 3587080982063725 310410214827503 APPLE 102 03/01/20 23:13:00 60:00 1471 4996ruftgonpho no 3587080982063725 310410214827503 APPLE 103 03/01/20 23:38:48 0:05 0 0 ims 3587080982063725 310410214827503 APPLE 104 03/01/20 23:53:31 42:44 17191 8099 ims -1 310410214827503 105 03/02/20 00:13:00 60:00 4177 4210 nxtgonpho no 3587080982063725 310410214827503 APPLE 106 03/02/20 00:47:05 36:22 8553 7960 ims -1 310410214827503 107 03/02/20 01:13:00 58:51 4775 11416 nxtgonpho no 3587080982063725 310410214827503 APPLE 108 03/02/20 01:28:01 19:50 8228 7855 ims 3587080982063725 310410214827503 APPLE 109 03/02/20 01:47:51 2:30 3532 1340 ims 3587080982063725 310410214827503 APPLE 110 03/02/20 01:58:42 60:00 13603 7860 ims -1 310410214827503 111 03/02/20 02:11:50 2:11 5221 6043 nxtgonpho no 3587080982063725 310410214827503 APPLE 112 03/02/20 02:11:51 2:11 6043 4933ruftgonpho no 3587080982063725 310410214827503 APPLE 113 03/02/20 02:14:02 60:00 7529 5854ruftgonpho no 3587080982063725 310410214827503 APPLE 114 03/02/20 02:58:42 59:06 13444 4516 ims -1 310410214827503 115 03/02/20 03:14:02 60:00 1746 1500 nxtgonpho no 3587080982063725 310410214827503 APPLE 116 03/02/20 03:58:49 60:00 12186 9034 ims 3587080982063725 310410214827503 APPLE 117 03/02/20 04:14:02 60:00 1320 1250 nxtgonpho no 3587080982063725 310410214827503 APPLE 118 03/02/20 04:58:49 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE 119 03/02/20 05:14:02 60:00 1095 1341ruftgonpho no 3587080982063725 310410214827503 APPLE 120 03/02/20 05:58:49 60:00 5192 2664 ims 3587080982063725 310410214827503 APPLE 121 03/02/20 06:14:02 60:00 639 375ruftgonpho no 3587080982063725 310410214827503 APPLE 122 03/02/20 06:58:49 41:03 2596 1324 ims 3587080982063725 310410214827503 APPLE 123 03/02/20 07:14:02 25:50 369 375ruftgonpho no 3587080982063725 310410214827503 APPLE 124 03/02/20 07:39:52 0:15 495 293ruftgonpho no 3587080982063725 310410214827503 APPLE 125 03/02/20 07:39:52 0:07 0 0 ims 3587080982063725 310410214827503 APPLE NICOLL !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES 1PROME8 DRONES DRONES DRONES DRONES DRONES !PHONES !PRONGS !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002649 NaTiliAL not for general distribution. Page 5 EF-EAJVII6725 EFTA01251249 MOBILITY The information contained hereleenNyR 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in (ITC. 41011, AT&T Run pato: Run Time: Data usage For: Item corm. Date 06/17/2020 Conn. Originating ET Timo Number (OTC) Bytes Up Bytes Apn on INEI IMBI taxi 126 03/02/20 07:39:59 22:50 4840 1572 imp 3587080982063725 310410214827503 APPLE 127 03/02/20 07:40:07 60:00 582 572nxtgonpho no 3587080982063725 310410214827503 APPLE 128 03/02/20 08:07:09 29:52 9262 7340 ims 3587080982063725 310410214827503 APPLE 129 03/02/20 08:37:01 6:04 8728 7072 ims 3587080982063725 310410214827503 APPLE 130 03/02/20 08:40:07 2:56 252 269rumgonpho no 3587080982063725 310410214827503 APPLE 131 03/02/20 12:01:08 29:41 103877 370807rumgonpho no 3587080982063725 310410214827503 APPLE 132 03/02/20 12:01:11 29:38 14032 12064 ims 3587080982063725 310410214827503 APPLE 133 03/02/20 16:16:03 30:50 152117 587017rumgonpho no 3587080982063725 310410214827503 APPLE 134 03/02/20 16:16:05 1:10 8816 6194 ims 3587080982063725 310410214827503 APPLE 135 03/02/20 16:17:15 60:00 79112 44236 ims 3587080982063725 310410214827503 APPLE 136 03/02/20 16:34:35 0:04 0 2210 ims 3587080982063725 310410214827503 APPLE 137 03/02/20 16:34:56 0:23 7149 31933 ims 3587080982063725 310410214827503 APPLE 138 03/02/20 16:35:59 0:06 5581 12969 ims 3587080982063725 310410214827503 APPLE 139 03/02/20 16:36:44 0:56 117835 139892 ims 3587080982063725 310410214827503 APPLE 140 03/02/20 16:43:41 0:09 11001 4562 ims 3587080982063725 310410214827503 APPLE 141 03/02/20 16:44:01 2:12 235412 454074 ims 3587080982063725 310410214827503 APPLE 142 03/02/20 16:46:52 2:07 5464 7722rumgonpho no 3587080982063725 310410214827503 APPLE 143 03/02/20 16:46:53 2:07 7722 5176rumgonpho no 3587080982063725 310410214827503 APPLE 144 03/02/20 16:48:59 21:34 10832 12811rumgonpho no 3587080982063725 310410214827503 APPLE 145 03/02/20 17:10:33 44:52 11500 13087rumgonpho no 3587080982063725 310410214827503 APPLE 146 03/02/20 17:10:34 44:52 13087 13674rumgonpho no 3587080982063725 310410214827503 APPLE 147 03/02/20 17:17:15 8:46 0 0 ims 3587080982063725 310410214827503 APPLE 148 03/02/20 17:28:07 14:50 8207 7090 ims -1 310410214827503 149 03/02/20 17:48:50 11:14 8225 6088 ims -1 310410214827503 150 03/02/20 17:55:26 3:03 7794 5274 nxtgonpho no 3587080982063725 310410214827503 APPLE 151 03/02/20 17:58:28 18:22 321797 68055rumgonpho no 3587080982063725 310410214827503 APPLE 152 03/02/20 17:58:29 18:22 68055 350874rumgonpho no 3587080982063725 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES IPHONE8 'PHONES !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 'PHONES DRONES DRONES DRONES IPRONE8 !PHONES !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002650 NeTniliAL not for general distribution. Page 6 EFTA 00116726 EFTA01251250 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ...,,,• ••—ss` a. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. originating ET Time Number (UTC) Bytes Up Bytoa Apn Dn IND I INSI 153 03/02/20 18:04:26 12:24 6316 6778 imp 3587080982063725 310410214827503 154 03/02/20 18:04:27 12:24 6670 5964 imp 3587080982063725 310410214827503 155 03/02/20 18:15:35 17:29 10178 6494 imp -1 310410214827503 156 03/02/20 18:16:51 8:26 5439 6387 nxtgonpho no 3587080982063725 310410214827503 157 03/02/20 18:16:52 8:26 6387 5151 nxtgonpho no 3587080982063725 310410214827503 158 03/02/20 18:25:18 15:26 8963 10970 nxtgonpho no 3587080982063725 310410214827503 159 03/02/20 18:36:22 13:47 8199 5999 imp 3587080982063725 310410214827503 160 03/02/20 18:40:43 2:07 13092 7135 nxtgonpho no 3587080982063725 310410214827503 161 03/02/20 18:40:44 2:07 7135 12804 nxtgonpho no 3587080982063725 310410214827503 162 03/02/20 18:42:51 60:00 11769 17044 nxtgonpho no 3587080982063725 310410214827503 163 03/02/20 18:50:09 2:18 2984 1340 imo 3587080982063725 310410214827503 164 03/02/20 18:50:09 2:18 2812 1340 imo 3587080982063725 310410214827503 165 03/02/20 18:52:27 4:13 3424 1448 imo 3587080982063725 310410214827503 166 03/02/20 18:58:32 4:46 0 0 imo -1 310410214827503 167 03/02/20 19:14:25 15:41 9323 6918 imo -1 310410214827503 168 03/02/20 19:32:47 17:39 8477 6283 imp -1 310410214827503 169 03/02/20 19:42:51 54:20 10545 9322 nxtgonpho no 3587080982063725 310410214827503 170 03/02/20 19:56:40 10:31 0 0 imp -1 310410214827503 171 03/02/20 20:09:27 60:00 16978 9252 imp -1 310410214827503 172 03/02/20 20:37:10 2:07 5578 6598 nxtgonpho no 3587080982063725 310410214827503 173 03/02/20 20:37:11 2:07 6457 5290 nxtgonpho no 3587080982063725 310410214827503 174 03/02/20 20:39:18 27:09 8245 11360 nxtgonpho no 3587080982063725 310410214827503 175 03/02/20 21:06:26 2:18 6296 8106 nxtgonpho no 3587080982063725 310410214827503 176 03/02/20 21:06:27 i:19 8106 6008 nxtgonpho no 3587080982063725 310410214827503 177 03/02/20 21:08:46 38:39 8309 6108 nxtgonpho no 3587080982063725 310410214827503 178 03/02/20 21:09:27 15:00 0 0 imo -1 310410214827503 179 03/02/20 21:32:03 20:42 8203 5998 imp -1 310410214827503 MAfl NICOLL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002651 NeTniliAL not for general distribution. Page 7 EFTA 00116727 EFTA01251251 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am tO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time 20ne. AT&T's records are stored and provided in OTC. 4111. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 16:53:33 Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INLI INS' NAfl 180 03/02/20 21:47:24 12:15 17860 39013 nxtgonpho no 3587080982063725 310410214827503 APPLE 181 03/02/20 21:47:25 12:16 39013 17476 nxtgonpho no 3587080982063725 310410214827503 APPLE 182 03/02/20 21:58:20 30:21 0 0 ims -1 310410214827503 183 03/02/20 21:59:40 34:23 32299 48475 nxtgonpho no 3587080982063725 310410214827503 APPLE 184 03/02/20 21:59:41 34:23 48475 32752 nxtgonpho no 3587080982063725 310410214827503 APPLE 185 03/02/20 22:06:58 22:20 10591 8188 ims -1 310410214827503 186 03/02/20 22:28:40 5:23 6305 6732 ims 3587080982063725 310410214827503 APPLE 187 03/02/20 22:28:41 5:23 6732 6041 ims 3587080982063725 310410214827503 APPLE 188 03/02/20 22:31:33 6:26 10063 8268 ims -1 310410214827503 189 03/02/20 22:34:03 7:05 8089 10976 nxtgonpho no 3587080982063725 310410214827503 APPLE 190 03/02/20 22:34:05 7:04 10976 7801 nxtgonpho no 3587080982063725 310410214827503 APPLE 191 03/02/20 22:40:32 32:40 19107 12870 ims -1 310410214827503 192 03/02/20 22:41:09 1:04 8543 5515 nxtgonpho no 3587080982063725 310410214827503 APPLE 193 03/02/20 22:42:12 2:10 5792 7397 nxtgonpho no 3587080982063725 310410214827503 APPLE 194 03/02/20 22:42:13 2:10 7397 5504 nxtgonpho no 3587080982063725 310410214827503 APPLE 195 03/02/20 22:44:23 12:58 8379 5971 nxtgonpho no 3587080982063725 310410214827503 APPLE 196 03/02/20 22:57:20 10:17 9677 19783 nxtgonpho no 3587080982063725 310410214827503 APPLE 197 03/02/20 22:57:21 10:17 19783 9389 nxtgonpho no 3587080982063725 310410214827503 APPLE 198 03/02/20 23:07:38 0:51 7248 5395 nxtgonpho no 3587080982063725 310410214827503 APPLE 199 03/02/20 23:08:29 99:47 12346 13625 nxtgonpho no 3587080982063725 310410214827503 APPLE 200 03/02/20 23:08:30 60:00 6907 8351 nxtgonpho no 3587080982063725 310410214827503 APPLE 201 03/02/20 23:13:34 94:42 9570 9722 ims 3587080982063725 310410214827503 APPLE 202 03/02/20 23:13:35 60:00 9614 9414 ims 3587080982063725 310410214827503 APPLE 203 03/02/20 23:14:47 0:01 0 0 ims -1 310410214827503 204 03/02/20 23:17:19 34:17 11811 7693 ims -1 310410214827503 NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002652 NeTniliAL not for general distribution. Page 8 EF-EAJVII6728 EFTA01251252 MOBILITY The information contained heraCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ...„,,• ••-s` a. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apr. Dn INS' 205 03/02/20 23:56:48 60:00 14766 7840 imp -1 310410214827503 206 03/03/20 00:08:30 39:48 6718 6727 nxtgonpho no 3587080982063725 310410214827503 207 03/03/20 00:13:35 34:43 0 0 imp 3587080982063725 310410214827503 208 03/03/20 00:48:17 4:13 7806 5708 nxtgonpho no 3587080982063725 310410214827503 209 03/03/20 00:52:30 14:10 64691 46658 nxtgonpho no 3587080982063725 310410214827503 210 03/03/20 00:52:35 56:22 20187 11190 imp -1 310410214827503 211 03/03/20 00:56:48 60:00 0 0 imp -1 310410214827503 212 03/03/20 01:06:40 2:06 5584 6435 nxtgonpho no 3587080982063725 310410214827503 213 03/03/20 01:06:41 2:06 6435 5296 nxtgonpho no 3587080982063725 310410214827503 214 03/03/20 01:08:47 2:21 7926 5519 nxtgonpho no 3587080982063725 310410214827503 215 03/03/20 01:11:07 1:20 5584 6507 nxtgonpho no 3587080982063725 310410214827503 216 03/03/20 01:11:08 1:19 6507 5296 nxtgonpho no 3587080982063725 310410214827503 217 03/03/20 01:12:28 30:56 17894 13813 nxtgonpho no 3587080982063725 310410214827503 218 03/03/20 01:43:23 14:47 6083 6888 nxtgonpho no 3587080982063725 310410214827503 219 03/03/20 01:43:24 14:47 6888 5795 nxtgonpho no 3587080982063725 310410214827503 220 03/03/20 01:53:38 32:27 16630 8649 ism -1 310410214827503 221 03/03/20 01:56:48 60:00 0 0 imp -1 310410214827503 222 03/03/20 01:58:11 60:00 8925 7567 nxtgonpho no 3587080982063725 310410214827503 223 03/03/20 02:35:26 60:00 13553 7876 ism -1 310410214827503 224 03/03/20 02:56:48 60:00 0 0 imp -1 310410214827503 225 03/03/20 02:58:11 60:00 852 500 nxtgonpho no 3587080982063725 310410214827503 226 03/03/20 03:35:26 60:00 13444 4360 imp -1 310410214827503 227 03/03/20 03:56:48 45:12 0 0 imp -1 310410214827503 228 03/03/20 03:58:11 60:00 6285 9286 nxtgonpho no 3587080982063725 310410214827503 229 03/03/20 04:35:26 11:25 0 0 imp -1 310410214827503 230 03/03/20 04:54:33 26:00 11002 6192 imp -1 310410214827503 MAKE NODEL APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002653 NTniliAL not for general distribution. Page 9 EFTAJVII6729 EFTA01251253 MOBILITY The information contained heraleeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and (ITC. provided in ..zissi" %-—". AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating IT Time Hunter (UTC) Bytes UP Bytom Apn Dn INLI IMBI MAfl NICOLL 231 03/03/20 04:58:11 60:00 1008 750 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 232 03/03/20 05:28:33 5:32 0 0 in -1 310410214827503 233 03/03/20 05:42:12 11:36 8451 6230 in -1 310410214827503 234 03/03/20 05:58:11 30:15 426 250 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 235 03/03/20 06:05:52 0:25 9552 7198 imp 3587080982063725 310410214827503 APPLE IPHONEB 236 03/03/20 06:06:17 60:00 12012 4560 imp 3587080982063725 310410214827503 APPLE IPHONEB 237 03/03/20 06:28:26 2:10 5221 6055 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 238 03/03/20 06:28:27 2:10 6055 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 239 03/03/20 06:30:37 12:02 6265 5017 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 240 03/03/20 06:42:39 61:49 6703 7688 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 241 03/03/20 06:42:40 60:00 7515 6310 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 242 03/03/20 07:06:17 7:58 0 0 imp 3587080982063725 310410214827503 APPLE IPHONEB 243 03/03/20 07:23:35 20:53 7325 6792 imp 3587080982063725 310410214827503 APPLE IPHONEB 244 03/03/20 07:23:36 20:53 6792 7061 imp 3587080982063725 310410214827503 APPLE IPHONEB 245 03/03/20 07:23:52 10:34 11234 6390 imp -1 310410214827503 246 03/03/20 07:42:38 38:41 13368 7571 imp -1 310410214827503 247 03/03/20 07:42:40 1:49 173 105 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 248 03/03/20 07:44:29 15:24 7635 5218 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 249 03/03/20 07:59:52 8:49 7621 7231 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 250 03/03/20 07:59:53 8:49 7231 7237 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 251 03/03/20 08:08:42 0:48 6870 4955 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 252 03/03/20 08:09:29 0:48 5116 6055 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 253 03/03/20 08:09:30 0:48 6055 4828 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 254 03/03/20 08:10:18 0:40 6112 4952 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002654 NeTniiiikE not for general distribution. Page 10 EFTA_OOII6730 EFTA01251254 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 4111. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 MS= Conn. Originating ET Time Number (UTC) Bytes Up Bytoa Apn On ICI IMSI MARS 255 03/03/20 08:10:57 2:36 5117 6055 nxtgenpho no 3587080982063725 310410214827503 APPLE 256 03/03/20 08:10:58 2:36 6055 4829ruagenpho no 3587080982063725 310410214827503 APPLE 257 03/03/20 08:13:33 8:22 5113 6105ruagenpho no 3587080982063725 310410214827503 APPLE 258 03/03/20 08:13:35 8:21 6105 4825ruagenpho no 3587080982063725 310410214827503 APPLE 259 03/03/20 08:21:56 60:00 7213 5837roftgenpho no 3587080982063725 310410214827503 APPLE 260 03/03/20 08:31:42 16:37 9802 6142 imp -1 310410214827503 261 03/03/20 08:49:57 41:51 14587 7694 imp -1 310410214827503 262 03/03/20 09:21:56 5:17 173 105ruagenpho no 3587080982063725 310410214827503 APPLE 263 03/03/20 09:27:12 2:06 5116 6055ruagenpho no 3587080982063725 310410214827503 APPLE 264 03/03/20 09:27:13 2:06 6055 4828ruagenpho no 3587080982063725 310410214827503 APPLE 265 03/03/20 09:29:19 60:00 8500 5638ruagenpho no 3587080982063725 310410214827503 APPLE 266 03/03/20 09:43:56 4:50 0 0 imp -1 310410214827503 267 03/03/20 09:58:18 3:50 11004 6250 imp -1 310410214827503 268 03/03/20 10:07:18 25:12 9679 6398 imp -1 310410214827503 269 03/03/20 10:29:19 60:00 8133 2343 nxtgenpho no 3587080982063725 310410214827503 APPLE 270 03/03/20 10:47:22 0:14 48 0 imp 3587080982063725 310410214827503 APPLE 271 03/03/20 10:47:36 34:54 13747 8456 imp 3587080982063725 310410214827503 APPLE 272 03/03/20 11:29:05 33:39 13398 7586 imp -1 310410214827503 273 03/03/20 11:29:19 37:34 9542 6573 nxtgenpho no 3587080982063725 310410214827503 APPLE 274 03/03/20 12:06:52 8:49 5221 6055ruagenpho no 3587080982063725 310410214827503 APPLE 275 03/03/20 12:06:54 8:48 6055 4933ruagenpho no 3587080982063725 310410214827503 APPLE 276 03/03/20 12:07:05 60:00 18679 8370 imp -1 310410214827503 277 03/03/20 12:15:42 2:09 5216 6053 nxtgenpho no 3587080982063725 310410214827503 APPLE 278 03/03/20 12:15:43 2:09 6053 4928ruagenpho no 3587080982063725 310410214827503 APPLE MOLL IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 11 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002655 NTntAlt not for general distribution. EF-EA_00116731 EFTA01251255 The information contained heraCteNyFtli (um) 279 03/03/20 12:17:52 19:55 7630 6275 nxtgonpho no 3587080982063725 310410214827503 280 03/03/20 12:37:46 2:06 5532 9011 nxtgonpho no 3587080982063725 310410214827503 281 03/03/20 12:37:47 2:06 9011 5244 nxtgonpho no 3587080982063725 310410214827503 282 03/03/20 12:39:53 31:03 7586 5843 nxtgonpho no 3587080982063725 310410214827503 283 03/03/20 13:07:05 22:45 4964 1572 ims -1 310410214827503 284 03/03/20 13:10:55 0:40 5325 6280 nxtgonpho no 3587080982063725 310410214827503 285 03/03/20 13:10:56 0:40 6280 5037 nxtgonpho no 3587080982063725 310410214827503 286 03/03/20 13:11:36 7:06 9026 5966 nxtgonpho no 3587080982063725 310410214827503 287 03/03/20 13:18:41 8:16 5217 6105 nxtgonpho no 3587080982063725 310410214827503 288 03/03/20 13:18:42 8:16 6105 4929 nxtgonpho no 3587080982063725 310410214827503 289 03/03/20 13:26:58 0:46 6870 4956 nxtgonpho no 3587080982063725 310410214827503 290 03/03/20 13:27:43 2:06 10413 7087 nxtgonpho no 3587080982063725 310410214827503 291 03/03/20 13:27:44 2:06 7087 10125 nxtgonpho no 3587080982063725 310410214827503 292 03/03/20 13:29:50 38:38 13586 8797 nxtgonpho no 3587080982063725 310410214827503 293 03/03/20 13:33:07 0:25 16290 13240 ims 3587080982063725 310410214827503 294 03/03/20 13:33:32 33:21 10840 10928 ims 3587080982063725 310410214827503 295 03/03/20 14:08:27 6:02 5221 6055 nxtgonpho no 3587080982063725 310410214827503 296 03/03/20 14:08:28 6:02 6055 4933 nxtgonpho no 3587080982063725 310410214827503 297 03/03/20 14:14:30 46:03 26448 21682 nxtgonpho no 3587080982063725 310410214827503 298 03/03/20 14:14:32 10:03 8808 6173 ims 3587080982063725 310410214827503 299 03/03/20 14:24:35 29:19 8248 3004 ims 3587080982063725 310410214827503 300 03/03/20 14:54:30 0:29 8098 7128 ims 3587080982063725 310410214827503 301 03/03/20 14:54:59 39:09 9804 3052 ims 3587080982063725 310410214827503 302 03/03/20 15:00:32 13:07 24019 14458 nxtgonpho no 3587080982063725 310410214827503 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4101. %"",....... a‘S ../° AT&T Run Date: Run Time: Data Osage For: 06/17/2020 10:55:34 Item Conn. Conn. Originating ET Sytes Bytoa Apn IKI INSI MARE MODEL Data Time Number OP Dn APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 12 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00002656 PsiTn iliAL not for general distribution. EFTA 00116732 EFTA01251256 MOBILITY The information contained heraCtopeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am CO 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in ......, ••—•st"" e0AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Data Time (OTC) Originating Number ET Bytes Up Bytes Dn Apn INEI IMBI 303 03/03/20 15:00:33 13:07 14458 23635 nxtgonpho no 3587080982063725 310410214827503 304 03/03/20 15:13:40 58:17 7179 6785 nxtgonpho no 3587080982063725 310410214827503 305 03/03/20 15:35:15 0:06 0 0 imp -1 310410214827503 306 03/03/20 15:43:23 5:03 18043 11424 imp -1 310410214827503 307 03/03/20 15:48:44 55:52 13475 8142 imp -1 310410214827503 308 03/03/20 16:20:12 2:10 7680 8328 nxtgonpho no 3587080982063725 310410214827503 309 03/03/20 16:20:13 2:10 8328 7392 nxtgonpho no 3587080982063725 310410214827503 310 03/03/20 16:22:23 52:40 60305 22538 nxtgonpho no 3587080982063725 310410214827503 311 03/03/20 16:45:35 60:00 12603 7786 imp -1 310410214827503 312 03/03/20 17:15:02 2:07 13534 92096 nxtgonpho no 3587080982063725 310410214827503 313 03/03/20 17:15:03 2:07 92096 13246 nxtgonpho no 3587080982063725 310410214827503 314 03/03/20 17:17:10 40:59 10564 6373 nxtgonpho no 3587080982063725 310410214827503 315 03/03/20 17:45:35 29:47 5088 1572 ism -1 310410214827503 316 03/03/20 17:58:08 11:42 11259 12573 nxtgonpho no 3587080982063725 310410214827503 317 03/03/20 17:58:09 11:42 12573 24067 nxtgonpho no 3587080982063725 310410214827503 318 03/03/20 18:09:51 35:52 6810 5733 nxtgonpho no 3587080982063725 310410214827503 319 03/03/20 18:17:26 18:56 6670 5963 imp 3587080982063725 310410214827503 320 03/03/20 18:36:22 60:00 11996 4328 imp 3587080982063725 310410214827503 321 03/03/20 18:45:42 2:07 5218 6105 nxtgonpho no 3587080982063725 310410214827503 322 03/03/20 18:45:43 2:07 6105 4930 nxtgonpho no 3587080982063725 310410214827503 323 03/03/20 18:47:50 2:26 9442 11383 nxtgonpho no 3587080982063725 310410214827503 324 03/03/20 18:50:15 2:15 5535 9029 nxtgonpho no 3587080982063725 310410214827503 325 03/03/20 18:50:16 2:15 9029 5247 nxtgonpho no 3587080982063725 310410214827503 326 03/03/20 18:52:31 21:26 15301 35155 nxtgonpho no 3587080982063725 310410214827503 MUT MODEL APPLE DRONES APPLE DRONES APPLE IPHONEB APPLE DRONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE DRONES APPLE IPHONEB APPLE DRONES APPLE DRONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002657 NeTifikE not for general distribution. Page 13 EF-EA_00116733 EFTA01251257 MOBILITY The information contained heraCteNyHt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in LTC. ap. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn IKI INSI MARE 327 03/03/20 19:13:55 2:25 5768 7851 nxtgonpho no 3587080982063725 310410214827503 APPLE 328 03/03/20 19:13:57 2:24 7851 5480 nxtgonpho no 3587080982063725 310410214827503 APPLE 329 03/03/20 19:16:20 52:45 731753 3170468 nxtgonpho no 3587080982063725 310410214827503 APPLE 330 03/03/20 19:16:21 52:45 3170468 731465 nxtgonpho no 3587080982063725 310410214827503 APPLE 331 03/03/20 19:36:22 60:00 6956 2880 imam 3587080982063725 310410214827503 APPLE 332 03/03/20 20:09:06 1:12 7245 5092 nxtgonpho no 3587080982063725 310410214827503 APPLE 333 03/03/20 20:10:18 12:53 8802 7894 nxtgonpho no 3587080982063725 310410214827503 APPLE 334 03/03/20 20:10:19 12:53 7894 8514 nxtgonpho no 3587080982063725 310410214827503 APPLE 335 03/03/20 20:23:12 2:10 7526 5166 nxtgonpho no 3587080982063725 310410214827503 APPLE 336 03/03/20 20:25:21 2:09 5345 7525 nxtgonpho no 3587080982063725 310410214827503 APPLE 337 03/03/20 20:25:22 2:09 7525 5057 nxtgonpho no 3587080982063725 310410214827503 APPLE 338 03/03/20 20:27:31 3:08 6340 5292 nxtgonpho no 3587080982063725 310410214827503 APPLE 339 03/03/20 20:30:38 14:54 5752 7585 nxtgonpho no 3587080982063725 310410214827503 APPLE 340 03/03/20 20:30:39 14:54 7585 5464 nxtgonpho no 3587080982063725 310410214827503 APPLE 341 03/03/20 20:36:22 16:16 3532 1324 ims 3587080982063725 310410214827503 APPLE 342 03/03/20 20:45:32 0:06 0 48 nxtgonpho no 3587080982063725 310410214827503 APPLE 343 03/03/20 20:45:34 0:05 48 Oruftgonpho no 3587080982063725 310410214827503 APPLE 344 03/03/20 20:45:47 1:55 5221 6055 nxtgonpho no 3587080982063725 310410214827503 APPLE 345 03/03/20 20:45:48 1:56 6055 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE 346 03/03/20 20:47:44 13:12 9776 11284 nxtgonpho no 3587080982063725 310410214827503 APPLE 347 03/03/20 20:53:28 0:34 19114 16639 imam 3587080982063725 310410214827503 APPLE 348 03/03/20 20:54:02 28:56 8836 3160 imam 3587080982063725 310410214827503 APPLE MODEL IPHONEB IPHONEB !PHONES !PHONES 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 !PHONES !PHONES 1PROME8 DRONES DRONES DRONES DRONES DRONES 1PROME8 1PROME8 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 14 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002658 PsisTiliAL not for general distribution. EF-EA_00116734 EFTA01251258 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time Originating ET Bytes Bytes Apn IMEI DWI MARE MODEL Number Up Dn (UTC) 349 03/03/20 21:00:55 2:06 5117 350 03/03/20 21:00:56 2:06 6055 351 03/03/20 21:03:02 4:40 7630 352 03/03/20 21:07:41 2:07 5281 353 03/03/20 21:07:42 2:07 6115 354 03/03/20 21:09:49 0:05 0 355 03/03/20 21:09:58 25:19 7879 356 03/03/20 21:24:20 8:46 0 357 03/03/20 21:35:17 113:52 6856 358 03/03/20 21:35:18 60:00 192 359 03/03/20 21:35:20 112:43 7134 360 03/03/20 21:35:21 60:00 6744 361 03/03/20 21:35:37 60:00 32623 362 03/03/20 21:35:54 30:49 5373088 363 03/03/20 22:35:18 53:52 10936 364 03/03/20 22:35:21 52:43 0 365 03/03/20 22:35:37 37:55 3532 366 03/03/20 23:15:41 8:11 0 367 03/03/20 23:27:35 0:59 6262 368 03/03/20 23:27:36 0:59 6666 369 03/03/20 23:28:02 0:03 0 370 03/03/20 23:28:09 1:00 7266 371 03/03/20 23:28:10 1:00 6798 372 03/03/20 23:28:33 58:37 18422 373 03/03/20 23:29:10 0:36 7462 374 03/03/20 23:29:45 24:20 30213 375 03/03/20 23:29:46 24:20 52870 6055 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 4829 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 5224 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 6115 nxtgenpho 3587080982063725 310410214827503 APPLE TUMMIES no 4993 nxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no Onxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no 5848 nxtgenpho 3587080982063725 310410214827503 APPLE 1PRONZ8 no 0 ims -1 310410214827503 11128 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 0 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 6744 ims 3587080982063725 310410214827503 APPLE !PROMS 6978 ims 3587080982063725 310410214827503 APPLE !PROMS 20498 ims -1 310410214827503 4436025 ims -1 310410214827503 6280 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 0 imp 3587080982063725 310410214827503 APPLE DRONES 1340 imp -1 310410214827503 0 imp -1 310410214827503 6666 ims 3587080982063725 310410214827503 APPLE DRONES 5998 ims 3587080982063725 310410214827503 APPLE !PROMS 0 imp -1 310410214827503 6862 ims 3587080982063725 310410214827503 APPLE !PROMS 7002 ims 3587080982063725 310410214827503 APPLE DRONES 9574 ims -1 310410214827503 5052 nxtgenpho 3587080982063725 310410214827503 APPLE DRONES no 52870 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no 29925 nxtgenpho 3587080982063725 310410214827503 APPLE !PROMS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 15 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002659 WAAL not for general distribution. EF-EA_00116735 EFTA01251259 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in 411111, .....„,,,• ••-s`" 1. AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (UTC) Originating ET Bytes Bytes Apn INFI Number Up Dn ISIS I teal NDDEL 376 03/03/20 23:54:06 15:46 17645 20423 nxtgonpho no 3587080982063725 310410214827503 377 03/03/20 23:54:07 15:47 20423 17069 nxtgonpho no 3587080982063725 310410214827503 378 03/04/20 00:09:54 0:46 11507 6439 nxtgonpho no 3587080982063725 310410214827503 379 03/04/20 00:10:39 52:20 56711 52938 nxtgonpho no 3587080982063725 310410214827503 380 03/04/20 00:10:40 52:20 52938 68486 nxtgonpho no 3587080982063725 310410214827503 381 03/04/20 00:32:25 2:30 0 0 ims -1 310410214827503 382 03/04/20 00:45:06 17:53 6510 8370 ims 3587080982063725 310410214827503 383 03/04/20 00:45:07 17:53 8302 6354 ims 3587080982063725 310410214827503 384 03/04/20 00:45:49 0:03 0 0 ims -1 310410214827503 385 03/04/20 00:46:19 60:00 15323 9894 ims -1 310410214827503 386 03/04/20 01:03:00 0:59 48 Oruagonpho no 3587080982063725 310410214827503 387 03/04/20 01:03:58 30:52 55514 57373 nxtgonpho no 3587080982063725 310410214827503 388 03/04/20 01:03:59 30:52 57373 56180 nxtgonpho no 3587080982063725 310410214827503 389 03/04/20 01:34:51 0:06 0 Oruagonpho no 3587080982063725 310410214827503 390 03/04/20 01:37:32 21:01 25916 28070 nxtgonpho no 3587080982063725 310410214827503 391 03/04/20 01:37:33 21:01 28070 25517 nxtgonpho no 3587080982063725 310410214827503 392 03/04/20 01:46:19 55:23 8620 2928 ims -1 310410214827503 393 03/04/20 01:58:34 63:59 105999 112162 nxtgonpho no 3587080982063725 310410214827503 394 03/04/20 01:58:35 60:00 111873 105108 nxtgonpho no 3587080982063725 310410214827503 395 03/04/20 02:49:16 12:28 264 112 ims 3587080982063725 310410214827503 396 03/04/20 02:49:17 12:28 48 0 ims 3587080982063725 310410214827503 397 03/04/20 02:50:28 6:33 0 0 ims -1 310410214827503 398 03/04/20 02:58:35 3:59 289 315 nxtgonpho no 3587080982063725 310410214827503 399 03/04/20 03:01:22 0:25 7234 6788 ims 3587080982063725 310410214827503 400 03/04/20 03:01:23 0:26 6788 6970 mos 3587080982063725 310410214827503 401 03/04/20 03:01:44 0:05 2567 1210 ims -1 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 16 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002660 PsiTifikE not for general distribution. EF-EA_00116736 EFTA01251260 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59Om AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr'`sads AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 illIll'Ill Conn. Originating ET Time Number op (OTC) Bytes Byte. Apn Dn ICI INSI 402 03/04/20 03:01:47 0:46 6360 6670 ims 3587080982063725 310410214827503 403 03/04/20 03:01:48 0:46 6670 6096 ims 3587080982063725 310410214827503 404 03/04/20 03:02:11 39:31 14275 8051 ims -1 310410214827503 405 03/04/20 03:02:34 0:39 0 0 nxtopanpho no 3587080982063725 310410214827503 406 03/04/20 03:03:12 73:18 28513 15701 nxtopanpho no 3587080982063725 310410214827503 407 03/04/20 03:03:13 60:00 7682 13726nxtopanpho no 3587080982063725 310410214827503 408 03/04/20 03:53:13 23:17 7231 6796 ims 3587080982063725 310410214827503 409 03/04/20 03:53:14 23:17 6796 7075 ims 3587080982063725 310410214827503 410 03/04/20 03:54:40 14:02 9119 6273 ims -1 310410214827503 411 03/04/20 04:03:13 13:18 8019 14307 nxtgenpho no 3587080982063725 310410214827503 412 03/04/20 04:13:39 36:38 13443 7848 ims -1 310410214827503 413 03/04/20 04:16:31 6:11 6032 5599 nxtgenpho no 3587080982063725 310410214827503 414 03/04/20 04:22:41 20:00 11994 13097 nxtgenpho no 3587080982063725 310410214827503 415 03/04/20 04:22:42 60:00 65817 44943 nxtgenpho no 3587080982063725 310410214827503 416 03/04/20 04:42:41 62:23 34539 53298nxtopanpho no 3587080982063725 310410214827503 417 03/04/20 04:48:51 56:13 7374 39842 ims 3587080982063725 310410214827503 418 03/04/20 04:48:52 56:13 6794 7110 ims 3587080982063725 310410214827503 419 03/04/20 05:05:48 60:00 15313 8908 ims -1 310410214827503 420 03/04/20 05:22:42 22:23 578 630nxtopanpho no 3587080982063725 310410214827503 421 03/04/20 05:45:05 2:17 5221 6023nxtopanpho no 3587080982063725 310410214827503 422 03/04/20 05:45:06 2:17 6023 4933nxtopanpho no 3587080982063725 310410214827503 423 03/04/20 05:47:23 37:45 27157 37423 nxtgenpho no 3587080982063725 310410214827503 424 03/04/20 05:47:24 37:45 37423 26773 nxtgenpho no 3587080982063725 310410214827503 425 03/04/20 06:05:48 16:56 0 0 ims -1 310410214827503 426 03/04/20 06:25:10 48:24 9251 11190 nxtgenpho no 3587080982063725 310410214827503 427 03/04/20 06:26:41 13:02 8491 6410 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained heraCtoNyFti MARL NICOLL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES SDNY_GM_ 00002661 NeTtikE not for general distribution. Page 17 EF-EAJVII6737 EFTA01251261 MOBILITY The information contained hereCoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 41011, AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INEI INSI MARL 428 03/04/20 06:46:22 60:00 13338 7746 ins -1 310410214827503 429 03/04/20 07:13:33 2:05 5222 6075 nxtgenpho no 3587080982063725 310410214827503 APPLE 430 03/04/20 07:13:34 2:05 6075 4934 nxtgenpho no 3587080982063725 310410214827503 APPLE 431 03/04/20 07:15:39 60:00 8970 6813 nxtgenpho no 3587080982063725 310410214827503 APPLE 432 03/04/20 07:46:22 0:17 0 0 ins -1 310410214827503 433 03/04/20 07:51:19 6:15 48 0 ins 3587080982063725 310410214827503 APPLE 434 03/04/20 07:57:34 60:00 15137 8951 ins 3587080982063725 310410214827503 APPLE 435 03/04/20 08:15:39 60:00 58544 77226 nxtgenpho no 3587080982063725 310410214827503 APPLE 436 03/04/20 08:57:34 9:27 0 0 ins 3587080982063725 310410214827503 APPLE 437 03/04/20 09:11:30 8:59 0 0 ins -1 310410214827503 438 03/04/20 09:15:39 60:00 1723 3095 nxtgenpho no 3587080982063725 310410214827503 APPLE 439 03/04/20 09:25:04 60:00 16490 8950 ins -1 310410214827503 440 03/04/20 10:15:39 60:00 1384 968 nxtgenpho no 3587080982063725 310410214827503 APPLE 441 03/04/20 10:25:04 49:47 8388 3036 ins -1 310410214827503 442 03/04/20 11:15:39 60:00 22590 24929 nxtgenpho no 3587080982063725 310410214827503 APPLE 443 03/04/20 11:18:22 46:42 14778 8892 ins -1 310410214827503 444 03/04/20 12:09:39 15:38 8367 6072 ins -1 310410214827503 445 03/04/20 12:15:39 19:26 21920 25058 nxtgenpho no 3587080982063725 310410214827503 APPLE 446 03/04/20 12:32:29 15:21 14115 12665 ins -1 310410214827503 447 03/04/20 12:35:04 2:56 5221 6023 nxtgenpho no 3587080982063725 310410214827503 APPLE 448 03/04/20 12:35:05 2:56 6023 4933 nxtgenpho no 3587080982063725 310410214827503 APPLE 449 03/04/20 12:38:01 11:43 7596 6216 nxtgenpho no 3587080982063725 310410214827503 APPLE 450 03/04/20 12:49:44 34:12 15878 18653 nxtgenpho no 3587080982063725 310410214827503 APPLE 451 03/04/20 12:49:45 34:12 18653 16658 nxtgonpho no 3587080982063725 310410214827503 APPLE 452 03/04/20 12:49:49 2:11 8453 6430 vas -1 310410214827503 453 03/04/20 12:51:43 0:05 0 0 vas 3587080982063725 310410214827503 APPLE 454 03/04/20 12:52:18 26:35 6262 6670 ins 3587080982063725 310410214827503 APPLE MODEL !PHONES !PHONES IPHOME8 !PHONES IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 18 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002662 NeTnilikk. not for general distribution. EF-EAJVII6738 EFTA01251262 MOBILITY The information contained heraleeNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and UTC. provided in ....,„# ••-•°"" s AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 10:55:34 Conn. Originating LT Time Number (OTC) Bytes Up Bytes Apn On INLI IMSI MARL 455 03/04/20 12:52:19 26:35 6670 6106 ims 3587080982063725 310410214827503 APPLE 456 03/04/20 12:52:35 16:07 8313 5982 ims -1 310410214827503 457 03/04/20 13:13:15 1:38 0 0 Sums -1 310410214827503 458 03/04/20 13:17:35 6:21 6248 6666 hams 3587080982063725 310410214827503 APPLE 459 03/04/20 13:17:36 6:21 6666 6092 ims 3587080982063725 310410214827503 APPLE 460 03/04/20 13:18:53 60:00 16575 9018 ims -1 310410214827503 461 03/04/20 13:23:57 2:15 14505 5862 nxtgenpho no 3587080982063725 310410214827503 APPLE 462 03/04/20 13:26:12 1:08 5112 6021 nxtgenpho no 3587080982063725 310410214827503 APPLE 463 03/04/20 13:26:13 1:08 6021 4824 nxtgenpho no 3587080982063725 310410214827503 APPLE 464 03/04/20 13:27:21 2:26 6020 4893 nxtgenpho no 3587080982063725 310410214827503 APPLE 465 03/04/20 13:29:46 2:07 5222 6196 nxtgenpho no 3587080982063725 310410214827503 APPLE 466 03/04/20 13:29:47 2:07 6196 4934 nxtgenpho no 3587080982063725 310410214827503 APPLE 467 03/04/20 13:31:54 60:00 25665 13703 nxtgenpho no 3587080982063725 310410214827503 APPLE 468 03/04/20 14:18:53 46:08 8496 2820 ims -1 310410214827503 469 03/04/20 14:31:54 60:00 341 1155 nxtgenpho no 3587080982063725 310410214827503 APPLE 470 03/04/20 15:04:19 60:00 0 0 ims -1 310410214827503 471 03/04/20 15:05:01 26:14 11655 7628 ims -1 310410214827503 472 03/04/20 15:31:54 9:53 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 473 03/04/20 15:42:35 60:00 16282 9102 ims -1 310410214827503 474 03/04/20 16:04:19 11:00 0 0 ims -1 310410214827503 475 03/04/20 16:08:38 60:00 16925 11000 nxtgenpho no 3587080982063725 310410214827503 APPLE 476 03/04/20 16:15:18 0:07 0 0 ims -1 310410214827503 477 03/04/20 16:17:32 19:08 9817 6348 ins -1 310410214827503 478 03/04/20 16:40:18 1:19 7364 6104 ins 3587080982063725 310410214827503 APPLE 479 03/04/20 16:41:37 60:00 12028 4220 ins 3587080982063725 310410214827503 APPLE 480 03/04/20 16:42:35 60:00 0 0 ins -1 310410214827503 481 03/04/20 17:08:38 11:35 237 210 nxtgenpho no 3587080982063725 310410214827503 APPLE MODEL IPHOME8 IPHOME8 IPHONEB !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES !PROMS !PROMS !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002663 N:FilleAsk not for general distribution. Page 19 EF-EA_00116739 EFTA01251263 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 LL:59:59pm Time Zone. AT&T's records ere stored and provided in %...„„ ‘"Ii. " 11. 00 AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Originating ET Bytes Byte. Apn INCI IMBI MAKE MOD= Date Time Number Up Dn (UTC) 482 03/04/20 17:20:12 2:07 5222 6023 nxtgonpho no 3587080982063725 310410214827503 483 03/04/20 17:20:13 2:07 6023 4934ruftgonpho no 3587080982063725 310410214827503 484 03/04/20 17:22:20 17:42 15481 6441ruftgonpho no 3587080982063725 310410214827503 485 03/04/20 17:40:01 21:24 22364 19777ruftgonpho no 3587080982063725 310410214827503 486 03/04/20 17:40:02 21:24 19777 21884ruftgonpho no 3587080982063725 310410214827503 487 03/04/20 17:41:37 60:00 6956 2756 imp 3587080982063725 310410214827503 488 03/04/20 17:42:35 60:00 0 0 imo -1 310410214827503 489 03/04/20 18:01:26 34:35 31417 25433ruftgonpho no 3587080982063725 310410214827503 490 03/04/20 18:36:01 10:11 123900 267707ruftgonpho no 3587080982063725 310410214827503 491 03/04/20 18:41:37 44:17 18788 8828 imp 3587080982063725 310410214827503 492 03/04/20 18:42:35 41:54 0 0 imp -1 310410214827503 493 03/04/20 18:46:11 14:32 2738331 1371751ruftgonpho no 3587080982063725 310410214827503 494 03/04/20 18:46:12 14:32 1371751 2737947ruftgonpho no 3587080982063725 310410214827503 495 03/04/20 18:52:22 1:45 146201 318486 imp 3587080982063725 310410214827503 496 03/04/20 19:00:44 16:05 54281 30349ruftgonpho no 3587080982063725 310410214827503 497 03/04/20 19:16:48 4:26 8112 8235 nxtgonpho no 3587080982063725 310410214827503 498 03/04/20 19:16:49 4:26 8235 7824 nxtgonpho no 3587080982063725 310410214827503 499 03/04/20 19:21:15 5:10 12167 13427ruftgonpho no 3587080982063725 310410214827503 500 03/04/20 19:21:16 5:10 13427 11783ruftgonpho no 3587080982063725 310410214827503 501 03/04/20 19:24:28 1:57 7266 6862 imp 3587080982063725 310410214827503 502 03/04/20 19:24:29 1:57 6794 7002 imp 3587080982063725 310410214827503 503 03/04/20 19:26:27 4:02 11620 6086ruftgonpho no 3587080982063725 310410214827503 504 03/04/20 19:26:28 60:00 29067 17646 imp -1 310410214827503 SOS 03/04/20 19:30:28 8:16 5707 6616 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 20 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002664 NTailiAL not for general distribution. EFTA_00I 16740 EFTA01251264 MOBILITY The information contained heraleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in AT&T Run Date: Run Time: Data Osage For: 06/17/2020 18:55:34 Item Conn. Conn. Originating ET Bytes Date Time Number UP (OTC) S06 03/04/20 19:30:29 8:16 6616 507 03/04/20 19:38:45 42:09 22349 508 03/04/20 19:46:18 0:24 27681 S09 03/04/20 20:20:53 7:50 7092 510 03/04/20 20:20:54 7:50 7276 511 03/04/20 20:26:28 55:05 8604 512 03/04/20 20:28:44 0:05 0 513 03/04/20 20:30:50 93:46 76696 S14 03/04/20 20:30:51 60:00 52778 515 03/04/20 21:25:15 39:21 8517 516 03/04/20 21:25:16 39:21 8758 517 03/04/20 21:29:51 60:00 25598 518 03/04/20 21:30:51 33:46 36194 S19 03/04/20 22:04:37 4:46 6080 S20 03/04/20 22:07:20 48:02 5023984 S21 03/04/20 22:09:22 1:51 5584 S22 03/04/20 22:09:23 1:51 6403 S23 03/04/20 22:11:14 4:08 7260 S24 03/04/20 22:15:21 2:11 5436 525 03/04/20 22:15:22 2:11 6473 S26 03/04/20 22:17:32 15:05 14750 S27 03/04/20 22:17:33 15:05 26225 S28 03/04/20 22:29:51 60:00 20512 S29 03/04/20 22:32:38 18:11 11974 Bytom On Apn 5419 nxtgenpho no 17236 nxtgenpho no 51638 imp 7276 nxtgenpho no 6708 nxtgenpho no 3036 imp 0 nxtgenpho no 88972 nxtgenpho no 46425 nxtgenpho no 8866 imp 8253 imp 14171 imp 29351 nxtgenpho no 4929 nxtgenpho no 9542836 imp 6403 nxtgenpho no 5296 nxtgenpho no 6155 nxtgenpho no 6473 nxtgenpho no 5148 nxtgenpho no 26225 nxtgenpho no 15206 nxtgenpho no 12964 imp 14957 nxtgenpho no INEI 3587080982063725 3587080982063725 -1 3587080982063725 3587080982063725 -1 3587080982063725 3587080982063725 3587080982063725 3587080982063725 3587080982063725 -1 3587080982063725 3587080982063725 -1 3587080982063725 3587080982063725 3587080982063725 3587080982063725 3587080982063725 3587080982063725 3587080982063725 -1 3587080982063725 INSI MAfl MODEL 310410214827503 APPLE 18HOME8 310410214827503 APPLE 18HOME8 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE 18HOME8 310410214827503 APPLE 18HOME8 310410214827503 310410214827503 APPLE DRONES 310410214827503 APPLE DRONES 310410214827503 310410214827503 APPLE !PROMS 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE INIONE8 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE 18HOME8 310410214827503 310410214827503 APPLE 18HOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002665 N:FoleikE not for general distribution. Page 21 EF-EA_00116741 EFTA01251265 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4111. ‘ini° °M assdi AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Ilea Conn. Conn. Originating ET Bytes Date Time Number Op (OTC) 530 03/04/20 22:32:39 18:11 14957 531 03/04/20 22:50:50 3:38 9791 532 03/04/20 22:54:27 1:02 5221 533 03/04/20 22:54:28 1:02 6023 534 03/04/20 22:55:30 4:48 136342 535 03/04/20 23:00:17 9:59 16815 536 03/04/20 23:00:19 9:58 14603 537 03/04/20 23:04:22 0:43 92872 538 03/04/20 23:10:17 4:26 8747 539 03/04/20 23:14:42 8:28 5220 540 03/04/20 23:14:43 8:28 6075 541 03/04/20 23:23:11 5:52 6866 542 03/04/20 23:29:02 8:29 5282 543 03/04/20 23:29:04 8:28 6135 544 03/04/20 23:29:51 22:47 4980 545 03/04/20 23:37:32 4:06 6018 546 03/04/20 23:41:37 8:28 6755 547 03/04/20 23:41:38 8:28 6847 548 03/04/20 23:50:06 35:32 11569 549 03/04/20 23:54:57 24:22 9623 550 03/05/20 00:22:15 0:19 96 551 03/05/20 00:23:33 25:46 20534 552 03/05/20 00:25:37 3:04 5117 Bytes Apn INLI DUI MARL Dn 11590 nxtgonpho no 3587080982063725 310410214827503 APPLE 5778 nxtgonpho no 3587080982063725 310410214827503 APPLE 6023 nxtgonpho no 3587080982063725 310410214827503 APPLE 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE 110705 nxtgonpho no 3587080982063725 310410214827503 APPLE 14603 nxtgonpho no 3587080982063725 310410214827503 APPLE 16431 nxtgonpho no 3587080982063725 310410214827503 APPLE 57448 ims -1 310410214827503 5322 nxtgonpho no 3587080982063725 310410214827503 APPLE 6075 nxtgonpho no 3587080982063725 310410214827503 APPLE 4932 nxtgonpho no 3587080982063725 310410214827503 APPLE 5015 nxtgonpho no 3587080982063725 310410214827503 APPLE 6135 nxtgonpho no 3587080982063725 310410214827503 APPLE 4994 nxtgonpho no 3587080982063725 310410214827503 APPLE 1588 ims -1 310410214827503 4936 nxtgonpho no 3587080982063725 310410214827503 APPLE 6847 nxtgonpho no 3587080982063725 310410214827503 APPLE 6467 nxtgonpho no 3587080982063725 310410214827503 APPLE 7003 nxtgonpho no 3587080982063725 310410214827503 APPLE 6213 ims -1 310410214827503 0 ims 3587080982063725 310410214827503 APPLE 11770 ims -1 310410214827503 6023 nxtgonpho 3587080982063725 310410214827503 APPLE no MOLL IPHONEB IPHONEB !PHONES !PHONES IPHONEB !PHONES !PHONES !PHONES !PHONES IPHONEB !PHONES !PHONES IPHONEB !PHONES !PHONES !PHONES !PHONES IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 22 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002666 PsiTn iliAL not for general distribution. EFTA 00116742 EFTA01251266 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 1L:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. tra‘'`siAT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating Time Number (OTC) LT Bytes Up Byte. npn Dn ICI IMBI Min 553 03/05/20 00:25:38 3:04 6023 4829 nxtgenpho no 3587080982063725 310410214827503 APPLE 554 03/05/20 00:28:41 6:06 6068 6035ruagenpho no 3587080982063725 310410214827503 APPLE 555 03/05/20 00:28:42 6:06 6035 578Ormagenpho no 3587080982063725 310410214827503 APPLE 556 03/05/20 00:34:48 7:20 7430 4957ruagenpho no 3587080982063725 310410214827503 APPLE 557 03/05/20 00:42:07 0:52 5221 6075ruagenpho no 3587080982063725 310410214827503 APPLE 558 03/05/20 00:42:08 0:52 6075 4933ruagenpho no 3587080982063725 310410214827503 APPLE 559 03/05/20 00:43:00 2:32 6193 5009ruagenpho no 3587080982063725 310410214827503 APPLE 560 03/05/20 00:45:31 2:07 5118 6023ruagenpho no 3587080982063725 310410214827503 APPLE 561 03/05/20 00:45:33 2:06 6023 483Ormagenpho no 3587080982063725 310410214827503 APPLE 562 03/05/20 00:47:40 5:43 16247 12433ruagenpho no 3587080982063725 310410214827503 APPLE 563 03/05/20 00:51:15 0:00 0 0 imp 3587080982063725 310410214827503 APPLE 564 03/05/20 00:51:24 11:26 31254 20844 imp -1 310410214827503 565 03/05/20 00:53:22 6:04 7012 10966ruagenpho no 3587080982063725 310410214827503 APPLE 566 03/05/20 00:53:23 6:04 10966 6724 nxtgenpho no 3587080982063725 310410214827503 APPLE 567 03/05/20 00:55:51 0:33 1723 0 imp -1 310410214827503 568 03/05/20 00:58:09 0:32 74020 62275 imp -1 310410214827503 569 03/05/20 00:59:27 8:23 6804 4951 nxtgenpho no 3587080982063725 310410214827503 APPLE 570 03/05/20 01:07:12 22:51 10774 6954 imp -1 310410214827503 571 03/05/20 01:07:49 8:29 5113 6021 nxtgenpho no 3587080982063725 310410214827503 APPLE 572 03/05/20 01:07:50 8:29 6021 4825 nxtgenpho no 3587080982063725 310410214827503 APPLE 573 03/05/20 01:16:19 15:28 7603 5208 nxtgenpho no 3587080982063725 310410214827503 APPLE 574 03/05/20 01:31:46 2:06 5784 6614 nxtgenpho no 3587080982063725 310410214827503 APPLE 575 03/05/20 01:31:47 2:06 6614 5496 nxtgenpho no 3587080982063725 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES /PHONES /PHONES !PHONES !PHONES /PHONES /PHONES !PHONES /PHONES /PHONES /PHONES /PHONES /PHONES /PHONES /PHONES /PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 23 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002667 NTniliAL not for general distribution. EF-EAJVII6743 EFTA01251267 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in LTC. 411111i •.%. ‘inli. ' ssi 00 AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:55:34 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn INC' IMBI 576 03/05/20 01:32:07 1:45 6262 6666 imp 3587080982063725 310410214827503 577 03/05/20 01:32:08 1:45 6666 5998 imp 3587080982063725 310410214827503 578 03/05/20 01:33:54 35:09 33154 14141 nxtgenpho no 3587080982063725 310410214827503 579 03/05/20 01:33:59 49:38 15602 8058 ims -1 310410214827503 580 03/05/20 02:09:03 27:21 708 1490 nxtgenpho no 3587080982063725 310410214827503 581 03/05/20 02:24:41 6:43 8962 7128 ims 3587080982063725 310410214827503 582 03/05/20 02:31:24 60:00 12336 4468 ims 3587080982063725 310410214827503 583 03/05/20 02:36:23 2:33 5583 6387ruftgenpho no 3587080982063725 310410214827503 584 03/05/20 02:36:24 2:33 6387 5295ruftgenpho no 3587080982063725 310410214827503 585 03/05/20 02:38:56 12:47 5709 6616ruftgenpho no 3587080982063725 310410214827503 586 03/05/20 02:38:57 12:47 6616 5421 nxtgenpho no 3587080982063725 310410214827503 587 03/05/20 02:51:44 2:18 0 Oruftgenpho no 3587080982063725 310410214827503 588 03/05/20 02:54:01 3:01 5535 6475ruftgenpho no 3587080982063725 310410214827503 589 03/05/20 02:54:02 3:01 6475 5247ruftgenpho no 3587080982063725 310410214827503 590 03/05/20 02:57:03 2:04 5435 6401 nxtgenpho no 3587080982063725 310410214827503 591 03/05/20 02:57:04 2:04 6401 5147ruftgenpho no 3587080982063725 310410214827503 592 03/05/20 02:59:08 13:23 6613 5266ruftgenpho no 3587080982063725 310410214827503 593 03/05/20 03:12:30 8:47 5499 6678ruftgenpho no 3587080982063725 310410214827503 594 03/05/20 03:12:31 8:47 6678 5211 nxtgenpho no 3587080982063725 310410214827503 595 03/05/20 03:21:18 10:02 8179 5715ruftgenpho no 3587080982063725 310410214827503 596 03/05/20 03:31:20 26:07 8414 6032 nxtgenpho no 3587080982063725 310410214827503 597 03/05/20 03:31:24 2:30 0 0 ims 3587080982063725 310410214827503 598 03/05/20 03:41:55 22:09 10019 6550 ims -1 310410214827503 599 03/05/20 03:57:28 4:01 7810 5394 nxtgenpho no 3587080982063725 310410214827503 MARL MODEL APPLE IPHONZ8 APPLE IPHONZ8 APPLE IPHONZ8 APPLE IPHOME8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 24 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002668 NIT IAL not for general distribution. EF-EA_00116744 EFTA01251268 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn IMBI MAfl 600 03/05/20 04:01:29 16:23 7079 6004 nxtgonpho no 3587080982063725 310410214827503 APPLE 601 03/05/20 04:09:31 1:17 48 0 los 3587080982063725 310410214827503 APPLE 602 03/05/20 04:10:48 43:41 13523 7927 los 3587080982063725 310410214827503 APPLE 603 03/05/20 04:17:53 0:58 6388 5102 nxtgonpho no 3587080982063725 310410214827503 APPLE 604 03/05/20 04:18:50 8:54 5584 6475 nxtgonpho no 3587080982063725 310410214827503 APPLE 605 03/05/20 04:18:51 8:54 6475 5296 nxtgonpho no 3587080982063725 310410214827503 APPLE 606 03/05/20 04:27:44 10:33 5438 6475 nxtgonpho no 3587080982063725 310410214827503 APPLE 607 03/05/20 04:27:45 10:33 6475 6150 nxtgonpho no 3587080982063725 310410214827503 APPLE 608 03/05/20 04:38:18 16:10 6658 5674 nxtgonpho no 3587080982063725 310410214827503 APPLE 609 03/05/20 04:54:28 5:33 6030 5595 nxtgonpho no 3587080982063725 310410214827503 APPLE 610 03/05/20 04:59:22 60:00 16731 9110 ims -1 310410214827503 611 03/05/20 05:00:01 2:05 5221 6075 nxtgonpho no 3587080982063725 310410214827503 APPLE 612 03/05/20 05:00:02 2:06 6075 4933 nxtgonpho no 3587080982063725 310410214827503 APPLE 613 03/05/20 05:02:07 7:01 7430 4955 nxtgonpho no 3587080982063725 310410214827503 APPLE 614 03/05/20 05:09:08 3:15 6866 5015 nxtgonpho no 3587080982063725 310410214827503 APPLE 615 03/05/20 05:12:23 6:13 6080 4953 nxtgonpho no 3587080982063725 310410214827503 APPLE 616 03/05/20 05:18:36 2:04 5281 6083 nxtgonpho no 3587080982063725 310410214827503 APPLE 617 03/05/20 05:18:37 2:04 6083 4993 nxtgonpho no 3587080982063725 310410214827503 APPLE 618 03/05/20 05:20:41 13:47 7603 5112 nxtgonpho no 3587080982063725 310410214827503 APPLE 619 03/05/20 05:34:29 0:29 6231 5060 nxtgonpho no 3587080982063725 310410214827503 APPLE 620 03/05/20 05:34:58 4:52 6806 4955 nxtgonpho no 3587080982063725 310410214827503 APPLE 621 03/05/20 05:39:49 2:06 288 48 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL DRONES DRONES DRONES DRONES DRONES DRONES IDNONE8 DRONES DRONES IDNONE8 IDNONZ8 !DRONES DRONES DRONES !DRONES DRONES DRONES 110MONE8 DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002669 NaTtAti not for general distribution. Page 25 EF-EA_00116745 EFTA01251269 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 41111, AT&T Run Data: Run Tina: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes UP Bytes Apn On IKI IN3I MARL 622 03/05/20 05:39:51 2:05 48 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 623 03/05/20 05:41:56 23:40 6364 5098 nxtgenpho no 3587080982063725 310410214827503 APPLE 624 03/05/20 05:59:22 15:46 0 0 ims -1 310410214827503 625 03/05/20 06:05:35 2:05 5221 6075 nxtgenpho no 3587080982063725 310410214827503 APPLE 626 03/05/20 06:05:36 2:05 6075 4933 nxtgenpho no 3587080982063725 310410214827503 APPLE 627 03/05/20 06:07:41 13:59 7847 5533 nxtgenpho no 3587080982063725 310410214827503 APPLE 628 03/05/20 06:16:28 8:43 0 0 imo -1 310410214827503 629 03/05/20 06:21:40 4:18 6866 5017 nxtgenpho no 3587080982063725 310410214827503 APPLE 630 03/05/20 06:25:58 14:03 7847 5582 nxtgenpho no 3587080982063725 310410214827503 APPLE 631 03/05/20 06:30:52 47:56 23127 9750 imo -1 310410214827503 632 03/05/20 06:40:01 0:54 7546 5108 nxtgenpho no 3587080982063725 310410214827503 APPLE 633 03/05/20 06:40:55 0:44 48 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 634 03/05/20 06:41:38 2:06 288 48nxtgenpho no 3587080982063725 310410214827503 APPLE 635 03/05/20 06:41:40 2:05 48 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 636 03/05/20 06:43:45 12:14 6193 5044 nxtgenpho no 3587080982063725 310410214827503 APPLE 637 03/05/20 06:55:58 2:17 5281 6135 nxtgenpho no 3587080982063725 310410214827503 APPLE 638 03/05/20 06:56:00 2:16 6135 4993 nxtgenpho no 3587080982063725 310410214827503 APPLE 639 03/05/20 06:58:16 22:26 7546 6684 nxtgenpho no 3587080982063725 310410214827503 APPLE 640 03/05/20 07:08:46 1:37 0 0 imo -1 310410214827503 641 03/05/20 07:18:49 60:00 20702 10498 imo -1 310410214827503 642 03/05/20 07:34:11 10:14 8655 5731 nxtgenpho no 3587080982063725 310410214827503 APPLE 643 03/05/20 08:18:49 3:30 0 0 imo -1 310410214827503 644 03/05/20 08:29:56 16:06 8407 6169 imo -1 310410214827503 645 03/05/20 08:49:39 9:48 8187 5998 ims -1 310410214827503 NICOLL IPHOME8 IPHOME8 IPHONZ8 IPHOME8 IPHOME8 IPHONZ8 IPHOME8 IPHONZ8 IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002670 NeTniliAL not for general distribution. Page 26 EFTAJVII6746 EFTA01251270 MOBILITY The information contained heraCtopeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Date: Run Time: Data Usage Tor: Itea Conn. Date 06/17/2020 1S:45:34 Conn. Time (UTC) originating Hunter Tf Bytes Up Bytom Apn Dn INT I IMSI MARL 646 03/05/20 09:06:19 60:00 16685 9202 imp -1 310410214827503 647 03/05/20 10:06:19 16:47 0 0 imp -1 310410214827503 648 03/05/20 10:09:57 19:22 6191 5041 nxtgonpho no 3587080982063725 310410214827503 APPLE 649 03/05/20 10:28:37 60:00 15269 8862 imp -1 310410214827503 650 03/05/20 10:29:19 14:38 5326 6248 nxtgonpho no 3587080982063725 310410214827503 APPLE 651 03/05/20 10:29:20 14:38 6248 5038ruftgonpho no 3587080982063725 310410214827503 APPLE 652 03/05/20 10:43:58 55:27 7625 8243ruftgonpho no 3587080982063725 310410214827503 APPLE 653 03/05/20 11:28:37 18:22 0 0 imp -1 310410214827503 654 03/05/20 11:39:26 60:00 12056 9665 nxtgonpho no 3587080982063725 310410214827503 APPLE 655 03/05/20 11:48:45 4:26 0 0 imp 3587080982063725 310410214827503 APPLE 656 03/05/20 11:53:11 0:00 0 0 imp 3587080982063725 310410214827503 APPLE 657 03/05/20 11:53:11 0:00 0 0 imp 3587080982063725 310410214827503 APPLE 658 03/05/20 12:00:53 60:00 19677 10140 imp -1 310410214827503 659 03/05/20 12:39:26 53:45 36378 21287 nxtgonpho no 3587080982063725 310410214827503 APPLE 660 03/05/20 13:00:53 54:06 19612 10568 imp -1 310410214827503 661 03/05/20 13:22:35 1:24 123162 257851 imp -1 310410214827503 662 03/05/20 13:33:11 0:21 5381 6256 nxtgonpho no 3587080982063725 310410214827503 APPLE 663 03/05/20 13:33:12 0:21 6256 5093ruftgonpho no 3587080982063725 310410214827503 APPLE 664 03/05/20 13:33:33 32:14 9598 8370roftgonpho no 3587080982063725 310410214827503 APPLE 665 03/05/20 13:57:56 7:15 17920 16272 imp 3587080982063725 310410214827503 APPLE 666 03/05/20 14:04:43 0:17 0 24131 imp 3587080982063725 310410214827503 APPLE 667 03/05/20 14:05:11 60:00 15448 4980 imp 3587080982063725 310410214827503 APPLE 668 03/05/20 14:05:46 2:07 5554 9296ruftgonpho no 3587080982063725 310410214827503 APPLE 669 03/05/20 14:05:48 2:06 9296 5266ruftgonpho no 3587080982063725 310410214827503 APPLE 670 03/05/20 14:07:54 35:19 26806 16478ruagonpho no 3587080982063725 310410214827503 APPLE 671 03/05/20 14:43:12 2:07 5222 6075ruagonpho no 3587080982063725 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPMONE8 IPH01428 IPH01428 !PHONES !PHONES !PHONES !PHONES IPMONE8 IPMONE8 IPMONE8 !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 27 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002671 WInfikE not for general distribution. EF-EA_00116747 EFTA01251271 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 16:53:33 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn INC' DWI MARL 672 03/05/20 14:43:13 2:07 6075 4934 natmanpho no 3587080982063725 310410214827503 APPLE 673 03/05/20 14:45:20 9:32 6659 6136 natmanpho no 3587080982063725 310410214827503 APPLE 674 03/05/20 14:54:52 2:02 12120 10092 natmanpho no 3587080982063725 310410214827503 APPLE 675 03/05/20 14:56:54 2:09 5221 6023 natmanpho no 3587080982063725 310410214827503 APPLE 676 03/05/20 14:56:55 2:09 6023 4933 natmanpho no 3587080982063725 310410214827503 APPLE 677 03/05/20 14:59:05 13:21 7223 5581 natmanpho no 3587080982063725 310410214827503 APPLE 678 03/05/20 15:05:11 56:38 38340 20760 ims 3587080982063725 310410214827503 APPLE 679 03/05/20 15:12:25 2:07 5116 6023 natmanpho no 3587080982063725 310410214827503 APPLE 680 03/05/20 15:12:27 2:06 6023 4828 natmanpho no 3587080982063725 310410214827503 APPLE 681 03/05/20 15:14:33 15:06 33334 21642 natmanpho no 3587080982063725 310410214827503 APPLE 682 03/05/20 15:29:38 2:07 5117 6023 natmanpho no 3587080982063725 310410214827503 APPLE 683 03/05/20 15:29:39 2:07 6023 4829 natmanpho no 3587080982063725 310410214827503 APPLE 684 03/05/20 15:31:46 13:19 7667 5217 natmanpho no 3587080982063725 310410214827503 APPLE 685 03/05/20 15:45:05 8:11 5220 6023 natmanpho no 3587080982063725 310410214827503 APPLE 686 03/05/20 15:45:06 8:11 6023 4932 natmanpho no 3587080982063725 310410214827503 APPLE 687 03/05/20 15:49:25 0:22 0 1254 ims 3587080982063725 310410214827503 APPLE 688 03/05/20 15:49:58 0:07 0 1548 ims 3587080982063725 310410214827503 APPLE 689 03/05/20 15:53:17 15:34 12631 10152 natmanpho no 3587080982063725 310410214827503 APPLE 690 03/05/20 16:02:35 60:00 11799 7322 ims -1 310410214827503 691 03/05/20 16:08:50 2:18 5221 6023 natmanpho no 3587080982063725 310410214827503 APPLE 692 03/05/20 16:08:51 2:18 6023 4933 natmanpho no 3587080982063725 310410214827503 APPLE 693 03/05/20 16:11:08 1:25 5221 6075 natmanpho no 3587080982063725 310410214827503 APPLE MOLL IPHONEB IPHONEB !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONEB !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 28 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002672 NeTniliAL not for general distribution. EF-EA_00116748 EFTA01251272 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. tris"" a AT&T Run Date: Run Time: Data usage For: Item cone. Date 06/17/2020 18:55:35 Conn. Time (OTC) originating Number ET Bytes Op Bytes Apn Dn flei INS I teal 694 03/05/20 16:11:09 1:25 6075 4933 nxtgenpho no 3587080982063725 310410214827503 APPLE 695 03/05/20 16:12:34 0:49 12388 5896rumgonpho no 3587080982063725 310410214827503 APPLE 696 03/05/20 16:13:22 14:41 5839 6939rumgonpho no 3587080982063725 310410214827503 APPLE 697 03/05/20 16:13:23 14:41 6939 5551nxtgonpho no 3587080982063725 310410214827503 APPLE 698 03/05/20 16:28:04 1:36 0 0rumgonpho no 3587080982063725 310410214827503 APPLE 699 03/05/20 16:29:39 1:14 5218 6073rumgonpho no 3587080982063725 310410214827503 APPLE 700 03/05/20 16:29:40 1:14 6073 4930mmgonpho no 3587080982063725 310410214827503 APPLE 701 03/05/20 16:30:54 10:00 9273 7536mmgonpho no 3587080982063725 310410214827503 APPLE 702 03/05/20 16:40:53 8:56 12853 8449mmgonpho no 3587080982063725 310410214827503 APPLE 703 03/05/20 16:40:54 8:56 8449 12565mmgonpho no 3587080982063725 310410214827503 APPLE 704 03/05/20 16:49:50 0:05 0 0mmgonpho no 3587080982063725 310410214827503 APPLE 705 03/05/20 16:50:18 23:43 11746 8806mmgonpho no 3587080982063725 310410214827503 APPLE 706 03/05/20 17:02:35 60:00 30884 17448 ims -1 310410214827503 707 03/05/20 17:14:00 0:51 5118 6023 rumgonpho no 3587080982063725 310410214827503 APPLE 708 03/05/20 17:14:02 0:50 6023 4830rumgonpho no 3587080982063725 310410214827503 APPLE 709 03/05/20 17:14:10 0:37 24028 73435 imam -1 310410214827503 710 03/05/20 17:14:52 9:12 39449 28212rumgonpho no 3587080982063725 310410214827503 APPLE 711 03/05/20 17:15:25 0:08 3465 13132 imam -1 310410214827503 712 03/05/20 17:24:04 6:01 14748 12013rumgonpho no 3587080982063725 310410214827503 APPLE 713 03/05/20 17:30:04 2:10 8275 9000rumgonpho no 3587080982063725 310410214827503 APPLE 714 03/05/20 17:30:06 2:09 9000 7891rumgonpho no 3587080982063725 310410214827503 APPLE 715 03/05/20 17:32:15 48:36 34297 24332rumgonpho no 3587080982063725 310410214827503 APPLE NICOLL IPH0NZ8 IPHONEB !PHONES !PHONES IPH0ME8 IPH0ME8 IPH0ME8 IPH0ME8 IPH0ME8 !PHONES !PHONES IPH0ME8 IPH0ME8 IPH0ME8 IPH0ME8 IPH0ME8 !PHONES !PHONES IPH0ME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 29 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002673 NaTtAti not for general distribution. EFTA_OOI 16749 EFTA01251273 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern (ITC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 10:56:16 Item Conn. Conn. Originating ET Bytes Byte. Apn IN= IMSI MARX MOD= Date Time Numbor Up On (UTC) 716 03/05/20 18:02:35 52:23 43408 717 03/05/20 18:20:51 1:46 5318 718 03/05/20 18:20:52 1:46 6071 719 03/05/20 18:22:38 27:23 63753 720 03/05/20 18:27:15 0:24 12736 721 03/05/20 18:28:56 0:24 15889 722 03/05/20 18:42:22 0:24 16574 723 03/05/20 18:50:00 2:09 5113 724 03/05/20 18:50:01 2:09 6073 725 03/05/20 18:52:10 1:34 6020 726 03/05/20 18:53:43 15:50 377833 727 03/05/20 18:53:44 15:50 91974 728 03/05/20 18:54:57 10:21 7160 729 03/05/20 18:54:58 10:21 6746 730 03/05/20 19:02:11 10:31 11538 731 03/05/20 19:05:18 4:15 6316 732 03/05/20 19:05:19 4:15 6646 733 03/05/20 19:09:34 16:58 56922 734 03/05/20 19:09:37 16:55 8904 735 03/05/20 19:26:32 0:41 2654 736 03/05/20 19:26:32 0:41 0 737 03/05/20 19:27:13 0:42 3250 738 03/05/20 19:27:13 0:42 0 739 03/05/20 19:27:55 0:30 0 740 03/05/20 19:27:55 0:30 0 741 03/05/20 19:28:25 21:30 1429910 742 03/05/20 19:28:25 60:00 7788 28432 imp -1 310410214827503 6071 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 4934 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 41374 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 49564 ins -1 310410214827503 46520 ins -1 310410214827503 44337 imp -1 310410214827503 6073 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 4825 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 4941 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 92026 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 379105 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 6814 imp 3587080982063725 310410214827503 APPLE !PHONES 7004 imp 3587080982063725 310410214827503 APPLE !PHONES 6746 imp -1 310410214827503 6646 ins 3587080982063725 310410214827503 APPLE !PHONES 5964 imp 3587080982063725 310410214827503 APPLE !PHONES 89719 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 7985 imp 3587080982063725 310410214827503 APPLE !PHONES 4560 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 0 imp 3587080982063725 310410214827503 APPLE !PHONES 7682 nxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no 0 imp 3587080982063725 310410214827503 APPLE !PHONES Onxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 0 imp 3587080982063725 310410214827503 APPLE !PROMS 18614505 nxtgonpho 3587080982063725 310410214827503 APPLE !PROMS no 4128 imp 3587080982063725 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 30 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002674 NeTniliAL not for general distribution. EFTA_00I 16750 EFTA01251274 MOBILITY The information contained horeOiNyFtit 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ....., `•—•°"" e0•AT&T Run Data: Run Time: Data Osage For: 06/17/2020 Itea Conn. Conn. Data Time (OTC) Originating Number ET Bytes Byte. Apn Up Dn INSI taltE NICOLL 743 03/05/20 19:49:55 32:08 1214122 3567455 nxtgonpho no 3587080982063725 310410214827503 744 03/05/20 20:22:03 5:52 351921 19649061 nxtgonpho no 3587080982063725 310410214827503 745 03/05/20 20:27:55 35:39 1936311 18204765 nxtgonpho no 3587080982063725 310410214827503 746 03/05/20 20:28:25 60:00 23956 16172 imp 3587080982063725 310410214827503 747 03/05/20 20:38:36 9:14 1550472 1193028 imp 3587080982063725 310410214827503 748 03/05/20 20:51:31 0:04 2449 10497 imp 3587080982063725 310410214827503 749 03/05/20 21:03:34 20:51 824545 926983 nxtgonpho no 3587080982063725 310410214827503 750 03/05/20 21:24:25 9:16 676408 792894 nxtgonpho no 3587080982063725 310410214827503 751 03/05/20 21:28:25 5:16 0 0 imp 3587080982063725 310410214827503 752 03/05/20 21:33:41 0:50 0 Oruftgonpho no 3587080982063725 310410214827503 753 03/05/20 21:33:41 0:50 0 0 imp 3587080982063725 310410214827503 754 03/05/20 21:34:31 1:02 0 Oruftgonpho no 3587080982063725 310410214827503 755 03/05/20 21:34:31 1:02 0 0 imp 3587080982063725 310410214827503 756 03/05/20 21:35:33 1:43 0 Oruftgonpho no 3587080982063725 310410214827503 757 03/05/20 21:35:33 1:43 0 0 imp 3587080982063725 310410214827503 758 03/05/20 21:37:16 8:54 22653 43544 nxtgonpho no 3587080982063725 310410214827503 759 03/05/20 21:37:16 8:54 0 0 imp 3587080982063725 310410214827503 760 03/05/20 21:46:09 3:53 21998 14343 nxtgonpho no 3587080982063725 310410214827503 761 03/05/20 21:46:10 3:52 6246 6668 imp 3587080982063725 310410214827503 762 03/05/20 21:46:10 3:53 14343 21710 nxtgonpho no 3587080982063725 310410214827503 763 03/05/20 21:46:11 3:52 6668 5982 imp 3587080982063725 310410214827503 764 03/05/20 21:50:03 1:12 13504 14911 nxtgonpho no 3587080982063725 310410214827503 765 03/05/20 21:50:05 1:10 6666 5964 imp 3587080982063725 310410214827503 766 03/05/20 21:51:14 8:20 913741 108412 nxtgonpho no 3587080982063725 310410214827503 767 03/05/20 21:51:16 8:18 6226 6774 imp 3587080982063725 310410214827503 768 03/05/20 21:51:16 8:19 108412 927006 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONZ8 APPLE IPM0NE8 APPLE !PROMS APPLE !PROMS APPLE IPM0NE8 APPLE IPM0NE8 APPLE IPM0NE8 APPLE !PROMS APPLE IPM0NE8 APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE IPM0NE8 APPLE IPM0NE8 APPLE !PROMS APPLE IPM0NE8 APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 31 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002675 WAAL not for general distribution. EF-EA_00116751 EFTA01251275 The information contained her is 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. \-‘6"11. 77S"61# AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Date Conn. Originating 2T Time Humber (UTC) Bytes UP Bytom Apn Dn IKE I ISIS I MAfl NICOLL 769 03/05/20 21:51:17 8:18 6666 5962 ims 3587080982063725 310410214827503 APPLE !PROMS 770 03/05/20 21:59:34 1:24 15373 13467 nxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 771 03/05/20 21:59:35 1:23 6316 6778 ims 3587080982063725 310410214827503 APPLE DRONES 772 03/05/20 21:59:35 1:24 13467 20245 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 773 03/05/20 21:59:37 1:22 6670 5964 ims 3587080982063725 310410214827503 APPLE DRONES 774 03/05/20 22:00:58 5:42 5220 6023 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 775 03/05/20 22:00:59 5:42 6023 4932 nxtgonpho no 3587080982063725 310410214827503 APPLE 1PROME8 776 03/05/20 22:01:03 10:56 8523 6446 vas -1 310410214827503 777 03/05/20 22:04:31 2:09 7114 6846 vas 3587080982063725 310410214827503 APPLE DRONES 778 03/05/20 22:04:32 2:09 6738 6850 vas 3587080982063725 310410214827503 APPLE DRONES 779 03/05/20 22:06:41 0:06 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 780 03/05/20 22:08:13 16:17 20308 20681 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 781 03/05/20 22:08:14 14:56 6262 6782 ims 3587080982063725 310410214827503 APPLE DRONES 782 03/05/20 22:08:14 16:18 20681 39271 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 783 03/05/20 22:08:15 14:56 6674 5998 ims 3587080982063725 310410214827503 APPLE DRONES 784 03/05/20 22:23:11 0:00 0 0 ims 3587080982063725 310410214827503 APPLE DRONES 785 03/05/20 22:23:12 1:18 6263 6674 ims 3587080982063725 310410214827503 APPLE DRONES 786 03/05/20 22:23:13 1:19 6674 5999 ims 3587080982063725 310410214827503 APPLE DRONES 787 03/05/20 22:24:32 5:58 9126 5538 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 788 03/05/20 22:24:34 4:29 8898 8820 ims 3587080982063725 310410214827503 APPLE DRONES 789 03/05/20 22:29:07 1:23 7958 6082 ims 3587080982063725 310410214827503 APPLE DRONES 790 03/05/20 22:30:29 3:34 7691 8133 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 791 03/05/20 22:30:31 3:32 7136 6852 ims 3587080982063725 310410214827503 APPLE DRONES 792 03/05/20 22:30:31 3:33 8133 9592 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 793 03/05/20 22:30:32 3:32 6744 6872 ims 3587080982063725 310410214827503 APPLE DRONES 794 03/05/20 22:33:37 0:33 144 144 ims 3587080982063725 310410214827503 APPLE DRONES 795 03/05/20 22:34:04 15:16 19427 29128 nxtgonpho no 3587080982063725 310410214827503 APPLE 'PHONES 796 03/05/20 22:34:10 1:36 8070 6138 ims 3587080982063725 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 32 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002676 NTifikE not for general distribution. EF-EAJVII6752 EFTA01251276 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 411111, tr "200 .I.I1 AT&T Run Date: Run Timo: Data Osage For: Item Cows. Date 06/17/2020 1A:55:15 Conn. Time (OTC) Originating Number 22 Bytes Up Bytoa Apn Dn INEI IMBI 797 03/05/20 22:34:10 1:36 8006 6138 imp 3587080982063725 310410214827503 798 03/05/20 22:35:46 6:23 3408 1340 imp 3587080982063725 310410214827503 799 03/05/20 22:42:09 7:11 3344 1464 imp 3587080982063725 310410214827503 800 03/05/20 22:42:09 7:11 3280 1464 imp 3587080982063725 310410214827503 801 03/05/20 22:49:20 17:10 7929 6401 nxtgonpho no 3587080982063725 310410214827503 802 03/05/20 22:49:21 17:09 6458 7404 imp 3587080982063725 310410214827503 803 03/05/20 22:49:21 17:10 6401 8586ruftgonpho no 3587080982063725 310410214827503 804 03/05/20 22:49:22 17:09 7404 6214 imp 3587080982063725 310410214827503 805 03/05/20 22:54:28 7:36 16014 11770 imp -1 310410214827503 806 03/05/20 23:06:31 42:29 1120699 1146855ruftgonpho no 3587080982063725 310410214827503 807 03/05/20 23:06:34 42:26 10802 10151 ins 3587080982063725 310410214827503 808 03/05/20 23:48:59 12:42 13580 47470ruftgonpho no 3587080982063725 310410214827503 809 03/05/20 23:49:00 12:42 46210 16744ruftgonpho no 3587080982063725 310410214827503 810 03/05/20 23:49:01 12:40 6248 31006 imp 3587080982063725 310410214827503 811 03/05/20 23:49:02 12:40 6670 6092 imp 3587080982063725 310410214827503 812 03/05/20 23:56:25 60:00 18177 10135 imp -1 310410214827503 813 03/06/20 00:01:42 39:39 13061 11748ruftgonpho no 3587080982063725 310410214827503 814 03/06/20 00:41:22 60:00 14747 12058ruftgonpho no 3587080982063725 310410214827503 815 03/06/20 00:56:25 48:52 7032 2772 imp -1 310410214827503 816 03/06/20 01:41:22 60:00 11245 7612 nxtgonpho no 3587080982063725 310410214827503 817 03/06/20 01:47:30 20:33 10047 6550 ims 3587080982063725 310410214827503 818 03/06/20 02:08:03 0:01 0 0 ims 3587080982063725 310410214827503 819 03/06/20 02:08:03 0:01 0 0 ims 3587080982063725 310410214827503 820 03/06/20 02:08:08 4:01 8573 6344 imp -1 310410214827503 821 03/06/20 02:14:21 21:21 8307 6048 imp -1 310410214827503 822 03/06/20 02:38:29 41:02 16240 8162 imp -1 310410214827503 823 03/06/20 02:41:22 60:00 1322 1155 nxtgonpho no 3587080982063725 310410214827503 824 03/06/20 03:25:05 7:24 0 0 imp -1 310410214827503 825 03/06/20 03:37:25 60:00 16650 9085 imp -1 310410214827503 teat MOLL APPLE !PHONES APPLE !PHONES APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE !PRONGS APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 33 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002677 PsiTn iliAL not for general distribution. EF-EA_00116753 EFTA01251277 The information contained herself:04R 2996479 06/17/2020 MOBILITY `-'s AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm t—ase,0 AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in ''..mmes0/ arc. Run Date: Run Time: Data Usage For: Itea Conn. Date 06/17/2020 18:55:35 Conn. Time (OTC) Originating Number ET Bytes Up Bytom Apn On EMI IMBI MAKE MODEL 826 03/06/20 03:41:22 60:00 49981 10993 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONZ8 827 03/06/20 04:37:25 22:28 4964 1588 ims -1 310410214827503 828 03/06/20 04:41:22 60:00 1433 1513 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 829 03/06/20 05:06:31 30:16 8371 6046 ims -1 310410214827503 830 03/06/20 05:41:22 60:00 1270 1050 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 831 03/06/20 05:45:39 34:57 8373 6162 ims -1 310410214827503 832 03/06/20 06:24:30 5:56 0 0 ims -1 310410214827503 833 03/06/20 06:37:01 60:00 16695 9034 ims -1 310410214827503 834 03/06/20 06:41:22 60:00 1211 735 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 835 03/06/20 07:37:01 13:53 0 0 ims -1 310410214827503 836 03/06/20 07:41:22 60:00 1270 1050 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 837 03/06/20 07:52:58 11:23 8199 5962 ims -1 310410214827503 838 03/06/20 08:07:51 60:00 11735 7554 ims -1 310410214827503 839 03/06/20 08:41:22 60:00 865 525 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 840 03/06/20 09:07:51 13:42 3424 1340 ims -1 310410214827503 841 03/06/20 09:25:04 26:28 8311 6214 ims -1 310410214827503 842 03/06/20 09:41:22 60:00 1038 630 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 843 03/06/20 09:58:33 60:00 11769 7519 ims -1 310410214827503 844 03/06/20 10:41:22 60:00 986 589 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 845 03/06/20 10:58:33 13:38 3532 1324 ims -1 310410214827503 846 03/06/20 11:14:49 60:00 11623 7556 ims -1 310410214827503 847 03/06/20 11:41:22 5:25 510 3082 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 848 03/06/20 11:46:46 1:46 5440 6475 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 849 03/06/20 11:46:47 1:46 6475 5152 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 850 03/06/20 11:48:33 14:26 7666 5214 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 851 03/06/20 12:02:58 12:46 28108 29261 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 34 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002678 NeTniliAL not for general distribution. EFTA_00I16754 EFTA01251278 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111, trad'"s s AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:55:35 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn Tier ISIS I MAKE 852 03/06/20 12:02:59 12:46 29261 27532 nxtgonpho no 3587080982063725 310410214827503 APPLE 853 03/06/20 12:14:49 17:54 5072 1572 ims -1 310410214827503 854 03/06/20 12:15:45 18:55 8345 5919 nxtgonpho no 3587080982063725 310410214827503 APPLE 855 03/06/20 12:34:17 60:00 15887 8782 ims -1 310410214827503 856 03/06/20 12:34:40 2:06 5931 10717 nxtgonpho no 3587080982063725 310410214827503 APPLE 857 03/06/20 12:34:41 2:06 10717 5643 nxtgonpho no 3587080982063725 310410214827503 APPLE 858 03/06/20 12:36:47 60:00 8424 7148 nxtgonpho no 3587080982063725 310410214827503 APPLE 859 03/06/20 13:34:17 33:45 3424 1324 ims -1 310410214827503 860 03/06/20 13:36:47 60:00 2159 5574 nxtgonpho no 3587080982063725 310410214827503 APPLE 861 03/06/20 14:11:36 33:17 11410 7501 ims 3587080982063725 310410214827503 APPLE 862 03/06/20 14:36:47 31:10 11189 6538 nxtgonpho no 3587080982063725 310410214827503 APPLE 863 03/06/20 14:44:53 28:56 20364 11140 ims 3587080982063725 310410214827503 APPLE 864 03/06/20 15:07:56 1:30 5668 7321 nxtgonpho no 3587080982063725 310410214827503 APPLE 865 03/06/20 15:07:57 1:30 7321 5380 nxtgonpho no 3587080982063725 310410214827503 APPLE 866 03/06/20 15:08:13 1:12 183147 212153 ims 3587080982063725 310410214827503 APPLE 867 03/06/20 15:09:27 4:49 7244 5221 nxtgonpho no 3587080982063725 310410214827503 APPLE 868 03/06/20 15:14:15 8:18 5583 6403 nxtgonpho no 3587080982063725 310410214827503 APPIB 869 03/06/20 15:14:16 8:18 6403 5295 nxtgonpho no 3587080982063725 310410214827503 APPLE 870 03/06/20 15:15:16 4:51 8435 6304 ins -1 310410214827503 871 03/06/20 15:22:34 3:06 7244 5269 nxtgonpho no 3587080982063725 310410214827503 APPLE 872 03/06/20 15:22:49 10:49 8203 5938 ims -1 310410214827503 873 03/06/20 15:25:40 4:52 5644 6401 nxtgonpho no 3587080982063725 310410214827503 APPLE 874 03/06/20 15:25:41 4:52 6401 5356 nxtgonpho no 3587080982063725 310410214827503 APPLE 875 03/06/20 15:30:33 28:38 19589 13840 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002679 PsiTa thE not for general distribution. Page 35 EF-EA_00116755 EFTA01251279 MOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 411., ....., ••-is`a.0 AT&T Run Data: Run Tina: Data Osage For: Item Conn. Data 06/17/2020 SIM Conn. Time (OTC) Originating Number Up ET Bytes Bytom Apn Dn IND I INSI 876 03/06/20 15:40:47 4:29 7400 6103 imo 3587080982063725 310410214827503 877 03/06/20 15:45:16 12:01 5072 1572 imo 3587080982063725 310410214827503 878 03/06/20 15:58:22 0:24 8256 7072 imo 3587080982063725 310410214827503 879 03/06/20 15:58:46 60:00 10688 4144 imo 3587080982063725 310410214827503 880 03/06/20 15:59:10 2:07 5236 6256 nxtgenpho no 3587080982063725 310410214827503 881 03/06/20 15:59:11 2:07 6256 4948 nxtgenpho no 3587080982063725 310410214827503 882 03/06/20 16:01:18 44:18 16273 12620 nxtgenpho no 3587080982063725 310410214827503 883 03/06/20 16:45:35 2:10 10586 7639 nxtgenpho no 3587080982063725 310410214827503 884 03/06/20 16:45:36 2:10 7639 10298 nxtgenpho no 3587080982063725 310410214827503 885 03/06/20 16:47:46 60:00 12772 15399 nxtgenpho no 3587080982063725 310410214827503 886 03/06/20 16:58:46 2:08 0 0 ims 3587080982063725 310410214827503 887 03/06/20 17:47:46 24:54 369 1125 nxtgenpho no 3587080982063725 310410214827503 888 03/06/20 18:01:13 3:34 11022 6113 ims -1 310410214827503 889 03/06/20 18:12:39 30:26 36081 41844 nxtgenpho no 3587080982063725 310410214827503 890 03/06/20 18:12:40 30:26 41844 39403 nxtgenpho no 3587080982063725 310410214827503 891 03/06/20 18:12:47 11:23 0 0 ims -1 310410214827503 892 03/06/20 18:23:51 19:14 6426 8082 imo 3587080982063725 310410214827503 893 03/06/20 18:23:52 19:14 8082 6162 imo 3587080982063725 310410214827503 894 03/06/20 18:24:10 60:00 16795 9035 imo -1 310410214827503 895 03/06/20 18:43:06 6:32 9119 5813 nxtgenpho no 3587080982063725 310410214827503 896 03/06/20 18:49:37 4:09 7995 10045 nxtgenpho no 3587080982063725 310410214827503 897 03/06/20 18:49:38 4:10 10045 7611 nxtgenpho no 3587080982063725 310410214827503 898 03/06/20 18:53:48 3:51 15430 12196 nxtgenpho no 3587080982063725 310410214827503 899 03/06/20 18:57:38 8:24 7732 18371 nxtgenpho no 3587080982063725 310410214827503 900 03/06/20 18:57:40 8:23 18371 7444 nxtgenpho no 3587080982063725 310410214827503 MARL NICOLL APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002680 PsiTifikE not for general distribution. Page 36 EF-EA_00116756 EFTA01251280 MOBILITY The information contained heraleoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried Ler records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in 4111. ters„,„01" AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 10:55:35 Item Conn. Conn. Date Time (UTC) Originating ET Bytes Bytes Apn INEI Number Up Dn INS I NAfl NICOLL 901 03/06/20 19:06:03 7:13 8502 6668 nxtgonpho no 3587080982063725 310410214827503 902 03/06/20 19:13:16 1:04 6478 5616 nxtgonpho no 3587080982063725 310410214827503 903 03/06/20 19:14:19 2:09 5117 6075 nxtgonpho no 3587080982063725 310410214827503 904 03/06/20 19:14:20 2:09 6075 4829 nxtgonpho no 3587080982063725 310410214827503 905 03/06/20 19:16:29 35:51 7480 6950 nxtgonpho no 3587080982063725 310410214827503 906 03/06/20 19:24:10 21:10 3424 1340 ims -1 310410214827503 907 03/06/20 19:48:01 31:02 23529 15801 ims 3587080982063725 310410214827503 908 03/06/20 19:52:19 1:11 7184 7637 nxtgonpho no 3587080982063725 310410214827503 909 03/06/20 19:52:20 1:11 7637 6896 nxtgonpho no 3587080982063725 310410214827503 910 03/06/20 19:53:31 4:27 9262 7982 nxtgonpho no 3587080982063725 310410214827503 911 03/06/20 19:57:58 8:17 10717 21377 nxtgonpho no 3587080982063725 310410214827503 912 03/06/20 19:57:59 8:17 21377 10429 nxtgonpho no 3587080982063725 310410214827503 913 03/06/20 20:02:36 0:25 13104 53930 ims -1 310410214827503 914 03/06/20 20:06:16 16:56 14116 29041 nxtgonpho no 3587080982063725 310410214827503 915 03/06/20 20:19:03 0:15 6520 1432 ims 3587080982063725 310410214827503 916 03/06/20 20:19:03 0:15 2920 1432 ims 3587080982063725 310410214827503 917 03/06/20 20:19:18 12:10 3424 1324 ims 3587080982063725 310410214827503 918 03/06/20 20:23:11 24:11 394055 54947 nxtgonpho no 3587080982063725 310410214827503 919 03/06/20 20:23:12 24:11 54947 400921 nxtgonpho no 3587080982063725 310410214827503 920 03/06/20 20:43:57 3:25 6245 6668 ims 3587080982063725 310410214827503 921 03/06/20 20:43:58 3:25 6668 5981 ims 3587080982063725 310410214827503 922 03/06/20 20:47:23 1:05 0 Onatgonpho no 3587080982063725 310410214827503 923 03/06/20 20:47:28 1:00 11916 9299 ims 3587080982063725 310410214827503 924 03/06/20 20:48:27 5:26 192 Onmtgonpho no 3587080982063725 310410214827503 APPLE 110)(0=8 APPLE 110)(0=8 APPLE !PHONES APPLE !PROMS APPLE !PHONES APPLE 'PHONES APPLE !PROMS APPLE !PROMS APPLE 'PHONES APPLE !PROMS APPLE !PROMS APPLE 'PHONES APPLE DRONES APPLE DRONES APPLE !PROMS APPLE !PROMS APPLE DRONES APPLE DRONES APPLE 'PHONES APPLE !PROMS APPLE !PROMS APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 37 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002681 NTAtikE not for general distribution. EF-EA_00116757 EFTA01251281 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Osage Tor: Ilea Conn. Date 06/17/2020 MN= Conn. Originating Time Number moo) ET Byte. UP Byte. Apn on IKE' IMSI MARL MODEL 925 03/06/20 20:48:28 5:25 6572 6657 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 926 03/06/20 20:48:28 5:26 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 927 03/06/20 20:48:29 5:25 6657 6284 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 928 03/06/20 20:48:35 60:00 95655 55560 ims -1 310410214827503 929 03/06/20 20:51:21 1:02 137665 211390 ims -1 310410214827503 930 03/06/20 20:53:54 10:42 6979 5113 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 931 03/06/20 21:03:26 0:13 0 22616 ims -1 310410214827503 932 03/06/20 21:03:56 0:05 0 14202 ims -1 310410214827503 933 03/06/20 21:04:30 0:19 18001 51945 ims -1 310410214827503 934 03/06/20 21:04:35 3:32 5374 9015 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 935 03/06/20 21:04:36 3:32 9015 5086 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 936 03/06/20 21:08:08 1:34 7428 4951 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 937 03/06/20 21:09:30 0:53 98149 136719 ims -1 310410214827503 938 03/06/20 21:09:41 2:20 5116 6023 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 939 03/06/20 21:09:42 2:20 6023 4828 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 940 03/06/20 21:12:01 2:32 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 941 03/06/20 21:12:02 2:31 5222 6075 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 942 03/06/20 21:12:03 2:32 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 943 03/06/20 21:12:03 2:32 6075 4934 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 944 03/06/20 21:14:34 1:26 6212 6824 nxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 945 03/06/20 21:14:35 1:26 6824 5924 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 946 03/06/20 21:16:01 1:08 6400 5239 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 947 03/06/20 21:17:09 20:41 16484 135032 nxtgonpho 3587080982063725 310410214827503 APPLE !PRONGS no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 38 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002682 not for general distribution. EF-EA_00116758 EFTA01251282 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. 411111, AT&T Run Data: Run Tama: Data Usage For: Item Conn. Data 06/17/2020 1S:55:15 Conn. Tina (UTC) Originating Number ET Bytes UP Bytom Apn Dn INEI IMBI MAKE MODEL 948 03/06/20 21:17:10 20:41 135032 16196ruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 949 03/06/20 21:32:33 1:15 142654 181807 ims -1 310410214827503 950 03/06/20 21:37:51 13:04 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 951 03/06/20 21:48:35 20:48 0 108 ims -1 310410214827503 952 03/06/20 21:50:54 7:15 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 953 03/06/20 21:50:55 7:15 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 954 03/06/20 21:58:10 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 955 03/06/20 22:10:04 0:00 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 956 03/06/20 22:13:03 60:00 15339 9716 ims -1 310410214827503 957 03/06/20 22:58:10 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 958 03/06/20 23:13:03 23:49 3532 1448 ims -1 310410214827503 959 03/06/20 23:37:22 0:00 0 0 ims 3587080982063725 310410214827503 APPLE !PHONES 960 03/06/20 23:37:36 12:30 10990 7899 ims -1 310410214827503 961 03/06/20 23:56:38 3:34 12230 6730 ims -1 310410214827503 962 03/06/20 23:58:10 8:40 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 963 03/07/20 00:03:08 0:16 8078 6944 ims 3587080982063725 310410214827503 APPLE !PHONES 964 03/07/20 00:03:24 60:00 12120 4328 ims 3587080982063725 310410214827503 APPLE !PHONES 965 03/07/20 00:06:49 8:17 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 966 03/07/20 00:06:50 8:17 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 967 03/07/20 00:15:07 16:29 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 968 03/07/20 00:31:35 20:57 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 969 03/07/20 00:31:36 20:57 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 970 03/07/20 00:52:34 3:34 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 971 03/07/20 00:56:07 2:06 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 972 03/07/20 00:56:08 2:06 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 39 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002683 not for general distribution. EF-EA_00116759 EFTA01251283 MOBILITY The information contained hereleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ...,,,• ••-s`' AT&T Run Date: Run Time: Data Osage For: Item cone. Date 06/17/2020 18:55:35 Conn. Time (UTC) Originating Number ET Byte. Up Byte. Apn on fun INSI MAKE 973 03/07/20 00:58:14 39:51 0 0 rumgenpho no 3587080982063725 310410214827503 APPLE 974 03/07/20 01:03:24 0:24 0 0 ims 3587080982063725 310410214827503 APPLE 975 03/07/20 01:19:41 4:34 8150 6944 ims 3587080982063725 310410214827503 APPLE 976 03/07/20 01:24:15 8:15 12056 6904 ims 3587080982063725 310410214827503 APPLE 977 03/07/20 01:33:01 0:45 17026 8556 ims -1 310410214827503 978 03/07/20 01:34:01 16:43 9644 6054 ims -1 310410214827503 979 03/07/20 01:38:05 3:37 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 980 03/07/20 01:41:41 3:20 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 981 03/07/20 01:41:42 3:20 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 982 03/07/20 01:45:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 983 03/07/20 01:56:42 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 984 03/07/20 01:56:50 34:11 11647 9620 ims -1 310410214827503 985 03/07/20 02:34:49 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 986 03/07/20 02:35:17 2:31 9694 6126 ims -1 310410214827503 987 03/07/20 02:42:07 60:00 18887 9464 ims -1 310410214827503 988 03/07/20 02:45:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 989 03/07/20 03:42:07 1:22 0 0 ims -1 310410214827503 990 03/07/20 03:45:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 991 03/07/20 03:47:37 3:47 9867 6478 ims -1 310410214827503 992 03/07/20 03:55:04 16:39 8367 6072 ims -1 310410214827503 993 03/07/20 04:13:11 60:00 15051 8988 ims -1 310410214827503 994 03/07/20 04:45:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 995 03/07/20 05:13:11 59:03 6848 2664 ims -1 310410214827503 996 03/07/20 05:45:02 0:02 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 997 03/07/20 05:45:06 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 998 03/07/20 06:16:12 6:17 8203 6000 ims -1 310410214827503 999 03/07/20 06:31:28 60:00 15055 8878 ims -1 310410214827503 !PROMS SPROUTS !PHONES 1PROME8 1PROME8 !PHONES !PHONES 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 40 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGM1100002684 NeTniliAL not for general distribution. EF-EA_00116760 EFTA01251284 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried Ler records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41111, is.. ‘inli.alt sof AT&T Run Date: Run Time: Data Osage for: 06/17/2020 10:55:14 Item Conn. Conn. Dote Time (OTC) 1000 03/07/20 06:45:06 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 1001 03/07/20 07:31:28 24:58 3408 1448 imp -1 310410214827503 1002 03/07/20 07:45:06 60:00 0 Oruftgenpho no 3587080982063725 310410214827503 1003 03/07/20 08:02:56 3:28 8315 6122 imp -1 310410214827503 1004 03/07/20 08:11:04 60:00 16811 9252 imp -1 310410214827503 1005 03/07/20 08:45:06 60:01 0 Onxtgenpho no 3587080982063725 310410214827503 1006 03/07/20 09:11:04 5:47 0 0 imp -1 310410214827503 1007 03/07/20 09:20:15 60:00 18679 10125 men -1 310410214827503 1008 03/07/20 09:45:09 60:00 0 Onxtgenpho no 3587080982063725 310410214827503 1009 03/07/20 10:20:15 37:07 3424 1324 men -1 310410214827503 1010 03/07/20 10:45:09 60:00 0 Onxtgenpho no 3587080982063725 310410214827503 1011 03/07/20 11:05:29 22:12 8311 6104 men -1 310410214827503 1012 03/07/20 11:32:57 0:00 0 0 men 3587080982063725 310410214827503 1013 03/07/20 11:35:38 12:17 8455 6338 men -1 310410214827503 1014 03/07/20 11:45:09 60:00 0 Onxtgenpho no 3587080982063725 310410214827503 1015 03/07/20 11:51:55 56:14 21443 9826 imp -1 310410214827503 1016 03/07/20 12:45:09 60:00 0 Oruftgenpho no 3587080982063725 310410214827503 1017 03/07/20 12:48:09 6:31 8453 6214 imp -1 310410214827503 1018 03/07/20 12:57:22 47:41 13399 7751 imp -1 310410214827503 1019 03/07/20 13:45:09 0:01 0 0 nxtgenpho no 3587080982063725 310410214827503 1020 03/07/20 13:45:12 14:28 0 Oruftgenpho no 3587080982063725 310410214827503 1021 03/07/20 13:47:32 60:00 17165 9495 imp -1 310410214827503 1022 03/07/20 13:59:40 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 1023 03/07/20 14:47:32 38:17 5072 1572 imp -1 310410214827503 1024 03/07/20 14:59:40 12:27 0 0 nxtgenpho no 3587080982063725 310410214827503 1025 03/07/20 15:12:06 8:21 192 Onxtgenpho no 3587080982063725 310410214827503 1026 03/07/20 15:12:08 8:20 0 0 nxtgenpho no 3587080982063725 310410214827503 Originating ET Bytes Bytoa Apn INEI IMBI MAKE MODEL Number Up Dn APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 41 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002685 PsisTfikE not for general distribution. EF-EAJVII6761 EFTA01251285 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ....., ••-s`'0•AT&T Run pato: Run Time: Data Osage for: 06/17/2020 18:55:36 Item Conn. Conn. Date Time (OTC) 1027 03/07/20 15:20:28 57:46 0 0 nxtgonpho no 3587080982063725 310410214827503 1028 03/07/20 15:32:55 0:00 0 0 ins 3587080982063725 310410214827503 1029 03/07/20 15:33:04 16:06 9491 6883 ins -1 310410214827503 1030 03/07/20 15:59:08 16:46 11990 6446 ins -1 310410214827503 1031 03/07/20 16:18:14 0:52 0 Oruftgonpho no 3587080982063725 310410214827503 1032 03/07/20 16:18:18 14:21 8203 5996 ins -1 310410214827503 1033 03/07/20 16:19:05 1:52 192 Oruftgonpho no 3587080982063725 310410214827503 1034 03/07/20 16:19:06 1:52 0 Oruftgonpho no 3587080982063725 310410214827503 1035 03/07/20 16:20:58 2:59 0 Oruftgonpho no 3587080982063725 310410214827503 1036 03/07/20 16:23:56 2:09 192 Oruftgonpho no 3587080982063725 310410214827503 1037 03/07/20 16:23:57 2:09 0 Oruftgonpho no 3587080982063725 310410214827503 1038 03/07/20 16:26:06 23:35 0 Oruftgonpho no 3587080982063725 310410214827503 1039 03/07/20 16:36:56 0:15 7488 5572 ins 3587080982063725 310410214827503 1040 03/07/20 16:37:11 59:00 14696 8116 ins 3587080982063725 310410214827503 1041 03/07/20 16:49:40 8:18 192 Oruftgonpho no 3587080982063725 310410214827503 1042 03/07/20 16:49:42 8:17 0 Oruftgonpho no 3587080982063725 310410214827503 1043 03/07/20 16:57:59 1:02 0 Oruftgonpho no 3587080982063725 310410214827503 1044 03/07/20 16:59:00 2:18 192 Onxtgonpho no 3587080982063725 310410214827503 1045 03/07/20 16:59:01 2:18 0 Onxtgonpho no 3587080982063725 310410214827503 1046 03/07/20 17:01:18 6:06 192 Onxtgonpho no 3587080982063725 310410214827503 1047 03/07/20 17:01:19 6:06 0 Onxtgonpho no 3587080982063725 310410214827503 1048 03/07/20 17:07:25 3:58 0 Onxtgonpho no 3587080982063725 310410214827503 1049 03/07/20 17:11:22 8:26 192 Onxtgonpho no 3587080982063725 310410214827503 Originating ET Bytes Byte. Apn per IMBI MAKE MOLL Number Up Dn APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 42 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002686 Ns not for general distribution. EFTA 00/16762 EFTA01251286 MOBILITY The information contained heraCtoNyFti (Uc) 1050 03/07/20 17:11:23 8:26 0 Onxtgenpho no 3587080982063725 310410214827503 1051 03/07/20 17:19:49 11:27 0 Oruftgenpho no 3587080982063725 310410214827503 1052 03/07/20 17:31:15 0:50 192 Oruftgenpho no 3587080982063725 310410214827503 1053 03/07/20 17:31:17 0:49 0 Oruftgenpho no 3587080982063725 310410214827503 1054 03/07/20 17:32:06 3:19 0 Oruftgenpho no 3587080982063725 310410214827503 1055 03/07/20 17:35:24 2:06 192 Oruftgenpho no 3587080982063725 310410214827503 1056 03/07/20 17:35:25 2:06 0 Oruftgenpho no 3587080982063725 310410214827503 1057 03/07/20 17:35:52 1:38 7318 8814 imp 3587080982063725 310410214827503 1058 03/07/20 17:35:54 1:37 8814 7054 imp 3587080982063725 310410214827503 1059 03/07/20 17:36:11 60:00 45387 23034 imp -1 310410214827503 1060 03/07/20 17:37:31 34:49 0 Oruftgenpho no 3587080982063725 310410214827503 1061 03/07/20 18:12:19 2:41 192 Oruftgenpho no 3587080982063725 310410214827503 1062 03/07/20 18:12:20 2:41 0 Oruftgenpho no 3587080982063725 310410214827503 1063 03/07/20 18:15:01 4:44 192 Oruftgenpho no 3587080982063725 310410214827503 1064 03/07/20 18:15:02 4:44 0 Oruftgenpho no 3587080982063725 310410214827503 1065 03/07/20 18:19:46 7:15 0 Oruftgenpho no 3587080982063725 310410214827503 1066 03/07/20 18:21:16 0:34 61632 26652 imp -1 310410214827503 1067 03/07/20 18:27:00 1:05 192 Oruftgenpho no 3587080982063725 310410214827503 1068 03/07/20 18:27:02 1:04 0 Oruftgenpho no 3587080982063725 310410214827503 1069 03/07/20 18:28:06 13:15 0 Oruftgenpho no 3587080982063725 310410214827503 1070 03/07/20 18:36:11 30:45 13316 7812 imp -1 310410214827503 1071 03/07/20 18:39:44 0:05 0 2318 imp -1 310410214827503 1072 03/07/20 18:41:19 2:07 192 Oruftgenpho no 3587080982063725 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ....,,,• ••--s"" e AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 1S:55:36 Item Conn. Conn. Originating ET Bytes Bytes Apn IKI IMS1 MARL MODEL Date Time Number Up Dn APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 43 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002687 PsiTniliAL not for general distribution. EF-EA_00116763 EFTA01251287 NOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run pato: Run Time: Data Osage for: Item Conn. Date 06/17/2020 18:55:36 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn on ICI INSt ten tarn 1073 03/07/20 18:41:21 2:06 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1074 03/07/20 18:43:27 26:50 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1075 03/07/20 19:10:16 2:07 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1076 03/07/20 19:10:17 2:07 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 1077 03/07/20 19:10:35 1:48 7213 6790 mss 3587080982063725 310410214827503 APPLE !PHONES 1078 03/07/20 19:10:36 1:48 6790 6949 mss 3587080982063725 310410214827503 APPLE !PHONES 1079 03/07/20 19:11:08 15:58 8311 6213 I. -1 310410214827503 1080 03/07/20 19:12:24 4:40 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1081 03/07/20 19:17:03 8:47 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1082 03/07/20 19:17:05 8:46 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1083 03/07/20 19:25:50 2:22 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 1084 03/07/20 19:25:52 2:21 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1085 03/07/20 19:28:12 6:09 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS 1086 03/07/20 19:28:13 6:09 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 1087 03/07/20 19:34:23 0:37 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1088 03/07/20 19:34:29 60:00 19394 10386 mes -1 310410214827503 1089 03/07/20 19:35:00 21:20 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1090 03/07/20 19:35:01 21:20 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPHONEB 1091 03/07/20 19:56:20 2:09 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1092 03/07/20 19:56:21 2:09 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PROMS 1093 03/07/20 19:58:30 1:27 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1094 03/07/20 19:59:57 21:10 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 44 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002688 not for general distribution. EFTA 00116764 EFTA01251288 MOBILITY The information contained hereCtoNels 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ..... ••-s` aa.•AT&T Run Data: Run Time: Data Osage Tor: 06/17/2020 18:55:36 Item Conn. Conn. Date SLAW (OTC) Originating Rumbas LT Bytes Byte. Apn Up Dn ICI IMBI MAfl NICOLL 1095 03/07/20 19:59:58 21:10 0 0 nxtgonpho no 3587080982063725 310410214827503 1096 03/07/20 20:21:07 2:24 192 Ormtganpho no 3587080982063725 310410214827503 1097 03/07/20 20:21:08 2:24 0 Ormtganpho no 3587080982063725 310410214827503 1098 03/07/20 20:23:31 6:07 192 Onatgarapho no 3587080982063725 310410214827503 1099 03/07/20 20:23:33 6:06 0 Onatganpho no 3587080982063725 310410214827503 1100 03/07/20 20:29:39 4:48 0 Onatganpho no 3587080982063725 310410214827503 1101 03/07/20 20:34:26 71:33 192 Onatganpho no 3587080982063725 310410214827503 1102 03/07/20 20:34:27 60:00 0 Ormtganpho no 3587080982063725 310410214827503 1103 03/07/20 20:34:29 3:10 0 0 ins -1 310410214827503 1104 03/07/20 20:43:44 52:50 6354 6668 ins 3587080982063725 310410214827503 1105 03/07/20 20:43:45 52:50 6668 6090 ins 3587080982063725 310410214827503 1106 03/07/20 20:47:45 30:08 14287 8338 ins -1 310410214827503 1107 03/07/20 21:32:01 13:58 7228 6718 ins 3587080982063725 310410214827503 1108 03/07/20 21:32:02 13:58 6718 6964 ins 3587080982063725 310410214827503 1109 03/07/20 21:34:27 11:33 0 0 nxtgenpho no 3587080982063725 310410214827503 1110 03/07/20 21:36:33 4:51 11664 7557 ins -1 310410214827503 1111 03/07/20 21:46:00 3:06 0 Ormtganpho no 3587080982063725 310410214827503 1112 03/07/20 21:49:05 2:10 192 Onatganpho no 3587080982063725 310410214827503 1113 03/07/20 21:49:07 2:09 0 Onatganpho no 3587080982063725 310410214827503 1114 03/07/20 21:49:18 1:57 7112 6720 ins 3587080982063725 310410214827503 1115 03/07/20 21:49:19 1:57 6720 6848 ins 3587080982063725 310410214827503 1116 03/07/20 21:51:16 0:39 0 Onatganpho no 3587080982063725 310410214827503 1117 03/07/20 21:51:18 0:00 0 0 ins 3587080982063725 310410214827503 1118 03/07/20 21:51:54 27:15 192 Onatganpho no 3587080982063725 310410214827503 1119 03/07/20 21:51:55 27:15 0 Onxtganpho no 3587080982063725 310410214827503 APPLE 1PHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PRONGS APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE DRONES APPLE DRONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 45 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002689 PsiTn iliAL not for general distribution. EF-EA_00116765 EFTA01251289 MOBILITY The information contained heraCteNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4111. tt‘"S°as# gO AT&T Run Date: Run Time: Data Osage For: 06/17/2020 MI= Item Conn. Date Conn. Time (OTC) Originating Number ET Bytes Up 1120 03/07/20 21:52:20 26:49 7262 1121 03/07/20 21:52:21 26:49 6746 1122 03/07/20 21:53:58 14:15 10099 1123 03/07/20 22:19:10 2:09 192 1124 03/07/20 22:19:11 2:08 6246 1125 03/07/20 22:19:11 2:09 0 1126 03/07/20 22:19:12 2:08 6672 1127 03/07/20 22:21:20 0:37 0 1128 03/07/20 22:21:21 0:01 0 1129 03/07/20 22:21:29 10:12 11698 1130 03/07/20 22:21:57 21:16 192 1131 03/07/20 22:21:58 21:16 0 1132 03/07/20 22:37:29 5:44 6316 1133 03/07/20 22:37:30 5:44 6670 1134 03/07/20 22:41:47 33:34 15774 1135 03/07/20 22:43:14 0:36 0 1136 03/07/20 22:43:49 15:04 192 1137 03/07/20 22:43:50 15:04 0 1138 03/07/20 22:58:54 27:38 192 1139 03/07/20 22:58:55 27:38 0 1140 03/07/20 23:26:32 34:00 192 1141 03/07/20 23:26:33 34:00 0 1142 03/07/20 23:26:37 33:55 6370 1143 03/07/20 23:26:38 33:55 6674 1144 03/07/20 23:27:04 39:15 42891 1145 03/08/20 00:00:33 5:46 0 1146 03/08/20 00:00:45 0:16 0 Bytes Apn INE' IMEI HAKE MODEL Dn 6854 imo 3587080982063725 310410214827503 APPLE !PHONES 6998 imo 3587080982063725 310410214827503 APPLE !PHONES 6418 imo -1 310410214827503 0 nxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 6672 imo 3587080982063725 310410214827503 APPLE 'PHONES Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 5982 imp 3587080982063725 310410214827503 APPLE !PHONES Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 0 imp 3587080982063725 310410214827503 APPLE 'PHONES 6686 imo -1 310410214827503 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 6778 imp 3587080982063725 310410214827503 APPLE 'PHONES 5964 imp 3587080982063725 310410214827503 APPLE 'PHONES 8758 imo -1 310410214827503 Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no Onxtgonpho 3587080982063725 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063725 310410214827503 APPLE !PHONES no 6674 imp 3587080982063725 310410214827503 APPLE 'PHONES 6106 imp 3587080982063725 310410214827503 APPLE 'PHONES 24018 imo -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE 'PHONES no 55513 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 46 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMJ10002690 NTnilikk not for general distribution. EFTAJVII6766 EFTA01251290 The information contained heraCtoNyFti 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. • trts AT&T Run Date: Run Time: Data Osage for: Item Conn. Date 06/17/2020 Conn. Time (Inc) Originating Number CT Bytes Up Byte. Apn On IME1 IMBI MA= NADEL 1147 03/08/20 15:41:04 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1148 03/08/20 15:41:06 0:17 8148 6924 imp 3587080982063725 310410214827503 APPLE !PHONES 1149 03/08/20 15:41:23 60:00 14740 4576 imp 3587080982063725 310410214827503 APPLE !PHONES 1150 03/08/20 16:41:04 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1151 03/08/20 16:41:23 60:00 10020 3144 imp 3587080982063725 310410214827503 APPLE !PHONES 1152 03/08/20 17:41:04 43:30 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1153 03/08/20 17:41:23 60:00 42980 20732 imp 3587080982063725 310410214827503 APPLE !PHONES 1154 03/08/20 18:09:35 0:06 0 6927 imp 3587080982063725 310410214827503 APPLE !PHONES 1155 03/08/20 18:23:21 0:07 0 7700 imp 3587080982063725 310410214827503 APPLE !PHONES 1156 03/08/20 18:24:33 2:09 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1157 03/08/20 18:24:34 2:09 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1158 03/08/20 18:26:43 14:23 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1159 03/08/20 18:41:06 3:35 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1160 03/08/20 18:41:23 60:00 3408 1432 imp 3587080982063725 310410214827503 APPLE !PHONES 1161 03/08/20 18:44:41 16:06 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1162 03/08/20 18:55:40 0:00 0 0 imp 3587080982063725 310410214827503 APPLE !PHONES 1163 03/08/20 18:55:48 60:00 16793 8983 imp -1 310410214827503 1164 03/08/20 19:00:46 7:34 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1165 03/08/20 19:00:47 7:34 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1166 03/08/20 19:08:21 0:32 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1167 03/08/20 19:08:51 5:10 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1168 03/08/20 19:08:53 5:09 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1169 03/08/20 19:14:02 0:06 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1170 03/08/20 19:14:24 3:41 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 47 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002691 PsisTfikE not for general distribution. EF-EA_00116767 EFTA01251291 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage for: Item Conn. Date 06/17/2020 Conn. Originating LT Time Hurter /OTC) Byte. Op Byte. Apn On INLI INBI teUtt 1171 03/08/20 19:14:25 3:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1172 03/08/20 19:18:06 5:01 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1173 03/08/20 19:18:07 5:01 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1174 03/08/20 19:23:08 13:33 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1175 03/08/20 19:23:09 13:34 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1176 03/08/20 19:36:43 1:33 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1177 03/08/20 19:38:15 2:10 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1178 03/08/20 19:38:17 2:09 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1179 03/08/20 19:40:26 3:26 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1180 03/08/20 19:41:23 60:00 0 0 ims 3587080982063725 310410214827503 APPLE 1181 03/08/20 19:43:52 16:56 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1182 03/08/20 19:43:53 16:56 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1183 03/08/20 19:55:48 60:00 12652 3408 ims -1 310410214827503 1184 03/08/20 20:00:49 16:17 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1185 03/08/20 20:17:06 4:04 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1186 03/08/20 20:17:07 4:04 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1187 03/08/20 20:21:11 0:56 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1188 03/08/20 20:22:06 2:38 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1189 03/08/20 20:22:07 2:38 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1190 03/08/20 20:24:44 6:10 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1191 03/08/20 20:24:46 6:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE SCOTS IPHONZ8 !PROMS !PROMS !PHONES IPHONZ8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are.powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 48 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002692 PsisTiliAL not for general distribution. EF-EA_00116768 EFTA01251292 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time lone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn INEI INBI tun 1192 03/08/20 20:30:55 4:54 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1193 03/08/20 20:35:48 14:11 192 Ormtganpho no 3587080982063725 310410214827503 APPLE 1194 03/08/20 20:35:49 14:11 0 Ormtganpho no 3587080982063725 310410214827503 APPLE 1195 03/08/20 20:41:23 60:00 0 0 imp 3587080982063725 310410214827503 APPLE 1196 03/08/20 20:50:00 12:34 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1197 03/08/20 20:50:01 12:34 0 Ormtganpho no 3587080982063725 310410214827503 APPLE 1198 03/08/20 20:55:48 60:00 10580 4096 imp -1 310410214827503 1199 03/08/20 21:02:34 6:10 192 Ormtganpho no 3587080982063725 310410214827503 APPLE 1200 03/08/20 21:02:35 6:10 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1201 03/08/20 21:08:45 60:00 0 Onatgarapho no 3587080982063725 310410214827503 APPLE 1202 03/08/20 21:41:23 60:00 0 0 imp 3587080982063725 310410214827503 APPLE 1203 03/08/20 21:55:48 60:00 6924 2772 imp -1 310410214827503 1204 03/08/20 22:08:45 0:58 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1205 03/08/20 22:09:43 1:38 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1206 03/08/20 22:11:22 22:21 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1207 03/08/20 22:33:42 2:10 192 Onatganpho no 3587080982063725 310410214827503 APPLE 1208 03/08/20 22:33:43 2:10 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1209 03/08/20 22:35:53 6:31 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1210 03/08/20 22:41:23 18:00 0 0 imp 3587080982063725 310410214827503 APPLE 1211 03/08/20 22:42:23 2:10 192 Onatganpho no 3587080982063725 310410214827503 APPLE 1212 03/08/20 22:42:25 2:09 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1213 03/08/20 22:44:34 4:14 0 Onatganpho no 3587080982063725 310410214827503 APPLE 1214 03/08/20 22:48:47 2:27 192 Onatganpho no 3587080982063725 310410214827503 APPLE NICOLL 1PHONZ8 !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHONE8 !PHONES !PHONES IPHOME8 IPHONE8 !PHONES IPHOME8 IPHONE8 IPHONE8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 49 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002693 N:FroliAL not for general distribution. EFTA_OOI 16769 EFTA01251293 MOBILITY The information contained hereetoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 4111. AT&T Run pato: Run Time: Data Osage For: 06/17/2020 18:53:36 Item Conn. Conn. Date Time (OTC) 1215 03/08/20 22:48:48 1216 03/08/20 22:51:14 1217 03/08/20 22:51:15 1218 03/08/20 22:55:48 1219 03/08/20 23:03:45 1220 03/08/20 23:05:49 1221 03/08/20 23:05:50 1222 03/08/20 23:14:33 1223 03/08/20 23:55:48 1224 03/09/20 00:14:33 1225 03/09/20 00:44:58 1226 03/09/20 00:51:16 1227 03/09/20 00:51:17 1228 03/09/20 00:51:17 1229 03/09/20 00:51:18 1230 03/09/20 00:55:02 1231 03/09/20 00:55:32 1232 03/09/20 00:55:33 1233 03/09/20 00:56:28 1234 03/09/20 01:14:08 1235 03/09/20 01:16:09 1236 03/09/20 01:16:10 1237 03/09/20 01:30:23 1238 03/09/20 01:30:29 1239 03/09/20 01:40:58 Originating Number ET Bytes Bytom Ann IBEX INSI NAfl MODEL Up Dn 2:27 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 12:30 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 12:30 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 60:00 10160 3144 inn -1 310410214827503 2:05 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 8:43 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPRONZ8 8:43 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPRONZ8 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 55:14 51404 17880 inn -1 310410214827503 36:44 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 0:23 0 43856 inn -1 310410214827503 22:51 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 22:51 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 4:16 7160 6810 inn 3587080982063725 310410214827503 APPLE IPRONZ8 4:16 6742 6896 imo 3587080982063725 310410214827503 APPLE IPRONZ8 0:31 756 0 imo -1 310410214827503 18:35 7376 6794 imo 3587080982063725 310410214827503 APPLE IPRONZ8 18:35 6794 7112 inn 3587080982063725 310410214827503 APPLE IPRONZ8 60:00 24207 16162 inn -1 310410214827503 2:02 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 14:18 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 14:18 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 18:53 3007685 3052551 imo -1 310410214827503 10:30 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 18:18 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 50 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002694 NeTniliAL not for general distribution. EFTA_00I 16770 EFTA01251294 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and arc. provided in te.,-. `"Iass.e AT&T Run pato: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn IMBI MARL MODEL 1240 03/09/20 01:40:59 18:18 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONE8 1241 03/09/20 01:56:28 60:00 6940 2896 ins -1 310410214827503 1242 03/09/20 01:59:17 0:54 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPHONE8 1243 03/09/20 02:00:10 5:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1244 03/09/20 02:00:11 5:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1245 03/09/20 02:05:19 8:38 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1246 03/09/20 02:05:20 8:38 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1247 03/09/20 02:13:58 5:51 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1248 03/09/20 02:13:59 5:51 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1249 03/09/20 02:19:50 55:27 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1250 03/09/20 02:56:28 60:00 6848 2788 ins -1 310410214827503 1251 03/09/20 03:15:16 20:00 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1252 03/09/20 03:15:17 59:01 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONE8 1253 03/09/20 03:56:28 60:00 8496 2928 imo -1 310410214827503 1254 03/09/20 04:14:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1255 03/09/20 04:56:28 60:00 16884 6232 ins -1 310410214827503 1256 03/09/20 05:14:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1257 03/09/20 05:56:28 60:00 8496 2928 imo -1 310410214827503 1258 03/09/20 06:14:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1259 03/09/20 06:56:28 60:00 8496 3160 Imo -1 310410214827503 1260 03/09/20 07:14:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1261 03/09/20 07:56:28 60:00 8496 2928 imo -1 310410214827503 1262 03/09/20 08:14:18 0:01 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1263 03/09/20 08:47:44 2:23 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002695 N:FroliAL not for general distribution. Page 51 EF-EA_00116771 EFTA01251295 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .... •--ssi `'a f AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 18:65:36 Conn. Originating LT Time Number (OTC) Bytes Up Bytoa Apn Dn IBEX INBI teat 1264 03/09/20 08:47:46 2:22 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1265 03/09/20 08:50:07 6:02 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1266 03/09/20 08:50:08 6:03 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1267 03/09/20 08:56:10 3:22 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1268 03/09/20 08:56:11 3:22 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1269 03/09/20 08:56:28 60:00 11812 4484 ism -1 310410214827503 1270 03/09/20 08:59:33 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1271 03/09/20 09:56:28 60:00 12044 4552 imp -1 310410214827503 1272 03/09/20 09:59:33 51:11 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1273 03/09/20 10:50:44 10:15 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1274 03/09/20 10:50:45 10:15 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1275 03/09/20 10:56:28 60:00 6832 2680 imp -1 310410214827503 1276 03/09/20 11:01:00 56:23 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1277 03/09/20 11:56:28 60:00 13352 4732 imp -1 310410214827503 1278 03/09/20 11:57:22 2:59 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1279 03/09/20 11:57:23 2:59 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1280 03/09/20 12:00:21 20:57 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1281 03/09/20 12:00:22 20:57 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1282 03/09/20 12:21:18 7:42 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1283 03/09/20 12:21:20 7:41 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1284 03/09/20 12:29:01 13:08 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1285 03/09/20 12:29:02 13:08 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL DRONES DRONES !PROMS DRONES DRONES DRONES DRONES DRONES DRONES !PROMS !PROMS DRONES DRONES DRONES !PROMS DRONES DRONES !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 52 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002696 NeTniiiikE not for general distribution. EFTA 00116772 EFTA01251296 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and (ITC. provided in AT&T Run Data: Run Tame: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number Up ET Bytes Bytes Apn Dn INLI 'NIX Mal 1286 03/09/20 12:42:11 23:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1287 03/09/20 12:56:28 60:00 7064 2804 ims -1 310410214827503 1288 03/09/20 13:05:42 8:24 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1289 03/09/20 13:05:43 8:24 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1290 03/09/20 13:14:07 13:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1291 03/09/20 13:27:48 2:10 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1292 03/09/20 13:27:50 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1293 03/09/20 13:29:59 14:10 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1294 03/09/20 13:44:08 5:25 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1295 03/09/20 13:44:09 5:25 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1296 03/09/20 13:49:34 5:02 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1297 03/09/20 13:54:35 9:50 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1298 03/09/20 13:54:36 9:50 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1299 03/09/20 13:56:28 60:00 23568 10996 ims -1 310410214827503 1300 03/09/20 14:04:25 5:32 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1301 03/09/20 14:04:27 5:31 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1302 03/09/20 14:09:58 9:08 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1303 03/09/20 14:19:05 0:44 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1304 03/09/20 14:19:06 0:44 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1305 03/09/20 14:19:50 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1306 03/09/20 14:52:26 0:10 0 6685 ims -1 310410214827503 1307 03/09/20 14:56:28 60:00 29368 14756 ims -1 310410214827503 MODEL IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002697 NTroleiNE not for general distribution. Page 53 EF-EAJVII6773 EFTA01251297 MOBILITY The information contained her 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, /.....,,,• 14""-ss AT&T Run Dato: Run Time: Data Usage Tor: Itea Conn. Date 06/17/2020 14:63:37 Conn. Originating Cr Time Humber (UTC) Bytes OP Bytom Apn Dn Tarr IH3I ten 1308 03/09/20 15:19:50 52:16 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1309 03/09/20 15:46:20 0:04 0 8568 ins -1 310410214827503 1310 03/09/20 15:56:28 50:29 8820 3468 ins -1 310410214827503 1311 03/09/20 16:37:57 2:26 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1312 03/09/20 16:37:58 2:26 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1313 03/09/20 16:40:24 6:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1314 03/09/20 16:46:46 18:32 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1315 03/09/20 16:46:47 18:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1316 03/09/20 16:46:56 18:22 7240 7554 ins 3587080982063725 310410214827503 APPLE 1317 03/09/20 16:46:57 18:22 7486 6976 ins 3587080982063725 310410214827503 APPLE 1318 03/09/20 17:05:19 14:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1319 03/09/20 17:05:21 7:10 7406 6121 ins 3587080982063725 310410214827503 APPLE 1320 03/09/20 17:12:31 10:30 5180 1696 ins 3587080982063725 310410214827503 APPLE 1321 03/09/20 17:14:37 60:00 16620 9004 ins -1 310410214827503 1322 03/09/20 17:20:00 9:52 288 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1323 03/09/20 17:20:01 9:52 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1324 03/09/20 17:29:53 5:29 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1325 03/09/20 17:29:54 5:29 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1326 03/09/20 17:35:23 3:53 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1327 03/09/20 17:39:15 2:16 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1328 03/09/20 17:39:16 2:16 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1329 03/09/20 17:41:32 15:20 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1330 03/09/20 17:41:33 15:20 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1331 03/09/20 17:56:53 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002698 NTratAL not for general distribution. Page 54 EF-EA_00116774 EFTA01251298 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 411111, AT&T Run Date: Run Time: Data Osage for: Item Conn. Data 06/17/2020 1S:53:37 Conn. Originating ET rime Number (OTC) Bytes OP Bytes, Min Dn INCI INSI MUM 1332 03/09/20 18:14:37 60:00 14340 6952 ims -1 310410214827503 1333 03/09/20 18:49:56 0:04 0 104 ims -1 310410214827503 1334 03/09/20 18:56:53 29:12 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1335 03/09/20 19:14:37 60:00 9960 3144 ims -2 310410214827503 1336 03/09/20 19:26:04 2:09 192 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1337 03/09/20 19:26:05 2:09 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1338 03/09/20 19:28:14 37:51 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1339 03/09/20 20:06:04 2:10 192 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1340 03/09/20 20:06:06 2:09 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1341 03/09/20 20:08:15 0:47 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1342 03/09/20 20:09:01 8:34 192 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1343 03/09/20 20:09:02 8:34 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1344 03/09/20 20:14:37 60:00 8604 3020 ims -2 310410214827503 1345 03/09/20 20:17:36 0:59 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1346 03/09/20 20:18:35 15:42 192 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1347 03/09/20 20:18:36 15:42 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1348 03/09/20 20:34:18 5:53 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1349 03/09/20 20:40:11 3:12 192 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1350 03/09/20 20:40:12 3:12 0 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1351 03/09/20 20:43:24 6:12 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1352 03/09/20 20:49:35 8:31 192 Oruftgenpho no 3587080982063725 310410214827503 APPLE 1353 03/09/20 20:49:36 8:31 0 Oruftgenpho no 3587080982063725 310410214827503 APPLE MOLL IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB !PHONES !PHONES !PHONES IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB !PHONES !PHONES !PHONES IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 55 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002699 NTroliAL not for general distribution. EFTA_00116775 EFTA01251299 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Tame: Data Usage Tor: Item Conn. Date 06/17/2020 14:54:37 Conn. Originating ET Time Number (UTC) Bytes UP Byte. Apn Dn ICI INSI NUM 1354 03/09/20 20:58:07 9:29 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1355 03/09/20 21:07:35 1:02 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1356 03/09/20 21:07:36 1:02 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1357 03/09/20 21:08:38 3:54 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1358 03/09/20 21:12:31 2:56 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1359 03/09/20 21:12:32 2:56 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1360 03/09/20 21:14:37 18:28 3408 1324 ins -1 310410214827503 1361 03/09/20 21:15:28 1:22 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1362 03/09/20 21:16:49 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1363 03/09/20 21:16:50 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1364 03/09/20 21:18:59 10:53 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1365 03/09/20 21:29:52 20:16 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1366 03/09/20 21:29:53 20:15 6244 6740 ins 3587080982063725 310410214827503 APPLE 1367 03/09/20 21:29:53 20:16 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1368 03/09/20 21:29:54 20:15 6672 5980 ins 3587080982063725 310410214827503 APPLE 1369 03/09/20 21:46:37 60:00 18655 9854 ins -1 310410214827503 1370 03/09/20 21:50:09 2:03 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1371 03/09/20 21:52:11 9:24 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1372 03/09/20 21:52:12 9:25 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1373 03/09/20 22:01:37 30:59 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1374 03/09/20 22:32:36 17:41 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1375 03/09/20 22:32:36 17:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1376 03/09/20 22:46:37 46:07 10160 6456 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained hereeNyFtli NICOLL IPHOME8 !PHONES !PHONES !PHONES IPHOME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 SDNY_GM_ 00002700 PsiTifikE not for general distribution. Page 56 EFTA_00116776 EFTA01251300 MOBILITY The information contained hereeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. • AT&T Run Date: Run Time: Data Usage for: Item Conn. Data 06/17/2020 10:54:37 Conn. Originating ET Time Number (OTC) Bytes Up Rytoa Rpn Dn INE1 IMS1 ten 1377 03/09/20 22:50:17 1:16 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1378 03/09/20 22:50:18 1:16 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1379 03/09/20 22:51:34 5:52 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1380 03/09/20 22:57:25 3:58 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1381 03/09/20 22:57:27 3:57 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1382 03/09/20 23:01:24 4:13 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1383 03/09/20 23:05:36 3:35 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1384 03/09/20 23:05:37 3:35 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1385 03/09/20 23:09:12 11:34 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1386 03/09/20 23:20:45 2:21 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1387 03/09/20 23:20:46 2:21 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1388 03/09/20 23:23:07 11:56 0 OruMgonpho no 3587080982063725 310410214827503 APPLE 1389 03/09/20 23:33:05 0:34 840 72 ims 3587080982063725 310410214827503 APPLE 1390 03/09/20 23:33:39 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 1391 03/09/20 23:33:39 0:01 0 0 ims 3587080982063725 310410214827503 APPLE 1392 03/09/20 23:33:43 60:00 18363 9389 ims -1 310410214827503 1393 03/09/20 23:35:02 7:16 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1394 03/09/20 23:35:03 7:16 0 OruMgonpho no 3587080982063725 310410214827503 APPLE 1395 03/09/20 23:42:19 5:00 0 Oructgonpho no 3587080982063725 310410214827503 APPLE 1396 03/09/20 23:47:18 1:15 192 OruMgonpho no 3587080982063725 310410214827503 APPLE 1397 03/09/20 23:47:20 1:14 0 OruMgonpho no 3587080982063725 310410214827503 APPLE 1398 03/09/20 23:48:34 3:06 0 OruMgonpho no 3587080982063725 310410214827503 APPLE MODEL !PROMS !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PROME8 !PHONES !PHONES !PHONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 57 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002701 NTatiadt not for general distribution. EFTA_00116777 EFTA01251301 MOBILITY The information contained heraleOuNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ap. tr""‘ adest AT&T Run pato: Run Time: Data usage For: Item cone. Date 06/17/2020 18:55:37 Conn. Time (UTC) originating Number ET Bytes Up Bytom Apn on INEI INBI tun 1399 03/09/20 23:51:40 5:17 192 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1400 03/09/20 23:51:41 5:17 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1401 03/09/20 23:56:58 8:46 192 0 natgonpho no 3587080982063725 310410214827503 APPLE 1402 03/09/20 23:56:59 8:46 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1403 03/10/20 00:05:45 12:31 192 0 natgonpho no 3587080982063725 310410214827503 APPLE 1404 03/10/20 00:05:46 12:31 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1405 03/10/20 00:18:17 23:13 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1406 03/10/20 00:33:43 60:00 8604 3052 ims -1 310410214827503 1407 03/10/20 00:41:29 8:25 192 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1408 03/10/20 00:41:31 8:24 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1409 03/10/20 00:49:55 17:25 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1410 03/10/20 01:07:20 58:34 192 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1411 03/10/20 01:07:21 58:34 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1412 03/10/20 01:33:43 60:00 9928 3176 ims -1 310410214827503 1413 03/10/20 02:05:55 60:00 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1414 03/10/20 02:33:43 60:00 8496 3160 ims -1 310410214827503 1415 03/10/20 03:05:55 50:07 0 0 ructgonpho no 3587080982063725 310410214827503 APPLE 1416 03/10/20 03:33:43 60:00 8012 2804 ims -1 310410214827503 1417 03/10/20 03:56:02 16:34 192 0 natgonpho no 3587080982063725 310410214827503 APPLE 1418 03/10/20 03:56:03 16:34 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1419 03/10/20 04:12:37 41:56 192 0 natgonpho no 3587080982063725 310410214827503 APPLE 1420 03/10/20 04:12:38 41:56 0 0 natgonpho no 3587080982063725 310410214827503 APPLE 1421 03/10/20 04:33:43 60:00 16636 6232 ins -1 310410214827503 won 11)4(0=8 110)(0=8 !PHONES !PHONES 110)(0=8 !PHONES !PHONES 110)(0=8 110)(0=8 110)(0=8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 110)(0=8 110)(0=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 58 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002702 PsisT fikE not for general distribution. EF-EAJVII6778 EFTA01251302 MOBILITY The information contained her 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes UP Bytom Apn On INEI INSI MAKE 1422 03/10/20 04:54:34 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1423 03/10/20 05:33:43 60:00 8604 3252 imo -1 310410214827503 1424 03/10/20 05:54:34 50:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1425 03/10/20 06:33:43 60:00 6848 2680 imo -1 310410214827503 1426 03/10/20 06:44:57 28:57 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1427 03/10/20 06:44:58 28:57 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1428 03/10/20 07:13:55 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1429 03/10/20 07:33:43 60:00 8496 3052 imo -1 310410214827503 1430 03/10/20 08:13:55 49:45 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1431 03/10/20 08:33:43 60:00 11596 4160 imo -1 310410214827503 1432 03/10/20 09:03:39 2:23 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1433 03/10/20 09:03:40 2:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1434 03/10/20 09:06:03 9:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1435 03/10/20 09:06:04 9:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1436 03/10/20 09:15:12 9:23 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1437 03/10/20 09:15:13 9:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1438 03/10/20 09:24:36 6:46 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1439 03/10/20 09:24:37 6:46 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1440 03/10/20 09:31:23 56:05 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1441 03/10/20 09:33:43 60:00 15092 4908 imo -1 310410214827503 1442 03/10/20 10:27:27 14:56 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1443 03/10/20 10:27:28 14:56 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1444 03/10/20 10:33:43 60:00 9928 3176 imo -1 310410214827503 NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PHONE8 1PHONE8 !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002703 NeTtikE not for general distribution. Page 59 EFTA_00116779 EFTA01251303 MOBILITY The information contained her is 1445 03/10/20 10:42:24 2:10 0 Onxtgonpho no 3587080982063725 310410214827503 1446 03/10/20 10:44:34 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 1447 03/10/20 10:44:34 84:53 192 Onxtgonpho no 3587080982063725 310410214827503 1448 03/10/20 11:33:43 60:00 6956 2680 imp -1 310410214827503 1449 03/10/20 11:44:34 24:54 0 Onxtgonpho no 3587080982063725 310410214827503 1450 03/10/20 12:09:28 34:27 0 Oruftgonpho no 3587080982063725 310410214827503 1451 03/10/20 12:33:43 60:00 9928 3176 imp -1 310410214827503 1452 03/10/20 12:43:54 2:10 192 Oruftgonpho no 3587080982063725 310410214827503 1453 03/10/20 12:43:55 2:10 0 Onxtgonpho no 3587080982063725 310410214827503 1454 03/10/20 12:46:05 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 1455 03/10/20 13:33:43 60:00 8604 3052 imp -1 310410214827503 1456 03/10/20 13:46:05 19:47 0 Oruftgonpho no 3587080982063725 310410214827503 1457 03/10/20 14:05:51 0:40 192 Oruftgonpho no 3587080982063725 310410214827503 1458 03/10/20 14:05:52 0:40 0 Oruftgonpho no 3587080982063725 310410214827503 1459 03/10/20 14:06:32 1:23 0 Oruftgonpho no 3587080982063725 310410214827503 1460 03/10/20 14:07:54 8:25 192 Oruftgonpho no 3587080982063725 310410214827503 1461 03/10/20 14:07:56 8:24 0 Oruftgonpho no 3587080982063725 310410214827503 1462 03/10/20 14:16:20 58:09 0 Oruftgonpho no 3587080982063725 310410214827503 1463 03/10/20 14:33:43 60:00 13912 6092 imp -1 310410214827503 1464 03/10/20 15:14:28 1:16 192 Oruftgonpho no 3587080982063725 310410214827503 1465 03/10/20 15:14:30 1:16 0 Oruftgonpho no 3587080982063725 310410214827503 1466 03/10/20 15:15:46 2:14 0 Oruftgonpho no 3587080982063725 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in /......„,„• 14`'-ss AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Ilea Conn. Conn. Originating ET Bytes Bytoa Apn IKI IMSI MAKE MODEL Date Time Number Up Dn (UTC) APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 60 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002704 PsiTniliAL not for general distribution. EFTA_00116780 EFTA01251304 MOBILITY The information contained heraleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .....,./ `•-s"" s AT&T Run Date: Run Time: Data Osage Tor: Itea Conn. Date 06/17/2020 10:55:37 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn INC1 IMBI MARL MOLL 1467 03/10/20 15:17:59 0:57 192 Onxtgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1468 03/10/20 15:18:00 0:57 0 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1469 03/10/20 15:18:57 4:52 0 Orumgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1470 03/10/20 15:23:48 20:00 192 Orumgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1471 03/10/20 15:23:49 27:14 0 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1472 03/10/20 15:33:43 53:28 16092 5276 imo -1 310410214827503 1473 03/10/20 15:51:03 36:17 0 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1474 03/10/20 16:27:20 1:23 192 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1475 03/10/20 16:27:21 1:22 7232 6864 mos 3587080982063725 310410214827503 APPLE !PHONES 1476 03/10/20 16:27:21 1:23 0 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1477 03/10/20 16:27:22 1:22 6796 6968 mos 3587080982063725 310410214827503 APPLE !PHONES 1478 03/10/20 16:28:35 60:00 18395 12138 mos -1 310410214827503 1479 03/10/20 16:28:44 0:05 0 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1480 03/10/20 16:29:06 1:09 192 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1481 03/10/20 16:29:07 1:09 0 Onamgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1482 03/10/20 16:30:16 7:18 0 Onamgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1483 03/10/20 16:37:33 2:30 192 Onamgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1484 03/10/20 16:37:34 2:31 0 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1485 03/10/20 16:40:04 24:25 192 Orumgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1486 03/10/20 16:40:05 24:25 0 Orumgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1487 03/10/20 17:04:31 0:36 0 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 1488 03/10/20 17:05:06 2:10 192 Orumgenpho no 3587080982063725 310410214827503 APPLE 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 61 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002705 NTifikE not for general distribution. EF-EA_00116781 EFTA01251305 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. 411., AT&T Run Date: Run Tame: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Hunter ET Byte. Up Byte. Apn Dn INLI INBI HAKE 1489 03/10/20 17:05:07 2:10 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1490 03/10/20 17:07:17 6:45 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1491 03/10/20 17:14:01 2:09 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1492 03/10/20 17:14:02 2:09 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1493 03/10/20 17:16:11 1:26 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1494 03/10/20 17:17:36 4:47 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1495 03/10/20 17:17:37 4:47 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1496 03/10/20 17:22:25 2:41 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1497 03/10/20 17:25:06 18:51 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1498 03/10/20 17:28:35 60:00 25256 17492 imo -1 310410214827503 1499 03/10/20 17:41:29 0:04 0 4743 imo -1 310410214827503 1500 03/10/20 17:43:37 0:21 0 40524 imp -1 310410214827503 1501 03/10/20 17:43:57 38:21 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1502 03/10/20 17:43:58 38:21 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1503 03/10/20 18:22:19 2:30 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1504 03/10/20 18:24:49 0:40 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1505 03/10/20 18:24:50 0:40 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1506 03/10/20 18:25:30 4:37 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1507 03/10/20 18:28:35 60:00 16008 10668 imp -1 310410214827503 1508 03/10/20 18:30:06 2:10 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1509 03/10/20 18:30:07 2:10 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1510 03/10/20 18:32:17 5:41 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1511 03/10/20 18:36:19 0:03 0 4743 in -1 310410214827503 MOLL IPHONEB IPHONEB !PHONES !PHONES 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 62 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002706 NeTilikk not for general distribution. EF-EAJVII6782 EFTA01251306 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and (ITC. provided in 41011, AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:66:37 Conn. Originating ET Time Humber (OTC) Bytes Up Byte. Apn Dn INEI IMBI MARL NICOLL 1512 03/10/20 18:37:58 52:57 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1513 03/10/20 18:37:59 52:57 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1514 03/10/20 19:28:35 60:00 13460 4500 imp -1 310410214827503 1515 03/10/20 19:30:56 54:37 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1516 03/10/20 20:25:32 2:14 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1517 03/10/20 20:25:33 2:14 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1518 03/10/20 20:27:47 19:12 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1519 03/10/20 20:28:35 60:00 6924 2788 imp -1 310410214827503 1520 03/10/20 20:46:58 15:19 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1521 03/10/20 20:46:59 15:19 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1522 03/10/20 21:02:18 21:25 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1523 03/10/20 21:23:42 3:11 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1524 03/10/20 21:23:43 3:11 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1525 03/10/20 21:26:53 8:23 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1526 03/10/20 21:26:54 8:23 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1527 03/10/20 21:28:35 60:00 10656 4288 imp -1 310410214827503 1528 03/10/20 21:35:17 1:15 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1529 03/10/20 21:36:32 7:33 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1530 03/10/20 21:44:05 10:19 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1531 03/10/20 21:44:06 10:19 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1532 03/10/20 21:54:25 2:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1533 03/10/20 21:54:26 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002707 not for general distribution. Page 63 EF-EA_00116783 EFTA01251307 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 16:53:37 Conn. Originating ET Time flusher (OTC) Bytes 017 Byte. Apn Dn INEZ IMEI MARL 1534 03/10/20 21:56:35 27:45 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1535 03/10/20 22:24:20 64:28 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1536 03/10/20 22:24:21 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1537 03/10/20 22:28:35 60:00 24512 11828 imo -1 310410214827503 1538 03/10/20 23:20:52 0:01 0 0 imo -1 310410214827503 1539 03/10/20 23:20:55 0:03 0 1356 imo -1 310410214827503 1540 03/10/20 23:24:21 4:28 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1541 03/10/20 23:28:35 60:00 11796 4376 imo -1 310410214827503 1542 03/10/20 23:28:49 47:34 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1543 03/11/20 00:16:23 0:54 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1544 03/11/20 00:17:16 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1545 03/11/20 00:17:17 2:10 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1546 03/11/20 00:19:26 5:58 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1547 03/11/20 00:25:23 5:22 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1548 03/11/20 00:25:24 5:22 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1549 03/11/20 00:28:35 60:00 7048 2912 imo -1 310410214827503 1550 03/11/20 00:30:46 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1551 03/11/20 01:28:35 59:42 8604 3160 imo -1 310410214827503 1552 03/11/20 01:30:46 52:17 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1553 03/11/20 02:24:15 2:47 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1554 03/11/20 02:27:01 70:00 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1555 03/11/20 02:27:02 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1556 03/11/20 02:27:28 15:13 6353 33200 imp 3587080982063725 310410214827503 APPLE 1557 03/11/20 02:27:29 15:13 6672 6089 ims 3587080982063725 310410214827503 APPLE NADEL 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 64 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002708 PsisTfikE not for general distribution. EF-EAJVII6784 EFTA01251308 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. • ••-..„,e "."1.d AT&T Run Date: Run Tama: Data Usage Tor: Item Conn. Data 06/17/2020 10:56:37 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apn Dn INEZ IMISI MARL 1558 03/11/20 02:28:17 60:00 8371 6178 imp -1 310410214827503 1559 03/11/20 02:42:36 60:00 15069 8676 imp -1 310410214827503 1560 03/11/20 03:27:02 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1561 03/11/20 03:28:17 60:00 0 0 imp -1 310410214827503 1562 03/11/20 03:42:36 56:47 13320 5856 imp -1 310410214827503 1563 03/11/20 04:27:02 4:24 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1564 03/11/20 04:28:17 3:12 0 0 imp -1 310410214827503 1565 03/11/20 04:31:26 3:35 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1566 03/11/20 04:31:29 0:00 0 0 imp 3587080982063725 310410214827503 APPLE 1567 03/11/20 04:35:00 7:56 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1568 03/11/20 04:35:01 7:56 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1569 03/11/20 04:39:23 60:00 16467 9128 imp -1 310410214827503 1570 03/11/20 04:42:57 21:02 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1571 03/11/20 05:03:58 8:20 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1572 03/11/20 05:03:59 8:20 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1573 03/11/20 05:12:19 8:19 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1574 03/11/20 05:20:37 21:06 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1575 03/11/20 05:20:38 21:06 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1576 03/11/20 05:39:23 60:00 7032 2756 imp -1 310410214827503 1577 03/11/20 05:41:44 29:04 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1578 03/11/20 06:10:47 2:09 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1579 03/11/20 06:10:49 2:08 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1580 03/11/20 06:12:58 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1581 03/11/20 06:39:23 60:00 6816 2540 imp -1 310410214827503 MODEL !PHONES !PRONGS !PHONES !PHONES IPHONEB !PHONES !PHONES IPHONEB IPHOME8 !PHONES !PHONES IPHOME8 !PHONES !PHONES !PHONES IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 65 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002709 NsToliAL not for general distribution. EF-EA_00116785 EFTA01251309 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Data: Run Tama: Data usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating ',umber Er Ayres Op Bytom Apn on IKI IMBI mon 1582 03/11/20 07:12:58 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1583 03/11/20 07:39:23 60:00 8388 3144 imo -1 310410214827503 1584 03/11/20 08:12:58 33:16 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1585 03/11/20 08:39:23 60:00 6816 2896 imp -1 310410214827503 1586 03/11/20 08:46:13 2:09 192 Onatgonpho no 3587080982063725 310410214827503 APPLE 1587 03/11/20 08:46:14 2:09 0 Onatgonpho no 3587080982063725 310410214827503 APPLE 1588 03/11/20 08:48:23 55:08 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1589 03/11/20 09:39:23 60:00 13524 5520 imp -1 310410214827503 1590 03/11/20 09:43:30 2:09 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1591 03/11/20 09:43:31 2:09 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1592 03/11/20 09:45:40 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1593 03/11/20 10:39:23 60:00 7140 2788 into -1 310410214827503 1594 03/11/20 10:45:40 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1595 03/11/20 11:39:23 44:33 3516 1340 into -1 310410214827503 1596 03/11/20 11:45:40 36:54 0 Onatgonpho no 3587080982063725 310410214827503 APPLE 1597 03/11/20 12:22:33 2:10 192 Onatgonpho no 3587080982063725 310410214827503 APPLE 1598 03/11/20 12:22:34 2:10 0 Onatgonpho no 3587080982063725 310410214827503 APPLE 1599 03/11/20 12:22:38 2:05 6439 8606 into 3587080982063725 310410214827503 APPLE 1600 03/11/20 12:22:39 2:05 8462 6175 into 3587080982063725 310410214827503 APPLE 1601 03/11/20 12:23:56 60:00 16789 9202 into -1 310410214827503 1602 03/11/20 12:24:44 22:13 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1603 03/11/20 12:46:56 8:20 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE 1604 03/11/20 12:46:57 8:20 0 Onatgonpho no 3587080982063725 310410214827503 APPLE 1605 03/11/20 12:55:17 60:00 0 Onatgonpho no 3587080982063725 310410214827503 APPLE !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 TPRONE8 !PHONES !PHONES !PHONES IPHONE8 TPRONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 66 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002710 N:FroliAL not for general distribution. EFTAJVII6786 EFTA01251310 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. ap. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 ISM Conn. Originating LT Time Number (OTC) Bytes UP Bytes Apn Dn INZI INS' MARL 1606 03/11/20 13:23:56 60:00 6956 2988 ins -1 310410214827503 1607 03/11/20 13:55:17 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1608 03/11/20 14:23:56 60:00 6940 2756 ins -1 310410214827503 1609 03/11/20 14:55:17 19:02 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1610 03/11/20 15:14:18 2:01 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1611 03/11/20 15:14:19 2:01 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1612 03/11/20 15:16:20 0:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1613 03/11/20 15:16:51 2:10 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1614 03/11/20 15:16:52 2:10 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1615 03/11/20 15:19:02 32:43 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1616 03/11/20 15:23:56 16:09 3532 1324 ins 3587080982063725 310410214827503 APPLE 1617 03/11/20 15:40:05 0:24 2768 1324 ins 3587080982063725 310410214827503 APPLE 1618 03/11/20 15:40:05 0:24 2704 1324 ins 3587080982063725 310410214827503 APPLE 1619 03/11/20 15:40:29 11:44 4964 1680 ins 3587080982063725 310410214827503 APPLE 1620 03/11/20 15:51:45 2:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1621 03/11/20 15:51:46 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1622 03/11/20 15:52:12 1:05 6370 7972 ins 3587080982063725 310410214827503 APPLE 1623 03/11/20 15:52:13 1:05 7972 6106 ins 3587080982063725 310410214827503 APPLE 1624 03/11/20 15:52:58 0:21 11358 6562 ins -1 310410214827503 1625 03/11/20 15:53:16 0:38 6244 6668 ins 3587080982063725 310410214827503 APPLE 1626 03/11/20 15:53:17 0:38 6668 5980 ins 3587080982063725 310410214827503 APPLE 1627 03/11/20 15:53:46 0:56 8511 6170 ins -1 310410214827503 1628 03/11/20 15:53:55 0:42 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1629 03/11/20 15:54:36 2:10 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1630 03/11/20 15:54:37 2:10 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1631 03/11/20 15:54:40 2:06 6262 6666 imp 3587080982063725 310410214827503 APPLE 1632 03/11/20 15:54:42 2:05 6666 5998 imp 3587080982063725 310410214827503 APPLE NICOLL IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002711 NeTtAdti not for general distribution. Page 67 EF-EA_00116787 EFTA01251311 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tra""is AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:66:37 Conn. Time (UTC) originating Number ET Bytes Up Bytes Apn Dn INEZ IMSI MARL MODEL 1633 03/11/20 15:55:34 60:00 18402 10186 ims -1 310410214827503 1634 03/11/20 15:56:47 23:07 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1635 03/11/20 16:19:54 2:19 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1636 03/11/20 16:19:55 2:20 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1637 03/11/20 16:22:15 31:18 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1638 03/11/20 16:53:32 8:20 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1639 03/11/20 16:53:33 8:21 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPHONEB 1640 03/11/20 16:55:34 60:00 8496 3144 ims -1 310410214827503 1641 03/11/20 17:01:53 7:53 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1642 03/11/20 17:09:46 0:47 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1643 03/11/20 17:10:32 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1644 03/11/20 17:10:33 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1645 03/11/20 17:12:42 30:27 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1646 03/11/20 17:43:08 2:10 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1647 03/11/20 17:43:10 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1648 03/11/20 17:45:19 11:39 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE /PHONES 1649 03/11/20 17:55:34 60:00 8496 3036 ims -1 310410214827503 1650 03/11/20 17:56:58 61:35 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1651 03/11/20 17:56:59 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1652 03/11/20 18:55:34 60:00 8588 3052 ims -1 310410214827503 1653 03/11/20 18:56:59 1:35 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1654 03/11/20 18:58:34 6:44 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002712 not for general distribution. Page 68 EF-EAJVII6788 EFTA01251312 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ....., ••—••• `"Ie0AT&T Run Data: Run Time: Data Osage For: Ilea Conn. Data 06/17/2020 18:55:38 Conn. Time (OTC) originating Sumter ET Bytes Up Byte. Apn On IIBI IMBI MAfl SCOEL 1655 03/11/20 19:05:17 21:01 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1656 03/11/20 19:05:18 21:01 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1657 03/11/20 19:26:19 14:15 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1658 03/11/20 19:40:33 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1659 03/11/20 19:40:34 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE IPROME8 1660 03/11/20 19:42:43 10:04 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1661 03/11/20 19:52:46 2:10 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1662 03/11/20 19:52:48 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1663 03/11/20 19:54:57 27:31 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1664 03/11/20 19:55:34 60:00 7188 2804 ims -1 310410214827503 1665 03/11/20 20:22:27 4:17 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1666 03/11/20 20:22:28 4:17 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1667 03/11/20 20:26:45 31:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1668 03/11/20 20:55:34 60:00 41608 20964 ims -1 310410214827503 1669 03/11/20 20:57:06 0:24 19460 45298 ims -1 310410214827503 1670 03/11/20 20:57:54 5:20 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1671 03/11/20 20:57:55 5:20 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1672 03/11/20 21:03:16 24:05 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1673 03/11/20 21:27:20 2:10 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1674 03/11/20 21:27:21 2:10 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1675 03/11/20 21:29:31 5:23 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE !PHONES 1676 03/11/20 21:34:53 2:45 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 11080=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002713 not for general distribution. Page 69 EFTA_00116789 EFTA01251313 MOBILITY The information contained hereleoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT4T'S records ere stored and provided in (ITC. 4110. t‘ing° era eid AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number TT Bytes Up Bytom Apn On Tier IMBI teUtr MODEL 1677 03/11/20 21:34:54 2:45 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONE8 1678 03/11/20 21:36:21 0:24 16926 44638 ims -1 310410214827503 1679 03/11/20 21:37:38 8:33 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONZ8 1680 03/11/20 21:37:39 8:33 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1681 03/11/20 21:46:12 2:53 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1682 03/11/20 21:48:10 0:24 36612 45576 ims -1 310410214827503 1683 03/11/20 21:49:04 1:41 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONZ8 1684 03/11/20 21:49:05 1:41 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1685 03/11/20 21:50:45 2:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1686 03/11/20 21:50:46 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONE8 1687 03/11/20 21:52:55 4:37 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1688 03/11/20 21:55:34 60:00 23372 11084 ipso -1 310410214827503 1689 03/11/20 21:56:29 0:24 15044 47925 ipso -1 310410214827503 1690 03/11/20 21:57:31 2:32 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONZ8 1691 03/11/20 21:57:32 2:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1692 03/11/20 22:00:04 16:53 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1693 03/11/20 22:16:57 2:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1694 03/11/20 22:16:58 2:09 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE INIONE8 1695 03/11/20 22:19:08 33:25 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1696 03/11/20 22:52:32 8:24 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1697 03/11/20 22:52:33 8:24 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONEB 1698 03/11/20 22:55:34 11:56 0 0 imp -1 310410214827503 1699 03/11/20 23:00:57 1:54 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002714 not for general distribution. Page 70 EF-EA_00116790 EFTA01251314 The information contained heraleeNe 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and arc. provided in 411111i AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 16:55:36 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn On INZI IMaI MARL 1700 03/11/20 23:02:51 14:31 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1701 03/11/20 23:02:52 14:32 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1702 03/11/20 23:03:05 14:17 6204 6742 imo 3587080982063725 310410214827503 APPLE 1703 03/11/20 23:03:06 14:18 6674 5940 ims 3587080982063725 310410214827503 APPLE 1704 03/11/20 23:17:24 10:02 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1705 03/11/20 23:17:29 60:00 16825 9216 imo -1 310410214827503 1706 03/11/20 23:27:25 8:34 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1707 03/11/20 23:27:26 8:34 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1708 03/11/20 23:36:00 40:21 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1709 03/12/20 00:16:20 6:06 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1710 03/12/20 00:16:21 6:06 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1711 03/12/20 00:17:29 9:41 0 0 ims -1 310410214827503 1712 03/12/20 00:22:27 39:48 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1713 03/12/20 00:32:04 0:00 0 0 ims 3587080982063725 310410214827503 APPLE 1714 03/12/20 00:32:10 0:16 6670 5998 ims 3587080982063725 310410214827503 APPLE 1715 03/12/20 00:32:26 3:19 13976 7532 ims 3587080982063725 310410214827503 APPLE 1716 03/12/20 00:35:45 0:32 4276 1696 ims 3587080982063725 310410214827503 APPLE 1717 03/12/20 00:36:17 60:00 12136 4376 ims 3587080982063725 310410214827503 APPLE 1718 03/12/20 01:02:14 14:09 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1719 03/12/20 01:02:15 14:10 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE 1720 03/12/20 01:16:25 20:21 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1721 03/12/20 01:36:17 54:55 8388 3020 ims 3587080982063725 310410214827503 APPLE 1722 03/12/20 01:36:46 14:19 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1723 03/12/20 01:51:04 2:35 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1724 03/12/20 01:51:05 2:35 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE NICOLL INIONE8 110MONE8 110MONE8 DRONES !PHONES /DRONES DRONES DRONES !PHONES !PHONES DRONES DRONES DRONES DRONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES DRONES AT&T Proprietary The AT&T network constahtly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002715 NeTiliAL not for general distribution. Page 71 EF-EA_00116791 EFTA01251315 The information contained heraleeNeli 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ..ze /14`'.o AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 111:65:38 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn INEI IMSI Ma= MODEL 1725 03/12/20 01:53:40 8:44 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHONZ8 1726 03/12/20 01:53:41 8:44 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPHOME8 1727 03/12/20 02:02:25 4:58 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1728 03/12/20 02:07:22 90:00 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1729 03/12/20 02:07:23 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1730 03/12/20 02:31:11 70:00 6226 6646 ins 3587080982063725 310410214827503 APPLE IPROME8 1731 03/12/20 02:31:12 60:00 6646 6070 ins 3587080982063725 310410214827503 APPLE IPROME8 1732 03/12/20 02:33:14 60:00 16043 9169 ins -1 310410214827503 1733 03/12/20 03:07:23 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1734 03/12/20 03:31:12 55:35 0 0 ins 3587080982063725 310410214827503 APPLE IPROME8 1735 03/12/20 03:33:14 60:00 6816 2648 ins -1 310410214827503 1736 03/12/20 04:07:23 19:24 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1737 03/12/20 04:26:46 240:03 192 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1738 03/12/20 04:26:47 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1739 03/12/20 04:33:14 60:00 6816 2788 imp -1 310410214827503 1740 03/12/20 05:26:47 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1741 03/12/20 05:33:14 60:00 8836 3144 imp -1 310410214827503 1742 03/12/20 06:26:47 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1743 03/12/20 06:33:14 60:00 6816 2680 ims -1 310410214827503 1744 03/12/20 07:26:47 60:00 0 Onxtgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1745 03/12/20 07:33:14 60:00 15312 6108 ims -1 310410214827503 1746 03/12/20 08:26:47 0:03 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1747 03/12/20 08:33:14 60:00 6924 2680 ims -1 310410214827503 1748 03/12/20 08:48:31 114:46 192 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPROME8 1749 03/12/20 08:48:32 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 APPLE IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 72 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002716 PsiTifikE not for general distribution. EF-EAJVII6792 EFTA01251316 MOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. tt‘"I°amaii/ AT&T Run Data: Run Time: Data Osage for: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Op Byte. Apn Dn IMEI INSI 1750 03/12/20 09:33:14 60:00 6816 '2680 ims -1 310410214827503 1751 03/12/20 09:48:32 54:46 0 Onxtgonpho no 3587080982063725 310410214827503 1752 03/12/20 10:33:14 60:00 13352 4716 ims -1 310410214827503 1753 03/12/20 10:43:18 55:17 192 Onxtgonpho no 3587080982063725 310410214827503 1754 03/12/20 10:43:19 55:17 0 Onxtgonpho no 3587080982063725 310410214827503 1755 03/12/20 11:33:14 60:00 7048 2696 ims -1 310410214827503 1756 03/12/20 11:38:36 60:00 0 Oruftgonpho no 3587080982063725 310410214827503 1757 03/12/20 12:33:14 46:01 23828 16392 ims -1 310410214827503 1758 03/12/20 12:38:36 10:29 0 Oruftgonpho no 3587080982063725 310410214827503 1759 03/12/20 12:49:04 1:58 192 Oruftgonpho no 3587080982063725 310410214827503 1760 03/12/20 12:49:06 1:57 0 Oruftgonpho no 3587080982063725 310410214827503 1761 03/12/20 12:51:03 4:18 0 Oruftgonpho no 3587080982063725 310410214827503 1762 03/12/20 12:55:20 2:13 192 Onxtgonpho no 3587080982063725 310410214827503 1763 03/12/20 12:55:21 2:13 0 Onxtgonpho no 3587080982063725 310410214827503 1764 03/12/20 12:57:34 5:28 0 Oruftgonpho no 3587080982063725 310410214827503 1765 03/12/20 13:03:01 3:17 192 Onxtgonpho no 3587080982063725 310410214827503 1766 03/12/20 13:03:02 3:17 0 Onxtgonpho no 3587080982063725 310410214827503 1767 03/12/20 13:06:19 0:37 0 Oruftgonpho no 3587080982063725 310410214827503 1768 03/12/20 13:06:55 8:47 192 Oruftgonpho no 3587080982063725 310410214827503 1769 03/12/20 13:06:56 8:48 0 Oruftgonpho no 3587080982063725 310410214827503 1770 03/12/20 13:15:43 2:19 192 Oruftgonpho no 3587080982063725 310410214827503 1771 03/12/20 13:15:44 2:19 0 Oruftgonpho no 3587080982063725 310410214827503 MARL MODEL APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 73 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002717 PsiTniliAL not for general distribution. EF-EAJVII6793 EFTA01251317 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41011, AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Data Time (UTC) Originating ET Bytes Byte. Apn INTI IMBI Han MOTS Number Up On 1772 03/12/20 13:18:03 2:44 0 1773 03/12/20 13:20:16 1:19 19792 1774 03/12/20 13:20:46 1:39 192 1775 03/12/20 13:20:48 1:38 0 1776 03/12/20 13:22:26 2:48 0 1777 03/12/20 13:22:28 2:46 8904 1778 03/12/20 13:25:14 2:09 192 1779 03/12/20 13:25:15 2:08 7096 1780 03/12/20 13:25:15 2:09 0 1781 03/12/20 13:25:16 2:08 6742 1782 03/12/20 13:26:04 60:00 16699 1783 03/12/20 13:27:24 60:00 0 1784 03/12/20 14:26:04 60:00 7188 1785 03/12/20 14:27:24 60:00 0 1786 03/12/20 15:26:04 60:00 24520 1787 03/12/20 15:27:24 60:00 0 1788 03/12/20 16:00:27 7:27 1180538 1789 03/12/20 16:26:04 60:00 7064 1790 03/12/20 16:27:24 60:01 0 1791 03/12/20 17:26:04 60:00 12044 1792 03/12/20 17:27:26 45:17 0 1793 03/12/20 18:08:59 0:00 0 1794 03/12/20 18:09:58 60:00 25799 1795 03/12/20 18:12:16 0:23 30532 1796 03/12/20 18:12:42 8:26 192 1797 03/12/20 18:12:43 8:26 0 0 nxtgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 12737 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no 7088 imp 3587080982063725 310410214827503 APPLE 110)(01428 Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no 6742 ims 3587080982063725 310410214827503 APPLE INIONE8 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 6832 ims 3587080982063725 310410214827503 APPLE INIONE8 9051 ims -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 2896 ims -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 13060 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 1151123 ins -1 310410214827503 2896 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 4672 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no 0 ins 3587080982063725 310410214827503 APPLE INIONE8 15893 ins -1 310410214827503 40404 ins -1 310410214827503 Oruftgonpho 3587080982063725 310410214827503 APPLE INIONE8 no Oruftgonpho 3587080982063725 310410214827503 APPLE 110)(01428 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 74 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002718 NeTtikE not for general distribution. EF-EA_00116794 EFTA01251318 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records are stored and provided in 4111. c•`s-'sad AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 10:55:38 Item Conn. Conn. Date Time (OTC) Originating CT Bytes Bytes Apn INEZ IMSI NIUM MOLL Number Up Dn 1798 03/12/20 18:21:09 55:07 0 0 nxtgonpho no 3587080982063725 310410214827503 1799 03/12/20 18:26:04 55:32 0 0 ims -1 310410214827503 1800 03/12/20 19:09:58 9:30 4856 2712 ims -1 310410214827503 1801 03/12/20 19:16:15 2:10 192 Ormagenpho no 3587080982063725 310410214827503 1802 03/12/20 19:16:16 2:10 0 Onmtgenpho no 3587080982063725 310410214827503 1803 03/12/20 19:18:26 1:37 0 0 nxtgonpho no 3587080982063725 310410214827503 1804 03/12/20 19:20:02 6:01 192 0 nxtgonpho no 3587080982063725 310410214827503 1805 03/12/20 19:20:03 6:00 6352 6648 ims 3587080982063725 310410214827503 1806 03/12/20 19:20:03 6:01 0 0 nxtgonpho no 3587080982063725 310410214827503 1807 03/12/20 19:20:04 6:00 6648 6088 ims 3587080982063725 310410214827503 1808 03/12/20 19:21:36 0:56 15122 11060 ims -1 310410214827503 1809 03/12/20 19:22:44 0:30 13547 10699 ims -1 310410214827503 1810 03/12/20 19:23:30 60:00 44687 29586 ims -1 310410214827503 1811 03/12/20 19:26:04 7:32 0 0 nxtgonpho no 3587080982063725 310410214827503 1812 03/12/20 19:33:35 2:10 192 Ormagenpho no 3587080982063725 310410214827503 1813 03/12/20 19:33:36 2:10 0 Ormagenpho no 3587080982063725 310410214827503 1814 03/12/20 19:34:21 1:15 167363 118968 ims -1 310410214827503 1815 03/12/20 19:35:46 5:54 0 0 nxtgonpho no 3587080982063725 310410214827503 1816 03/12/20 19:39:03 0:14 0 0 ims -1 310410214827503 1817 03/12/20 19:41:40 2:09 192 Onmtgenpho no 3587080982063725 310410214827503 1818 03/12/20 19:41:41 2:09 0 Onmtgenpho no 3587080982063725 310410214827503 1819 03/12/20 19:43:50 1:07 0 Onmtgenpho no 3587080982063725 310410214827503 1820 03/12/20 19:44:56 2:12 192 Ormagenpho no 3587080982063725 310410214827503 1821 03/12/20 19:44:57 2:12 0 Ormagenpho no 3587080982063725 310410214827503 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE IPMONE8 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 75 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002719 NeTniiiikE not for general distribution. EF-EAJVII6795 EFTA01251319 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in (ITC. 411111, AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating TT Time Number (OTC) Bytes Up Byte. Apn Dn IKI IMBI MAfl 1822 03/12/20 19:47:09 2:44 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1823 03/12/20 19:49:32 0:24 51463 45228 ins -1 310410214827503 1824 03/12/20 19:49:52 0:43 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE 1825 03/12/20 19:49:53 0:43 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1826 03/12/20 19:50:36 30:57 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1827 03/12/20 20:21:32 2:09 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1828 03/12/20 20:21:33 2:09 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1829 03/12/20 20:23:30 60:00 7048 3004 ins -1 310410214827503 1830 03/12/20 20:23:42 42:51 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1831 03/12/20 21:06:32 14:44 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1832 03/12/20 21:06:33 14:44 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1833 03/12/20 21:21:17 8:01 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1834 03/12/20 21:23:30 60:00 6924 2788 ins -1 310410214827503 1835 03/12/20 21:29:18 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1836 03/12/20 22:23:30 60:00 13476 4500 ins -1 310410214827503 1837 03/12/20 22:29:18 45:03 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1838 03/12/20 23:14:22 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1839 03/12/20 23:23:30 60:00 10300 3408 imp -1 310410214827503 1840 03/13/20 00:14:22 51:33 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1841 03/13/20 00:23:30 60:00 14864 4872 imp -1 310410214827503 1842 03/13/20 01:05:54 92:25 192 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1843 03/13/20 01:05:55 60:00 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE 1844 03/13/20 01:23:30 60:00 14600 4656 ims -1 310410214827503 1845 03/13/20 02:05:55 32:25 0 0 nxtgenpho no 3587080982063725 310410214827503 APPLE MOLL !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002720 NeTniliAL not for general distribution. Page 76 EFTA_00116796 EFTA01251320 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage Tor: Ilea Conn. Date 06/17/2020 Conn. originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INZI INS' KARL NICOLL 1846 03/13/20 02:23:30 60:00 8820 3252 ins -1 310410214827503 1847 03/13/20 02:38:20 60:00 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE DRONES 1848 03/13/20 02:38:21 60:00 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1849 03/13/20 03:23:30 40:50 12092 6752 ins -1 310410214827503 1850 03/13/20 03:38:21 12:11 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1851 03/13/20 03:50:31 2:55 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1852 03/13/20 03:50:32 2:55 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1853 03/13/20 03:53:27 10:51 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1854 03/13/20 03:53:28 10:51 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1855 03/13/20 04:08:13 34:28 192 0 nxtgonpho no 3587080982063725 310410214827503 APPLE IPMONE8 1856 03/13/20 04:08:14 34:28 0 0 nxtgonpho no 3587080982063725 310410214827503 APPLE !PHONES 1857 03/13/20 04:08:52 0:44 7459 8824 ins 3587080982063725 310410214827503 APPLE !PHONES 1858 03/13/20 04:08:53 0:44 8824 7107 ins 3587080982063725 310410214827503 APPLE IPMONE8 1859 03/13/20 04:09:08 0:01 0 0 ins -1 310410214827503 1860 03/13/20 04:09:21 0:19 6244 6754 in 3587080982063725 310410214827503 APPLE IPMONE8 1861 03/13/20 04:09:22 0:19 6690 5980 in 3587080982063725 310410214827503 APPLE !PHONES 1862 03/13/20 04:09:37 0:03 2565 1210 in -1 310410214827503 1863 03/13/20 04:09:39 0:20 6344 6674 in 3587080982063725 310410214827503 APPLE !PHONES 1864 03/13/20 04:09:40 0:20 6674 6080 in 3587080982063725 310410214827503 APPLE !PHONES 1865 03/13/20 04:09:56 0:04 2565 1212 in -1 310410214827503 1866 03/13/20 04:09:59 0:36 8342 8629 1ms 3587080982063725 310410214827503 APPLE !PHONES 1867 03/13/20 04:10:00 0:36 8629 8078 ime 3587080982063725 310410214827503 APPLE !PHONES 1868 03/13/20 04:10:14 0:01 0 0 ins -1 310410214827503 1869 03/13/20 04:10:19 32:22 7376 6864 imp 3587080982063725 310410214827503 APPLE IPMONE8 1870 03/13/20 04:10:20 32:22 6800 7112 imp 3587080982063725 310410214827503 APPLE IPMONE8 1871 03/13/20 04:10:35 60:00 15405 9050 imp -1 310410214827503 1872 03/13/20 04:42:08 0:35 3412 9535 nxtgonpho no -1 310410214827503 1873 03/13/20 04:42:42 82:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002721 not for general distribution. Page 77 EF-EAJVII6797 EFTA01251321 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 411.1 tr'`s ads AT&T Run Data: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn ICI IMSI MARL MOLL 1874 03/13/20 04:42:43 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1875 03/13/20 05:10:35 60:00 6848 2664 imp -1 310410214827503 1876 03/13/20 05:42:43 22:11 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1877 03/13/20 06:04:53 2:22 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1878 03/13/20 06:04:54 2:22 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1879 03/13/20 06:07:15 6:06 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1880 03/13/20 06:07:17 6:05 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1881 03/13/20 06:10:35 60:00 8372 2912 imp -1 310410214827503 1882 03/13/20 06:13:22 0:47 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1883 03/13/20 06:14:09 18:41 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 1884 03/13/20 06:14:10 18:41 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1885 03/13/20 06:32:51 58:16 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1886 03/13/20 07:10:35 60:00 6956 2788 imo -1 310410214827503 1887 03/13/20 08:10:35 60:00 17084 7312 imo -1 310410214827503 1888 03/13/20 09:10:35 60:00 8496 3036 imo -1 310410214827503 1889 03/13/20 10:10:35 60:00 9912 3176 in -1 310410214827503 1890 03/13/20 11:10:35 60:00 10052 3284 ims -1 310410214827503 1891 03/13/20 12:10:35 60:00 11920 4268 isms -1 310410214827503 1892 03/13/20 12:38:02 9:35 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1893 03/13/20 12:38:03 9:35 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1894 03/13/20 12:47:37 25:08 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1895 03/13/20 12:47:38 25:08 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1896 03/13/20 13:10:35 10:57 0 0 imp -1 310410214827503 1897 03/13/20 13:12:46 2:03 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 78 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002722 NeTniliAL not for general distribution. EF-EA_00116798 EFTA01251322 MOBILITY The information contained hereCoNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in .....al 46.4.."1. s# AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 14:55:38 Item Conn. Conn. Date Time Originating Number ET Bytes Up Byte. Dn Apn IKE I INSI MODEL (UTC) 1898 03/13/20 13:12:47 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 1899 03/13/20 13:14:50 21:25 0 0 nxtgonpho no 3587080982063726 310410214827503 1900 03/13/20 13:21:33 60:00 15267 8752 lee -1 310410214827503 1901 03/13/20 13:36:15 4:11 0 0 nxtgonpho no 3587080982063726 310410214827503 1902 03/13/20 13:40:25 120:00 192 0 nxtgonpho no 3587080982063726 310410214827503 1903 03/13/20 13:40:26 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 1904 03/13/20 14:21:33 60:00 8372 3112 lee -1 310410214827503 1905 03/13/20 14:40:26 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 1906 03/13/20 15:21:33 60:00 8512 3912 lee -1 310410214827503 1907 03/13/20 15:40:26 55:16 0 0 nxtgonpho no 3587080982063726 310410214827503 1908 03/13/20 16:21:33 59:35 18408 11284 lee -1 310410214827503 1909 03/13/20 16:33:05 0:25 42857 50460 lee -1 310410214827503 1910 03/13/20 16:35:42 1:50 0 0 nxtgonpho no 3587080982063726 310410214827503 1911 03/13/20 16:37:31 2:17 192 Onxtgonpho no 3587080982063726 310410214827503 1912 03/13/20 16:37:32 2:17 0 0 nxtgonpho no 3587080982063726 310410214827503 1913 03/13/20 16:39:49 22:25 0 0 nxtgonpho no 3587080982063726 310410214827503 1914 03/13/20 16:54:03 22:47 15237 10960 imo -1 310410214827503 1915 03/13/20 17:02:13 5:32 192 0 nxtgonpho no 3587080982063726 310410214827503 1916 03/13/20 17:02:14 5:32 0 0 nxtgonpho no 3587080982063726 310410214827503 1917 03/13/20 17:07:46 13:19 192 0 nxtgonpho no 3587080982063726 310410214827503 1918 03/13/20 17:07:47 13:19 0 0 nxtgonpho no 3587080982063726 310410214827503 1919 03/13/20 17:17:55 8:43 8193 6048 lee -1 310410214827503 1920 03/13/20 17:21:06 39:09 192 0 nxtgonpho no 3587080982063726 310410214827503 1921 03/13/20 17:21:07 39:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE ITMONE8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 APPLE 110)(0=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002723 NeTnilikk not for general distribution. Page 79 EFTA_00116799 EFTA01251323 MOBILITY The information contained heraleeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and OTC. provided in 411., AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Byte. apn Dn fuzz INS I MAKE 1922 03/13/20 17:21:08 0:00 0 0 imp 3587080982063726 310410214827503 APPLE 1923 03/13/20 17:21:15 39:00 6372 6676 imp 3587080982063726 310410214827503 APPLE 1924 03/13/20 17:21:16 39:00 6676 6108 imp 3587080982063726 310410214827503 APPLE 1925 03/13/20 17:29:41 60:00 25131 14008 imp -1 310410214827503 1926 03/13/20 17:59:27 0:23 14717 40025 imp -1 310410214827503 1927 03/13/20 18:00:17 10:30 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1928 03/13/20 18:10:46 79:05 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1929 03/13/20 18:10:47 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1930 03/13/20 18:29:41 60:00 7156 2988 imp -1 310410214827503 1931 03/13/20 19:10:47 19:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1932 03/13/20 19:29:41 60:00 6816 2756 imp -1 310410214827503 1933 03/13/20 19:29:51 53:02 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1934 03/13/20 19:29:52 53:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1935 03/13/20 20:22:54 8:56 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1936 03/13/20 20:29:41 30:16 3640 1448 imp -1 310410214827503 1937 03/13/20 20:31:49 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1938 03/13/20 20:31:50 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1939 03/13/20 20:33:54 3:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1940 03/13/20 20:37:16 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1941 03/13/20 20:37:17 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1942 03/13/20 20:39:20 5:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1943 03/13/20 20:44:59 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1944 03/13/20 20:45:00 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1945 03/13/20 20:47:04 0:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL INIONE8 INIONE8 INIONE8 DRONES INIONE8 INIONE8 IrMONZ8 IrMONZ8 INIONE8 INIONE8 IrMONZ8 INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002724 PsiTniliAL not for general distribution. Page 80 EF-EA_00116800 EFTA01251324 MOBILITY The information contained here(34E:)upSiyf::tli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ..„,,,• ••-s` a. AT&T Run Data: Run Time: Data Usage For: 06/17/2020 18:55:38 Ilea Conn. Conn. Data Time Originating Rumbas TT Bytes Byte. Min Up Dn INBI teUtt NICOLL (UTC) 1946 03/13/20 20:47:40 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 1947 03/13/20 20:47:41 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 1948 03/13/20 20:49:45 1:18 0 0 nxtgonpho no 3587080982063726 310410214827503 1949 03/13/20 20:51:02 8:51 192 0 nxtgonpho no 3587080982063726 310410214827503 1950 03/13/20 20:51:03 8:51 0 0 nxtgonpho no 3587080982063726 310410214827503 1951 03/13/20 20:51:10 13:44 8373 6106 ins -1 310410214827503 1952 03/13/20 20:59:54 2:10 192 Onxtgonpho no 3587080982063726 310410214827503 1953 03/13/20 20:59:55 2:11 0 Onxtgonpho no 3587080982063726 310410214827503 1954 03/13/20 20:59:56 2:08 7136 6746 ins 3587080982063726 310410214827503 1955 03/13/20 20:59:57 2:09 6746 6872 ins 3587080982063726 310410214827503 1956 03/13/20 21:02:06 3:47 0 0 nxtgonpho no 3587080982063726 310410214827503 1957 03/13/20 21:05:53 5:41 192 0 nxtgonpho no 3587080982063726 310410214827503 1958 03/13/20 21:05:54 5:42 0 0 nxtgonpho no 3587080982063726 310410214827503 1959 03/13/20 21:07:53 2:08 5700 4896 ins -1 310410214827503 1960 03/13/20 21:09:59 1:35 8160 6868 ins 3587080982063726 310410214827503 1961 03/13/20 21:10:00 1:36 6868 7896 Ins 3587080982063726 310410214827503 1962 03/13/20 21:11:36 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 1963 03/13/20 21:12:09 26:51 192 0 nxtgonpho no 3587080982063726 310410214827503 1964 03/13/20 21:12:10 26:51 0 0 nxtgonpho no 3587080982063726 310410214827503 1965 03/13/20 21:17:20 10:53 8073 10078 ins -1 310410214827503 1966 03/13/20 21:24:14 6:02 0 0 ins -1 310410214827503 1967 03/13/20 21:28:12 3:25 14031 10764 ins -1 310410214827503 1968 03/13/20 21:32:41 2:10 7138 6754 ins 3587080982063726 310410214827503 1969 03/13/20 21:32:42 2:10 6754 6874 ins 3587080982063726 310410214827503 1970 03/13/20 21:34:37 1:31 84 288 ins -1 310410214827503 1971 03/13/20 21:34:50 2:14 7116 6744 ins 3587080982063726 310410214827503 1972 03/13/20 21:34:51 2:14 6744 6852 ins 3587080982063726 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 2880=8 APPLE !PHONES APPLE !PHONES APPLE 1880=8 APPLE 1880=8 APPLE 1880=8 APPLE IPHONZ8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1880=8 APPLE 1880=8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 81 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002725 WAAL not for general distribution. EFTA_00116801 EFTA01251325 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in trio` a. AT&T Run Data: Run Time: Data Osage For: 06/17/2020 18:55:38 Item Conn. Conn. Data flea Originating Number Er Bytes Byte. Apn Up Dn (OTC) 1973 03/13/20 21:36:09 0:56 6601 1974 03/13/20 21:37:04 1:56 7234 1975 03/13/20 21:37:05 1:56 6798 1976 03/13/20 21:39:01 1:17 0 1977 03/13/20 21:39:06 1:12 8122 1978 03/13/20 21:40:17 2:04 192 1979 03/13/20 21:40:18 2:03 6056 1980 03/13/20 21:40:18 2:04 0 1981 03/13/20 21:40:19 2:03 6330 1982 03/13/20 21:42:22 0:06 0 1983 03/13/20 21:42:39 0:45 0 1984 03/13/20 21:42:41 0:43 7940 1985 03/13/20 21:43:23 8:15 192 1986 03/13/20 21:43:24 8:14 6202 1987 03/13/20 21:43:24 8:15 0 1988 03/13/20 21:43:25 8:14 6676 1989 03/13/20 21:51:39 12:14 0 1990 03/13/20 21:51:43 12:10 19770 1991 03/13/20 22:03:52 2:10 192 1992 03/13/20 22:03:53 2:09 6225 1993 03/13/20 22:03:53 2:10 0 1994 03/13/20 22:03:54 2:09 6668 1995 03/13/20 22:06:03 6:11 0 1996 03/13/20 22:06:06 6:08 12060 1997 03/13/20 22:12:13 2:16 192 1998 03/13/20 22:12:14 2:15 6228 1999 03/13/20 22:12:14 2:16 0 INZI INSI MARL MODEL 5083 ism -1 310410214827503 6798 ism 3587080982063726 310410214827503 APPLE !PHONES 6970 ins 3587080982063726 310410214827503 APPLE !PHONES 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6924 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6330 ins 3587080982063726 310410214827503 APPLE !PHONES Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5792 imp 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 7712 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6676 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5938 ins 3587080982063726 310410214827503 APPLE !PHONES Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 12004 ins 3587080982063726 310410214827503 APPLE !PHONES Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6776 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5961 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 9324 ins 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no 6774 ins 3587080982063726 310410214827503 APPLE IPRONE8 Oruftgenpho 3587080982063726 310410214827503 APPLE IPRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 82 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002726 Ns not for general distribution. EF-EA_00II6802 EFTA01251326 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, tr: ‘"Ii° maed/ AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn Tier IMBI RAMC MODEL 2000 03/13/20 22:12:16 2:14 6666 1964 imp 3587080982063726 310410214827503 APPLE !PHONES 2001 03/13/20 22:14:30 2:24 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2002 03/13/20 22:14:34 2:20 18586 10968 imp 3587080982063726 310410214827503 APPLE /PHONES 2003 03/13/20 22:16:53 2:04 192 Onatgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2004 03/13/20 22:16:55 2:02 7268 6904 imp 3587080982063726 310410214827503 APPLE /PHONES 2005 03/13/20 22:16:55 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2006 03/13/20 22:16:56 2:02 6796 7004 imp 3587080982063726 310410214827503 APPLE /PHONES 2007 03/13/20 22:18:58 1:09 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2008 03/13/20 22:19:00 1:07 8992 6178 imp 3587080982063726 310410214827503 APPLE /PHONES 2009 03/13/20 22:20:06 5:12 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2010 03/13/20 22:20:07 3:30 7136 6846 imp 3587080982063726 310410214827503 APPLE /PHONES 2011 03/13/20 22:20:07 5:12 0 Onatgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2012 03/13/20 22:20:08 3:30 6738 6872 imp 3587080982063726 310410214827503 APPLE /PHONES 2013 03/13/20 22:23:40 1:38 6242 6670 imp 3587080982063726 310410214827503 APPLE /PHONES 2014 03/13/20 22:23:42 1:37 6670 5978 imp 3587080982063726 310410214827503 APPLE 'PROMS 2015 03/13/20 22:25:19 2:37 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2016 03/13/20 22:25:21 2:35 6676 5999 imp 3587080982063726 310410214827503 APPLE /PHONES 2017 03/13/20 22:27:55 2:07 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2018 03/13/20 22:27:56 2:06 6386 7516 imp 3587080982063726 310410214827503 APPLE /PHONES 2019 03/13/20 22:27:56 2:07 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2020 03/13/20 22:27:58 2:05 7408 6122 imp 3587080982063726 310410214827503 APPLE IPHOME8 2021 03/13/20 22:30:03 0:05 0 Onatgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2022 03/13/20 22:30:19 16:13 0 Onatgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2023 03/13/20 22:30:22 12:57 7408 6122 lam 3587080982063726 310410214827503 APPLE /PHONES 2024 03/13/20 22:43:19 0:12 640 372 lam 3587080982063726 310410214827503 APPLE /PHONES 2025 03/13/20 22:46:31 24:52 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES 2026 03/13/20 22:46:32 24:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE /PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 83 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002727 PIETIAL not for general distribution. EF-EA_00116803 EFTA01251327 NOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 1S:53:39 Conn. Time (UTC) Originating fluster ET Bytes Up Byte. Apn Dn IEI IMEI MARE MODEL 2027 03/13/20 22:46:32 1:30 6244 6670 imo 3587080982063726 310410214827503 APPLE IPHONZ8 2028 03/13/20 22:46:33 1:30 6670 5980 Sins 3587080982063726 310410214827503 APPLE IPHONZ8 2029 03/13/20 22:46:52 11:25 9869 7850 ins -1 310410214827503 2030 03/13/20 22:48:02 23:21 7320 6790 imp 3587080982063726 310410214827503 APPLE IPHONZ8 2031 03/13/20 22:48:03 23:21 6790 7056 imp 3587080982063726 310410214827503 APPLE !PHONES 2032 03/13/20 22:58:17 20:53 12027 6926 imp -1 310410214827503 2033 03/13/20 23:11:24 1:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2034 03/13/20 23:12:28 3:14 192 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 2035 03/13/20 23:12:29 3:14 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2036 03/13/20 23:14:33 0:07 0 0 imp -1 310410214827503 2037 03/13/20 23:15:43 12:51 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2038 03/13/20 23:15:47 5:59 9909 6354 imp -1 310410214827503 2039 03/13/20 23:19:10 60:00 0 0 imp -1 310410214827503 2040 03/13/20 23:21:46 60:00 15283 8910 imp -1 310410214827503 2041 03/13/20 23:28:33 1:36 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2042 03/13/20 23:28:35 1:35 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2043 03/13/20 23:30:10 1:48 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2044 03/13/20 23:31:58 31:47 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2045 03/13/20 23:31:59 31:47 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 2046 03/14/20 00:03:45 8:26 192 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2047 03/14/20 00:03:46 8:26 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2048 03/14/20 00:12:12 3:18 192 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2049 03/14/20 00:12:13 3:18 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 2050 03/14/20 00:15:31 0:59 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 2051 03/14/20 00:16:29 4:05 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONG8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 84 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002728 not for general distribution. EFTA 00116804 EFTA01251328 MOBILITY The information contained hereetlaNyR 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr"a-ssi. AT&T Run pato: Run Time: Data Osage For: Itom Conn. Date 06/17/2020 18:55:39 Conn. Originating Cr Time Number (U2C) Bytes UP Bytoa Apn Dn IND I INSI War MODEL 2052 03/14/20 00:16:30 4:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2053 03/14/20 00:19:10 60:00 0 0 ins -1 310410214827503 2054 03/14/20 00:20:35 0:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2055 03/14/20 00:21:14 15:25 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2056 03/14/20 00:21:15 15:25 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2057 03/14/20 00:21:46 60:00 6816 2648 imp -1 310410214827503 2058 03/14/20 00:36:39 12:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2059 03/14/20 00:36:40 12:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2060 03/14/20 00:49:06 1:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2061 03/14/20 00:50:14 12:34 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2062 03/14/20 00:50:14 12:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2063 03/14/20 01:02:48 1:18 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2064 03/14/20 01:02:50 1:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2065 03/14/20 01:04:06 36:37 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2066 03/14/20 01:04:07 36:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2067 03/14/20 01:19:10 60:00 0 0 imp -1 310410214827503 2068 03/14/20 01:21:46 60:00 7156 2880 imp -1 310410214827503 2069 03/14/20 01:40:44 34:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2070 03/14/20 02:14:44 2:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2071 03/14/20 02:14:46 2:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2072 03/14/20 02:16:54 15:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2073 03/14/20 02:19:10 60:00 0 0 imp -1 310410214827503 2074 03/14/20 02:21:46 60:00 16096 4716 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002729 PsiTnilikk not for general distribution. Page 85 EF-EA_00116805 EFTA01251329 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41011, .....,,,• `•—•st‘' s AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 18:55:39 Conn. Originating ET Time Buster (OTC) Bytes Up Byte. Apn Dn INEI IMBI HARM MODEL 2075 03/14/20 02:32:24 2:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2076 03/14/20 02:32:25 2:32 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2077 03/14/20 02:34:56 6:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2078 03/14/20 02:34:57 6:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2079 03/14/20 02:41:01 11:31 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2080 03/14/20 02:52:32 2:14 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2081 03/14/20 02:52:33 2:14 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2082 03/14/20 02:54:47 28:35 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2083 03/14/20 03:19:10 0:01 0 0 imo -1 310410214827503 2084 03/14/20 03:21:46 60:00 6940 3740 imo -1 310410214827503 2085 03/14/20 03:23:21 8:26 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2086 03/14/20 03:23:22 8:27 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2087 03/14/20 03:31:49 1:43 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2088 03/14/20 03:33:31 2:10 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2089 03/14/20 03:33:32 2:10 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2090 03/14/20 03:35:42 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2091 03/14/20 04:21:46 60:00 11904 4612 imo -1 310410214827503 2092 03/14/20 04:35:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2093 03/14/20 05:21:46 60:00 6924 2648 imo -1 310410214827503 2094 03/14/20 05:35:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2095 03/14/20 06:21:46 60:00 10068 3144 as -1 310410214827503 2096 03/14/20 06:35:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2097 03/14/20 07:21:46 60:00 8388 2896 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 86 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00002730 PsiTniliAL not for general distribution. EFTA_00116806 EFTA01251330 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111i AT&T Run Date: Run Tame: Data Usage For: Item Conn. Date 06/17/2020 1S:53:39 Conn. Time (OTC) Originating Number ET Bytes Up Bytoa Apn Dn IKI IMSI MARL 2098 03/14/20 07:35:42 0:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2099 03/14/20 07:35:45 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2100 03/14/20 08:21:46 60:00 11580 4112 imp -1 310410214827503 2101 03/14/20 08:35:45 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2102 03/14/20 09:21:46 60:00 16496 5124 imp -1 310410214827503 2103 03/14/20 09:35:45 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2104 03/14/20 10:21:46 60:00 8496 2896 imp -1 310410214827503 2105 03/14/20 10:35:45 60:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2106 03/14/20 11:21:46 60:00 6924 2756 imp -1 310410214827503 2107 03/14/20 11:35:47 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2108 03/14/20 12:21:46 21:19 3408 1324 imp -1 310410214827503 2109 03/14/20 12:35:47 2:40 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2110 03/14/20 12:38:26 0:27 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2111 03/14/20 12:38:27 0:27 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2112 03/14/20 12:38:54 1:51 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2113 03/14/20 12:39:01 1:58 8327 7901 imp 3587080982063726 310410214827503 APPLE 2114 03/14/20 12:40:45 1:14 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2115 03/14/20 12:40:59 0:33 5864 2431 imp 3587080982063726 310410214827503 APPLE 2116 03/14/20 12:40:59 0:33 5800 2431 imp 3587080982063726 310410214827503 APPLE 2117 03/14/20 12:41:32 5:59 32741 23233 imp 3587080982063726 310410214827503 APPLE 2118 03/14/20 12:41:58 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2119 03/14/20 12:41:59 2:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2120 03/14/20 12:43:33 0:29 8162 8180 imp 3587080982063726 310410214827503 APPLE 2121 03/14/20 12:43:34 0:29 6872 7898 imp 3587080982063726 310410214827503 APPLE 2122 03/14/20 12:44:04 1:27 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2123 03/14/20 12:44:07 1:24 8138 8664 imp 3587080982063726 310410214827503 APPLE MODEL !PHONES !PRONGS !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 87 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002731 PsiTifiNE not for general distribution. EF-EA_00116807 EFTA01251331 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. ...,,,,f `•-s` a. AT&T Run pato: Run T1mo: Data Osage For: Itea Conn. Date 06/17/2020 18:55:39 Conn. Originating ST Time Number Up (OTC) Sytes Bytes Apn Dn IMLI IMSI MUM MODEL 2124 03/14/20 12:45:31 1:59 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2125 03/14/20 12:45:36 0:34 756 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2126 03/14/20 12:46:10 0:27 172 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2127 03/14/20 12:46:10 0:27 0 0 vas 3587080982063726 310410214827503 APPLE 'PHONES 2128 03/14/20 12:46:37 60:00 8917 6504 was 3587080982063726 310410214827503 APPLE 'PHONES 2129 03/14/20 12:47:29 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2130 03/14/20 12:47:30 2:03 6224 6666 ims 3587080982063726 310410214827503 APPLE 'PHONES 2131 03/14/20 12:47:30 2:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2132 03/14/20 12:47:32 2:02 6666 5960 ims 3587080982063726 310410214827503 APPLE 'PHONES 2133 03/14/20 12:49:34 0:35 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2134 03/14/20 12:49:38 27:19 15352 14059 ims -1 310410214827503 2135 03/14/20 12:50:08 8:34 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2136 03/14/20 12:50:09 8:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2137 03/14/20 12:58:43 55:56 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2138 03/14/20 13:28:54 0:01 0 0 ims -1 310410214827503 2139 03/14/20 13:46:37 13:30 0 0 ims 3587080982063726 310410214827503 APPLE 'PHONES 2140 03/14/20 13:54:38 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2141 03/14/20 13:54:39 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2142 03/14/20 13:54:45 9:09 8607 6380 ims -1 310410214827503 2143 03/14/20 13:56:42 0:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2144 03/14/20 13:57:39 16:49 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2145 03/14/20 13:57:40 16:49 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2146 03/14/20 14:00:06 14:22 6366 6792 ims 3587080982063726 310410214827503 APPLE !PHONES 2147 03/14/20 14:00:07 14:22 6684 6102 ims 3587080982063726 310410214827503 APPLE !PHONES 2148 03/14/20 14:03:54 23:55 14461 10712 ims -1 310410214827503 2149 03/14/20 14:14:29 12:50 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 88 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002732 not for general distribution. EF-EA_00116808 EFTA01251332 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in 4.11, '...„, ‘"I°.11. 00 AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time Origlnatirq Number TT Bytes Bytes Apn Up Dn INLI (UTC) 2150 03/14/20 14:27:18 1:57 192 0 nxtgonpho no 3587080982063726 310410214827503 2151 03/14/20 14:27:19 1:57 0 0 nxtgonpho no 3587080982063726 310410214827503 2152 03/14/20 14:27:48 1:27 6262 6672 imp 3587080982063726 310410214827503 2153 03/14/20 14:27:49 1:27 6672 5998 imp 3587080982063726 310410214827503 2154 03/14/20 14:29:16 31:24 0 0 nxtgonpho no 3587080982063726 310410214827503 2155 03/14/20 14:29:18 10:23 8170 6962 imp 3587080982063726 310410214827503 2156 03/14/20 14:39:41 60:00 3532 1340 imp 3587080982063726 310410214827503 2157 03/14/20 15:00:39 0:35 192 0 nxtgonpho no 3587080982063726 310410214827503 2158 03/14/20 15:00:41 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 2159 03/14/20 15:01:15 0:44 0 0 nxtgonpho no 3587080982063726 310410214827503 2160 03/14/20 15:01:20 0:39 8898 7086 imp 3587080982063726 310410214827503 2161 03/14/20 15:01:59 0:59 192 0 nxtgonpho no 3587080982063726 310410214827503 2162 03/14/20 15:01:59 0:59 7134 6746 imp 3587080982063726 310410214827503 2163 03/14/20 15:02:00 0:59 0 0 nxtgonpho no 3587080982063726 310410214827503 2164 03/14/20 15:02:01 0:58 6746 6870 imp 3587080982063726 310410214827503 2165 03/14/20 15:02:59 2:41 0 0 nxtgonpho no 3587080982063726 310410214827503 2166 03/14/20 15:03:01 0:18 1690 6443 imp 3587080982063726 310410214827503 2167 03/14/20 15:03:19 60:00 33670 22735 imp 3587080982063726 310410214827503 2168 03/14/20 15:05:39 20:24 192 0 nxtgonpho no 3587080982063726 310410214827503 2169 03/14/20 15:05:40 20:24 0 0 nxtgonpho no 3587080982063726 310410214827503 2170 03/14/20 15:26:04 4:38 0 0 nxtgonpho no 3587080982063726 310410214827503 2171 03/14/20 15:30:41 2:26 192 0 nxtgonpho no 3587080982063726 310410214827503 2172 03/14/20 15:30:43 2:25 0 0 nxtgonpho no 3587080982063726 310410214827503 2173 03/14/20 15:33:07 10:00 192 0 nxtgonpho no 3587080982063726 310410214827503 MODAL APPLE ITHOME8 APPLE ITHOME8 APPLE DRONES APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE STRUMS APPLE ITMONZ8 APPLE ITMONZ8 APPLE ITROME8 APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 89 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002733 NeTniiiikE not for general distribution. EFTA_001 16809 EFTA01251333 NOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 411111, `c,s ""ets AT&T Run Date: Run Time: Data Usage for: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytom Apn On ICI INSI MAL 2174 03/14/20 15:33:08 14:57 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2175 03/14/20 15:39:23 0:22 0 30887 ims 3587080982063726 310410214827503 APPLE 2176 03/14/20 15:39:41 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 2177 03/14/20 15:48:05 53:21 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2178 03/14/20 15:48:06 53:21 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2179 03/14/20 16:03:19 60:00 8512 3988 ims 3587080982063726 310410214827503 APPLE 2180 03/14/20 16:39:41 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 2181 03/14/20 16:41:27 64:11 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2182 03/14/20 16:41:28 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2183 03/14/20 17:03:19 60:00 7064 2880 imp 3587080982063726 310410214827503 APPLE 2184 03/14/20 17:39:41 60:00 0 0 imp 3587080982063726 310410214827503 APPLE 2185 03/14/20 17:41:28 4:11 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2186 03/14/20 17:45:39 40:01 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2187 03/14/20 17:45:40 40:01 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2188 03/14/20 18:03:19 60:00 7064 2772 imp 3587080982063726 310410214827503 APPLE 2189 03/14/20 18:25:41 2:43 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2190 03/14/20 18:28:23 8:21 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2191 03/14/20 18:28:24 8:21 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2192 03/14/20 18:36:45 1:40 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2193 03/14/20 18:38:24 108:33 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2194 03/14/20 18:38:25 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2195 03/14/20 18:39:41 2:22 0 0 imp 3587080982063726 310410214827503 APPLE 2196 03/14/20 19:03:19 60:00 17008 6092 imp 3587080982063726 310410214827503 APPLE 2197 03/14/20 19:38:25 48:33 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2198 03/14/20 20:03:19 60:00 44644 28772 imp 3587080982063726 310410214827503 APPLE AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Thesd communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained hereCtoNyFti MODEL !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES SDNY_GM_ 00002734 NTailiAL not for general distribution. Page 90 EF-EA_O0116810 EFTA01251334 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tr‘"le. asssi.O AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:55:39 Conn. Time (UTC) Originating Butter ET Bytes Up Byte. Min Dn IM41 IMSI Ma1Q MODEL 2199 03/14/20 20:26:58 9:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2200 03/14/20 20:35:58 2:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 2201 03/14/20 20:35:59 2:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2202 03/14/20 20:38:03 6:44 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2203 03/14/20 20:44:46 9:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRO1428 2204 03/14/20 20:44:47 9:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2205 03/14/20 20:53:51 0:52 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2206 03/14/20 20:54:42 2:17 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2207 03/14/20 20:54:43 2:17 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2208 03/14/20 20:56:02 0:05 4279 12317 ins 3587080982063726 310410214827503 APPLE !PHONES 2209 03/14/20 20:56:08 0:05 2482 11716 ins 3587080982063726 310410214827503 APPLE DRONES 2210 03/14/20 20:56:15 0:08 4618 14384 ins 3587080982063726 310410214827503 APPLE DRONES 2211 03/14/20 20:56:41 0:04 3092 10606 ins 3587080982063726 310410214827503 APPLE DRONES 2212 03/14/20 20:57:00 0:55 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2213 03/14/20 20:57:55 16:22 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2214 03/14/20 20:57:56 16:23 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2215 03/14/20 21:03:19 39:39 3532 3952 imp 3587080982063726 310410214827503 APPLE !PHONES 2216 03/14/20 21:14:18 163:28 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2217 03/14/20 21:14:19 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2218 03/14/20 21:38:59 22:35 7232 6866 imp 3587080982063726 310410214827503 APPLE DRONES 2219 03/14/20 21:39:00 22:35 6798 6968 imp 3587080982063726 310410214827503 APPLE !PHONES 2220 03/14/20 21:58:06 3:29 8874 10570 imp -1 310410214827503 2221 03/14/20 22:01:34 3:23 7356 6800 imp 3587080982063726 310410214827503 APPLE !PHONES 2222 03/14/20 22:01:35 3:23 6800 7004 imp 3587080982063726 310410214827503 APPLE DRONES 2223 03/14/20 22:04:21 0:37 4618 4712 imp -1 310410214827503 2224 03/14/20 22:04:56 13:03 7474 6796 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 91 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002735 ?e V& not for general distribution. EF-EA_00ll6811 EFTA01251335 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, tr`"Iads. ° AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating Time Buster (UTC) LT Bytes Up Bytes Apn Dn INC' IMISI MARL MOLL 2225 03/14/20 22:04:57 13:03 6796 7210 1ms 3587080982063726 310410214827503 APPLE IPHONZ8 2226 03/14/20 22:08:30 0:39 5686 4904 ims -1 310410214827503 2227 03/14/20 22:11:41 8:46 6261 6676 ims 3587080982063726 310410214827503 APPLE IPHONZ8 2228 03/14/20 22:11:43 8:45 6676 5997 ims 3587080982063726 310410214827503 APPLE IPHONZ8 2229 03/14/20 22:14:19 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2230 03/14/20 22:18:29 4:24 10009 10506 ims -1 310410214827503 2231 03/14/20 22:20:27 31:59 6226 6672 ims 3587080982063726 310410214827503 APPLE !PHONES 2232 03/14/20 22:20:27 32:00 6672 6070 ims 3587080982063726 310410214827503 APPLE !PHONES 2233 03/14/20 22:22:53 32:36 24446 33790 ims -1 310410214827503 2234 03/14/20 22:52:25 65:21 6371 6672 ims 3587080982063726 310410214827503 APPLE !PHONES 2235 03/14/20 22:52:26 60:00 6672 6107 ims 3587080982063726 310410214827503 APPLE !PHONES 2236 03/14/20 22:55:29 60:00 32305 24638 ims -1 310410214827503 2237 03/14/20 23:14:19 43:28 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2238 03/14/20 23:33:09 0:09 0 7031 ims -1 310410214827503 2239 03/14/20 23:52:26 5:21 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2240 03/14/20 23:55:29 35:09 4964 1804 ims -1 310410214827503 2241 03/14/20 23:57:47 0:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 2242 03/14/20 23:58:20 8:13 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 2243 03/14/20 23:58:21 8:13 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2244 03/15/20 00:06:35 4:30 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2245 03/15/20 00:11:04 34:40 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 2246 03/15/20 00:11:05 34:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2247 03/15/20 00:28:17 17:27 6264 6676 ims 3587080982063726 310410214827503 APPLE !PHONES 2248 03/15/20 00:28:18 17:27 6676 6108 ims 3587080982063726 310410214827503 APPLE !PHONES 2249 03/15/20 00:30:39 10:18 9704 6134 ims -1 310410214827503 2250 03/15/20 00:40:57 60:00 22558 16428 ims -1 310410214827503 2251 03/15/20 00:45:44 1:24 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2252 03/15/20 00:45:45 1:24 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Thesb communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 92 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002736 Nei-4AL not for general distribution. EF-EA_00ll6812 EFTA01251336 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:55:40 Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn Dn INLI IMSI NUM MOLL 2253 03/15/20 00:47:09 21:54 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2254 03/15/20 00:47:10 21:54 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2255 03/15/20 01:09:04 0:59 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2256 03/15/20 01:10:02 58:23 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2257 03/15/20 01:10:03 58:23 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2258 03/15/20 01:40:57 60:00 10176 3252 imp -1 310410214827503 2259 03/15/20 02:08:26 6:18 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2260 03/15/20 02:14:44 2:17 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2261 03/15/20 02:14:45 2:17 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2262 03/15/20 02:17:02 6:28 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2263 03/15/20 02:23:29 80:00 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2264 03/15/20 02:23:30 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2265 03/15/20 02:40:57 60:00 7016 2540 imp -1 310410214827503 2266 03/15/20 03:23:30 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2267 03/15/20 03:40:57 60:00 6800 2756 imp -1 310410214827503 2268 03/15/20 04:23:30 60:00 0 Oruftgon0o no 3587080982063726 310410214827503 APPLE !PHONES 2269 03/15/20 04:40:57 60:00 16652 5952 imp -1 310410214827503 2270 03/15/20 05:23:30 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2271 03/15/20 05:40:57 60:00 3624 1448 imp -1 310410214827503 2272 03/15/20 06:18:55 60:00 19980 10414 ins -1 310410214827503 2273 03/15/20 06:23:30 0:02 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2274 03/15/20 06:40:57 60:00 0 0 imp -1 310410214827503 2275 03/15/20 07:18:55 60:00 6816 3004 imp -1 310410214827503 2276 03/15/20 07:40:57 60:00 0 0 imp -1 310410214827503 2277 03/15/20 08:18:55 60:00 8496 3144 ism -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do notemecessarily indicate a customer initiated a transaction. Page 93 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002737 not for general distribution. EF-EA_O0116813 EFTA01251337 MOBILITY The information contained heraCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. •---.,.. `" ,e01.,01. AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:45:40 Conn. Time (LTC) Originating Nutter ET Bytes UP Bytes Apn on INZI IMSI NUM MOLL 2278 03/15/20 08:40:57 60:00 0 0 ims -1 310410214827503 2279 03/15/20 09:18:55 50:48 7172 2944 ims -1 310410214827503 2280 03/15/20 09:37:51 11:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2281 03/15/20 09:37:52 11:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2282 03/15/20 09:40:57 24:11 0 0 ims -1 310410214827503 2283 03/15/20 09:48:56 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2284 03/15/20 10:05:07 60:00 0 0 imp -1 310410214827503 2285 03/15/20 10:09:42 60:00 18781 9775 imp -1 310410214827503 2286 03/15/20 10:48:56 2:47 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2287 03/15/20 10:51:42 0:42 192 Oruftgonpho 3587080982063726 310410214827503 APPLE 1PHONE8 2288 03/15/20 10:51:43 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2289 03/15/20 10:52:25 27:29 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2290 03/15/20 11:05:07 60:00 0 0 imp -1 310410214827503 2291 03/15/20 11:09:42 60:00 8480 2896 imp -1 310410214827503 2292 03/15/20 11:19:54 14:38 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2293 03/15/20 11:19:55 14:38 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2294 03/15/20 11:34:33 45:07 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2295 03/15/20 12:05:07 17:00 0 0 imp -1 310410214827503 2296 03/15/20 12:09:42 10:37 3580 1852 ins -1 310410214827503 2297 03/15/20 12:19:39 1:03 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2298 03/15/20 12:19:40 1:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2299 03/15/20 12:20:43 0:36 0 OruMgenpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2300 03/15/20 12:21:18 7:53 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2301 03/15/20 12:21:19 7:52 6229 6670 as 3587080982063726 310410214827503 APPLE 1PRONE8 2302 03/15/20 12:21:20 7:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 94 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002738 NTniliAL not for general distribution. EF-EA_O0116814 EFTA01251338 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in (ITC. 411111i ...,,,• ••-s` a. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 1S:53:40 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn ISM' IMSI 2303 03/15/20 12:21:21 7:51 6670 6073 imam 3587080982063726 310410214827503 2304 03/15/20 12:22:07 14:05 10288 6713 imam -1 310410214827503 2305 03/15/20 12:29:12 2:10 0 0 nxtgenpho no 3587080982063726 310410214827503 2306 03/15/20 12:31:20 10:33 10716 12922 ims -1 310410214827503 2307 03/15/20 12:31:21 2:04 192 Onxtgenpho no 3587080982063726 310410214827503 2308 03/15/20 12:31:22 2:05 0 Onxtgenpho no 3587080982063726 310410214827503 2309 03/15/20 12:33:26 1:09 0 Onxtgenpho no 3587080982063726 310410214827503 2310 03/15/20 12:34:34 8:20 192 0 nxtgenpho no 3587080982063726 310410214827503 2311 03/15/20 12:34:35 8:20 0 Oruagenpho no 3587080982063726 310410214827503 2312 03/15/20 12:36:10 6:44 6246 6666 ims 3587080982063726 310410214827503 2313 03/15/20 12:36:11 6:44 6666 5982 ims 3587080982063726 310410214827503 2314 03/15/20 12:42:55 42:16 0 Oruagenpho no 3587080982063726 310410214827503 2315 03/15/20 12:42:57 42:14 9358 8200 ims 3587080982063726 310410214827503 2316 03/15/20 13:25:11 14:44 0 Onxtgenpho no 3587080982063726 310410214827503 2317 03/15/20 13:25:13 1:31 6646 5899 ims 3587080982063726 310410214827503 2318 03/15/20 13:26:44 0:21 11780 13060 ims 3587080982063726 310410214827503 2319 03/15/20 13:35:22 10:29 1491 132 ims -1 310410214827503 2320 03/15/20 13:39:54 8:21 192 Oruagenpho no 3587080982063726 310410214827503 2321 03/15/20 13:39:55 8:21 0 Oruagenpho no 3587080982063726 310410214827503 2322 03/15/20 13:40:00 8:15 8434 9028 ims 3587080982063726 310410214827503 2323 03/15/20 13:40:01 8:15 8968 8170 ims 3587080982063726 310410214827503 2324 03/15/20 13:46:03 60:00 16716 9893 ims -1 310410214827503 2325 03/15/20 13:48:16 4:58 0 0 nxtgenpho no 3587080982063726 310410214827503 2326 03/15/20 13:53:13 2:14 192 Onxtgenpho no 3587080982063726 310410214827503 2327 03/15/20 13:53:15 2:14 0 Onxtgenpho no 3587080982063726 310410214827503 2328 03/15/20 13:55:29 43:50 0 Onxtgenpho no 3587080982063726 310410214827503 NAfl NICOLL APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 95 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002739 The information contained hereeNyFtli NaTtikEl not for general distribution. EF-EA_00ll6815 EFTA01251339 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. • AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Humber 2T Bytes Up Bytes Apn Dn pa= IMBI teUtT NICOLL 2329 03/15/20 14:37:06 1:42 6666 5959 ims 3587080982063726 310410214827503 APPLE IrMONZ8 2330 03/15/20 14:38:48 60:00 12476 4360 ims 3587080982063726 310410214827503 APPLE IrMONZ8 2331 03/15/20 14:39:18 21:07 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IrMONZ8 2332 03/15/20 14:39:19 21:07 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2333 03/15/20 14:46:03 60:00 0 0 ims -1 310410214827503 2334 03/15/20 15:00:26 22:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 2335 03/15/20 15:23:17 20:00 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IrROME8 2336 03/15/20 15:23:18 21:30 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IrROME8 2337 03/15/20 15:38:48 60:00 22664 10248 ims 3587080982063726 310410214827503 APPLE DRONES 2338 03/15/20 15:44:48 1:01 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2339 03/15/20 15:45:48 1:32 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2340 03/15/20 15:45:49 1:32 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2341 03/15/20 15:46:02 0:14 0 6648 ims 3587080982063726 310410214827503 APPLE DRONES 2342 03/15/20 15:46:03 60:00 0 0 ims -1 310410214827503 2343 03/15/20 15:47:21 59:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 2344 03/15/20 16:38:48 36:33 3872 1572 ims 3587080982063726 310410214827503 APPLE DRONES 2345 03/15/20 16:46:03 24:31 0 0 ims -1 310410214827503 2346 03/15/20 16:46:54 172:16 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 2347 03/15/20 16:46:55 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 2348 03/15/20 17:10:33 0:10 440 144 ims 3587080982063726 310410214827503 APPLE DRONES 2349 03/15/20 17:10:34 0:10 144 0 ims 3587080982063726 310410214827503 APPLE DRONES 2350 03/15/20 17:10:46 22:56 7340 6794 ims 3587080982063726 310410214827503 APPLE DRONES 2351 03/15/20 17:10:46 22:57 6794 7076 ims 3587080982063726 310410214827503 APPLE DRONES 2352 03/15/20 17:15:21 18:56 8373 6012 ims -1 310410214827503 2353 03/15/20 17:33:42 125:28 13506 17240 ims 3587080982063726 310410214827503 APPLE DRONES 2354 03/15/20 17:33:43 60:00 12048 10594 ims 3587080982063726 310410214827503 APPLE DRONES 2355 03/15/20 17:34:18 10:22 0 0 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 96 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002740 not for general distribution. EF-EA_00116816 EFTA01251340 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. tra"`s1°d AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (DSC) Originating Muster ET Bytes Up Bytoa Apn Dn MCI IMBI MARC MODEL 2356 03/15/20 17:46:55 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROSES 2357 03/15/20 18:33:43 60:00 5192 2648 was 3587080982063726 310410214827503 APPLE !PRONGS 2358 03/15/20 18:46:55 52:16 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 2359 03/15/20 19:28:15 60:00 16707 8924 was -1 310410214827503 2360 03/15/20 19:33:43 5:28 0 0 was 3587080982063726 310410214827503 APPLE !PHONES 2361 03/15/20 19:39:11 18:26 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2362 03/15/20 19:57:36 2:09 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2363 03/15/20 19:57:37 2:10 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2364 03/15/20 19:59:47 14:14 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE /PHONES 2365 03/15/20 20:14:00 68:02 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2366 03/15/20 20:14:01 60:00 0 Onxtgenpho nm 3587080982063726 310410214827503 APPLE /PHONES 2367 03/15/20 20:28:15 0:34 0 0 was -1 310410214827503 2368 03/15/20 20:28:49 60:00 0 0 was -1 310410214827503 2369 03/15/20 20:32:18 60:00 19964 9565 was -1 310410214827503 2370 03/15/20 21:14:01 8:02 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE /PHONES 2371 03/15/20 21:22:03 6:02 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE /PHONES 2372 03/15/20 21:28:04 2:05 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2373 03/15/20 21:28:06 2:04 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2374 03/15/20 21:28:49 60:00 0 0 was -1 310410214827503 2375 03/15/20 21:30:10 18:17 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2376 03/15/20 21:32:18 60:00 7032 2680 was -1 310410214827503 2377 03/15/20 21:48:27 42:37 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2378 03/15/20 21:48:28 42:37 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2379 03/15/20 22:28:49 60:00 0 0 was -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002741 NaTiliAL not for general distribution. Page 97 EF-EA_O0116817 EFTA01251341 NOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ...,,,,• ••—est `' . AT&T Run Date: Run Time: Data Osage For: 06/17/2020 16:56:40 Item Conn. Conn. Date Time (OTC) originating Hunter 2380 03/15/20 22:31:05 2:50 0 0 nxtgenpho no 3587080982063726 310410214827503 2381 03/15/20 22:32:18 60:00 8604 3052 ims -1 310410214827503 2382 03/15/20 22:33:54 8:19 192 Oruftgenpho no 3587080982063726 310410214827503 2383 03/15/20 22:33:55 8:19 0 Onxtgenpho no 3587080982063726 310410214827503 2384 03/15/20 22:42:14 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 2385 03/15/20 23:28:49 60:00 0 0 ims -1 310410214827503 2386 03/15/20 23:32:18 60:00 6924 2788 ims -1 310410214827503 2387 03/15/20 23:42:14 11:41 0 Onxtgenpho no 3587080982063726 310410214827503 2388 03/15/20 23:53:54 0:37 192 0 nxtgenpho no 3587080982063726 310410214827503 2389 03/15/20 23:53:55 0:37 0 0 nxtgenpho no 3587080982063726 310410214827503 2390 03/15/20 23:54:32 2:37 288 0 nxtgenpho no 3587080982063726 310410214827503 2391 03/15/20 23:54:33 2:37 0 Onxtgenpho no 3587080982063726 310410214827503 2392 03/15/20 23:57:10 1:22 0 Oruftgenpho no 3587080982063726 310410214827503 2393 03/15/20 23:58:31 7:13 192 Oruftgenpho no 3587080982063726 310410214827503 2394 03/15/20 23:58:32 7:13 0 Oruftgenpho no 3587080982063726 310410214827503 2395 03/16/20 00:05:45 2:43 192 Oruftgenpho no 3587080982063726 310410214827503 2396 03/16/20 00:05:46 2:43 0 Oruftgenpho no 3587080982063726 310410214827503 2397 03/16/20 00:08:29 1:58 0 0 nxtgenpho no 3587080982063726 310410214827503 2398 03/16/20 00:10:26 2:04 192 Oruftgenpho no 3587080982063726 310410214827503 2399 03/16/20 00:10:28 2:03 0 Oruftgenpho no 3587080982063726 310410214827503 2400 03/16/20 00:12:32 4:09 0 Oruftgenpho no 3587080982063726 310410214827503 2401 03/16/20 00:16:40 3:53 192 0 nxtgenpho no 3587080982063726 310410214827503 ET Byte. Byte. Apn INLI IMBI NAZI MOLL Op Dn APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PROMS APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE !PHONES APPLE !PHONES APPLE IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 98 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002742 NTroliAL not for general distribution. EF-EA_00116818 EFTA01251342 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, ...r •-""saie AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes UP Bytes Apn Dn INZI IMSI MARL 2402 03/16/20 00:16:41 3:53 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2403 03/16/20 00:20:33 4:14 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2404 03/16/20 00:20:34 4:14 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2405 03/16/20 00:24:47 2:05 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2406 03/16/20 00:24:48 2:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2407 03/16/20 00:26:53 9:29 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2408 03/16/20 00:28:49 0:01 0 0 ins -1 310410214827503 2409 03/16/20 00:32:18 13:27 5088 2084 ins -1 310410214827503 2410 03/16/20 00:36:22 3:12 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2411 03/16/20 00:39:34 16:30 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2412 03/16/20 00:39:35 16:30 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2413 03/16/20 00:51:49 3:35 13841 10953 ins -1 310410214827503 2414 03/16/20 00:55:27 25:51 20087 13330 ins -1 310410214827503 2415 03/16/20 00:56:05 3:43 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2416 03/16/20 00:59:47 8:32 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2417 03/16/20 00:59:49 8:31 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2418 03/16/20 01:08:20 3:17 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2419 03/16/20 01:11:36 2:09 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2420 03/16/20 01:11:37 2:09 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2421 03/16/20 01:13:46 10:15 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 2422 03/16/20 01:22:33 60:00 19156 9476 ins -1 310410214827503 2423 03/16/20 01:24:01 19:07 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 2424 03/16/20 01:24:02 19:07 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE NICOLL 'PHONES 'PHONES !PHONES !PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 99 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002743 NTifikE not for general distribution. EFTA_OOI 16819 EFTA01251343 MOBILITY The information contained hereSCONels 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .....„ `•-s`' s0/ AT&T Run Date: Run Time: Data Usage For: 06/17/2020 1S:53:40 Item Conn. Conn. Date Timo (OTC) 2425 03/16/20 01:43:09 2426 03/16/20 02:05:31 2427 03/16/20 02:05:33 2428 03/16/20 02:07:37 2429 03/16/20 02:08:44 2430 03/16/20 02:08:45 2431 03/16/20 02:10:49 2432 03/16/20 02:22:33 2433 03/16/20 02:58:39 2434 03/16/20 02:58:40 2435 03/16/20 03:10:37 2436 03/16/20 03:13:56 2437 03/16/20 03:13:57 2438 03/16/20 03:22:33 2439 03/16/20 03:33:25 2440 03/16/20 03:44:39 2441 03/16/20 03:44:40 2442 03/16/20 03:50:14 2443 03/16/20 03:53:10 2444 03/16/20 03:53:11 2445 03/16/20 04:22:33 2446 03/16/20 04:53:11 originating Number CT Bytes Bytom Apn MCI INSI MARL NICOLL UP Dn 22:23 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2:05 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 1:08 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2:04 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 47:51 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 60:00 8496 3036 ism -1 310410214827503 11:57 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 11:57 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 3:19 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 19:28 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 19:28 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 60:00 7048 2804 ism -1 310410214827503 11:15 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5:34 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5:34 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2:57 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 93:54 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 60:00 8388 2928 ism -1 310410214827503 33:54 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 100 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002744 NeTnilikk not for general distribution. EF-EA_O0116820 EFTA01251344 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and OTC. provided in 411.1 tr. 20‘I"`1AT&T Run Data: Run Tame: Data Usage For: Item Conn. Data 06/17/2020 ET Sye•• UP Byte. Apn Dn Conn. INLI INBI Time (OTC) Originating Number 2447 03/16/20 05:22:33 60:00 11580 4160 ims -1 310410214827503 2448 03/16/20 05:27:04 129:59 192 Onxtgonpho no 3587080982063726 310410214827503 2449 03/16/20 05:27:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2450 03/16/20 06:22:33 60:00 10624 4396 ims -1 310410214827503 2451 03/16/20 06:27:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2452 03/16/20 07:22:33 60:00 8388 2928 ims -1 310410214827503 2453 03/16/20 07:27:05 9:59 0 0 nxtgonpho no 3587080982063726 310410214827503 2454 03/16/20 07:37:04 240:01 192 0 nxtgonpho no 3587080982063726 310410214827503 2455 03/16/20 07:37:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2456 03/16/20 08:22:33 60:00 8388 3036 ims -1 310410214827503 2457 03/16/20 08:37:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2458 03/16/20 09:22:33 60:00 8388 2928 ims -1 310410214827503 2459 03/16/20 09:37:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2460 03/16/20 10:22:33 60:00 10564 4252 ims -1 310410214827503 2461 03/16/20 10:37:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2462 03/16/20 11:22:33 60:00 11796 4536 ims -1 310410214827503 2463 03/16/20 11:37:05 0:01 0 0 nxtgonpho no 3587080982063726 310410214827503 2464 03/16/20 11:37:14 61:22 192 0 nxtgonpho no 3587080982063726 310410214827503 2465 03/16/20 11:37:15 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2466 03/16/20 12:22:33 60:00 8388 2928 ims -1 310410214827503 2467 03/16/20 12:37:15 1:22 0 0 nxtgonpho no 3587080982063726 310410214827503 2468 03/16/20 12:38:37 11:24 0 0 nxtgonpho no 3587080982063726 310410214827503 2469 03/16/20 12:50:01 47:24 192 0 nxtgonpho no 3587080982063726 310410214827503 2470 03/16/20 12:50:02 47:24 0 0 nxtgonpho no 3587080982063726 310410214827503 MAKE MODEL APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE APPLE APPLE !PHONES !PHONES !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE APPLE APPLE IPHONE8 IPHONE8 IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not neceksarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002745 PsisTiliAL not for general distribution. Page 101 EF-EA_O0116821 EFTA01251345 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr`"adses. AT&T Run Date: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating I. all,. ET Bytes Up Bytes Apn Dn INC' INSI MARL NICOLL 2471 03/16/20 13:22:33 60:00 8496 2928 ims -1 310410214827503 2472 03/16/20 13:37:26 12:23 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 2473 03/16/20 13:49:48 2:05 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2474 03/16/20 13:49:49 2:05 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2475 03/16/20 13:51:54 7:21 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2476 03/16/20 13:59:14 6:36 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2477 03/16/20 13:59:15 6:36 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no . 2478 03/16/20 14:05:51 1:15 0 Onxtgenpho no 3587080982063726 310410214827503 AMA !PHONES 2479 03/16/20 14:07:05 3:27 192 Onxtgenpho no 3587080982063726 310410214827503 AMA IPHOME8 2480 03/16/20 14:07:06 3:27 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2481 03/16/20 14:10:33 2:06 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2482 03/16/20 14:12:38 8:31 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2483 03/16/20 14:12:39 8:31 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2484 03/16/20 14:21:10 4:53 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2485 03/16/20 14:22:33 60:00 8388 2928 ims -1 310410214827503 2486 03/16/20 14:26:02 20:41 192 0 nxtgenpho no 3587080982063726 310410214827503 AMA !PHONES 2487 03/16/20 14:26:03 20:41 0 Onxtgenpho no 3587080982063726 310410214827503 AMA !PHONES 2488 03/16/20 14:46:44 0:40 0 Onxtgenpho no 3587080982063726 310410214827503 AMA IPHOME8 2489 03/16/20 14:47:23 8:22 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2490 03/16/20 14:47:25 8:21 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 2491 03/16/20 14:55:46 0:38 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002746 NTroliAL not for general distribution. Page 102 EF-EA_00ll6822 EFTA01251346 MOBILITY The information contained horaCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ap. ....,,,,• ••-•°"" s AT&T Run Date: 06/17/2020 Run Time: 18:55:40 Data Usage For: INIMPOOPOPM. Item Conn. Date Conn. Originating ET Time Number (UTC) Bytes Up Byte. npn Dn INEI IMBI 2492 03/16/20 14:56:23 14:42 192 0 nxtgonpho no 3587080982063726 310410214827503 2493 03/16/20 14:56:24 14:42 0 0 nxtgonpho no 3587080982063726 310410214827503 2494 03/16/20 15:11:06 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2495 03/16/20 15:22:33 60:00 15156 4872 ipso -1 310410214827503 2496 03/16/20 16:11:06 18:59 0 0 nxtgonpho no 3587080982063726 310410214827503 2497 03/16/20 16:22:33 60:00 6940 2804 ipso -1 310410214827503 2498 03/16/20 16:30:04 8:21 192 0 nxtgonpho no 3587080982063726 310410214827503 2499 03/16/20 16:30:05 8:21 0 0 nxtgonpho no 3587080982063726 310410214827503 2500 03/16/20 16:38:26 2:54 0 0 nxtgonpho no 3587080982063726 310410214827503 2501 03/16/20 16:41:20 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 2502 03/16/20 16:41:21 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 2503 03/16/20 16:43:24 10:32 0 0 nxtgonpho no 3587080982063726 310410214827503 2504 03/16/20 16:53:55 2:15 192 0 nxtgonpho no 3587080982063726 310410214827503 2505 03/16/20 16:53:56 2:15 0 0 nxtgonpho no 3587080982063726 310410214827503 2506 03/16/20 16:56:11 1:06 0 0 nxtgonpho no 3587080982063726 310410214827503 2507 03/16/20 16:57:16 4:52 192 0 nxtgonpho no 3587080982063726 310410214827503 2508 03/16/20 16:57:17 4:52 0 0 nxtgonpho no 3587080982063726 310410214827503 2509 03/16/20 17:02:09 0:33 0 0 nxtgonpho no 3587080982063726 310410214827503 2510 03/16/20 17:02:41 14:45 192 0 nxtgonpho no 3587080982063726 310410214827503 2511 03/16/20 17:02:42 14:45 0 0 nxtgonpho no 3587080982063726 310410214827503 2512 03/16/20 17:17:27 0:50 0 0 nxtgonpho no 3587080982063726 310410214827503 MARL NADEL APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 103 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002747 NsToliAL not for general distribution. EF-EA_00ll6823 EFTA01251347 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 41011, AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Si= Item Conn. Data Conn. Originating LT Time Rumbas (OTC) Bytes UP Byte. Apn Dn ICI IMBI 2513 03/16/20 17:18:16 53:17 192 0 nxtgonpho no 3587080982063726 310410214827503 2514 03/16/20 17:18:17 53:17 0 0 nxtgonpho no 3587080982063726 310410214827503 2515 03/16/20 17:22:33 60:00 12120 4660 ins -1 310410214827503 2516 03/16/20 18:11:34 2:55 0 Onxtgonpho no 3587080982063726 310410214827503 2517 03/16/20 18:14:28 1:08 192 Onxtgonpho no 3587080982063726 310410214827503 2518 03/16/20 18:14:29 1:08 0 0 nxtgonpho no 3587080982063726 310410214827503 2519 03/16/20 18:15:37 7:10 0 0 nxtgonpho no 3587080982063726 310410214827503 2520 03/16/20 18:22:33 60:00 8388 3712 imp -1 310410214827503 2521 03/16/20 18:22:46 204:00 192 0 nxtgonpho no 3587080982063726 310410214827503 2522 03/16/20 18:22:47 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2523 03/16/20 19:22:33 60:00 15172 5888 ins -1 310410214827503 2524 03/16/20 19:22:47 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 2525 03/16/20 20:22:33 60:00 10068 3408 imp -1 310410214827503 2526 03/16/20 20:22:47 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 2527 03/16/20 21:22:33 39:47 13568 5136 imp -1 310410214827503 2528 03/16/20 21:22:47 24:00 0 Onxtgonpho no 3587080982063726 310410214827503 2529 03/16/20 21:46:47 0:06 0 Onxtgonpho no 3587080982063726 310410214827503 2530 03/16/20 21:47:15 40:04 192 Onxtgonpho no 3587080982063726 310410214827503 2531 03/16/20 21:47:16 40:04 0 Onxtgonpho no 3587080982063726 310410214827503 2532 03/16/20 22:09:00 18:19 7689 12910 imp 3587080982063726 310410214827503 2533 03/16/20 22:09:01 18:19 12842 7533 imp 3587080982063726 310410214827503 2534 03/16/20 22:09:17 0:01 0 0 imp -1 310410214827503 2535 03/16/20 22:10:19 23:51 10036 6592 imp -1 310410214827503 2536 03/16/20 22:27:20 0:35 0 0 nxtgonpho no 3587080982063726 310410214827503 MAC NICOLL APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE !PHONES APPLE 1PRONE8 APPLE 'PHONES APPLE DRONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002748 PsiTifikE not for general distribution. Page 104 EFTA 00116824 EFTA01251348 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Tama: Data Usage For: Item Conn. Date 06/17/2020 16:55:40 Conn. Time (UTC) Originating Humber ET Bytes UP Byte, Apn Dn IN= INBI HARE 2537 03/16/20 22:27:55 40:08 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2538 03/16/20 22:27:56 40:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2539 03/16/20 22:31:07 36:56 7604 10041 ins 3587080982063726 310410214827503 APPLE 2540 03/16/20 22:31:08 36:56 9952 7340 ins 3587080982063726 310410214827503 APPLE 2541 03/16/20 23:08:04 0:41 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 2542 03/16/20 23:08:06 0:39 8822 7071 ins 3587080982063726 310410214827503 APPLE 2543 03/16/20 23:08:44 8:33 192 Oruagenpho no 3587080982063726 310410214827503 APPLE 2544 03/16/20 23:08:45 8:32 7158 6748 ins 3587080982063726 310410214827503 APPLE 2545 03/16/20 23:08:45 8:33 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2546 03/16/20 23:08:46 8:32 6748 6894 ins 3587080982063726 310410214827503 APPLE 2547 03/16/20 23:17:18 0:49 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 2548 03/16/20 23:17:20 0:47 12596 13562 ins 3587080982063726 310410214827503 APPLE 2549 03/16/20 23:18:07 53:36 288 Oruagenpho no 3587080982063726 310410214827503 APPLE 2550 03/16/20 23:18:08 53:35 9000 11994 ins 3587080982063726 310410214827503 APPLE 2551 03/16/20 23:18:08 53:36 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2552 03/16/20 23:18:09 53:35 11866 8736 ins 3587080982063726 310410214827503 APPLE 2553 03/17/20 00:11:44 22:41 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2554 03/17/20 00:11:55 60:00 19480 9443 ins -2 310410214827503 2555 03/17/20 00:34:24 2:03 192 Oruagenpho no 3587080982063726 310410214827503 APPLE 2556 03/17/20 00:34:25 2:03 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 2557 03/17/20 00:36:28 10:12 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 2558 03/17/20 00:46:39 2:10 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2559 03/17/20 00:46:41 2:09 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2560 03/17/20 00:48:50 28:49 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2561 03/17/20 01:11:55 60:00 8388 2928 ins -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES DRONES 'PHONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES DRONES DRONES DRONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 105 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002749 N:infiNE not for general distribution. EF-EA_O0116825 EFTA01251349 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411., ..... •---s`' as f AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:55:40 Conn. Time (UTC) Originating Number ET Bytes UP Byte. Apn Dn IKE' IMSI MARL MOLL 2562 03/17/20 01:17:39 27:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2563 03/17/20 01:17:40 27:32 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2564 03/17/20 01:45:12 1:07 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2565 03/17/20 01:46:18 8:35 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2566 03/17/20 01:46:19 8:35 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2567 03/17/20 01:54:54 8:15 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2568 03/17/20 02:03:08 6:37 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2569 03/17/20 02:03:09 6:37 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2570 03/17/20 02:09:46 4:54 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2571 03/17/20 02:11:55 60:00 9928 3376 imp -1 310410214827503 2572 03/17/20 02:14:40 2:03 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2573 03/17/20 02:14:41 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2574 03/17/20 02:16:44 0:34 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2575 03/17/20 02:17:17 2:18 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2576 03/17/20 02:17:18 2:18 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2577 03/17/20 02:19:35 3:07 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2578 03/17/20 02:19:37 3:06 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2579 03/17/20 02:22:43 9:31 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2580 03/17/20 02:32:14 3:31 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2581 03/17/20 02:35:44 8:26 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2582 03/17/20 02:35:45 8:26 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 106 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002750 not for general distribution. EFTA 00116826 EFTA01251350 MOBILITY The information contained heraleeNyEti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41011, AT&T Run Date: Run Time: Data Osage For: 06/17/2020 18:56:40 Item Conn. Conn. Originating ET Bytes Bytes Apn IKI IMSI MARL MODEL Date Time Number Op Dn (OTC) 2583 03/17/20 02:44:11 4:18 0 Onxtgenpho no 3587080982063726 310410214827503 2584 03/17/20 02:48:29 0:44 0 Orumgenpho no 3587080982063726 310410214827503 2585 03/17/20 02:49:13 34:19 192 Orumgenpho no 3587080982063726 310410214827503 2586 03/17/20 02:49:14 34:19 0 Orumgenpho no 3587080982063726 310410214827503 2587 03/17/20 03:11:55 15:38 3424 1340 ims -1 310410214827503 2588 03/17/20 03:23:33 17:56 0 Orumgenpho no 3587080982063726 310410214827503 2589 03/17/20 03:28:08 0:26 6930 4178 ims 3587080982063726 310410214827503 2590 03/17/20 03:28:34 60:00 17131 11098 ims 3587080982063726 310410214827503 2591 03/17/20 03:41:28 27:16 192 Orumgenpho no 3587080982063726 310410214827503 2592 03/17/20 03:41:29 27:16 0 Orumgenpho no 3587080982063726 310410214827503 2593 03/17/20 04:08:45 9:13 0 Orumgenpho no 3587080982063726 310410214827503 2594 03/17/20 04:17:58 8:29 192 Onamgenpho no 3587080982063726 310410214827503 2595 03/17/20 04:17:59 8:29 0 Onamgenpho no 3587080982063726 310410214827503 2596 03/17/20 04:26:28 23:45 0 Onamgenpho no 3587080982063726 310410214827503 2597 03/17/20 04:28:34 24:06 5072 1572 ims 3587080982063726 310410214827503 2598 03/17/20 04:50:12 55:06 192 Onamgenpho no 3587080982063726 310410214827503 2599 03/17/20 04:50:13 60:00 0 Orumgenpho no 3587080982063726 310410214827503 2600 03/17/20 04:54:18 60:00 15007 8738 I. -1 310410214827503 2601 03/17/20 05:50:13 60:00 0 Orumgenpho no 3587080982063726 310410214827503 2602 03/17/20 05:54:18 3:03 0 0 I. -1 310410214827503 2603 03/17/20 06:05:16 1:38 0 0 I. -1 310410214827503 2604 03/17/20 06:09:29 14:57 8629 6424 I. -1 310410214827503 2605 03/17/20 06:35:42 11:59 8189 6016 I. -1 310410214827503 2606 03/17/20 06:50:13 60:00 0 Orumgenpho no 3587080982063726 310410214827503 2607 03/17/20 06:53:34 11:08 8249 6072 I. -1 310410214827503 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE 1PRONE8 APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 107 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002751 PsisTiliAL not for general distribution. EF-EA_O0116827 EFTA01251351 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in 41111, AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:55:40 Conn. originating LT Time Number (OTC) Bytes UP Byte. Apn Dn INr2 IMSI ten MODEL 2608 03/17/20 07:06:33 1:38 0 0 ins -1 310410214827503 2609 03/17/20 07:10:15 11:07 9759 6207 ins -1 310410214827503 2610 03/17/20 07:26:34 0:07 O 0 ins -1 310410214827503 2611 03/17/20 07:31:09 3:34 8189 6046 ins -1 310410214827503 2612 03/17/20 07:42:29 60:00 15005 8986 ins -1 310410214827503 2613 03/17/20 07:50:13 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2614 03/17/20 08:42:29 60:00 6924 2680 imp -1 310410214827503 2615 03/17/20 08:50:13 0:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2616 03/17/20 09:42:29 9:49 0 0 imp -1 310410214827503 2617 03/17/20 09:56:08 60:00 16577 9082 imp -1 310410214827503 2618 03/17/20 10:56:08 53:28 8496 2928 imp -1 310410214827503 2619 03/17/20 11:52:58 20:02 8351 6051 imp -1 310410214827503 2620 03/17/20 12:19:55 20:03 8361 5998 ins -1 310410214827503 2621 03/17/20 12:30:21 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONZ8 2622 03/17/20 12:31:17 0:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2623 03/17/20 12:31:29 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2624 03/17/20 12:42:30 13:58 9768 6196 imp -1 310410214827503 2625 03/17/20 13:03:49 59:58 19046 9302 ins -1 310410214827503 2626 03/17/20 13:31:29 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONZ8 2627 03/17/20 14:14:13 60:00 19300 9472 ins -1 310410214827503 2628 03/17/20 14:31:29 11:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONZ8 2629 03/17/20 14:42:33 30:03 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2630 03/17/20 14:42:34 30:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2631 03/17/20 15:12:37 0:33 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2632 03/17/20 15:13:09 2:14 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2633 03/17/20 15:13:11 2:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 2634 03/17/20 15:14:13 60:00 8744 5976 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002752 not for general distribution. Page 108 EF-EAJVII6828 EFTA01251352 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, AT&T Run Dato: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating TT Time Number (OTC) Bytes UP Bytoa Dn Apn INCI INSt teUtT 2635 03/17/20 15:15:24 0:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2636 03/17/20 15:15:58 2:03 192 e Onxtgonpho no 3587080982063726 310410214827503 APPLE 2637 03/17/20 15:15:59 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2638 03/17/20 15:18:02 1:55 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2639 03/17/20 15:19:56 2:09 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2640 03/17/20 15:19:58 2:08 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2641 03/17/20 15:22:06 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2642 03/17/20 16:14:13 6:00 0 0 imp -1 310410214827503 2643 03/17/20 16:20:14 60:00 21092 10632 imp -1 310410214827503 2644 03/17/20 16:22:06 3:35 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2645 03/17/20 16:25:40 20:42 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2646 03/17/20 16:25:41 20:42 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2647 03/17/20 16:46:23 4:40 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2648 03/17/20 16:51:02 2:06 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2649 03/17/20 16:51:04 2:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2650 03/17/20 16:53:09 2:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2651 03/17/20 16:56:06 31:00 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2652 03/17/20 16:56:07 31:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2653 03/17/20 17:20:14 60:00 9944 3408 ins -1 310410214827503 2654 03/17/20 17:27:07 51:24 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2655 03/17/20 18:18:30 155:32 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2656 03/17/20 18:18:31 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PRONGS !PRONGS !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES !PRONGS !PRONGS !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 109 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002753 N:FrliAL not for general distribution. EF-EA_00ll6829 EFTA01251353 MOBILITY The information contained hereleoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 411111, AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 16:53:41 Conn. 21mo (USC) Originating Number LT Bytes Up Bytes Apn Dn INZI IMSI NUM 2657 03/17/20 18:20:14 60:00 11516 4300 ims -1 310410214827503 2658 03/17/20 19:18:31 60:00 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE 2659 03/17/20 19:20:14 55:38 12244 4408 imo -1 310410214827503 2660 03/17/20 20:15:28 38:34 7306 6810 imo 3587080982063726 310410214827503 APPLE 2661 03/17/20 20:15:28 38:35 6742 6954 am 3587080982063726 310410214827503 APPLE 2662 03/17/20 20:15:51 60:00 20945 14596 am -1 310410214827503 2663 03/17/20 20:18:31 35:32 0 Oruftgonpho c no 3587080982063726 310410214827503 APPLE 2664 03/17/20 20:54:03 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2665 03/17/20 21:15:51 60:00 8604 3052 ins -1 310410214827503 2666 03/17/20 21:54:03 4:43 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2667 03/17/20 21:58:45 8:40 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 2668 03/17/20 21:58:46 8:40 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 2669 03/17/20 22:07:26 31:55 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 2670 03/17/20 22:15:51 60:00 10268 3424 ins -1 310410214827503 2671 03/17/20 22:39:20 2:10 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2672 03/17/20 22:39:21 2:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2673 03/17/20 22:41:31 1:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2674 03/17/20 22:42:41 68:13 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2675 03/17/20 22:42:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2676 03/17/20 23:15:51 60:00 11844 3624 ins -1 310410214827503 2677 03/17/20 23:42:42 8:13 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2678 03/17/20 23:50:54 18:33 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 2679 03/17/20 23:50:55 18:33 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 2680 03/18/20 00:09:28 8:46 0 Onatgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PHONE8 !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 110 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002754 NaTtAdti not for general distribution. EF-EA_O0116830 EFTA01251354 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in 4111. ....,,f ••-s""s AT&T Run Data: Run Tama: Data Usage Tor: Item Conn. Data 06/17/2020 10:55:41 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apr. Dn INZI INSI MAKE MODEL 2681 03/18/20 00:15:51 60:00 13804 6628 isms -1 310410214827503 2682 03/18/20 00:18:14 10:53 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2683 03/18/20 00:18:14 10:54 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2684 03/18/20 00:29:08 56:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2685 03/18/20 01:15:51 60:00 10036 3176 ins -1 310410214827503 2686 03/18/20 01:25:18 21:55 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2687 03/18/20 01:25:19 21:55 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2688 03/18/20 01:47:13 19:14 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2689 03/18/20 01:47:14 19:14 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2690 03/18/20 02:06:28 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2691 03/18/20 02:15:51 60:00 10252 3300 ins -1 310410214827503 2692 03/18/20 03:06:28 6:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2693 03/18/20 03:12:50 28:42 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2694 03/18/20 03:12:51 28:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2695 03/18/20 03:15:51 60:00 10380 4252 ins -1 310410214827503 2696 03/18/20 03:41:33 15:21 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2697 03/18/20 03:56:54 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2698 03/18/20 04:15:51 60:00 6848 2896 ins -1 310410214827503 2699 03/18/20 05:15:51 60:00 12028 4536 ins -1 310410214827503 2700 03/18/20 06:15:51 60:00 10272 4236 ins -1 310410214827503 2701 03/18/20 07:15:51 60:00 6956 2912 ins -1 310410214827503 2702 03/18/20 08:15:51 60:00 6956 2788 ins -1 310410214827503 2703 03/18/20 09:15:51 60:00 8496 3160 ins -1 310410214827503 2704 03/18/20 10:15:51 60:00 8604 3160 ins -1 310410214827503 2705 03/18/20 11:15:51 31:46 15236 6264 lms -1 310410214827503 2706 03/18/20 11:47:31 5:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002755 not for general distribution. Page 111 EF-EA_O0116831 EFTA01251355 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr`"" ads. AT&T Run Date: Run Time: Data Osage For: Itea Conn. Date 06/17/2020 1S:55:41 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn INS' NAfl NICOLL 2707 03/18/20 11:52:50 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2708 03/18/20 11:52:52 60:00 14426 11616 ins 3587080982063726 310410214827503 APPLE IPHONE8 2709 03/18/20 12:52:50 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2710 03/18/20 12:52:52 60:00 5408 2756 • ins 3587080982063726 310410214827503 APPLE IPHONE8 2711 03/18/20 13:52:50 36:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2712 03/18/20 13:52:52 26:54 2596 1324 ins 3587080982063726 310410214827503 APPLE !PHONES 2713 03/18/20 14:19:46 3:57 3316 1324 imo 3587080982063726 310410214827503 APPLE !PHONES 2714 03/18/20 14:23:43 4:05 3952 1448 ins 3587080982063726 310410214827503 APPLE IPHONE8 2715 03/18/20 14:27:48 60:00 8012 2772 imo 3587080982063726 310410214827503 APPLE IPHONE8 2716 03/18/20 14:29:08 2:23 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2717 03/18/20 14:29:09 2:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2718 03/18/20 14:31:31 3:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2719 03/18/20 14:31:33 2:59 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2720 03/18/20 14:34:31 52:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2721 03/18/20 15:02:33 60:00 18492 9824 ins -1 310410214827503 2722 03/18/20 15:26:53 2:31 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2723 03/18/20 15:26:54 2:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2724 03/18/20 15:27:48 4:43 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 2725 03/18/20 15:29:25 43:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2726 03/18/20 15:32:31 60:00 22853 16088 ins -1 310410214827503 2727 03/18/20 16:02:33 55:23 0 0 ins -1 310410214827503 2728 03/18/20 16:12:31 1:13 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2729 03/18/20 16:12:32 1:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2730 03/18/20 16:13:44 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2731 03/18/20 16:13:46 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002756 NsToliAL not for general distribution. Page 112 EF-EA_O0116832 EFTA01251356 MOBILITY The information contained heralCONelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in • .._____,, %•—•°"" e AT&T Run pato: Run Time: Data Osage for: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating ET Bytes Bytes Apn INEZ Number Up Dn INSI KAM MODEL 2732 03/18/20 16:15:49 43:56 0 0 nxtgonpho no 3587080982063726 310410214827503 2733 03/18/20 16:32:31 60:00 5072 1696 ism -1 310410214827503 2734 03/18/20 16:57:55 60:00 19408 10910 ism -1 310410214827503 2735 03/18/20 16:59:44 8:18 192 0 nxtgonpho no 3587080982063726 310410214827503 2736 03/18/20 16:59:45 8:18 0 0 nxtgonpho no 3587080982063726 310410214827503 2737 03/18/20 17:08:03 49:11 0 0 nxtgonpho no 3587080982063726 310410214827503 2738 03/18/20 17:32:31 29:42 0 0 ins -1 310410214827503 2739 03/18/20 17:57:13 6:34 192 0 nxtgonpho no 3587080982063726 310410214827503 2740 03/18/20 17:57:14 6:34 0 0 nxtgonpho no 3587080982063726 310410214827503 2741 03/18/20 17:57:55 4:18 0 0 ins -1 310410214827503 2742 03/18/20 18:02:11 1:36 6264 6820 ins 3587080982063726 310410214827503 2743 03/18/20 18:02:13 1:35 6676 6000 ins 3587080982063726 310410214827503 2744 03/18/20 18:03:04 60:00 18853 10233 ins -1 310410214827503 2745 03/18/20 18:03:48 3:10 0 0 nxtgonpho no 3587080982063726 310410214827503 2746 03/18/20 18:06:57 9:07 192 0 nxtgonpho no 3587080982063726 310410214827503 2747 03/18/20 18:06:59 9:06 0 0 nxtgonpho no 3587080982063726 310410214827503 2748 03/18/20 18:16:05 2:18 0 0 nxtgonpho no 3587080982063726 310410214827503 2749 03/18/20 18:18:22 8:15 192 0 nxtgonpho no 3587080982063726 310410214827503 2750 03/18/20 18:18:23 8:15 0 0 nxtgonpho no 3587080982063726 310410214827503 2751 03/18/20 18:26:38 1:07 0 0 nxtgonpho no 3587080982063726 310410214827503 2752 03/18/20 18:27:44 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 2753 03/18/20 18:27:45 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 2754 03/18/20 18:29:48 21:07 0 0 nxtgonpho no 3587080982063726 310410214827503 2755 03/18/20 18:50:54 8:34 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 APPLE IPRONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 113 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002757 NToliAlt not for general distribution. EF-EA_O0116833 EFTA01251357 MOBILITY The information contained heraleop+Ftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:56:41 Conn. Originating ET Time Number (UTC) Bytes Op Bytom Apn Dn Urn IMSI Man 2756 03/18/20 18:50:55 8:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2757 03/18/20 18:59:29 39:33 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2758 03/18/20 19:03:04 58:01 8048 3588 imp -1 310410214827503 2759 03/18/20 19:39:01 14:50 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2760 03/18/20 19:39:02 14:50 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2761 03/18/20 19:53:52 5:18 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2762 03/18/20 19:59:09 8:18 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2763 03/18/20 19:59:10 8:18 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 2764 03/18/20 20:00:39 1:21 7096 6816 imp 3587080982063726 310410214827503 APPLE 2765 03/18/20 20:00:40 1:21 6748 6832 imp 3587080982063726 310410214827503 APPLE 2766 03/18/20 20:01:05 2:01 8095 5982 imp -1 310410214827503 2767 03/18/20 20:01:59 5:28 6334 6666 imp 3587080982063726 310410214827503 APPLE 2768 03/18/20 20:02:01 5:27 6666 6070 imp 3587080982063726 310410214827503 APPLE 2769 03/18/20 20:03:06 20:56 11686 8040 imp -1 310410214827503 2770 03/18/20 20:07:28 0:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2771 03/18/20 20:07:44 39:49 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 2772 03/18/20 20:18:47 28:46 6666 5980 vas 3587080982063726 310410214827503 APPLE 2773 03/18/20 20:47:32 4:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2774 03/18/20 20:47:33 4:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2775 03/18/20 20:51:44 13:13 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2776 03/18/20 20:51:45 13:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2777 03/18/20 20:52:00 12:57 6336 6988 vas 3587080982063726 310410214827503 APPLE 2778 03/18/20 20:52:01 12:57 6864 6072 vas 3587080982063726 310410214827503 APPLE 2779 03/18/20 21:04:58 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 2780 03/18/20 21:39:56 0:01 0 0 imp -1 310410214827503 2781 03/18/20 21:46:22 50:48 25152 16800 imp 3587080982063726 310410214827503 APPLE !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 114 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002758 NTailiAL not for general distribution. EF-EA_00ll6834 EFTA01251358 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 410. tr. 14/ . mgSa# AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes arm Dn INEI DMZ MUM MODEL 2782 03/18/20 22:04:58 60:00 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2783 03/18/20 22:37:10 60:00 15448 5088 ins 3587080982063726 310410214827503 APPLE 'PHONES 2784 03/18/20 23:04:58 40:02 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2785 03/18/20 23:37:10 30:08 5072 1572 ins 3587080982063726 310410214827503 APPLE 'PHONES 2786 03/18/20 23:44:59 19:47 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2787 03/18/20 23:45:00 19:47 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2788 03/19/20 00:04:47 1:21 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2789 03/19/20 00:06:07 8:21 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2790 03/19/20 00:06:08 8:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2791 03/19/20 00:06:19 8:09 7226 6814 ins 3587080982063726 310410214827503 APPLE 'PHONES 2792 03/19/20 00:06:20 8:09 6746 6962 ins 3587080982063726 310410214827503 APPLE 'PHONES 2793 03/19/20 00:07:18 15:11 9894 8570 ins -1 310410214827503 2794 03/19/20 00:14:29 6:44 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2795 03/19/20 00:21:12 8:04 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2796 03/19/20 00:21:13 8:04 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2797 03/19/20 00:22:27 1:34 6263 6744 ims 3587080982063726 310410214827503 APPLE 'PHONES 2798 03/19/20 00:22:29 1:33 6676 5999 ims 3587080982063726 310410214827503 APPLE 'PHONES 2799 03/19/20 00:24:02 17:34 8528 6160 ims 3587080982063726 310410214827503 APPLE 'PHONES 2800 03/19/20 00:29:17 2:55 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2801 03/19/20 00:32:12 6:23 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2802 03/19/20 00:32:13 6:23 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2803 03/19/20 00:38:36 3:08 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2804 03/19/20 00:41:43 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 2805 03/19/20 00:41:44 2:02 6225 6672 ims 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 115 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002759 not for general distribution. EF-EAJVII6835 EFTA01251359 NOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. •---_:e0 " .,."1° AT&T Run Data: Run Tuna: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Rumbas (Inc) Bytes Up Byte. Rpn on IN= IMPI ten NOD= 2806 03/19/20 00:41:44 2:03 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 2807 03/19/20 00:41:45 2:02 6672 5961 imp 3587080982063726 310410214827503 APPLE IPHONE8 2808 03/19/20 00:43:47 3:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2809 03/19/20 00:43:49 1:05 6692 6000 imp 3587080982063726 310410214827503 APPLE IPM01428 2810 03/19/20 00:44:54 0:20 3872 1572 ins 3587080982063726 310410214827503 APPLE IPHONE8 2811 03/19/20 00:45:14 1:39 2644 1324 ins 3587080982063726 310410214827503 APPLE !PHONES 2812 03/19/20 00:46:52 19:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2813 03/19/20 00:46:53 19:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2814 03/19/20 00:46:54 19:02 6351 6674 ins 3587080982063726 310410214827503 APPLE !PHONES 2815 03/19/20 00:46:55 19:02 6674 6087 ins 3587080982063726 310410214827503 APPLE !PHONES 2816 03/19/20 00:47:12 60:00 20306 9690 ins -1 310410214827503 2817 03/19/20 01:05:57 7:41 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2818 03/19/20 01:13:37 2:15 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2819 03/19/20 01:13:38 2:15 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2820 03/19/20 01:15:53 2:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2821 03/19/20 01:18:50 2:14 192 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2822 03/19/20 01:18:51 2:14 0 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2823 03/19/20 01:21:05 0:47 0 Onattgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 2824 03/19/20 01:21:51 8:14 192 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2825 03/19/20 01:21:52 8:14 0 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2826 03/19/20 01:30:06 5:35 0 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2827 03/19/20 01:35:40 14:38 192 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2828 03/19/20 01:35:41 14:38 0 Onattgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2829 03/19/20 01:47:12 60:00 7064 2880 ins -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 116 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002760 PsisTili AL not for general distribution. EF-EA_O0116836 EFTA01251360 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. %C.7,, ‘ing° 4a AT&T Run Data: Run Tuna: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating LT Time Number (OTC) Bytes UP Byte. Apn Dn ICI INSI MARL MODEL 2830 03/19/20 01:50:19 2:48 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2831 03/19/20 01:53:06 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2832 03/19/20 01:53:07 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2833 03/19/20 01:55:17 3:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2834 03/19/20 01:58:21 2:05 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2835 03/19/20 01:58:23 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2836 03/19/20 02:00:27 4:49 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2837 03/19/20 02:05:15 18:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2838 03/19/20 02:05:16 18:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2839 03/19/20 02:23:41 7:51 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2840 03/19/20 02:23:42 7:51 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2841 03/19/20 02:31:33 8:23 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2842 03/19/20 02:31:34 8:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2843 03/19/20 02:39:56 6:12 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2844 03/19/20 02:39:57 6:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2845 03/19/20 02:46:09 12:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2846 03/19/20 02:47:12 60:00 8388 2896 imp -1 310410214827503 2847 03/19/20 02:58:31 2:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2848 03/19/20 02:58:32 2:11 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2849 03/19/20 03:00:43 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2850 03/19/20 03:01:16 40:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002761 not for general distribution. Page 117 EFIA_OCIII6837 EFTA01251361 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, ...,,,,• ••-s`' AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating Cr Time Rumbas (UTC) Bytes UP Byte. Apn Dn INLI INS/ KAM NICOLL 2851 03/19/20 03:01:17 52:53 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2852 03/19/20 03:47:12 60:00 11596 4004 ins -1 310410214827503 2853 03/19/20 03:54:10 2:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2854 03/19/20 03:54:11 2:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2855 03/19/20 03:56:20 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2856 03/19/20 03:56:53 8:33 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2857 03/19/20 03:56:54 8:33 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2858 03/19/20 04:05:26 8:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2859 03/19/20 04:05:28 8:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2860 03/19/20 04:13:59 19:14 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2861 03/19/20 04:33:12 14:52 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2862 03/19/20 04:33:13 14:52 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2863 03/19/20 04:47:12 60:00 8604 3112 imp -1 310410214827503 2864 03/19/20 04:48:05 1:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2865 03/19/20 04:49:34 21:18 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2866 03/19/20 04:49:34 21:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2867 03/19/20 05:10:52 27:29 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2868 03/19/20 05:10:53 27:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 2869 03/19/20 05:38:22 0:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2870 03/19/20 05:38:55 72:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2871 03/19/20 05:38:56 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2872 03/19/20 05:47:12 36:19 6848 2932 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002762 NaTtAdti not for general distribution. Page 118 EF-EA_O0116838 EFTA01251362 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ......„ ••-s`"1.0 AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating CT Timo Number (OTC) Byte. Up Bytoa Apn On INEI IMSI MUM MODEL 2873 03/19/20 06:24:17 26:48 6246 6666 imp 3587080982063726 310410214827503 APPLE IPHONEB 2874 03/19/20 06:24:18 26:48 6666 5982 imp 3587080982063726 310410214827503 APPLE IPHONEB 2875 03/19/20 06:38:56 12:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPROME8 2876 03/19/20 06:51:06 0:51 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2877 03/19/20 06:51:56 21:18 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2878 03/19/20 06:51:57 21:18 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2879 03/19/20 06:56:36 60:00 16703 9200 imp -1 310410214827503 2880 03/19/20 07:13:15 8:39 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2881 03/19/20 07:13:16 8:39 0 Onatgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 2882 03/19/20 07:21:55 46:41 192 Onatgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2883 03/19/20 07:21:56 46:41 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2884 03/19/20 07:56:36 60:00 6972 2664 imp -1 310410214827503 2885 03/19/20 08:08:36 21:07 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2886 03/19/20 08:08:37 21:07 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2887 03/19/20 08:29:44 0:36 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2888 03/19/20 08:30:19 40:22 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2889 03/19/20 08:30:20 40:22 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2890 03/19/20 08:56:36 60:00 10236 3360 imp -1 310410214827503 2891 03/19/20 09:10:42 14:55 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2892 03/19/20 09:10:43 14:55 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2893 03/19/20 09:25:37 33:55 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2894 03/19/20 09:25:38 33:55 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2895 03/19/20 09:56:36 60:00 9928 3252 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 119 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002763 not for general distribution. EF-EA_O0116839 EFTA01251363 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number CT Byte. Up Bytom Apn Dn TM= IMS1 NICOLL 2896 03/19/20 09:59:33 0:38 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2897 03/19/20 10:00:10 2:49 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2898 03/19/20 10:00:11 2:49 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2899 03/19/20 10:03:00 0:33 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2900 03/19/20 10:03:32 28:46 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2901 03/19/20 10:03:33 28:46 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2902 03/19/20 10:32:19 55:25 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2903 03/19/20 10:56:36 60:00 8264 2772 ims -1 310410214827503 2904 03/19/20 11:27:43 31:53 192 Onatgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2905 03/19/20 11:27:44 31:53 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2906 03/19/20 11:56:36 60:00 13568 4752 ims -1 310410214827503 2907 03/19/20 11:59:37 11:37 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2908 03/19/20 11:59:38 11:37 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2909 03/19/20 12:11:15 8:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2910 03/19/20 12:19:15 15:40 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2911 03/19/20 12:19:16 15:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2912 03/19/20 12:34:55 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2913 03/19/20 12:47:26 60:00 18813 9516 imo -1 310410214827503 2914 03/19/20 12:56:36 60:00 0 0 imp -1 310410214827503 2915 03/19/20 13:34:55 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2916 03/19/20 13:47:26 60:00 8372 3036 imo -1 310410214827503 2917 03/19/20 13:56:36 60:00 0 0 imp -1 310410214827503 2918 03/19/20 14:34:55 32:28 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 2919 03/19/20 14:47:26 60:00 4748 2248 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 120 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002764 s bn mild is not for general distribution. EF-EAJVII6840 EFTA01251364 MOBILITY The information contained her is 2996479 06/17/2020 ATET has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. ....,,,• ••-"s" -". AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 la:SS:41 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Min Dn IN= IM9I 2920 03/19/20 14:56:36 4:16 0 0 ims -1 310410214827503 2921 03/19/20 15:00:52 60:00 19541 11190 ins -1 310410214827503 2922 03/19/20 15:07:22 2:06 192 0 nxtgonpho no 3587080982063726 310410214827503 2923 03/19/20 15:07:23 2:06 0 0 nxtgonpho no 3587080982063726 310410214827503 2924 03/19/20 15:09:29 2:19 0 Onxtgonpho no 3587080982063726 310410214827503 2925 03/19/20 15:11:48 2:02 192 Onxtgonpho no 3587080982063726 310410214827503 2926 03/19/20 15:11:49 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 2927 03/19/20 15:13:52 1:14 0 Onxtgonpho no 3587080982063726 310410214827503 2928 03/19/20 15:15:05 1:56 192 Oruftgonpho no 3587080982063726 310410214827503 2929 03/19/20 15:15:06 1:56 0 Oruftgonpho no 3587080982063726 310410214827503 2930 03/19/20 15:17:02 4:44 0 0 nxtgonpho no 3587080982063726 310410214827503 2931 03/19/20 15:21:45 20:00 192 Onxtgonpho no 3587080982063726 310410214827503 2932 03/19/20 15:21:46 35:07 0 Onxtgonpho no 3587080982063726 310410214827503 2933 03/19/20 15:47:26 60:00 0 0 ims -1 310410214827503 2934 03/19/20 15:56:53 0:34 0 Onxtgonpho no 3587080982063726 310410214827503 2935 03/19/20 15:57:27 38:59 192 0 nxtgonpho no 3587080982063726 310410214827503 2936 03/19/20 15:57:27 39:00 0 Onxtgonpho no 3587080982063726 310410214827503 2937 03/19/20 16:00:52 60:00 15244 12636 ims -1 310410214827503 2938 03/19/20 16:29:56 0:40 1857 0 ims -1 310410214827503 2939 03/19/20 16:36:27 12:41 0 Onxtgonpho no 3587080982063726 310410214827503 2940 03/19/20 16:47:26 23:01 0 0 ims -1 310410214827503 2941 03/19/20 16:49:07 2:21 192 Onxtgonpho no 3587080982063726 310410214827503 2942 03/19/20 16:49:09 2:20 0 Onxtgonpho no 3587080982063726 310410214827503 MKT MOD= APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 121 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002765 NTifikE not for general distribution. EF-EA_00116841 EFTA01251365 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating Time Number (OTC) CT Byte. UP Byte. Apn Dn INSI MARL MODEL 2943 03/19/20 16:51:29 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2944 03/19/20 16:52:10 2:41 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2945 03/19/20 16:52:11 2:41 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2946 03/19/20 16:54:52 2:22 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2947 03/19/20 16:54:53 2:22 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPROME8 2948 03/19/20 16:57:15 41:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2949 03/19/20 17:00:52 14:42 4840 2680 imp -1 310410214827503 2950 03/19/20 17:10:27 43:09 15853 12072 imp -1 310410214827503 2951 03/19/20 17:38:32 17:57 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2952 03/19/20 17:38:33 17:57 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2953 03/19/20 17:53:12 3:17 7220 6844 imp 3587080982063726 310410214827503 APPLE !PHONES 2954 03/19/20 17:53:13 3:17 6736 6956 imp 3587080982063726 310410214827503 APPLE !PHONES 2955 03/19/20 17:53:36 60:00 11309 6742 imp -1 310410214827503 2956 03/19/20 17:56:30 8:45 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2957 03/19/20 18:05:14 2:18 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2958 03/19/20 18:05:16 2:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2959 03/19/20 18:07:11 0:21 6244 6674 imp 3587080982063726 310410214827503 APPLE !PHONES 2960 03/19/20 18:07:12 0:21 6674 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 2961 03/19/20 18:07:33 1:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 2962 03/19/20 18:07:34 0:01 0 0 as 3587080982063726 310410214827503 APPLE 1PROME8 2963 03/19/20 18:07:42 0:40 6672 5964 as 3587080982063726 310410214827503 APPLE !PHONES 2964 03/19/20 18:08:22 60:00 13768 4700 as 3587080982063726 310410214827503 APPLE !PHONES 2965 03/19/20 18:09:06 5:51 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2966 03/19/20 18:09:07 5:51 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2967 03/19/20 18:14:58 0:32 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE 1PROME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 122 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002766 not for general distribution. EF-EAJVII6842 EFTA01251366 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage for: Item Conn. Date 06/17/2020 Conn. Originating ST Time Number (um) Bytes Up Bytes Apn Dn IMBI NICOLL 2968 03/19/20 18:15:29 81:06 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2969 03/19/20 18:15:30 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2970 03/19/20 18:53:36 54:41 0 0 ims -1 310410214827503 2971 03/19/20 19:08:22 45:19 13716 7424 ims 3587080982063726 310410214827503 APPLE !PHONES 2972 03/19/20 19:15:30 21:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2973 03/19/20 19:26:32 0:19 0 520 ims 3587080982063726 310410214827503 APPLE !PHONES 2974 03/19/20 19:36:36 5:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2975 03/19/20 19:41:37 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2976 03/19/20 19:41:38 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2977 03/19/20 19:43:48 2:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2978 03/19/20 19:45:59 2:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2979 03/19/20 19:46:00 2:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2980 03/19/20 19:48:09 40:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2981 03/19/20 19:48:16 0:01 0 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2982 03/19/20 19:48:30 0:04 48 0 ims 3587080982063726 310410214827503 APPLE !PHONES 2983 03/19/20 19:54:35 60:00 26556 11232 ims -1 310410214827503 2984 03/19/20 20:28:45 8:30 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2985 03/19/20 20:28:46 8:30 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2986 03/19/20 20:37:16 6:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2987 03/19/20 20:43:26 8:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 2988 03/19/20 20:43:27 8:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2989 03/19/20 20:51:53 39:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2990 03/19/20 20:54:35 47:17 3424 1340 ims -1 310410214827503 2991 03/19/20 21:30:57 61:25 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002767 not for general distribution. Page 123 EF-EA_00116843 EFTA01251367 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tri ‘ sO AT&T Run Oato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 16:55:45 Conn. Time (OTC) Originating Number UP ET Bytes Bytes Apn Dn ItCEI INS' MARL MODEL 2992 03/19/20 21:30:58 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2993 03/19/20 21:51:45 40:37 8164 6868 ins 3587080982063726 310410214827503 APPLE !PHONES 2994 03/19/20 21:51:46 40:37 6868 8008 ins 3587080982063726 310410214827503 APPLE !PHONES 2995 03/19/20 21:52:05 9:49 10815 8812 isms -1 310410214827503 2996 03/19/20 22:01:54 30:28 9700 10530 isms 3587080982063726 310410214827503 APPLE !PHONES 2997 03/19/20 22:01:55 30:28 10530 9436 isms 3587080982063726 310410214827503 APPLE !PHONES 2998 03/19/20 22:30:58 1:25 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 2999 03/19/20 22:32:23 1:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3000 03/19/20 22:33:48 8:41 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3001 03/19/20 22:33:49 8:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3002 03/19/20 22:36:21 60:00 21342 12618 isms -1 310410214827503 3003 03/19/20 22:42:30 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3004 03/19/20 22:42:59 37:24 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3005 03/19/20 22:43:00 37:24 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3006 03/19/20 23:20:24 8:28 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3007 03/19/20 23:28:52 43:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3008 03/19/20 23:28:53 43:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3009 03/19/20 23:36:21 60:00 8496 3020 isms -1 310410214827503 3010 03/20/20 00:12:05 17:27 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3011 03/20/20 00:29:32 11:20 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3012 03/20/20 00:29:33 11:20 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3013 03/20/20 00:36:21 60:00 8728 3128 ins -1 310410214827503 3014 03/20/20 00:40:53 4:32 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3015 03/20/20 00:45:24 2:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002768 PsiTniliAL not for general distribution. Page 124 EFTA_00116844 EFTA01251368 MOBILITY The information contained heralCoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tri ng°sit AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn On IKE' IMS1 MARE MODEL 3016 03/20/20 00:45:25 2:11 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3017 03/20/20 00:47:36 0:39 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3018 03/20/20 00:48:15 8:45 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3019 03/20/20 00:48:16 8:45 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3020 03/20/20 00:57:01 1:40 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3021 03/20/20 00:58:40 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3022 03/20/20 00:58:41 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3023 03/20/20 01:00:44 14:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3024 03/20/20 01:15:24 14:56 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3025 03/20/20 01:15:24 14:57 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3026 03/20/20 01:30:21 1:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3027 03/20/20 01:31:31 39:34 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3028 03/20/20 01:31:32 39:34 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3029 03/20/20 01:36:21 24:43 3424 1432 ims -1 310410214827503 3030 03/20/20 02:01:02 10:03 7228 6804 ims 3587080982063726 310410214827503 APPLE IPHOME8 3031 03/20/20 02:01:03 10:03 6736 6964 ims 3587080982063726 310410214827503 APPLE IPHOME8 3032 03/20/20 02:02:44 60:00 15057 8834 I. -1 310410214827503 3033 03/20/20 02:11:05 2:11 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3034 03/20/20 02:11:06 2:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3035 03/20/20 02:13:17 10:19 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3036 03/20/20 02:23:35 8:16 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 3037 03/20/20 02:23:36 8:16 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 125 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002769 NTroliAL not for general distribution. EF-EA_00116845 EFTA01251369 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in ...., ••--s`' s0•AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 18:55:45 Conn. originating ET Time Number op (OTC) Bytes Bytes Apn Dn IND I INSI MARL 3038 03/20/20 02:31:52 39:29 0 OruMgonpho no 3587080982063726 310410214827503 APPLE 3039 03/20/20 03:02:44 60:00 8388 3004 ims -1 310410214827503 3040 03/20/20 03:11:21 30:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3041 03/20/20 03:11:22 35:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3042 03/20/20 03:46:32 2:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3043 03/20/20 03:46:33 2:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3044 03/20/20 03:48:42 1:14 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3045 03/20/20 03:49:55 21:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3046 03/20/20 03:49:56 21:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3047 03/20/20 04:02:44 60:00 8388 3020 ims -1 310410214827503 3048 03/20/20 04:11:08 50:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3049 03/20/20 05:01:08 28:52 192 OruMgonpho no 3587080982063726 310410214827503 APPLE 3050 03/20/20 05:01:09 28:52 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3051 03/20/20 05:02:44 60:00 10036 3176 ims -1 310410214827503 3052 03/20/20 05:30:02 21:58 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3053 03/20/20 05:51:59 14:46 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3054 03/20/20 05:52:00 14:46 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3055 03/20/20 06:02:44 60:00 16992 6140 ims -1 310410214827503 3056 03/20/20 06:06:46 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3057 03/20/20 07:02:44 60:00 7064 2788 imp -1 310410214827503 3058 03/20/20 07:06:46 8:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3059 03/20/20 07:15:39 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3060 03/20/20 07:15:41 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002770 NaTtAdti not for general distribution. Page 126 EF-EAJVII6846 EFTA01251370 MOBILITY The information contained heraleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in •.,..., ‘..S. sam% AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 16:55:45 Conn. Time (DSC) Originating Number Cr Bytes UP Byte. Alan Dn INLI INBI Mal MODEL 3061 03/20/20 07:17:44 3:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3062 03/20/20 07:20:49 3:21 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3063 03/20/20 07:20:50 3:21 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3064 03/20/20 07:24:11 34:08 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3065 03/20/20 07:24:12 34:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3066 03/20/20 07:58:20 54:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3067 03/20/20 08:02:44 60:00 8388 2928 ins -1 310410214827503 3068 03/20/20 08:53:00 15:29 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3069 03/20/20 08:53:01 15:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3070 03/20/20 09:02:44 60:00 7172 2912 ins -1 310410214827503 3071 03/20/20 09:08:30 8:35 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3072 03/20/20 09:08:31 8:35 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3073 03/20/20 09:17:06 0:53 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3074 03/20/20 09:17:58 9:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3075 03/20/20 09:17:59 9:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3076 03/20/20 09:27:11 162:37 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3077 03/20/20 09:27:12 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3078 03/20/20 10:02:44 60:00 10256 4236 ins -1 310410214827503 3079 03/20/20 10:27:12 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3080 03/20/20 11:02:44 60:00 15016 4924 ins -1 310410214827503 3081 03/20/20 11:27:12 42:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3082 03/20/20 12:02:44 60:00 6956 2896 imp -1 310410214827503 3083 03/20/20 12:09:48 9:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002771 NTroliAL not for general distribution. Page 127 EF-EA_00116847 EFTA01251371 The information contained herceoNftli 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. • tr,"`"Ird AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 MI= Item Conn. Date Conn. Originating ET Time Number (OTC) Bytes Op Bytes Apn Dn INCI IMSI 3084 03/20/20 12:09:50 9:25 0 Onxtgonpho no 3587080982063726 310410214827503 3085 03/20/20 12:19:14 6:07 192 Onxtgonpho no 3587080982063726 310410214827503 3086 03/20/20 12:19:15 6:07 0 Onxtgonpho no 3587080982063726 310410214827503 3087 03/20/20 12:25:22 0:05 0 Onxtgonpho no 3587080982063726 310410214827503 3088 03/20/20 12:25:38 40:55 0 Onxtgonpho no 3587080982063726 310410214827503 3089 03/20/20 13:02:44 60:00 11580 4252 ims -1 310410214827503 3090 03/20/20 13:06:32 2:04 192 Oruagonpho no 3587080982063726 310410214827503 3091 03/20/20 13:06:34 2:03 0 Oruagonpho no 3587080982063726 310410214827503 3092 03/20/20 13:08:37 42:12 0 Onxtgonpho no 3587080982063726 310410214827503 3093 03/20/20 13:50:48 2:21 192 Onxtgonpho no 3587080982063726 310410214827503 3094 03/20/20 13:50:50 2:20 0 Onxtgonpho no 3587080982063726 310410214827503 3095 03/20/20 13:53:10 21:26 0 Onxtgonpho no 3587080982063726 310410214827503 3096 03/20/20 14:02:44 60:00 9784 3300 ims -1 310410214827503 3097 03/20/20 14:14:36 8:05 192 Onxtgonpho no 3587080982063726 310410214827503 3098 03/20/20 14:14:37 8:05 0 Onxtgonpho no 3587080982063726 310410214827503 3099 03/20/20 14:22:42 5:08 0 Onxtgonpho no 3587080982063726 310410214827503 3100 03/20/20 14:27:49 18:33 192 Oruagonpho no 3587080982063726 310410214827503 3101 03/20/20 14:27:50 18:33 0 Onxtgonpho no 3587080982063726 310410214827503 3102 03/20/20 14:46:23 5:23 0 Onxtgonpho no 3587080982063726 310410214827503 3103 03/20/20 14:51:45 15:28 192 Onxtgonpho no 3587080982063726 310410214827503 3104 03/20/20 14:51:46 15:28 0 Onxtgonpho no 3587080982063726 310410214827503 3105 03/20/20 15:02:44 60:00 8668 4176 ims 310410214827503 MARL I03DLL APPLE IPH01428 APPLE IPH01428 APPLE !PHONES APPLE !PHONES APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 APPLE IPH01428 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 128 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002772 PsiTniliAL not for general distribution. EF-EAJVII6848 EFTA01251372 MOBILITY The information contained heraleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41111, AT&T Run Date: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating Er Time Number (UTC) Bytes Up Bytoa Apn Dn INC' INSI MARL 3106 03/20/20 15:07:13 20:57 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3107 03/20/20 15:07:14 20:58 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3108 03/20/20 15:28:12 9:32 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3109 03/20/20 15:37:44 14:50 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3110 03/20/20 15:37:45 14:50 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3111 03/20/20 15:52:36 11:36 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3112 03/20/20 16:02:44 60:00 18056 6404 as -1 310410214827503 3113 03/20/20 16:04:11 2:04 192 Onmtgenpho no 3587080982063726 310410214827503 APPLE 3114 03/20/20 16:04:12 2:04 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE 3115 03/20/20 16:06:16 0:34 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3116 03/20/20 16:06:49 8:17 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3117 03/20/20 16:06:50 8:17 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3118 03/20/20 16:15:07 7:04 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3119 03/20/20 16:22:10 27:08 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3120 03/20/20 16:22:11 27:08 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3121 03/20/20 16:49:19 5:38 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3122 03/20/20 16:54:56 14:56 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3123 03/20/20 16:54:57 14:56 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3124 03/20/20 17:02:44 60:00 8744 4680 ims -1 310410214827503 3125 03/20/20 17:09:53 0:47 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3126 03/20/20 17:10:39 8:26 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE NICOLL 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES !PRONGS !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 129 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002773 NTniliAL not for general distribution. EF-Dk_00116849 EFTA01251373 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59nm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. .....,„# ••-••• `"1° AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 1S:55:45 Conn. Originating TT Time Number (UTC) Bytes Op Byte. arm Dn INLI INS' MAKE NICOLL 3127 03/20/20 17:10:40 8:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3128 03/20/20 17:19:06 3:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3129 03/20/20 17:22:46 15:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3130 03/20/20 17:22:47 15:11 0 0 nmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3131 03/20/20 17:37:57 2:23 192 0 nmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3132 03/20/20 17:37:58 2:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3133 03/20/20 17:40:21 6:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3134 03/20/20 17:40:22 6:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3135 03/20/20 17:46:31 1:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3136 03/20/20 17:47:30 8:23 192 0 nmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3137 03/20/20 17:47:31 8:23 0 0 nmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3138 03/20/20 17:55:54 44:08 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3139 03/20/20 18:02:44 60:00 8156 3712 ims -1 310410214827503 3140 03/20/20 18:40:02 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3141 03/20/20 18:40:03 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3142 03/20/20 18:42:07 55:32 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3143 03/20/20 19:02:44 60:00 16436 5228 ims -1 310410214827503 3144 03/20/20 19:37:38 8:36 192 0 nmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3145 03/20/20 19:37:40 8:36 0 0 nmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3146 03/20/20 19:46:15 6:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3147 03/20/20 19:46:16 6:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 130 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002774 WV& not for general distribution. EF-EA_O0116850 EFTA01251374 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 ii:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ap. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating I. all,. ET Bytes Up Bytom Apn Dn INEI IMISI MARL 3148 03/20/20 19:52:20 9:41 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3149 03/20/20 20:02:00 2:03 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3150 03/20/20 20:02:01 2:03 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3151 03/20/20 20:02:44 60:00 5072 1588 imo -1 310410214827503 3152 03/20/20 20:04:04 57:34 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3153 03/20/20 20:36:24 1:34 7802 6302 was 3587080982063726 310410214827503 APPLE 3154 03/20/20 20:37:58 60:00 13672 5576 was 3587080982063726 310410214827503 APPLE 3155 03/20/20 21:01:37 13:48 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3156 03/20/20 21:01:38 13:48 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3157 03/20/20 21:02:44 60:00 0 0 was -1 310410214827503 3158 03/20/20 21:15:26 2:04 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3159 03/20/20 21:17:30 2:10 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3160 03/20/20 21:17:31 2:10 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3161 03/20/20 21:19:41 0:05 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3162 03/20/20 21:20:02 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3163 03/20/20 21:37:58 60:00 8728 3020 vas 3587080982063726 310410214827503 APPLE 3164 03/20/20 22:02:44 60:00 0 0 vas -1 310410214827503 3165 03/20/20 22:20:02 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3166 03/20/20 22:37:58 60:00 13768 4824 was 3587080982063726 310410214827503 APPLE 3167 03/20/20 23:02:44 60:00 0 0 ims -1 310410214827503 3168 03/20/20 23:20:02 29:13 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3169 03/20/20 23:37:58 60:00 8604 3128 ims 3587080982063726 310410214827503 APPLE 3170 03/20/20 23:49:14 7:42 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3171 03/20/20 23:49:15 7:42 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Thiele communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 131 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002775 N:FroliAL not for general distribution. EF-EA_00ll6851 EFTA01251375 MOBILITY The information contained hereCtoNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41111, AT&T Run Date: Run Time: Data Osage For: 06/17/2020 18:55:46 Item Conn. Conn. Date Time (Inc) Originating Number 3172 03/20/20 23:56:57 22:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3173 03/21/20 00:02:44 24:06 0 0 ims -1 310410214827503 3174 03/21/20 00:19:36 2:11 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3175 03/21/20 00:19:38 2:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE • 3176 03/21/20 00:21:48 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3177 03/21/20 00:37:58 60:00 10036 3268 ims 3587080982063726 310410214827503 APPLE 3178 03/21/20 01:21:48 36:26 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3179 03/21/20 01:37:58 60:00 13568 4752 ims 3587080982063726 310410214827503 APPLE 3180 03/21/20 01:58:13 13:55 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3181 03/21/20 01:58:14 13:55 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE 3182 03/21/20 02:12:08 1:21 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3183 03/21/20 02:12:09 1:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3184 03/21/20 02:13:30 11:29 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3185 03/21/20 02:24:59 4:09 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE 3186 03/21/20 02:29:07 47:53 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE 3187 03/21/20 02:29:08 47:53 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3188 03/21/20 02:37:58 16:32 5072 1572 ims 3587080982063726 310410214827503 APPLE 3189 03/21/20 02:54:03 22:57 6228 6736 ims 3587080982063726 310410214827503 APPLE 3190 03/21/20 02:54:04 22:57 6668 6072 ims 3587080982063726 310410214827503 APPLE 3191 03/21/20 02:54:30 60:00 16504 9140 ims -1 310410214827503 3192 03/21/20 03:17:01 20:00 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3193 03/21/20 03:17:02 31:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3194 03/21/20 03:48:08 8:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3195 03/21/20 03:54:30 60:00 10036 3392 ims -1 310410214827503 Op ET Bytes Bytoa Apn INLI IMSI Men Dn 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 132 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002776 NaTtAdti not for general distribution. EF-EA_O0116852 EFTA01251376 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in tras""s d AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 18:55:46 Conn. Originating ET Time Humber UP (OTC) Bytes Bytes, Apr. Dn IMBI teal NICOLL 3196 03/21/20 03:56:41 97:16 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3197 03/21/20 03:56:42 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3198 03/21/20 04:54:30 60:00 9928 3268 imo -1 310410214827503 3199 03/21/20 04:56:42 37:16 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3200 03/21/20 05:33:58 0:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3201 03/21/20 05:49:12 3:35 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3202 03/21/20 05:49:13 3:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3203 03/21/20 05:52:48 4:43 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3204 03/21/20 05:54:30 60:00 8496 3128 imo -1 310410214827503 3205 03/21/20 05:57:30 13:55 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 3206 03/21/20 05:57:31 13:55 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3207 03/21/20 06:11:26 24:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3208 03/21/20 06:35:56 8:15 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 3209 03/21/20 06:35:57 8:15 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 3210 03/21/20 06:44:12 14:22 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 3211 03/21/20 06:44:13 14:22 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 3212 03/21/20 06:54:30 60:00 10828 4484 ins -1 310410214827503 3213 03/21/20 06:58:35 4:51 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 3214 03/21/20 07:03:26 4:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 3215 03/21/20 07:07:26 9:27 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3216 03/21/20 07:07:27 9:27 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3217 03/21/20 07:16:54 1:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. Tiara communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002777 not for general distribution. Page 133 EF-EAJVII6853 EFTA01251377 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. AT&T Run Date: Run Time: Data Usage For: Itea Conn. Date 06/17/2020 18.55.46 Cr Bytes Byte. Apn on Conn. originating rust IMBI min Time Number up (OTC) 3218 03/21/20 07:18:31 57:10 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3219 03/21/20 07:18:32 57:10 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3220 03/21/20 07:54:30 60:00 12244 4860 imp -1 310410214827503 3221 03/21/20 08:15:42 30:53 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3222 03/21/20 08:46:35 8:02 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3223 03/21/20 08:54:30 60:00 7172 3128 ims -1 310410214827503 3224 03/21/20 08:54:36 3:11 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3225 03/21/20 08:54:37 3:11 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3226 03/21/20 08:57:48 28:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3227 03/21/20 09:25:47 3:13 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3228 03/21/20 09:25:48 3:13 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3229 03/21/20 09:29:01 21:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3230 03/21/20 09:50:01 2:51 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3231 03/21/20 09:52:52 0:06 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3232 03/21/20 09:54:30 60:00 13908 4996 ims -1 310410214827503 3233 03/21/20 09:54:31 7:58 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3234 03/21/20 10:02:28 1:13 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3235 03/21/20 10:02:29 1:13 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3236 03/21/20 10:03:42 3:48 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3237 03/21/20 10:07:31 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3238 03/21/20 10:54:30 60:00 10036 3392 ims -1 310410214827503 3239 03/21/20 11:07:31 2:38 0 0 nxtgenpho 3587080982063726 310410214827503 APPLE no mom. 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES !PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002778 NeTniliAL not for general distribution. Page 134 EFTA_00116854 EFTA01251378 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET 21mo Number (U2C) Bytes Up Byte. Ann Dn INCI ISIS I teal 3240 03/21/20 11:10:09 1:25 0 0 ructgonpho no 3587080982063726 310410214827503 APPLE 3241 03/21/20 11:11:33 2:44 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3242 03/21/20 11:11:34 2:44 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3243 03/21/20 11:14:18 19:09 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3244 03/21/20 11:33:28 14:25 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3245 03/21/20 11:47:53 26:28 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3246 03/21/20 11:54:30 60:00 8728 3052 into -1 310410214827503 3247 03/21/20 12:14:21 10:50 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3248 03/21/20 12:25:11 16:19 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 3249 03/21/20 12:41:30 0:44 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 3250 03/21/20 12:41:31 0:44 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3251 03/21/20 12:42:15 29:50 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 3252 03/21/20 12:54:30 60:00 12028 4640 into -1 310410214827503 3253 03/21/20 13:12:04 2:03 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 3254 03/21/20 13:12:05 2:03 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 3255 03/21/20 13:14:08 60:00 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 3256 03/21/20 13:54:30 60:00 8496 3036 ins -1 310410214827503 3257 03/21/20 14:14:08 14:56 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 3258 03/21/20 14:29:03 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3259 03/21/20 14:29:04 2:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3260 03/21/20 14:31:08 60:00 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 3261 03/21/20 14:54:30 60:00 8728 3160 ins -1 310410214827503 NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PRONGS !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 135 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002779 NeTtAti not for general distribution. EF-EA_O0116855 EFTA01251379 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41111, %---.,r,•/`"" .. e AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating LT Time Number op (UTC) Bytes Bytom Apn Dn Tier INS I NA= NICOLL 3262 03/21/20 15:31:08 53:21 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 3263 03/21/20 15:54:30 60:00 15496 5476 imo -1 310410214827503 3264 03/21/20 16:24:29 6:53 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3265 03/21/20 16:31:22 34:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3266 03/21/20 16:54:30 60:00 7188 2804 imo -1 310410214827503 3267 03/21/20 17:05:32 12:47 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3268 03/21/20 17:05:33 12:47 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3269 03/21/20 17:18:20 58:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3270 03/21/20 17:54:30 60:00 10252 3408 imo -1 310410214827503 3271 03/21/20 18:22:28 42:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110HONZ8 3272 03/21/20 18:22:29 42:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3273 03/21/20 18:54:30 60:00 11796 4484 imp -1 310410214827503 3274 03/21/20 19:04:38 4:18 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110HONZ8 3275 03/21/20 19:04:40 4:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3276 03/21/20 19:08:57 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3277 03/21/20 19:54:30 60:00 8496 3144 imp -1 310410214827503 3278 03/21/20 20:08:57 16:46 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3279 03/21/20 20:25:42 37:54 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3280 03/21/20 20:25:43 37:54 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3281 03/21/20 20:54:30 60:00 13460 4624 ins -1 310410214827503 3282 03/21/20 21:03:37 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IrRONE8 3283 03/21/20 21:54:30 60:00 10252 3300 ins -1 310410214827503 3284 03/21/20 22:03:37 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 3285 03/21/20 22:54:30 46:10 3440 1464 imo 3587080982063726 310410214827503 APPLE 110H014Z8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is Page 136 SDNY_GM_ 00002780 NT4AL not for general distribution. EF-EA_00ll6856 EFTA01251380 MOBILITY The information contained heralCoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 411111, ..... `•-s`"I‘ a f AT&T Run Data: Run Time: Data Usage For: 06/17/2020 18:55:46 Item Conn. Conn. Data Time Originating ET Bytes Bytom Apn INEI Number Up Dn INBI ten NICOLL (OTC) 3286 03/21/20 23:03:37 17:19 0 0 nmtgenpho no 3587080982063726 310410214827503 3287 03/21/20 23:20:55 2:03 192 -Oruftgenpho no 3587080982063726 310410214827503 3288 03/21/20 23:20:56 2:03 0 Oruftgenpho no 3587080982063726 310410214827503 3289 03/21/20 23:22:59 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 3290 03/21/20 23:40:40 3:35 6668 5859 imp 3587080982063726 310410214827503 3291 03/21/20 23:40:40 3:35 6604 5859 imp 3587080982063726 310410214827503 3292 03/21/20 23:44:15 60:00 13892 4716 imp 3587080982063726 310410214827503 3293 03/22/20 00:22:59 7:07 0 Oruftgenpho no 3587080982063726 310410214827503 3294 03/22/20 00:30:05 2:03 192 Oruftgerapho no 3587080982063726 310410214827503 3295 03/22/20 00:30:06 2:03 0 Oruftgenpho no 3587080982063726 310410214827503 3296 03/22/20 00:32:09 18:47 0 Onxtgenpho no 3587080982063726 310410214827503 3297 03/22/20 00:44:15 60:00 6848 2788 imp 3587080982063726 310410214827503 3298 03/22/20 00:50:55 8:14 192 Onxtgenpho no 3587080982063726 310410214827503 3299 03/22/20 00:50:56 8:14 0 Onxtgenpho no 3587080982063726 310410214827503 3300 03/22/20 00:59:10 1:16 0 Onxtgenpho no 3587080982063726 310410214827503 3301 03/22/20 01:00:25 0:57 192 Onxtgenpho no 3587080982063726 310410214827503 3302 03/22/20 01:00:26 0:57 0 Oruftgenpho no 3587080982063726 310410214827503 3303 03/22/20 01:01:23 4:58 0 Oruftgenpho no 3587080982063726 310410214827503 3304 03/22/20 01:06:20 13:22 192 Oruftgerapho no 3587080982063726 310410214827503 3305 03/22/20 01:06:21 13:22 0 Oruftgerapho no 3587080982063726 310410214827503 3306 03/22/20 01:19:43 2:02 0 Oruftgenpho no 3587080982063726 310410214827503 3307 03/22/20 01:21:44 2:11 192 Oruftgerapho no 3587080982063726 310410214827503 APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 137 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002781 NeTniliAL not for general distribution. EF-EA_O0116857 EFTA01251381 MOBILITY The information contained heralCoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111i AT&T Run pato: Run Time: Data Osage for: Item Conn. Date 06/17/2020 OM= Conn. Time (OTC) Originating Butter ET Bytes op Bytoa Apn Dn INSI MARL 3308 03/22/20 01:21:45 2:11 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3309 03/22/20 01:23:56 0:44 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3310 03/22/20 01:24:39 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3311 03/22/20 01:24:41 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3312 03/22/20 01:26:44 0:35 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3313 03/22/20 01:27:19 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3314 03/22/20 01:27:20 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3315 03/22/20 01:29:23 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3316 03/22/20 01:44:15 32:14 5180 1804 ins 3587080982063726 310410214827503 APPLE 3317 03/22/20 02:11:05 60:00 11882 8628 ins 3587080982063726 310410214827503 APPLE 3318 03/22/20 02:29:23 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3319 03/22/20 03:11:05 47:00 2596 1324 ins 3587080982063726 310410214827503 APPLE 3320 03/22/20 03:29:23 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3321 03/22/20 03:58:05 60:00 11888 4220 ins 3587080982063726 310410214827503 APPLE 3322 03/22/20 04:29:23 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3323 03/22/20 04:58:05 60:00 8712 3020 ins 3587080982063726 310410214827503 APPLE 3324 03/22/20 05:29:23 0:01 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3325 03/22/20 05:29:27 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3326 03/22/20 05:58:05 60:00 6956 2648 ins 3587080982063726 310410214827503 APPLE 3327 03/22/20 06:29:27 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3328 03/22/20 06:58:05 60:00 13228 4520 ins 3587080982063726 310410214827503 APPLE 3329 03/22/20 07:29:27 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3330 03/22/20 07:58:05 60:00 8496 3004 ins 3587080982063726 310410214827503 APPLE 3331 03/22/20 08:29:27 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL IPMONE8 IPMONE8 !PHONES !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 !PRONGS !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 138 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002782 NTifikE not for general distribution. EF-EA_00116858 EFTA01251382 NOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. arn. c•`",„,,,0ad 1. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 18:55:46 Conn. Originating ET Time Number (OTC) Bytes Op Byte. Apn Dn fuzz INS I teal NICOLL 3332 03/22/20 08:58:05 60:00 10488 4312 imp 3587080982063726 310410214827503 APPLE !PHONES 3333 03/22/20 09:29:27 0:01 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3334 03/22/20 09:29:31 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3335 03/22/20 09:58:05 60:00 6956 2880 imp 3587080982063726 310410214827503 APPLE 'PHONES 3336 03/22/20 10:29:31 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3337 03/22/20 10:58:05 60:00 6848 2540 imp 3587080982063726 310410214827503 APPLE 'PHONES 3338 03/22/20 11:29:31 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3339 03/22/20 11:58:05 60:00 13696 5472 imp 3587080982063726 310410214827503 APPLE !PHONES 3340 03/22/20 12:29:31 2:36 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3341 03/22/20 12:32:07 41:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3342 03/22/20 12:58:05 60:00 8388 3004 imp 3587080982063726 310410214827503 APPLE 'PHONES 3343 03/22/20 13:13:09 2:21 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3344 03/22/20 13:13:11 2:20 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3345 03/22/20 13:15:31 6:03 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3346 03/22/20 13:15:32 6:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3347 03/22/20 13:21:35 32:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3348 03/22/20 13:53:36 0:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3349 03/22/20 13:53:39 58:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3350 03/22/20 13:58:05 60:00 10036 3176 imp 3587080982063726 310410214827503 APPLE !PHONES 3351 03/22/20 14:54:13 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3352 03/22/20 14:58:05 60:00 9912 3020 imp 3587080982063726 310410214827503 APPLE 'PHONES 3353 03/22/20 15:54:13 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3354 03/22/20 15:58:05 60:00 13352 4576 imp 3587080982063726 310410214827503 APPLE 'PHONES 3355 03/22/20 16:54:13 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 139 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002783 NeTniliAL not for general distribution. EF-EA_00116859 EFTA01251383 MOBILITY The information contained heraleeNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and UTC. provided in AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 18:55:46 CT Bytes UP Bytes Apn On Conn. INZI INSI MARL Time (OTC) Originating Number 3356 03/22/20 16:58:05 60:00 6956 2756 ims 3587080982063726 310410214827503 APPLE 3357 03/22/20 17:54:13 39:58 0 Ormagonpho no 3587080982063726 310410214827503 APPLE 3358 03/22/20 17:58:05 60:00 11812 4720 ims 3587080982063726 310410214827503 APPLE 3359 03/22/20 18:34:10 0:42 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3360 03/22/20 18:34:11 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3361 03/22/20 18:34:53 3:14 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3362 03/22/20 18:38:06 23:03 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3363 03/22/20 18:38:07 23:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3364 03/22/20 18:58:05 60:00 15020 4716 ims 3587080982063726 310410214827503 APPLE 3365 03/22/20 19:01:11 1:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3366 03/22/20 19:02:47 12:30 192 Ormtgonpho no 3587080982063726 310410214827503 APPLE 3367 03/22/20 19:02:48 12:30 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3368 03/22/20 19:15:18 44:20 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3369 03/22/20 19:58:05 60:00 10036 3144 ims 3587080982063726 310410214827503 APPLE 3370 03/22/20 19:59:37 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3371 03/22/20 19:59:39 2:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3372 03/22/20 20:01:48 9:18 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3373 03/22/20 20:11:05 1:23 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3374 03/22/20 20:11:06 1:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3375 03/22/20 20:12:28 9:21 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3376 03/22/20 20:12:29 9:21 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3377 03/22/20 20:21:49 6:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002784 PsiTniliAL not for general distribution. Page 140 EFTA_00I 16860 EFTA01251384 MOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 LL:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4011, .....„ ••-s`" a0/ AT&T Run Dato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 1S:53:46 Conn. Time /OTC) Originating ',umber ET Byte. Op Bytom Apn Dn par IN6I ten MODEL 3378 03/22/20 20:21:50 6:09 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3379 03/22/20 20:27:59 17:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3380 03/22/20 20:45:01 7:26 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3381 03/22/20 20:45:02 7:27 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3382 03/22/20 20:52:29 14:32 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 3383 03/22/20 20:58:05 18:40 14120 3456 ins 3587080982063726 310410214827503 APPLE DRONES 3384 03/22/20 21:07:00 9:46 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 3385 03/22/20 21:07:01 9:46 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 3386 03/22/20 21:16:47 11:17 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3387 03/22/20 21:16:50 0:03 0 0 ins 3587080982063726 310410214827503 APPLE !PHONES 3388 03/22/20 21:16:59 60:00 21488 9906 ins -1 310410214827503 3389 03/22/20 21:28:03 4:51 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 3390 03/22/20 21:28:05 4:50 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 3391 03/22/20 21:32:55 3:36 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 3392 03/22/20 21:36:31 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 3393 03/22/20 21:36:32 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 3394 03/22/20 21:38:35 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 3395 03/22/20 22:16:59 60:00 6848 2772 ins -1 310410214827503 3396 03/22/20 22:38:35 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 3397 03/22/20 23:16:59 60:00 7064 2664 ins -1 310410214827503 3398 03/22/20 23:38:35 48:53 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 3399 03/23/20 00:16:59 60:00 7388 2928 ins -1 310410214827503 3400 03/23/20 00:27:27 2:17 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 141 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002785 PsiTn iliAL not for general distribution. EFTAJVII6861 EFTA01251385 MOBILITY The information contained her is (UTC) 3401 03/23/20 00:27:29 2:16 0 0 nxtgonpho no 3587080982063726 310410214827503 3402 03/23/20 00:29:45 6:04 192 Oruftgonpho no 3587080982063726 310410214827503 3403 03/23/20 00:29:46 6:04 0 Oruftgonpho no 3587080982063726 310410214827503 3404 03/23/20 00:35:50 2:09 0 Oruftgonpho no 3587080982063726 310410214827503 3405 03/23/20 00:37:58 2:04 192 Onxtgonpho no 3587080982063726 310410214827503 3406 03/23/20 00:38:00 2:04 0 Onxtgonpho no 3587080982063726 310410214827503 3407 03/23/20 00:40:03 0:50 0 Onxtgonpho no 3587080982063726 310410214827503 3408 03/23/20 00:40:52 2:03 192 Onxtgonpho no 3587080982063726 310410214827503 3409 03/23/20 00:40:53 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 3410 03/23/20 00:42:56 28:33 0 Onxtgonpho no 3587080982063726 310410214827503 3411 03/23/20 01:11:28 2:03 192 Onxtgonpho no 3587080982063726 310410214827503 3412 03/23/20 01:11:29 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 3413 03/23/20 01:13:32 9:15 0 Onxtgonpho no 3587080982063726 310410214827503 3414 03/23/20 01:16:59 60:00 7280 2912 imp -1 310410214827503 3415 03/23/20 01:22:47 9:04 192 0 nxtgonpho no 3587080982063726 310410214827503 3416 03/23/20 01:22:48 9:04 0 Onxtgonpho no 3587080982063726 310410214827503 3417 03/23/20 01:31:52 13:32 0 Onxtgonpho no 3587080982063726 310410214827503 3418 03/23/20 01:45:23 2:04 192 Onxtgonpho no 3587080982063726 310410214827503 3419 03/23/20 01:45:24 2:04 0 Onxtgonpho no 3587080982063726 310410214827503 3420 03/23/20 01:47:28 47:29 0 Onxtgonpho no 3587080982063726 310410214827503 3421 03/23/20 01:56:45 0:00 0 0 imp 3587080982063726 310410214827503 3422 03/23/20 01:56:56 60:00 18301 9608 imp -1 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern (ITC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ....,,,• ••-s`' AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Originating 22 Bytes Byte. Apn IRE' Mal MARE MODEL Date Time Number Up Dn APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE 1PROME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 142 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002786 NTifikE not for general distribution. EF-EAJVII6862 EFTA01251386 MOBILITY The information contained heraleeNftit 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tez- `"Iaai°. AT&T Run pato: Run Time: Data usage For: Item cone. Date 06/17/2020 Conn. Time (LTC) originating Number ET Bytes Up eytoa Apn on INEI INS I MAKE NICOLL 3423 03/23/20 02:16:59 60:00 0 0 ims -1 310410214827503 3424 03/23/20 02:34:56 2:04 192 0 netgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3425 03/23/20 02:34:57 2:04 0 0 netgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3426 03/23/20 02:37:01 7:01 0 Onetgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3427 03/23/20 02:44:01 2:03 192 Onetgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3428 03/23/20 02:44:02 2:03 0 Onetgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3429 03/23/20 02:46:05 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3430 03/23/20 02:56:56 60:00 8496 3500 ims -1 310410214827503 3431 03/23/20 03:16:59 60:00 0 0 ims -1 310410214827503 3432 03/23/20 03:46:05 17:46 0 0 netgonpho no 3587080982063726 310410214827503 APPLE IPRONZ8 3433 03/23/20 03:56:56 60:00 21140 10312 ims -1 310410214827503 3434 03/23/20 04:01:14 0:23 0 1749 ins -2 310410214827503 3435 03/23/20 04:03:50 20:27 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3436 03/23/20 04:03:51 20:27 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3437 03/23/20 04:16:59 60:00 0 0 ins -1 310410214827503 3438 03/23/20 04:24:18 3:45 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3439 03/23/20 04:28:03 8:33 192 Onetgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3440 03/23/20 04:28:04 8:33 0 Onetgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3441 03/23/20 04:36:37 0:05 0 Onetgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3442 03/23/20 04:36:56 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3443 03/23/20 04:56:56 60:00 8512 3036 ims -1 310410214827503 3444 03/23/20 05:16:59 25:30 0 0 ims -1 310410214827503 3445 03/23/20 05:36:56 60:00 0 Onetgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 3446 03/23/20 05:56:56 60:00 10380 4144 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 143 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002787 not for general distribution. EF-EA_00116863 EFTA01251387 MOBILITY The information contained hereleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 18:55:46 Conn. Time (OTC) originating Number Op ET Bytes Byte. Apn Dn INEI 'BSI MAKE 3447 03/23/20 06:36:56 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3448 03/23/20 06:56:56 60:00 10380 4036 ims -1 310410214827503 3449 03/23/20 07:36:56 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3450 03/23/20 07:56:56 60:00 6848 2880 inn -1 310410214827503 3451 03/23/20 08:36:56 0:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3452 03/23/20 08:36:58 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3453 03/23/20 08:56:56 60:00 11812 4376 inn -1 310410214827503 3454 03/23/20 09:36:58 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3455 03/23/20 09:56:56 60:00 7064 2912 inn -1 310410214827503 3456 03/23/20 10:36:58 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3457 03/23/20 10:56:56 60:00 6848 2788 inn -1 310410214827503 3458 03/23/20 11:36:58 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3459 03/23/20 11:56:56 60:00 15344 5732 inn -1 310410214827503 3460 03/23/20 12:36:58 0:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3461 03/23/20 12:37:01 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3462 03/23/20 12:56:56 60:00 6848 2788 inn -1 310410214827503 3463 03/23/20 13:37:01 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3464 03/23/20 13:56:56 42:04 4964 1588 inn -1 310410214827503 3465 03/23/20 14:22:56 1:03 6852 6179 inn 3587080982063726 310410214827503 APPLE 3466 03/23/20 14:23:59 15:01 5180 1712 inn 3587080982063726 310410214827503 APPLE 3467 03/23/20 14:37:01 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3468 03/23/20 14:39:00 15:49 6674 5980 inn 3587080982063726 310410214827503 APPLE 3469 03/23/20 14:54:49 46:05 8404 3988 inn 3587080982063726 310410214827503 APPLE 3470 03/23/20 15:37:01 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3471 03/23/20 15:40:54 60:00 11840 8718 inn 3587080982063726 310410214827503 APPLE 3472 03/23/20 16:37:01 0:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3473 03/23/20 16:40:54 4:01 0 0 inn 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 144 AT&T does not retain records thAt can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002788 N:FroliAL not for general distribution. EFTA 00116864 EFTA01251388 MOBILITY The information contained heraleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .....,„# ••-••• ""s AT&T Run Data: Run Tama: Data Osage For: Item Conn. Data 06/17/2020 18:55:46 Conn. originating ET Time Number Up /OTC) Bytes Bytes Apn On INEI INSI 3474 03/23/20 16:44:55 55:42 8852 3468 ipso 3587080982063726 310410214827503 3475 03/23/20 17:28:56 7:41 0 0 nxtgonpho no 3587080982063726 310410214827503 3476 03/23/20 17:36:37 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 3477 03/23/20 17:36:42 5:20 8156 6944 imo 3587080982063726 310410214827503 3478 03/23/20 17:42:02 60:00 13584 4608 imo 3587080982063726 310410214827503 3479 03/23/20 18:36:37 19:50 0 0 nxtgonpho no 3587080982063726 310410214827503 3480 03/23/20 18:42:02 14:26 124 372 imo 3587080982063726 310410214827503 3481 03/23/20 18:56:26 4:33 192 0 nxtgonpho no 3587080982063726 310410214827503 3482 03/23/20 18:56:27 4:32 6184 6738 imo 3587080982063726 310410214827503 3483 03/23/20 18:56:27 4:33 0 0 nxtgonpho no 3587080982063726 310410214827503 3484 03/23/20 18:56:28 4:32 6670 5920 imo 3587080982063726 310410214827503 3485 03/23/20 19:01:00 22:42 0 0 nxtgonpho no 3587080982063726 310410214827503 3486 03/23/20 19:01:23 1:26 6646 5904 ins 3587080982063726 310410214827503 3487 03/23/20 19:02:49 11:48 3532 1432 ins 3587080982063726 310410214827503 3488 03/23/20 19:14:37 9:05 9586 6195 imp 3587080982063726 310410214827503 3489 03/23/20 19:23:42 2:51 192 0 nxtgonpho no 3587080982063726 310410214827503 3490 03/23/20 19:23:43 2:51 0 0 nxtgonpho no 3587080982063726 310410214827503 3491 03/23/20 19:26:34 6:22 0 0 nxtgonpho no 3587080982063726 310410214827503 3492 03/23/20 19:32:55 2:23 192 0 nxtgonpho no 3587080982063726 310410214827503 3493 03/23/20 19:32:56 2:23 0 0 nxtgonpho no 3587080982063726 310410214827503 3494 03/23/20 19:35:19 3:26 0 0 nxtgonpho no 3587080982063726 310410214827503 3495 03/23/20 19:38:44 1:10 192 0 nxtgonpho no 3587080982063726 310410214827503 3496 03/23/20 19:38:45 1:10 0 0 nxtgonpho no 3587080982063726 310410214827503 3497 03/23/20 19:39:55 10:36 0 0 nxtgonpho no 3587080982063726 310410214827503 MAKE MODEL APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE &PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE &PHONES APPLE IPHONE8 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002789 NsFYNE not for general distribution. Page 145 EF-EA_00116865 EFTA01251389 MOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 411M, ......„ ••-s`a.0 AT&T Run Date: Run Time: Data Osage for: 06/17/2020 Item Conn. Date Conn. originating ET Time Number /OTC) Bytes op Byte. Apn Dn INC' INSI NUT MODEL 3498 03/23/20 19:50:30 0:23 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3499 03/23/20 19:50:32 0:22 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3500 03/23/20 19:50:54 0:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3501 03/23/20 19:51:51 8:53 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3502 03/23/20 19:51:52 8:54 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3503 03/23/20 20:00:45 0:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3504 03/23/20 20:01:02 5:27 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3505 03/23/20 20:04:58 12:20 9917 6442 ins -1 310410214827503 3506 03/23/20 20:06:28 2:04 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3507 03/23/20 20:06:29 2:04 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3508 03/23/20 20:08:33 9:55 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3509 03/23/20 20:15:42 2:46 6690 5980 ins 3587080982063726 310410214827503 APPLE 'PHONES 3510 03/23/20 20:18:27 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3511 03/23/20 20:18:29 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3512 03/23/20 20:20:05 0:26 6246 6666 ins 3587080982063726 310410214827503 APPLE 'PHONES 3513 03/23/20 20:20:06 0:26 6666 5982 ins 3587080982063726 310410214827503 APPLE 'PHONES 3514 03/23/20 20:20:32 2:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3515 03/23/20 20:20:38 60:00 18680 11564 ins -1 310410214827503 3516 03/23/20 20:23:30 21:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3517 03/23/20 20:23:31 21:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3518 03/23/20 20:44:34 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3519 03/23/20 21:18:04 27:23 6648 5998 ins 3587080982063726 310410214827503 APPLE 'PHONES 3520 03/23/20 21:20:38 2:51 0 0 ins -1 310410214827503 3521 03/23/20 21:44:34 0:53 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 146 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002790 PsisTIAL not for general distribution. EFTAJVII6866 EFTA01251390 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ap. .....„ `•-•° `"s0/ AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn INLI DUI MARL MOLL 3522 03/23/20 21:45:26 2:04 192 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3523 03/23/20 21:45:27 2:04 0 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3524 03/23/20 21:47:31 1:36 0 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3525 03/23/20 21:48:32 0:35 7332 6052 imo 3587080982063726 310410214827503 APPLE !PHONES 3526 03/23/20 21:49:06 2:17 192 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3527 03/23/20 21:49:08 2:16 0 0 nmtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3528 03/23/20 21:51:24 6:04 192 0 nmtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3529 03/23/20 21:51:25 6:04 0 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3530 03/23/20 21:53:02 22:28 11369 6710 imo -1 310410214827503 3531 03/23/20 21:57:29 3:45 0 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3532 03/23/20 22:01:13 12:50 192 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3533 03/23/20 22:01:14 12:51 0 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3534 03/23/20 22:10:08 3:55 7160 6848 imo 3587080982063726 310410214827503 APPLE IPHONEB 3535 03/23/20 22:10:10 3:55 6740 6896 imo 3587080982063726 310410214827503 APPLE IPMONE8 3536 03/23/20 22:14:05 1:26 0 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3537 03/23/20 22:15:30 8:28 192 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3538 03/23/20 22:15:31 8:28 0 0 natgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3539 03/23/20 22:16:08 7:50 8234 6882 imo 3587080982063726 310410214827503 APPLE !PHONES 3540 03/23/20 22:16:09 7:50 6882 7970 imo 3587080982063726 310410214827503 APPLE !PROMS 3541 03/23/20 22:21:24 8:15 13552 7570 I. -1 310410214827503 3542 03/23/20 22:23:59 13:41 0 0 nmtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3543 03/23/20 22:36:39 1:01 7982 6106 imo 3587080982063726 310410214827503 APPLE IPMONE8 3544 03/23/20 22:37:39 4:14 192 0 nmtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3545 03/23/20 22:37:41 4:13 0 0 nmtgenpho no 3587080982063726 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 147 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002791 NaTtAti not for general distribution. EF-EAJVII6867 EFTA01251391 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apn Dn INEI IMEI MAKE 3546 03/23/20 22:40:10 1:43 7136 6758 ims 3587080982063726 310410214827503 APPLE 3547 03/23/20 22:40:11 1:43 6758 6872 ims 3587080982063726 310410214827503 APPLE 3548 03/23/20 22:41:54 1:34 0 Opatgenpho no 3587080982063726 310410214827503 APPLE 3549 03/23/20 22:43:27 2:27 192 Onatgenpho no 3587080982063726 310410214827503 APPLE 3550 03/23/20 22:43:28 2:27 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 3551 03/23/20 22:45:00 0:54 8221 6934 ims 3587080982063726 310410214827503 APPLE 3552 03/23/20 22:45:01 0:54 6934 7957 ims 3587080982063726 310410214827503 APPLE 3553 03/23/20 22:45:55 1:30 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 3554 03/23/20 22:46:06 1:19 6346 5812 ims 3587080982063726 310410214827503 APPLE 3555 03/23/20 22:47:24 0:37 192 Oruagenpho no 3587080982063726 310410214827503 APPLE 3556 03/23/20 22:47:25 0:37 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 3557 03/23/20 22:48:02 41:42 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 3558 03/23/20 22:48:21 18:31 7402 6103 ims 3587080982063726 310410214827503 APPLE 3559 03/23/20 23:06:52 60:00 18688 5212 ims 3587080982063726 310410214827503 APPLE 3560 03/23/20 23:29:43 2:04 192 Oruagenpho no 3587080982063726 310410214827503 APPLE 3561 03/23/20 23:29:44 2:04 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 3562 03/23/20 23:31:48 6:59 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 3563 03/23/20 23:38:46 2:03 192 Onatgenpho no 3587080982063726 310410214827503 APPLE 3564 03/23/20 23:38:47 2:03 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 3565 03/23/20 23:40:50 4:36 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 3566 03/23/20 23:45:25 2:04 192 Onatgenpho no 3587080982063726 310410214827503 APPLE 3567 03/23/20 23:45:27 2:03 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 3568 03/23/20 23:47:30 5:32 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 3569 03/23/20 23:53:01 8:37 192 Oruagenpho no 3587080982063726 310410214827503 APPLE MODEL IPHONZ8 IPHONZ8 IPHONEB IPHONEB IPHONEB !PHONES !PHONES IPHONEB !PHONES IPHONEB IPHONEB IPHONEB !PHONES !PHONES IPHONEB IPHONEB IPHONEB IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 148 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002792 NeTifikE not for general distribution. EFTA_00I 16868 EFTA01251392 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 1S:55:47 ONSNINIME Conn. Originating ET Time Number (UTC) Bytes UM Bytes Apn Dn IMEI IMSI MARE 3570 03/23/20 23:53:02 8:37 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3571 03/24/20 00:01:39 60:00 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3572 03/24/20 00:06:52 60:00 30384 14136 ins 3587080982063726 310410214827503 APPLE 3573 03/24/20 00:20:08 0:35 5279 27348 ins 3587080982063726 310410214827503 APPLE 3574 03/24/20 01:01:39 53:19 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3575 03/24/20 01:06:52 49:46 10128 3252 ins 3587080982063726 310410214827503 APPLE 3576 03/24/20 01:46:13 0:00 0 0 ins 3587080982063726 310410214827503 APPLE 3577 03/24/20 01:46:21 8:37 6674 5904 ins 3587080982063726 310410214827503 APPLE 3578 03/24/20 01:54:57 2:03 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3579 03/24/20 01:54:58 2:03 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3580 03/24/20 01:57:01 1:24 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3581 03/24/20 01:57:20 1:05 8148 6948 ins 3587080982063726 310410214827503 APPLE 3582 03/24/20 01:58:24 2:10 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3583 03/24/20 01:58:25 2:10 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 3584 03/24/20 01:58:36 1:58 6244 6690 ins 3587080982063726 310410214827503 APPLE 3585 03/24/20 01:58:37 1:58 6690 5980 ins 3587080982063726 310410214827503 APPLE 3586 03/24/20 02:00:35 18:49 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3587 03/24/20 02:01:26 12:34 13808 7971 ins -1 310410214827503 3588 03/24/20 02:05:28 1:09 6674 5980 ins 3587080982063726 310410214827503 APPLE 3589 03/24/20 02:06:37 7:23 5056 1572 ins 3587080982063726 310410214827503 APPLE 3590 03/24/20 02:14:00 0:57 6672 5997 ins 3587080982063726 310410214827503 APPLE 3591 03/24/20 02:14:57 44:43 10484 3408 ins 3587080982063726 310410214827503 APPLE 3592 03/24/20 02:19:23 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 3593 03/24/20 02:19:24 2:03 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3594 03/24/20 02:21:27 47:19 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 3595 03/24/20 02:54:19 13:51 6676 5998 ins 3587080982063726 310410214827503 APPLE 3596 03/24/20 03:08:10 60:00 15232 5748 ins 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 149 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002793 NeTniliAL not for general distribution. EF-EA_00116869 EFTA01251393 MOBILITY The information contained heraCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. ....., ••—ss` a.0•AT&T Run Date: Run Tina: Data Usage Tor: 'tom Conn. Data 06/17/2020 10:44:47 Conn. Originating ET Time Number (UTC) Bytes Up Bytom Apn Dn INC' IM31 MARL MODEL 3597 03/24/20 03:08:45 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3598 03/24/20 03:08:46 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3599 03/24/20 03:10:56 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3600 03/24/20 04:01:33 37:51 9266 7304 ims 3587080982063726 310410214827503 APPLE !PHONES 3601 03/24/20 04:08:10 3:35 0 0 ims 3587080982063726 310410214827503 APPLE 'PHONES 3602 03/24/20 04:10:56 28:28 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3603 03/24/20 04:39:23 130:17 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3604 03/24/20 04:39:24 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3605 03/24/20 05:39:24 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3606 03/24/20 05:50:02 40:18 12957 7433 ims -1 310410214827503 3607 03/24/20 06:39:24 10:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3608 03/24/20 06:54:54 60:00 18413 10174 ipso -1 310410214827503 3609 03/24/20 07:54:54 60:00 8960 3160 ipso -1 310410214827503 3610 03/24/20 08:54:54 60:00 11532 4316 ipso -1 310410214827503 3611 03/24/20 09:54:54 60:00 8388 2928 ipso -1 310410214827503 3612 03/24/20 10:02:03 127:28 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3613 03/24/20 10:02:04 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3614 03/24/20 10:54:54 60:00 15188 5060 ipso -1 310410214827503 3615 03/24/20 11:02:04 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3616 03/24/20 11:54:54 60:00 16512 4844 ipso -1 310410214827503 3617 03/24/20 12:02:04 7:28 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3618 03/24/20 12:09:32 17:15 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3619 03/24/20 12:26:46 2:16 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3620 03/24/20 12:26:48 2:15 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 150 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002794 not for general distribution. EFTA_00I 16870 EFTA01251394 MOBILITY The information contained heraleoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. sc,""ssad AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 1S:53:47 Conn. Originating LT Time Number (UTC) Bytes Op Bytoa Apn Dn INZI INSI MARL NICOLL 3621 03/24/20 12:29:03 8:08 0 0 mmtgonpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 3622 03/24/20 12:37:11 2:05 192 0ruftgonpho no 3587080982063726 310410214827503 APPLE IPH0NE8 3623 03/24/20 12:37:12 2:05 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3624 03/24/20 12:39:17 4:35 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3625 03/24/20 12:43:51 8:56 192 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3626 03/24/20 12:43:52 8:56 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3627 03/24/20 12:52:48 1:51 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3628 03/24/20 12:54:38 17:44 192 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3629 03/24/20 12:54:39 17:44 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3630 03/24/20 12:54:54 60:00 7388 2928 ims -1 310410214827503 3631 03/24/20 13:12:23 0:39 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3632 03/24/20 13:13:01 2:04 192 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3633 03/24/20 13:13:02 2:04 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3634 03/24/20 13:15:06 1:20 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3635 03/24/20 13:16:25 4:53 192 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3636 03/24/20 13:16:27 4:52 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3637 03/24/20 13:21:19 24:18 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3638 03/24/20 13:45:36 2:05 192 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3639 03/24/20 13:45:38 2:04 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3640 03/24/20 13:47:42 14:39 0 0ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3641 03/24/20 13:54:54 11:31 3516 1340 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 151 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002795 PsiTnilikk not for general distribution. EF-EA_O0116871 EFTA01251395 MOBILITY The information contained hereetop+Ftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. t7agli° ss AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 1S:53:47 Conn. Originating ET Time Number (UTC) Bytes Op Bytes Apn Dn INEZ IMISI MARL MOLL 3642 03/24/20 14:02:20 2:42 192 0 ructgonpho no 3587080982063726 310410214827503 APPLE ITHONZ8 3643 03/24/20 14:02:21 2:42 0 Oructgonpho no 3587080982063726 310410214827503 APPLE ITHONZ8 3644 03/24/20 14:05:03 68:36 192 Oructgonpho no 3587080982063726 310410214827503 APPLE DRONES 3645 03/24/20 14:05:04 60:00 0 Oructgonpho no 3587080982063726 310410214827503 APPLE DRONES 3646 03/24/20 14:06:04 8:43 7264 6720 in 3587080982063726 310410214827503 APPLE ITRONZ8 3647 03/24/20 14:06:05 8:43 6720 7000 in 3587080982063726 310410214827503 APPLE ITRONZ8 3648 03/24/20 14:06:25 11:13 12288 7988 in -1 310410214827503 3649 03/24/20 14:14:47 35:50 7264 6748 ins 3587080982063726 310410214827503 APPLE ITRONZ8 3650 03/24/20 14:14:48 35:50 6748 7000 imp 3587080982063726 310410214827503 APPLE ITRONZ8 3651 03/24/20 14:17:38 33:40 21172 10440 imp -1 310410214827503 3652 03/24/20 14:50:37 23:02 7248 6746 imp 3587080982063726 310410214827503 APPLE ITRONZ8 3653 03/24/20 14:50:38 23:02 6746 6984 imp 3587080982063726 310410214827503 APPLE DRONES 3654 03/24/20 14:51:18 60:00 17051 9621 imp -1 310410214827503 3655 03/24/20 15:05:04 8:36 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 3656 03/24/20 15:13:40 3:00 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 3657 03/24/20 15:16:39 2:21 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 3658 03/24/20 15:16:41 2:20 0 Onatgonpho no 3587080982063726 310410214827503 APPLE DRONES 3659 03/24/20 15:19:01 22:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 3660 03/24/20 15:41:37 2:09 192 Onatgonpho no 3587080982063726 310410214827503 APPLE DRONES 3661 03/24/20 15:41:38 2:09 0 Onatgonpho no 3587080982063726 310410214827503 APPLE DRONES 3662 03/24/20 15:43:48 11:43 0 Onatgonpho no 3587080982063726 310410214827503 APPLE DRONES 3663 03/24/20 15:51:18 29:34 4856 2572 imp -1 310410214827503 3664 03/24/20 15:55:29 2:04 192 Onatgonpho no 3587080982063726 310410214827503 APPLE DRONES 3665 03/24/20 15:55:31 2:03 0 Onatgonpho no 3587080982063726 310410214827503 APPLE DRONES 3666 03/24/20 15:57:34 23:48 0 0 natgonpho no 3587080982063726 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 152 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002796 PsisTiliAL not for general distribution. EF-EA_00ll6872 EFTA01251396 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and OTC. provided in 41111. •.,14/eals# rn4"1° a AT&T Run Date: Run Time: Data Osage Tor: Items Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytoa Apn Dn INLI INS I MAKE NICOLL 3667 03/24/20 16:13:25 0:07 0 0 imo 3587080982063726 310410214827503 APPLE IPHOME8 3668 03/24/20 16:14:29 6:53 7398 6106 imo 3587080982063726 310410214827503 APPLE IPHOME8 3669 03/24/20 16:21:21 8:54 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3670 03/24/20 16:21:23 8:53 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3671 03/24/20 16:23:53 6:22 6244 6674 imo 3587080982063726 310410214827503 APPLE IPHOME8 3672 03/24/20 16:23:54 6:22 6674 5980 imo 3587080982063726 310410214827503 APPLE IPHOME8 3673 03/24/20 16:30:16 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3674 03/24/20 16:30:26 0:59 8150 6962 imo 3587080982063726 310410214827503 APPLE IPHOME8 3675 03/24/20 16:31:25 6:14 3748 1464 imo 3587080982063726 310410214827503 APPLE IPHOME8 3676 03/24/20 16:37:39 15:42 7408 6122 imo 3587080982063726 310410214827503 APPLE IPHOME8 3677 03/24/20 16:53:21 60:00 12244 5252 imo 3587080982063726 310410214827503 APPLE IPHOME8 3678 03/24/20 17:30:16 41:13 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3679 03/24/20 17:53:21 60:00 8620 3192 imo 3587080982063726 310410214827503 APPLE IPHOME8 3680 03/24/20 18:11:28 1:48 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3681 03/24/20 18:11:29 1:48 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3682 03/24/20 18:13:17 14:27 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3683 03/24/20 18:13:18 14:27 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3684 03/24/20 18:27:45 1:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3685 03/24/20 18:28:48 15:14 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3686 03/24/20 18:28:49 15:14 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3687 03/24/20 18:44:03 0:41 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3688 03/24/20 18:44:43 8:25 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3689 03/24/20 18:44:45 8:24 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3690 03/24/20 18:53:09 13:16 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3691 03/24/20 18:53:21 21:37 5104 2068 imo 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained hereelaNyFti Page 153 SDNY_GML00002797 not for general distribution. EF-EA_O0116873 EFTA01251397 MOBILITY The information contained heraCtoNyF (OTC) 3692 03/24/20 19:06:24 14:58 192 0 nxtgonpho no 3587080982063726 310410214827503 3693 03/24/20 19:06:25 14:58 0 Onxtgonpho no 3587080982063726 310410214827503 3694 03/24/20 19:10:03 11:19 6228 6732 ins 3587080982063726 310410214827503 3695 03/24/20 19:10:04 11:19 6664 5964 ins 3587080982063726 310410214827503 3696 03/24/20 19:21:23 6:31 0 Onxtgonpho no 3587080982063726 310410214827503 3697 03/24/20 19:27:53 2:03 192 Onxtgonpho no 3587080982063726 310410214827503 3698 03/24/20 19:27:54 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 3699 03/24/20 19:29:57 19:58 0 Oruftgonpho no 3587080982063726 310410214827503 3700 03/24/20 19:40:37 9:18 9188 8084 ims 3587080982063726 310410214827503 3701 03/24/20 19:49:54 8:17 192 Oruftgonpho no 3587080982063726 310410214827503 3702 03/24/20 19:49:55 8:17 0 Oruftgonpho no 3587080982063726 310410214827503 3703 03/24/20 19:53:52 4:19 6244 6670 ins 3587080982063726 310410214827503 3704 03/24/20 19:53:53 4:19 6670 5980 ins 3587080982063726 310410214827503 3705 03/24/20 19:57:07 60:00 20581 10944 ins -1 310410214827503 3706 03/24/20 19:58:12 2:08 0 Onxtgonpho no 3587080982063726 310410214827503 3707 03/24/20 20:00:20 0:59 0 Onxtgonpho no 3587080982063726 310410214827503 3708 03/24/20 20:01:19 20:59 192 Onxtgonpho no 3587080982063726 310410214827503 3709 03/24/20 20:01:20 20:59 0 Onxtgonpho no 3587080982063726 310410214827503 3710 03/24/20 20:22:19 9:12 0 Onxtgonpho no 3587080982063726 310410214827503 3711 03/24/20 20:31:30 2:57 192 Onxtgonpho no 3587080982063726 310410214827503 3712 03/24/20 20:31:31 2:57 0 Onxtgonpho no 3587080982063726 310410214827503 3713 03/24/20 20:34:28 0:05 0 Onxtgonpho no 3587080982063726 310410214827503 3714 03/24/20 20:36:13 35:36 192 Onxtgonpho no 3587080982063726 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in .....,,,• ••-s`"1° AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Originating ET Bytes Byte. Apn IRE' IASI MA= MODEL Date Time Number Up Dn APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PROME8 APPLE !PHONES APPLE !PHONES APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 2PROME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 154 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002798 NTifikE not for general distribution. EF-EA_00ll6874 EFTA01251398 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. te`-t'sti AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:53:47 Conn. Time (U2C) originating Number ET Bytes op Bytes Ann Dn INLI INSI MAfl NICOLL 3715 03/24/20 20:36:14 35:36 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3716 03/24/20 20:57:07 50:26 0 0 ims -1 310410214827503 3717 03/24/20 21:03:22 60:00 14972 9410 imp -1 310410214827503 3718 03/24/20 21:11:50 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3719 03/24/20 21:47:33 1:31 6674 5979 imp 3587080982063726 310410214827503 APPLE !PHONES 3720 03/24/20 21:49:04 16:16 3640 1432 imp 3587080982063726 310410214827503 APPLE !PHONES 3721 03/24/20 22:03:22 1:58 0 0 imp -1 310410214827503 3722 03/24/20 22:05:20 18:30 6672 5998 imp 3587080982063726 310410214827503 APPLE !PHONES 3723 03/24/20 22:11:50 33:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3724 03/24/20 22:23:50 60:00 15968 4888 imp 3587080982063726 310410214827503 APPLE !PHONES 3725 03/24/20 22:44:50 2:16 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3726 03/24/20 22:44:51 2:16 0 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3727 03/24/20 22:47:07 19:34 0 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3728 03/24/20 23:06:40 24:26 192 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3729 03/24/20 23:06:41 24:26 0 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3730 03/24/20 23:23:50 60:00 31544 23152 imp 3587080982063726 310410214827503 APPLE !PHONES 3731 03/24/20 23:31:07 14:04 0 0 nxtganistls no 3587080982063726 310410214827503 APPLE !PHONES 3732 03/24/20 23:44:21 0:12 15211 33872 as 3587080982063726 310410214827503 APPLE !PHONES 3733 03/24/20 23:44:43 0:34 14704 31615 as 3587080982063726 310410214827503 APPLE !PHONES 3734 03/24/20 23:45:10 2:17 192 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3735 03/24/20 23:45:12 2:16 0 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3736 03/24/20 23:47:28 35:37 0 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3737 03/25/20 00:23:04 2:10 192 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3738 03/25/20 00:23:06 2:09 0 0 nxtganpho no 3587080982063726 310410214827503 APPLE !PHONES 3739 03/25/20 00:23:50 60:00 8496 3036 as 3587080982063726 310410214827503 APPLE 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_000027G9 N:FroliAL not for general distribution. Page 155 EF-EA_00116875 EFTA01251399 The information contained hereCtoNyFti 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411.1 AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Op Bytea Apn Dn IMEI 'BSI 14871 3740 03/25/20 00:25:15 50:25 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3741 03/25/20 01:15:40 14:26 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3742 03/25/20 01:15:41 14:26 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3743 03/25/20 01:23:50 41:29 12904 3780 ins 3587080982063726 310410214827503 APPLE 3744 03/25/20 01:30:07 25:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3745 03/25/20 01:55:27 2:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3746 03/25/20 01:55:28 2:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3747 03/25/20 01:57:32 1:59 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3748 03/25/20 01:59:30 8:33 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3749 03/25/20 01:59:32 8:32 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3750 03/25/20 02:00:26 7:37 6243 6742 ins 3587080982063726 310410214827503 APPLE 3751 03/25/20 02:00:28 7:36 6674 5979 ins 3587080982063726 310410214827503 APPLE 3752 03/25/20 02:08:04 55:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3753 03/25/20 02:09:11 5:58 8830 7985 ins 3587080982063726 310410214827503 APPLE 3754 03/25/20 02:15:09 6:05 3640 1464 ins 3587080982063726 310410214827503 APPLE 3755 03/25/20 02:21:15 42:10 12156 9242 ins 3587080982063726 310410214827503 APPLE 3756 03/25/20 03:03:24 40:00 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3757 03/25/20 03:03:25 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3758 03/25/20 03:04:07 16:25 9741 6354 ins -1 310410214827503 3759 03/25/20 03:17:41 20:00 7337 8822 ins 3587080982063726 310410214827503 APPLE 3760 03/25/20 03:17:42 31:54 11418 8397 ins 3587080982063726 310410214827503 APPLE 3761 03/25/20 03:37:41 11:54 1324 2596 ins 3587080982063726 310410214827503 APPLE 3762 03/25/20 03:48:27 5:50 8437 6426 ins -1 310410214827503 3763 03/25/20 03:49:35 12:57 7374 6800 ins 3587080982063726 310410214827503 APPLE 3764 03/25/20 03:49:36 12:57 6800 7110 ins 3587080982063726 310410214827503 APPLE 3765 03/25/20 03:54:17 10:12 9261 6696 ins -1 310410214827503 3766 03/25/20 04:02:32 14:03 6370 6676 in 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 156 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002800 NTniliAL not for general distribution. EF-EA_00ll6876 EFTA01251400 MOBILITY The information contained here(341)(N ff::ti i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. ap. AT&T Run Data: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number IT Bytes Up Bytes Apn Dn IMMI IMBI tan 3767 03/25/20 04:02:33 14:03 6676 6106 imo 3587080982063726 310410214827503 APPLE 3768 03/25/20 04:03:25 60:00 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 3769 03/25/20 04:07:15 14:19 8261 6177 imo -1 310410214827503 3770 03/25/20 04:16:34 75:27 9874 12042 imo 3587080982063726 310410214827503 APPLE 3771 03/25/20 04:16:35 60:00 11934 9610 imo 3587080982063726 310410214827503 APPLE 3772 03/25/20 05:03:25 28:37 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 3773 03/25/20 05:16:35 15:27 0 0 imo 3587080982063726 310410214827503 APPLE 3774 03/25/20 05:32:01 0:23 192 0 natgonpho no 3587080982063726 310410214827503 APPLE 3775 03/25/20 05:32:03 0:22 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 3776 03/25/20 05:32:25 19:15 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3777 03/25/20 05:32:29 17:46 6780 5938 moo 3587080982063726 310410214827503 APPLE 3778 03/25/20 05:50:15 60:00 11920 4500 Sins 3587080982063726 310410214827503 APPLE 3779 03/25/20 05:51:39 2:42 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3780 03/25/20 05:51:40 2:42 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3781 03/25/20 05:54:22 0:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3782 03/25/20 05:54:56 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3783 03/25/20 05:54:57 2:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3784 03/25/20 05:57:00 4:19 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3785 03/25/20 06:01:18 35:56 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3786 03/25/20 06:01:19 35:56 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 3787 03/25/20 06:37:15 29:02 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3788 03/25/20 06:50:15 60:00 6956 2912 ims 3587080982063726 310410214827503 APPLE 3789 03/25/20 07:06:16 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 3790 03/25/20 07:06:17 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE MODEL IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PROMS !PHONES !PROMS IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 1PROME8 1PROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 157 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002801 NeTiliAL not for general distribution. EF-EA_00116877 EFTA01251401 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. dal AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:55:48 Conn. Time (OTC) Originating Number ET Byte. Up Bytoa Apn Dn INEI INSI MARE MODEL 3791 03/25/20 07:08:20 24:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3792 03/25/20 07:32:50 7:25 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3793 03/25/20 07:32:51 7:25 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3794 03/25/20 07:40:16 3:48 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3795 03/25/20 07:44:03 14:49 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3796 03/25/20 07:44:04 14:49 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3797 03/25/20 07:50:15 60:00 8372 2928 ims 3587080982063726 310410214827503 APPLE 'PHONES 3798 03/25/20 07:58:53 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3799 03/25/20 08:50:15 60:00 8388 3036 ims 3587080982063726 310410214827503 APPLE 'PHONES 3800 03/25/20 08:58:53 42:29 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3801 03/25/20 09:41:21 180:48 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3802 03/25/20 09:41:22 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3803 03/25/20 09:50:15 60:00 13804 6060 vas 3587080982063726 310410214827503 APPLE 'PHONES 3804 03/25/20 10:41:22 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3805 03/25/20 10:50:15 60:00 7064 3036 vas 3587080982063726 310410214827503 APPLE 'PHONES 3806 03/25/20 11:41:22 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3807 03/25/20 11:50:15 60:00 8712 3160 vas 3587080982063726 310410214827503 APPLE !PHONES 3808 03/25/20 12:41:22 0:48 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3809 03/25/20 12:42:10 3:38 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3810 03/25/20 12:45:48 135:22 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3811 03/25/20 12:45:49 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3812 03/25/20 12:50:15 60:00 11920 4268 vas 3587080982063726 310410214827503 APPLE 'PHONES 3813 03/25/20 13:45:49 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 3814 03/25/20 13:50:15 37:01 6148 1480 vas 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 158 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002802 not for general distribution. EF-EA_00ll6878 EFTA01251402 The information contained hereCtoNyFti 2996479 06/17/2020 NOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. 4am. AT&T provided in Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 18:55:48 Conn. Originating ET Time Number UP (OTC) Syto• Bytes Apn Dn IICI INBI MAfl 3815 03/25/20 14:25:56 35:14 6334 6648 ins 3587080982063726 310410214827503 APPLE 3816 03/25/20 14:25:57 35:14 6648 6070 ins 3587080982063726 310410214827503 APPLE 3817 03/25/20 14:27:16 60:00 23909 10568 Lno -1 310410214827503 3818 03/25/20 14:45:49 15:22 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3819 03/25/20 15:01:11 40:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3820 03/25/20 15:01:12 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3821 03/25/20 15:22:06 20:00 7373 6800 Lno 3587080982063726 310410214827503 APPLE 3822 03/25/20 15:22:07 60:00 6800 7109 Lno 3587080982063726 310410214827503 APPLE 3823 03/25/20 15:27:16 2:33 0 0 Lno -1 310410214827503 3824 03/25/20 15:29:49 60:00 17160 9341 Lno -1 310410214827503 3825 03/25/20 16:01:12 46:50 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3826 03/25/20 16:22:07 25:55 0 0 Lois 3587080982063726 310410214827503 APPLE 3827 03/25/20 16:29:49 60:00 9804 3160 Lois -1 310410214827503 3828 03/25/20 16:48:02 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3829 03/25/20 17:12:59 60:00 19697 10560 Lno -1 310410214827503 3830 03/25/20 17:29:49 60:00 0 0 Lno -1 310410214827503 3831 03/25/20 17:48:02 20:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3832 03/25/20 18:08:36 3:40 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3833 03/25/20 18:08:37 3:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3834 03/25/20 18:12:17 9:16 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3835 03/25/20 18:12:18 9:16 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3836 03/25/20 18:12:59 60:00 13168 6992 Lno -1 310410214827503 3837 03/25/20 18:21:34 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3838 03/25/20 18:23:43 9:06 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3839 03/25/20 18:23:44 9:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 3840 03/25/20 18:29:49 60:00 0 0 Lno -1 310410214827503 NICOLL MIMES MIMES MIMES !PHONES !PHONES DRONES MIMES !PHONES !PHONES !PHONES !PROMS !PHONES !PHONES MIMES MIMES !PROMS !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002803 NTifikE not for general distribution. Page 159 EF-EA_O0116879 EFTA01251403 MOBILITY The information contained heraCtoNels 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tri `'sd AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytom Apn Dn Der IMBI NICOLL 3841 03/25/20 18:32:50 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3842 03/25/20 19:12:59 60:00 13368 4764 ims -1 310410214827503 3843 03/25/20 19:29:49 57:37 0 0 ims -1 310410214827503 3844 03/25/20 19:32:50 8:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3845 03/25/20 19:41:06 2:06 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3846 03/25/20 19:41:07 2:06 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3847 03/25/20 19:43:13 1:41 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3848 03/25/20 19:44:53 3:52 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3849 03/25/20 19:44:54 3:52 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3850 03/25/20 19:48:46 0:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3851 03/25/20 19:49:14 0:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 3852 03/25/20 19:49:42 2:28 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3853 03/25/20 19:49:43 2:28 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3854 03/25/20 19:52:10 7:46 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3855 03/25/20 19:52:11 7:46 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3856 03/25/20 19:59:57 9:08 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3857 03/25/20 19:59:58 9:08 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3858 03/25/20 20:09:06 3:38 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 3859 03/25/20 20:09:07 3:38 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3860 03/25/20 20:12:45 22:16 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3861 03/25/20 20:12:59 19:28 216 108 ims -1 310410214827503 3862 03/25/20 20:27:23 60:00 11861 7496 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 160 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002804 NeTniliAL not for general distribution. EFTA_00I 16880 EFTA01251404 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4111. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:55:46 ET Bytes Op Bytoa Apn Dn Conn. Originating IKE' IMS1 MARL MODEL Time Number (OTC) 3863 03/25/20 20:35:00 15:10 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3864 03/25/20 20:35:01 15:10 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 3865 03/25/20 20:50:11 1:03 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3866 03/25/20 20:51:13 8:28 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3867 03/25/20 20:51:14 8:28 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3868 03/25/20 20:59:42 15:47 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3869 03/25/20 21:14:38 0:00 0 0 vas 3587080982063726 310410214827503 APPLE !PHONES 3870 03/25/20 21:15:28 8:31 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3871 03/25/20 21:15:29 8:31 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3872 03/25/20 21:15:37 21:10 9247 6126 vas -1 310410214827503 3873 03/25/20 21:24:00 60:00 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3874 03/25/20 21:27:23 58:11 0 0 vas -1 310410214827503 3875 03/25/20 21:40:16 60:00 15518 8368 vas -1 310410214827503 3876 03/25/20 22:24:00 51:30 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3877 03/25/20 22:25:34 1:12 6676 5998 ims 3587080982063726 310410214827503 APPLE 1PROME8 3878 03/25/20 22:26:46 60:00 11168 4236 ims 3587080982063726 310410214827503 APPLE 1PROME8 3879 03/25/20 22:40:16 60:00 0 0 ims -1 310410214827503 3880 03/25/20 23:15:29 2:03 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPROME8 3881 03/25/20 23:15:30 2:03 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3882 03/25/20 23:17:34 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 3883 03/25/20 23:26:46 60:00 7188 2896 ims 3587080982063726 310410214827503 APPLE !PHONES 3884 03/25/20 23:40:16 60:00 0 0 ims -1 310410214827503 3885 03/26/20 00:17:34 51:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 3886 03/26/20 00:26:46 60:00 8836 3052 vas 3587080982063726 310410214827503 APPLE !PRONGS 3887 03/26/20 00:40:16 60:00 0 0 vas -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 161 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002805 not for general distribution. EF-EA_00116881 EFTA01251405 The information contained hereCtoNe 2996479 06/17/2020 MOBILITY 'MIMI AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm tr`-aa i AT&T AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in ‘•••• ••11 OTC. Run Data: Run Tina: Data Usage Tor: Ilea Conn. Data 06/17/2020 Conn. originating LT Tina Number (UTC) Bytes Up Byte. Apn Dn IX= IMBI MUM MODEL 3888 03/26/20 01:08:37 5:55 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3889 03/26/20 01:08:38 5:55 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3890 03/26/20 01:14:33 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 3891 03/26/20 01:26:46 60:00 15000 4656 ims 3587080982063726 310410214827503 APPLE !PHONES 3892 03/26/20 01:40:16 45:16 0 0 ims -1 310410214827503 3893 03/26/20 02:14:33 52:17 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 11060=8 3894 03/26/20 02:26:46 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 11060=8 3895 03/26/20 02:29:23 60:00 15093 8712 ims -1 310410214827503 3896 03/26/20 03:26:46 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 11060=8 3897 03/26/20 03:29:23 60:00 7048 2696 ims -1 310410214827503 3898 03/26/20 04:26:46 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 11060=8 3899 03/26/20 04:29:23 60:00 6924 2556 ims -1 310410214827503 3900 03/26/20 05:26:46 58:57 0 0 ims 3587080982063726 310410214827503 APPLE 11060=8 3901 03/26/20 05:29:23 60:00 9960 3284 ims -1 310410214827503 3902 03/26/20 06:29:23 60:00 15636 6124 ims -1 310410214827503 3903 03/26/20 07:29:23 60:00 6924 2680 ims -1 310410214827503 3904 03/26/20 08:29:23 60:00 8620 3052 ims -1 310410214827503 3905 03/26/20 09:29:23 60:00 6924 2680 ims -1 310410214827503 3906 03/26/20 10:29:23 60:00 11904 4268 ims -1 310410214827503 3907 03/26/20 11:29:23 60:00 8496 3160 ims -1 310410214827503 3908 03/26/20 12:29:23 60:00 11796 4536 ims -1 310410214827503 3909 03/26/20 13:29:23 60:00 13476 4732 ims -1 310410214827503 3910 03/26/20 14:29:23 60:00 8496 3020 ims -1 310410214827503 3911 03/26/20 15:29:23 60:00 8172 3036 ims -1 310410214827503 3912 03/26/20 16:29:23 5:29 5088 2496 ims -1 310410214827503 3913 03/26/20 16:38:56 60:00 20749 9747 ims -1 310410214827503 3914 03/26/20 17:38:56 60:00 10068 3160 ims -1 310410214827503 3915 03/26/20 18:38:56 60:00 6924 2680 ims -1 310410214827503 3916 03/26/20 19:38:56 60:00 10240 4144 ims -1 310410214827503 3917 03/26/20 20:38:56 60:00 7032 2788 ims -1 310410214827503 3918 03/26/20 21:38:56 60:00 10548 4396 ims -1 310410214827503 3919 03/26/20 22:38:56 60:00 8636 3036 ims -1 310410214827503 3920 03/26/20 23:38:56 60:00 18284 9756 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 162 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002806 NeTtAL not for general distribution. EFTA 00116882 EFTA01251406 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ••-rj`" .. "1.AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number LT Bytes Up Byte. Dn Apn INLI INSI MAKE MODEL 3921 03/26/20 23:55:40 0:17 0 2381 imp -1 310410214827503 3922 03/27/20 00:38:56 60:00 13584 4840 imp -1 310410214827503 3923 03/27/20 01:38:56 60:00 20328 11224 imp -1 310410214827503 3924 03/27/20 02:21:27 0:06 0 2069 imp -1 310410214827503 3925 03/27/20 02:38:56 60:00 13476 5124 imp -1 310410214827503 3926 03/27/20 03:38:56 60:00 7248 2804 imp -1 310410214827503 3927 03/27/20 04:38:56 60:00 11796 5160 imp -1 310410214827503 3928 03/27/20 05:38:56 60:00 10176 4068 imp -1 310410214827503 3929 03/27/20 06:38:56 60:00 9960 3176 ims -1 310410214827503 3930 03/27/20 07:38:56 60:00 10440 4504 Lam -1 310410214827503 3931 03/27/20 08:38:56 60:00 10068 3392 ims -1 310410214827503 3932 03/27/20 09:38:56 60:00 12012 4500 imp -1 310410214827503 3933 03/27/20 10:38:56 60:00 8388 2928 imp -1 310410214827503 3934 03/27/20 11:38:56 60:00 8728 3052 imp -1 310410214827503 3935 03/27/20 12:38:56 26:35 15293 7737 ins -1 310410214827503 3936 03/27/20 13:10:29 60:00 33905 20494 imp -1 310410214827503 3937 03/27/20 14:05:29 0:13 2956 16052 imp -1 310410214827503 3938 03/27/20 14:10:29 60:00 6816 2772 imp -1 310410214827503 3939 03/27/20 15:10:29 60:00 8604 3176 imp -1 310410214827503 3940 03/27/20 16:10:29 60:00 10880 3316 imp -1 310410214827503 3941 03/27/20 17:08:19 23:27 8133 6105 imp -1 310410214827503 3942 03/27/20 17:10:29 0:15 0 0 imp -1 310410214827503 3943 03/27/20 17:27:52 47:51 14832 7978 imp -1 310410214827503 3944 03/27/20 18:11:52 9:52 8647 6516 imp -1 310410214827503 3945 03/27/20 18:17:27 60:00 15331 8752 imp -1 310410214827503 3946 03/27/20 19:17:27 13:38 0 0 imp -1 310410214827503 3947 03/27/20 19:27:33 24:13 8189 6016 imp -1 310410214827503 3948 03/27/20 19:49:11 60:00 10073 6602 imp -1 310410214827503 3949 03/27/20 20:02:53 60:00 62408 29060 imp -1 310410214827503 3950 03/27/20 20:17:34 0:04 0 7574 imp -1 310410214827503 3951 03/27/20 20:49:11 60:00 0 0 imp -1 310410214827503 3952 03/27/20 20:52:35 0:07 0 8835 imp -1 310410214827503 3953 03/27/20 21:02:53 60:00 8836 3252 imp -1 310410214827503 3954 03/27/20 21:49:11 60:00 0 0 imp -1 310410214827503 3955 03/27/20 22:02:53 60:00 6816 2788 imp -1 310410214827503 3956 03/27/20 22:49:11 60:00 0 0 isms -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 163 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002807 not for general distribution. EF-EA_00116883 EFTA01251407 MOBILITY The information contained hereleoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. .....,./ ••-s`' AT&T Run Date: Run Time: Data Osage For: Item corm. Data 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes On Apn IMCI INSI MAKE MODEL 3957 03/27/20 23:02:53 60:00 10408 3376 ims -1 310410214827503 3958 03/27/20 23:49:11 16:25 0 0 ims -1 310410214827503 3959 03/28/20 00:02:53 60:00 21632 6868 ims -1 310410214827503 3960 03/28/20 01:02:53 60:00 10068 3176 ims -1 310410214827503 3961 03/28/20 02:02:53 60:00 6924 2804 ims -1 310410214827503 3962 03/28/20 03:02:53 60:00 6816 2680 ims -1 310410214827503 3963 03/28/20 04:02:53 60:00 11904 4160 ims -1 310410214827503 3964 03/28/20 05:02:53 60:00 10332 4288 ims -1 310410214827503 3965 03/28/20 06:02:53 60:00 9960 3176 ims -1 310410214827503 3966 03/28/20 07:02:53 60:00 6924 2804 ims -1 310410214827503 3967 03/28/20 08:02:53 60:00 10068 3176 ims -1 310410214827503 3968 03/28/20 09:02:53 60:00 6908 2680 ims -1 310410214827503 3969 03/28/20 10:02:53 60:00 13632 5844 ims -1 310410214827503 3970 03/28/20 11:02:53 60:00 8620 3052 ims -1 310410214827503 3971 03/28/20 12:02:53 60:00 8496 3036 ims -1 310410214827503 3972 03/28/20 13:02:53 60:00 8604 3144 ims -1 310410214827503 3973 03/28/20 14:02:53 60:00 13028 4408 ims -1 310410214827503 3974 03/28/20 15:02:53 60:00 10176 3392 ims -1 310410214827503 3975 03/28/20 16:02:53 60:00 13584 4924 ims -1 310410214827503 3976 03/28/20 17:02:53 60:00 9960 3284 ims -1 310410214827503 3977 03/28/20 18:02:53 60:00 14940 4872 ims -1 310410214827503 3978 03/28/20 19:02:53 60:00 6924 2680 ims -1 310410214827503 3979 03/28/20 20:02:53 60:00 8388 2928 ims -1 310410214827503 3980 03/28/20 21:02:53 60:00 10332 4412 ims -1 310410214827503 3981 03/28/20 22:02:53 60:00 13988 4872 ims -1 310410214827503 3982 03/28/20 23:02:53 60:00 10284 3532 ims -1 310410214827503 3983 03/29/20 00:02:53 60:00 6924 2572 ims -1 310410214827503 3984 03/29/20 01:02:53 60:00 13290 7713 ims -1 310410214827503 3985 03/29/20 02:02:53 60:00 11904 4592 ims -1 310410214827503 3986 03/29/20 03:02:53 60:00 8604 2928 ims -1 310410214827503 3987 03/29/20 04:02:53 60:00 6924 2680 ims -1 310410214827503 3988 03/29/20 05:02:53 60:00 8496 2928 ims -1 310410214827503 3989 03/29/20 06:02:53 60:00 6816 2680 ims -1 310410214827503 3990 03/29/20 07:02:53 60:00 19920 6620 ims -1 310410214827503 3991 03/29/20 08:02:53 60:00 8388 2820 ims -1 310410214827503 3992 03/29/20 09:02:53 60:00 6924 2896 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 164 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002808 NTatiklt not for general distribution. EFTA_00116884 EFTA01251408 MOBILITY The information contained heraCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating ET Tao Number (OTC) Bytes Up Byte. Dn Apn IMCI INSI MAZE 3993 03/29/20 10:02:53 60:00 8496 3144 ims -1 310410214827503 3994 03/29/20 11:02:53 60:00 16992 6356 ims -1 310410214827503 3995 03/29/20 12:02:53 60:00 6816 2680 ims -1 310410214827503 3996 03/29/20 13:02:53 60:00 8496 2928 ims -1 310410214827503 3997 03/29/20 14:02:53 60:00 6924 2788 ims -1 310410214827503 3998 03/29/20 15:02:53 60:00 11580 4268 ims -1 310410214827503 3999 03/29/20 16:02:53 60:00 13924 4892 ims -1 310410214827503 4000 03/29/20 17:02:53 60:00 6816 2788 ims -1 310410214827503 4001 03/29/20 18:02:53 60:00 8496 3036 ims -1 310410214827503 4002 03/29/20 19:02:53 51:30 13260 3672 ims -1 310410214827503 4003 03/29/20 19:49:05 60:00 21488 9904 ims -1 310410214827503 4004 03/29/20 20:49:05 60:00 10300 3176 ims -1 310410214827503 4005 03/29/20 21:49:05 60:00 10176 3376 ims -1 310410214827503 4006 03/29/20 22:49:05 60:00 0 0 ins -1 310410214827503 4007 03/29/20 22:51:54 60:00 25444 10932 ims -1 310410214827503 4008 03/29/20 23:49:05 60:00 0 0 ins -1 310410214827503 4009 03/29/20 23:51:54 60:00 8604 3036 ims -1 310410214827503 4010 03/30/20 00:49:05 60:00 0 0 ims -1 310410214827503 4011 03/30/20 00:51:54 60:00 8620 3788 ims -1 310410214827503 4012 03/30/20 01:49:05 44:23 0 0 ims -1 310410214827503 4013 03/30/20 01:51:54 60:00 9960 3376 ims -1 310410214827503 4014 03/30/20 02:51:54 60:00 13368 4532 ims -1 310410214827503 4015 03/30/20 03:51:54 60:00 12352 5772 ims -1 310410214827503 4016 03/30/20 04:51:54 60:00 8836 3160 ims -1 310410214827503 4017 03/30/20 05:51:54 60:00 10408 3316 ims -1 310410214827503 4018 03/30/20 06:51:54 60:00 7032 3144 ims -1 310410214827503 4019 03/30/20 07:51:54 60:00 13368 5284 in -1 310410214827503 4020 03/30/20 08:51:54 60:00 10332 4412 in -1 310410214827503 4021 03/30/20 09:51:54 60:00 10068 3176 in -1 310410214827503 4022 03/30/20 10:51:54 60:00 8388 2928 in -1 310410214827503 4023 03/30/20 11:51:54 60:00 8604 2928 ims -1 310410214827503 4024 03/30/20 12:51:54 60:00 10564 5020 in -1 310410214827503 4025 03/30/20 13:51:54 60:00 8388 2820 in -1 310410214827503 4026 03/30/20 14:51:54 60:00 11904 4428 in -1 310410214827503 4027 03/30/20 15:51:54 30:01 3408 1340 ims -1 310410214827503 4028 03/30/20 16:22:01 25:48 14212 7007 ims -1 310410214827503 MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 165 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002809 NsTntikE not for general distribution. EF-EAJVII6885 EFTA01251409 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111, AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Dn Apn IMEI INSI MAKE 4029 03/30/20 16:46:13 34:04 16845 25082 ions -1 310410214827503 4030 03/30/20 17:12:33 12:33 12041 8604 ims -1 310410214827503 4031 03/30/20 17:20:17 21:57 12080 6640 ims -1 310410214827503 4032 03/30/20 17:25:06 33:45 12986 11660 ims -1 310410214827503 4033 03/30/20 17:42:14 35:24 8473 9288 ims -1 310410214827503 4034 03/30/20 17:58:51 19:50 29297 21296 ims -1 310410214827503 4035 03/30/20 18:17:38 60:00 21830 13216 ims -1 310410214827503 4036 03/30/20 19:17:38 60:00 8712 3896 ims -1 310410214827503 4037 03/30/20 20:17:38 60:00 8388 2896 ims -1 310410214827503 4038 03/30/20 21:17:38 60:00 10160 3252 ions -1 310410214827503 4039 03/30/20 22:17:38 60:00 15264 5056 ions -1 310410214827503 4040 03/30/20 23:17:38 60:00 26472 11676 imp -1 310410214827503 4041 03/30/20 23:55:25 0:19 0 2746 ions -1 310410214827503 4042 03/31/20 00:17:38 60:00 8728 3128 ions -1 310410214827503 4043 03/31/20 01:17:38 60:00 3408 1432 ions -1 310410214827503 4044 03/31/20 01:25:37 60:00 23874 10212 imp -1 310410214827503 4045 03/31/20 02:17:38 60:00 0 0 ions -1 310410214827503 4046 03/31/20 02:25:37 60:00 9944 3144 ions -1 310410214827503 4047 03/31/20 03:17:38 60:00 0 0 inn -1 310410214827503 4048 03/31/20 03:25:37 60:00 10176 3144 imp -1 310410214827503 4049 03/31/20 04:17:38 60:00 0 0 ions -1 310410214827503 4050 03/31/20 04:25:37 60:00 11580 4220 ions -1 310410214827503 4051 03/31/20 05:17:38 7:49 0 0 ions -1 310410214827503 4052 03/31/20 05:25:37 60:00 10548 4380 ions -1 310410214827503 4053 03/31/20 06:25:37 60:00 8496 3004 ions -1 310410214827503 4054 03/31/20 07:25:37 60:00 6816 2648 inn -1 310410214827503 4055 03/31/20 08:25:37 60:00 13476 4468 imp -1 310410214827503 4056 03/31/20 09:25:37 60:00 8604 3004 imp -1 310410214827503 4057 03/31/20 10:25:37 60:00 10408 3392 ions -1 310410214827503 4058 03/31/20 11:25:37 60:00 12028 5272 ins -1 310410214827503 4059 03/31/20 12:25:37 60:00 13476 4468 ims -1 310410214827503 4060 03/31/20 13:25:37 60:00 10068 3376 ins -1 310410214827503 4061 03/31/20 14:25:37 20:28 3764 1448 ions -1 310410214827503 4062 03/31/20 15:53:12 60:00 18557 9445 imp -1 310410214827503 4063 03/31/20 16:53:12 12:04 0 0 imp -1 310410214827503 4064 03/31/20 17:01:34 60:00 36523 22430 imp -1 310410214827503 MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 166 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002810 PsisTili AL not for general distribution. EFTAJVII6886 EFTA01251410 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. ....,./ `•-•°`-‘ AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number TT Bytes Up Bytes Dn Apn IMCI IMSI 4065 03/31/20 17:28:05 0:01 0 1163 imp -1 310410214827503 4066 03/31/20 17:28:11 4:47 516565 1094626 imp -1 310410214827503 4067 03/31/20 18:01:34 60:00 5088 1572 imp -1 310410214827503 4068 03/31/20 18:34:47 60:00 21708 10015 imp -1 310410214827503 4069 03/31/20 19:01:34 60:00 0 0 imp -1 310410214827503 4070 03/31/20 19:34:47 60:00 9944 3284 imp -1 310410214827503 4071 03/31/20 20:01:34 60:00 0 0 imp -1 310410214827503 4072 03/31/20 20:34:47 60:00 10176 3392 ims -1 310410214827503 4073 03/31/20 21:01:34 60:00 0 0 ims -1 310410214827503 4074 03/31/20 21:34:47 60:00 8620 3788 ims -1 310410214827503 4075 03/31/20 22:01:34 17:03 0 0 ims -1 310410214827503 4076 03/31/20 22:34:47 60:00 18580 6228 imp -1 310410214827503 4077 03/31/20 23:34:47 60:00 8496 3144 imp -1 310410214827503 4078 04/01/20 00:34:47 60:00 8604 3160 imp -1 310410214827503 4079 04/01/20 01:34:47 60:00 12012 4608 imp -1 310410214827503 4080 04/01/20 02:34:47 60:00 6924 2788 imp -1 310410214827503 4081 04/01/20 03:34:47 60:00 8712 3284 imp -1 310410214827503 4082 04/01/20 04:34:47 60:00 11904 4500 imp -1 310410214827503 4083 04/01/20 05:34:47 60:00 10116 4144 ims -1 310410214827503 4084 04/01/20 06:34:47 60:00 8820 3144 imp -1 310410214827503 4085 04/01/20 07:34:47 60:00 8388 3036 imp -1 310410214827503 4086 04/01/20 08:34:47 60:00 8388 2820 imp -1 310410214827503 4087 04/01/20 09:34:47 60:00 11904 4716 imp -1 310410214827503 4088 04/01/20 10:34:47 60:00 7048 3680 imp -1 310410214827503 4089 04/01/20 11:34:47 60:00 10332 4128 imp -1 310410214827503 4090 04/01/20 12:34:47 60:00 8728 3160 imp -1 310410214827503 4091 04/01/20 13:34:47 60:00 10564 4484 ims -1 310410214827503 4092 04/01/20 14:34:47 60:00 7156 2804 imp -1 310410214827503 4093 04/01/20 15:34:47 60:00 10084 4176 imp -1 310410214827503 4094 04/01/20 16:09:53 60:00 44265 25658 imp -1 310410214827503 4095 04/01/20 16:34:47 60:00 0 0 imp -1 310410214827503 4096 04/01/20 16:49:32 0:19 3439 14876 imp -1 310410214827503 4097 04/01/20 16:49:59 44:46 9122409 5951191 imp -1 310410214827503 4098 04/01/20 17:09:53 60:00 11148 4800 imp -1 310410214827503 4099 04/01/20 17:34:47 60:00 0 0 imp -1 310410214827503 4100 04/01/20 18:09:53 60:00 8728 3160 ims -1 310410214827503 t4A2CE MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 167 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the /// d►►►ata transaction. SDNY_GM_ 00002811 The information contained her is PsiTniliAL not for general distribution. EFTAJVII6887 EFTA01251411 MOBILITY The information contained heraleeNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number LT Bytes Up Bytes Dn Apn IMLI IMBI 4101 04/01/20 18:34:47 60:00 0 0 ins -1 310410214827503 4102 04/01/20 19:09:53 60:00 8728 3160 ins -1 310410214827503 4103 04/01/20 19:34:47 34:13 0 0 ins -1 310410214827503 4104 04/01/20 20:09:53 60:00 10348 5020 in -1 310410214827503 4105 04/01/20 21:09:53 60:00 24612 13268 Lao -1 310410214827503 4106 04/01/20 21:53:57 0:28 2176 14903 Lao -1 310410214827503 4107 04/01/20 22:09:53 60:00 22420 10184 ins -1 310410214827503 4108 04/01/20 22:49:39 57:35 11972374 8027714 Lao -1 310410214827503 4109 04/01/20 23:09:53 60:00 16216 9776 Lao -1 310410214827503 4110 04/01/20 23:47:14 4:10 686613 925183 Lao -1 310410214827503 4111 04/02/20 00:09:53 60:00 6816 2788 Lao -1 310410214827503 4112 04/02/20 01:09:53 60:00 7156 2912 Lao -1 310410214827503 4113 04/02/20 02:09:53 60:00 13864 7304 ins -1 310410214827503 4114 04/02/20 03:09:53 60:00 8264 2804 ins -1 310410214827503 4115 04/02/20 04:09:53 60:00 7048 2804 ins -1 310410214827503 4116 04/02/20 05:09:53 60:00 13584 4640 ins -1 310410214827503 4117 04/02/20 06:09:53 60:00 6924 2680 ins -1 310410214827503 4118 04/02/20 07:09:53 60:00 10456 4304 ins -1 310410214827503 4119 04/02/20 08:09:53 60:00 10332 4020 ins -1 310410214827503 4120 04/02/20 09:09:53 60:00 6816 2680 as -1 310410214827503 4121 04/02/20 10:09:53 60:00 6816 2572 as -1 310410214827503 4122 04/02/20 11:09:53 60:00 7032 2804 as -1 310410214827503 4123 04/02/20 12:09:53 60:00 13848 5736 as -1 310410214827503 4124 04/02/20 13:09:53 60:00 7032 2928 as -1 310410214827503 4125 04/02/20 14:09:53 60:00 10300 3300 ins -1 310410214827503 4126 04/02/20 15:09:53 60:00 8496 3036 ins -1 310410214827503 4127 04/02/20 16:09:53 60:00 8480 2928 Lao -1 310410214827503 4128 04/02/20 17:09:53 14:58 4980 1588 Lao -1 310410214827503 4129 04/02/20 17:27:13 60:00 17057 9338 Lao -1 310410214827503 4130 04/02/20 18:27:13 60:00 8512 3712 ins -1 310410214827503 4131 04/02/20 19:27:13 60:00 8496 3160 ins -1 310410214827503 4132 04/02/20 20:27:13 60:00 8712 3144 ins -1 310410214827503 4133 04/02/20 21:27:13 60:00 8604 3176 ins -1 310410214827503 4134 04/02/20 22:27:13 54:40 12012 4536 ins -1 310410214827503 4135 04/02/20 23:22:57 60:00 18568 9660 ins -1 310410214827503 4136 04/03/20 00:22:57 60:00 8944 3176 ins -1 310410214827503 MAME MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 168 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002812 NeTniliAL not for general distribution. EF-EA_00116888 EFTA01251412 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and arc. provided in 41011, terms... "—s10 AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes up Byte. apn Dn IMMI IMS I MUT MODEL 4137 04/03/20 01:22:57 60:00 6924 2696 ims -1 310410214827503 4138 04/03/20 02:22:57 60:00 8388 2928 ims -1 310410214827503 4139 04/03/20 03:22:57 60:00 15760 5908 ims -1 310410214827503 4140 04/03/20 04:22:57 60:00 8836 3052 ims -1 310410214827503 4141 04/03/20 05:22:57 37:29 10392 6580 ims -1 310410214827503 4142 04/03/20 12:23:15 60:00 16857 9144 ims -1 310410214827503 4143 04/03/20 12:23:54 0:50 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IIMIONZ8 4144 04/03/20 12:23:55 0:50 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4145 04/03/20 12:24:36 0:10 1305 5631 nxtgonpho no -1 310410214827503 4146 04/03/20 12:24:44 2:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4147 04/03/20 12:24:45 2:11 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4148 04/03/20 12:25:44 11:35 3225 5417 nxtgonpho no -1 310410214827503 4149 04/03/20 12:26:56 17:20 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4150 04/03/20 12:44:15 2:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4151 04/03/20 12:44:16 2:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 4152 04/03/20 12:46:15 2:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 4153 04/03/20 12:46:16 2:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4154 04/03/20 12:48:42 5:46 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4155 04/03/20 12:48:43 5:46 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 4156 04/03/20 12:54:29 14:38 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4157 04/03/20 12:54:29 14:39 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 4158 04/03/20 13:09:08 27:17 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 4159 04/03/20 13:09:09 27:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 4160 04/03/20 13:23:15 60:00 10068 3268 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is Page 169 SDNY_GM_00002813 NTntAlt not for general distribution. EFTA_00116889 EFTA01251413 MOBILITY The information contained heraCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Data Time (UTC) Originating Rumbas ET Bytes Bytes, Apn Up Dn I CI 4161 04/03/20 13:36:26 0:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4162 04/03/20 13:37:07 0:44 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4163 04/03/20 13:37:50 14:43 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4164 04/03/20 13:37:51 14:43 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4165 04/03/20 13:52:34 0:55 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 4166 04/03/20 13:53:28 2:10 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4167 04/03/20 13:53:29 2:10 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4168 04/03/20 13:55:39 30:41 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4169 04/03/20 14:23:15 12:20 11140 6868 moo -1 310410214827503 4170 04/03/20 14:24:18 0:12 0 4598 moo -1 310410214827503 4171 04/03/20 14:26:19 63:58 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 4172 04/03/20 14:26:20 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4173 04/03/20 14:37:17 3:50 0 0 moo -1 310410214827503 4174 04/03/20 14:37:41 52:36 6352 6754 moo 3587080982063726 310410214827503 APPLE 4175 04/03/20 14:37:42 52:36 6686 6088 moo 3587080982063726 310410214827503 APPLE 4176 04/03/20 14:41:07 60:00 21261 12240 moo -1 310410214827503 4177 04/03/20 15:26:20 3:58 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 4178 04/03/20 15:30:18 10:00 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 4179 04/03/20 15:30:19 56:58 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 4180 04/03/20 15:41:07 60:00 10036 3160 moo -1 310410214827503 4181 04/03/20 16:27:17 31:12 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4182 04/03/20 16:27:18 31:12 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4183 04/03/20 16:41:07 2:30 0 0 ins -1 310410214827503 4184 04/03/20 16:43:15 15:14 6337 6734 imp 3587080982063726 310410214827503 APPLE 4185 04/03/20 16:43:16 15:14 6666 6073 imp 3587080982063726 310410214827503 APPLE MOLL !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES AT&T Proprietary The AT&T network conptantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 170 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002814 NeTiliAL not for general distribution. EFTA_00116890 EFTA01251414 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in (ITC. i ‘ina °.,"...Sse AT&T Run Data: Run Tame: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Hooter ET Bytes Up Byte. Apn Dn INC' IMBI 4186 04/03/20 16:43:37 60:00 18576 1 9466 imp -1 310410214827503 4187 04/03/20 16:58:30 16:57 0 Onmtgonpho no 3587080982063726 310410214827503 4188 04/03/20 17:15:26 20:55 192 Onmtgonpho no 3587080982063726 310410214827503 4189 04/03/20 17:15:27 20:55 0 Onmtgonpho no 3587080982063726 310410214827503 4190 04/03/20 17:36:22 2:07 0 Onmtgonpho no 3587080982063726 310410214827503 4191 04/03/20 17:38:28 43:32 192 Onmtgonpho no 3587080982063726 310410214827503 4192 04/03/20 17:38:29 43:33 0 Onmtgonpho no 3587080982063726 310410214827503 4193 04/03/20 17:43:37 60:00 8604 3036 imp -1 310410214827503 4194 04/03/20 18:22:02 1:30 0 Oruftgonpho no 3587080982063726 310410214827503 4195 04/03/20 18:23:31 33:11 192 Oruftgonpho no 3587080982063726 310410214827503 4196 04/03/20 18:23:32 33:11 0 Onmtgonpho no 3587080982063726 310410214827503 4197 04/03/20 18:43:37 60:00 10036 3408 imp -1 310410214827503 4198 04/03/20 18:56:43 8:45 0 Onmtgonpho no 3587080982063726 310410214827503 4199 04/03/20 19:05:28 15:03 192 Onmtgonpho no 3587080982063726 310410214827503 4200 04/03/20 19:05:29 15:03 0 Onmtgonpho no 3587080982063726 310410214827503 4201 04/03/20 19:20:32 1:07 0 Onmtgonpho no 3587080982063726 310410214827503 4202 04/03/20 19:21:39 27:43 192 Onmtgonpho no 3587080982063726 310410214827503 4203 04/03/20 19:21:40 27:43 0 Onmtgonpho no 3587080982063726 310410214827503 4204 04/03/20 19:43:37 60:00 41164 21628 imp -1 310410214827503 4205 04/03/20 19:49:23 19:28 192 Onmtgonpho no 3587080982063726 310410214827503 4206 04/03/20 19:49:24 19:28 0 Onmtgonpho no 3587080982063726 310410214827503 4207 04/03/20 20:07:29 0:30 53214 52202 imp -1 310410214827503 4208 04/03/20 20:08:10 1:00 159700 98815 imp -1 310410214827503 MARL MODEL APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 171 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002815 NsTiliAL not for general distribution. EF-EA_00ll6891 EFTA01251415 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41IM, AT&T Run Dato: Run Time: Data Osage for: Iton Conn. Date 06/17/2020 18:55:48 Conn. Originating ET Time Number (OTC) Bytes Op Bytoa Min Dn IX= DWI ten 4209 04/03/20 20:08:52 1:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4210 04/03/20 20:10:45 8:21 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4211 04/03/20 20:10:46 8:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4212 04/03/20 20:19:07 21:45 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4213 04/03/20 20:40:51 2:26 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4214 04/03/20 20:40:53 2:25 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4215 04/03/20 20:43:18 0:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4216 04/03/20 20:43:37 60:00 10380 4128 ins -1 310410214827503 4217 04/03/20 20:44:43 4:25 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4218 04/03/20 20:49:08 35:47 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4219 04/03/20 20:49:09 35:47 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4220 04/03/20 21:24:55 8:10 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4221 04/03/20 21:24:56 8:10 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4222 04/03/20 21:33:06 7:16 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4223 04/03/20 21:40:22 21:44 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4224 04/03/20 21:40:22 21:46 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4225 04/03/20 21:43:37 60:00 13568 4784 mos -1 310410214827503 4226 04/03/20 22:02:07 0:34 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4227 04/03/20 22:02:40 1:45 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4228 04/03/20 22:02:42 1:44 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4229 04/03/20 22:04:26 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4230 04/03/20 22:43:37 60:00 8388 3036 ins 310410214827503 NODEL IPHONEB 11080=8 !PHONES !PHONES 11080=8 !PHONES !PHONES !PHONES !PHONES 11080=8 !PHONES !PHONES 11080=8 !PHONES !PHONES !PHONES !PHONES 11080=8 11080=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 172 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002816 PsiTniliAL not for general distribution. EF-EA_O0116892 EFTA01251416 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ...„ ••`-s's0•AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number LT Bytes Up Bytoa Apn Dn INLI IMBI NUM 4231 04/03/20 23:04:26 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4232 04/03/20 23:43:37 60:00 9928 3176 ims -1 310410214827503 4233 04/04/20 00:04:26 28:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4234 04/04/20 00:32:43 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4235 04/04/20 00:43:37 60:00 13352 4624 ims -1 310410214827503 4236 04/04/20 01:32:43 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4237 04/04/20 01:43:37 60:00 10252 3300 ims -1 310410214827503 4238 04/04/20 02:32:43 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4239 04/04/20 02:43:37 60:00 15988 5032 ims -1 310410214827503 4240 04/04/20 03:32:43 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4241 04/04/20 03:43:37 60:00 8388 2928 ims -1 310410214827503 4242 04/04/20 04:32:43 0:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4243 04/04/20 04:32:46 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4244 04/04/20 04:43:37 60:00 11580 3548 ims -1 310410214827503 4245 04/04/20 05:32:46 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4246 04/04/20 05:43:37 60:00 11812 4484 ims -1 310410214827503 4247 04/04/20 06:32:46 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4248 04/04/20 06:43:37 60:00 6956 2680 ims -1 310410214827503 4249 04/04/20 07:32:46 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4250 04/04/20 07:43:37 60:00 13444 4676 ins -1 310410214827503 4251 04/04/20 08:32:46 0:01 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4252 04/04/20 08:32:50 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4253 04/04/20 08:43:37 60:00 13244 4640 ims -1 310410214827503 4254 04/04/20 09:32:50 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4255 04/04/20 09:43:37 60:00 10252 3284 ims -1 310410214827503 MOLL IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 173 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002817 NeTifikE not for general distribution. EFEN_O0116893 EFTA01251417 MOBILITY The information contained horaleeNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in (ITC. AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 lam Conn. Time (OTC) Originating Number ET Bytes Up Bytoa Apn Dn Der IMSI MARL 4256 04/04/20 10:32:50 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4257 04/04/20 10:43:37 60:00 8388 3036 imp -1 310410214827503 4258 04/04/20 11:32:50 12:22 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4259 04/04/20 11:43:37 60:00 13584 5680 as -1 310410214827503 4260 04/04/20 11:45:11 65:36 192 Ormtgonpho no 3587080982063726 310410214827503 APPLE 4261 04/04/20 11:45:12 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4262 04/04/20 12:43:37 39:34 4964 1588 imp -1 310410214827503 4263 04/04/20 12:45:12 5:36 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4264 04/04/20 12:50:48 2:53 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4265 04/04/20 12:53:40 58:19 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4266 04/04/20 12:53:41 58:19 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4267 04/04/20 13:19:41 32:18 6298 8144 imp 3587080982063726 310410214827503 APPLE 4268 04/04/20 13:19:42 32:18 8076 6142 ins 3587080982063726 310410214827503 APPLE 4269 04/04/20 13:23:11 60:00 18342 9433 ins -1 310410214827503 4270 04/04/20 13:52:00 0:06 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4271 04/04/20 13:52:17 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4272 04/04/20 14:23:11 60:00 10068 3144 imp -1 310410214827503 4273 04/04/20 14:52:17 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4274 04/04/20 15:23:11 60:00 9960 3252 imp -1 310410214827503 4275 04/04/20 15:52:17 27:29 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4276 04/04/20 16:19:45 2:41 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4277 04/04/20 16:19:47 2:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4278 04/04/20 16:22:27 0:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4279 04/04/20 16:23:11 60:00 13260 4592 imp -1 310410214827503 NADEL !PHONES !PHONES !PHONES 1PRONE8 1PRONE8 1PRONE8 !PHONES !PHONES 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 174 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002818 NeTniliAL not for general distribution. EF-EA_O0116894 EFTA01251418 MOBILITY The information contained heraCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern (ITC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4111. ....,,,• ••-•° `"". AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Originating ET Bytes Byte. Apn INEI Mal MARE MODEL Date Time Number Up Dn (UTC) 4280 04/04/20 16:23:18 0:23 192 0 nxtgonpho no 3587080982063726 310410214827503 4281 04/04/20 16:23:20 0:22 0 Oruftgonpho no 3587080982063726 310410214827503 4282 04/04/20 16:23:42 24:09 0 Oruftgonpho no 3587080982063726 310410214827503 4283 04/04/20 16:47:50 2:25 192 Onxtgonpho no 3587080982063726 310410214827503 4284 04/04/20 16:47:52 2:24 0 0 nxtgorairo no 3587080982063726 310410214827503 4285 04/04/20 16:50:15 4:58 192 Onxtgonpho no 3587080982063726 310410214827503 4286 04/04/20 16:50:16 4:58 0 Onxtgonpho no 3587080982063726 310410214827503 4287 04/04/20 16:55:14 0:05 0 Onxtgonpho no 3587080982063726 310410214827503 4288 04/04/20 16:55:45 7:33 0 Onxtgonpho no 3587080982063726 310410214827503 4289 04/04/20 17:03:17 2:07 192 Onxtgonpho no 3587080982063726 310410214827503 4290 04/04/20 17:03:19 2:06 0 Onxtgonpho no 3587080982063726 310410214827503 4291 04/04/20 17:05:25 5:57 0 Onxtgonpho no 3587080982063726 310410214827503 4292 04/04/20 17:11:21 2:19 192 Onxtgonpho no 3587080982063726 310410214827503 4293 04/04/20 17:11:22 2:19 0 Onxtgonpho no 3587080982063726 310410214827503 4294 04/04/20 17:13:41 0:05 0 Onxtgonpho no 3587080982063726 310410214827503 4295 04/04/20 17:14:37 7:18 192 Onxtgonpho no 3587080982063726 310410214827503 4296 04/04/20 17:14:38 7:18 0 Onxtgonpho no 3587080982063726 310410214827503 4297 04/04/20 17:21:56 8:23 192 Onxtgonpho no 3587080982063726 310410214827503 4298 04/04/20 17:21:57 8:23 0 Onxtgonpho no 3587080982063726 310410214827503 4299 04/04/20 17:23:11 60:00 10856 4488 imo -1 310410214827503 4300 04/04/20 17:30:20 1:32 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 175 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002819 NTniliAL not for general distribution. EF-EA_00ll6895 EFTA01251419 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. &4664" me/# AT&T Run pato: Run Time: Data usage For: Item conn. Date 06/17/2020 18:55:49 Conn. Time (LTC) originating Number ET Bytes Up Byte. Apn Dn INLI INSI MARL NICOLL 4301 04/04/20 17:31:53 3:22 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 4302 04/04/20 17:35:14 2:05 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 4303 04/04/20 17:35:15 2:05 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4304 04/04/20 17:37:20 21:09 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4305 04/04/20 17:58:29 2:21 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 4306 04/04/20 17:58:30 2:21 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4307 04/04/20 18:00:50 6:43 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4308 04/04/20 18:00:52 6:42 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4309 04/04/20 18:07:34 60:00 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4310 04/04/20 18:23:11 60:00 8512 3004 vas -1 310410214827503 4311 04/04/20 19:07:34 60:00 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4312 04/04/20 19:23:11 60:00 12120 4452 vas -1 310410214827503 4313 04/04/20 20:07:34 32:48 0 Orumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4314 04/04/20 20:23:11 60:00 0 0 vas -1 310410214827503 4315 04/04/20 20:40:22 14:45 192 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4316 04/04/20 20:40:23 14:45 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4317 04/04/20 20:47:50 60:00 15113 8893 vas -1 310410214827503 4318 04/04/20 20:55:08 5:50 0 Orumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4319 04/04/20 21:00:57 23:10 192 Orumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4320 04/04/20 21:00:58 23:10 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4321 04/04/20 21:23:11 60:00 0 0 vas -1 310410214827503 4322 04/04/20 21:24:08 5:55 0 Ommtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4323 04/04/20 21:30:02 3:38 192 Orumgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 176 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002820 NeTifikE not for general distribution. EF-EA_00ll6896 EFTA01251420 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 4111. ....,,,,• ••-s`"". AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Tina Number (UTC) Bytes UP Byte. Apn Dn ICI INSI NICOLL 4324 04/04/20 21:30:03 3:38 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4325 04/04/20 21:33:41 22:58 192 0 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONZ8 — no 4326 04/04/20 21:33:42 22:58 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4327 04/04/20 21:47:50 60:00 10176 3408 ims -1 310410214827503 4328 04/04/20 21:56:40 1:21 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4329 04/04/20 21:58:00 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4330 04/04/20 21:58:02 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4331 04/04/20 22:00:05 32:56 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4332 04/04/20 22:23:11 60:00 0 0 ims -1 310410214827503 4333 04/04/20 22:33:01 50:49 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4334 04/04/20 22:33:02 50:49 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4335 04/04/20 22:47:50 60:00 6924 3020 ims -1 310410214827503 4336 04/04/20 23:23:11 59:45 0 0 ims -1 310410214827503 4337 04/04/20 23:23:51 7:23 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4338 04/04/20 23:23:52 7:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4339 04/04/20 23:31:15 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4340 04/04/20 23:47:50 60:00 10160 3176 ims -1 310410214827503 4341 04/05/20 00:31:15 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4342 04/05/20 00:47:50 60:00 8496 2928 ims -1 310410214827503 4343 04/05/20 01:31:15 10:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4344 04/05/20 01:41:28 39:59 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4345 04/05/20 01:47:50 60:00 11672 4412 ims -1 310410214827503 4346 04/05/20 02:21:26 76:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4347 04/05/20 02:21:27 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 177 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002821 NeTniiiikE not for general distribution. EF-EA_00116897 EFTA01251421 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 LL:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. AT&T Run Date: Run Tame: Data Usage For: Item cotta. Date 06/17/2020 18:55:49 Conn. Time (OTC) originating mambos ET Bytes . UP Bytes Ape Dn INSI MAfl 4348 04/05/20 02:47:50 60:00 6924 2696 imp -1 310410214827503 4349 04/05/20 03:21:27 16:32 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4350 04/05/20 03:37:59 176:19 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4351 04/05/20 03:38:00 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4352 04/05/20 03:47:50 60:00 13924 4856 imp -1 310410214827503 4353 04/05/20 04:38:00 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4354 04/05/20 04:47:50 60:00 8496 3036 ims -1 310410214827503 4355 04/05/20 05:38:00 56:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4356 04/05/20 05:47:50 60:00 6816 2788 ims -1 310410214827503 4357 04/05/20 06:47:50 60:00 11796 4536 ims -1 310410214827503 4358 04/05/20 07:47:50 12:50 4980 1588 ims -1 310410214827503 4359 04/05/20 08:08:28 60:00 18067 9628 ims -1 310410214827503 4360 04/05/20 09:08:28 60:00 8388 3020 ims -1 310410214827503 4361 04/05/20 09:18:59 54:33 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4362 04/05/20 10:08:28 60:00 8388 3020 ims -1 310410214827503 4363 04/05/20 10:13:31 68:53 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4364 04/05/20 10:13:32 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4365 04/05/20 11:08:28 60:00 11888 4376 ims -1 310410214827503 4366 04/05/20 11:13:32 8:53 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4367 04/05/20 11:22:25 22:37 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4368 04/05/20 11:22:26 22:37 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4369 04/05/20 11:45:03 21:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4370 04/05/20 12:06:36 60:29 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4371 04/05/20 12:06:37 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4372 04/05/20 12:08:28 32:45 5088 1588 ims -1 310410214827503 4373 04/05/20 12:40:12 26:53 6352 6666 ims 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES IPROME8 IPRONZ8 IPRONZ8 IPRONZ8 IPRONZ8 IPROME8 IPRONZ8 !PHONES !PHONES IPROME8 !PHONES !PHONES IPRONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002822 NeTifikE not for general distribution. Page 178 EF-EA_O0116898 EFTA01251422 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in AT&T Run Date: Run Time: Data Osage for: Item Conn. Date 06/17/2020 18:55:49 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn Iter IM3I MAfl 4374 04/05/20 12:40:13 26:53 6666 6088 imo 3587080982063726 310410214827503 APPLE 4375 04/05/20 12:43:45 60:00 15273 8758 imo -1 310410214827503 4376 04/05/20 13:06:37 0:29 0 Oruagonpho no 3587080982063726 310410214827503 APPLE 4377 04/05/20 13:07:05 8:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4378 04/05/20 13:07:06 8:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4379 04/05/20 13:15:18 0:56 0 0 nxtgonpho 3587080982063726 310410214827503 APPLE --- no 4380 04/05/20 13:16:13 2:17 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4381 04/05/20 13:16:14 2:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4382 04/05/20 13:18:31 12:27 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4383 04/05/20 13:18:32 12:27 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4384 04/05/20 13:30:59 2:36 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4385 04/05/20 13:33:34 8:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4386 04/05/20 13:33:36 8:25 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4387 04/05/20 13:42:01 15:56 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4388 04/05/20 13:43:45 60:00 8604 3160 imo -1 310410214827503 4389 04/05/20 13:57:56 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4390 04/05/20 13:57:57 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4391 04/05/20 14:00:01 1:59 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4392 04/05/20 14:01:59 2:05 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4393 04/05/20 14:02:01 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4394 04/05/20 14:04:05 16:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4395 04/05/20 14:20:46 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL IPHONE8 IPHONE8 !PHONES IPHONE8 IPHONE8 !PHONES !PHONES !PHONES IPHONE8 !PHONES !PHONES IPHONE8 !PHONES !PHONES !PHONES !PHONES IPHONE8 !PHONES !PHONES IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002823 NaTtAdti not for general distribution. Page 179 EF-EA_00ll6899 EFTA01251423 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tras aI"i AT&T Run Date: Run Time: Data Usage Tor: 06/1//2020 IIIIIIIIII Iton Conn. Date Conn. Time (OTC) Originating Number ET Byte. Op Byte. Apn Dn INLI INS! 4396 04/05/20 14:20:47 2:04 0 0 nmtgenpho no 3587080982063726 310410214827503 4397 04/05/20 14:22:51 8:27 0 Oruftgenpho no 3587080982063726 310410214827503 4398 04/05/20 14:31:17 2:04 192 Oruftgenpho no 3587080982063726 310410214827503 4399 04/05/20 14:31:18 2:04 0 Oruftgenpho no 3587080982063726 310410214827503 4400 04/05/20 14:33:22 2:09 0 Oruftgenpr no 3587080982063726 310410214827503 4401 04/05/20 14:35:30 2:05 192 Oruftgenpho no 3587080982063726 310410214827503 4402 04/05/20 14:35:32 2:04 0 Onmtgenpho no 3587080982063726 310410214827503 4403 04/05/20 14:37:36 0:34 0 0 nxtgenpho no 3587080982063726 310410214827503 4404 04/05/20 14:38:10 2:04 192 Oruftgenpho no 3587080982063726 310410214827503 4405 04/05/20 14:38:11 2:04 0 Onmtgenpho no 3587080982063726 310410214827503 4406 04/05/20 14:40:15 3:13 0 Onmtgenpho no 3587080982063726 310410214827503 4407 04/05/20 14:43:27 2:18 192 Oruftgenpho no 3587080982063726 310410214827503 4408 04/05/20 14:43:28 2:18 0 Oruftgenpho no 3587080982063726 310410214827503 4409 04/05/20 14:43:45 60:00 6956 2696 ims -1 310410214827503 4410 04/05/20 14:45:46 6:03 192 0 nxtgenpho no 3587080982063726 310410214827503 4411 04/05/20 14:45:47 6:03 0 Oruftgenpho no 3587080982063726 310410214827503 4412 04/05/20 14:51:50 0:36 0 Oruftgenpho no 3587080982063726 310410214827503 4413 04/05/20 14:52:25 2:04 192 Oruftgenpho no 3587080982063726 310410214827503 4414 04/05/20 14:52:26 2:04 0 Onmtgenpho no 3587080982063726 310410214827503 4415 04/05/20 14:54:30 0:37 0 0 nxtgenpho no 3587080982063726 310410214827503 4416 04/05/20 14:55:06 2:04 192 Onmtgenpho no 3587080982063726 310410214827503 MARL NICOLL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE !PHONES APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 180 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002824 NeTniliAL not for general distribution. EF-EA_00116900 EFTA01251424 NOBILITY The information contained hereiCONyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411Mi tr‘"li. a asi d . AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) &yeas Up Bytaa Apn Dn INEI IMSI MIUtE MODEL 4417 04/05/20 14:55:07 2:04 0 0 natgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 4418 04/05/20 14:57:11 0:37 0 0 natgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 4419 04/05/20 14:57:47 34:03 192 0 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 4420 04/05/20 14:57:48 34:03 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 4421 04/05/20 15:31:50 10:00 192 0 natgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 4422 04/05/20 15:31:51 27:42 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4423 04/05/20 15:43:45 60:00 8496 2928 ims -1 310410214827503 4424 04/05/20 15:59:32 2:04 192 0 natgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4425 04/05/20 15:59:33 2:04 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4426 04/05/20 16:01:37 0:35 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 4427 04/05/20 16:02:11 2:18 192 0 natgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 4428 04/05/20 16:02:12 2:18 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 4429 04/05/20 16:04:30 12:46 192 0 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 4430 04/05/20 16:04:31 12:46 0 0 natgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 4431 04/05/20 16:17:16 2:04 192 0 natgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4432 04/05/20 16:17:18 2:03 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 4433 04/05/20 16:19:21 2:23 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 4434 04/05/20 16:21:43 8:44 192 0 natgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4435 04/05/20 16:21:44 8:44 0 0 natgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4436 04/05/20 16:30:28 27:49 192 0 ructgonpho no 3587080982063726 310410214827503 APPLE !PROMS 4437 04/05/20 16:30:29 27:49 0 0 ructgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 181 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002825 NeTifikE not for general distribution. EFTA_00116901 EFTA01251425 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ...„.• ••—•st` a. AT&T Run pato: Run Time: Data Osage for: Itea Conn. Date 06/17/2020 Conn. originating ET Time Number (OTC) Bytes Up Bytes Apn Dn IKE I INSI 4438 04/05/20 16:43:45 60:00 11920 4376 ims -2 310410214827503 4439 04/05/20 16:58:18 8:22 192 0 natgonpho no 3587080982063726 310410214827503 4440 04/05/20 16:58:19 8:22 0 0 natgonpho no 3587080982063726 310410214827503 4441 04/05/20 17:06:41 0:36 0 Onatgonpho no 3587080982063726 310410214827503 4442 04/05/20 17:07:16 2:05 192 Onatgonpho no 3587080982063726 310410214827503 4443 04/05/20 17:07:18 2:04 0 Onatgonpho no 3587080982063726 310410214827503 4444 04/05/20 17:09:22 1:06 0 Onatgonpho no 3587080982063726 310410214827503 4445 04/05/20 17:10:27 2:17 192 Onatgonpho no 3587080982063726 310410214827503 4446 04/05/20 17:10:28 2:17 0 Onatgonpho no 3587080982063726 310410214827503 4447 04/05/20 17:12:44 6:03 192 Oructgonpho no 3587080982063726 310410214827503 4448 04/05/20 17:12:45 6:04 0 OruMgonpho no 3587080982063726 310410214827503 4449 04/05/20 17:18:49 0:36 0 OruMgonpho no 3587080982063726 310410214827503 4450 04/05/20 17:19:24 8:21 192 OruMgonpho no 3587080982063726 310410214827503 4451 04/05/20 17:19:25 8:21 0 OruMgonpho no 3587080982063726 310410214827503 4452 04/05/20 17:27:46 19:00 0 Onatgonpho no 3587080982063726 310410214827503 4453 04/05/20 17:43:45 34:11 6924 2840 ins -1 310410214827503 4454 04/05/20 17:46:46 2:26 0 Onatgonpho no 3587080982063726 310410214827503 4455 04/05/20 17:49:11 8:24 192 Onatgonpho no 3587080982063726 310410214827503 4456 04/05/20 17:49:12 8:24 0 OruMgonpho no 3587080982063726 310410214827503 4457 04/05/20 17:57:36 60:00 0 OruMgonpho no 3587080982063726 310410214827503 4458 04/05/20 18:24:57 8:44 8816 6178 ism 3587080982063726 310410214827503 4459 04/05/20 18:33:41 0:01 0 0 imp 3587080982063726 310410214827503 4460 04/05/20 18:33:50 60:00 16765 9014 imp -1 310410214827503 MARL NICOLL APPLE !PHONES APPLE !PHONES APPLE 1PHONE8 APPLE 1PHONE8 APPLE 1PHONE8 APPLE 1PHONE8 APPLE 1PHONE8 APPLE 1PHONE8 APPLE 1PHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PHONE8 APPLE 1PHONE8 APPLE 1PHONE8 APPLE 1PHONE8 APPLE 1PHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 182 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002826 PsiTifikE not for general distribution. EFTA 00116902 EFTA01251426 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 4111. AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn On INEI IM3I NAZI 4461 04/05/20 18:57:36 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4462 04/05/20 19:33:50 60:00 10144 3284 imo -1 310410214827503 4463 04/05/20 19:57:36 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4464 04/05/20 20:33:50 34:45 5072 1572 imp -1 310410214827503 4465 04/05/20 20:57:36 54:28 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4466 04/05/20 21:08:36 42:23 9268 7288 imp 3587080982063726 310410214827503 APPLE 4467 04/05/20 21:50:59 60:00 11920 4220 imp 3587080982063726 310410214827503 APPLE 4468 04/05/20 21:52:03 2:04 192 Oruftgonpho no 3080982063726 310410214827503 APPLE 4469 04/05/20 21:52:04 2:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4470 04/05/20 21:54:08 56:14 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4471 04/05/20 22:50:22 8:53 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4472 04/05/20 22:50:23 8:53 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4473 04/05/20 22:50:59 60:00 8728 3020 yes 3587080982063726 310410214827503 APPLE 4474 04/05/20 22:59:15 6:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4475 04/05/20 22:59:17 6:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4476 04/05/20 23:05:20 26:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4477 04/05/20 23:31:30 2:05 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4478 04/05/20 23:31:31 2:05 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4479 04/05/20 23:33:36 6:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4480 04/05/20 23:40:15 2:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4481 04/05/20 23:40:16 2:05 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4482 04/05/20 23:42:21 14:38 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4483 04/05/20 23:50:59 60:00 8496 2896 ins 3587080982063726 310410214827503 APPLE MODEL IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB !PHONES !PHONES IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB !PRONGS !PHONES IPHONEB IPHONEB IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 183 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002827 NTniliAL not for general distribution. EF-EA_00116903 EFTA01251427 MOBILITY The information contained heraCtoNyFti (UTC) 4484 04/05/20 23:56:58 2:46 192 0 nxtgenpho no 3587080982063726 310410214827503 4485 04/05/20 23:56:59 2:46 0 0 nxtgenpho no 3587080982063726 310410214827503 4486 04/05/20 23:59:44 14:30 192 0 nxtgenpho no 3587080982063726 310410214827503 4487 04/05/20 23:59:45 14:30 0 0 nxtgenpho no 3587080982063726 310410214827503 4488 04/06/20 00:14:15 14:15 0 0 nxtgenpho no 3587080982063726 310410214827503 4489 04/06/20 00:28:29 1:16 192 0 ruitgonpho no 3587080982063726 310410214827503 4490 04/06/20 00:28:30 1:16 0 0 nxtgenpho no 3587080982063726 310410214827503 4491 04/06/20 00:29:46 0:49 0 Onatgonpho no 3587080982063726 310410214827503 4492 04/06/20 00:30:34 2:04 192 OruMgonpho no 3587080982063726 310410214827503 4493 04/06/20 00:30:35 2:04 0 Onatgonpho no 3587080982063726 310410214827503 4494 04/06/20 00:32:39 0:36 0 Onatgonpho no 3587080982063726 310410214827503 4495 04/06/20 00:33:14 8:27 192 Onatgonpho no 3587080982063726 310410214827503 4496 04/06/20 00:33:15 8:27 0 Onatgonpho no 3587080982063726 310410214827503 4497 04/06/20 00:41:42 1:42 0 Onatgonpho no 3587080982063726 310410214827503 4498 04/06/20 00:43:23 2:05 192 Onatgonpho no 3587080982063726 310410214827503 4499 04/06/20 00:43:24 2:05 0 OruMgonpho no 3587080982063726 310410214827503 4500 04/06/20 00:45:29 1:25 0 Onatgonpho no 3587080982063726 310410214827503 4501 04/06/20 00:46:53 2:04 192 Onatgonpho no 3587080982063726 310410214827503 4502 04/06/20 00:46:54 2:04 0 OruMgonpho no 3587080982063726 310410214827503 4503 04/06/20 00:48:58 2:12 0 OruMgonpho no 3587080982063726 310410214827503 4504 04/06/20 00:50:59 60:00 6956 2648 imp 3587080982063726 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 411111, tr‘inli. j a AT&T Run Date: Run Time: Data Usage for: 06/17/2020 Item Conn. Conn. Originating ET Bytes Bytes Apn MCI INSI MART NODEL Date Time Number DP Dn APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE !PRONGS APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 184 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002828 NeTtAsk not for general distribution. EFTA 00116904 EFTA01251428 MOBILITY The information contained hereCtlaNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number Cr Bytes un Bytes Apn Dn INZI INSI MARL NICOLL 4505 04/06/20 00:51:09 3:35 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4506 04/06/20 00:51:10 3:35 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4507 04/06/20 00:54:45 5:15 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4508 04/06/20 00:59:59 8:19 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4509 04/06/20 01:00:01 8:18 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4510 04/06/20 01:08:19 39:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4511 04/06/20 01:47:18 9:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4512 04/06/20 01:47:20 9:02 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4513 04/06/20 01:50:59 60:00 15420 5828 ims 3587080982063726 310410214827503 APPLE IPHOME8 4514 04/06/20 01:56:22 3:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4515 04/06/20 01:59:25 3:08 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4516 04/06/20 01:59:26 3:08 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4517 04/06/20 02:02:33 2:54 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4518 04/06/20 02:02:34 2:54 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4519 04/06/20 02:05:28 23:22 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4520 04/06/20 02:28:49 14:16 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4521 04/06/20 02:28:50 14:16 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4522 04/06/20 02:43:06 2:07 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4523 04/06/20 02:45:12 6:13 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 4524 04/06/20 02:45:13 6:13 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4525 04/06/20 02:50:59 60:00 8388 2896 ims 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain recycle that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002829 not for general distribution. Page 185 EF-EA_00116905 EFTA01251429 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in AT&T Run Dato: Run T/mo: Data Osage for: 06/17/2020 Salim Item Conn. Date Conn. Originating ET 21mo Baer (OTC) Bytes Op 4526 04/06/20 02:51:26 25:12 0 4527 04/06/20 03:16:37 1:30 192 4528 04/06/20 03:16:38 1:30 0 4529 04/06/20 03:18:08 1:14 0 4530 04/06/20 03:19:21 2:10 192 4531 04/06/20 03:19:22 2:10 0 4532 04/06/20 03:21:32 28:22 0 4533 04/06/20 03:49:54 12:26 192 4534 04/06/20 03:49:55 12:27 0 4535 04/06/20 03:50:59 56:49 13136 4536 04/06/20 04:02:22 8:42 0 4537 04/06/20 04:11:03 2:04 192 4538 04/06/20 04:11:04 2:04 0 4539 04/06/20 04:13:08 6:05 0 4540 04/06/20 04:19:12 2:04 192 4541 04/06/20 04:19:13 2:04 0 4542 04/06/20 04:21:17 0:59 0 4543 04/06/20 04:22:15 2:05 192 4544 04/06/20 04:22:16 2:05 0 4545 04/06/20 04:24:21 0:32 0 4546 04/06/20 04:24:52 2:04 192 Bytoa Apn INEI INSt MARE NOD= Dn Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Oruftgonpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4872 ims 3587080982063726 310410214827503 APPLE DRONES Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no Oruftgonpho 3587080982063726 310410214827503 APPLE DRONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no Onxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 186 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002830 N:FroliAL not for general distribution. EFTA_00116906 EFTA01251430 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in traiall. ol AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Data Conn. Time (OTC) Originating ET Number Bytes DP 4547 04/06/20 04:24:53 2:04 0 4548 04/06/20 04:26:57 10:37 0 4549 04/06/20 04:37:33 9:34 192 4550 04/06/20 04:37:35 9:33 0 4551 04/06/20 04:47:08 2:44 192 4552 04/06/20 04:47:09 2:43 7048 4553 04/06/20 04:47:09 2:45 0 4554 04/06/20 04:47:10 2:44 6456 4555 04/06/20 04:49:28 60:00 16637 4556 04/06/20 04:49:53 0:49 0 4557 04/06/20 04:50:42 240:02 192 4558 04/06/20 04:50:43 60:00 0 4559 04/06/20 05:49:28 60:00 8388 4560 04/06/20 05:50:43 60:00 0 4561 04/06/20 06:49:28 60:00 8496 4562 04/06/20 06:50:43 60:00 0 4563 04/06/20 07:49:28 60:00 15048 4564 04/06/20 07:50:43 60:00 0 4565 04/06/20 08:49:28 60:00 6940 4566 04/06/20 08:50:43 0:02 0 4567 04/06/20 08:50:45 1:58 192 4568 04/06/20 08:50:46 1:58 0 4569 04/06/20 08:52:44 1:23 0 4570 04/06/20 08:54:06 21:13 192 Bytom Aim INC' INBI MARL MOLL Dn 0 nactsponpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nactsponpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 0 nactsponpho 3587080982063726 310410214827503 APPLE IPHONEB no 6456 imp 3587080982063726 310410214827503 APPLE !PHONES 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 6784 imp 3587080982063726 310410214827503 APPLE !PHONES 9036 imp -1 310410214827503 0 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 0 nactsponpho 3587080982063726 310410214827503 APPLE IPHONEB no 2928 imp -1 310410214827503 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 3036 imp -1 310410214827503 0 nactsponpho 3587080982063726 310410214827503 APPLE !PHONES no 4872 imp -1 310410214827503 0 wasp:mph° 3587080982063726 310410214827503 APPLE !PHONES no 3680 imp -1 310410214827503 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no 0 natTonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 187 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002831 PsiTniliAL not for general distribution. EF-EAJVII6907 EFTA01251431 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn ItaTI INBI teal 4571 04/06/20 08:54:07 21:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4572 04/06/20 09:15:20 0:39 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4573 04/06/20 09:15:58 27:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4574 04/06/20 09:15:59 27:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4575 04/06/20 09:43:09 1:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4576 04/06/20 09:44:48 2:18 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4577 04/06/20 09:44:50 2:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4578 04/06/20 09:47:06 6:44 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4579 04/06/20 09:47:07 6:44 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4580 04/06/20 09:49:28 60:00 13368 4676 imp -1 310410214827503 4581 04/06/20 09:53:51 44:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4582 04/06/20 09:53:52 44:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4583 04/06/20 10:37:52 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4584 04/06/20 10:38:33 29:40 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4585 04/06/20 10:38:34 29:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4586 04/06/20 10:49:28 60:00 13584 4516 imp -1 310410214827503 4587 04/06/20 11:08:14 0:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4588 04/06/20 11:08:48 14:53 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4589 04/06/20 11:08:49 14:53 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4590 04/06/20 11:23:42 1:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4591 04/06/20 11:25:18 27:35 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL 1PHONE8 1PHONE8 !PHONES !PHONES 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 !PRONGS !PHONES !PRONGS !PRONGS 1PRONE8 1PRONE8 1PRONE8 1PRONE8 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the /// d►►►ata transaction. SDNY_GM_ 00002832 The information contained her is NTroliAL not for general distribution. Page 188 EF-EA_00116908 EFTA01251432 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and OTC. provided in • AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes UP Bytom Apn Dn IKI IM3I MAT 4592 04/06/20 11:25:19 27:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4593 04/06/20 11:49:28 60:00 8620 3052 ims -1 310410214827503 4594 04/06/20 11:52:53 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4595 04/06/20 11:52:54 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4596 04/06/20 11:54:58 0:36 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4597 04/06/20 11:55:34 20:57 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4598 04/06/20 11:55:35 20:57 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4599 04/06/20 12:16:32 0:48 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4600 04/06/20 12:17:19 20:57 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4601 04/06/20 12:17:20 20:57 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4602 04/06/20 12:38:17 17:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4603 04/06/20 12:49:28 60:00 8372 2928 ims -1 310410214827503 4604 04/06/20 12:55:29 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4605 04/06/20 12:55:31 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4606 04/06/20 12:57:34 4:36 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4607 04/06/20 13:02:09 2:05 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4608 04/06/20 13:02:10 2:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4609 04/06/20 13:04:15 6:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4610 04/06/20 13:10:49 26:43 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4611 04/06/20 13:37:31 8:58 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4612 04/06/20 13:37:32 8:58 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL ITHOME8 ITHONZ8 ITHOME8 DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002833 NTIAL not for general distribution. Page 189 EFTA_001 16909 EFTA01251433 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. c•"""ase,0. AT&T Run Date: Run Time: Data Osage For: Itea conn. Date 06/17/2020 INIIIIIII Conn. originating LT Time Number (LTC) Bytes Up Byte. Apn On IKE I INSI MARL NICOLL 4613 04/06/20 13:46:30 13:07 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4614 04/06/20 13:46:31 13:07 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4615 04/06/20 13:49:28 60:00 10068 3176 imo -1 310410214827503 4616 04/06/20 13:59:38 18:41 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1990=8 4617 04/06/20 14:18:18 42:38 288 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4618 04/06/20 14:18:19 42:38 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4619 04/06/20 14:49:28 60:00 17440 6372 imo -1 310410214827503 4620 04/06/20 15:00:57 6:02 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4621 04/06/20 15:06:58 5:33 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4622 04/06/20 15:07:00 5:32 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4623 04/06/20 15:12:32 0:51 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4624 04/06/20 15:13:22 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4625 04/06/20 15:13:23 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4626 04/06/20 15:15:26 6:09 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4627 04/06/20 15:21:35 8:13 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4628 04/06/20 15:21:36 8:14 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4629 04/06/20 15:29:49 3:33 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4630 04/06/20 15:33:21 2:04 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4631 04/06/20 15:33:22 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4632 04/06/20 15:35:26 7:07 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 4633 04/06/20 15:42:32 2:10 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPH0NZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage en the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does net retain records that can definitively show whether a transaction was customer initiated er AT&T's network initiated the data transaction. SDNY_GM_ 00002834 NTstAlt not for general distribution. Page 190 EFTA_00116910 EFTA01251434 MOBILITY The information contained hereCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41.1, 1....,Ise .11° 00 AT&T Run Data: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Originating ET Bytes Bytom Apn MEI IMBI MA= MODEL Data Time Number Op Dn (OTC) 4634 04/06/20 15:42:33 2:10 0 Onxtgonpho no 3587080982063726 310410214827503 4635 04/06/20 15:44:43 1:56 0 Oruftgonpho no 3587080982063726 310410214827503 4636 04/06/20 15:46:38 33:20 192 Oruftgonpho no 3587080982063726 310410214827503 4637 04/06/20 15:46:39 33:20 0 Oruftgonpho no 3587080982063726 310410214827503 4638 04/06/20 15:49:28 60:00 6924 2804 imp -1 310410214827503 4639 04/06/20 16:19:59 16:41 192 Oruftgonpho no 3587080982063726 310410214827503 4640 04/06/20 16:20:00 16:41 0 Onxtgonpho no 3587080982063726 310410214827503 4641 04/06/20 16:36:41 12:04 192 Onxtgonpho no 3587080982063726 310410214827503 4642 04/06/20 16:36:42 12:04 0 Onxtgonpho no 3587080982063726 310410214827503 4643 04/06/20 16:48:46 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 4644 04/06/20 16:49:28 60:00 7264 2928 imp -1 310410214827503 4645 04/06/20 17:48:46 50:14 0 Oruftgonpho no 3587080982063726 310410214827503 4646 04/06/20 17:49:28 60:00 11796 4268 imp -1 310410214827503 4647 04/06/20 18:38:59 2:26 192 Onxtgonpho no 3587080982063726 310410214827503 4648 04/06/20 18:39:00 2:26 0 Onxtgonpho no 3587080982063726 310410214827503 4649 04/06/20 18:41:26 2:48 192 Onxtgonpho no 3587080982063726 310410214827503 4650 04/06/20 18:41:27 2:48 0 Onxtgonpho no 3587080982063726 310410214827503 4651 04/06/20 18:44:14 2:21 192 Onxtgonpho no 3587080982063726 310410214827503 4652 04/06/20 18:44:16 2:20 0 Onxtgonpho no 3587080982063726 310410214827503 4653 04/06/20 18:46:35 33:05 192 Onxtgonpho no 3587080982063726 310410214827503 4654 04/06/20 18:46:36 33:05 0 Onxtgonpho no 3587080982063726 310410214827503 4655 04/06/20 18:49:28 60:00 8820 3268 imp -1 310410214827503 APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES APPLE !PHONES APPLE !PRONGS APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do net necessarily indicate a customer initiated a transaction. Page 191 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002835 NTniliAL not for general distribution. EFTA_00116911 EFTA01251435 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am CO 06/15/2020 il:59:59pm Time Zone. AT&T's records ere stored and provided in 411., .....„af ‘"Ill. e# AT&T Run Data: Run Tina: Data Osage For: 06/17/2020 Item Cotta. Conn. Data Time (OTC) Originating ET Bytes Bytom Apn INLI IMSI WOOL MODEL Number Up On 4656 04/06/20 19:19:41 55:50 0 4657 04/06/20 19:49:28 60:00 1212. 4658 04/06/20 20:15:30 8:54 192 4659 04/06/20 20:15:31 8:54 0 4660 04/06/20 20:24:24 6:21 192 4661 04/06/20 20:24:25 6:21 0 4662 04/06/20 20:30:46 42:51 0 4663 04/06/20 20:49:28 25:15 23832 4664 04/06/20 21:07:51 0:28 1749 4665 04/06/20 21:08:48 5:55 1425959 4666 04/06/20 21:13:37 23:36 192 4667 04/06/20 21:13:38 23:36 0 4668 04/06/20 21:14:41 22:32 17908 4669 04/06/20 21:14:42 22:32 14142 4670 04/06/20 21:15:01 12:05 1705278 4671 04/06/20 21:15:02 12:05 2630230 4672 04/06/20 21:32:47 39:04 20650 4673 04/06/20 21:37:14 3:54 0 4674 04/06/20 21:41:07 2:38 192 4675 04/06/20 21:41:08 2:38 0 4676 04/06/20 21:43:46 8:35 0 4677 04/06/20 21:52:20 9:49 192 4678 04/06/20 21:52:21 9:49 0 4679 04/06/20 22:02:10 9:40 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 4784 ims -1 310410214827503 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PHONE8 no Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no Ormtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 16740 ims -1 310410214827503 10097 ims -1 310410214827503 510796 ims -1 310410214827503 Ormtgenpho 3587080982063726 310410214827503 APPLE !PHONES no Ormtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 14555 ims 3587080982063726 310410214827503 APPLE !PHONES 17664 ims 3587080982063726 310410214827503 APPLE !PHONES 2630230 ims 3587080982063726 310410214827503 APPLE DRONES 1705278 ins 3587080982063726 310410214827503 APPLE DRONES 12963 ins -1 310410214827503 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES no 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no Ormtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no Ormtgenpho 3587080982063726 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 192 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002836 NaTtAdti not for general distribution. EFTA 00116912 EFTA01251436 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41111, AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Op Byte. Apn Dn INEI IMBI MARL MODEL 4680 04/06/20 22:02:11 9:40 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4681 04/06/20 22:11:51 1:08 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4682 04/06/20 22:11:55 60:00 49293 32806 imo -1 310410214827503 4683 04/06/20 22:12:58 2:04 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4684 04/06/20 22:13:00 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4685 04/06/20 22:15:03 6:57 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4686 04/06/20 22:21:59 2:07 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4687 04/06/20 22:22:00 2:07 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4688 04/06/20 22:24:07 0:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4689 04/06/20 22:26:25 5:05 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4690 04/06/20 22:26:27 5:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4691 04/06/20 22:31:30 6:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4692 04/06/20 22:31:31 6:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4693 04/06/20 22:37:34 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4694 04/06/20 22:56:05 0:01 0 0 imo -1 310410214827503 4695 04/06/20 22:56:45 0:27 1950 16876 imo -1 310410214827503 4696 04/06/20 22:57:30 0:38 2441 2326 imo -1 310410214827503 4697 04/06/20 23:11:55 60:00 34864 21112 imo -1 310410214827503 4698 04/06/20 23:18:04 0:31 12104 22462 imo -1 310410214827503 4699 04/06/20 23:28:04 0:27 1565 9674 imo -1 310410214827503 4700 04/06/20 23:37:34 4:26 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 4701 04/06/20 23:41:59 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4702 04/06/20 23:42:00 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 4703 04/06/20 23:44:03 6:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002837 not for general distribution. Page 193 EFTA_00116913 EFTA01251437 MOBILITY The information contained heraleeNelt (Inc) 4704 04/06/20 23:50:02 3:37 288 Onxtgenpho no 3587080982063726 310410214827503 4705 04/06/20 23:50:04 3:36 0 Onxtgenpho no 3587080982063726 310410214827503 4706 04/06/20 23:53:40 12:00 192 Onxtgenpho no 3587080982063726 310410214827503 4707 04/06/20 23:53:40 12:01 0 Onxtgenpho no 3587080982063726 310410214827503 4708 04/07/20 00:05:41 4:12 0 Onxtgenpho no 3587080982063726 310410214827503 4709 04/07/20 00:09:52 2:04 192 Onxtgenpho no 3587080982063726 310410214827503 4710 04/07/20 00:09:53 2:04 0 Onxtgenpho no 3587080982063726 310410214827503 4711 04/07/20 00:11:55 60:00 27688 15432 ims -1 310410214827503 4712 04/07/20 00:11:57 8:45 0 OruMgenpho no 3587080982063726 310410214827503 4713 04/07/20 00:15:21 0:22 0 0 ims -1 310410214827503 4714 04/07/20 00:20:41 3:16 192 OruMgonpAo no 3587080982063726 310410214827503 4715 04/07/20 00:20:42 3:16 0 Onxtgenpho no 3587080982063726 310410214827503 4716 04/07/20 00:23:57 7:20 192 Onxtgenpho no 3587080982063726 310410214827503 4717 04/07/20 00:23:58 7:20 0 Onxtgenpho no 3587080982063726 310410214827503 4718 04/07/20 00:31:01 19:06 3827046 2845143 ims -1 310410214827503 4719 04/07/20 00:31:18 9:51 0 OruMgenpho no 3587080982063726 310410214827503 4720 04/07/20 00:41:08 45:54 192 OruMgenpho no 3587080982063726 310410214827503 4721 04/07/20 00:41:09 45:54 0 OruMgenpho no 3587080982063726 310410214827503 4722 04/07/20 01:11:55 60:00 7204 4680 ims -1 310410214827503 4723 04/07/20 01:27:03 16:02 0 OruMgenpho no 3587080982063726 310410214827503 4724 04/07/20 01:43:04 2:15 192 OruMgenpho no 3587080982063726 310410214827503 4725 04/07/20 01:43:05 2:16 0 OruMgenpho no 3587080982063726 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in .....,,,• ••-s"" AT&T Run Date: Run Time: Data Osage For: 06/17/2020 Ito. Conn. Conn. Originating ET Bytes Bytes Apn IMF' IMS1 HARR MODEL Date Time Number Up Dn APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE IPRO1428 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 194 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002838 NTIAL not for general distribution. EFTA_00116914 EFTA01251438 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 41111. AT&T Run pato: Run Time: Data usage Tor: Item cone. Date 06/17/2020 1S:55:50 Conn. originating ET Time Number (UTC) Bytes Up sytoa Apn on ImEx INBI NAfl 4726 04/07/20 01:45:20 7:07 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 4727 04/07/20 01:52:26 2:09 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 4728 04/07/20 01:52:27 2:09 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 4729 04/07/20 01:54:36 0:33 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 4730 04/07/20 01:55:08 2:03 192 0 natgonpho no 3587080982063726 310410214827503 APPLE 4731 04/07/20 01:55:09 2:03 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 4732 04/07/20 01:57:12 3:46 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 4733 04/07/20 02:00:57 8:25 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 4734 04/07/20 02:00:58 8:25 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 4735 04/07/20 02:09:23 1:48 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 4736 04/07/20 02:11:10 9:15 192 0 natgonpho no 3587080982063726 310410214827503 APPLE 4737 04/07/20 02:11:11 9:15 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4738 04/07/20 02:11:55 60:00 8496 2928 ins -1 310410214827503 4739 04/07/20 02:20:26 41:54 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 4740 04/07/20 03:02:19 2:06 192 0 natgonpho no 3587080982063726 310410214827503 APPLE 4741 04/07/20 03:02:20 2:06 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 4742 04/07/20 03:04:26 11:16 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 4743 04/07/20 03:11:55 58:22 16460 9500 Ams -1 310410214827503 4744 04/07/20 03:15:42 12:14 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 4745 04/07/20 03:15:42 12:15 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 4746 04/07/20 03:27:57 10:00 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE NICOLL IPHONZEI IPHONZEI !PHONES !PROMS IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI IPRONZEI AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 195 AT&T does not retain records that can' definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002839 NaTtAdti not for general distribution. EFTA_00116915 EFTA01251439 MOBILITY The information contained her is 2996479 06/17/2020 ATET has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Elmo: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (DSc) Bytes Op Bytes Apn On INEI IMSI MAKE 4747 04/07/20 03:27:58 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4748 04/07/20 03:39:43 35:30 15340 8152 imo -1 310410214827503 4749 04/07/20 04:10:16 25:55 7232 6866 imp 3587080982063726 310410214827503 APPLE 4750 04/07/20 04:10:17 25:55 6798 7076 ins 3587080982063726 310410214827503 APPLE 4751 04/07/20 04:25:53 60:00 8737 6350 ins -1 310410214827503 4752 04/07/20 04:27:58 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4753 04/07/20 04:36:06 60:00 24696 14261 ins -1 310410214827503 4754 04/07/20 05:25:53 4:10 0 0 isms -1 310410214827503 4755 04/07/20 05:27:58 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4756 04/07/20 05:30:03 60:00 15001 8802 mos -1 310410214827503 4757 04/07/20 05:36:06 60:00 0 0 mos -1 310410214827503 4758 04/07/20 06:27:58 17:38 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4759 04/07/20 06:30:03 60:00 8388 3036 imp -1 310410214827503 4760 04/07/20 06:36:06 60:00 0 0 imp -1 310410214827503 4761 04/07/20 06:45:35 240:02 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4762 04/07/20 06:45:36 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4763 04/07/20 07:30:03 60:00 8388 2928 imp -1 310410214827503 4764 04/07/20 07:36:06 60:00 0 0 imp -1 310410214827503 4765 04/07/20 07:45:36 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4766 04/07/20 08:30:03 60:00 6924 2912 imp -1 310410214827503 4767 04/07/20 08:36:06 53:11 0 0 imp -1 310410214827503 4768 04/07/20 08:45:36 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 4769 04/07/20 09:30:03 60:00 8604 3052 imp -1 310410214827503 4770 04/07/20 09:45:36 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4771 04/07/20 10:30:03 60:00 15312 5752 imp -1 310410214827503 4772 04/07/20 10:45:36 0:02 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 4773 04/07/20 10:45:39 123:35 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE MOLL IPHME8 IPHME8 IPHME8 !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are power e4 on. These communications will show as data usage on the customer records but do of necessarily indicate a customer initiated a transaction. Page 196 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002840 PsiTn iliAL not for general distribution. EFTA_00116916 EFTA01251440 MOBILITY The information contained hereCoNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 411M, AT&T Run Dato: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating ',umber ET Bytes Up Byte. Apn Dn Tier IMBI MAItT 4774 04/07/20 10:45:40 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4775 04/07/20 11:30:03 32:17 4980 1696 ims -1 310410214827503 4776 04/07/20 11:45:40 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4777 04/07/20 12:01:57 60:00 0 0 ims -1 310410214827503 4778 04/07/20 12:02:20 60:00 17933 10006 ims -1 310410214827503 4779 04/07/20 12:45:40 3:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4780 04/07/20 12:49:15 6:50 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4781 04/07/20 12:56:04 15:29 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4782 04/07/20 12:56:05 15:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4783 04/07/20 13:01:57 37:07 0 0 ima -1 310410214827503 4784 04/07/20 13:02:20 36:11 8248 4160 ims -1 310410214827503 4785 04/07/20 13:11:34 4:46 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4786 04/07/20 13:16:19 21:35 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4787 04/07/20 13:16:20 21:36 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4788 04/07/20 13:37:55 56:30 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4789 04/07/20 13:39:05 55:37 18325 11487 ipso -1 310410214827503 4790 04/07/20 13:41:18 14:30 11530 6588 ipso 3587080982063726 310410214827503 APPLE 4791 04/07/20 13:55:48 5:22 3500 1324 ipso 3587080982063726 310410214827503 APPLE 4792 04/07/20 13:55:48 5:22 2688 1324 ims 3587080982063726 310410214827503 APPLE 4793 04/07/20 14:01:14 32:20 10000 7462 ims 3587080982063726 310410214827503 APPLE 4794 04/07/20 14:33:34 10:31 3640 1448 ims 3587080982063726 310410214827503 APPLE 4795 04/07/20 14:34:25 50:47 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4796 04/07/20 14:34:26 50:47 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 4797 04/07/20 14:34:41 50:31 15084 17479 Imo 3587080982063726 310410214827503 APPLE 4798 04/07/20 14:34:42 50:31 17108 14820 Imo 3587080982063726 310410214827503 APPLE 4799 04/07/20 14:35:10 49:00 6345718 9090635 Imo 3587080982063726 310410214827503 APPLE 4800 04/07/20 14:35:11 49:00 9090077 6345718 ins 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHONZ8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00002841 NeTnAL not for general distribution. Page 197 EFTA_00116917 EFTA01251441 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ...„.• ••-"I' `'s AT&T Run Oato: Run Time: Data Osage For: 06/17/2020 10:55:51 Item Conn. Conn. Date Time Originating Humber UP ET Sytes Byte. Dn Apn INZI INSI MARL NICOLL (OTC) 4801 04/07/20 15:25:14 6:35 0 Onxtgonpho no 3587080982063726 310410214827503 4802 04/07/20 15:25:16 0:38 8144 6212 imp 3587080982063726 310410214827503 4803 04/07/20 15:25:54 60:00 14000 4932 imp 3587080982063726 310410214827503 4804 04/07/20 15:31:48 8:15 192 0 nxtgonpho no 3587080982063726 310410214827503 4805 04/07/20 15:31:49 8:16 0 0 nxtgonpho no 3587080982063726 310410214827503 4806 04/07/20 15:40:04 7:32 0 0 nxtgonpho no 3587080982063726 310410214827503 4807 04/07/20 15:47:36 3:56 192 0 nxtgonpho no 3587080982063726 310410214827503 4808 04/07/20 15:47:37 3:56 0 0 nxtgonpho no 3587080982063726 310410214827503 4809 04/07/20 15:51:33 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 4810 04/07/20 16:25:54 46:30 16116 10480 imp 3587080982063726 310410214827503 4811 04/07/20 16:51:33 2:27 0 0 nxtgonpho no 3587080982063726 310410214827503 4812 04/07/20 16:54:00 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 4813 04/07/20 16:54:01 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 4814 04/07/20 16:56:04 17:38 0 0 nxtgonpho no 3587080982063726 310410214827503 4815 04/07/20 17:02:56 0:30 2502 14856 imp 3587080982063726 310410214827503 4816 04/07/20 17:12:24 1:18 328 372 imp 3587080982063726 310410214827503 4817 04/07/20 17:13:41 8:30 192 0 nxtgonpho no 3587080982063726 310410214827503 4818 04/07/20 17:13:42 8:30 0 0 nxtgonpho no 3587080982063726 310410214827503 4819 04/07/20 17:13:43 10:43 8209 6216 imp -1 310410214827503 4820 04/07/20 17:18:59 3:12 7136 6746 imo 3587080982063726 310410214827503 4821 04/07/20 17:19:01 3:11 6746 6872 imp 3587080982063726 310410214827503 4822 04/07/20 17:22:12 21:13 192 0 nxtgonpho no 3587080982063726 310410214827503 4823 04/07/20 17:22:13 21:12 7214 6900 imp 3587080982063726 310410214827503 4824 04/07/20 17:22:13 21:14 0 0 nxtgonpho no 3587080982063726 310410214827503 4825 04/07/20 17:22:14 21:13 6792 6950 imp 3587080982063726 310410214827503 AT&T Proprietary The AT&T network constaptly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained hereCtoNyFti APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES Page 198 SDNY_GM_ 00002842 PsiTifiNE not for general distribution. EFTA_00116918 EFTA01251442 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in arc. tr4 • a" 4g° AT&T Run Date: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating Number Up ET Bytes Bytom Dn Apn IND I INSI HAKE NICOLL 4826 04/07/20 17:43:26 45:37 0 0 nxtgenpho no 3587080982063726 310410214827503 4827 04/07/20 17:43:34 37:01 13367 7676 imo 3587080982063726 310410214827503 4828 04/07/20 18:20:35 0:23 30740 1324 imo 3587080982063726 310410214827503 4829 04/07/20 18:20:35 0:23 2704 1324 imo 3587080982063726 310410214827503 4830 04/07/20 18:20:58 60:00 10380 4080 imo 3587080982063726 310410214827503 4831 04/07/20 18:29:02 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 4832 04/07/20 18:29:03 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 4833 04/07/20 18:31:06 0:59 0 0 nxtgenpho no 3587080982063726 310410214827503 4834 04/07/20 18:32:04 2:05 192 0 nxtgenpho no 3587080982063726 310410214827503 4835 04/07/20 18:32:05 2:05 0 0 nxtgenpho no 3587080982063726 310410214827503 4836 04/07/20 18:34:10 52:08 0 0 nxtgenpho no 3587080982063726 310410214827503 4837 04/07/20 19:20:58 45:52 7064 2880 imo 3587080982063726 310410214827503 4838 04/07/20 19:26:17 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 4839 04/07/20 19:26:18 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 4840 04/07/20 19:28:21 14:08 0 0 nxtgenpho no 3587080982063726 310410214827503 4841 04/07/20 19:42:28 2:04 192 0 nxtgenpho no 3587080982063726 310410214827503 4842 04/07/20 19:42:29 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 4843 04/07/20 19:44:33 21:02 0 0 nxtgenpho no 3587080982063726 310410214827503 4844 04/07/20 20:05:34 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 4845 04/07/20 20:05:35 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 4846 04/07/20 20:06:49 0:48 7264 6992 imo 3587080982063726 310410214827503 4847 04/07/20 20:06:50 0:48 6740 7000 imo 3587080982063726 310410214827503 4848 04/07/20 20:07:06 55:54 14013 10990 imo -1 310410214827503 4849 04/07/20 20:07:38 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered An. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002843 PsiTifikE not for general distribution. Page 199 EFTAJVII6919 EFTA01251443 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in arc. c•"`ss a1. AT&T Run Data: Run Tina: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number op ET Bytes Byte. Apn Dn INSI HAKE NICOLL 4850 04/07/20 20:10:47 0:48 8152 6944 ims 3587080982063726 310410214827503 APPLE IPHONEB 4851 04/07/20 20:11:35 51:24 7296 2772 ims 3587080982063726 310410214827503 APPLE IPHONEB 4852 04/07/20 21:03:00 0:00 0 0 ims 3587080982063726 310410214827503 APPLE IPROME8 4853 04/07/20 21:03:08 60:00 22855 14615 ims -1 310410214827503 4854 04/07/20 21:07:38 44:18 0 0 nxtgenpho. no 3587080982063726 310410214827503 APPLE !PHONES 4855 04/07/20 21:51:56 4:22 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4856 04/07/20 21:51:57 4:22 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4857 04/07/20 21:56:19 4:13 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4858 04/07/20 22:00:31 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4859 04/07/20 22:00:32 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4860 04/07/20 22:02:35 9:28 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPROME8 4861 04/07/20 22:03:08 60:00 22776 15016 ims -1 310410214827503 4862 04/07/20 22:12:02 2:04 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4863 04/07/20 22:12:03 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4864 04/07/20 22:14:07 19:48 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4865 04/07/20 22:24:33 0:33 5274 33524 ims -1 310410214827503 4866 04/07/20 22:33:55 2:28 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 4867 04/07/20 22:33:56 2:28 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 4868 04/07/20 22:36:24 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 4869 04/07/20 22:39:24 60:00 18166 10174 ims -1 310410214827503 4870 04/07/20 23:03:08 60:00 0 0 ims -1 310410214827503 4871 04/07/20 23:36:24 8:55 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 4872 04/07/20 23:39:24 60:00 10068 3144 ims -1 310410214827503 4873 04/07/20 23:45:18 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002844 WInfikE not for general distribution. Page 200 EFTA 00116920 EFTA01251444 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 iiiiiIMMO Conn. Originating LT Time Number (UTC) • Bytes Up Bytoa Apn Dn IX= IMS1 MUM NICOLL 4874 04/07/20 23:45:19 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4875 04/07/20 23:47:22 3:54 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4876 04/07/20 23:51:15 2:03 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4877 04/07/20 23:51:16 2:04 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4878 04/07/20 23:53:20 9:20 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4879 04/08/20 00:02:39 9:08 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4880 04/08/20 00:02:40 9:08 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4881 04/08/20 00:03:08 60:00 0 0 was -1 310410214827503 4882 04/08/20 00:11:48 60:00 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4883 04/08/20 00:39:24 12:41 0 0 was 3587080982063726 310410214827503 APPLE !PHONES 4884 04/08/20 00:52:05 0:52 2820 1324 was 3587080982063726 310410214827503 APPLE 'PHONES 4885 04/08/20 00:52:05 0:52 2688 1324 was 3587080982063726 310410214827503 APPLE 'PHONES 4886 04/08/20 00:53:01 1:21 6672 5904 was 3587080982063726 310410214827503 APPLE 'PHONES 4887 04/08/20 00:54:26 1:27 6672 5963 was 3587080982063726 310410214827503 APPLE 'PHONES 4888 04/08/20 00:55:53 36:35 20352 8940 was 3587080982063726 310410214827503 APPLE 'PHONES 4889 04/08/20 01:03:08 60:00 0 0 ins -1 310410214827503 4890 04/08/20 01:11:48 18:16 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4891 04/08/20 01:30:03 2:26 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4892 04/08/20 01:30:04 2:26 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4893 04/08/20 01:32:30 10:52 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 4894 04/08/20 01:32:34 0:17 7270 3849 ins 3587080982063726 310410214827503 APPLE !PHONES 4895 04/08/20 01:32:51 1:12 8240 5296 ins 3587080982063726 310410214827503 APPLE !PHONES 4896 04/08/20 01:34:03 8:08 2860 1432 ins 3587080982063726 310410214827503 APPLE 'PHONES 4897 04/08/20 01:42:11 0:35 5072 1680 ins 3587080982063726 310410214827503 APPLE 'PHONES 4898 04/08/20 01:42:46 0:17 3484 2324 ins 3587080982063726 310410214827503 APPLE 'PHONES 4899 04/08/20 01:43:03 60:00 12028 4220 ins 3587080982063726 310410214827503 APPLE 'PHONES 4900 04/08/20 01:43:21 6:30 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 201 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002845 Ns tit not for general distribution. EFTA 00116921 EFTA01251445 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ....,„ ••"-—sse0•AT&T Run Date: Run T1MA: Data Osage for: Item Conn. Date 06/17/2020 10:63:51 Conn. Originating ET Time Hurter (OTC) Bytes UP Bytes Apn Dn INZI INSI MAKE NICOLL 4901 04/08/20 01:43:22 6:30 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4902 04/08/20 01:49:52 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4903 04/08/20 02:03:08 35:59 0 0 ins -1 310410214827503 4904 04/08/20 02:43:03 60:00 7064 2756 in 3587080982063726 310410214827503 APPLE !PHONES 4905 04/08/20 02:49:52 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4906 04/08/20 03:43:03 60:00 8480 3020 ins 3587080982063726 310410214827503 APPLE !PHONES 4907 04/08/20 03:49:52 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4908 04/08/20 04:43:03 60:00 8604 3128 ins 3587080982063726 310410214827503 APPLE !PHONES 4909 04/08/20 04:49:52 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4910 04/08/20 05:43:03 60:00 9928 3144 ins 3587080982063726 310410214827503 APPLE !PHONES 4911 04/08/20 05:49:52 0:01 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 4912 04/08/20 05:49:56 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 4913 04/08/20 06:43:03 60:00 10256 4364 ins 3587080982063726 310410214827503 APPLE !PHONES 4914 04/08/20 06:49:56 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4915 04/08/20 07:43:03 60:00 10272 4080 ims 3587080982063726 310410214827503 APPLE !PHONES 4916 04/08/20 07:49:56 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4917 04/08/20 08:43:03 60:00 6848 2648 ins 3587080982063726 310410214827503 APPLE !PHONES 4918 04/08/20 08:49:56 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 4919 04/08/20 09:43:03 60:00 6848 2756 ins 3587080982063726 310410214827503 APPLE IPRONE8 4920 04/08/20 09:49:56 0:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 4921 04/08/20 09:49:58 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4922 04/08/20 10:43:03 60:00 8496 3128 ins 3587080982063726 310410214827503 APPLE !PHONES 4923 04/08/20 10:49:58 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 4924 04/08/20 11:43:03 60:00 16852 6076 ins 3587080982063726 310410214827503 APPLE !PHONES 4925 04/08/20 11:49:58 39:44 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will phew as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 202 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002846 NET IAL not for general distribution. EFTA 00116922 EFTA01251446 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 411111, tr‘"g° asS/ . AT&T Run pato: Run Time: Data usage For: Item conn. Date 06/17/2020 18:55:54 Conn. Originating ET Time Number (UTC) Bytes up Bytom Apn on rest IMBI ten won 4926 04/08/20 12:29:43 58:16 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4927 04/08/20 12:43:03 48:33 9912 3888 ims 3587080982063726 310410214827503 APPLE 110)(0=8 4928 04/08/20 13:20:59 36:55 13827 10907 ims -1 310410214827503 4929 04/08/20 13:31:36 44:51 20550 12782 ims -1 310410214827503 4930 04/08/20 13:57:54 39:18 15283 11088 imp -1 310410214827503 4931 04/08/20 14:16:27 19:57 10035 6461 imp -1 310410214827503 4932 04/08/20 14:37:12 2:49 11278 6408 xmo 3587080982063726 310410214827503 APPLE 110)(0=8 4933 04/08/20 14:38:10 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110)(0=8 4934 04/08/20 14:40:01 1:06 3536 1448 xmo 3587080982063726 310410214827503 APPLE IPMONE8 4935 04/08/20 14:40:01 1:06 3404 1448 xmo 3587080982063726 310410214827503 APPLE IPMONE8 4936 04/08/20 14:41:07 60:00 13676 4592 xmo 3587080982063726 310410214827503 APPLE IPMONE8 4937 04/08/20 15:38:10 0:15 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4938 04/08/20 15:41:07 39:31 3408 1432 xms 3587080982063726 310410214827503 APPLE IPMONE8 4939 04/08/20 15:56:05 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4940 04/08/20 15:56:06 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4941 04/08/20 15:58:16 16:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4942 04/08/20 16:14:49 8:15 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4943 04/08/20 16:14:50 8:15 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4944 04/08/20 16:22:45 60:00 18464 9488 xms -1 310410214827503 4945 04/08/20 16:23:05 15:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 110)(0=8 4946 04/08/20 16:38:58 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4947 04/08/20 16:38:59 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4948 04/08/20 16:41:09 1:44 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 4949 04/08/20 16:42:52 0:42 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 4950 04/08/20 16:42:53 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002847 PsiTnAL not for general distribution. Page 203 EFTA 00116923 EFTA01251447 NOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Tone. AT&T's records are stored and provided in ..„ •--s`" 1.0/ AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Data Time Originating ET Bytes Bytaa Apn INEI Number Up Dn INS' teat MODEL (UTC) 4951 04/08/20 16:43:35 1:06 0 0 rumgonpho no 3587080982063726 310410214827503 4952 04/08/20 16:44:41 2:03 192 Orumgonpho no 3587080982063726 310410214827503 4953 04/08/20 16:44:42 2:03 0 Orumgonpho no 3587080982063726 310410214827503 4954 04/08/20 16:46:45 23:13 0 OnAtgonpho no 3587080982063726 310410214827503 4955 04/08/20 17:09:57 9:19 192 OnAtgonpho no 3587080982063726 310410214827503 4956 04/08/20 17:09:58 9:19 0 Orumgonpho no 3587080982063726 310410214827503 4957 04/08/20 17:19:17 11:18 0 Orumgonpho no 3587080982063726 310410214827503 4958 04/08/20 17:22:45 1:12 0 0 ims 3587080982063726 310410214827503 4959 04/08/20 17:23:56 2:15 4000 1464 ims 3587080982063726 310410214827503 4960 04/08/20 17:23:57 2:14 3936 1464 ims 3587080982063726 310410214827503 4961 04/08/20 17:26:11 59:38 8852 3144 ims 3587080982063726 310410214827503 4962 04/08/20 17:30:34 2:36 192 OnAtgonpho no 3587080982063726 310410214827503 4963 04/08/20 17:30:35 2:36 0 OnAtgonpho no 3587080982063726 310410214827503 4964 04/08/20 17:33:11 22:30 0 OnAtgonpho no 3587080982063726 310410214827503 4965 04/08/20 17:55:41 2:03 192 Orumgonpho no 3587080982063726 310410214827503 4966 04/08/20 17:55:42 2:03 0 Orumgonpho no 3587080982063726 310410214827503 4967 04/08/20 17:57:45 2:17 0 Orumgonpho no 3587080982063726 310410214827503 4968 04/08/20 18:00:01 1:14 192 Orumgonpho no 3587080982063726 310410214827503 4969 04/08/20 18:00:02 1:14 0 Orumgonpho no 3587080982063726 310410214827503 4970 04/08/20 18:01:16 6:09 0 OnAtgonpho no 3587080982063726 310410214827503 4971 04/08/20 18:07:24 8:17 192 OnAtgonpho no 3587080982063726 310410214827503 4972 04/08/20 18:07:25 8:17 0 OnAtgonpho no 3587080982063726 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 204 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002848 NeTniliAL not for general distribution. EFTA 00116924 EFTA01251448 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 411111, Ze.aIe01. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes, Apn Dn INEZ INSI NAfl NODES 4973 04/08/20 18:15:42 5:36 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE INIONZ8 4974 04/08/20 18:21:17 2:10 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE INIONZ8 4975 04/08/20 18:21:18 2:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IL0MONZ8 4976 04/08/20 18:21:19 2:08 7136 6814 imp 3587080982063726 310410214827503 APPLE IL0MONZ8 4977 04/08/20 18:21:20 2:09 6746 6872 imp 3587080982063726 310410214827503 APPLE INIONZ8 4978 04/08/20 18:23:29 14:17 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONZ8 4979 04/08/20 18:23:30 14:16 6676 6000 imp 3587080982063726 310410214827503 APPLE II0MONZ8 4980 04/08/20 18:37:45 2:11 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4981 04/08/20 18:37:46 2:10 6246 6674 imp 3587080982063726 310410214827503 APPLE IPM0NE8 4982 04/08/20 18:37:46 2:11 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4983 04/08/20 18:37:48 2:09 6674 5982 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4984 04/08/20 18:39:57 7:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4985 04/08/20 18:39:59 7:04 8478 8108 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4986 04/08/20 18:47:03 1:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4987 04/08/20 18:48:06 47:06 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4988 04/08/20 18:48:07 47:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4989 04/08/20 18:48:12 47:00 7500 10382 imp 3587080982063726 310410214827503 APPLE IPM0NE8 4990 04/08/20 18:48:13 47:00 10382 7344 imp 3587080982063726 310410214827503 APPLE IPM0NE8 4991 04/08/20 19:35:13 4:52 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4992 04/08/20 19:35:16 4:49 9386 6194 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4993 04/08/20 19:40:04 2:03 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4994 04/08/20 19:40:05 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4995 04/08/20 19:40:20 1:47 6228 6672 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4996 04/08/20 19:40:21 1:47 6672 5964 ims 3587080982063726 310410214827503 APPLE IPM0NE8 4997 04/08/20 19:42:08 18:18 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPM0NE8 4998 04/08/20 19:42:10 14:47 6666 5982 imp 3587080982063726 310410214827503 APPLE IPM0NE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indipate a customer initiated a transaction. Page 205 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained horeeteNelt SDNY_GM_ 00002849 NTailiAL not for general distribution. EFTA 00116925 EFTA01251449 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Tone. AT&T's records are stored and provided in 41011, tt"4.4a 1.sio/ AT&T Run pato: Run Time: Data Osage For: 06/17/2020 MN= Item Conn. Date Conn. Time (LTC) Originating Number ET Bytes • Up 4999 04/08/20 19:57:05 60:00 36371 5000 04/08/20 19:59:48 18:29 1212540 5001 04/08/20 20:00:25 14:37 192 5002 04/08/20 20:00:26 14:37 0 5003 04/08/20 20:15:03 1:07 0 5004 04/08/20 20:16:09 8:07 192 5005 04/08/20 20:16:10 8:07 0 5006 04/08/20 20:24:17 60:00 0 5007 04/08/20 20:57:05 60:00 8356 5008 04/08/20 21:24:17 34:57 0 5009 04/08/20 21:57:05 60:00 9928 5010 04/08/20 21:59:14 9:19 192 5011 04/08/20 21:59:15 9:20 0 5012 04/08/20 22:08:35 31:30 0 5013 04/08/20 22:40:04 8:16 192 5014 04/08/20 22:40:06 8:15 0 5015 04/08/20 22:48:21 5:35 0 5016 04/08/20 22:53:55 7:12 192 5017 04/08/20 22:53:57 7:11 0 5018 04/08/20 22:57:05 60:00 12136 5019 04/08/20 23:01:08 1:34 0 5020 04/08/20 23:02:41 8:21 192 5021 04/08/20 23:02:42 8:21 0 Bytom Dn Apn 17916 ims 3937406 ims 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no Oruftgonpho no 0 nxtgonpho no 3004 ims 0 nxtgonpho no 3252 ins 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 4344 ims 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no INZI -1 -1 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 -1 3587080982063726 -1 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 -1 3587080982063726 3587080982063726 3587080982063726 I83I MARL MODEL 310410214827503 310410214827503 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 310410214827503 APPLE 110801428 310410214827503 310410214827503 APPLE 110801428 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 310410214827503 APPLE 110801428 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002850 MT V& not for general distribution. Page 206 EFTA 00116926 EFTA01251450 MOBILITY The information contained heraleeNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records are stored and provided in UTC. ....,,• ••-•°""‘ AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number op Cr Bytes Bytes Apn Dn ICI INS! Mimi 5022 04/08/20 23:11:03 59:55 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5023 04/08/20 23:57:05 60:00 8604 3020 imo -1 310410214827503 5024 04/09/20 00:10:58 32:47 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5025 04/09/20 00:10:58 32:48 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5026 04/09/20 00:43:46 49:30 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5027 04/09/20 00:57:05 60:00 13676 4768 imo -1 310410214827503 5028 04/09/20 01:33:15 3:23 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5029 04/09/20 01:33:16 3:23 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5030 04/09/20 01:36:40 1:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5031 04/09/20 01:37:48 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5032 04/09/20 01:37:49 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5033 04/09/20 01:39:02 0:49 6244 6686 imo 3587080982063726 310410214827503 APPLE 5034 04/09/20 01:39:03 0:49 6686 5980 imo 3587080982063726 310410214827503 APPLE 5035 04/09/20 01:39:52 2:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5036 04/09/20 01:39:54 0:15 6692 6000 imo 3587080982063726 310410214827503 APPLE 5037 04/09/20 01:40:09 0:33 3640 1340 imo 3587080982063726 310410214827503 APPLE 5038 04/09/20 01:40:42 0:39 2628 1340 imo 3587080982063726 310410214827503 APPLE 5039 04/09/20 01:41:21 60:00 10164 3896 imo 3587080982063726 310410214827503 APPLE 5040 04/09/20 01:42:45 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5041 04/09/20 01:42:46 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5042 04/09/20 01:44:50 3:24 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5043 04/09/20 01:48:14 19:41 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5044 04/09/20 01:48:15 19:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5045 04/09/20 01:57:05 54:47 0 0 imp -1 310410214827503 SCOTS IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES !PHONES !PHONES DRONES !PHONES !PHONES DRONES !PHONES !PHONES !PHONES DRONES DRONES DRONES 'PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002851 NeTiliAL not for general distribution. Page 207 EFTA 00116927 EFTA01251451 MOBILITY The information contained heraleoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 411111, '....al ‘ing° salt AT&T Run Data: Run Tina: Data Usage Tor: 06/17/2020 NM= Ilea Conn. Data Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INCI IMSI 5046 04/09/20 02:07:55 1:52 192 0 nxtgonpho no 3587080982063726 310410214827503 5047 04/09/20 02:07:56 1:52 0 Oruftgonpho no 3587080982063726 310410214827503 5048 04/09/20 02:09:48 24:10 192 Oruftgonpho no 3587080982063726 310410214827503 5049 04/09/20 02:09:49 24:10 0 Oruftgonpho no 3587080982063726 310410214827503 5050 04/09/20 02:33:59 58:16 0 Oruftgonpho no 3587080982063726 310410214827503 5051 04/09/20 02:41:21 60:00 216 0 ims 3587080982063726 310410214827503 5052 04/09/20 02:51:52 60:00 21281 10462 ims -1 310410214827503 5053 04/09/20 03:41:21 60:00 0 0 ims 3587080982063726 310410214827503 5054 04/09/20 03:51:52 60:00 8496 3036 ims -1 310410214827503 5055 04/09/20 04:41:21 60:00 0 0 ims 3587080982063726 310410214827503 5056 04/09/20 04:51:52 29:42 4980 1588 ims -1 310410214827503 5057 04/09/20 05:41:21 60:00 0 0 ims 3587080982063726 310410214827503 5058 04/09/20 06:41:21 1:14 0 0 ims 3587080982063726 310410214827503 5059 04/09/20 12:39:38 1:16 0 Oruftgonpho no 3587080982063726 310410214827503 5060 04/09/20 12:39:50 1:04 8226 8704 ims 3587080982063726 310410214827503 5061 04/09/20 12:40:54 4:31 192 Ommtgonpho no 3587080982063726 310410214827503 5062 04/09/20 12:40:55 4:31 0 Ommtgonpho no 3587080982063726 310410214827503 5063 04/09/20 12:42:27 2:58 6225 6646 ims 3587080982063726 310410214827503 5064 04/09/20 12:42:29 2:57 6646 5961 ims 3587080982063726 310410214827503 5065 04/09/20 12:45:26 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 5066 04/09/20 12:45:31 60:00 13308 10592 ims 3587080982063726 310410214827503 5067 04/09/20 13:45:26 33:02 0 Oruftgonpho no 3587080982063726 310410214827503 5068 04/09/20 13:45:31 32:57 2596 1324 ims 3587080982063726 310410214827503 5069 04/09/20 14:18:27 3:29 192 Oruftgonpho no 3587080982063726 310410214827503 5070 04/09/20 14:18:28 3:29 0 Oruftgonpho no 3587080982063726 310410214827503 5071 04/09/20 14:18:31 3:25 7232 6798 ims 3587080982063726 310410214827503 5072 04/09/20 14:18:32 3:25 6798 6968 ins 3587080982063726 310410214827503 NIUM MODEL APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE !PHONES APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 208 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002852 NTifikE not for general distribution. EFTA 00116928 EFTA01251452 MOBILITY The information contained heraCtoNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in tr‘ing° asiedfi AT&T Run Dato: Run Time: Data Osage Tor: 06/17/2020 1S:65:58 Item Conn. Conn. Date Time (OTC) Originating Byte. Bytoa Apn MEI IMSI MUM MOTS Number Up Dn 5073 04/09/20 14:21:57 2:17 0 0 nxtgonpho no 3587080982063726 310410214827503 5074 04/09/20 14:22:01 2:13 6664 5977 imp 3587080982063726 310410214827503 5075 04/09/20 14:24:13 2:05 192 Oruftgonpho no 3587080982063726 310410214827503 5076 04/09/20 14:24:14 2:05 0 Oruftgonpho no 3587080982063726 310410214827503 5077 04/09/20 14:24:16 2:02 7202 6744 imp 3587080982063726 310410214827503 5078 04/09/20 14:24:17 2:02 6744 6850 imp 3587080982063726 310410214827503 5079 04/09/20 14:26:19 5:03 0 Oruftgonpho no 3587080982063726 310410214827503 5080 04/09/20 14:26:23 4:S9 10870 9856 imp 3587080982063726 310410214827503 5081 04/09/20 14:31:22 9:11 192 Oruftgonpho no 3587080982063726 310410214827503 5082 04/09/20 14:31:23 9:11 0 Oruftgonpho no 3587080982063726 310410214827503 5083 04/09/20 14:31:25 9:08 13898 16793 imp 3587080982063726 310410214827503 5084 04/09/20 14:31:26 9:08 15888 13634 imp 3587080982063726 310410214827503 5085 04/09/20 14:31:39 7:S4 1168181 1273192 imp 3587080982063726 310410214827503 5086 04/09/20 14:31:40 7:S4 1273192 1168181 imp 3587080982063726 310410214827503 5087 04/09/20 14:40:34 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 5088 04/09/20 14:40:35 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 5089 04/09/20 14:40:43 1:54 6264 6672 imp 3587080982063726 310410214827503 5090 04/09/20 14:40:44 1:54 6672 6000 imp 3587080982063726 310410214827503 5091 04/09/20 14:42:38 5:51 0 0 nxtgonpho no 3587080982063726 310410214827503 5092 04/09/20 14:42:42 5:47 8354 7864 imp 3587080982063726 310410214827503 5093 04/09/20 14:48:28 2:12 192 Oruftgonpho no 3587080982063726 310410214827503 5094 04/09/20 14:48:29 2:12 0 Oruftgonpho no 3587080982063726 310410214827503 5095 04/09/20 14:49:33 1:07 7156 6748 imp 3587080982063726 310410214827503 5096 04/09/20 14:49:34 1:07 6748 6892 imp 3587080982063726 310410214827503 5097 04/09/20 14:50:41 2:16 0 Oruftgonpho no 3587080982063726 310410214827503 5098 04/09/20 14:50:56 2:01 48 0 imp 3587080982063726 310410214827503 5099 04/09/20 14:52:57 13:49 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE 'PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 209 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002853 PsisTfikE not for general distribution. EFTA 00116929 EFTA01251453 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating 2T Time Humber (OTC) Bytes Up Byte. Apn Dn IMBI MUT NICOLL 5100 04/09/20 14:52:58 13:49 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5101 04/09/20 14:53:03 13:43 6312 6682 imam 3587080982063726 310410214827503 APPLE DRONES 5102 04/09/20 14:53:04 13:43 6682 5960 imam 3587080982063726 310410214827503 APPLE DRONES 5103 04/09/20 15:06:47 7:06 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IONONE8 5104 04/09/20 15:08:15 5:38 8934 7979 imam 3587080982063726 310410214827503 APPLE !PHONES 5105 04/09/20 15:13:52 16:13 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5106 04/09/20 15:13:53 16:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5107 04/09/20 15:14:14 15:51 7238 7452 imam 3587080982063726 310410214827503 APPLE DRONES 5108 04/09/20 15:14:15 15:51 7452 6974 imam 3587080982063726 310410214827503 APPLE DRONES 5109 04/09/20 15:30:06 8:54 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5110 04/09/20 15:30:07 8:53 6243 6686 ins 3587080982063726 310410214827503 APPLE DRONES 5111 04/09/20 15:30:07 8:54 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5112 04/09/20 15:30:08 8:53 6686 5979 imam 3587080982063726 310410214827503 APPLE DRONES 5113 04/09/20 15:39:00 6:19 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5114 04/09/20 15:39:01 6:19 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5115 04/09/20 15:39:04 6:15 6262 6672 imam 3587080982063726 310410214827503 APPLE DRONES 5116 04/09/20 15:39:05 6:15 6672 5998 ins 3587080982063726 310410214827503 APPLE DRONES 5117 04/09/20 15:45:20 0:06 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5118 04/09/20 15:45:53 8:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5119 04/09/20 15:47:28 6:29 10998 8256 ins 3587080982063726 310410214827503 APPLE DRONES 5120 04/09/20 15:53:56 24:15 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5121 04/09/20 15:53:57 24:15 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5122 04/09/20 15:53:59 24:12 6262 6780 ins 3587080982063726 310410214827503 APPLE DRONES 5123 04/09/20 15:54:00 24:12 6780 5998 ins 3587080982063726 310410214827503 APPLE DRONES 5124 04/09/20 16:18:12 0:38 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5125 04/09/20 16:18:15 0:35 6688 5998 imam 3587080982063726 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 210 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002854 not for general distribution. EFTA_00I 16930 EFTA01251454 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 41011, ...,,• ••-a""‘ AT&T Run Oats: Run Tina: Data Usage For: Item conn. Data 06/17/2020 18:55:58 Conn. originating ET Time Number (UTC) Sytes Up Bytes Apn Dn ItCEI INSI MAfl 5126 04/09/20 16:18:49 8:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5127 04/09/20 16:18:51 8:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5128 04/09/20 16:18:53 8:28 6244 6666 ims 3587080982063726 310410214827503 APPLE 5129 04/09/20 16:18:54 8:28 6666 5980 ims 3587080982063726 310410214827503 APPLE 5130 04/09/20 16:27:22 22:13 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5131 04/09/20 16:28:43 20:52 8168 6944 ims 3587080982063726 310410214827503 APPLE 5132 04/09/20 16:49:34 2:34 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5133 04/09/20 16:49:35 2:34 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5134 04/09/20 16:52:09 10:01 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5135 04/09/20 16:52:10 10:00 7138 6746 imp 3587080982063726 310410214827503 APPLE 5136 04/09/20 16:52:10 10:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5137 04/09/20 16:52:11 10:01 6746 6874 ims 3587080982063726 310410214827503 APPLE 5138 04/09/20 17:02:11 2:54 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5139 04/09/20 17:02:15 2:50 8958 7944 ims 3587080982063726 310410214827503 APPLE 5140 04/09/20 17:05:04 8:33 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5141 04/09/20 17:05:05 8:34 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5142 04/09/20 17:05:07 8:30 6224 6688 ims 3587080982063726 310410214827503 APPLE 5143 04/09/20 17:05:08 8:31 6688 5960 ims 3587080982063726 310410214827503 APPLE 5144 04/09/20 17:13:38 0:46 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5145 04/09/20 17:13:43 0:41 8390 8080 ims 3587080982063726 310410214827503 APPLE 5146 04/09/20 17:14:23 21:05 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5147 04/09/20 17:14:24 21:06 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5148 04/09/20 17:16:36 18:52 6262 18824 ims 3587080982063726 310410214827503 APPLE 5149 04/09/20 17:16:37 18:53 6692 5998 ims 3587080982063726 310410214827503 APPLE 5150 04/09/20 17:35:30 54:43 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5151 04/09/20 17:47:03 43:10 9282 7304 ims 3587080982063726 310410214827503 APPLE MODEL !PROMS 11080=8 11080=8 11080=8 11080=8 11080=8 11080=8 !PROMS 11080=8 11080=8 11080=8 11080=8 11080=8 !PROMS !PROMS 11080=8 11080=8 11080=8 11080=8 11080=8 11080=8 !PROMS 11080=8 11080=8 11080=8 11080=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 211 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00002855 NTrifikE not for general distribution. EF-EA_00116931 EFTA01251455 The information contained hereCtoNelt 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011i •er ‘"Ii. e essa% AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:45:58 Conn. Time (UTC) Originating Number LT Bytes Up Bytes Apn Dn IX= IMSI NUM 5152 04/09/20 18:30:12 21:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5153 04/09/20 18:30:13 21:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5154 04/09/20 18:30:16 21:06 6440 8812 imp 3587080982063726 310410214827503 APPLE 5155 04/09/20 18:30:16 21:07 8812 6176 imp 3587080982063726 310410214827503 APPLE 5156 04/09/20 18:51:23 0:28 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5157 04/09/20 18:51:50 2:09 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5158 04/09/20 18:51:51 2:09 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5159 04/09/20 18:54:00 7:49 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5160 04/09/20 18:54:02 7:47 6674 5982 imp 3587080982063726 310410214827503 APPLE 5161 04/09/20 19:01:49 8:25 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5162 04/09/20 19:01:50 8:25 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5163 04/09/20 19:05:35 4:39 6226 6672 imp 3587080982063726 310410214827503 APPLE 5164 04/09/20 19:05:36 4:39 6672 5962 imp 3587080982063726 310410214827503 APPLE 5165 04/09/20 19:10:15 11:12 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5166 04/09/20 19:13:55 7:32 6686 5980 imp 3587080982063726 310410214827503 APPLE 5167 04/09/20 19:21:26 31:08 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5168 04/09/20 19:21:27 31:08 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5169 04/09/20 19:22:05 30:29 31967 81232 imp 3587080982063726 310410214827503 APPLE 5170 04/09/20 19:22:06 30:29 46600 36287 imp 3587080982063726 310410214827503 APPLE 5171 04/09/20 19:29:26 0:17 208 0 imp 3587080982063726 310410214827503 APPLE 5172 04/09/20 19:29:27 0:16 0 208 imp 3587080982063726 310410214827503 APPLE 5173 04/09/20 19:29:54 0:26 0 0 imp 3587080982063726 310410214827503 APPLE 5174 04/09/20 19:37:26 0:27 8044 5083 imp 3587080982063726 310410214827503 APPLE 5175 04/09/20 19:37:27 0:27 4623 8044 imp 3587080982063726 310410214827503 APPLE 5176 04/09/20 19:48:21 0:03 0 0 imp 3587080982063726 310410214827503 APPLE 5177 04/09/20 19:52:35 0:52 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5178 04/09/20 19:52:39 0:48 7416 6104 ins 3587080982063726 310410214827503 APPLE MODEL IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 'PHONES IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 212 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002856 NTifikE not for general distribution. EFTA 00116932 EFTA01251456 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 1•,,a( 4/ ' "..‘S 11. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes UP Bytom Apn Dn INCI IMSI NIUM MODEL 5179 04/09/20 19:53:26 19:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5180 04/09/20 19:53:27 19:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5181 04/09/20 19:53:30 18:56 6243 6670 ims 3587080982063726 310410214827503 APPLE 'PHONES 5182 04/09/20 19:53:31 18:56 6670 5979 ims 3587080982063726 310410214827503 APPLE 'PHONES 5183 04/09/20 20:12:27 8:57 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5184 04/09/20 20:12:31 8:53 13288 10292 ims 3587080982063726 310410214827503 APPLE 'PHONES 5185 04/09/20 20:21:23 15:14 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5186 04/09/20 20:21:24 15:14 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5187 04/09/20 20:21:26 15:11 6262 25616 ims 3587080982063726 310410214827503 APPLE !PHONES 5188 04/09/20 20:21:27 15:11 6784 5998 ims 3587080982063726 310410214827503 APPLE !PHONES 5189 04/09/20 20:36:38 0:39 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5190 04/09/20 20:36:42 0:35 6692 5998 ims 3587080982063726 310410214827503 APPLE 'PHONES 5191 04/09/20 20:37:17 15:46 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5192 04/09/20 20:37:18 15:46 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5193 04/09/20 20:37:20 15:43 17838 19124 ims 3587080982063726 310410214827503 APPLE 'PHONES 5194 04/09/20 20:37:21 15:43 18424 17574 ims 3587080982063726 310410214827503 APPLE 'PHONES 5195 04/09/20 20:39:13 0:27 12546 5521 ims 3587080982063726 310410214827503 APPLE 'PHONES 5196 04/09/20 20:39:14 0:27 5521 12546 ims 3587080982063726 310410214827503 APPLE 'PHONES 5197 04/09/20 20:53:04 5:24 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5198 04/09/20 20:53:08 5:20 8152 6920 ims 3587080982063726 310410214827503 APPLE 'PHONES 5199 04/09/20 20:58:27 59:43 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5200 04/09/20 20:58:28 59:43 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5201 04/09/20 20:58:30 59:40 23490 33074 ims 3587080982063726 310410214827503 APPLE !PHONES 5202 04/09/20 20:58:31 59:40 29420 23138 ims 3587080982063726 310410214827503 APPLE 'PHONES 5203 04/09/20 21:03:35 22:19 5259603 4388034 ims 3587080982063726 310410214827503 APPLE 'PHONES 5204 04/09/20 21:03:36 22:19 4388034 5259603 ims 3587080982063726 310410214827503 APPLE 'PHONES 5205 04/09/20 21:29:43 28:03 4870778 3178523 ims 3587080982063726 310410214827503 APPLE 'PHONES 5206 04/09/20 21:29:44 28:02 3178523 4870778 ims 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 213 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002857 NTatikE not for general distribution. EF-EA_00116933 EFTA01251457 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in %...11. ‘6.1.11. AT&T Run Data: Run TIM*: Data Osage Tor: 06/17/2020 Item Conn. Conn. Data Tina (OTC) Originating ET Bytes Bytom Apn DELI IMSI NUM MODEL Number Up On 5207 04/09/20 21:58:11 19:57 0 Ormagonpho no 3587080982063726 310410214827503 5208 04/09/20 21:58:14 19:54 6682 5961 ims 3587080982063726 310410214827503 5209 04/09/20 22:18:07 14:26 192 Ormagonpho no 3587080982063726 310410214827503 5210 04/09/20 22:18:08 14:26 0 Ormagonpho no 3587080982063726 310410214827503 5211 04/09/20 22:18:11 14:22 6225 6668 ims 3587080982063726 310410214827503 5212 04/09/20 22:18:12 14:22 6668 5961 imp 3587080982063726 310410214827503 5213 04/09/20 22:32:34 0:37 0 Onxtgonpho no 3587080982063726 310410214827503 5214 04/09/20 22:33:11 14:33 192 Onxtgonpho no 3587080982063726 310410214827503 5215 04/09/20 22:33:12 14:33 0 Onxtgonpho no 3587080982063726 310410214827503 5216 04/09/20 22:33:17 14:27 14436 17820 ins 3587080982063726 310410214827503 5217 04/09/20 22:33:18 14:27 16610 14172 ins 3587080982063726 310410214827503 5218 04/09/20 22:33:53 13:26 1717807 2636672 imp 3587080982063726 310410214827503 5219 04/09/20 22:33:54 13:26 2636672 1717807 imp 3587080982063726 310410214827503 5220 04/09/20 22:47:45 1:23 0 Oroftmonpho no 3587080982063726 310410214827503 5221 04/09/20 22:47:49 1:19 6690 5980 ims 3587080982063726 310410214827503 5222 04/09/20 22:49:07 4:55 192 Onxtgonpho no 3587080982063726 310410214827503 5223 04/09/20 22:49:08 4:55 0 Onatmonpho no 3587080982063726 310410214827503 5224 04/09/20 22:49:10 4:52 12820 13228 ims 3587080982063726 310410214827503 5225 04/09/20 22:49:11 4:52 13228 12556 ims 3587080982063726 310410214827503 5226 04/09/20 22:49:23 4:10 613278 833749 ims 3587080982063726 310410214827503 5227 04/09/20 22:49:24 4:10 832938 613278 ims 3587080982063726 310410214827503 5228 04/09/20 22:54:02 18:15 192 Ormagonpho no 3587080982063726 310410214827503 5229 04/09/20 22:54:03 18:16 0 OnatTonpho no 3587080982063726 310410214827503 5230 04/09/20 22:54:31 17:46 7136 49428 ins 3587080982063726 310410214827503 5231 04/09/20 22:54:32 17:47 6756 6872 ins 3587080982063726 310410214827503 5232 04/09/20 23:12:19 22:57 0 OnatTonpho no 3587080982063726 310410214827503 5233 04/09/20 23:14:25 20:51 21192 21367 ims 3587080982063726 310410214827503 AT&T Proprietary APPLE !PROMS APPLE IPM01428 APPLE IPM01428 APPLE IPM01428 APPLE !PROMS APPLE !PROMS APPLE !PHONES APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE IPM01428 APPLE IPM01428 APPLE IPM01428 APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE IPM01428 APPLE IPM01428 APPLE IPM01428 APPLE !PROMS APPLE !PROMS APPLE !PHONES APPLE !PHONES The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 214 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained heraleop+Fti SDNY_GM_ 00002858 NeTniliAL not for general distribution. EF-EA_00116934 EFTA01251458 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in AT&T Run Data: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Data Time (OTC) Originating Number ET Byte. Bytom Apn op Dn 5234 04/09/20 23:32:08 0:33 51730 5235 04/09/20 23:33:28 0:26 44687 5236 04/09/20 23:35:15 2:03 192 5237 04/09/20 23:35:16 2:03 0 5238 04/09/20 23:35:18 2:00 7214 5239 04/09/20 23:35:19 2:00 6788 5240 04/09/20 23:37:19 0:44 0 5241 04/09/20 23:37:23 0:40 6672 5242 04/09/20 23:38:02 52:28 192 5243 04/09/20 23:38:03 52:28 0 5244 04/09/20 23:38:05 52:25 14044 5245 04/09/20 23:38:06 52:25 15264 5246 04/10/20 00:24:34 2:04 436591 5247 04/10/20 00:24:35 2:04 350002 5248 04/10/20 00:30:31 0:38 0 5249 04/10/20 00:30:34 0:35 3394 5250 04/10/20 00:31:09 103:15 192 5251 04/10/20 00:31:10 60:00 0 5252 04/10/20 00:31:12 103:12 12072 5253 04/10/20 00:31:13 60:00 12060 5254 04/10/20 01:31:10 43:15 0 5255 04/10/20 01:31:13 43:12 2596 5256 04/10/20 02:14:24 21:02 192 5257 04/10/20 02:14:25 21:02 0 5258 04/10/20 02:14:46 20:40 6264 5259 04/10/20 02:14:47 20:40 6676 5260 04/10/20 02:35:27 60:00 192 INLI INSI NICOLL 63016 imp 3587080982063726 310410214827503 APPLE 'PHONES 70034 imp 3587080982063726 310410214827503 APPLE 'PHONES Os-mtg.:mph., 3587080982063726 310410214827503 APPLE 'PHONES no Os-mtg.:mph., 3587080982063726 310410214827503 APPLE !PHONES no 6788 imp 3587080982063726 310410214827503 APPLE 'PHONES 6950 imp 3587080982063726 310410214827503 APPLE 'PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5964 imp 3587080982063726 310410214827503 APPLE 'PHONES 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no Onatgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 15264 imp 3587080982063726 310410214827503 APPLE 'PHONES 13780 imp 3587080982063726 310410214827503 APPLE 'PHONES 350281 imp 3587080982063726 310410214827503 APPLE 'PHONES 436591 imp 3587080982063726 310410214827503 APPLE 'PHONES 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 2180 imp 3587080982063726 310410214827503 APPLE 'PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 15268 imp 3587080982063726 310410214827503 APPLE !PHONES 10484 imp 3587080982063726 310410214827503 APPLE !PHONES Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 1324 imp 3587080982063726 310410214827503 APPLE 'PHONES Onxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no Oruftgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6676 imp 3587080982063726 310410214827503 APPLE 'PHONES 6000 imp 3587080982063726 310410214827503 APPLE 'PHONES 0 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 215 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002859 Ns not for general distribution. EFTA_Q0I 16935 EFTA01251459 NOBILITY The information contained hereeeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 18:55:59 Conn. Time (UTC) Originating ET Number Bytes Up Bytes Apn Dn INEI IM3I MARC 5261 04/10/20 02:35:28 60:00 8816 12226 ims 3587080982063726 310410214827503 APPLE 5262 04/10/20 02:35:28 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5263 04/10/20 02:35:29 60:00 12226 8660 ims 3587080982063726 310410214827503 APPLE 5264 04/10/20 03:35:28 186:43 17299 25710 ims 3587080982063726 310410214827503 APPLE 5265 04/10/20 03:35:28 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5266 04/10/20 03:35:29 60:00 21406 15711 ims 3587080982063726 310410214827503 APPLE 5267 04/10/20 04:35:28 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5268 04/10/20 04:35:29 60:00 4304 1696 ims 3587080982063726 310410214827503 APPLE 5269 04/10/20 05:22:42 60:00 16977 10370 ims -1 310410214827503 5270 04/10/20 05:35:28 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5271 04/10/20 05:35:29 60:00 0 0 imp 3587080982063726 310410214827503 APPLE 5272 04/10/20 06:22:42 60:00 8388 2896 imp -1 310410214827503 5273 04/10/20 06:35:28 0:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5274 04/10/20 06:35:29 6:43 0 0 ims 3587080982063726 310410214827503 APPLE 5275 04/10/20 06:42:11 100:51 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5276 04/10/20 06:42:12 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5277 04/10/20 07:22:42 60:00 8372 2912 ims -1 310410214827503 5278 04/10/20 07:42:12 40:51 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5279 04/10/20 08:22:42 60:00 0 0 ims -1 310410214827503 5280 04/10/20 08:23:03 0:34 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5281 04/10/20 08:23:36 1:53 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5282 04/10/20 08:23:37 1:53 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5283 04/10/20 08:25:30 0:52 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5284 04/10/20 08:26:21 0:55 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5285 04/10/20 08:26:22 0:55 0 Oruftgonpho 3587080982063726 310410214827503 APPLE no MOD= !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PRONGS !PHONES IPROME8 !PHONES !PHONES !PHONES !PHONES !PHONES IPROME8 IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 216 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002860 PsiTi fikE not for general distribution. EFIA_OCIII6936 EFTA01251460 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 41011, %. N.,,a1 46.6"11. ' ss# AT&T Run Date: Run Tama: Data Usage For: Item cone. Date 06/17/2020 Conn. originating ET Time Number (Uc) Bytes Op Bytes Apn on IICI IMSI MAKE MOLL 5286 04/10/20 08:27:17 0:05 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5287 04/10/20 08:27:35 3:10 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5288 04/10/20 08:30:44 2:59 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5289 04/10/20 08:30:45 2:59 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5290 04/10/20 08:30:51 34:02 17797 12158 as -1 310410214827503 5291 04/10/20 08:33:44 2:28 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5292 04/10/20 08:36:11 5:00 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5293 04/10/20 08:36:13 4:59 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 5294 04/10/20 08:41:12 9:22 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPROME8 5295 04/10/20 08:50:34 2:10 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5296 04/10/20 08:50:35 2:10 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5297 04/10/20 08:52:45 1:15 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 5298 04/10/20 08:53:59 2:56 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5299 04/10/20 08:54:00 2:57 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE IPROME8 5300 04/10/20 08:56:56 0:06 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 5301 04/10/20 08:58:02 3:39 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5302 04/10/20 08:58:04 3:38 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5303 04/10/20 09:01:42 0:54 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 5304 04/10/20 09:02:35 2:08 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPROME8 5305 04/10/20 09:02:36 2:08 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5306 04/10/20 09:04:43 0:06 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 217 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002861 not for general distribution. EF-EA_00116937 EFTA01251461 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. te.,— ad"`sI‘ AT&T Run Date: Run Time: Data Osage for: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn On net IM3I 5307 04/10/20 09:22:42 60:00 0 0 imo -1 310410214827503 5308 04/10/20 10:22:42 60:00 0 0 imo -1 310410214827503 5309 04/10/20 11:22:42 44:03 0 0 imo -1 310410214827503 5310 04/10/20 11:30:56 8:35 192 0 nxtgonpho no 3587080982063726 310410214827503 5311 04/10/20 11:30:57 8:34 6264 6668 ims 3587080982063726 310410214827503 5312 04/10/20 11:30:57 8:35 0 Oruftgonpho no 3587080982063726 310410214827503 5313 04/10/20 11:30:58 8:34 6668 6000 ims 3587080982063726 310410214827503 5314 04/10/20 11:39:32 1:48 0 Oruftgonpho no 3587080982063726 310410214827503 5315 04/10/20 11:39:34 1:46 8594 6070 ims 3587080982063726 310410214827503 5316 04/10/20 11:41:19 14:42 192 Onxtgonpho no 3587080982063726 310410214827503 5317 04/10/20 11:41:20 14:41 6228 6670 ims 3587080982063726 310410214827503 5318 04/10/20 11:41:20 14:42 0 Oruftgonpho no 3587080982063726 310410214827503 5319 04/10/20 11:41:21 14:41 6670 5964 ims 3587080982063726 310410214827503 5320 04/10/20 11:56:02 0:44 0 Oruftgonpho no 3587080982063726 310410214827503 5321 04/10/20 11:56:05 0:41 11394 10004 ims 3587080982063726 310410214827503 5322 04/10/20 11:56:45 13:02 192 Oruftgonpho no 3587080982063726 310410214827503 5323 04/10/20 11:56:46 13:01 6304 6734 ims 3587080982063726 310410214827503 5324 04/10/20 11:56:46 13:02 0 Oruftgonpho no 3587080982063726 310410214827503 5325 04/10/20 11:56:47 13:01 6734 6040 ims 3587080982063726 310410214827503 5326 04/10/20 12:09:21 55:07 16157 8192 ims -1 310410214827503 5327 04/10/20 12:09:48 1:39 0 Oruftgonpho no 3587080982063726 310410214827503 5328 04/10/20 12:11:26 24:08 192 Oruftgonpho no 3587080982063726 310410214827503 5329 04/10/20 12:11:27 24:08 0 Oruftgonpho no 3587080982063726 310410214827503 5330 04/10/20 12:35:35 10:15 0 Oruftgonpho no 3587080982063726 310410214827503 5331 04/10/20 12:45:49 2:05 192 Oruftgonpho no 3587080982063726 310410214827503 5332 04/10/20 12:45:50 2:05 0 Oruftgonpho no 3587080982063726 310410214827503 mum MODEL APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PHONES APPLE !PHONES APPLE !PROMS APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PROMS APPLE !PROMS APPLE !PHONES APPLE !PHONES APPLE !PROMS APPLE !PHONES APPLE !PROMS APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 218 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002862 Ns tit not for general distribution. EF-EAJVII6938 EFTA01251462 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT4T'S records ere stored and provided in arc. ap. AT&T Run Data: Run Tina: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (Uc) Originating Number ET Bytes Up Byte. Apn INEZ INS I MAfl Dn 5333 04/10/20 12:47:55 0:54 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5334 04/10/20 12:48:48 1:40 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5335 04/10/20 12:48:49 1:40 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5336 04/10/20 12:50:29 1:10 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5337 04/10/20 12:51:38 2:19 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5338 04/10/20 12:51:40 2:18 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5339 04/10/20 12:53:58 12:56 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5340 04/10/20 12:53:59 12:56 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5341 04/10/20 12:59:18 7:36 6245 6644 ims 3587080982063726 310410214827503 APPLE 5342 04/10/20 12:59:19 7:36 6644 6089 ims 3587080982063726 310410214827503 APPLE 5343 04/10/20 13:04:28 60:00 9924 6494 ims -1 310410214827503 5344 04/10/20 13:06:55 4:52 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5345 04/10/20 13:11:46 2:03 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5346 04/10/20 13:11:47 2:03 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 5347 04/10/20 13:12:42 60:00 19744 9906 mos -1 310410214827503 5348 04/10/20 13:13:50 3:31 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 5349 04/10/20 13:17:20 4:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5350 04/10/20 13:17:22 4:03 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 5351 04/10/20 13:21:25 1:11 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 5352 04/10/20 13:22:35 2:31 192 Onatgenpho no 3587080982063726 310410214827503 APPLE 5353 04/10/20 13:22:36 2:31 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 5354 04/10/20 13:25:07 5:25 0 Onatgenpho no 3587080982063726 310410214827503 APPLE NICOLL !PROMS !PHONES !PRONGS !PHONES 1PRONE8 1PRONE8 1PRONE8 1PRONE8 !PHONES !PHONES !PHONES 1PRONE8 1PRONE8 1PRONE8 !PHONES !PHONES !PRONGS !PHONES 1PRONE8 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 219 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002863 NeTniliAL not for general distribution. EF-EA_00116939 EFTA01251463 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41111, ...., ‘"Ii.11. 100 AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time (UTC) Originating ET Bytes Byte. Apn INEI Number Up Dn IMS1 MCOTS 5355 04/10/20 13:30:31 0:24 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5356 04/10/20 13:30:32 0:24 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5357 04/10/20 13:30:56 3:56 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5358 04/10/20 13:34:51 1:06 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5359 04/10/20 13:34:53 1:05 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5360 04/10/20 13:35:58 8:44 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5361 04/10/20 13:44:41 3:44 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5362 04/10/20 13:44:42 3:44 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5363 04/10/20 13:48:26 7:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5364 04/10/20 13:55:26 0:37 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5365 04/10/20 13:55:27 0:37 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5366 04/10/20 13:56:04 5:57 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5367 04/10/20 14:02:00 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5368 04/10/20 14:02:01 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5369 04/10/20 14:04:04 6:37 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5370 04/10/20 14:04:28 9:37 0 0 moo -1 310410214827503 5371 04/10/20 14:10:40 1:21 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5372 04/10/20 14:10:41 1:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5373 04/10/20 14:12:03 10:13 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5374 04/10/20 14:12:42 21:53 0 0 imp -1 310410214827503 5375 04/10/20 14:14:05 0:00 0 0 imp 3587080982063726 310410214827503 APPLE 5376 04/10/20 14:14:20 8:00 24235 15112 imp 3587080982063726 310410214827503 APPLE 1101(0=8 1101(0=8 !PHONES !PHONES 1101(0=8 !PHONES IPHOME8 'PHONES !PHONES !PHONES !PHONES 1101(0=8 !PHONES !PHONES 1101(0=8 !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 220 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002864 PsiTniliAL not for general distribution. EF-EAJVII6940 EFTA01251464 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in .....„ •--s`'0/ AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 10:65:59 Item Conn. Conn. Data Time (UTC) Originating Number TT Bytes Bytom Apn UP Dn IKE I INS' NAfl NICOLL 5377 04/10/20 14:22:16 12:14 0 0 nxtgonpho no 3587080982063726 310410214827503 5378 04/10/20 14:22:20 12:10 2876 1448 ims 3587080982063726 310410214827503 5379 04/10/20 14:22:20 12:10 2812 1448 ims 3587080982063726 310410214827503 5380 04/10/20 14:34:29 13:24 192 0 nxtgonpho no 3587080982063726 310410214827503 5381 04/10/20 14:34:30 13:24 0 0 nxtgonpho no 3587080982063726 310410214827503 5382 04/10/20 14:34:34 13:18 7524 7212 imp 3587080982063726 310410214827503 5383 04/10/20 14:34:35 13:18 7212 7260 imp 3587080982063726 310410214827503 5384 04/10/20 14:48:09 52:40 0 0 nxtgonpho no 3587080982063726 310410214827503 5385 04/10/20 14:48:11 45:16 9278 7412 imp 3587080982063726 310410214827503 5386 04/10/20 15:33:30 7:19 6666 5962 imp 3587080982063726 310410214827503 5387 04/10/20 15:40:48 16:22 192 0 nxtgonpho no 3587080982063726 310410214827503 5388 04/10/20 15:40:49 16:21 6262 6672 ims 3587080982063726 310410214827503 5389 04/10/20 15:40:49 16:22 0 0 nxtgonpho no 3587080982063726 310410214827503 5390 04/10/20 15:40:50 16:21 6672 5998 ims 3587080982063726 310410214827503 5391 04/10/20 15:56:05 1:07 22574 12240 ims -1 310410214827503 5392 04/10/20 15:57:41 2:03 192 0 nxtgonpho no 3587080982063726 310410214827503 5393 04/10/20 15:57:42 2:02 8124 6870 ims 3587080982063726 310410214827503 5394 04/10/20 15:57:42 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 5395 04/10/20 15:57:44 2:01 6870 7860 imp 3587080982063726 310410214827503 5396 04/10/20 15:58:24 60:00 16737 9198 imp -1 310410214827503 5397 04/10/20 15:59:45 36:21 0 0 nxtgonpho no 3587080982063726 310410214827503 5398 04/10/20 16:36:05 8:30 192 0 nxtgonpho no 3587080982063726 310410214827503 5399 04/10/20 16:36:07 8:29 0 0 nxtgonpho no 3587080982063726 310410214827503 5400 04/10/20 16:44:36 40:31 0 0 nxtgonpho no 3587080982063726 310410214827503 5401 04/10/20 16:58:24 60:00 8388 2912 imp -1 310410214827503 5402 04/10/20 17:25:06 4:50 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 11(1(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE 1101(0=8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1101(0=8 APPLE !PHONES APPLE !THUMB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002865 NeTnAL not for general distribution. Page 221 EF-EA_00116941 EFTA01251465 MOBILITY The information contained horaCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Op Bytoa Apn On IMF' IMSI MARL 5403 04/10/20 17:25:07 4:50 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5404 04/10/20 17:29:56 1:01 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5405 04/10/20 17:29:58 1:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5406 04/10/20 17:30:58 33:15 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5407 04/10/20 17:30:59 33:15 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5408 04/10/20 17:58:24 60:00 24756 10268 ims -1 310410214827503 5409 04/10/20 18:04:14 35:13 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5410 04/10/20 18:26:14 0:23 0 1682 ims -1 310410214827503 5411 04/10/20 18:39:26 2:21 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5412 04/10/20 18:39:28 2:20 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5413 04/10/20 18:41:47 39:06 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5414 04/10/20 18:41:48 39:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5415 04/10/20 18:58:24 60:00 10268 3408 ims -1 310410214827503 5416 04/10/20 19:20:54 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5417 04/10/20 19:22:56 8:51 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5418 04/10/20 19:22:57 8:51 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5419 04/10/20 19:31:48 6:03 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5420 04/10/20 19:31:49 6:03 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5421 04/10/20 19:37:52 1:59 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5422 04/10/20 19:39:50 2:10 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5423 04/10/20 19:39:51 2:10 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5424 04/10/20 19:42:01 15:31 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES IPROME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 222 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002866 NaTtAdti not for general distribution. EFTA 00116942 EFTA01251466 MOBILITY The information contained heraleeNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. AT&T Run Data: Run Time: Data Usage Tor: Item corm. Data 06/17/2020 18:55:59 Conn. Originating ET Time Number (OTC) Bytes Up Bytaa Apn Dn INEI INSI MARL 5425 04/10/20 19:57:31 8:26 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5426 04/10/20 19:57:32 8:26 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5427 04/10/20 19:58:24 60:00 18300 6264 ims -1 310410214827503 5428 04/10/20 20:05:59 11:58 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5429 04/10/20 20:17:56 8:07 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5430 04/10/20 20:17:57 8:07 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5431 04/10/20 20:26:04 40:33 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5432 04/10/20 20:58:24 60:00 10376 3408 imp -1 310410214827503 5433 04/10/20 21:06:36 2:10 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5434 04/10/20 21:06:38 2:09 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5435 04/10/20 21:08:47 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5436 04/10/20 21:58:24 60:00 6956 2680 ims -1 310410214827503 5437 04/10/20 22:08:47 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5438 04/10/20 22:58:24 60:00 10144 3300 ims -1 310410214827503 5439 04/10/20 23:08:47 4:57 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5440 04/10/20 23:13:43 102:45 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5441 04/10/20 23:13:44 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 5442 04/10/20 23:58:24 60:00 10144 3176 ims -1 310410214827503 5443 04/11/20 00:13:44 42:45 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5444 04/11/20 00:56:04 0:24 7215 6860 ims 3587080982063726 310410214827503 APPLE 5445 04/11/20 00:56:05 0:24 6792 6951 ims 3587080982063726 310410214827503 APPLE 5446 04/11/20 00:56:29 4:38 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5447 04/11/20 00:56:31 0:58 6684 6000 ims 3587080982063726 310410214827503 APPLE 5448 04/11/20 00:57:29 5:13 3640 1432 ims 3587080982063726 310410214827503 APPLE 5449 04/11/20 00:58:24 2:35 0 0 ims -1 310410214827503 NICOLL IPHONZ8 IPHONE8 IPHOME8 IPHOME8 IPHONE8 IPHOME8 IPHONZ8 IPHONE8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 223 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002867 MT V& not for general distribution. EF-EA_00116943 EFTA01251467 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in (ITC. • AT&T Run pato: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytom Apn Dn DTI INSI NUT NICOLL 5450 04/11/20 01:01:06 2:58 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5451 04/11/20 01:01:07 2:57 15076 15712 ims 3587080982063726 310410214827503 APPLE DRONES 5452 04/11/20 01:01:07 2:58 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5453 04/11/20 01:01:09 2:56 15712 14812 ims 3587080982063726 310410214827503 APPLE DRONES 5454 04/11/20 01:02:42 60:00 15829 9382 ims -1 310410214827503 5455 04/11/20 01:04:05 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5456 04/11/20 02:02:42 60:00 8388 3036 ims -1 310410214827503 5457 04/11/20 02:04:05 40:56 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5458 04/11/20 02:45:00 27:48 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5459 04/11/20 02:45:01 27:48 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5460 04/11/20 03:02:42 60:00 6924 2912 imp -1 310410214827503 5461 04/11/20 03:12:49 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 5462 04/11/20 03:13:30 20:58 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5463 04/11/20 03:13:31 20:58 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5464 04/11/20 03:34:29 54:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5465 04/11/20 04:02:42 60:00 7032 2928 imp -1 310410214827503 5466 04/11/20 04:29:08 13:55 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5467 04/11/20 04:29:09 13:55 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5468 04/11/20 04:43:04 0:59 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5469 04/11/20 04:44:02 22:54 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5470 04/11/20 04:44:03 22:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5471 04/11/20 05:02:42 60:00 11780 4484 imp -1 310410214827503 5472 04/11/20 05:06:57 0:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 5473 04/11/20 05:07:37 1:21 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002868 not for general distribution. Page 224 EFTA_00116944 EFTA01251468 MOBILITY The information contained hereleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in /14ks, ‘....". ' .11. sof AT&T Run Onto: Run Time: Data Usage Tor: 06/17/2020 18:55:59 Item Conn. Conn. Date Time (UTC) originating ET Bytes Bytoa Number Up Dn Apn Dar DWI MUM NDDBL 5474 04/11/20 05:07:38 1:21 0 0 ructgonpho no 3587080982063726 310410214827503 5475 04/11/20 05:08:59 1:22 0 Oruftgonpho no 3587080982063726 310410214827503 5476 04/11/20 05:10:21 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 5477 04/11/20 06:02:42 60:00 12228 4784 ims -1 310410214827503 5478 04/11/20 06:10:21 60:00 0 Onatgonpho no 3587080982063726 310410214827503 5479 04/11/20 07:02:42 60:00 8388 2928 ims -1 310410214827503 5480 04/11/20 07:10:21 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 5481 04/11/20 08:02:42 60:00 8264 2804 ims -1 310410214827503 5482 04/11/20 08:10:21 60:00 0 Onatgonpho no 3587080982063726 310410214827503 5483 04/11/20 09:02:42 60:00 13476 4748 ims -1 310410214827503 5484 04/11/20 09:10:21 0:01 0 Oruftgonpho no 3587080982063726 310410214827503 5485 04/11/20 09:10:24 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 5486 04/11/20 10:02:42 60:00 8496 2928 ims -1 310410214827503 5487 04/11/20 10:10:24 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 5488 04/11/20 11:02:42 60:00 11796 4536 ims -1 310410214827503 5489 04/11/20 11:10:24 23:33 0 Onatgonpho no 3587080982063726 310410214827503 5490 04/11/20 11:33:56 1:41 192 Onatgonpho no 3587080982063726 310410214827503 5491 04/11/20 11:33:58 1:40 0 Oruftgonpho no 3587080982063726 310410214827503 5492 04/11/20 11:35:38 4:12 0 Oruftgonpho no 3587080982063726 310410214827503 5493 04/11/20 11:39:50 3:00 0 Oruftgonpho no 3587080982063726 310410214827503 5494 04/11/20 11:42:49 2:48 192 Onatgonpho no 3587080982063726 310410214827503 5495 04/11/20 11:42:51 2:47 0 Onatgonpho no 3587080982063726 310410214827503 5496 04/11/20 11:45:38 60:00 0 Onatgonpho no 3587080982063726 310410214827503 5497 04/11/20 12:02:42 1:51 0 0 ims -1 310410214827503 APPLE 18)(0=8 APPLE 18)(0=8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 225 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMJ10002869 NsRAE not for general distribution. EF-EA_00116945 EFTA01251469 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and arc. provided in ap. AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Hunter ET Bytes UP Bytes Apn Dn IKE I ISIS I NUT 5498 04/11/20 12:11:46 0:01 0 0 ims 3587080982063726 310410214827503 APPLE 5499 04/11/20 12:16:06 60:00 9926 6400 ims -1 310410214827503 5500 04/11/20 12:43:42 60:00 16873 9419 ims -1 310410214827503 5501 04/11/20 12:45:38 10:14 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5502 04/11/20 12:55:52 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5503 04/11/20 12:55:53 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5504 04/11/20 12:57:56 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5505 04/11/20 13:16:06 60:00 0 0 ims -1 310410214827503 5506 04/11/20 13:43:42 60:00 8388 2928 ims -1 310410214827503 5507 04/11/20 13:57:56 48:58 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5508 04/11/20 14:16:06 60:00 0 0 1ms -1 310410214827503 5509 04/11/20 14:43:42 60:00 8388 2928 1ms -1 310410214827503 5510 04/11/20 14:46:53 2:04 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5511 04/11/20 14:46:54 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5512 04/11/20 14:48:59 7:30 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5513 04/11/20 14:56:28 5:35 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5514 04/11/20 14:56:29 5:35 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5515 04/11/20 15:02:04 17:37 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5516 04/11/20 15:16:06 60:00 0 0 ims -1 310410214827503 5517 04/11/20 15:19:40 2:39 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5518 04/11/20 15:19:42 2:38 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5519 04/11/20 15:22:20 33:47 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5520 04/11/20 15:43:42 60:00 8496 2928 ims -1 310410214827503 5521 04/11/20 15:56:06 32:38 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE NICOLL !PROMS !PROMS 1PROME8 1PNONES 1PNONES DRONES DRONES 1PNONES !PEONES !PROMS !PROMS !PEONES 1PNONES 1PNONES 1PNONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002870 NeTtAL not for general distribution. Page 226 EFTA_00116946 EFTA01251470 The information contained her is 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and UTC. provided in • •-`11"._„ 4:$ AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 10:54:59 Conn. originating ET Time Number op (OTC) Bytes Bytom Apn On INEI INSI MARE MODEL 5522 04/11/20 15:56:07 32:38 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5523 04/11/20 16:16:06 30:53 0 0 imp -1 310410214827503 5524 04/11/20 16:28:45 1:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5525 04/11/20 16:29:47 39:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5526 04/11/20 16:29:48 39:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5527 04/11/20 16:43:42 60:00 18068 6356 imp -1 310410214827503 5528 04/11/20 17:08:57 1:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5529 04/11/20 17:10:34 27:26 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 5530 04/11/20 17:10:35 27:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 5531 04/11/20 17:38:01 7:44 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5532 04/11/20 17:43:42 60:00 6956 2788 imp -1 310410214827503 5533 04/11/20 17:45:44 41:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5534 04/11/20 17:45:45 41:32 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5535 04/11/20 18:27:17 16:02 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5536 04/11/20 18:43:18 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5537 04/11/20 18:43:20 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5538 04/11/20 18:43:42 60:00 8496 3052 imp -1 310410214827503 5539 04/11/20 18:45:23 26:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5540 04/11/20 19:11:41 2:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5541 04/11/20 19:11:43 2:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5542 04/11/20 19:13:53 36:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5543 04/11/20 19:43:42 60:00 13352 4516 imp -1 310410214827503 5544 04/11/20 19:50:05 11:47 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002871 NsTatikE not for general distribution. Page 227 EF-EAJVII6947 EFTA01251471 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, .....,./ `•-s`' s AT&T Run Date: Run Time: Data Usage for: Item Conn. Date 06/17/2020 1S:55:59 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn IMEI IMSI NAfl MODEL 5545 04/11/20 19:50:06 11:48 0 0 nmtgenpho no 3587080982063726 310410214827503 APPLE IPM0NE8 5546 04/11/20 20:01:53 4:41 192 Onmtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5547 04/11/20 20:01:54 4:41 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5548 04/11/20 20:06:35 2:39 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5549 04/11/20 20:09:13 2:18 192 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5550 04/11/20 20:09:15 2:17 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5551 04/11/20 20:11:32 6:09 192 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5552 04/11/20 20:11:33 6:09 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5553 04/11/20 20:17:42 60:00 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5554 04/11/20 20:42:49 60:00 18287 9340 ims -1 310410214827503 5555 04/11/20 20:43:42 60:00 0 0 ims -1 310410214827503 5556 04/11/20 21:17:42 2:45 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5557 04/11/20 21:20:26 2:04 192 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5558 04/11/20 21:20:27 2:04 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5559 04/11/20 21:22:31 60:00 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5560 04/11/20 21:42:49 60:00 8712 3252 ims -1 310410214827503 5561 04/11/20 21:43:42 60:00 0 0 ims -1 310410214827503 5562 04/11/20 22:22:31 15:13 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5563 04/11/20 22:37:43 83:24 192 Oruagenpho no 3587080982063726 310410214827503 APPLE !PRONGS 5564 04/11/20 22:37:44 60:00 0 Oruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 5565 04/11/20 22:42:49 60:00 6848 2648 ims -1 310410214827503 5566 04/11/20 22:43:42 60:00 0 0 ims -1 310410214827503 5567 04/11/20 23:37:44 23:24 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5568 04/11/20 23:42:49 60:00 10720 4096 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 228 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002872 NeTniliAL not for general distribution. EFTA_00I 16948 EFTA01251472 MOBILITY The information contained heraCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 1•.,., 4/ ' ni‘S g°00 AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number LT Bytes op Bytes Apn Dn INZI IMSI MUM MODEL 5569 04/11/20 23:43:42 58:52 0 0 imp -1 310410214827503 5570 04/12/20 00:01:08 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 5571 04/12/20 00:42:49 60:00 11920 4612 imp -1 310410214827503 5572 04/12/20 01:01:08 52:41 0 Ormagenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5573 04/12/20 01:42:49 60:00 8604 3112 imp -1 310410214827503 5574 04/12/20 01:58:01 34:14 192 Ormagenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5575 04/12/20 01:58:02 34:14 0 Ormagenpho no 3587080982063726 310410214827503 APPLE !PHONES 5576 04/12/20 02:32:16 70:00 192 Onatgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5577 04/12/20 02:32:17 60:00 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5578 04/12/20 02:42:49 60:00 8604 2896 imp -1 310410214827503 5579 04/12/20 03:32:17 60:00 0 Ormagenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5580 04/12/20 03:42:49 60:00 6956 2756 imp -1 310410214827503 5581 04/12/20 04:32:17 60:00 0 Ormagenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5582 04/12/20 04:42:49 60:00 11936 4236 imp -1 310410214827503 5583 04/12/20 05:32:17 5:52 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5584 04/12/20 05:42:49 60:00 10488 4364 imp -1 310410214827503 5585 04/12/20 06:42:49 60:00 6848 2648 imp -1 310410214827503 5586 04/12/20 07:42:49 60:00 10036 3144 imp -1 310410214827503 5587 04/12/20 08:42:49 60:00 13460 4576 imp -1 310410214827503 5588 04/12/20 09:42:49 60:00 8372 3036 imp -1 310410214827503 5589 04/12/20 10:42:49 60:00 8388 2788 imp -1 310410214827503 5590 04/12/20 11:42:49 60:00 15000 5000 imp -1 310410214827503 5591 04/12/20 11:42:58 78:11 192 Onatgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5592 04/12/20 11:42:59 60:00 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 1PROME8 5593 04/12/20 12:42:49 60:00 13352 4576 imp -1 310410214827503 5594 04/12/20 12:42:59 18:11 0 Ormagenpho no 3587080982063726 310410214827503 APPLE !PHONES 5595 04/12/20 13:01:10 5:46 0 Ormagenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 229 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002873 PsiTn iliAL not for general distribution. EF-EA_00116949 EFTA01251473 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ....,,,• ••-•° `"". AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 18:56:00 Item Conn. Conn. Date Time (UTC) originating Number ET Bytes Up 5596 04/12/20 13:06:55 74:35 192 5597 04/12/20 13:06:56 60:00 0 5598 04/12/20 13:42:49 60:00 8496 5599 04/12/20 14:06:56 14:35 0 5600 04/12/20 14:21:31 9:25 192 5601 04/12/20 14:21:32 9:25 0 5602 04/12/20 14:30:57 60:00 0 5603 04/12/20 14:42:49 60:00 8388 5604 04/12/20 15:30:57 47:29 0 5605 04/12/20 15:42:49 60:00 8496 5606 04/12/20 16:18:26 0:22 192 5607 04/12/20 16:18:27 0:22 0 5608 04/12/20 16:18:49 4:54 0 5609 04/12/20 16:23:42 2:03 192 5610 04/12/20 16:23:43 2:03 0 5611 04/12/20 16:25:46 23:14 0 5612 04/12/20 16:42:49 60:00 12028 5613 04/12/20 16:49:00 24:00 192 5614 04/12/20 16:49:01 24:00 0 5615 04/12/20 17:13:00 71:45 192 5616 04/12/20 17:13:01 60:00 0 5617 04/12/20 17:42:49 60:00 10396 5618 04/12/20 18:13:01 11:45 0 Byte. Dn Apn Onxtgonpho no 0 nxtgonpho no 3004 imp 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 2896 imp Onxtgonpho no 3004 imp 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 4504 imp 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 0 nxtgonpho no 4096 ism 0 nxtgonpho no ICI 3587080982063726 3587080982063726 -1 3587080982063726 3587080982063726 3587080982063726 3587080982063726 -1 3587080982063726 -1 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 -1 3587080982063726 3587080982063726 3587080982063726 3587080982063726 -1 3587080982063726 INSI MARL NICOLL 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 310410214827503 APPLE IPMONE8 310410214827503 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 APPLE IPMONE8 310410214827503 310410214827503 APPLE IPMONE8 310410214827503 APPLE DRONES 310410214827503 APPLE DRONES 310410214827503 APPLE DRONES 310410214827503 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002874 Ns not for general distribution. Page 230 EFTA_00I 16950 EFTA01251474 MOBILITY The information contained heraCeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am CO 06/15/2020 1L:59:59pm Time Zone. AT&T'S records ere stored and provided in .....,./ ••-st `'s AT&T Run Data: Run Time: Data Osage For: 06/17/2020 NOM Item Conn. Data Conn. Originating ET flee Number UP (OTC) Bytes 5619 04/12/20 18:24:46 27:09 192 5620 04/12/20 18:24:47 27:09 0 5621 04/12/20 18:42:49 60:00 8604 5622 04/12/20 18:51:56 2:16 0 5623 04/12/20 18:54:11 63:24 192 5624 04/12/20 18:54:12 60:00 0 5625 04/12/20 19:42:49 60:00 8388 5626 04/12/20 19:54:12 3:24 0 5627 04/12/20 19:57:35 6:10 192 5628 04/12/20 19:57:36 6:10 0 5629 04/12/20 20:03:46 38:14 0 5630 04/12/20 20:41:59 8:25 192 5631 04/12/20 20:42:00 8:25 0 5632 04/12/20 20:42:49 35:13 3532 5633 04/12/20 20:50:25 6:41 0 5634 04/12/20 20:57:05 14:27 192 5635 04/12/20 20:57:06 14:27 0 5636 04/12/20 21:11:33 1:25 0 5637 04/12/20 21:12:57 19:03 192 5638 04/12/20 21:12:58 19:03 0 5639 04/12/20 21:13:33 18:27 6182 5640 04/12/20 21:13:34 18:27 7068 5641 04/12/20 21:32:01 0:53 0 Bytes On Apn 0 nxtgenpho no 0 nxtgenpho no 3004 ims 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 3004 ims 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 1324 ims 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 0 nxtgenpho no 7136 ims 5918 ims 0 nxtgonpho no ICI 3587080982063726 3587080982063726 -1 3587080982063726 3587080982063726 3587080982063726 -1 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 -1 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 3587080982063726 INSI MARL MODEL 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE IPHONEB 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002875 NTniliAL not for general distribution. Page 231 EF-EA_00116951 EFTA01251475 MOBILITY The information contained hereCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. tr'`aads AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Tao Number (UTC) Bytes Up Byte. Apn Dn INEZ INSI 5642 04/12/20 21:32:04 0:47 9586 6195 ism 3587080982063726 310410214827503 5643 04/12/20 21:32:51 60:00 8604 3004 ism 3587080982063726 310410214827503 5644 04/12/20 21:32:53 2:03 192 0 nmtgonpho no 3587080982063726 310410214827503 5645 04/12/20 21:32:54 2:04 0 Onmtgonpho no 3587080982063726 310410214827503 5646 04/12/20 21:34:58 60:00 0 Onmtgonpho no 3587080982063726 310410214827503 5647 04/12/20 22:16:52 0:01 0 0 moo 3587080982063726 310410214827503 5648 04/12/20 22:17:06 5:31 8205 5997 moo 3587080982063726 310410214827503 5649 04/12/20 22:22:37 30:23 3500 1448 moo 3587080982063726 310410214827503 5650 04/12/20 22:22:37 30:23 3436 1448 moo 3587080982063726 310410214827503 5651 04/12/20 22:32:51 60:00 0 0 moo 3587080982063726 310410214827503 5652 04/12/20 22:34:58 18:02 0 Onmtgonpho no 3587080982063726 310410214827503 5653 04/12/20 22:53:00 57:48 192 Onmtgonpho no 3587080982063726 310410214827503 5654 04/12/20 22:53:01 57:47 12190 13292 ins 3587080982063726 310410214827503 5655 04/12/20 22:53:01 57:48 0 Oruftgonpho no 3587080982063726 310410214827503 5656 04/12/20 22:53:02 57:47 13292 12034 ins 3587080982063726 310410214827503 5657 04/12/20 23:32:51 60:00 0 0 ins 3587080982063726 310410214827503 5658 04/12/20 23:50:49 17:41 0 Onatgonpho no 3587080982063726 310410214827503 5659 04/12/20 23:50:51 17:39 6688 5998 ins 3587080982063726 310410214827503 5660 04/13/20 00:08:29 2:25 192 Onmtgonpho no 3587080982063726 310410214827503 5661 04/13/20 00:08:30 2:25 0 Onmtgonpho no 3587080982063726 310410214827503 5662 04/13/20 00:10:55 1:24 0 Onmtgonpho no 3587080982063726 310410214827503 5663 04/13/20 00:11:18 0:00 0 0 imp 3587080982063726 310410214827503 5664 04/13/20 00:11:26 0:17 4760 6048 imp 3587080982063726 310410214827503 5665 04/13/20 00:11:43 27:42 19592 10964 imp 3587080982063726 310410214827503 5666 04/13/20 00:12:18 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 5667 04/13/20 00:12:19 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 5668 04/13/20 00:14:22 26:57 0 Oruftgonpho no 3587080982063726 310410214827503 MARE MODEL APPLE !PROMS APPLE !PROMS APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE !PHONES APPLE !PHONES APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 232 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002876 NsTilikk not for general distribution. EFTA 00116952 EFTA01251476 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. 41111. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:56:00 Conn. Originating ET Time Number (UTC) Bytes op Bytes Apn Dn IKE I INSI MARL 5669 04/13/20 00:32:51 54:28 0 0 imo 3587080982063726 310410214827503 APPLE 5670 04/13/20 00:39:25 1:54 4152 1324 imo 3587080982063726 310410214827503 APPLE 5671 04/13/20 00:39:25 1:54 4152 1412 imo 3587080982063726 310410214827503 APPLE 5672 04/13/20 00:41:19 19:39 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5673 04/13/20 00:41:20 19:39 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5674 04/13/20 00:41:20 12:15 7114 6740 imp 3587080982063726 310410214827503 APPLE 5675 04/13/20 00:41:21 12:15 6740 6850 imp 3587080982063726 310410214827503 APPLE 5676 04/13/20 00:57:25 3:33 8162 6864 imp 3587080982063726 310410214827503 APPLE 5677 04/13/20 00:57:26 3:33 6864 7898 imp 3587080982063726 310410214827503 APPLE 5678 04/13/20 01:00:59 0:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5679 04/13/20 01:01:28 0:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5680 04/13/20 01:01:43 0:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5681 04/13/20 01:03:23 10:40 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5682 04/13/20 01:03:24 10:39 6228 6778 imp 3587080982063726 310410214827503 APPLE 5683 04/13/20 01:03:24 10:40 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5684 04/13/20 01:03:25 10:39 6670 5964 imp 3587080982063726 310410214827503 APPLE 5685 04/13/20 01:14:04 4:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5686 04/13/20 01:14:08 4:13 9758 7088 imp 3587080982063726 310410214827503 APPLE 5687 04/13/20 01:18:20 2:10 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5688 04/13/20 01:18:21 2:09 6094 6444 ins 3587080982063726 310410214827503 APPLE 5689 04/13/20 01:18:21 2:10 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5690 04/13/20 01:18:23 2:08 6336 5830 imp 3587080982063726 310410214827503 APPLE 5691 04/13/20 01:20:31 3:13 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5692 04/13/20 01:20:33 3:11 8084 6051 imp 3587080982063726 310410214827503 APPLE 5693 04/13/20 01:23:43 8:21 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5694 04/13/20 01:23:44 0:00 88 0 imp 3587080982063726 310410214827503 APPLE 5695 04/13/20 01:23:44 8:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE MODEL IPHONZ8 IPHONZ8 IPHONZ8 IPHONZ8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 233 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002877 NTroliAL not for general distribution. EF-EA_00116953 EFTA01251477 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 41111, AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating LT Time Number (OTC) Bytes Up Byte. Apn Dn IND I INSI MARL 5696 04/13/20 01:23:45 0:00 0 0 imp 3587080982063726 310410214827503 APPLE 5697 04/13/20 01:23:45 8:19 6244 6670 imp 3587080982063726 310410214827503 APPLE 5698 04/13/20 01:23:46 8:19 6670 6088 imp 3587080982063726 310410214827503 APPLE 5699 04/13/20 01:27:19 0:01 0 0 imp -1 310410214827503 5700 04/13/20 01:28:22 3:42 6228 6672 imp 3587080982063726 310410214827503 APPLE 5701 04/13/20 01:28:23 3:42 6672 5964 imp 3587080982063726 310410214827503 APPLE 5702 04/13/20 01:32:05 7:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5703 04/13/20 01:32:07 4:01 8276 6210 imp 3587080982063726 310410214827503 APPLE 5704 04/13/20 01:36:08 10:56 4964 1712 imp 3587080982063726 310410214827503 APPLE 5705 04/13/20 01:39:58 5:51 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5706 04/13/20 01:39:59 5:51 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5707 04/13/20 01:43:26 2:23 6262 6676 imp 3587080982063726 310410214827503 APPLE 5708 04/13/20 01:43:28 2:22 6676 5998 imp 3587080982063726 310410214827503 APPLE 5709 04/13/20 01:45:50 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5710 04/13/20 01:45:52 40:00 11524 7572 imp 3587080982063726 310410214827503 APPLE 5711 04/13/20 02:25:52 29:08 3532 1432 imp 3587080982063726 310410214827503 APPLE 5712 04/13/20 02:45:50 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5713 04/13/20 02:55:01 57:47 12600 8910 imp 3587080982063726 310410214827503 APPLE 5714 04/13/20 03:45:50 6:58 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5715 04/13/20 03:52:47 8:19 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5716 04/13/20 03:52:48 8:18 6225 6672 imp 3587080982063726 310410214827503 APPLE 5717 04/13/20 03:52:48 8:19 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5718 04/13/20 03:52:49 8:18 6672 5961 imp 3587080982063726 310410214827503 APPLE 5719 04/13/20 04:01:07 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5720 04/13/20 04:01:09 60:00 12220 8844 imp 3587080982063726 310410214827503 APPLE 5721 04/13/20 05:01:07 34:23 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5722 04/13/20 05:01:09 34:21 2596 1324 imp 3587080982063726 310410214827503 APPLE 5723 04/13/20 05:35:29 69:54 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE NICOLL IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES !PHONES 1PHONE8 1PHONE8 1PHONE8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 234 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002878 NeTtAL not for general distribution. EF-EA_00116954 EFTA01251478 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T'S records are stored and provided in OTC. t‘ini# erwel AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytom Apn Dn IMEI IMSI MAKE MODEL 5724 04/13/20 05:35:30 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5725 04/13/20 05:35:30 63:43 7567 9266 ins 3587080982063726 310410214827503 APPLE !PHONES 5726 04/13/20 05:35:31 60:00 9266 7411 imp 3587080982063726 310410214827503 APPLE !PHONES 5727 04/13/20 06:14:34 46:58 12933 7833 ins -1 310410214827503 5728 04/13/20 06:35:30 9:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 5729 04/13/20 06:35:31 3:43 0 0 imp 3587080982063726 310410214827503 APPLE IPHONE8 5730 04/13/20 06:39:08 6:45 0 0 imp -2 310410214827503 5731 04/13/20 06:45:24 2:55 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5732 04/13/20 06:48:18 4:11 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5733 04/13/20 06:48:19 4:10 7214 6792 ins 3587080982063726 310410214827503 APPLE IPHONE8 5734 04/13/20 06:48:19 4:11 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 5735 04/13/20 06:48:20 4:10 6792 6950 ins 3587080982063726 310410214827503 APPLE IPHONE8 5736 04/13/20 06:52:30 9:19 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 5737 04/13/20 06:52:33 9:16 7064 5954 ins 3587080982063726 310410214827503 APPLE IPHONE8 5738 04/13/20 07:01:32 0:23 4009 1386 ins 3587080982063726 310410214827503 APPLE IPHONE8 5739 04/13/20 07:01:49 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 5740 04/13/20 07:01:55 22:01 10704 7538 imp 3587080982063726 310410214827503 APPLE !PHONES 5741 04/13/20 07:01:55 22:01 10532 7538 imp 3587080982063726 310410214827503 APPLE !PHONES 5742 04/13/20 07:23:56 60:00 11980 4328 imp 3587080982063726 310410214827503 APPLE !PHONES 5743 04/13/20 08:01:49 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5744 04/13/20 08:23:56 60:00 6924 2880 imp 3587080982063726 310410214827503 APPLE !PHONES 5745 04/13/20 09:01:49 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5746 04/13/20 09:23:56 60:00 8572 3020 imp 3587080982063726 310410214827503 APPLE !PHONES 5747 04/13/20 10:01:49 40:47 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 5748 04/13/20 10:23:56 60:00 12920 3624 imp 3587080982063726 310410214827503 APPLE IPHONE8 5749 04/13/20 11:01:46 132:27 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 235 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002879 The information contained her is NeTniliAL not for general distribution. EFTA_00I 16955 EFTA01251479 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 411. .....,,,• ••-•°` -s AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Elyta• UP Byte. Apn Dn INLI INSI MARL 5750 04/13/20 11:01:47 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5751 04/13/20 11:23:56 60:00 17100 6308 imp 3587080982063726 310410214827503 APPLE 5752 04/13/20 12:01:47 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5753 04/13/20 12:23:56 60:00 8496 2896 imp 3587080982063726 310410214827503 APPLE 5754 04/13/20 13:01:47 12:27 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5755 04/13/20 13:14:13 32:46 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5756 04/13/20 13:14:14 32:46 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5757 04/13/20 13:23:56 11:03 0 0 imp 3587080982063726 310410214827503 APPLE 5758 04/13/20 13:34:40 12:19 7267 6796 imp 3587080982063726 310410214827503 APPLE 5759 04/13/20 13:34:41 12:19 6796 7111 imp 3587080982063726 310410214827503 APPLE 5760 04/13/20 13:34:59 49:16 20726 9147 imp -1 310410214827503 5761 04/13/20 13:47:00 1:55 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5762 04/13/20 13:48:54 8:54 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5763 04/13/20 13:48:55 8:54 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5764 04/13/20 13:57:49 4:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5765 04/13/20 14:01:53 48:22 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5766 04/13/20 14:01:54 48:22 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5767 04/13/20 14:23:59 0:41 8373 8940 ime 3587080982063726 310410214827503 APPLE 5768 04/13/20 14:24:00 0:41 8940 8109 ime 3587080982063726 310410214827503 APPLE 5769 04/13/20 14:24:14 0:01 0 0 ime -1 310410214827503 5770 04/13/20 14:24:19 19:44 6519 8958 imp 3587080982063726 310410214827503 APPLE 5771 04/13/20 14:24:20 19:44 8894 6363 imp 3587080982063726 310410214827503 APPLE 5772 04/13/20 14:24:39 10:47 9857 6463 imp -1 310410214827503 5773 04/13/20 14:40:52 9:23 7476 7072 imp 3587080982063726 310410214827503 APPLE 5774 04/13/20 14:40:53 9:23 7072 7124 imp 3587080982063726 310410214827503 APPLE 5775 04/13/20 14:43:58 60:00 37349 19946 imp -1 310410214827503 5776 04/13/20 14:50:16 1:37 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES IPMONE8 IPHOME8 IPMONE8 IPMONE8 MIMES !PHONES !PHONES MIMES IPMONE8 !PHONES !PHONES IPMONE8 !PHONES !PHONES !PHONES MIMES MIMES MIMES MIMES MIMES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002880 NTntiklt not for general distribution. Page 236 EF-EA_00116956 EFTA01251480 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. AT&T Run Date: Run Time: Data usage for: Item Conn. Date 06/17/2020 Conn. Time (UTC) originating number ET Bytes up Bytes Ann Dn INEI INSI HAKE 5777 04/13/20 14:51:53 11:47 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5778 04/13/20 14:51:54 11:47 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5779 04/13/20 15:03:40 3:51 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5780 04/13/20 15:03:41 3:51 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5781 04/13/20 15:07:32 2:08 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5782 04/13/20 15:09:39 15:40 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5783 04/13/20 15:09:40 15:40 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5784 04/13/20 15:24:03 0:06 0 4245 imp -1 310410214827503 5785 04/13/20 15:25:20 10:00 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5786 04/13/20 15:25:21 24:42 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5787 04/13/20 15:34:09 60:00 19807 10032 ims -1 310410214827503 5788 04/13/20 15:43:58 60:00 0 0 imp -1 310410214827503 5789 04/13/20 15:50:03 24:22 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5790 04/13/20 16:14:24 2:09 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5791 04/13/20 16:14:25 2:09 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5792 04/13/20 16:16:34 27:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5793 04/13/20 16:34:09 60:00 8620 2912 imp -1 310410214827503 5794 04/13/20 16:43:36 8:21 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 5795 04/13/20 16:43:37 8:21 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5796 04/13/20 16:43:58 60:00 0 0 ims -1 310410214827503 5797 04/13/20 16:51:58 2:41 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5798 04/13/20 16:54:38 149:51 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 5799 04/13/20 16:54:39 60:00 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE MODEL IPMONEB IPMONEB IPMONEB IPMONEB IPHONZ8 IPHONZ8 IPHONZ8 IPMONEB IPHOME8 IPHONZ8 IPMONEB IPMONEB IPHONZ8 IPHONZ8 IPHONZ8 IPHONZ8 IPMONEB IPMONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 237 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002881 PsisTfikE not for general distribution. EF-EA_00116957 EFTA01251481 MOBILITY The information contained hereICONyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. 411., ....,,f ••`"'" -sAT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Muster ET Bytes Up Bytes Apn Dn MCI IMSI MARL MOLL 5800 04/13/20 17:34:09 44:31 8496 3004 lee -1 310410214827503 5801 04/13/20 17:43:58 32:17 0 0 imp -1 310410214827503 5802 04/13/20 17:54:39 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 5803 04/13/20 18:16:13 68:16 7340 6862 imo 3587080982063726 310410214827503 APPLE !PHONES 5804 04/13/20 18:16:14 60:00 6794 7076 imo 3587080982063726 310410214827503 APPLE IPHOME8 5805 04/13/20 18:18:40 60:00 16889 9374 imo -1 310410214827503 5806 04/13/20 18:54:39 29:51 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5807 04/13/20 19:16:14 8:16 0 0 imp 3587080982063726 310410214827503 APPLE IPHOME8 5808 04/13/20 19:18:40 29:32 5304 1696 imo -1 310410214827503 5809 04/13/20 19:24:30 1:38 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5810 04/13/20 19:26:07 8:33 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5811 04/13/20 19:26:08 8:33 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5812 04/13/20 19:34:41 2:13 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5813 04/13/20 19:36:53 2:03 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5814 04/13/20 19:36:54 2:03 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5815 04/13/20 19:38:57 0:51 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 5816 04/13/20 19:39:47 8:33 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5817 04/13/20 19:39:48 8:33 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5818 04/13/20 19:42:51 5:29 7200 6740 imp 3587080982063726 310410214827503 APPLE !PHONES 5819 04/13/20 19:42:52 5:29 6740 6848 imp 3587080982063726 310410214827503 APPLE !PHONES 5820 04/13/20 19:48:21 7:02 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 5821 04/13/20 19:48:25 0:01 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 5822 04/13/20 19:50:01 60:00 18557 9854 imo -1 310410214827503 5823 04/13/20 19:55:22 2:36 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5824 04/13/20 19:55:23 2:36 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 238 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002882 PsiTniliAL not for general distribution. EF-EA_00116958 EFTA01251482 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 18:56:00 Conn. Time (UTC) Originating Buster ET Bytes Up Bytes Apn Dn IKEI INS' MARL 5825 04/13/20 19:57:58 12:17 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5826 04/13/20 19:57:59 12:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5827 04/13/20 20:10:16 3:21 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5828 04/13/20 20:13:36 28:42 192 OnxtFonpho no 3587080982063726 310410214827503 APPLE 5829 04/13/20 20:13:37 28:42 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5830 04/13/20 20:42:18 2:21 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5831 04/13/20 20:42:19 2:21 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5832 04/13/20 20:44:39 6:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5833 04/13/20 20:44:40 6:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 5834 04/13/20 20:50:01 12:47 0 0 imp -1 310410214827503 5835 04/13/20 20:50:44 3:02 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5836 04/13/20 20:53:45 10:01 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5837 04/13/20 20:53:46 10:01 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5838 04/13/20 21:02:31 1:15 7372 8932 imp 3587080982063726 310410214827503 APPLE 5839 04/13/20 21:02:32 1:15 8824 7108 imp 3587080982063726 310410214827503 APPLE 5840 04/13/20 21:02:48 0:01 0 0 imp -1 310410214827503 5841 04/13/20 21:03:29 11:24 8193 6032 imp -1 310410214827503 5842 04/13/20 21:03:47 23:08 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5843 04/13/20 21:24:06 13:03 18729 12748 imp -1 310410214827503 5844 04/13/20 21:26:55 21:31 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5845 04/13/20 21:26:56 19:08 6244 6798 imp 3587080982063726 310410214827503 APPLE 5846 04/13/20 21:26:56 21:31 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5847 04/13/20 21:26:57 19:08 6670 5980 imp 3587080982063726 310410214827503 APPLE 5848 04/13/20 21:45:05 10:24 10801 7698 imp -1 310410214827503 5849 04/13/20 21:46:03 2:23 6228 6668 ins 3587080982063726 310410214827503 APPLE NICOLL 'PHONES 'PHONES !PHONES !PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 239 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGAt00002883 PsiTn iliAL not for general distribution. EF-EA_00116959 EFTA01251483 MOBILITY The information contained heraleoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111i %.... ‘inli. 'ssi101 AT&T Run Date: Run Timo: Data Osage for: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn INE' INS1 5850 04/13/20 21:46:05 2:22 6668 5964 in 3587080982063726 310410214827503 5851 04/13/20 21:48:27 6:59 0 Onxtgonpho no 3587080982063726 310410214827503 5852 04/13/20 21:48:28 6:57 6692 5998 in 3587080982063726 310410214827503 5853 04/13/20 21:55:25 0:04 2008 480 in 3587080982063726 310410214827503 5854 04/13/20 21:55:26 130:10 192 Onxtgonpho no 3587080982063726 310410214827503 5855 04/13/20 21:55:27 60:00 0 Onxtgonpho no 3587080982063726 310410214827503 5856 04/13/20 21:55:28 130:08 7676 67790 in 3587080982063726 310410214827503 5857 04/13/20 21:55:29 60:00 9266 7412 ims 3587080982063726 310410214827503 5858 04/13/20 22:28:43 60:00 18659 9587 ims -1 310410214827503 5859 04/13/20 22:55:27 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 5860 04/13/20 22:55:29 60:00 0 0 imp 3587080982063726 310410214827503 5861 04/13/20 23:28:43 26:49 9912 4300 imp -1 310410214827503 5862 04/13/20 23:55:27 10:10 0 Onxtgonpho no 3587080982063726 310410214827503 5863 04/13/20 23:55:29 10:08 0 0 ins 3587080982063726 310410214827503 5864 04/13/20 23:55:41 60:00 18361 9746 in -1 310410214827503 5865 04/14/20 00:05:37 8:19 0 Oruftgonpho no 3587080982063726 310410214827503 5866 04/14/20 00:13:56 53:23 192 Oruftgonpho no 3587080982063726 310410214827503 5867 04/14/20 00:13:56 53:24 0 Oruftgonpho no 3587080982063726 310410214827503 5868 04/14/20 00:55:41 60:00 8496 2928 imp -1 310410214827503 5869 04/14/20 01:07:20 27:20 0 Oruftgonpho no 3587080982063726 310410214827503 5870 04/14/20 01:34:39 2:33 192 Oruftgonpho no 3587080982063726 310410214827503 5871 04/14/20 01:34:41 2:32 0 Oruftgonpho no 3587080982063726 310410214827503 5872 04/14/20 01:37:13 0:06 0 Oruftgonpho no 3587080982063726 310410214827503 5873 04/14/20 01:37:39 0:48 0 Oruftgonpho no 3587080982063726 310410214827503 5874 04/14/20 01:38:26 8:19 192 Oruftgonpho no 3587080982063726 310410214827503 MARE MODEL APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 240 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002884 NeTniliAL not for general distribution. EFTA_00116960 EFTA01251484 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Byte. Op Bytoa Apn Dn IMF' INSI MARL 5875 04/14/20 01:38:28 8:18 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5876 04/14/20 01:46:46 8:50 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5877 04/14/20 01:55:35 58:53 192 0 netgonpho no 3587080982063726 310410214827503 APPLE 5878 04/14/20 01:55:36 58:53 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5879 04/14/20 01:55:41 60:00 7156 3112 kms -1 310410214827503 5880 04/14/20 02:54:29 10:58 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5881 04/14/20 02:55:41 60:00 13600 4748 kms -1 310410214827503 5882 04/14/20 03:05:26 15:05 192 0 netgonpho no 3587080982063726 310410214827503 APPLE 5883 04/14/20 03:05:27 15:05 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5884 04/14/20 03:20:32 32:57 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5885 04/14/20 03:53:28 2:10 192 0 netgonpho no 3587080982063726 310410214827503 APPLE 5886 04/14/20 03:53:30 2:09 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5887 04/14/20 03:55:39 2:05 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5888 04/14/20 03:55:41 60:00 10332 4180 kms -1 310410214827503 5889 04/14/20 03:57:43 18:31 192 0 netgonpho no 3587080982063726 310410214827503 APPLE 5890 04/14/20 03:57:44 18:31 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5891 04/14/20 04:16:15 10:13 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5892 04/14/20 04:26:27 6:51 192 0 netgonpho no 3587080982063726 310410214827503 APPLE 5893 04/14/20 04:26:28 6:51 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5894 04/14/20 04:33:19 4:22 0 0 netgonpho no 3587080982063726 310410214827503 APPLE 5895 04/14/20 04:37:40 8:33 192 0 netgonpho no 3587080982063726 310410214827503 APPLE 5896 04/14/20 04:37:42 8:32 0 0 netgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 241 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002885 NaTtAdti not for general distribution. EFTAJVII6961 EFTA01251485 MOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .....,,,• ••-a"" s AT&T Run Onto: Run Time: Data Usage For: Itea Conn. Data 06/17/2020 Conn. Time (Inc) Originating Number ET Bytes Up Bytaa Apn Dn INEZ INSI MAKE 5897 04/14/20 04:46:14 60:00 0 0 ruftgonpho no 3587080982063726 310410214827503 APPLE 5898 04/14/20 04:55:41 60:00 6924 2896 imo -1 310410214827503 5899 04/14/20 05:46:14 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5900 04/14/20 05:55:41 60:00 10068 3284 ins -1 310410214827503 5901 04/14/20 06:46:14 60:00 0 Onaftgonpho no 3587080982063726 310410214827503 APPLE 5902 04/14/20 06:55:41 60:00 9960 3176 ins -1 310410214827503 5903 04/14/20 07:46:14 60:00 0 Onaftgonpho no 3587080982063726 310410214827503 APPLE 5904 04/14/20 07:55:41 60:00 13476 4624 ins -1 310410214827503 5905 04/14/20 08:46:14 0:00 0 Onaftgonpho no 3587080982063726 310410214827503 APPLE 5906 04/14/20 08:46:16 60:00 0 Onaftgonpho no 3587080982063726 310410214827503 APPLE 5907 04/14/20 08:55:41 60:00 8496 3036 moo -1 310410214827503 5908 04/14/20 09:46:16 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5909 04/14/20 09:55:41 60:00 13368 4676 moo -1 310410214827503 5910 04/14/20 10:46:16 46:11 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5911 04/14/20 10:55:41 60:00 14940 4764 moo -1 310410214827503 5912 04/14/20 11:32:26 27:59 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5913 04/14/20 11:32:27 27:59 0 Onaftgonpho no 3587080982063726 310410214827503 APPLE 5914 04/14/20 11:55:41 60:00 8496 2928 moo -1 310410214827503 5915 04/14/20 12:00:25 8:37 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5916 04/14/20 12:00:26 8:37 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5917 04/14/20 12:09:03 11:04 192 Onaftgonpho no 3587080982063726 310410214827503 APPLE 5918 04/14/20 12:09:04 11:04 0 Onaftgonpho no 3587080982063726 310410214827503 APPLE 5919 04/14/20 12:20:08 9:11 0 Onaftgonpho no 3587080982063726 310410214827503 APPLE 5920 04/14/20 12:29:18 28:04 192 Onaftgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 242 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGM00002886 PsiTi fikE not for general distribution. EFTA 00116962 EFTA01251486 MOBILITY The information contained hereeteNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. • AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes UP Byte. Apn Dn IICI IMSI MARE MODEL 5921 04/14/20 12:29:19 28:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5922 04/14/20 12:55:41 60:00 10068 3300 imo -1 310410214827503 5923 04/14/20 12:57:23 9:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5924 04/14/20 13:06:30 57:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5925 04/14/20 13:55:41 60:00 8496 3036 imp -1 310410214827503 5926 04/14/20 14:04:21 2:26 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5927 04/14/20 14:04:22 2:27 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5928 04/14/20 14:06:49 9:38 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5929 04/14/20 14:16:28 6:11 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5930 04/14/20 14:22:38 3:18 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5931 04/14/20 14:22:40 3:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 5932 04/14/20 14:25:57 57:00 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5933 04/14/20 14:55:41 60:00 15528 5984 imp -1 310410214827503 5934 04/14/20 15:22:57 20:00 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5935 04/14/20 15:22:58 33:02 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 5936 04/14/20 15:55:41 60:00 6924 2788 imp -1 310410214827503 5937 04/14/20 15:56:00 45:52 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5938 04/14/20 16:41:52 22:32 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5939 04/14/20 16:41:53 22:32 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 5940 04/14/20 16:52:53 11:31 8221 8496 imp 3587080982063726 310410214827503 APPLE !PHONES 5941 04/14/20 16:52:54 11:31 8428 8065 imp 3587080982063726 310410214827503 APPLE !PHONES 5942 04/14/20 16:55:41 2:33 0 0 imp -1 310410214827503 5943 04/14/20 17:02:02 60:00 20034 9674 imp -1 310410214827503 5944 04/14/20 17:04:26 60:00 0 Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 243 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002887 not for general distribution. EF-EA_00116963 EFTA01251487 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in (ITC. .i.%•-. `a.7ri AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytes( Apn Dn IN= INSI ten MODEL 5945 04/14/20 18:02:02 60:00 8604 3664 ims -1 310410214827503 5946 04/14/20 18:04:26 4:28 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5947 04/14/20 18:08:54 7:52 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5948 04/14/20 18:16:45 5:27 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5949 04/14/20 18:16:46 5:27 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5950 04/14/20 18:22:13 3:03 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 5951 04/14/20 18:25:16 2:03 288 Onmtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 5952 04/14/20 18:25:17 2:03 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5953 04/14/20 18:27:20 5:05 0 OruMgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5954 04/14/20 18:32:24 2:03 192 OruMgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5955 04/14/20 18:32:25 2:03 0 OruMgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5956 04/14/20 18:34:28 60:00 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5957 04/14/20 19:02:02 60:00 10408 3376 ins -1 310410214827503 5958 04/14/20 19:34:28 2:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 5959 04/14/20 19:36:56 2:09 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 5960 04/14/20 19:36:57 2:09 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 5961 04/14/20 19:39:06 7:13 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5962 04/14/20 19:46:18 2:04 192 OruMgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5963 04/14/20 19:46:20 2:03 0 OruMgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5964 04/14/20 19:48:23 17:27 0 OruMgonpho no 3587080982063726 310410214827503 APPLE !PHONES 5965 04/14/20 20:02:02 18:54 5304 1696 imp -1 310410214827503 5966 04/14/20 20:05:50 2:03 192 OruMgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 244 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002888 not for general distribution. EFTA 00116964 EFTA01251488 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. .....,.• ••-"st `'s AT&T Run Oato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn INCI IMSI NUM 5967 04/14/20 20:05:51 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 5968 04/14/20 20:07:54 11:36 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5969 04/14/20 20:19:29 4:44 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5970 04/14/20 20:19:30 4:43 6244 6666 imp 3587080982063726 310410214827503 APPLE 5971 04/14/20 20:19:30 4:44 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5972 04/14/20 20:19:31 4:43 6666 6088 imp 3587080982063726 310410214827503 APPLE 5973 04/14/20 20:20:56 10:30 8209 6232 imp -1 310410214827503 5974 04/14/20 20:24:14 28:09 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5975 04/14/20 20:24:15 28:08 6674 5980 imp 3587080982063726 310410214827503 APPLE 5976 04/14/20 20:52:22 8:08 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5977 04/14/20 20:52:24 2:53 6318 8080 imp 3587080982063726 310410214827503 APPLE 5978 04/14/20 20:52:24 8:07 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5979 04/14/20 20:52:25 2:54 8080 6054 imp 3587080982063726 310410214827503 APPLE 5980 04/14/20 20:52:46 2:33 11634 6729 imp -1 310410214827503 5981 04/14/20 20:55:17 5:13 6264 6672 imp 3587080982063726 310410214827503 APPLE 5982 04/14/20 20:55:18 5:13 6672 6000 imp 3587080982063726 310410214827503 APPLE 5983 04/14/20 21:00:31 9:47 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5984 04/14/20 21:00:34 9:44 8784 8084 imp 3587080982063726 310410214827503 APPLE 5985 04/14/20 21:10:17 14:25 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5986 04/14/20 21:10:18 0:23 7335 8926 imp 3587080982063726 310410214827503 APPLE 5987 04/14/20 21:10:18 14:25 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 5988 04/14/20 21:10:19 0:23 8818 7071 imp 3587080982063726 310410214827503 APPLE 5989 04/14/20 21:10:38 0:04 2569 1211 imp -1 310410214827503 5990 04/14/20 21:10:40 4:21 6450 6674 imp 3587080982063726 310410214827503 APPLE 5991 04/14/20 21:10:42 4:20 6674 6186 imp 3587080982063726 310410214827503 APPLE 5992 04/14/20 21:11:03 0:01 0 0 imp -1 310410214827503 5993 04/14/20 21:11:31 13:11 6478 6848 imp 3587080982063726 310410214827503 APPLE 5994 04/14/20 21:11:32 13:11 6784 6214 imp 3587080982063726 310410214827503 APPLE 5995 04/14/20 21:15:01 11:20 8209 6119 ins 3587080982063726 310410214827503 APPLE MODEL IPHONZ8 IPHOME8 !PHONES !PHONES IPRONE8 IPRONE8 !PHONES !PRONGS !PHONES IPRONE8 IPRONE8 !PHONES !PHONES !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 245 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002889 NT-3AL not for general distribution. EF-EA_00116965 EFTA01251489 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. AT&T Run Data: Run Tina: Data Usage Tor: Item Conn. Data 06/17/2020 iiiiiIIIII Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INZI IMSI MAKE 5996 04/14/20 21:24:43 60:00 0 0 natgenpho no 3587080982063726 310410214827503 APPLE 5997 04/14/20 21:26:21 25:20 2768 1340 ims 3587080982063726 310410214827503 APPLE 5998 04/14/20 21:26:21 25:20 2704 1340 ims 3587080982063726 310410214827503 APPLE 5999 04/14/20 21:51:41 40:52 6864 2912 ims 3587080982063726 310410214827503 APPLE 6000 04/14/20 22:24:43 60:00 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 6001 04/14/20 22:27:13 19:15 6670 5979 ims 3587080982063726 310410214827503 APPLE 6002 04/14/20 22:46:28 1:00 14920 9248 ims 3587080982063726 310410214827503 APPLE 6003 04/14/20 22:47:44 0:33 9726 6322 ims 3587080982063726 310410214827503 APPLE 6004 04/14/20 22:48:17 17:59 5072 2448 ims 3587080982063726 310410214827503 APPLE 6005 04/14/20 23:06:16 10:35 4540 5060 ims 3587080982063726 310410214827503 APPLE 6006 04/14/20 23:16:51 13:42 4964 1788 ims 3587080982063726 310410214827503 APPLE 6007 04/14/20 23:24:43 54:18 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 6008 04/14/20 23:30:33 0:34 11432 9252 ims 3587080982063726 310410214827503 APPLE 6009 04/14/20 23:31:07 20:39 3532 1432 ims 3587080982063726 310410214827503 APPLE 6010 04/14/20 23:51:46 27:15 7680 3944 ims 3587080982063726 310410214827503 APPLE 6011 04/15/20 00:19:00 2:33 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6012 04/15/20 00:19:01 2:33 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 6013 04/15/20 00:19:03 8:32 8209 6124 ims -1 310410214827503 6014 04/15/20 00:21:33 5:58 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6015 04/15/20 00:21:34 5:58 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6016 04/15/20 00:27:32 33:55 192 Ormtgenpho no 3587080982063726 310410214827503 APPLE 6017 04/15/20 00:27:33 28:02 7373 6800 ims 3587080982063726 310410214827503 APPLE 6018 04/15/20 00:27:33 33:55 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 6019 04/15/20 00:27:34 28:03 6800 7109 ims 3587080982063726 310410214827503 APPLE 6020 04/15/20 00:28:44 32:17 10165 7589 ins -1 310410214827503 6021 04/15/20 00:55:35 5:52 7156 6856 ims 3587080982063726 310410214827503 APPLE 6022 04/15/20 00:55:36 5:52 6748 6892 ims 3587080982063726 310410214827503 APPLE 6023 04/15/20 01:01:28 5:02 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 6024 04/15/20 01:01:30 5:00 8082 6922 ims 3587080982063726 310410214827503 APPLE MODEL !PHONES 1PHONG8 !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 246 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002890 NeTniliAL not for general distribution. EFTAJVII6966 EFTA01251490 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. tr""adses AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apn Dn INLI IMBI MARL MOLL 6025 04/15/20 01:06:29 8:19 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6026 04/15/20 01:06:30 8:18 6243 6666 ims 3587080982063726 310410214827503 APPLE 'PHONES 6027 04/15/20 01:06:30 8:19 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6028 04/15/20 01:06:31 8:18 6666 5979 ims 3587080982063726 310410214827503 APPLE 'PHONES 6029 04/15/20 01:14:49 33:25 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6030 04/15/20 01:14:52 10:41 9040 7288 ims 3587080982063726 310410214827503 APPLE 'PHONES 6031 04/15/20 01:25:33 12:45 3640 1432 ims 3587080982063726 310410214827503 APPLE !PHONES 6032 04/15/20 01:41:05 23:27 10067 6600 ims -1 310410214827503 6033 04/15/20 01:48:13 14:46 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6034 04/15/20 01:48:14 14:46 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6035 04/15/20 02:03:00 21:22 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6036 04/15/20 02:03:04 5:16 8884 7068 ims 3587080982063726 310410214827503 APPLE 'PHONES 6037 04/15/20 02:08:20 27:47 3764 1448 ims 3587080982063726 310410214827503 APPLE 'PHONES 6038 04/15/20 02:24:21 11:46 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6039 04/15/20 02:24:22 11:46 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6040 04/15/20 02:36:08 20:20 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6041 04/15/20 02:36:12 7:44 8902 7088 ims 3587080982063726 310410214827503 APPLE !PHONES 6042 04/15/20 02:43:56 0:08 8528 6192 ims 3587080982063726 310410214827503 APPLE 'PHONES 6043 04/15/20 02:44:47 19:04 8189 6014 ims -1 310410214827503 6044 04/15/20 02:56:27 2:13 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6045 04/15/20 02:56:28 2:13 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6046 04/15/20 02:58:40 6:04 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6047 04/15/20 02:58:42 6:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6048 04/15/20 03:03:33 1:11 6261 7424 ims 3587080982063726 310410214827503 APPLE !PHONES 6049 04/15/20 03:03:34 1:11 6676 5997 ims 3587080982063726 310410214827503 APPLE 'PHONES 6050 04/15/20 03:03:51 14:19 9423 6373 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 247 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002891 MT V& not for general distribution. EF-EA_00116967 EFTA01251491 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Elmo: Data Usage For: Item Conn. Data 06/17/2020 18:56:01 Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn Dn INEI IMBI MARL 6051 04/15/20 03:04:45 33:51 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6052 04/15/20 03:27:10 3:06 8084 6944 ins 3587080982063726 310410214827503 APPLE 6053 04/15/20 03:30:16 60:00 13336 4684 ipso 3587080982063726 310410214827503 APPLE 6054 04/15/20 03:38:35 57:12 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6055 04/15/20 03:38:36 57:12 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6056 04/15/20 04:30:16 60:00 8496 3020 ipso 3587080982063726 310410214827503 APPLE 6057 04/15/20 04:35:48 58:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6058 04/15/20 05:30:16 60:00 3208 1216 ipso 3587080982063726 310410214827503 APPLE 6059 04/15/20 06:06:55 59:56 24940 9938 ipso -1 310410214827503 6060 04/15/20 06:30:16 60:00 0 0 ipso 3587080982063726 310410214827503 APPLE 6061 04/15/20 07:12:07 60:00 21084 9390 ipso -1 310410214827503 6062 04/15/20 07:30:16 60:00 0 0 ins 3587080982063726 310410214827503 APPLE 6063 04/15/20 08:12:07 60:00 6800 2756 ins -1 310410214827503 6064 04/15/20 08:16:08 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6065 04/15/20 08:16:09 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6066 04/15/20 08:18:13 2:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6067 04/15/20 08:20:18 1:22 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6068 04/15/20 08:20:19 1:22 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6069 04/15/20 08:21:41 18:55 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6070 04/15/20 08:30:16 60:00 0 0 ins 3587080982063726 310410214827503 APPLE 6071 04/15/20 08:40:36 32:10 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6072 04/15/20 08:40:37 32:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6073 04/15/20 09:12:07 60:00 9960 3144 ins -1 310410214827503 6074 04/15/20 09:12:47 2:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6075 04/15/20 09:14:56 32:32 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL IPHONEB IPMONE8 IPMONE8 IPMONEB IPMONEB IPMONEB IPHONEB IPMONEB IPMONE8 IPMONE8 IPHONEB IPHONEB IPMONEB IPMONEB IPMONEB IPHONEB IPMONEB IPHONEB IPMONEB IPMONEB IPMONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 248 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002892 NeTifikE not for general distribution. EF-EA_00116968 EFTA01251492 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 4111. cs`""eoss' AT&T Run pato: Run Time: Data Osage for: Item Conn. Date 06/17/2020 Conn. Originating Cr Time Number (OTC) Bytes UP Byte. Apn Dn IKE I INSI MARL NICOLL 6076 04/15/20 09:14:57 32:32 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 6077 04/15/20 09:30:16 9:51 0 0 los 3587080982063726 310410214827503 APPLE IPHONEB 6078 04/15/20 09:47:29 15:58 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 6079 04/15/20 10:03:26 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6080 04/15/20 10:03:27 2:04 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6081 04/15/20 10:05:31 9:37 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6082 04/15/20 10:12:07 60:00 9960 3036 ins -1 310410214827503 6083 04/15/20 10:15:07 2:03 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6084 04/15/20 10:15:08 2:03 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6085 04/15/20 10:17:11 51:15 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6086 04/15/20 11:08:26 27:15 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6087 04/15/20 11:08:26 27:16 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6088 04/15/20 11:12:07 60:00 8496 2896 ism -1 310410214827503 6089 04/15/20 11:35:42 23:11 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6090 04/15/20 11:58:52 9:20 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6091 04/15/20 11:58:53 9:20 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6092 04/15/20 12:08:13 32:41 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6093 04/15/20 12:12:07 60:00 12012 4396 ism -1 310410214827503 6094 04/15/20 12:40:53 2:13 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6095 04/15/20 12:40:54 2:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6096 04/15/20 12:43:07 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6097 04/15/20 12:43:34 22:29 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002893 not for general distribution. Page 249 EFTA_00I 16969 EFTA01251493 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 1....,,,,sf 4/""—se AT&T Run Data: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Op Byte. Apn Dn IN= IMSI MARL MOLL 6098 04/15/20 13:06:02 2:03 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6099 04/15/20 13:06:03 2:03 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6100 04/15/20 13:08:06 12:43 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6101 04/15/20 13:12:07 60:00 11888 4436 was -1 310410214827503 6102 04/15/20 13:20:48 8:14 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6103 04/15/20 13:20:49 8:14 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6104 04/15/20 13:29:03 11:54 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6105 04/15/20 13:40:56 7:46 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6106 04/15/20 13:40:57 7:46 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6107 04/15/20 13:48:43 4:52 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6108 04/15/20 13:53:34 9:51 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6109 04/15/20 13:53:35 9:51 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6110 04/15/20 14:03:26 35:03 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6111 04/15/20 14:12:07 60:00 6908 2880 isms -1 310410214827503 6112 04/15/20 14:38:29 7:10 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6113 04/15/20 14:45:38 0:50 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6114 04/15/20 14:45:39 0:50 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6115 04/15/20 14:46:30 2:48 0 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6116 04/15/20 14:49:18 13:09 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6117 04/15/20 14:49:19 13:09 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 6118 04/15/20 15:02:28 2:01 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 250 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002894 not for general distribution. EFTA_00I 16970 EFTA01251494 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in AT&T Run Date: Run Time: Data Usage for: Itea Cows. Date 06/17/2020 18:56:01 Conn. Time (UTC) Originating Hunter ET Bytes UP Byte. Apn Dn INSI NUM 6119 04/15/20 15:04:28 8:17 192 OruMgonpho no 3587080982063726 310410214827503 APPLE 6120 04/15/20 15:04:30 8:16 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6121 04/15/20 15:12:07 41:27 8388 3004 ins 3587080982063726 310410214827503 APPLE 6122 04/15/20 15:12:46 3:22 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6123 04/15/20 15:16:09 20:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6124 04/15/20 15:16:10 35:10 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6125 04/15/20 15:51:20 3:30 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6126 04/15/20 15:53:34 1:16 19736 2324 ims 3587080982063726 310410214827503 APPLE 6127 04/15/20 15:53:34 1:16 3388 2324 ims 3587080982063726 310410214827503 APPLE 6128 04/15/20 15:54:49 23:05 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6129 04/15/20 15:54:50 23:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6130 04/15/20 15:54:50 12:52 6334 6856 ims 3587080982063726 310410214827503 APPLE 6131 04/15/20 15:54:51 12:52 6856 6070 ims 3587080982063726 310410214827503 APPLE 6132 04/15/20 16:06:56 0:51 9065 6460 ims -1 310410214827503 6133 04/15/20 16:07:39 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 6134 04/15/20 16:07:46 4:11 6245 6674 ims 3587080982063726 310410214827503 APPLE 6135 04/15/20 16:07:47 4:11 6674 5981 ims 3587080982063726 310410214827503 APPLE 6136 04/15/20 16:16:14 29:08 20553 13524 ims -1 310410214827503 6137 04/15/20 16:17:55 5:13 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6138 04/15/20 16:23:07 14:51 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6139 04/15/20 16:23:08 14:51 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6140 04/15/20 16:37:59 11:35 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6141 04/15/20 16:47:33 2:01 11986 13222 ins 3587080982063726 310410214827503 APPLE 6142 04/15/20 16:49:34 15:07 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6143 04/15/20 16:49:35 15:06 7328 7652 ims 3587080982063726 310410214827503 APPLE 6144 04/15/20 16:49:35 15:07 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002895 NeTniiiikE not for general distribution. Page 251 EF-EA_00116971 EFTA01251495 MOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 LL:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tt‘"I°e#ad AT&T Run Date: Run Tame: Data Usage Tor: Item Conn. Date 06/17/2020 18:56:01 Conn. Time (UTC) originating Number ET Bytes Up Bytes Apn Dn INSI MAKE NADEL 6145 04/15/20 16:49:36 15:06 7544 6976 imp 3587080982063726 310410214827503 APPLE !PHONES 6146 04/15/20 17:04:42 16:57 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6147 04/15/20 17:04:45 15:37 8338 8030 ims 3587080982063726 310410214827503 APPLE !PHONES 6148 04/15/20 17:07:39 18:46 0 .0 ims 3587080982063726 310410214827503 APPLE 'PHONES 6149 04/15/20 17:20:22 8:34 3532 1432 ims 3587080982063726 310410214827503 APPLE 'PHONES 6150 04/15/20 17:21:38 8:17 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6151 04/15/20 17:21:39 8:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6152 04/15/20 17:26:24 3:31 6333 50190 ims 3587080982063726 310410214827503 APPLE !PHONES 6153 04/15/20 17:26:25 3:31 6670 5981 ims 3587080982063726 310410214827503 APPLE !PHONES 6154 04/15/20 17:28:56 17:03 8263 6198 ims -1 310410214827503 6155 04/15/20 17:29:56 24:29 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6156 04/15/20 17:41:23 13:02 8058 6034 ims 3587080982063726 310410214827503 APPLE !PHONES 6157 04/15/20 17:54:24 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6158 04/15/20 17:54:25 2:02 6952 6512 ims 3587080982063726 310410214827503 APPLE !PHONES 6159 04/15/20 17:54:25 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6160 04/15/20 17:54:26 2:02 6404 6688 ims 3587080982063726 310410214827503 APPLE 'PHONES 6161 04/15/20 17:56:28 8:49 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6162 04/15/20 17:56:29 8:48 7732 6246 ims 3587080982063726 310410214827503 APPLE 'PHONES 6163 04/15/20 18:05:16 2:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6164 04/15/20 18:05:17 2:03 6458 7494 ims 3587080982063726 310410214827503 APPLE !PHONES 6165 04/15/20 18:05:17 2:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6166 04/15/20 18:05:18 2:03 7494 6194 ims 3587080982063726 310410214827503 APPLE !PHONES 6167 04/15/20 18:07:21 0:05 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6168 04/15/20 18:07:37 51:27 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6169 04/15/20 18:07:40 45:14 11412 7607 ims 3587080982063726 310410214827503 APPLE 'PHONES 6170 04/15/20 18:52:54 27:01 3548 2524 ims 3587080982063726 310410214827503 APPLE 'PHONES 6171 04/15/20 18:59:03 8:16 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 252 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002896 NTifikE not for general distribution. EFTA 00116972 EFTA01251496 MOBILITY The information contained her is 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. 41111P AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Hunter ET Bytes Op Byte. Apn On 'NCI IMSI HUM 6172 04/15/20 18:59:05 8:15 0 Onxtgonpho 3587080982063726 310410214827503 APPLE 6173 04/15/20 19:07:20 0:36 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 6174 04/15/20 19:07:56 2:03 192 Ormagonpho no 3587080982063726 310410214827503 APPLE 6175 04/15/20 19:07:57 2:03 0 Ormagonpho no 3587080982063726 310410214827503 APPLE 6176 04/15/20 19:10:00 7:55 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6177 04/15/20 19:17:33 60:00 16873 9324 imp -1 310410214827503 6178 04/15/20 19:17:54 2:09 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 6179 04/15/20 19:17:55 2:09 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 6180 04/15/20 19:20:05 60:00 0 Ormagonpho no 3587080982063726 310410214827503 APPLE 6181 04/15/20 20:17:33 60:00 10376 3268 imp -1 310410214827503 6182 04/15/20 20:20:05 3:36 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 6183 04/15/20 20:23:40 6:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6184 04/15/20 20:23:41 6:04 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 6185 04/15/20 20:29:45 57:39 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 6186 04/15/20 21:17:33 55:02 16772 9188 imp -1 310410214827503 6187 04/15/20 21:27:23 35:36 192 Ormagonpho no 3587080982063726 310410214827503 APPLE 6188 04/15/20 21:27:24 35:36 0 Ormagonpho no 3587080982063726 310410214827503 APPLE 6189 04/15/20 22:03:00 13:02 0 Ormagonpho no 3587080982063726 310410214827503 APPLE 6190 04/15/20 22:07:09 0:00 0 0 imp 3587080982063726 310410214827503 APPLE 6191 04/15/20 22:10:27 60:00 39452 25378 imp -1 310410214827503 6192 04/15/20 22:16:01 37:38 192 Onatgonpho no 3587080982063726 310410214827503 APPLE 6193 04/15/20 22:16:02 37:38 0 Onatgonpho no 3587080982063726 310410214827503 APPLE 6194 04/15/20 22:53:40 1:14 0 Onatgonpho no 3587080982063726 310410214827503 APPLE MODEL IPMONEB IPMONEB IPMONEB IPMONEB IPHOME8 IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPHOME8 IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 253 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002897 PIETIAL not for general distribution. EF-EA_00116973 EFTA01251497 MOBILITY The information contained her is 6195 04/15/20 22:54:00 0:29 4811 6196 04/15/20 22:54:53 28:10 192 6197 04/15/20 22:54:54 28:10 0 6198 04/15/20 23:06:36 25:23 5201114 6199 04/15/20 23:10:27 60:00 16484 6200 04/15/20 23:23:03 3:39 192 6201 04/15/20 23:23:04 3:39 0 6202 04/15/20 23:26:43 1:53 0 6203 04/15/20 23:28:35 3:42 192 6204 04/15/20 23:28:36 3:42 0 6205 04/15/20 23:32:18 7:25 0 6206 04/15/20 23:39:42 13:51 192 6207 04/15/20 23:39:43 13:51 0 6208 04/15/20 23:53:34 34:44 192 6209 04/15/20 23:53:35 34:44 0 6210 04/16/20 00:10:27 60:00 10036 6211 04/16/20 00:28:19 1:10 0 6212 04/16/20 00:29:28 9:34 192 6213 04/16/20 00:29:29 9:34 0 6214 04/16/20 00:39:03 28:34 0 6215 04/16/20 01:07:36 2:10 192 6216 04/16/20 01:07:38 2:09 0 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in t—`-'assti AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Originating ET Bytes Bytes Apn ENE' IMEI MARL MODEL Data Time Number Up Dn (UTC) 18287 imo -1 310410214827503 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4269382 imo -1 310410214827503 15256 imo -1 310410214827503 Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Onxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Oruftgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 3408 ims -1 310410214827503 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 0 nxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no 0 nxtgenpho 3587080982063726 310410214827503 APPLE !PRONGS no Onxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no Onxtgenpho 3587080982063726 310410214827503 APPLE 1PRONE8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 254 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002898 NT4Ask not for general distribution. EFTA_OOI 16974 EFTA01251498 MOBILITY The information contained hereleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tra`s a d. AT&T Run Date: Run Time: Data Osage for: Item Conn. Date 06/17/2020 18:56:02 Conn. originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INLI IMSI MAKE MOLL 6217 04/16/20 01:09:46 33:55 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 6218 04/16/20 01:10:27 60:00 6956 2788 ims -1 310410214827503 6219 04/16/20 01:43:40 1:07 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPMC4428 6220 04/16/20 01:43:41 1:07 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 6221 04/16/20 01:44:48 24:29 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 6222 04/16/20 02:09:16 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6223 04/16/20 02:09:17 2:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6224 04/16/20 02:10:27 60:00 12260 4516 ins -1 310410214827503 6225 04/16/20 02:11:21 14:40 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6226 04/16/20 02:26:00 2:04 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPROME8 6227 04/16/20 02:26:01 2:04 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6228 04/16/20 02:28:05 27:57 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6229 04/16/20 02:56:02 0:40 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 6230 04/16/20 02:56:03 0:40 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 6231 04/16/20 02:56:42 58:17 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 6232 04/16/20 03:10:27 60:00 10272 4288 ins -1 310410214827503 6233 04/16/20 04:10:27 60:00 8496 3036 ins -1 310410214827503 6234 04/16/20 05:10:27 60:00 6956 2804 ins -1 310410214827503 6235 04/16/20 05:47:48 6:10 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6236 04/16/20 05:53:58 20:47 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 6237 04/16/20 05:53:59 20:47 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 6238 04/16/20 06:10:27 60:00 14892 4764 was -1 310410214827503 6239 04/16/20 06:14:46 1:49 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 255 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002899 NTroliAL not for general distribution. EFTA_00I 16975 EFTA01251499 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Osage Tor: Iton cone. Date 06/17/2020 18:56:02 Conn. Originating ET Time Number (UTC) Bytes Up Byte. ape Dn INEI MIDI MUT 6240 04/16/20 06:16:34 1:35 192 Onxtgenpho no 3587080982063726 310410214827503 APPLE 6241 04/16/20 06:16:36 1:34 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6242 04/16/20 06:18:10 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6243 04/16/20 07:10:27 60:00 6956 2788 ims -1 310410214827503 6244 04/16/20 07:18:10 59:18 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6245 04/16/20 08:10:27 60:00 10272 4180 ims -1 310410214827503 6246 04/16/20 08:17:27 1:30 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6247 04/16/20 08:17:28 1:30 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6248 04/16/20 08:18:58 19:37 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6249 04/16/20 08:38:34 1:41 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6250 04/16/20 08:38:35 1:41 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6251 04/16/20 08:40:16 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6252 04/16/20 09:10:27 60:00 13352 4516 ims -1 310410214827503 6253 04/16/20 09:40:16 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6254 04/16/20 10:10:27 60:00 8388 2928 ims -1 310410214827503 6255 04/16/20 10:40:16 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6256 04/16/20 11:10:27 60:00 7064 2788 ims -1 310410214827503 6257 04/16/20 11:40:16 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6258 04/16/20 12:10:27 60:00 8604 3036 ims -1 310410214827503 6259 04/16/20 12:40:16 0:00 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE 6260 04/16/20 12:40:18 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6261 04/16/20 13:10:27 60:00 13444 4676 ins -1 310410214827503 6262 04/16/20 13:40:18 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 6263 04/16/20 14:10:27 60:00 13568 4516 ims -1 310410214827503 ISDDEL IPHONE8 IPHONE8 !PHONES !PHONES !PHONES !PHONES IPRONE8 IPRONE8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 256 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002900 NTroliAL not for general distribution. EFTA_00116976 EFTA01251500 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ap. ....,,,• ••—s" -e AT&T Run Date: Run Time: Data Osage For: 06/17/2020 21.‘K.A1 Item Conn. Conn. Date Time Originating CT Bytes Bytom Apn INLI IMSI MUM MOLL Number Up Dn (OTC) 6264 04/16/20 14:40:18 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 6265 04/16/20 15:10:27 55:27 6956 2788 ims -1 310410214827503 6266 04/16/20 15:40:18 25:06 0 Oruftgonpho no 3587080982063726 310410214827503 6267 04/16/20 16:05:23 2:23 192 0 nxtgonpho no 3587080982063726 310410214827503 6268 04/16/20 16:05:25 2:21 7268 6900 ims 3587080982063726 310410214827503 6269 04/16/20 16:05:25 2:23 0 0 nxtgonpho no 3587080982063726 310410214827503 6270 04/16/20 16:05:26 2:22 6792 7004 ims 3587080982063726 310410214827503 6271 04/16/20 16:05:54 0:01 0 0 imp -1 310410214827503 6272 04/16/20 16:06:16 1:30 6386 7468 imp 3587080982063726 310410214827503 6273 04/16/20 16:06:17 1:31 7404 6122 imp 3587080982063726 310410214827503 6274 04/16/20 16:07:47 2:18 0 Oruftgonpho no 3587080982063726 310410214827503 6275 04/16/20 16:07:49 2:16 8400 7968 imp 3587080982063726 310410214827503 6276 04/16/20 16:10:04 4:37 192 Oruftgonpho no 3587080982063726 310410214827503 6277 04/16/20 16:10:05 4:36 6335 6668 imp 3587080982063726 310410214827503 6278 04/16/20 16:10:05 4:37 0 Oruftgonpho no 3587080982063726 310410214827503 6279 04/16/20 16:10:06 4:36 6668 6071 imp 3587080982063726 310410214827503 6280 04/16/20 16:11:02 60:00 21113 10326 imp -1 310410214827503 6281 04/16/20 16:14:42 60:00 0 Oruftgonpho no 3587080982063726 310410214827503 6282 04/16/20 17:11:02 60:00 6956 2680 imp -1 310410214827503 6283 04/16/20 17:14:42 19:04 0 Oruftgonpho no 3587080982063726 310410214827503 6284 04/16/20 17:33:46 18:29 192 Oruftgonpho no 3587080982063726 310410214827503 6285 04/16/20 17:33:46 18:30 0 Oruftgonpho no 3587080982063726 310410214827503 6286 04/16/20 17:52:15 6:37 192 Oruftgonpho no 3587080982063726 310410214827503 6287 04/16/20 17:52:16 6:37 0 Oruftgonpho no 3587080982063726 310410214827503 6288 04/16/20 17:58:53 19:47 0 Oruftgonpho no 3587080982063726 310410214827503 6289 04/16/20 18:11:02 39:36 3424 1340 imp -1 310410214827503 AT&T Proprietary APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PRONGS APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE IPROME8 APPLE !PRONGS The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 257 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is SDNY_GM_ 00002901 NaTtAdti not for general distribution. EFTA_OOI 16977 EFTA01251501 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ....,,,, ••-•°"" a AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn Der IM3I MOLL 6290 04/16/20 18:18:39 2:20 192 0 nmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6291 04/16/20 18:18:40 2:20 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6292 04/16/20 18:21:00 29:34 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6293 04/16/20 18:50:33 2:51 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6294 04/16/20 18:50:34 2:51 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6295 04/16/20 18:50:36 2:48 8152 7618 meg 3587080982063726 310410214827503 APPLE !PROMS 6296 04/16/20 18:50:37 2:48 7550 7888 men 3587080982063726 310410214827503 APPLE !PROMS 6297 04/16/20 18:53:25 22:32 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 6298 04/16/20 18:53:29 60:00 16933 9322 men -1 310410214827503 6299 04/16/20 19:15:56 2:03 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6300 04/16/20 19:15:57 2:03 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6301 04/16/20 19:18:00 55:48 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 6302 04/16/20 19:53:29 60:00 9928 3176 men -1 310410214827503 6303 04/16/20 20:13:47 1:51 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 6304 04/16/20 20:13:48 1:51 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 6305 04/16/20 20:15:39 5:31 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6306 04/16/20 20:21:09 3:19 192 Onmtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 6307 04/16/20 20:21:10 3:19 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6308 04/16/20 20:24:29 7:26 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6309 04/16/20 20:31:55 29:30 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6310 04/16/20 20:53:29 60:00 12260 4576 imp -1 310410214827503 6311 04/16/20 21:01:24 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PROMS 6312 04/16/20 21:01:25 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 258 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002902 not for general distribution. EF-EA_00116978 EFTA01251502 MOBILITY The information contained her is 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00nm to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 41011, AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 18:56:02 Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn On INC' IMBI MARL MODEL 6313 04/16/20 21:03:28 3:29 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6314 04/16/20 21:06:56 14:30 192 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6315 04/16/20 21:06:57 14:30 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6316 04/16/20 21:21:27 0:54 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6317 04/16/20 21:22:20 2:17 192 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6318 04/16/20 21:22:21 2:17 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6319 04/16/20 21:24:38 0:05 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6320 04/16/20 21:24:56 9:39 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6321 04/16/20 21:34:34 8:20 192 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6322 04/16/20 21:34:36 8:19 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6323 04/16/20 21:42:55 0:55 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6324 04/16/20 21:43:50 8:20 192 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6325 04/16/20 21:43:51 8:20 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6326 04/16/20 21:52:11 9:10 0 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6327 04/16/20 21:53:29 9:05 0 0 imp -1 310410214827503 6328 04/16/20 22:01:21 21:51 192 0 natTanpho no 3587080982063726 310410214827503 APPLE 'PHONES 6329 04/16/20 22:01:22 21:52 0 0 nottgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6330 04/16/20 22:07:21 15:51 18152 16510 imp 3587080982063726 310410214827503 APPLE 'PHONES 6331 04/16/20 22:07:22 15:51 16442 17888 imp 3587080982063726 310410214827503 APPLE 'PHONES 6332 04/16/20 22:15:08 0:21 9096 0 imp 3587080982063726 310410214827503 APPLE 'PHONES 6333 04/16/20 22:15:09 0:21 0 9096 imp 3587080982063726 310410214827503 APPLE !PHONES 6334 04/16/20 22:23:13 1:29 0 0 nactgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6335 04/16/20 22:23:20 50:27 19231 15535 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 259 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002903 not for general distribution. EFTA_OOI 16979 EFTA01251503 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4111. ....,,,• ••—s`"I e AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time Originating LT Bytes Bytoa Apn INEZ Number Up Dn INBI MARL NICOLL (OTC) 6336 04/16/20 22:24:41 2:11 192 0 nxtgenpho no 3587080982063726 310410214827503 6337 04/16/20 22:24:44 2:09 0 Oruftgenpho no 3587080982063726 310410214827503 6338 04/16/20 22:26:53 1:11 0 Oruftgenpho no 3587080982063726 310410214827503 6339 04/16/20 22:28:03 2:09 192 Oruftgenpho no 3587080982063726 310410214827503 6340 04/16/20 22:28:05 2:09 0 Oruftgenpho no 3587080982063726 310410214827503 6341 04/16/20 22:30:14 1:44 0 Oruftgenpho no 3587080982063726 310410214827503 6342 04/16/20 22:31:48 0:11 1003 5372 nxtgenpho no -1 310410214827503 6343 04/16/20 22:31:57 2:04 192 Oruftgenpho no 3587080982063726 310410214827503 6344 04/16/20 22:31:58 2:04 0 Oruftgenpho no 3587080982063726 310410214827503 6345 04/16/20 22:34:02 16:17 0 Onatgenpho no 3587080982063726 310410214827503 6346 04/16/20 22:50:18 9:04 192 0 nxtgenpho no 3587080982063726 310410214827503 6347 04/16/20 22:50:19 9:04 0 Oruftgenpho no 3587080982063726 310410214827503 6348 04/16/20 22:59:22 1:09 192 Oruftgenpho no 3587080982063726 310410214827503 6349 04/16/20 22:59:23 1:09 0 Oruftgenpho no 3587080982063726 310410214827503 6350 04/16/20 22:59:58 0:35 4807 34708 nxtgenpho no -1 310410214827503 6351 04/16/20 23:00:31 0:56 192 Oruftgenpho no 3587080982063726 310410214827503 6352 04/16/20 23:00:32 0:56 0 Oruftgenpho no 3587080982063726 310410214827503 6353 04/16/20 23:01:28 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 6354 04/16/20 23:08:27 42:36 9266 7303 ims 3587080982063726 310410214827503 6355 04/16/20 23:51:03 24:33 3748 1664 ims 3587080982063726 310410214827503 6356 04/17/20 00:01:28 27:44 0 Oruftgenpho no 3587080982063726 310410214827503 6357 04/17/20 00:15:36 0:58 2644 1324 imam 3587080982063726 310410214827503 APPLE IPHONZ8 APPLE IPHOME8 APPLE !PHONES APPLE !PRONGS APPLE IPROME8 APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE 1PROME8 APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 260 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002904 NsToliAL not for general distribution. EFTA_00I 16980 EFTA01251504 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in • AT&T Run pato: Run Tina: Data Osage For: 06/17/2020 18:56:02 Itea Conn. Conn. Data Time (OTC) Originating Number ET Bytes Byte. Ann Up Dn 6358 04/17/20 00:16:34 60:00 24032 6359 04/17/20 00:28:44 0:12 9796 6360 04/17/20 00:29:11 2:04 192 6361 04/17/20 00:29:12 2:05 0 6362 04/17/20 00:31:16 60:00 0 6363 04/17/20 01:16:34 60:00 14512 6364 04/17/20 01:31:16 28:19 0 6365 04/17/20 01:54:16 42:00 6204486 6366 04/17/20 01:59:33 1:39 192 6367 04/17/20 01:59:35 1:38 0 6368 04/17/20 02:01:13 1:08 0 6369 04/17/20 02:02:20 2:03 192 6370 04/17/20 02:02:21 2:03 0 6371 04/17/20 02:04:24 4:04 0 6372 04/17/20 02:08:27 2:04 192 6373 04/17/20 02:08:28 2:04 0 6374 04/17/20 02:10:32 2:52 0 6375 04/17/20 02:13:23 14:17 192 6376 04/17/20 02:13:24 14:17 0 6377 04/17/20 02:16:34 60:00 6224 6378 04/17/20 02:27:41 60:00 0 6379 04/17/20 02:51:19 0:00 0 6380 04/17/20 02:51:29 60:00 21442 6381 04/17/20 03:16:34 60:00 0 INEI INSI MAKE NODEL 13612 imp 3587080982063726 310410214827503 APPLE 'PHONES 20982 imp 3587080982063726 310410214827503 APPLE 'PHONES 0 naftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 0 naftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 8752 imp 3587080982063726 310410214827503 APPLE 'PHONES Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 8118640 imp 3587080982063726 310410214827503 APPLE !PHONES Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no Onaftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Onaftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no Onaftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 2920 imp 3587080982063726 310410214827503 APPLE 'PHONES Onaftgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 0 ins 3587080982063726 310410214827503 APPLE !PHONES 9856 ins -1 310410214827503 0 ins 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 261 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002905 NT4AL not for general distribution. EF-EAJVII6981 EFTA01251505 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. tr""s a I.d AT&T Run pato: Run Time: Data Osage for: Itea Conn. Date 06/17/2020 18:56:02 Conn. Time (UTC) originating Minter ET Bytes Up Bytea Apn Dn INEI IMSI NAME MODEL 6382 04/17/20 03:27:41 24:51 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6383 04/17/20 03:51:29 60:00 8388 2896 ins -1 310410214827503 6384 04/17/20 03:52:31 2:24 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6385 04/17/20 03:52:32 2:24 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6386 04/17/20 03:54:55 6:03 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6387 04/17/20 03:54:56 6:03 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6388 04/17/20 04:01:00 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6389 04/17/20 04:16:34 60:00 0 0 las 3587080982063726 310410214827503 APPLE IPHONZ8 6390 04/17/20 04:51:29 60:00 7440 3236 lens -1 310410214827503 6391 04/17/20 05:01:00 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6392 04/17/20 05:16:34 60:00 0 0 lens 3587080982063726 310410214827503 APPLE !PROMS 6393 04/17/20 05:51:29 60:00 10020 3268 las -1 310410214827503 6394 04/17/20 06:01:00 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6395 04/17/20 06:16:34 19:50 0 0 ism 3587080982063726 310410214827503 APPLE IPHONZ8 6396 04/17/20 06:51:29 60:00 17224 6216 las -1 310410214827503 6397 04/17/20 07:01:00 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6398 04/17/20 07:51:29 60:00 7636 2896 lens -1 310410214827503 6399 04/17/20 08:01:00 0:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6400 04/17/20 08:01:02 40:34 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6401 04/17/20 08:41:35 3:31 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6402 04/17/20 08:41:36 3:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6403 04/17/20 08:45:07 8:39 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6404 04/17/20 08:51:29 60:00 8156 2988 lens -1 310410214827503 6405 04/17/20 08:53:47 3:01 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 262 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002906 not for general distribution. EFTA 00116982 EFTA01251506 MOBILITY The information contained hereCtoNels 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr""s as,# AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytoa Apn Dn INSI MARL MODEL 6406 04/17/20 08:56:47 1:40 192 0 nxtgenpho 3587080982063726 310410214827503 APPLE DRONES . no 6407 04/17/20 08:56:48 1:40 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6408 04/17/20 08:58:28 48:46 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6409 04/17/20 09:47:13 2:12 192 0 natgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6410 04/17/20 09:47:14 2:12 0 0 natgenpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 6411 04/17/20 09:49:26 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6412 04/17/20 09:51:29 60:00 7064 2664 ins -1 310410214827503 6413 04/17/20 10:49:26 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6414 04/17/20 10:51:29 60:00 12028 4220 ins -1 310410214827503 6415 04/17/20 11:49:26 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6416 04/17/20 11:51:29 60:00 7204 2880 1ms -1 310410214827503 6417 04/17/20 12:45:00 0:00 0 0 ins 3587080982063726 310410214827503 APPLE DRONES 6418 04/17/20 12:45:09 60:00 16705 9144 1ms -1 310410214827503 6419 04/17/20 12:49:26 60:00 0 0 natgenpho no 3587080982063726 310410214827503 APPLE DRONES 6420 04/17/20 12:51:29 60:00 0 0 ins -1 310410214827503 6421 04/17/20 13:45:09 60:00 8388 2928 ins -1 310410214827503 6422 04/17/20 13:49:26 0:02 0 0 natgenpho no 3587080982063726 310410214827503 APPLE DRONES 6423 04/17/20 13:49:30 60:00 0 0 natgenpho no 3587080982063726 310410214827503 APPLE DRONES 6424 04/17/20 13:51:29 60:00 0 0 imp -1 310410214827503 6425 04/17/20 14:45:09 60:00 24360 11316 ins -1 310410214827503 6426 04/17/20 14:49:30 41:44 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6427 04/17/20 14:51:29 60:00 0 0 ins -1 310410214827503 6428 04/17/20 15:31:13 2:23 192 0 natgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6429 04/17/20 15:31:14 2:23 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6430 04/17/20 15:33:37 5:17 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 263 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002907 NTifikE not for general distribution. EF-EA_00116983 EFTA01251507 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. tted '"s s AT&T Run Date: Run Time: Data Osage For: 06/17/2020 iiiiiIIIIII Item Conn. Date Conn. Time (UTC) Originating Number Bytes Op Bytes Apn Dn MCI INBI 6431 04/17/20 15:38:53 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 6432 04/17/20 15:38:54 2:04 0 Oruftgonpho no 3587080982063726 310410214827503 6433 04/17/20 15:40:58 5:27 0 Oruftgonpho no 3587080982063726 310410214827503 6434 04/17/20 15:45:09 60:00 7064 2804 ims -1 310410214827503 6435 04/17/20 15:46:24 8:14 192 Onxtgonpho no 3587080982063726 310410214827503 6436 04/17/20 15:46:25 8:14 0 Onxtgonpho no 3587080982063726 310410214827503 6437 04/17/20 15:51:29 43:57 0 0 mos -1 310410214827503 6438 04/17/20 15:54:39 18:19 0 Onxtgonpho no 3587080982063726 310410214827503 6439 04/17/20 16:12:58 8:17 192 Onxtgonpho no 3587080982063726 310410214827503 6440 04/17/20 16:12:59 8:18 0 Oruftgonpho no 3587080982063726 310410214827503 6441 04/17/20 16:21:17 54:04 0 Oruftgonpho no 3587080982063726 310410214827503 6442 04/17/20 16:45:09 5:45 0 0 I. -1 310410214827503 6443 04/17/20 16:53:26 8:56 10013 6480 I. -1 310410214827503 6444 04/17/20 17:05:08 60:00 19982 10381 ims -1 310410214827503 6445 04/17/20 17:15:20 2:03 192 Oruftgonpho no 3587080982063726 310410214827503 6446 04/17/20 17:15:21 2:03 0 Oruftgonpho no 3587080982063726 310410214827503 6447 04/17/20 17:17:24 14:47 0 Oruftgonpho no 3587080982063726 310410214827503 6448 04/17/20 17:32:10 2:03 192 Onxtgonpho no 3587080982063726 310410214827503 6449 04/17/20 17:32:11 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 6450 04/17/20 17:34:14 3:45 0 Onxtgonpho no 3587080982063726 310410214827503 6451 04/17/20 17:37:58 2:03 192 Onxtgonpho no 3587080982063726 310410214827503 6452 04/17/20 17:37:59 2:03 0 Onxtgonpho no 3587080982063726 310410214827503 6453 04/17/20 17:40:02 52:04 0 Oruftgonpho no 3587080982063726 310410214827503 MAKE NADEL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 264 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002908 NeTniliAL not for general distribution. EF-EA_00116984 EFTA01251508 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4101. •,.,"... sa$ AT&T Run pato: Run Tuna: Data Osage For: Item Conn. Date 06/17/2020 10:56:02 Conn. Tao (U2C) Originating Number OP LT Bytes Bytes Apn Dn IKE I INS I 6454 04/17/20 18:05:08 18:10 4764 1464 imp -1 310410214827503 6455 04/17/20 18:29:14 0:26 8340 7264 imp 3587080982063726 310410214827503 6456 04/17/20 18:29:40 42:12 8296 5756 imp 3587080982063726 310410214827503 6457 04/17/20 18:32:05 2:05 192 0 nxtgonpho no 3587080982063726 310410214827503 6458 04/17/20 18:32:06 2:05 0 0 nxtgonpho no 3587080982063726 310410214827503 6459 04/17/20 18:34:11 35:22 0 0 nxtgonpho no 3587080982063726 310410214827503 6460 04/17/20 18:39:07 60:00 16480 8335 imp -1 310410214827503 6461 04/17/20 19:09:32 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 6462 04/17/20 19:09:34 2:03 0 0 nxtgonpho no 3587080982063726 310410214827503 6463 04/17/20 19:11:37 58:25 0 0 nxtgonpho no 3587080982063726 310410214827503 6464 04/17/20 19:11:52 0:00 0 0 imp 3587080982063726 310410214827503 6465 04/17/20 19:12:03 60:00 19843 11038 imp -1 310410214827503 6466 04/17/20 19:39:07 31:47 0 0 imp -1 310410214827503 6467 04/17/20 20:10:53 9:10 0 0 nxtgonpho no 3587080982063726 310410214827503 6468 04/17/20 20:10:54 9:09 6670 5981 ins 3587080982063726 310410214827503 6469 04/17/20 20:12:03 9:10 0 0 ins -1 310410214827503 6470 04/17/20 20:20:02 1:37 192 0 nxtgonpho no 3587080982063726 310410214827503 6471 04/17/20 20:20:03 1:36 6244 6778 imp 3587080982063726 310410214827503 6472 04/17/20 20:20:03 1:37 0 0 nxtgonpho no 3587080982063726 310410214827503 6473 04/17/20 20:20:05 1:35 6670 5980 imp 3587080982063726 310410214827503 6474 04/17/20 20:21:40 14:12 745421 19273243 nxtgonpho no 3587080982063726 310410214827503 6475 04/17/20 20:21:42 43:34 9264 7230 imp 3587080982063726 310410214827503 6476 04/17/20 20:35:52 1:27 304075 19807400 nxtgonpho no 3587080982063726 310410214827503 6477 04/17/20 20:37:19 0:30 181567 19821855 nxtgonpho no 3587080982063726 310410214827503 6478 04/17/20 20:37:49 0:44 186909 19813913 nxtgonpho no 3587080982063726 310410214827503 6479 04/17/20 20:38:33 26:43 122067 1895480 nxtgonpho no 3587080982063726 310410214827503 MARL NICOLL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002909 PsiTntAlt not for general distribution. Page 265 EF-EA_00116985 EFTA01251509 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ...,,,,sf •--s`" 1. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 18:56:03 Conn. Time (OTC) Originating Number ET Bytes Up Dytea Apn Dn IMEI INS I MARL 6480 04/17/20 21:05:15 8:30 26349 20421 nxtgonpho no 3587080982063726 310410214827503 APPLE 6481 04/17/20 21:05:16 8:29 7164 6848 ims 3587080982063726 310410214827503 APPLE 6482 04/17/20 21:05:16 8:30 20421 26061 nxtgonpho no 3587080982063726 310410214827503 APPLE 6483 04/17/20 21:05:17 8:29 6740 6900 ims 3587080982063726 310410214827503 APPLE 6484 04/17/20 21:08:07 60:00 25214 17928 ims -1 310410214827503 6485 04/17/20 21:13:46 2:17 5221 6055 nxtginpho no 3587080982063726 310410214827503 APPLE 6486 04/17/20 21:13:47 2:17 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 6487 04/17/20 21:16:03 1:07 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6488 04/17/20 21:16:04 1:06 5285 6873 nxtgonpho no 3587080982063726 310410214827503 APPLE 6489 04/17/20 21:16:05 1:06 6873 4997 nxtgonpho no 3587080982063726 310410214827503 APPLE 6490 04/17/20 21:16:05 1:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6491 04/17/20 21:16:07 0:04 0 1347 ims -1 310410214827503 6492 04/17/20 21:17:11 24:25 19364 13069 nxtgonpho no 3587080982063726 310410214827503 APPLE 6493 04/17/20 21:41:35 1:55 5217 6037 nxtgonpho no 3587080982063726 310410214827503 APPLE 6494 04/17/20 21:41:37 1:54 6037 4929 nxtgonpho no 3587080982063726 310410214827503 APPLE 6495 04/17/20 21:43:31 60:00 49433 41515 nxtgonpho no 3587080982063726 310410214827503 APPLE 6496 04/17/20 22:08:07 60:00 8604 2912 ims -1 310410214827503 6497 04/17/20 22:43:31 46:14 8721 7492 nxtgonpho no 3587080982063726 310410214827503 APPLE 6498 04/17/20 23:08:07 60:00 8496 2896 ims -1 310410214827503 6499 04/17/20 23:29:45 8:24 7513 5070 nxtgonpho no 3587080982063726 310410214827503 APPLE 6500 04/17/20 23:38:09 2:16 14373 15984 nxtgonpho no 3587080982063726 310410214827503 APPLE 6501 04/17/20 23:40:24 98:40 10467 12250 nxtgonpho no 3587080982063726 310410214827503 APPLE 6502 04/17/20 23:40:25 60:00 12250 11763 nxtgonpho no 3587080982063726 310410214827503 APPLE 6503 04/18/20 00:08:07 60:00 8496 2896 ims -1 310410214827503 NICOLL INIONZ8 110MONZ8 110MONZ8 110MONZ8 110MONZ8 DRONES DRONES DRONES /DRONES DRONES INIONZ8 INIONZ8 INIONZ8 INIONZ8 INIONZ8 INIONZ8 INIONZ8 INIONZ8 INIONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 266 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002910 PsiTi fikE not for general distribution. EFTA_00116986 EFTA01251510 The information contained heraCtoNeli MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in %1‘"I° ‘.""7,.. ____./ mil. AT&T Run Date: Run Time: Data Osage For: 06/17/2020 1S:56:03 Ito. Conn. Conn. Data Time (Inc) Originating ET Bytes Bytom Apn flex IM3I WOO; MODEL Number Up Dn 6504 04/18/20 00:40:25 38:40 0 92ructgenpho no 3587080982063726 310410214827503 6505 04/18/20 01:08:07 60:00 17208 6308 ims -1 310410214827503 6506 04/18/20 01:19:05 2:03 5390 69egnxtgenpho no 3587080982063726 310410214827503 6507 04/18/20 01:19:06 2:03 6989 5102 nxtgenpho no 3587080982063726 310410214827503 6508 04/18/20 01:21:09 60:00 8034 6067 nxtgenpho no 3587080982063726 310410214827503 6509 04/18/20 02:08:07 60:00 7080 2772 ims -1 310410214827503 6510 04/18/20 02:21:09 14:28 173 105 nxtgenpho no 3587080982063726 310410214827503 6511 04/18/20 02:35:36 6:48 5217 6053 nxtgenpho no 3587080982063726 310410214827503 6512 04/18/20 02:35:38 6:47 6053 4929 nxtgenpho no 3587080982063726 310410214827503 6513 04/18/20 02:44:26 11:14 6686 7509 nxtgenpho no 3587080982063726 310410214827503 6514 04/18/20 02:44:27 11:14 7509 6302nxtgenpho no 3587080982063726 310410214827503 6515 04/18/20 02:55:41 60:00 7977 6173 nxtgenpho no 3587080982063726 310410214827503 6516 04/18/20 03:08:07 60:00 9928 3252 ims -1 310410214827503 6517 04/18/20 03:55:41 60:00 692 420 nxtgenpho no 3587080982063726 310410214827503 6518 04/18/20 04:08:07 60:00 8604 3004 ims -1 310410214827503 6519 04/18/20 04:55:41 60:00 808 630 nxtgenpho no 3587080982063726 310410214827503 6520 04/18/20 05:08:07 60:00 8388 2896 ims -1 310410214827503 6521 04/18/20 05:55:41 60:00 635 525 nxtgenpho no 3587080982063726 310410214827503 6522 04/18/20 06:08:07 60:00 9928 3252 ims -1 310410214827503 6523 04/18/20 06:55:41 60:00 635 525 nxtgenpho no 3587080982063726 310410214827503 6524 04/18/20 07:08:07 60:00 16884 5968 ims -1 310410214827503 6525 04/18/20 07:55:41 60:00 519 315 nxtgenpho no 3587080982063726 310410214827503 6526 04/18/20 08:08:07 60:00 8388 2896 ims -1 310410214827503 6527 04/18/20 08:55:41 60:00 635 525 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 APPLE IPMONE8 APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPMONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 267 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002911 PsiTn iliAL not for general distribution. EF-EA_00116987 EFTA01251511 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from O3/O1/2O2O 12:00:00am to O6/15/2O2O 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run pato: Run Time: Data Usage For: Item Conn. Data 06/17/2020 1S:56:03 Conn. originating ET Time Number (UTC) Bytes Up Bytes Apn Dn IKE I INS' MARL NICOLL 6528 04/18/20 09:08:07 31:01 4964 1572 imp -1 310410214827503 6529 04/18/20 09:47:30 60:00 14740 9988 imp 3587080982063726 310410214827503 APPLE IrMONE8 6530 04/18/20 09:55:41 60:00 635 525 nxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 6531 04/18/20 10:47:30 60:00 5408 2896 imp 3587080982063726 310410214827503 APPLE 110H014Z8 6532 04/18/20 10:55:41 60:00 519 315 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6533 04/18/20 11:47:30 43:00 5192 2680 imp 3587080982063726 310410214827503 APPLE !PHONES 6534 04/18/20 11:55:41 60:00 462 420 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6535 04/18/20 12:30:30 60:00 13228 4608 imp 3587080982063726 310410214827503 APPLE !PHONES 6536 04/18/20 12:55:41 60:00 1012 4754 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6537 04/18/20 13:30:30 60:00 8388 3036 imp 3587080982063726 310410214827503 APPLE 110H014Z8 6538 04/18/20 13:55:41 27:30 173 105 nxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 6539 04/18/20 14:23:10 4:53 5594 7645 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6540 04/18/20 14:23:12 4:52 7645 5306 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6541 04/18/20 14:28:04 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6542 04/18/20 14:28:38 60:00 11330 10559 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6543 04/18/20 14:30:30 60:00 16220 5032 imp 3587080982063726 310410214827503 APPLE !PHONES 6544 04/18/20 15:28:38 35:07 462 420 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6545 04/18/20 15:30:30 60:00 8388 2928 ins 3587080982063726 310410214827503 APPLE 110H014Z8 6546 04/18/20 16:03:44 5:20 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 110H014Z8 6547 04/18/20 16:03:45 5:20 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6548 04/18/20 16:09:05 27:35 18577 17292 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6549 04/18/20 16:09:06 27:35 17292 18193 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6550 04/18/20 16:30:30 60:00 8496 2928 ins 3587080982063726 310410214827503 APPLE !PHONES 6551 04/18/20 16:36:41 4:52 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002912 NTrifikE not for general distribution. Page 268 EFTA_OOI 16988 EFTA01251512 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. • t`""tadad. . AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 18:56:03 Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn Dn INEZ IMBI MARL MODEL 6552 04/18/20 16:41:32 3:04 16409 16604 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 6553 04/18/20 16:41:33 3:04 16604 16121 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 6554 04/18/20 16:44:37 14:23 37551 16113ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6555 04/18/20 16:58:59 2:24 288 48ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6556 04/18/20 16:59:00 2:24 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPROME8 6557 04/18/20 17:01:24 12:10 288 48ruftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 6558 04/18/20 17:01:25 12:10 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6559 04/18/20 17:13:36 21:30 7882 5543 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6560 04/18/20 17:30:30 60:00 15108 4780 man 3587080982063726 310410214827503 APPLE !PHONES 6561 04/18/20 17:35:06 202:36 88303 48880ruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 6562 04/18/20 17:35:06 60:00 7737 6614 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 6563 04/18/20 18:30:30 60:00 8604 3160 imp 3587080982063726 310410214827503 APPLE 'PHONES 6564 04/18/20 18:35:06 60:00 2251 7376ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6565 04/18/20 19:30:30 60:00 8712 3052 imp 3587080982063726 310410214827503 APPLE !PHONES 6566 04/18/20 19:35:06 60:00 1775 5767ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6567 04/18/20 20:30:30 14:31 6284 5300 imp 3587080982063726 310410214827503 APPLE !PRONGS 6568 04/18/20 20:33:46 4:10 17900 11707 imp -1 310410214827503 6569 04/18/20 20:35:06 22:37 37117 73669ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6570 04/18/20 20:39:50 10:10 8169 9622 imp 3587080982063726 310410214827503 APPLE !PHONES 6571 04/18/20 20:39:51 10:10 9622 8013 in 3587080982063726 310410214827503 APPLE IPHONEB 6572 04/18/20 20:45:01 5:17 10948 6732 ims -1 310410214827503 6573 04/18/20 20:50:00 6:39 6350 6668 imp 3587080982063726 310410214827503 APPLE IPHONEB 6574 04/18/20 20:50:01 6:40 6668 6106 imp 3587080982063726 310410214827503 APPLE !PHONES 6575 04/18/20 20:50:18 8:24 8313 6322 imp -1 310410214827503 6576 04/18/20 20:56:39 1:03 6300 6762 ins 3587080982063726 310410214827503 APPLE !PHONES 6577 04/18/20 20:56:40 1:03 6762 6036 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 269 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002913 PsiTntikE not for general distribution. EF-EA_00116989 EFTA01251513 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 18:56:03 Conn. Originating ET Time Minter (UTC) Bytes Up Bytom Apn Dn IMMI IMSI MARS 6578 04/18/20 20:57:43 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6579 04/18/20 20:58:15 45:42 11877 7692 imp -1 310410214827503 6580 04/18/20 20:58:26 18:47 5702 6379 nxtgonpho no 3587080982063726 310410214827503 APPLE 6581 04/18/20 20:58:27 18:47 6379 9106 nxtgonpho no 3587080982063726 310410214827503 APPLE 6582 04/18/20 21:17:14 46:11 22023 32502 nxtgonpho no 3587080982063726 310410214827503 APPLE 6583 04/18/20 21:17:15 46:11 32502 22401 nxtgonpho no 3587080982063726 310410214827503 APPLE 6584 04/18/20 21:38:46 24:39 6409 7586 imp 3587080982063726 310410214827503 APPLE 6585 04/18/20 21:38:47 24:39 7478 6253 imp 3587080982063726 310410214827503 APPLE 6586 04/18/20 21:44:00 28:27 13616 8036 imp -1 310410214827503 6587 04/18/20 22:03:26 8:25 7581 soil nxtgonpho no 3587080982063726 310410214827503 APPLE 6588 04/18/20 22:11:50 3:20 5693 7267 nxtgonpho no 3587080982063726 310410214827503 APPLE 6589 04/18/20 22:11:51 3:20 7267 5309 nxtgonpho no 3587080982063726 310410214827503 APPLE 6590 04/18/20 22:11:58 3:12 6136 6566 Imo 3587080982063726 310410214827503 APPLE 6591 04/18/20 22:12:00 3:11 6566 5872 Imo 3587080982063726 310410214827503 APPLE 6592 04/18/20 22:12:27 60:00 21529 11092 Imo -1 310410214827503 6593 04/18/20 22:15:11 7:17 6871 4961 nxtgonpho no 3587080982063726 310410214827503 APPLE 6594 04/18/20 22:22:27 4:15 6154 6539 nxtgonpho no 3587080982063726 310410214827503 APPLE 6595 04/18/20 22:22:28 4:15 6539 5866 nxtgonpho no 3587080982063726 310410214827503 APPLE 6596 04/18/20 22:26:43 6:07 6107 4901 nxtgonpho no 3587080982063726 310410214827503 APPLE 6597 04/18/20 22:32:49 2:04 5177 6115 nxtgonpho no 3587080982063726 310410214827503 APPLE 6598 04/18/20 22:32:50 2:04 6115 4889 nxtgonpho no 3587080982063726 310410214827503 APPLE 6599 04/18/20 22:34:54 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6600 04/18/20 22:35:10 1:24 7184 4966 nxtgonpho no 3587080982063726 310410214827503 APPLE 6601 04/18/20 22:36:33 4:06 5218 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL INIONE8 INIONE8 INIONE8 DRONES DRONES !PROMS !PROMS DRONES DRONES DRONES DRONES DRONES !PROMS DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 270 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002914 NTailiAL not for general distribution. EFTAJVII6990 EFTA01251514 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tr"`s ad1° AT&T Run Date: Run Time: Data Osage Tor: Ilea Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apn Dn IKI IMSI NAZI MODEL 6602 04/18/20 22:36:34 4:06 6053 4930 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 6603 04/18/20 22:40:40 3:05 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6604 04/18/20 22:40:41 3:05 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6605 04/18/20 22:43:46 5:54 7593 5176 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6606 04/18/20 22:49:39 2:10 5117 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6607 04/18/20 22:49:40 2:10 6107 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6608 04/18/20 22:51:50 37:24 8592 6485 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6609 04/18/20 23:12:27 60:00 10036 3176 ims -1 310410214827503 6610 04/18/20 23:29:13 8:08 5222 6091 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6611 04/18/20 23:29:14 8:08 6091 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6612 04/18/20 23:37:22 1:49 6977 5025 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6613 04/18/20 23:39:10 2:05 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6614 04/18/20 23:39:11 2:05 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6615 04/18/20 23:41:16 0:34 0 Ommtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6616 04/18/20 23:41:49 2:17 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6617 04/18/20 23:41:50 2:17 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6618 04/18/20 23:44:07 6:04 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6619 04/18/20 23:44:08 6:04 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6620 04/18/20 23:50:12 18:55 7226 5437 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6621 04/19/20 00:09:06 2:03 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6622 04/19/20 00:09:07 2:03 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 271 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002915 NeTnilikk not for general distribution. EF-EA_00116991 EFTA01251515 The information contained heraelaNyFti MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTE. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and dam. %---s` 's AT&T provided in Run Data: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Data Time (OTC) Originating LT Number Sytes UP Byte. On Apn ICI INSI N1110: NICOLL 6623 04/19/20 00:11:10 60:00 9724 10943 nxtgonpho no 3587080982063726 310410214827503 6624 04/19/20 00:12:27 60:00 8496 2912 imp -1 310410214827503 6625 04/19/20 01:11:10 60:00 1322 1155 nxtgonpho no 3587080982063726 310410214827503 6626 04/19/20 01:12:27 60:00 7080 2912 imp -1 310410214827503 6627 04/19/20 02:11:10 1:39 0 0 nxtgonpho no 3587080982063726 310410214827503 6628 04/19/20 02:12:27 60:00 12120 4268 imp -1 310410214827503 6629 04/19/20 02:12:49 2:03 5222 6228 nxtgonpho no 3587080982063726 310410214827503 6630 04/19/20 02:12:50 2:03 6228 4934 nxtgonpho no 3587080982063726 310410214827503 6631 04/19/20 02:14:53 14:51 6472 5426 nxtgonpho no 3587080982063726 310410214827503 6632 04/19/20 02:29:43 8:55 5548 10407 nxtgonpho no 3587080982063726 310410214827503 6633 04/19/20 02:29:44 8:55 10407 5260 nxtgonpho no 3587080982063726 310410214827503 6634 04/19/20 02:38:39 2:03 5220 6107 nxtgonpho no 3587080982063726 310410214827503 6635 04/19/20 02:38:40 2:03 6107 4932 nxtgonpho no 3587080982063726 310410214827503 6636 04/19/20 02:40:43 60:00 8271 6277 nxtgonpho no 3587080982063726 310410214827503 6637 04/19/20 03:12:27 60:00 13676 4676 imp -1 310410214827503 6638 04/19/20 03:40:43 60:00 1213 1155 nxtgonpho no 3587080982063726 310410214827503 6639 04/19/20 04:12:27 60:00 8604 3052 imp -1 310410214827503 6640 04/19/20 04:40:43 60:00 1097 1106 nxtgonpho no 3587080982063726 310410214827503 6641 04/19/20 05:12:27 0:37 0 0 imp -1 310410214827503 6642 04/19/20 05:18:33 60:00 11845 7942 imp -1 310410214827503 6643 04/19/20 05:40:43 60:00 1213 1155 nxtgonpho no 3587080982063726 310410214827503 6644 04/19/20 06:18:33 60:00 13460 4624 ims -1 310410214827503 6645 04/19/20 06:40:43 60:00 687 630 nxtgonpho no 3587080982063726 310410214827503 6646 04/19/20 07:18:33 60:00 8388 2804 ims -1 310410214827503 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHONZ8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE /PHONES APPLE /PHONES APPLE /PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002916 Ns-F.1AL not for general distribution. Page 272 EF-EAJVII6992 EFTA01251516 MOBILITY The information contained hereeteNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in AT&T Run Dato: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number TT Bytes Up Bytom Apn Dn INS I MAKE 6647 04/19/20 07:40:43 60:00 751 735 nxtgonpho no 3587080982063726 310410214827503 APPLE 6648 04/19/20 08:18:33 60:00 9928 3160 imp -1 310410214827503 6649 04/19/20 08:40:43 60:00 346 210 nxtgonpho no 3587080982063726 310410214827503 APPLE 6650 04/19/20 09:18:33 60:00 9928 3068 imp -1 310410214827503 6651 04/19/20 09:40:43 60:00 519 315 nxtgonpho no 3587080982063726 310410214827503 APPLE 6652 04/19/20 10:18:33 60:00 16760 6340 imp -1 310410214827503 6653 04/19/20 10:40:43 60:00 462 420 nxtgonpho no 3587080982063726 310410214827503 APPLE 6654 04/19/20 11:18:33 60:00 10128 3176 imp -1 310410214827503 6655 04/19/20 11:40:43 50:17 346 210 nxtgonpho no 3587080982063726 310410214827503 APPLE 6656 04/19/20 12:18:33 60:00 8620 3036 imp -1 310410214827503 6657 04/19/20 12:30:59 25:21 10112 7542 nxtgonpho no 3587080982063726 310410214827503 APPLE 6658 04/19/20 12:31:00 25:21 7542 9824 nxtgonpho no 3587080982063726 310410214827503 APPLE 6659 04/19/20 12:56:21 1:39 7526 5062 nxtgonpho no 3587080982063726 310410214827503 APPLE 6660 04/19/20 12:57:59 8:37 5278 6165 nxtgonpho no 3587080982063726 310410214827503 APPLE 6661 04/19/20 12:58:00 8:37 6165 4990 nxtgonpho no 3587080982063726 310410214827503 APPLE 6662 04/19/20 13:06:37 0:45 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6663 04/19/20 13:07:21 46:42 6167 6986 nxtgonpho no 3587080982063726 310410214827503 APPLE 6664 04/19/20 13:07:22 46:42 6986 5879 nxtgonpho no 3587080982063726 310410214827503 APPLE 6665 04/19/20 13:18:33 60:00 13352 4516 imp -1 310410214827503 6666 04/19/20 13:54:04 2:17 6055 4902 nxtgonpho no 3587080982063726 310410214827503 APPLE 6667 04/19/20 13:56:21 8:25 5117 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 6668 04/19/20 13:56:22 8:25 6055 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE 6669 04/19/20 14:04:47 1:58 6873 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPMONE8 IPMONE8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPMONE8 IPMONE8 IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002917 NsTroliAL not for general distribution. Page 273 EF-EA_00116993 EFTA01251517 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTE. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ‘inil. t migSil AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time (UTC) originating Number ET Bytes Up Byte. Dn Apn IKE I INSI MAKE NICOLL 6670 04/19/20 14:06:44 2:03 5176 6115 nxtgonpho no 3587080982063726 310410214827503 6671 04/19/20 14:06:45 2:03 6115 4888 nxtgonpho no 3587080982063726 310410214827503 6672 04/19/20 14:08:48 0:49 7465 4966mxtgonpho no 3587080982063726 310410214827503 6673 04/19/20 14:09:36 2:09 5177 6115 nxtgonpho no 3587080982063726 310410214827503 6674 04/19/20 14:09:37 2:09 6115 4889 nxtgonpho no 3587080982063726 310410214827503 6675 04/19/20 14:11:46 2:36 8000 5024 nxtgonpho no 3587080982063726 310410214827503 6676 04/19/20 14:14:21 2:09 5117 6107 nxtgonpho no 3587080982063726 310410214827503 6677 04/19/20 14:14:22 2:09 6107 4829 nxtgonpho no 3587080982063726 310410214827503 6678 04/19/20 14:16:31 6:31 6873 4966 nxtgonpho no 3587080982063726 310410214827503 6679 04/19/20 14:18:33 60:00 8156 2804 ims -1 310410214827503 6680 04/19/20 14:23:01 2:04 5176 6115 nxtgonpho no 3587080982063726 310410214827503 6681 04/19/20 14:23:02 2:04 6115 4888 nxtgonpho no 3587080982063726 310410214827503 6682 04/19/20 14:25:06 6:51 6873 4966 nxtgonpho no 3587080982063726 310410214827503 6683 04/19/20 14:31:56 2:19 5117 6055 nxtgonpho no 3587080982063726 310410214827503 6684 04/19/20 14:31:58 2:18 6055 4829 nxtgonpho no 3587080982063726 310410214827503 6685 04/19/20 14:34:15 6:24 5118 6055 nxtgonpho no 3587080982063726 310410214827503 6686 04/19/20 14:34:16 6:24 6055 4830 nxtgonpho no 3587080982063726 310410214827503 6687 04/19/20 14:40:39 6:03 5117 6107 nxtgonpho no 3587080982063726 310410214827503 6688 04/19/20 14:40:40 6:03 6107 4829 nxtgonpho no 3587080982063726 310410214827503 6689 04/19/20 14:46:43 60:00 7990 6333 nxtgonpho no 3587080982063726 310410214827503 6690 04/19/20 15:18:33 60:00 10036 3284 ims -1 310410214827503 APPLE ISMONZ8 APPLE ISMONZ8 APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002918 NTrifikE not for general distribution. Page 274 EF-EA_00116994 EFTA01251518 MOBILITY The information contained heraleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried Ler records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 Item Conn. Conn. Date Time Originating ET Number Bytes UP Bytes Dn Apn IMEI IMBI MCOEL (Inc) 6691 04/19/20 15:46:43 60:00 4913 6693 nxtgonpho no 3587080982063726 310410214827503 6692 04/19/20 16:18:33 8:19 0 0 ins -1 310410214827503 6693 04/19/20 16:31:29 60:00 14817 8098 ins -1 310410214827503 6694 04/19/20 16:46:43 60:00 346 210 nxtgonpho no 3587080982063726 310410214827503 6695 04/19/20 17:31:29 60:00 11688 4112 Ins -1 310410214827503 6696 04/19/20 17:46:43 10:04 173 105 nxtgonpho no 3587080982063726 310410214827503 6697 04/19/20 17:56:46 2:10 5284 6873 nxtgonpho no 3587080982063726 310410214827503 6698 04/19/20 17:56:47 2:10 6873 4996 nxtgonpho no 3587080982063726 310410214827503 6699 04/19/20 17:58:57 8:25 15000 26609 nxtgonpho no 3587080982063726 310410214827503 6700 04/19/20 18:07:21 4:56 5754 6357 nxtgonpho no 3587080982063726 310410214827503 6701 04/19/20 18:07:22 4:56 6357 5466 nxtgonpho no 3587080982063726 310410214827503 6702 04/19/20 18:12:18 0:06 0 0 nxtgonpho no 3587080982063726 310410214827503 6703 04/19/20 18:12:35 1:28 48 0 nxtgonpho no 3587080982063726 310410214827503 6704 04/19/20 18:14:03 10:21 5287 6401 nxtgonpho no 3587080982063726 310410214827503 6705 04/19/20 18:14:04 10:21 6401 4999 nxtgonpho no 3587080982063726 310410214827503 6706 04/19/20 18:24:25 4:32 7589 5130 nxtgonpho no 3587080982063726 310410214827503 6707 04/19/20 18:28:57 14:34 13180 16273 nxtgonpho no 3587080982063726 310410214827503 6708 04/19/20 18:28:57 14:35 16273 12796 nxtgonpho no 3587080982063726 310410214827503 6709 04/19/20 18:31:29 60:00 6956 2896 ins -1 310410214827503 6710 04/19/20 18:43:32 3:40 7465 4964 nxtgonpho no 3587080982063726 310410214827503 6711 04/19/20 18:47:12 4:35 7666 5205 nxtgonpho no 3587080982063726 310410214827503 6712 04/19/20 18:51:47 11:34 5441 7573 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE !PHONES AT&T Proprietary The AT&T network constancy communicates with internet enabled devices when they are powered on. Ibis(' communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002919 Ns not for general distribution. Page 275 EF-EA_00116995 EFTA01251519 The information contained her is 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, /..zrele 14`'s AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 18:56:03 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn On EMI INSI MUM MODEL 6713 04/19/20 18:51:48 11:34 7573 6002 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6714 04/19/20 19:03:22 15:35 658 3906 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6715 04/19/20 19:18:57 20:04 24756 26572 nxtgenpho no 3587080982063726 310410214827503 APP'S !PHONES 6716 04/19/20 19:18:58 20:04 26572 35880 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6717 04/19/20 19:31:29 29:27 0 0 imo -1 310410214827503 6718 04/19/20 19:37:13 26:00 8361 6086 imp -1 310410214827503 6719 04/19/20 19:39:02 0:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE ITHONZ8 6720 04/19/20 19:39:21 2:28 8897 5559 nxtgenpho no .3587080982063726 310410214827503 APPLE ITHONZ8 6721 04/19/20 19:41:48 2:04 5216 6053 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6722 04/19/20 19:41:49 2:04 6053 4928 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6723 04/19/20 19:43:53 19:18 16341 13362 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6724 04/19/20 20:00:56 0:46 12442 11624 imp 3587080982063726 310410214827503 APPLE !PHONES 6725 04/19/20 20:01:42 3:47 3316 1340 ins 3587080982063726 310410214827503 APPLE ITHONZ8 6726 04/19/20 20:03:10 8:49 5582 7720 nxtgenpho no 3587080982063726 310410214827503 APPLE ITHONZ8 6727 04/19/20 20:03:11 8:49 7720 5294 nxtgenpho no 3587080982063726 310410214827503 APPLE ITHONZ8 6728 04/19/20 20:03:12 4:54 6338 6674 ims 3587080982063726 310410214827503 APPLE DRONES 6729 04/19/20 20:03:13 4:54 6674 6074 ims 3587080982063726 310410214827503 APPLE DRONES 6730 04/19/20 20:05:29 3:25 8269 6000 ins -1 310410214827503 6731 04/19/20 20:08:05 1:08 6242 6670 ins 3587080982063726 310410214827503 APPLE DRONES 6732 04/19/20 20:08:06 1:08 6670 5978 ins 3587080982063726 310410214827503 APPLE DRONES 6733 04/19/20 20:08:53 1:24 5775 3504 ins -1 310410214827503 6734 04/19/20 20:09:13 2:46 6244 6670 ins 3587080982063726 310410214827503 APPLE !PHONES 6735 04/19/20 20:09:14 2:46 6670 5980 ins 3587080982063726 310410214827503 APPLE DRONES 6736 04/19/20 20:10:17 60:00 15545 9144 ins -1 310410214827503 6737 04/19/20 20:12:00 8:13 61552 8616 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6738 04/19/20 20:20:12 0:38 5285 6208 natgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 276 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002920 PsiTn iliAL not for general distribution. EFTA_00116996 EFTA01251520 MOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41011, t‘a° erasaSi AT&T Run Dato: Run Time: Data Usage for: Item Conn. Dote 06/17/2020 Conn. Time (Uc) Originating Number ET Bytes UP Bytom Apn On IMEI INSI NA= MOLL 6739 04/19/20 20:20:13 0:38 6208 4997 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 6740 04/19/20 20:20:51 5:49 18007 16801 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 6741 04/19/20 20:26:39 8:14 11490 13258 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6742 04/19/20 20:26:40 8:14 13258 11106 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6743 04/19/20 20:34:54 4:30 7465 4964 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6744 04/19/20 20:39:23 16:17 6721 7412 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6745 04/19/20 20:39:24 16:16 7412 6433 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 6746 04/19/20 20:55:41 9:18 9428 6778 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 6747 04/19/20 21:04:58 2:10 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6748 04/19/20 21:04:59 2:10 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6749 04/19/20 21:07:09 3:36 7465 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6750 04/19/20 21:10:17 53:55 6956 2804 imo -1 310410214827503 6751 04/19/20 21:10:44 1:47 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6752 04/19/20 21:10:45 1:47 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6753 04/19/20 21:12:32 0:05 0 Ormagonpho no 3587080982063726 310410214827503 APPLE !PHONES 6754 04/19/20 21:13:03 3:27 14656 7150 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 6755 04/19/20 21:16:30 24:47 82235 98400 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 6756 04/19/20 21:16:31 24:47 98400 83435 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6757 04/19/20 21:41:18 11:57 7527 6010 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6758 04/19/20 21:53:15 26:39 10351 12357 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6759 04/19/20 21:53:16 26:39 12357 11122 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necesskrily indicate a customer initiated a transaction. Page 277 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002921 NTrifikE not for general distribution. EF-EA_00116997 EFTA01251521 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and OTC. provided in triti `"a AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Sytes UP Bytes Apn Dn IICI INS I MAKE MODEL 6760 04/19/20 22:07:24 60:00 15000 7958 imp -1 310410214827503 6761 04/19/20 22:19:55 49:39 21210 16798 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6762 04/19/20 23:07:24 60:00 12152 4484 imp -1 310410214827503 6763 04/19/20 23:09:34 14:45 5326 6228 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6764 04/19/20 23:09:35 14:45 6228 5038 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6765 04/19/20 23:24:20 5:42 12767 12563 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6766 04/19/20 23:30:01 14:18 11826 7256 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6767 04/19/20 23:30:02 14:18 7256 11538 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6768 04/19/20 23:44:20 45:47 53575 44122 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6769 04/20/20 00:07:24 60:00 6848 2756 1ms -1 310410214827503 6770 04/20/20 00:30:06 8:02 23877 30655 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6771 04/20/20 00:30:07 8:02 30655 23589 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6772 04/20/20 00:38:09 1:09 11325 5640 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6773 04/20/20 00:39:17 1:37 5217 6105 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6774 04/20/20 00:39:18 1:37 6105 4929 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6775 04/20/20 00:40:55 1:35 8722 5271 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6776 04/20/20 00:42:29 4:53 5113 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6777 04/20/20 00:42:30 4:53 6053 4825 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6778 04/20/20 00:47:23 8:37 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6779 04/20/20 00:55:59 19:07 10897 13836 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6780 04/20/20 00:56:00 19:07 13836 10513 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6781 04/20/20 01:07:24 60:00 10036 3160 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002922 NET IAL not for general distribution. Page 278 EF-EAJVII6998 EFTA01251522 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 MS= Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn On ICI IMSI MAKE 6782 04/20/20 01:15:07 3:59 7529 5071 nxtgonpho no 3587080982063726 310410214827503 APPLE 6783 04/20/20 01:19:06 32:44 6060 6761 nxtgonpho no 3587080982063726 310410214827503 APPLE 6784 04/20/20 01:19:07 32:44 6761 5772 nxtgonpho no 3587080982063726 310410214827503 APPLE 6785 04/20/20 01:51:51 19:42 14835 10664 nxtgonpho no 3587080982063726 310410214827503 APPLE 6786 04/20/20 02:07:24 60:00 12028 4268 imp -1 310410214827503 6787 04/20/20 02:11:32 2:26 5118 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 6788 04/20/20 02:11:33 2:26 6055 4830 nxtgonpho no 3587080982063726 310410214827503 APPLE 6789 04/20/20 02:13:59 0:30 424 780 nxtgonpho no 3587080982063726 310410214827503 APPLE 6790 04/20/20 02:14:47 80:00 23589 26098 nxtgonpho no 3587080982063726 310410214827503 APPLE 6791 04/20/20 02:14:48 60:00 25809 22794 nxtgonpho no 3587080982063726 310410214827503 APPLE 6792 04/20/20 03:07:24 60:00 10596 4412 imp -1 310410214827503 6793 04/20/20 03:14:48 60:00 6344 7746 nxtgonpho no 3587080982063726 310410214827503 APPLE 6794 04/20/20 03:34:47 166:47 8691 7320 nxtgonpho no 3587080982063726 310410214827503 APPLE 6795 04/20/20 04:07:24 60:00 7064 2912 imp -1 310410214827503 6796 04/20/20 04:14:48 60:00 687 630 nxtgonpho no 3587080982063726 310410214827503 APPLE 6797 04/20/20 05:07:24 60:00 8604 3144 imp -1 310410214827503 6798 04/20/20 05:14:48 60:00 578 630 nxtgonpho no 3587080982063726 310410214827503 APPLE 6799 04/20/20 06:07:24 60:00 10380 4144 imp -1 310410214827503 6800 04/20/20 06:14:48 6:47 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6801 04/20/20 06:21:35 20:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 6802 04/20/20 06:42:16 2:22 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 6803 04/20/20 06:42:17 2:22 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 6804 04/20/20 06:44:38 6:12 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE HOD= !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 279 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002923 PsiTn ilikk not for general distribution. EF-EA_00116999 EFTA01251523 MOBILITY The information contained heraCteNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 4111. tr a ,0. AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 18:56:04 Conn. Originating ET Time Dumber (OTC) Sytes Up Byte. Apn Dn IME1 IMSI NAZI MODEL 6805 04/20/20 06:44:39 6:12 6055 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6806 04/20/20 06:50:51 3:00 6067 5712 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6807 04/20/20 06:53:50 49:32 17347 18935 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6808 04/20/20 06:53:51 49:32 18935 19405 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6809 04/20/20 07:07:24 60:00 8388 2820 ims -1 310410214827503 6810 04/20/20 07:43:22 31:21 12854 13278 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6811 04/20/20 07:43:23 31:21 13278 14990 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6812 04/20/20 08:07:24 60:00 10488 4520 ims -1 310410214827503 6813 04/20/20 08:14:44 48:38 23363 22357 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6814 04/20/20 09:03:21 1:03 5217 6053 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6815 04/20/20 09:03:23 1:02 6053 4929 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6816 04/20/20 09:04:25 24:55 15708 12984 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6817 04/20/20 09:07:24 60:00 11920 4484 ims -1 310410214827503 6818 04/20/20 09:29:19 0:43 5280 6115 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 6819 04/20/20 09:29:20 0:43 6115 4992 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6820 04/20/20 09:30:03 3:38 7529 5173 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6821 04/20/20 09:33:41 60:00 29626 28088 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6822 04/20/20 10:07:24 60:00 8604 3052 ims -1 310410214827503 6823 04/20/20 10:33:41 0:15 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6824 04/20/20 10:33:56 1:22 6052 4939 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6825 04/20/20 10:35:18 0:59 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 6826 04/20/20 10:35:19 0:59 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 280 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002924 NeTniliAL not for general distribution. EF-EA_00117000 EFTA01251524 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ap. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (um) Bytes Up Byte. Apn On IKI INSI MUT 6827 04/20/20 10:36:18 2:38 6931 5020 nxtgonpho no 3587080982063726 310410214827503 APPLE 6828 04/20/20 10:38:55 3:20 5222 6055ruftgonpho no 3587080982063726 310410214827503 APPLE 6829 04/20/20 10:38:57 3:19 6055 4934ruftgonpho no 3587080982063726 310410214827503 APPLE 6830 04/20/20 10:42:16 7:02 9200 6186 nxtgonpho no 3587080982063726 310410214827503 APPLE 6831 04/20/20 10:49:17 1:49 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 6832 04/20/20 10:49:19 1:48 6055 4933 ructgonpho no 3587080982063726 310410214827503 APPLE 6833 04/20/20 10:51:07 8:14 7026 5739ruftgonpho no 3587080982063726 310410214827503 APPLE 6834 04/20/20 10:59:20 3:29 5984 6383ruftgonpho no 3587080982063726 310410214827503 APPLE 6835 04/20/20 10:59:21 3:29 6383 5696ruftgonpho no 3587080982063726 310410214827503 APPLE 6836 04/20/20 11:02:50 3:17 7529 5070ruftgonpho no 3587080982063726 310410214827503 APPLE 6837 04/20/20 11:06:06 0:45 5221 6055ruftgonpho no 3587080982063726 310410214827503 APPLE 6838 04/20/20 11:06:07 0:45 6055 4933ruftgonpho no 3587080982063726 310410214827503 APPLE 6839 04/20/20 11:06:52 5:19 6873 4966 nxtgonpho no 3587080982063726 310410214827503 APPLE 6840 04/20/20 11:07:24 60:00 10144 3176 imo -1 310410214827503 6841 04/20/20 11:12:12 3:53 6067 5608 nxtgonpho no 3587080982063726 310410214827503 APPLE 6842 04/20/20 11:16:04 2:05 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 6843 04/20/20 11:16:05 2:05 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 6844 04/20/20 11:18:10 7:52 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 6845 04/20/20 11:26:01 6:12 5796 6383ruftgonpho no 3587080982063726 310410214827503 APPLE 6846 04/20/20 11:26:02 6:12 6383 5508ruftgonpho no 3587080982063726 310410214827503 APPLE 6847 04/20/20 11:32:14 1:07 6873 4964ruftgonpho no 3587080982063726 310410214827503 APPLE NODEL IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 281 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002925 NT-31AL not for general distribution. EFTA_00117001 EFTA01251525 MOBILITY The information contained hereICIDIN,R 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tr'`s ad. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn INEI IMSI MARL MODEL 6848 04/20/20 11:33:20 1:01 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6849 04/20/20 11:33:21 1:01 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6850 04/20/20 11:34:22 8:26 7033 5069 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6851 04/20/20 11:42:48 4:28 7465 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6852 04/20/20 11:47:15 2:14 5216 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6853 04/20/20 11:47:17 2:13 6053 4928 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6854 04/20/20 11:49:30 14:44 15216 12058 nxtgonpho 3587080982063726 310410214827503 APPLE !PROMS To 6855 04/20/20 12:04:13 17:10 9120 8717 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6856 04/20/20 12:04:14 17:10 8717 10092 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6857 04/20/20 12:07:24 60:00 18192 6280 imo -1 310410214827503 6858 04/20/20 12:21:24 1:56 48 Ormtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6859 04/20/20 12:23:19 8:24 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6860 04/20/20 12:23:20 8:24 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6861 04/20/20 12:31:44 1:54 0 Ormtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6862 04/20/20 12:33:37 6:36 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6863 04/20/20 12:33:38 6:36 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6864 04/20/20 12:40:14 55:39 19116 8927 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6865 04/20/20 13:07:24 60:00 6956 2696 ipso -1 310410214827503 6866 04/20/20 13:35:52 1:26 5220 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6867 04/20/20 13:35:53 1:26 6107 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6868 04/20/20 13:37:19 5:38 7591 5170 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 282 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002926 not for general distribution. EFTA 00117002 EFTA01251526 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4110. •-c-`"'asss. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating Time Buster (UTC) ET Bytes Up Bytea Apn on ICI IMSI MARL MOLL 6869 04/20/20 13:42:56 7:44 5703 6457 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 6870 04/20/20 13:42:57 7:44 6457 5415 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6871 04/20/20 13:50:41 14:09 8237 5835 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6872 04/20/20 14:04:49 8:40 5284 6873 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6873 04/20/20 14:04:50 8:40 6873 4996 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6874 04/20/20 14:07:24 60:00 8496 2928 ins -1 310410214827503 6875 04/20/20 14:13:29 4:28 5554 6997 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6876 04/20/20 14:13:30 4:28 6997 5266 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6877 04/20/20 14:17:58 35:32 15296 12314 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6878 04/20/20 14:53:30 38:51 6999 6246 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6879 04/20/20 15:07:24 60:00 10380 4020 ins -1 310410214827503 6880 04/20/20 15:32:20 8:28 5753 6305 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6881 04/20/20 15:32:21 8:28 6305 5465 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6882 04/20/20 15:40:49 43:24 50578 36444 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6883 04/20/20 16:07:24 60:00 10268 3176 ins -1 310410214827503 6884 04/20/20 16:24:13 26:03 15438 18285 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6885 04/20/20 16:24:14 26:03 18285 16113 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6886 04/20/20 16:50:17 22:52 6513 5171 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6887 04/20/20 17:07:24 55:20 11920 4536 ins -1 310410214827503 6888 04/20/20 17:13:08 2:04 5286 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6889 04/20/20 17:13:10 2:03 6055 4998 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 6890 04/20/20 17:15:13 9:13 7529 5174 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 283 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002927 PsiTniliAL not for general distribution. EF-EA_00117003 EFTA01251527 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INLI IMBI teal 6891 04/20/20 17:24:25 8:07 7905 7349 nxtgonpho no 3587080982063726 310410214827503 APPLE 6892 04/20/20 17:24:26 8:07 7349 7617ruftgonpho no 3587080982063726 310410214827503 APPLE 6893 04/20/20 17:32:33 6:21 6873 4966nAtgonpho no 3587080982063726 310410214827503 APPLE 6894 04/20/20 17:38:53 2:03 5118 6055ruftgonpho no 3587080982063726 310410214827503 APPLE 6895 04/20/20 17:38:54 2:03 6055 4830 nxtgonpho no 3587080982063726 310410214827503 APPLE 6896 04/20/20 17:40:57 14:54 6470 5422 nxtgonpho no 3587080982063726 310410214827503 APPLE 6897 04/20/20 17:55:50 24:24 86932 40730ruftgonpho no 3587080982063726 310410214827503 APPLE 6898 04/20/20 17:55:51 24:24 40730 87502ruftgonpho no 3587080982063726 310410214827503 APPLE 6899 04/20/20 18:01:37 2:16 7118 6812 imp 3587080982063726 310410214827503 APPLE 6900 04/20/20 18:01:38 2:16 6744 6854 ins 3587080982063726 310410214827503 APPLE 6901 04/20/20 18:02:44 10:31 8377 6106 imp -1 310410214827503 6902 04/20/20 18:03:53 16:21 6246 6676 imp 3587080982063726 310410214827503 APPLE 6903 04/20/20 18:03:54 16:21 6676 5982 imp 3587080982063726 310410214827503 APPLE 6904 04/20/20 18:20:15 21:10 8444 16290 nxtgonpho no 3587080982063726 310410214827503 APPLE 6905 04/20/20 18:20:17 21:08 18554 13658 imp 3587080982063726 310410214827503 APPLE 6906 04/20/20 18:41:24 0:25 7090 7411ruftgonpho no 3587080982063726 310410214827503 APPLE 6907 04/20/20 18:41:25 0:24 6350 6672 imp 3587080982063726 310410214827503 APPLE 6908 04/20/20 18:41:25 0:25 7411 6802 nxtgonpho no 3587080982063726 310410214827503 APPLE 6909 04/20/20 18:41:26 0:24 6672 5998 ins 3587080982063726 310410214827503 APPLE 6910 04/20/20 18:41:50 20:42 8099 7071ruftgonpho no 3587080982063726 310410214827503 APPLE 6911 04/20/20 18:41:53 20:39 8146 6924 imp 3587080982063726 310410214827503 APPLE 6912 04/20/20 19:02:31 1:23 5116 6023ruftgonpho no 3587080982063726 310410214827503 APPLE 6913 04/20/20 19:02:32 1:22 6264 6784 ins 3587080982063726 310410214827503 APPLE 6914 04/20/20 19:02:32 1:23 6023 4828ruftgonpho no 3587080982063726 310410214827503 APPLE 6915 04/20/20 19:02:33 1:22 6676 6000 moo 3587080982063726 310410214827503 APPLE NICOLL IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 284 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002928 WInfikE not for general distribution. EFTA 00117004 EFTA01251528 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and OTC. provided in 41111, AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number LT Bytes Up Bytom Apn On ISIS I MAKE NICOLL 6916 04/20/20 19:03:55 57:33 22166 75101 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6917 04/20/20 19:03:58 5:48 8238 7830 1ms 3587080982063726 310410214827503 APPLE !PHONES 6918 04/20/20 19:09:46 60:00 10812 4204 in 3587080982063726 310410214827503 APPLE !PHONES 6919 04/20/20 20:01:27 2:03 5221 6059 nxtgenpho no 3587080982063726 310410214827503 APPLE 1880=8 6920 04/20/20 20:01:28 2:03 6059 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 1880=8 6921 04/20/20 20:03:31 28:33 6791 5554 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6922 04/20/20 20:09:46 22:27 5072 1572 ims 3587080982063726 310410214827503 APPLE 1880=8 6923 04/20/20 20:32:04 10:20 8061 13927 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6924 04/20/20 20:32:04 10:21 13927 7677 nxtgenpho no 3587080982063726 310410214827503 APPLE 1880=8 6925 04/20/20 20:32:12 4:42 7266 6796 imp 3587080982063726 310410214827503 APPLE 1880=8 6926 04/20/20 20:32:13 4:42 6796 7110 imp 3587080982063726 310410214827503 APPLE DRONES 6927 04/20/20 20:33:14 0:35 20186 20440 imp -1 310410214827503 6928 04/20/20 20:34:24 3:10 6166 6334 in 3587080982063726 310410214827503 APPLE 1880=8 6929 04/20/20 20:34:25 3:10 6334 5814 in 3587080982063726 310410214827503 APPLE !PHONES 6930 04/20/20 20:36:49 3:05 9888 6212 in -1 310410214827503 6931 04/20/20 20:37:33 4:51 6368 7406 1ms 3587080982063726 310410214827503 APPLE DRONES 6932 04/20/20 20:37:34 4:51 7406 6212 in 3587080982063726 310410214827503 APPLE !PHONES 6933 04/20/20 20:39:54 60:00 19946 9823 in -1 310410214827503 6934 04/20/20 20:42:24 3:27 5217 6021 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 6935 04/20/20 20:42:25 3:27 6021 4929 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6936 04/20/20 20:45:52 2:36 5422 7216 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6937 04/20/20 20:45:53 2:36 7216 5134 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6938 04/20/20 20:48:29 60:00 7899 5752 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6939 04/20/20 21:39:54 11:46 0 0 los 3587080982063726 310410214827503 APPLE DRONES 6940 04/20/20 21:48:29 14:48 14781 52147 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 6941 04/20/20 21:51:40 11:28 3624 2324 1ms 3587080982063726 310410214827503 APPLE !PHONES 6942 04/20/20 21:51:40 11:28 3560 2324 in 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002929 not for general distribution. Page 285 EFTA_00I 17005 EFTA01251529 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. trLds'`s AT&T Run pato: Run Time: Data Osage for: Itea Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes UP Bytes Apn Dn INZI sa INSI MARL MODEL 6943 04/20/20 22:03:08 9:58 3424 1324 los 3587080982063726 310410214827503 APPLE !PHONES 6944 04/20/20 22:03:16 2:03 5116 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 6945 04/20/20 22:03:17 2:03 6023 4828ruagonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6946 04/20/20 22:05:20 22:51 28862 15687ruagonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6947 04/20/20 22:22:52 1:07 7994 6106 ins 3587080982063726 310410214827503 APPLE 'PHONES 6948 04/20/20 22:23:59 2:33 3316 1216 ins 3587080982063726 310410214827503 APPLE 'PHONES 6949 04/20/20 22:26:32 1:39 2876 1432 ins 3587080982063726 310410214827503 APPLE 'PHONES 6950 04/20/20 22:28:10 16:02 29688 69117ruagonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6951 04/20/20 22:28:11 16:01 7140 28630 ins 3587080982063726 310410214827503 APPLE 'PHONES 6952 04/20/20 22:28:11 16:02 69117 29829natgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6953 04/20/20 22:28:12 16:01 6754 6876 ins 3587080982063726 310410214827503 APPLE 'PHONES 6954 04/20/20 22:44:13 4:57 8969 5236natgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6955 04/20/20 22:44:15 4:55 9154 6282 ins 3587080982063726 310410214827503 APPLE !PHONES 6956 04/20/20 22:49:09 2:17 5350 7204ruagonpho no 3587080982063726 310410214827503 APPLE !PHONES 6957 04/20/20 22:49:10 2:16 6244 6782 ins 3587080982063726 310410214827503 APPLE 'PHONES 6958 04/20/20 22:49:10 2:17 7204 5062 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6959 04/20/20 22:49:11 2:16 6674 5980 ins 3587080982063726 310410214827503 APPLE 'PHONES 6960 04/20/20 22:51:27 2:58 7639 5224ruagonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6961 04/20/20 22:51:29 2:56 8346 8080 ins 3587080982063726 310410214827503 APPLE 'PHONES 6962 04/20/20 22:54:24 7:33 30216 11112ruagonpho no 3587080982063726 310410214827503 APPLE !PHONES 6963 04/20/20 22:54:25 7:32 6262 6668 ins 3587080982063726 310410214827503 APPLE !PHONES 6964 04/20/20 22:54:25 7:33 11112 29928ruagonpho no 3587080982063726 310410214827503 APPLE !PHONES 6965 04/20/20 22:54:26 7:32 6668 6106 ins 3587080982063726 310410214827503 APPLE 'PHONES 6966 04/20/20 22:57:21 21:14 11404 6546 ins 3587080982063726 310410214827503 APPLE 'PHONES 6967 04/20/20 23:01:58 7:04 144 Oruagonpho no 3587080982063726 310410214827503 APPLE 'PHONES 6968 04/20/20 23:09:01 2:28 5222 6023ruagonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 286 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002930 NeTntikE not for general distribution. EFTAJVII7006 EFTA01251530 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 4111. AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time (UTC) Originating Humber ET Bytes Byte. Apn Up Dn IMBI MOLL 6969 04/20/20 23:09:03 2:27 6023 4934 natgonpho no 3587080982063726 310410214827503 APPLE 6970 04/20/20 23:11:30 1:49 6593 5565ruftgonpho no 3587080982063726 310410214827503 APPLE 6971 04/20/20 23:13:18 0:38 5220 6023ruftgonpho no 3587080982063726 310410214827503 APPLE 6972 04/20/20 23:13:19 0:38 6023 4932ruftgonpho no 3587080982063726 310410214827503 APPLE 6973 04/20/20 23:13:57 0:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 6974 04/20/20 23:14:34 28:33 23060 65583ruftgonpho no 3587080982063726 310410214827503 APPLE 6975 04/20/20 23:18:35 24:32 3500 1464 ims 3587080982063726 310410214827503 APPLE 6976 04/20/20 23:18:35 24:32 3436 1464 ims 3587080982063726 310410214827503 APPLE 6977 04/20/20 23:43:06 2:04 5220 6023ruftgonpho no 3587080982063726 310410214827503 APPLE 6978 04/20/20 23:43:08 2:03 6023 4932ruftgonpho no 3587080982063726 310410214827503 APPLE 6979 04/20/20 23:43:10 12:40 8209 5998 vas 3587080982063726 310410214827503 APPLE 6980 04/20/20 23:45:11 16:07 7990 7760 nxtgonpho no 3587080982063726 310410214827503 APPLE 6981 04/20/20 23:55:50 1:02 3500 1464 ims 3587080982063726 310410214827503 APPLE 6982 04/20/20 23:55:50 1:02 3436 1464 ims 3587080982063726 310410214827503 APPLE 6983 04/20/20 23:56:52 14:13 3748 1448 ims 3587080982063726 310410214827503 APPLE 6984 04/21/20 00:01:18 2:08 5116 6023ruftgonpho no 3587080982063726 310410214827503 APPLE 6985 04/21/20 00:01:19 2:09 6023 4828ruftgonpho no 3587080982063726 310410214827503 APPLE 6986 04/21/20 00:03:27 41:50 103606 116687ruftgonpho no 3587080982063726 310410214827503 APPLE 6987 04/21/20 00:11:05 4:38 3392 1464 ims 3587080982063726 310410214827503 APPLE 6988 04/21/20 00:11:05 4:38 3328 1464 ims 3587080982063726 310410214827503 APPLE 6989 04/21/20 00:15:43 20:39 3640 1556 ims 3587080982063726 310410214827503 APPLE 6990 04/21/20 00:36:21 8:56 3392 1464 ims 3587080982063726 310410214827503 APPLE 6991 04/21/20 00:36:22 8:55 3328 1464 ims 3587080982063726 310410214827503 APPLE 6992 04/21/20 00:45:16 10:21 474245 415469ruftgonpho no 3587080982063726 310410214827503 APPLE 6993 04/21/20 00:45:17 4:48 6184 6666 ims 3587080982063726 310410214827503 APPLE 6994 04/21/20 00:45:17 10:21 414029 473957ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES !PHONES !PHONES !PHONES IPROME8 !PHONES 1PROME8 1PROME8 1PROME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do.not necessarily indicate a customer initiated a transaction. Page 287 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002931 Psi sTilikk not for general distribution. EF-EAJVII7007 EFTA01251531 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 41111, tt-aa`s.o AT&T Run pato: Run Time: Data Usage For: Item cows. Date 06/17/2020 Conn. Timo (DEC) originating Number ET Bytes up Bytes Apn Dn INEZ INS I 6995 04/21/20 00:45:18 4:48 6666 5920 imp 3587080982063726 310410214827503 6996 04/21/20 00:49:16 10:32 12157 15378 imp -1 310410214827503 6997 04/21/20 00:50:00 0:08 0 0 imp -1 310410214827503 6998 04/21/20 00:50:04 5:33 19964 20963 imp 3587080982063726 310410214827503 6999 04/21/20 00:50:06 5:32 20848 29632 imp 3587080982063726 310410214827503 7000 04/21/20 00:50:17 0:57 88418 90197 imp 3587080982063726 310410214827503 7001 04/21/20 00:50:18 0:57 90197 88418 imp 3587080982063726 310410214827503 7002 04/21/20 00:55:38 141:47 270650 41894 nxtgenpho no 3587080982063726 310410214827503 7003 04/21/20 00:55:39 60:00 13957 11771 nxtgenpho no 3587080982063726 310410214827503 7004 04/21/20 00:55:42 141:43 14192 13604 imp 3587080982063726 310410214827503 7005 04/21/20 00:55:43 60:00 13496 13948 imp 3587080982063726 310410214827503 7006 04/21/20 01:55:01 10:30 0 0 imp -1 310410214827503 7007 04/21/20 01:55:39 60:00 7867 10774 nxtgenpho no 3587080982063726 310410214827503 7008 04/21/20 01:55:43 60:00 0 108 imp 3587080982063726 310410214827503 7009 04/21/20 02:51:08 26:17 9500 9468 imp 3587080982063726 310410214827503 7010 04/21/20 02:51:09 26:17 9468 23404 imp 3587080982063726 310410214827503 7011 04/21/20 02:55:39 21:47 20070 254933 nxtgenpho no 3587080982063726 310410214827503 7012 04/21/20 02:55:43 21:43 0 0 imp 3587080982063726 310410214827503 7013 04/21/20 03:17:26 7:00 16739 25220 nxtgenpho no 3587080982063726 310410214827503 7014 04/21/20 03:17:28 6:58 11434 8322 imp 3587080982063726 310410214827503 7015 04/21/20 03:18:09 0:16 64 60 nxtgonpho no -1 310410214827503 7016 04/21/20 03:24:25 0:24 192 0 nxtgenpho no 3587080982063726 310410214827503 7017 04/21/20 03:24:26 0:23 9439 8671 nxtgonpho no 3587080982063726 310410214827503 7018 04/21/20 03:24:27 0:23 8671 9151 nxtgenpho no 3587080982063726 310410214827503 7019 04/21/20 03:24:27 0:23 0 Orumgonpho no 3587080982063726 310410214827503 7020 04/21/20 03:24:36 5:34 0 0 imp -1 310410214827503 7021 04/21/20 03:24:50 1:39 0 Ommtgonpho no 3587080982063726 310410214827503 7022 04/21/20 03:24:53 1:36 18702 17695 imp 3587080982063726 310410214827503 AT&T Proprietary MAD; /CULL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 288 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is SDNY_GM_ 00002932 NeTnilikk not for general distribution. EFTA_001 17008 EFTA01251532 MOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4111. AT&T Run pato: Run Time: Data Osage For: Itea Conn. Date 06/17/2020 Conn. Time (0TC) Originating Number Cr Bytes UP Bytea Apn Dn INZI INSI MARL NICOLL 7023 04/21/20 03:26:28 7:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7024 04/21/20 03:26:29 6:59 5316 6071 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7025 04/21/20 03:26:29 6:59 6367 6994 ins 3587080982063726 310410214827503 APPLE IPHONE8 7026 04/21/20 03:26:29 7:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7027 04/21/20 03:26:30 6:59 6071 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7028 04/21/20 03:26:31 6:58 6886 6103 ins 3587080982063726 310410214827503 APPLE IPHONE8 7029 04/21/20 03:33:29 10:00 11438 10098 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7030 04/21/20 03:33:30 27:33 10098 11150 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7031 04/21/20 03:33:30 10:00 6262 6784 ins 3587080982063726 310410214827503 APPLE IPHONE8 7032 04/21/20 03:33:31 27:32 6676 5998 ins 3587080982063726 310410214827503 APPLE IPHONE8 7033 04/21/20 04:01:03 2:06 5221 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7034 04/21/20 04:01:04 2:05 8080 6640 ins 3587080982063726 310410214827503 APPLE IPHONE8 7035 04/21/20 04:01:04 2:06 6023 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7036 04/21/20 04:01:05 2:05 6532 7728 ins 3587080982063726 310410214827503 APPLE IPHONE8 7037 04/21/20 04:03:10 1:57 8751 5608 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7038 04/21/20 04:03:14 1:53 20370 14726 ins 3587080982063726 310410214827503 APPLE IPHONE8 7039 04/21/20 04:05:06 160:02 23259 25362ruagonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7040 04/21/20 04:05:07 60:00 16156 14907 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7041 04/21/20 04:05:07 160:01 7676 9326 ins 3587080982063726 310410214827503 APPLE IPHONE8 7042 04/21/20 04:05:08 60:00 9266 7412 ins 3587080982063726 310410214827503 APPLE IPHONE8 7043 04/21/20 04:39:52 60:00 18237 9824 ins -1 310410214827503 7044 04/21/20 05:05:07 60:00 8168 7350 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7045 04/21/20 05:05:08 60:00 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 7046 04/21/20 05:39:52 60:00 8496 3004 ins -1 310410214827503 7047 04/21/20 06:05:07 40:02 1038 1239 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 7048 04/21/20 06:05:08 40:01 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 7049 04/21/20 06:39:52 15:08 0 0 ins 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002933 not for general distribution. Page 289 EF-EAJVII7009 EFTA01251533 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ....,,,,• ••-•°`"1 AT&T Run pato: Run Time: Data Osage for: Itom Conn. Date 06/17/2020 MI= Conn. Originating ET Time Number (Inc) Bytes Up Bytom Apn on re= IMBI ten Men 7050 04/21/20 06:45:09 7:45 6809 4964 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 7051 04/21/20 06:52:53 2:03 5217 6073 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 7052 04/21/20 06:52:54 2:03 6073 4929 nxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 7053 04/21/20 06:54:57 6:25 7495 5067 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7054 04/21/20 06:55:00 6:22 3500 1464 ins 3587080982063726 310410214827503 APPLE IPMONE8 7055 04/21/20 06:55:00 6:22 3436 1464 ins 3587080982063726 310410214827503 APPLE IPMONE8 7056 04/21/20 07:01:21 2:04 5221 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 7057 04/21/20 07:01:22 2:04 6023 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7058 04/21/20 07:01:27 60:00 15117 8909 imo -1 310410214827503 7059 04/21/20 07:03:26 1:51 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7060 04/21/20 07:05:17 37:34 20358 15743ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7061 04/21/20 07:05:18 37:34 15743 20070nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 7062 04/21/20 07:42:51 6:04 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7063 04/21/20 07:42:52 6:03 5218 6073 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7064 04/21/20 07:42:52 6:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7065 04/21/20 07:42:54 6:02 6073 4930 nxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 7066 04/21/20 07:48:56 0:54 6870 5062 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7067 04/21/20 07:49:49 176:20 53195 55623ruagonpho no 3587080982063726 310410214827503 APPLE !PHONES 7068 04/21/20 07:49:50 60:00 22624 20745ruagonpho no 3587080982063726 310410214827503 APPLE 1PROME8 7069 04/21/20 08:01:27 60:00 11488 4564 imo -1 310410214827503 7070 04/21/20 08:49:50 60:00 32018 34682ruagonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7071 04/21/20 09:01:27 60:00 7080 3004 imo -1 310410214827503 7072 04/21/20 09:49:50 56:20 981 735ruagonpho no 3587080982063726 310410214827503 APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 290 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002934 not for general distribution. EFTA_00I 17010 EFTA01251534 MOBILITY The information contained hereleoNfti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run pato: Run Time: Data Osage for: Item Conn. Date 06/17/2020 it= Conn. Time (OTC) Originating Number ET Sytes Up Bytaa Apn On INEI INSI NUT 7073 04/21/20 10:01:27 60:00 9032 3532 imp -1 310410214827503 7074 04/21/20 10:46:10 1:36 6035 5608 nxtgonpho no 3587080982063726 310410214827503 APPLE 7075 04/21/20 10:47:45 2:10 5281 6083 nxtgonpho no 3587080982063726 310410214827503 APPLE 7076 04/21/20 10:47:46 2:10 6083 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE 7077 04/21/20 10:49:56 2:48 7601 5234 nxtgonpho no 3587080982063726 310410214827503 APPLE 7078 04/21/20 10:52:43 2:03 5282 6083 nxtgonpho no 3587080982063726 310410214827503 APPLE 7079 04/21/20 10:52:44 2:03 6083 4994 nxtgonpho no 3587080982063726 310410214827503 APPLE 7080 04/21/20 10:54:47 0:41 7495 5170 nxtgonpho no 3587080982063726 310410214827503 APPLE 7081 04/21/20 10:55:27 2:04 5217 6021 nxtgonpho no 3587080982063726 310410214827503 APPLE 7082 04/21/20 10:55:28 2:04 6021 4929 nxtgonpho no 3587080982063726 310410214827503 APPLE 7083 04/21/20 10:57:32 1:31 8690 5272 nxtgonpho no 3587080982063726 310410214827503 APPLE 7084 04/21/20 10:59:02 8:43 5820 6337 nxtgonpho no 3587080982063726 310410214827503 APPLE 7085 04/21/20 10:59:03 8:43 6337 5532 nxtgonpho no 3587080982063726 310410214827503 APPLE 7086 04/21/20 11:01:27 57:28 6848 2788 in -1 310410214827503 7087 04/21/20 11:07:47 1:52 6093 5666 nxtgonpho no 3587080982063726 310410214827503 APPLE 7088 04/21/20 11:09:38 2:16 5281 6135 nxtgonpho no 3587080982063726 310410214827503 APPLE 7089 04/21/20 11:09:39 2:16 6135 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE 7090 04/21/20 11:11:54 6:04 5221 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE 7091 04/21/20 11:11:55 6:04 6023 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 7092 04/21/20 11:17:58 1:22 7492 5162 nxtgonpho no 3587080982063726 310410214827503 APPLE 7093 04/21/20 11:19:19 2:11 5177 6083 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PROMS !PHONES !PRONGS !PHONES !PHONES !PRONGS !PROMS !PHONES !PHONES !PHONES !PROMS !PHONES !PHONES !PRONGS !PROMS !PHONES !PHONES !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 291 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002935 NeTifikE not for general distribution. EFTA_00I 17011 EFTA01251535 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. flea (UTC) Originating Number ET Bytes Up Byte. Apn Dn INEI IASI MARC 7094 04/21/20 11:19:20 2:11 6083 4889 nxtgenpho no 3587080982063726 310410214827503 APPLE 7095 04/21/20 11:21:31 0:46 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 7096 04/21/20 11:22:16 8:25 5221 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE 7097 04/21/20 11:22:18 8:24 6023 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 7098 04/21/20 11:30:42 0:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 7099 04/21/20 11:31:13 1:07 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 7100 04/21/20 11:32:19 2:04 5117 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE 7101 04/21/20 11:32:20 2:04 6023 4829 nxtgenpho no 3587080982063726 310410214827503 APPLE 7102 04/21/20 11:34:24 2:24 6809 4964 nxtgenpho no 3587080982063726 310410214827503 APPLE 7103 04/21/20 11:36:47 2:04 5217 6021 nxtgenpho no 3587080982063726 310410214827503 APPLE 7104 04/21/20 11:36:49 2:03 6021 4929 nxtgenpho no 3587080982063726 310410214827503 APPLE 7105 04/21/20 11:38:52 4:31 7561 5175 nxtgenpho no 3587080982063726 310410214827503 APPLE 7106 04/21/20 11:43:23 22:19 1568156 186287 nxtgenpho no 3587080982063726 310410214827503 APPLE 7107 04/21/20 11:43:24 22:19 186287 1567868 nxtgenpho no 3587080982063726 310410214827503 APPLE 7108 04/21/20 11:55:39 10:03 6262 6668 imp 3587080982063726 310410214827503 APPLE 7109 04/21/20 11:55:40 10:03 6668 5998 imp 3587080982063726 310410214827503 APPLE 7110 04/21/20 12:01:30 15:33 8205 5982 imp -1 310410214827503 7111 04/21/20 12:05:43 8:19 8843 5002 nxtgenpho no 3587080982063726 310410214827503 APPLE 7112 04/21/20 12:14:01 8:46 5221 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE 7113 04/21/20 12:14:02 8:46 6023 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 7114 04/21/20 12:19:08 3:39 6093 6332 imp 3587080982063726 310410214827503 APPLE 7115 04/21/20 12:19:09 3:39 6332 5829 imp 3587080982063726 310410214827503 APPLE 7116 04/21/20 12:22:48 10:13 7942 5558 nxtgenpho no 3587080982063726 310410214827503 APPLE MODEL !PROMS !PROMS !PROMS !PROMS 1PRONZ8 !PROMS &PROMS &PROMS &PROMS &PROMS &PROMS &PROMS !PROMS !PROMS DRONES DRONES !PROMS !PROMS !PROMS !PROMS DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 292 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002936 NsTatikE not for general distribution. EFTA 00117012 EFTA01251536 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in (ITC. 41111, AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Dunbar ET Bytes Up Bytes Ann Dn IBEX IMBI MARL MODEL 7117 04/21/20 12:22:55 0:01 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 7118 04/21/20 12:23:03 60:00 16813 9127 imp -1 310410214827503 7119 04/21/20 12:33:00 2:31 5218 6021 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7120 04/21/20 12:33:01 2:31 6021 4930roftgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7121 04/21/20 12:35:32 39:47 7786 6621 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7122 04/21/20 13:15:18 2:09 5220 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7123 04/21/20 13:15:19 2:09 6023 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7124 04/21/20 13:17:28 0:35 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7125 04/21/20 13:18:03 14:37 5327 6196 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7126 04/21/20 13:18:03 14:38 6196 5039 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7127 04/21/20 13:23:03 60:00 8496 3020 imp -1 310410214827503 7128 04/21/20 13:32:41 60:00 21223 22862 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7129 04/21/20 14:23:03 60:00 6956 2664 imp -1 310410214827503 7130 04/21/20 14:32:41 25:36 173 105 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7131 04/21/20 14:58:16 12:05 5220 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7132 04/21/20 14:58:17 12:05 6023 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7133 04/21/20 15:10:22 42:02 7915 6132 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7134 04/21/20 15:23:03 60:00 6956 2788 imp -1 310410214827503 7135 04/21/20 15:52:23 0:44 5222 6007 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7136 04/21/20 15:52:24 0:44 6007 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7137 04/21/20 15:53:08 5:29 2311 4584 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 7138 04/21/20 15:58:37 15:43 12797 23917 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7139 04/21/20 15:58:38 15:43 23917 12413 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 293 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002937 not for general distribution. EFTA_00 I 17013 EFTA01251537 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 4111. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number TT Bytes Up Bytes Min Dn IMDI IMBI ten NOD= 7140 04/21/20 16:14:21 59:09 19503 23564 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7141 04/21/20 16:23:03 60:00 15344 6000 ims -1 310410214827503 7142 04/21/20 17:13:30 0:59 6023 4902 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7143 04/21/20 17:14:28 2:03 5221 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7144 04/21/20 17:14:29 2:03 6023 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7145 04/21/20 17:16:32 32:06 25581 20789 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7146 04/21/20 17:23:03 60:00 10144 3176 ims -1 310410214827503 7147 04/21/20 17:48:37 2:15 5216 6073 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7148 04/21/20 17:48:38 2:15 6073 4928 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 7149 04/21/20 17:50:53 2:58 48 Oruftgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 7150 04/21/20 17:53:50 8:59 4504 5791 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7151 04/21/20 17:53:51 8:59 5791 4216 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7152 04/21/20 18:02:50 8:07 7147 5493 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 7153 04/21/20 18:10:57 16:08 6689 6838 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7154 04/21/20 18:10:58 16:08 6838 6401 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7155 04/21/20 18:23:03 38:57 10144 3284 ims -1 310410214827503 7156 04/21/20 18:27:06 0:05 0 Onmtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7157 04/21/20 18:27:22 1:02 2036 3240 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 7158 04/21/20 18:28:23 46:18 1559996 248939 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 7159 04/21/20 18:28:24 46:18 248939 1566448 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7160 04/21/20 19:01:16 13:25 6334 6754 ims 3587080982063726 310410214827503 APPLE !PHONES 7161 04/21/20 19:01:17 13:25 6686 6090 ims 3587080982063726 310410214827503 APPLE !PHONES 7162 04/21/20 19:02:00 60:00 16881 9125 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 294 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002938 not for general distribution. EF-EA_00117014 EFTA01251538 The information contained hereeteNelt 2996479 06/17/2020 MOBILITY dab AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm %---`' s AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Op Byte. Apn On itarx IMBI min ticors 7163 04/21/20 19:14:42 20:30 6694 5931 nactganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7164 04/21/20 19:35:12 42:08 25369 14841ruftganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7165 04/21/20 19:35:13 42:08 14841 24889ruftganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7166 04/21/20 20:02:00 60:00 8496 2912 imp -1 310410214827503 7167 04/21/20 20:17:21 0:05 0 Ormtganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7168 04/21/20 20:17:54 0:05 0 Ormtganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7169 04/21/20 20:18:24 2:18 5221 6075 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 7170 04/21/20 20:18:25 2:18 6075 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 7171 04/21/20 20:20:43 6:28 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 7172 04/21/20 20:20:43 6:28 5281 6083 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 7173 04/21/20 20:20:44 6:28 0 Ormtganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7174 04/21/20 20:20:45 6:27 6083 4993 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7175 04/21/20 20:27:12 36:27 9304 14415 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7176 04/21/20 21:02:00 60:00 8852 3020 imp -1 310410214827503 7177 04/21/20 21:03:38 2:05 5221 6075 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 7178 04/21/20 21:03:39 2:05 6075 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 7179 04/21/20 21:05:44 0:05 0 Onatganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7180 04/21/20 21:06:06 19:18 192 Onatganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7181 04/21/20 21:06:07 19:17 5537 6364 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 7182 04/21/20 21:06:07 19:18 0 Onatganpho no 3587080982063726 310410214827503 APPLE 'PHONES 7183 04/21/20 21:06:08 19:17 6364 5249 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessasly indicate a customer initiated a transaction. Page 295 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002939 NeTniliAL not for general distribution. EFTA_00I 17015 EFTA01251539 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 411., •..... 0 AT&T Run Data: Run Tina: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time flusher (OTC) Bytes Up Byte. Apn Dn INEI IMEI MARL MOLL 7184 04/21/20 21:25:24 8:46 5221 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7185 04/21/20 21:25:26 8:45 6023 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7186 04/21/20 21:34:10 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7187 04/21/20 21:34:11 2:03 5222 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7188 04/21/20 21:34:11 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7189 04/21/20 21:34:12 2:03 6023 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7190 04/21/20 21:36:16 13:01 6754 5943 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7191 04/21/20 21:49:17 22:23 17270 18831 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7192 04/21/20 21:49:17 22:24 18831 18032 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7193 04/21/20 22:02:00 60:00 7528 3144 imp -1 310410214827503 7194 04/21/20 22:11:41 3:33 6255 5722 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7195 04/21/20 22:15:14 2:09 5117 6075 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7196 04/21/20 22:15:15 2:09 6075 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7197 04/21/20 22:17:24 0:52 7433 4966 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7198 04/21/20 22:18:16 104:40 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7199 04/21/20 22:18:16 104:40 37239 50217 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7200 04/21/20 22:18:17 60:00 40853 28204 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7201 04/21/20 22:18:17 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7202 04/21/20 23:02:00 60:00 23032 7208 imp -1 310410214827503 7203 04/21/20 23:18:17 44:40 9269 9746 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7204 04/21/20 23:18:17 44:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 7205 04/22/20 00:02:00 60:00 8604 3036 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 296 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained heraCtoNyFti SDNY_GM_ 00002940 NeTtikE not for general distribution. EFTA_00I 17016 EFTA01251540 MOBILITY The information contained hereleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTE. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in AT&T Run pato: Run Time: Data Osage Tor: 06/17/2020 iiiiiIIIII Item Conn. Date Conn. Originating ET Time Number (OTC) Bytes OP 7206 04/22/20 00:02:57 0:41 7497 7207 04/22/20 00:03:38 8:33 5222 7208 04/22/20 00:03:39 8:33 6023 7209 04/22/20 00:12:12 27:55 6665 7210 04/22/20 00:40:06 8:26 5221 7211 04/22/20 00:40:07 8:26 6023 7212 04/22/20 00:48:33 7:12 19635 7213 04/22/20 00:55:45 23:18 13394 7214 04/22/20 00:55:46 23:18 14918 7215 04/22/20 01:02:00 60:00 7188 7216 04/22/20 01:19:04 7:10 36476 7217 04/22/20 01:26:14 15:18 381115 7218 04/22/20 01:26:15 15:18 345938 7219 04/22/20 01:41:33 0:03 0 7220 04/22/20 01:41:48 4:19 6809 7221 04/22/20 01:46:06 2:03 5117 7222 04/22/20 01:46:07 2:03 6075 7223 04/22/20 01:48:10 5:08 6020 7224 04/22/20 01:53:17 2:04 5221 7225 04/22/20 01:53:19 2:03 6075 7226 04/22/20 01:55:22 60:00 50667 Byte. Apn fuzz Dn INS I NUT MODEL 5070 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES - no 4934 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5532 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6023 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 16024 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 14918 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 14375 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 2912 ins -1 310410214827503 30247 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 345938 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 380731 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no Onntgonpho 3587080982063726 310410214827503 APPLE IPRONE8 no 4965 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6075 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4829 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4788 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6075 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 9205 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 297 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002941 NTniliAL not for general distribution. EFTA_00I 17017 EFTA01251541 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. %C‘ , 10al AT&T Run Data: Run Time: Data Osage Tor: Itea Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytom Apn Dn ItCEI IMBI MARL 7227 04/22/20 02:02:00 60:00 6956 2896 ims -1 310410214827503 7228 04/22/20 02:55:22 46:56 ' 39285 10733 nxtgenpho no 3587080982063726 310410214827503 APPLE 7229 04/22/20 03:02:00 60:00 11580 4252 ims -1 310410214827503 7230 04/22/20 03:42:17 1:16 5217 6021 nxtgenpho no 3587080982063726 310410214827503 APPLE 7231 04/22/20 03:42:18 1:16 6021 4929 nxtgenpho no 3587080982063726 310410214827503 APPLE 7232 04/22/20 03:43:34 31:00 18389 13398 nxtgenpho no 3587080982063726 310410214827503 APPLE 7233 04/22/20 04:02:00 60:00 13676 5140 ims -1 310410214827503 7234 04/22/20 04:14:33 15:09 8218 8151 nxtgenpho no 3587080982063726 310410214827503 APPLE 7235 04/22/20 04:14:34 15:10 8151 9190 nxtgenpho no 3587080982063726 310410214827503 APPLE 7236 04/22/20 04:29:44 3:24 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 7237 04/22/20 04:33:07 4:04 5281 6807 nxtgenpho no 3587080982063726 310410214827503 APPLE 7238 04/22/20 04:33:08 4:04 6807 4993 nxtgenpho no 3587080982063726 310410214827503 APPLE 7239 04/22/20 04:37:12 16:34 30213 21080 nxtgenpho no 3587080982063726 310410214827503 APPLE 7240 04/22/20 04:53:45 5:04 14635 15378 nxtgenpho no 3587080982063726 310410214827503 APPLE 7241 04/22/20 04:53:46 5:04 15378 14251 nxtgenpho no 3587080982063726 310410214827503 APPLE 7242 04/22/20 04:58:50 5:24 7557 5130 nxtgenpho no 3587080982063726 310410214827503 APPLE 7243 04/22/20 05:02:00 60:00 9928 3176 ims -1 310410214827503 7244 04/22/20 05:04:13 8:14 7911 8679 nxtgenpho no 3587080982063726 310410214827503 APPLE 7245 04/22/20 05:04:15 8:13 8679 7431 nxtgenpho no 3587080982063726 310410214827503 APPLE 7246 04/22/20 05:12:28 10:59 7290 5648 nxtgenpho no 3587080982063726 310410214827503 APPLE 7247 04/22/20 05:23:26 8:35 10407 12126 nxtgenpho no 3587080982063726 310410214827503 APPLE 7248 04/22/20 05:23:27 8:35 12126 10023 nxtgenpho no 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES IPHOME8 !PHONES !PHONES !PHONES !PHONES IPROME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 11080=8 11080=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002942 NsToliAL not for general distribution. Page 298 EFTA_00I 17018 EFTA01251542 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. 41111, AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number /OTC) Bytes Op Bytoa Apn Dn ... INEI IMBI MARC 7249 04/22/20 05:32:02 60:00 7270 6421 nxtgenpho no 3587080982063726 310410214827503 APPLE 7250 04/22/20 06:02:00 60:00 8480 2928 ims -1 310410214827503 7251 04/22/20 06:32:02 60:00 17683 13218 nxtgenpho no 3587080982063726 310410214827503 APPLE 7252 04/22/20 07:02:00 60:00 13352 4516 ims -1 310410214827503 7253 04/22/20 07:32:02 60:00 3789 1259 nxtgenpho no 3587080982063726 310410214827503 APPLE 7254 04/22/20 08:02:00 60:00 6848 2680 ims -1 310410214827503 7255 04/22/20 08:32:02 60:00 675 630 nxtgenpho no 3587080982063726 310410214827503 APPLE 7256 04/22/20 09:02:00 60:00 10364 4180 ims -1 310410214827503 7257 04/22/20 09:32:02 60:00 21131 24456ruagenpho no 3587080982063726 310410214827503 APPLE 7258 04/22/20 10:02:00 60:00 11920 4376 ims -1 310410214827503 7259 04/22/20 10:32:02 60:00 21427 22163ruagenpho no 3587080982063726 310410214827503 APPLE 7260 04/22/20 11:02:00 60:00 8496 3144 ims -1 310410214827503 7261 04/22/20 11:32:02 8:02 2942 314ruagenpho no 3587080982063726 310410214827503 APPLE 7262 04/22/20 11:40:03 2:03 5220 6055ruagenpho no 3587080982063726 310410214827503 APPLE 7263 04/22/20 11:40:04 2:03 6055 4932ruagenpho no 3587080982063726 310410214827503 APPLE 7264 04/22/20 11:42:08 60:00 7401 6164ruagenpho no 3587080982063726 310410214827503 APPLE 7265 04/22/20 12:02:00 60:00 6956 2788 ims -1 310410214827503 7266 04/22/20 12:42:08 60:00 95868 7797 nxtgenpho no 3587080982063726 310410214827503 APPLE 7267 04/22/20 13:02:00 60:00 11720 5160 ims -1 310410214827503 7268 04/22/20 13:42:08 54:19 4328 10723ruagenpho no 3587080982063726 310410214827503 APPLE 7269 04/22/20 14:02:00 60:00 14216 5464 ims -1 310410214827503 7270 04/22/20 14:36:26 2:03 5117 6107 nxtgenpho no 3587080982063726 310410214827503 APPLE 7271 04/22/20 14:36:27 2:03 6107 4829 nxtgenpho no 3587080982063726 310410214827503 APPLE 7272 04/22/20 14:38:30 60:00 8661 8450 nxtgenpho no 3587080982063726 310410214827503 APPLE 7273 04/22/20 15:02:00 60:00 8388 3144 ims -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 299 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002943 NTniliAL not for general distribution. EFTA_00I 17019 EFTA01251543 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in 41111, AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. originating LT Time Number (OTC) Bytes UP Bytes Apn Dn INZI INSI MAKE 7274 04/22/20 15:38:30 18:29 0 0 ructgenpho no 3587080982063726 310410214827503 APPLE 7275 04/22/20 16:02:00 60:00 8388 2928 imp -1 310410214827503 7276 04/22/20 16:08:23 36:04 8488 6102 ructgenpho no 3587080982063726 310410214827503 APPLE 7277 04/22/20 16:44:26 2:03 5220 605Snxtgenpho no 3587080982063726 310410214827503 APPLE 7278 04/22/20 16:44:27 2:03 6055 4932 ructgenpho no 3587080982063726 310410214827503 APPLE 7279 04/22/20 16:46:30 0:26 144 0 ructgenpho no 3587080982063726 310410214827503 APPLE 7280 04/22/20 16:50:17 8:27 6641 4385 ructgenpho no 3587080982063726 310410214827503 APPLE 7281 04/22/20 16:58:43 59:18 6522 6807 ructgenpho no 3587080982063726 310410214827503 APPLE 7282 04/22/20 16:58:44 59:18 6807 7923 ructgenpho no 3587080982063726 310410214827503 APPLE 7283 04/22/20 17:02:00 60:00 13460 4516 imp -1 310410214827503 7284 04/22/20 17:58:02 20:23 13334 5774 ructgenpho no 3587080982063726 310410214827503 APPLE 7285 04/22/20 18:02:00 11:01 0 0 ims 3587080982063726 310410214827503 APPLE 7286 04/22/20 18:13:01 5:24 80212 2332 ims 3587080982063726 310410214827503 APPLE 7287 04/22/20 18:13:01 5:24 7756 2332 imp 3587080982063726 310410214827503 APPLE 7288 04/22/20 18:18:24 8:21 7433 6977 nmtgenpho no 3587080982063726 310410214827503 APPLE 7289 04/22/20 18:18:25 8:20 6372 6668 ims 3587080982063726 310410214827503 APPLE 7290 04/22/20 18:18:25 8:21 6977 7145 ructgenpho no 3587080982063726 310410214827503 APPLE 7291 04/22/20 18:18:26 8:20 6668 6108 imp 3587080982063726 310410214827503 APPLE 7292 04/22/20 18:20:53 12:15 8209 6046 imp -1 310410214827503 7293 04/22/20 18:26:46 1:06 6107 4902 ructgenpho no 3587080982063726 310410214827503 APPLE 7294 04/22/20 18:27:51 2:03 5221 6055 ructgenpho no 3587080982063726 310410214827503 APPLE 7295 04/22/20 18:27:52 2:03 6055 4933 ructgenpho no 3587080982063726 310410214827503 APPLE 7296 04/22/20 18:27:57 1:57 8248 6868 ims 3587080982063726 310410214827503 APPLE 7297 04/22/20 18:27:59 1:56 6868 7896 ims 3587080982063726 310410214827503 APPLE 7298 04/22/20 18:29:55 0:42 6135 5976 ructgenpho no 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002944 NaTtAti not for general distribution. Page 300 EFTA 00/17020 EFTA01251544 MOBILITY The information contained hereleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. tr'`si a. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INDI IMEI 7299 04/22/20 18:29:57 0:40 10638 10574 imam 3587080982063726 310410214827503 7300 04/22/20 18:30:36 2:08 6692 6447 nxtgenpho no 3587080982063726 310410214827503 7301 04/22/20 18:30:37 2:07 7114 6848 ins 3587080982063726 310410214827503 7302 04/22/20 18:30:37 2:08 6447 6404 nxtgenpho no 3587080982063726 310410214827503 7303 04/22/20 18:30:38 2:07 6740 6850 ins 3587080982063726 310410214827503 7304 04/22/20 18:32:44 22:37 5537 6408 nxtgenpho no 3587080982063726 310410214827503 7305 04/22/20 18:32:45 22:36 7218 6902 ins 3587080982063726 310410214827503 7306 04/22/20 18:32:45 22:37 6408 5249 nxtgenpho no 3587080982063726 310410214827503 7307 04/22/20 18:32:46 22:36 6794 6954 ins 3587080982063726 310410214827503 7308 04/22/20 18:55:22 35:30 7297 6364 nxtgenpho no 3587080982063726 310410214827503 7309 04/22/20 18:55:26 35:26 9268 7338 ins 3587080982063726 310410214827503 7310 04/22/20 19:30:51 8:39 5870 10352 nxtgenpho no 3587080982063726 310410214827503 7311 04/22/20 19:30:52 8:39 10352 5582 nxtgenpho no 3587080982063726 310410214827503 7312 04/22/20 19:30:55 8:35 6387 7984 ins 3587080982063726 310410214827503 7313 04/22/20 19:30:56 8:35 7984 6123 ins 3587080982063726 310410214827503 7314 04/22/20 19:39:30 2:21 5359 7196 nxtgenpho no 3587080982063726 310410214827503 7315 04/22/20 19:39:31 2:21 7196 5071 nxtgenpho no 3587080982063726 310410214827503 7316 04/22/20 19:39:32 2:19 6264 6664 vas 3587080982063726 310410214827503 7317 04/22/20 19:39:33 2:19 6664 6000 was 3587080982063726 310410214827503 7318 04/22/20 19:41:52 60:00 8453 5962 nxtgenpho no 3587080982063726 310410214827503 7319 04/22/20 19:41:57 60:00 17230 11140 ins 3587080982063726 310410214827503 7320 04/22/20 20:41:52 18:06 578 630 nxtgenpho no 3587080982063726 310410214827503 7321 04/22/20 20:41:57 18:01 10584 7848 ins 3587080982063726 310410214827503 7322 04/22/20 20:59:13 0:15 0 1306 ins 3587080982063726 310410214827503 7323 04/22/20 20:59:57 2:04 5598 10407 nxtgenpho no 3587080982063726 310410214827503 7324 04/22/20 20:59:58 2:04 10407 5310 nxtgenpho no 3587080982063726 310410214827503 7325 04/22/20 21:00:00 2:01 6332 6774 ins 3587080982063726 310410214827503 MARE MODEL APPLE IPMONEB APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE IPMONEB APPLE IPMONEB APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are ',Altered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 301 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM_00002945 NTifikE not for general distribution. EFTA 00/17021 EFTA01251545 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tr‘..al° a 4 AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes UP Byte. Apn Dn IND I INSI 7326 04/22/20 21:00:01 2:01 6774 6068 imp 3587080982063726 310410214827503 7327 04/22/20 21:02:02 23:53 7160 12640 nxtgonpho no 3587080982063726 310410214827503 7328 04/22/20 21:02:06 23:49 6670 5980 imp 3587080982063726 310410214827503 7329 04/22/20 21:25:54 3:30 15456 1830Ormagonpho no 3587080982063726 310410214827503 7330 04/22/20 21:25:55 3:30 18300 15168ruftgonpho no 3587080982063726 310410214827503 7331 04/22/20 21:25:57 3:27 6263 24564 imp 3587080982063726 310410214827503 7332 04/22/20 21:25:58 3:27 6672 5999 imp 3587080982063726 310410214827503 7333 04/22/20 21:29:25 25:21 7251 7012ruftgonpho no 3587080982063726 310410214827503 7334 04/22/20 21:32:40 22:06 28836 28318 imp 3587080982063726 310410214827503 7335 04/22/20 21:49:23 0:31 26902 63297 imp 3587080982063726 310410214827503 7336 04/22/20 21:51:27 0:11 14864 15631 imp 3587080982063726 310410214827503 7337 04/22/20 21:54:45 2:04 5118 6107ruftgonpho no 3587080982063726 310410214827503 7338 04/22/20 21:54:46 2:04 6107 483Ormagonpho no 3587080982063726 310410214827503 7339 04/22/20 21:54:49 2:00 6264 6676 imp 3587080982063726 310410214827503 7340 04/22/20 21:54:50 2:00 6676 6000 imp 3587080982063726 310410214827503 7341 04/22/20 21:56:50 7:14 16547 25461 nxtgonpho no 3587080982063726 310410214827503 7342 04/22/20 21:56:54 7:10 7404 6124 imp 3587080982063726 310410214827503 7343 04/22/20 22:04:03 2:03 5281 6115ruftgonpho no 3587080982063726 310410214827503 7344 04/22/20 22:04:04 2:03 6115 4993ruftgonpho no 3587080982063726 310410214827503 7345 04/22/20 22:04:07 1:59 6458 6998 ism 3587080982063726 310410214827503 7346 04/22/20 22:04:08 1:59 6998 6106 ins 3587080982063726 310410214827503 7347 04/22/20 22:06:07 1:02 7527 5066ruftgonpho no 3587080982063726 310410214827503 7348 04/22/20 22:06:12 0:57 6676 6000 moo 3587080982063726 310410214827503 7349 04/22/20 22:07:08 2:04 5218 6105 nxtgonpho no 3587080982063726 310410214827503 7350 04/22/20 22:07:09 2:04 6105 493Ormagonpho no 3587080982063726 310410214827503 7351 04/22/20 22:07:12 2:00 6168 6672 imp 3587080982063726 310410214827503 7352 04/22/20 22:07:13 2:00 6672 5904 ims 3587080982063726 310410214827503 NUT MOLL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 302 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002946 N:FYNE not for general distribution. EFTA 00/17022 EFTA01251546 MOBILITY The information contained heraCteNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. %---s` 's AT&T Run Data: 06/17/2020 Run Tame: Data Usage For: Item Conn. Data Conn. Time (UTC) Originating ET Number Bytes Up Byte. Dn Apn INEI IMISI 7353 04/22/20 22:09:13 5:21 7529 5071 nxtgonpho no 3587080982063726 310410214827503 7354 04/22/20 22:09:17 5:17 8060 8276 imp 3587080982063726 310410214827503 7355 04/22/20 22:14:33 17:14 11932 13817ruftgonpho no 3587080982063726 310410214827503 7356 04/22/20 22:14:34 17:13 8367 9810 imp 3587080982063726 310410214827503 7357 04/22/20 22:14:34 17:14 13817 11548ruftgonpho no 3587080982063726 310410214827503 7358 04/22/20 22:14:35 17:13 9750 8103 imp 3587080982063726 310410214827503 7359 04/22/20 22:31:48 1:07 0 Onxtgonpho no 3587080982063726 310410214827503 7360 04/22/20 22:32:54 2:03 5116 6055ruftgonpho no 3587080982063726 310410214827503 7361 04/22/20 22:32:55 2:03 6055 4828ruftgonpho no 3587080982063726 310410214827503 7362 04/22/20 22:34:58 6:06 7421 5208 nxtgonpho no 3587080982063726 310410214827503 7363 04/22/20 22:35:00 6:04 7976 6088 imp 3587080982063726 310410214827503 7364 04/22/20 22:41:03 2:03 5118 6055 nxtgonpho no 3587080982063726 310410214827503 7365 04/22/20 22:41:04 2:03 6055 4830 nxtgonpho no 3587080982063726 310410214827503 7366 04/22/20 22:41:06 2:00 6334 6672 imp 3587080982063726 310410214827503 7367 04/22/20 22:41:07 2:00 6672 5982 imp 3587080982063726 310410214827503 7368 04/22/20 22:43:07 16:38 16053 56139ruftgonpho no 3587080982063726 310410214827503 7369 04/22/20 22:43:11 16:34 6670 5980 imp 3587080982063726 310410214827503 7370 04/22/20 22:59:44 8:28 5117 6055 nxtgonpho no 3587080982063726 310410214827503 7371 04/22/20 22:59:45 8:28 6055 4829 nxtgonpho no 3587080982063726 310410214827503 7372 04/22/20 22:59:47 8:25 6262 6676 imp 3587080982063726 310410214827503 7373 04/22/20 22:59:48 8:25 6676 5998 imp 3587080982063726 310410214827503 7374 04/22/20 23:08:13 60:00 209353 269383ruftgonpho no 3587080982063726 310410214827503 7375 04/22/20 23:08:17 60:00 11846 8716 imp 3587080982063726 310410214827503 7376 04/23/20 00:08:13 20:53 398 315ruftgonpho no 3587080982063726 310410214827503 7377 04/23/20 00:08:17 20:49 0 0 imp 3587080982063726 310410214827503 MARL MODEL APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE 1PROME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE 1PROME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PROME8 APPLE 1PROME8 APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 303 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002947 NeTniiiikE not for general distribution. EFTA 00/17023 EFTA01251547 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Data: Run Time: Data Usage for: Item Conn. Data 06/17/2020 18:56:08 Conn. Time (UTC) Originating Number ET Bytes Up Bytoa Apn Dn INZI INSI MARL 7378 04/23/20 00:29:05 19:12 12239 13884 nxtgenpho no 3587080982063726 310410214827503 APPLE 7379 04/23/20 00:29:06 19:12 13884 12599 nxtgenpho no 3587080982063726 310410214827503 APPLE 7380 04/23/20 00:29:09 19:08 6244 6674 ims 3587080982063726 310410214827503 APPLE 7381 04/23/20 00:29:10 19:08 6674 5980 ims 3587080982063726 310410214827503 APPLE 7382 04/23/20 00:48:18 0:47 0 Onatgenpho no 3587080982063726 310410214827503 APPLE 7383 04/23/20 00:48:22 0:43 14108 8448 ims 3587080982063726 310410214827503 APPLE 7384 04/23/20 00:49:05 13:02 12608 14848 nxtgenpho no 3587080982063726 310410214827503 APPLE 7385 04/23/20 00:49:05 13:03 14848 21850 nxtgenpho no 3587080982063726 310410214827503 APPLE 7386 04/23/20 00:49:08 12:59 7102 7940 ims 3587080982063726 310410214827503 APPLE 7387 04/23/20 00:49:09 12:59 7940 6838 ims 3587080982063726 310410214827503 APPLE 7388 04/23/20 01:02:08 1:37 6055 4902 nxtgenpho no 3587080982063726 310410214827503 APPLE 7389 04/23/20 01:02:12 1:33 7980 6028 ims 3587080982063726 310410214827503 APPLE 7390 04/23/20 01:03:44 2:04 5285 7517 nxtgenpho no 3587080982063726 310410214827503 APPLE 7391 04/23/20 01:03:45 2:04 7517 4997 nxtgenpho no 3587080982063726 310410214827503 APPLE 7392 04/23/20 01:03:48 2:00 7352 6852 ims 3587080982063726 310410214827503 APPLE 7393 04/23/20 01:03:49 2:00 6852 7000 ims 3587080982063726 310410214827503 APPLE 7394 04/23/20 01:05:49 60:00 80856 10957 nxtgenpho no 3587080982063726 310410214827503 APPLE 7395 04/23/20 01:05:53 60:00 11846 8720 ims 3587080982063726 310410214827503 APPLE 7396 04/23/20 02:05:49 8:40 742 1615 nxtgenpho no 3587080982063726 310410214827503 APPLE 7397 04/23/20 02:05:53 8:36 0 0 ims 3587080982063726 310410214827503 APPLE 7398 04/23/20 02:14:28 2:10 5163 6052 nxtgenpho no 3587080982063726 310410214827503 APPLE 7399 04/23/20 02:14:30 2:09 6052 4875 nxtgenpho no 3587080982063726 310410214827503 APPLE 7400 04/23/20 02:14:32 2:06 7136 6738 ims 3587080982063726 310410214827503 APPLE 7401 04/23/20 02:14:33 2:06 6738 6872 ims 3587080982063726 310410214827503 APPLE 7402 04/23/20 02:16:39 9:07 6863 5365 nxtgenpho no 3587080982063726 310410214827503 APPLE 7403 04/23/20 02:16:43 9:03 8884 7068 ims 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network cdnstantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 304 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM1100002948 NTnileAsk not for general distribution. EFTA 00117024 EFTA01251548 MOBILITY The information contained heralCoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4111. ...... `•-s"" as f AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 18:56:08 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn Itar IMBI MAfl 7404 04/23/20 02:25:45 8:31 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 7405 04/23/20 02:25:46 8:31 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE 7406 04/23/20 02:25:48 8:28 6262 6672 imo 3587080982063726 310410214827503 APPLE 7407 04/23/20 02:25:49 8:28 6672 5998 ion 3587080982063726 310410214827503 APPLE 7408 04/23/20 02:34:17 44:13 1595978 2206159 nxtgonpho no 3587080982063726 310410214827503 APPLE 7409 04/23/20 02:34:21 44:09 9268 7278 ion 3587080982063726 310410214827503 APPLE 7410 04/23/20 03:18:29 2:09 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 7411 04/23/20 03:18:30 2:09 6107 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 7412 04/23/20 03:18:32 2:06 7136 6742 ion 3587080982063726 310410214827503 APPLE 7413 04/23/20 03:18:34 2:05 6742 6872 ion 3587080982063726 310410214827503 APPLE 7414 04/23/20 03:20:39 60:00 63502 61017 nxtgonpho no 3587080982063726 310410214827503 APPLE 7415 04/23/20 03:20:43 60:00 12686 9716 ion 3587080982063726 310410214827503 APPLE 7416 04/23/20 04:20:39 60:00 15984 65054 nxtgonpho no 3587080982063726 310410214827503 APPLE 7417 04/23/20 04:20:43 60:00 6484 2772 ion 3587080982063726 310410214827503 APPLE 7418 04/23/20 05:20:39 58:47 10049 43453 nxtgonpho no 3587080982063726 310410214827503 APPLE 7419 04/23/20 05:20:43 58:43 5176 2648 imo 3587080982063726 310410214827503 APPLE 7420 04/23/20 06:19:25 2:27 7395 6176 nxtgonpho no 3587080982063726 310410214827503 APPLE 7421 04/23/20 06:19:26 2:27 6176 7107 nxtgonpho no 3587080982063726 310410214827503 APPLE 7422 04/23/20 06:19:29 2:23 6388 7976 imo 3587080982063726 310410214827503 APPLE 7423 04/23/20 06:19:30 2:23 7976 6124 imo 3587080982063726 310410214827503 APPLE 7424 04/23/20 06:21:53 21:20 7875 5333 nxtgonpho no 3587080982063726 310410214827503 APPLE 7425 04/23/20 06:21:58 21:15 7404 6124 imp 3587080982063726 310410214827503 APPLE 7426 04/23/20 06:43:12 8:31 5326 6228 nxtgonpho no 3587080982063726 310410214827503 APPLE 7427 04/23/20 06:43:14 8:30 6228 5038 nxtgonpho no 3587080982063726 310410214827503 APPLE 7428 04/23/20 06:43:16 8:27 6264 6676 imo 3587080982063726 310410214827503 APPLE 7429 04/23/20 06:43:17 8:27 6676 6000 ion 3587080982063726 310410214827503 APPLE NICOLL 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHOME8 1OHOME8 1OHOME8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 1OHONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 305 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGM00002949 NaTtAdti not for general distribution. EFTA 00/17025 EFTA01251549 The information contained hereCtoNfti 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4111. AT&T Run Date: Run Timo: Data Osage For: Item Conn. Data 06/17/2020 SIM Conn. Originating Time Number (OTC) ET Bytes Op Bytom Apn On ICI IASI ten 7430 04/23/20 06:51:44 0:40 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7431 04/23/20 06:51:47 0:37 8150 6964 imp 3587080982063726 310410214827503 APPLE 7432 04/23/20 06:52:23 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7433 04/23/20 06:52:24 2:03 5160 6102 nxtgonpho no 3587080982063726 310410214827503 APPLE 7434 04/23/20 06:52:24 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7435 04/23/20 06:52:25 2:03 6102 4872 nxtgonpho no 3587080982063726 310410214827503 APPLE 7436 04/23/20 06:52:26 2:01 6263 6784 imp 3587080982063726 310410214827503 APPLE 7437 04/23/20 06:52:28 2:00 6676 5999 imp 3587080982063726 310410214827503 APPLE 7438 04/23/20 06:54:28 3:09 6157 4957 nxtgonpho no 3587080982063726 310410214827503 APPLE 7439 04/23/20 06:54:32 3:05 10890 8164 imp 3587080982063726 310410214827503 APPLE 7440 04/23/20 06:57:36 8:39 5224 6112 nxtgonpho no 3587080982063726 310410214827503 APPLE 7441 04/23/20 06:57:37 8:40 6112 4936 nxtgonpho no 3587080982063726 310410214827503 APPLE 7442 04/23/20 06:57:40 8:35 6262 6676 imp 3587080982063726 310410214827503 APPLE 7443 04/23/20 06:57:41 8:36 6676 5998 imp 3587080982063726 310410214827503 APPLE 7444 04/23/20 07:06:16 14:31 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7445 04/23/20 07:06:17 14:30 5782 6467 nxtgonpho no 3587080982063726 310410214827503 APPLE 7446 04/23/20 07:06:17 14:31 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7447 04/23/20 07:06:18 14:30 6467 5398 nxtgonpho no 3587080982063726 310410214827503 APPLE 7448 04/23/20 07:10:51 9:56 6246 6670 imp 3587080982063726 310410214827503 APPLE 7449 04/23/20 07:10:52 9:56 6670 5982 imp 3587080982063726 310410214827503 APPLE 7450 04/23/20 07:20:48 0:44 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7451 04/23/20 07:20:52 0:40 9630 7210 imp 3587080982063726 310410214827503 APPLE 7452 04/23/20 07:21:31 8:30 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7453 04/23/20 07:21:32 8:29 5318 6103 nxtgonpho no 3587080982063726 310410214827503 APPLE NODEL IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 DRONES DRONES IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 306 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002950 PsiTi fikE not for general distribution. EFTA 00/17026 EFTA01251550 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Humber (OTC) Bytes Up Bytes Apn Dn INEZ IMEI NMI 7454 04/23/20 07:21:33 8:29 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 7455 04/23/20 07:21:33 8:29 6103 4934 nxtgenpho no￾3587080982063726 310410214827503 APPLE 7456 04/23/20 07:21:35 8:26 7264 7478 vas 3587080982063726 310410214827503 APPLE 7457 04/23/20 07:21:36 8:26 7478 7000 sms 3587080982063726 310410214827503 APPLE 7458 04/23/20 07:30:01 2:04 5528 7001 nxtgenpho no 3587080982063726 310410214827503 APPLE 7459 04/23/20 07:30:03 2:02 6244 6666 ims 3587080982063726 310410214827503 APPLE 7460 04/23/20 07:30:03 2:03 7001 5240 nxtgenpho no 3587080982063726 310410214827503 APPLE 7461 04/23/20 07:30:04 2:02 6666 5980 ims 3587080982063726 310410214827503 APPLE 7462 04/23/20 07:32:06 0:43 0 Oruagenpho no 3587080982063726 310410214827503 APPLE 7463 04/23/20 07:32:48 20:32 5641 6460 nxtgenpho no 3587080982063726 310410214827503 APPLE 7464 04/23/20 07:32:49 20:32 6460 5353 nxtgenpho no 3587080982063726 310410214827503 APPLE 7465 04/23/20 07:32:50 20:30 6263 6672 ims 3587080982063726 310410214827503 APPLE 7466 04/23/20 07:32:51 20:30 6672 5999 ims 3587080982063726 310410214827503 APPLE 7467 04/23/20 07:53:21 1:45 7208 5270 nxtgenpho no 3587080982063726 310410214827503 APPLE 7468 04/23/20 07:53:25 1:41 8076 6948 ims 3587080982063726 310410214827503 APPLE 7469 04/23/20 07:55:05 52:06 6655 7416 nxtgenpho no 3587080982063726 310410214827503 APPLE 7470 04/23/20 07:55:06 52:06 7416 6367 nxtgenpho no 3587080982063726 310410214827503 APPLE 7471 04/23/20 07:55:09 52:02 9020 11868 ims 3587080982063726 310410214827503 APPLE 7472 04/23/20 07:55:10 52:02 11868 8756 ims 3587080982063726 310410214827503 APPLE 7473 04/23/20 08:47:12 1:09 9476 5198 nxtgenpho no 3587080982063726 310410214827503 APPLE 7474 04/23/20 08:47:16 1:05 8108 7126 ims 3587080982063726 310410214827503 APPLE 7475 04/23/20 08:48:20 2:05 5163 6104 nxtgenpho no 3587080982063726 310410214827503 APPLE 7476 04/23/20 08:48:22 2:04 6104 4875 nxtgenpho no 3587080982063726 310410214827503 APPLE 7477 04/23/20 08:48:24 2:01 6244 6674 ims 3587080982063726 310410214827503 APPLE 7478 04/23/20 08:48:25 2:01 6674 5980 ims 3587080982063726 310410214827503 APPLE 7479 04/23/20 08:50:26 0:44 10026 5440 nxtgenpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 'PHONES IPHONE8 IPHONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 'PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 !PRONGS !PRONGS !PRONGS !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 307 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002951 PsiTn iliAL not for general distribution. EFTA 00/17027 EFTA01251551 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41111, ....,,,,si •-ags"" s AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 Itea Conn. Conn. Data Time (OTC) Originating Number TT Bytes Byte. Apn Up Dn 7480 04/23/20 08:50:30 0:40 8228 7481 04/23/20 08:51:10 45:55 6225 7482 04/23/20 08:51:11 45:55 7910 7483 04/23/20 08:51:13 45:52 8715 7484 04/23/20 08:51:14 45:52 9392 7485 04/23/20 09:37:06 1:19 12856 7486 04/23/20 09:37:10 1:15 9510 7487 04/23/20 09:38:24 8:26 5165 7488 04/23/20 09:38:26 8:25 6052 7489 04/23/20 09:38:28 8:22 7231 7490 04/23/20 09:38:30 8:21 6794 7491 04/23/20 09:46:51 0:41 6873 7492 04/23/20 09:46:55 0:37 8152 7493 04/23/20 09:47:31 20:51 5793 7494 04/23/20 09:47:32 20:51 6533 7495 04/23/20 09:47:34 20:48 6243 7496 04/23/20 09:47:35 20:48 6674 7497 04/23/20 10:08:23 0:42 6977 7498 04/23/20 10:08:27 0:38 8152 7499 04/23/20 10:09:04 8:21 5165 7500 04/23/20 10:09:05 8:21 6052 7501 04/23/20 10:09:07 8:18 6263 7502 04/23/20 10:09:09 8:17 6672 7503 04/23/20 10:17:26 0:35 0 7504 04/23/20 10:18:00 14:59 5579 7505 04/23/20 10:18:01 14:59 6455 IMBI teal NICOLL 7836 imp 3587080982063726 310410214827503 APPLE !PHONES 7910 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5937ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 9392 imp 3587080982063726 310410214827503 APPLE IPH01428 8451 imp 3587080982063726 310410214827503 APPLE IPH01428 5846ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 7148 imp 3587080982063726 310410214827503 APPLE !PHONES 6052ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4877ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6794 imp 3587080982063726 310410214827503 APPLE !PHONES 6967 imp 3587080982063726 310410214827503 APPLE IPH01428 4965ruftgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 6944 imp 3587080982063726 310410214827503 APPLE IPH01428 6533ruftgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 5505ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6674 ins 3587080982063726 310410214827503 APPLE !PHONES 5979 ins 3587080982063726 310410214827503 APPLE !PHONES 5024ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6942 ins 3587080982063726 310410214827503 APPLE IPH01428 6052nxtgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 4877ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 6672 ins 3587080982063726 310410214827503 APPLE IPH01428 5999 ins 3587080982063726 310410214827503 APPLE IPH01428 Oruftgonpho 3587080982063726 310410214827503 APPLE IPH01428 no 6455ruftgonpho 3587080982063726 310410214827503 APPLE IPHONE8 no 5291ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 308 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002952 Ns not for general distribution. EFTA 00/17028 EFTA01251552 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. •-cji`a. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 1S:56:09 Conn. Originating ET Time Number (OTC) Sytos Up Bytes Apn Dn INEI NUT 7506 04/23/20 10:18:10 14:49 6225 6648 imp 3587080982063726 310410214827503 APPLE 7507 04/23/20 10:18:11 14:49 6648 5961 imp 3587080982063726 310410214827503 APPLE 7508 04/23/20 10:33:00 27:14 5689 6578 nxtgonpho no 3587080982063726 310410214827503 APPLE 7509 04/23/20 10:33:01 27:13 7675 9392 imp 3587080982063726 310410214827503 APPLE 7510 04/23/20 10:33:01 27:14 6578 5401ruftgonpho no 3587080982063726 310410214827503 APPLE 7511 04/23/20 10:33:02 27:13 9392 7411 imp 3587080982063726 310410214827503 APPLE 7512 04/23/20 11:00:15 1:27 7465 5385ruftgonpho no 3587080982063726 310410214827503 APPLE 7513 04/23/20 11:00:19 1:23 8086 6962 ins 3587080982063726 310410214827503 APPLE 7514 04/23/20 11:01:42 2:03 5281 6115ruftgonpho no 3587080982063726 310410214827503 APPLE 7515 04/23/20 11:01:43 2:03 6115 4993ruftgonpho no 3587080982063726 310410214827503 APPLE 7516 04/23/20 11:01:45 2:00 6226 6648 imp 3587080982063726 310410214827503 APPLE 7517 04/23/20 11:01:47 1:59 6648 5962 imp 3587080982063726 310410214827503 APPLE 7518 04/23/20 11:03:46 1:27 6387 5126ruftgonpho no 3587080982063726 310410214827503 APPLE 7519 04/23/20 11:03:50 1:23 9518 7198 imp 3587080982063726 310410214827503 APPLE 7520 04/23/20 11:05:12 8:23 5100 6092ruftgonpho no 3587080982063726 310410214827503 APPLE 7521 04/23/20 11:05:13 8:23 6092 4812ruftgonpho no 3587080982063726 310410214827503 APPLE 7522 04/23/20 11:05:16 8:19 6264 6664 imp 3587080982063726 310410214827503 APPLE 7523 04/23/20 11:05:17 8:19 6664 6000 imp 3587080982063726 310410214827503 APPLE 7524 04/23/20 11:13:36 2:51 16063 5896ruftgonpho no 3587080982063726 310410214827503 APPLE 7525 04/23/20 11:13:40 2:47 9004 7178 imp 3587080982063726 310410214827503 APPLE 7526 04/23/20 11:16:26 8:24 5222 6055ruftgonpho no 3587080982063726 310410214827503 APPLE 7527 04/23/20 11:16:28 8:23 6055 4934ruftgonpho no 3587080982063726 310410214827503 APPLE 7528 04/23/20 11:16:30 8:20 7200 6806 imp 3587080982063726 310410214827503 APPLE 7529 04/23/20 11:16:31 8:20 6806 6936 imp 3587080982063726 310410214827503 APPLE 7530 04/23/20 11:24:51 5:59 7721 5386ruftgonpho no 3587080982063726 310410214827503 APPLE 7531 04/23/20 11:24:55 5:55 8078 6922 imp 3587080982063726 310410214827503 APPLE 7532 04/23/20 11:30:49 2:03 5163 6052ruftgonpho no 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 309 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGAt00002953 NTnilikk not for general distribution. EFTA 00/17029 EFTA01251553 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. t`'ts-saasst ,# AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 18:56:09 Conn. originating ET Time Number (UTC) Bytes UP Byte. Apn Dn INLI INSI MARL NICOLL 7533 04/23/20 11:30:50 2:03 6052 4875 mmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7534 04/23/20 11:30:51 2:01 6166 6668 ims 3587080982063726 310410214827503 APPLE DRONES 7535 04/23/20 11:30:52 2:01 6668 5902 ims 3587080982063726 310410214827503 APPLE !PHONES 7536 04/23/20 11:32:53 12:49 9332 5562rumgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 7537 04/23/20 11:32:58 12:44 8224 7830 ims 3587080982063726 310410214827503 APPLE DRONES 7538 04/23/20 11:45:41 2:04 5267 6139rumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7539 04/23/20 11:45:43 2:03 6139 4979rumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7540 04/23/20 11:45:45 2:00 6262 6676 ims 3587080982063726 310410214827503 APPLE DRONES 7541 04/23/20 11:45:46 2:00 6676 5998 ims 3587080982063726 310410214827503 APPLE DRONES 7542 04/23/20 11:47:46 10:46 7944 5750rumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7543 04/23/20 11:47:58 10:34 8880 7068 ims 3587080982063726 310410214827503 APPLE DRONES 7544 04/23/20 11:58:31 2:04 5281 6115rumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7545 04/23/20 11:58:32 2:04 6115 4993rumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7546 04/23/20 11:58:35 2:00 6244 6674 ins 3587080982063726 310410214827503 APPLE DRONES 7547 04/23/20 11:58:36 2:00 6674 5980 Las 3587080982063726 310410214827503 APPLE DRONES 7548 04/23/20 12:00:36 1:35 0 Orumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7549 04/23/20 12:00:40 1:31 7408 6124 was 3587080982063726 310410214827503 APPLE DRONES 7550 04/23/20 12:02:10 2:04 192 Ormtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7551 04/23/20 12:02:11 2:03 5165 6052mmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7552 04/23/20 12:02:12 2:03 0 Orumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7553 04/23/20 12:02:13 2:02 6052 4877rumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7554 04/23/20 12:02:14 2:00 6245 6674 ims 3587080982063726 310410214827503 APPLE DRONES 7555 04/23/20 12:02:15 2:00 6674 5981 ims 3587080982063726 310410214827503 APPLE DRONES 7556 04/23/20 12:04:15 28:53 12111 7268rumgonpho no 3587080982063726 310410214827503 APPLE DRONES 7557 04/23/20 12:04:19 28:49 12248 7623 ims 3587080982063726 310410214827503 APPLE 1PRONE8 7558 04/23/20 12:33:07 4:04 5160 6050rumgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 310 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002954 not for general distribution. EFTA_00I 17030 EFTA01251554 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 la.66.0 Item Conn. Conn. Date Time originating Number ET Bytes Bytes Apn Up Dn INZI INSI MARL MODEL (OTC) 7559 04/23/20 12:33:08 4:04 6050 4872 nxtgenpho no 3587080982063726 310410214827503 7560 04/23/20 12:33:11 4:00 7154 6744 ins 3587080982063726 310410214827503 7561 04/23/20 12:33:12 4:00 6744 6890 ins 3587080982063726 310410214827503 7562 04/23/20 12:37:12 3:14 7527 5065 nxtgenpho no 3587080982063726 310410214827503 7563 04/23/20 12:37:16 3:10 8078 6924 ins 3587080982063726 310410214827503 7564 04/23/20 12:40:25 0:26 192 Onxtgenpho no 3587080982063726 310410214827503 7565 04/23/20 12:40:26 0:25 5285 6873 nxtgenpho no 3587080982063726 310410214827503 7566 04/23/20 12:40:26 0:26 0 Oruftgenpho no 3587080982063726 310410214827503 7567 04/23/20 12:40:27 0:24 6262 6672 ins 3587080982063726 310410214827503 7568 04/23/20 12:40:27 0:25 6873 4997 nxtgenpho no 3587080982063726 310410214827503 7569 04/23/20 12:40:28 0:24 6672 5998 ins 3587080982063726 310410214827503 7570 04/23/20 12:40:52 45:24 41055 22785 nxtgenpho no 3587080982063726 310410214827503 7571 04/23/20 12:44:56 41:20 10888 7586 ins 3587080982063726 310410214827503 7572 04/23/20 13:26:15 2:30 5479 8994 nxtgenpho no 3587080982063726 310410214827503 7573 04/23/20 13:26:16 2:30 8994 5191 nxtgenpho no 3587080982063726 310410214827503 7574 04/23/20 13:26:18 2:27 6264 6672 ins 3587080982063726 310410214827503 7575 04/23/20 13:26:19 2:27 6672 6000 ins 3587080982063726 310410214827503 7576 04/23/20 13:28:46 60:00 18644 7310 nxtgenpho no 3587080982063726 310410214827503 7577 04/23/20 13:28:49 60:00 11992 9790 ins 3587080982063726 310410214827503 7578 04/23/20 14:28:46 60:00 11286 8017 nxtgenpho no 3587080982063726 310410214827503 7579 04/23/20 14:28:49 60:00 5192 2680 ins 3587080982063726 310410214827503 7580 04/23/20 15:28:46 43:56 3890 1154 nxtgenpho no 3587080982063726 310410214827503 7581 04/23/20 15:28:49 43:53 6048 3680 ins 3587080982063726 310410214827503 7582 04/23/20 16:12:41 9:28 210462 82212 nxtgenpho no 3587080982063726 310410214827503 7583 04/23/20 16:12:42 9:28 82212 210078 nxtgenpho no 3587080982063726 310410214827503 7584 04/23/20 16:12:44 9:25 7136 6746 ins 3587080982063726 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 311 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002955 PsiTn ilikk not for general distribution. EF-EAJVII7031 EFTA01251555 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am CO 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in ap. .....,./ ••-•° `'s AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating Number ET Bytes Bytom Apn up Dn 7585 04/23/20 16:12:46 9:24 6746 7586 04/23/20 16:22:10 3:05 34175 7587 04/23/20 16:22:11 3:04 6674 7588 04/23/20 16:25:14 2:02 49576 7589 04/23/20 16:25:15 2:01 6203 7590 04/23/20 16:25:15 2:02 30161 7591 04/23/20 16:25:17 2:00 6626 7592 04/23/20 16:27:17 37:35 296827 7593 04/23/20 16:27:18 37:34 17708 7594 04/23/20 17:04:51 8:57 1874576 7595 04/23/20 17:04:52 8:56 6274 7596 04/23/20 17:04:52 8:57 290268 7597 04/23/20 17:04:53 8:56 6672 7598 04/23/20 17:10:01 35:05 14519 7599 04/23/20 17:13:49 60:00 8296 7600 04/23/20 17:45:06 32:54 3500 7601 04/23/20 17:45:06 32:54 3436 7602 04/23/20 18:13:49 4:11 1205 7603 04/23/20 18:17:59 4:49 12944 7604 04/23/20 18:18:00 4:49 21967 7605 04/23/20 18:18:02 4:46 6332 7606 04/23/20 18:18:03 4:46 6674 7607 04/23/20 18:22:49 60:00 624911 7608 04/23/20 18:23:12 1:45 8150 7609 04/23/20 18:24:57 3:02 5072 7610 04/23/20 18:28:00 41:00 12358 7611 04/23/20 19:09:00 0:17 3532 7612 04/23/20 19:09:17 44:30 5240 INEI INSI MARL NICOLL 6872 imp 3587080982063726 310410214827503 APPLE !PHONES 57099nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5982 imp 3587080982063726 310410214827503 APPLE !PHONES 30161ruftgonpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6626 imp 3587080982063726 310410214827503 APPLE IPHOME8 49288ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5939 imp 3587080982063726 310410214827503 APPLE !PHONES 1005656ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 12839 imp 3587080982063726 310410214827503 APPLE !PHONES 290268ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6672 imp 3587080982063726 310410214827503 APPLE !PHONES 1881965ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6010 imp 3587080982063726 310410214827503 APPLE !PHONES 7816 imp 3587080982063726 310410214827503 APPLE !PHONES 17936nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 1448 imp 3587080982063726 310410214827503 APPLE !PHONES 1448 imp 3587080982063726 310410214827503 APPLE !PHONES 1734ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 21967ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 12656ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 24278 imp 3587080982063726 310410214827503 APPLE !PHONES 5980 imp 3587080982063726 310410214827503 APPLE !PHONES 637944ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no 6964 imp 3587080982063726 310410214827503 APPLE !PHONES 1588 imp 3587080982063726 310410214827503 APPLE !PHONES 11340 imp 3587080982063726 310410214827503 APPLE !PHONES 1340 imp 3587080982063726 310410214827503 APPLE !PHONES 2664 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 312 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMJ10002956 NeTnileikE not for general distribution. EFTA 00117032 EFTA01251556 MOBILITY The information contained heraCteNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41.1 AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn On INSI MARL 7613 04/23/20 19:22:49 30:58 341613 459168nxtgonpho no 3587080982063726 310410214827503 APPLE 7614 04/23/20 19:53:47 2:16 12300 7796 nxtgonpho no 3587080982063726 310410214827503 APPLE 7615 04/23/20 19:53:49 2:14 8934 6266 imp 3587080982063726 310410214827503 APPLE 7616 04/23/20 19:56:02 2:03 5280 6115 nxtgonpho no 3587080982063726 310410214827503 APPLE 7617 04/23/20 19:56:03 2:03 6115 4992 nxtgonpho no 3587080982063726 310410214827503 APPLE 7618 04/23/20 19:56:09 9:23 8349 6046 imp 3587080982063726 310410214827503 APPLE 7619 04/23/20 19:58:06 18:44 13659 11398 nxtgonpho no 3587080982063726 310410214827503 APPLE 7620 04/23/20 20:05:32 11:18 2876 1340 imp 3587080982063726 310410214827503 APPLE 7621 04/23/20 20:05:32 11:18 2704 1340 imp 3587080982063726 310410214827503 APPLE 7622 04/23/20 20:16:49 2:10 5118 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 7623 04/23/20 20:16:50 2:09 6245 6674 imp 3587080982063726 310410214827503 APPLE 7624 04/23/20 20:16:50 2:10 6107 4830 nxtgonpho no 3587080982063726 310410214827503 APPLE 7625 04/23/20 20:16:52 2:08 6674 5981 imp 3587080982063726 310410214827503 APPLE 7626 04/23/20 20:17:23 32:05 11629 8019 imp 3587080982063726 310410214827503 APPLE 7627 04/23/20 20:19:00 19:13 6542 5572 nxtgonpho no 3587080982063726 310410214827503 APPLE 7628 04/23/20 20:38:12 2:09 5117 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 7629 04/23/20 20:38:13 2:09 6055 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE 7630 04/23/20 20:40:22 60:00 15252 48664 nxtgonpho no 3587080982063726 310410214827503 APPLE 7631 04/23/20 20:49:26 14:04 3500 1464 imp 3587080982063726 310410214827503 APPLE 7632 04/23/20 20:49:28 14:02 3436 1464 imp 3587080982063726 310410214827503 APPLE 7633 04/23/20 21:03:30 10:54 3532 1556 imp 3587080982063726 310410214827503 APPLE 7634 04/23/20 21:14:46 2:56 8082 6072 imp 3587080982063726 310410214827503 APPLE 7635 04/23/20 21:17:42 60:00 15216 4948 imp 3587080982063726 310410214827503 APPLE 7636 04/23/20 21:40:22 29:45 578 630nxtgonpho no 3587080982063726 310410214827503 APPLE 7637 04/23/20 22:10:07 8:24 13380 7147 nxtgonpho no 3587080982063726 310410214827503 APPLE 7638 04/23/20 22:10:08 8:24 7147 13092 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL IOHOME8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 !PHONES !PHONES 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 1101(0=8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002957 NaTtAdti not for general distribution. Page 313 EFTA_00I 17033 EFTA01251557 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 4111. .....af •--s""s AT&T Run Data: Run Elmo: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating Time Number (UTC) ET Bytes Up Bytom Apn Dn IRE' IMEI MARE 7639 04/23/20 22:17:42 60:00 12796 3532 ims 3587080982063726 310410214827503 APPLE 7640 04/23/20 22:18:32 20:55 7702 5331 nxtgenpho no 3587080982063726 310410214827503 APPLE 7641 04/23/20 22:39:26 2:04 5484 8997 nxtgenpho no 3587080982063726 310410214827503 APPLE 7642 04/23/20 22:39:27 2:04 8997 5196 nxtgenpho no 3587080982063726 310410214827503 APPLE 7643 04/23/20 22:41:31 52:11 7228 5911 nxtgenpho no 3587080982063726 310410214827503 APPLE 7644 04/23/20 23:17:42 60:00 6848 2772 ims 3587080982063726 310410214827503 APPLE 7645 04/23/20 23:33:41 2:46 5217 6053 nxtgenpho no 3587080982063726 310410214827503 APPLE 7646 04/23/20 23:33:42 2:46 6053 4929 nxtgenpho no 3587080982063726 310410214827503 APPLE 7647 04/23/20 23:36:28 6:09 5221 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 7648 04/23/20 23:36:29 6:09 6055 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 7649 04/23/20 23:42:38 21:52 6826 6176 nxtgenpho no 3587080982063726 310410214827503 APPLE 7650 04/24/20 00:04:30 30:04 12112 14535 nxtgenpho no 3587080982063726 310410214827503 APPLE 7651 04/24/20 00:04:31 30:04 14535 26285 nxtgenpho no 3587080982063726 310410214827503 APPLE 7652 04/24/20 00:17:42 60:00 15108 4872 ims 3587080982063726 310410214827503 APPLE 7653 04/24/20 00:34:35 7:29 4607 5823 nxtgenpho no 3587080982063726 310410214827503 APPLE 7654 04/24/20 00:34:36 7:29 5823 4319 nxtgenpho no 3587080982063726 310410214827503 APPLE 7655 04/24/20 00:42:04 1:09 5221 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 7656 04/24/20 00:42:05 1:09 6055 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 7657 04/24/20 00:43:14 1:50 7336 6329 nxtgenpho no 3587080982063726 310410214827503 APPLE 7658 04/24/20 00:45:03 5:54 6213 7917 nxtgenpho no 3587080982063726 310410214827503 APPLE 7659 04/24/20 00:45:04 5:54 7917 5925 nxtgenpho no 3587080982063726 310410214827503 APPLE 7660 04/24/20 00:50:58 0:40 6053 4897 nxtgenpho 3587080982063726 310410214827503 APPLE no MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PROMS !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PROMS !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 314 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002958 NsTatikEl not for general distribution. EF-EA_00117034 EFTA01251558 MOBILITY The information contained her Se. (UTC) 7661 04/24/20 00:51:37 2:37 5451 7662 04/24/20 00:51:38 2:37 7589 7663 04/24/20 00:54:15 2:48 5163 7664 04/24/20 00:54:16 2:48 6104 7665 04/24/20 00:57:04 39:45 7935 7666 04/24/20 01:17:42 60:00 6848 7667 04/24/20 01:36:48 9:54 5345 7668 04/24/20 01:36:49 9:54 6933 7669 04/24/20 01:46:43 110:00 27963 7670 04/24/20 01:46:44 60:00 9737 7671 04/24/20 02:17:42 60:00 15216 7672 04/24/20 02:46:44 60:00 17679 7673 04/24/20 03:17:42 60:00 8388 7674 04/24/20 03:46:44 60:00 0 7675 04/24/20 04:17:42 60:00 9928 7676 04/24/20 04:46:44 52:52 0 7677 04/24/20 05:17:42 60:00 8944 7678 04/24/20 06:17:42 60:00 12136 7679 04/24/20 07:17:42 60:00 13352 7680 04/24/20 08:17:42 60:00 6956 7681 04/24/20 09:17:42 60:00 9804 7682 04/24/20 10:17:42 60:00 14892 7683 04/24/20 11:17:42 60:00 8728 7684 04/24/20 12:17:42 60:00 13460 7685 04/24/20 12:40:18 32:00 7700 7686 04/24/20 12:40:19 32:00 18806 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in •.....,,,f `"--s" 1 AT&T Run Data: Run Tina: Data Usage Tor: 06/17/2020 Item Conn. Conn. Originating ET Bytes Byte. Apn INC' IMBI MARL MOLL Data Time Number Up Dn 7589 nxtgenpho 3587080982063726 310410214827503 APPLE IPMONE8 no 5163 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 6104 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4875 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 13375 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2680 ims 3587080982063726 310410214827503 APPLE IPHOME8 6933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5057 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 27416 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 12706 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 5048 ims 3587080982063726 310410214827503 APPLE IPHOME8 18165 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 2928 ims 3587080982063726 310410214827503 APPLE IPHOME8 210 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3176 ims 3587080982063726 310410214827503 APPLE IPHOME8 92 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 3284 ims 3587080982063726 310410214827503 APPLE IPHOME8 4624 ims 3587080982063726 310410214827503 APPLE IPHOME8 4676 ims 3587080982063726 310410214827503 APPLE IPHOME8 2788 ims 3587080982063726 310410214827503 APPLE IPHOME8 3052 ims 3587080982063726 310410214827503 APPLE IPHOME8 4764 ims 3587080982063726 310410214827503 APPLE IPHOME8 3160 ims 3587080982063726 310410214827503 APPLE IPHOME8 4784 ims 3587080982063726 310410214827503 APPLE IPHOME8 18927 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no 7412 nxtgenpho 3587080982063726 310410214827503 APPLE IPHOME8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 315 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002959 PIET /data not for general distribution. EFTA_00I 17035 EFTA01251559 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in trad""se AT&T Run Data: Run Time: Data Osage Tor: 06/17/2020 Item Conn. Data Conn. Time (OTC) 7687 04/24/20 13:12:19 7688 04/24/20 13:17:42 7689 04/24/20 14:07:33 7690 04/24/20 14:07:34 7691 04/24/20 14:17:42 7692 04/24/20 14:26:06 7693 04/24/20 14:26:41 7694 04/24/20 14:26:42 7695 04/24/20 15:17:42 7696 04/24/20 15:26:42 7697 04/24/20 15:38:39 7698 04/24/20 15:39:25 7699 04/24/20 15:39:27 7700 04/24/20 15:42:45 7701 04/24/20 15:44:30 7702 04/24/20 15:44:31 7703 04/24/20 15:46:35 7704 04/24/20 15:46:37 7705 04/24/20 15:47:32 7706 04/24/20 15:47:33 7707 04/24/20 15:47:34 7708 04/24/20 15:47:35 7709 04/24/20 15:48:45 7710 04/24/20 15:52:38 originating Number ET Bytes Bytom Apn INEI IMBI MARL MODEL Up Dn 55:15 7615 7449 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 60:00 12276 4640 1ms 3587080982063726 310410214827503 APPLE IPHOME8 18:32 5325 6280 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 18:32 6280 5037 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 60:00 10360 3408 ims 3587080982063726 310410214827503 APPLE IPMONEB 0:36 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 71:57 13609 8063 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 60:00 7774 13006 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 28:55 3532 1340 ims 3587080982063726 310410214827503 APPLE IPMONEB 11:57 289 315 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 0:47 8786 5408 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3:19 5222 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 3:18 6055 4934 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 1:46 6314 5508 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 2:04 5220 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 2:04 6055 4932 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 0:58 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 0:56 4060 1572 ims 3587080982063726 310410214827503 APPLE IPMONEB 8:35 56774 19623 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONEB 5:05 6496 7408 imp 3587080982063726 310410214827503 APPLE IPHOME8 8:34 19623 56486 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 5:04 7408 6232 ims 3587080982063726 310410214827503 APPLE IPMONEB 10:59 8639 6424 ims -1 310410214827503 3:29 6350 7364 ims 3587080982063726 310410214827503 APPLE IPMONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002960 The information contained her is PsiTniiikE not for general distribution. Page 316 EFTA_00I 17036 EFTA01251560 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr:1 ‘.."1.° AT&T Run Data: Run Time: Data usage for: Item Conn. Data 06/17/2020 18:56:09 Conn. originating ET Time Number (OTC) Bytes Up Bytes Apn on INZI INSI MAfl MODEL 7711 04/24/20 15:52:39 3:29 7364 6086 imp 3587080982063726 310410214827503 APPLE !PHONES 7712 04/24/20 15:56:08 1:19 16507 22802 natTonpho no 3587080982063726 310410214827503 APPLE !PHONES 7713 04/24/20 15:56:10 1:17 7722 6228 imp 3587080982063726 310410214827503 APPLE IPHOME8 7714 04/24/20 15:57:26 2:28 14138 13117ruftmonpho no 3587080982063726 310410214827503 APPLE IPHOME8 7715 04/24/20 15:57:27 2:27 6262 6784 imp 3587080982063726 310410214827503 APPLE !PHONES 7716 04/24/20 15:57:27 2:28 13117 13850ruagonpho no 3587080982063726 310410214827503 APPLE !PHONES 7717 04/24/20 15:57:28 2:27 6676 5998 imp 3587080982063726 310410214827503 APPLE !PHONES 7718 04/24/20 15:59:55 69:17 342170 123308ruftmonpho no 3587080982063726 310410214827503 APPLE !PHONES 7719 04/24/20 15:59:56 60:00 103690 314951ruftmonpho no 3587080982063726 310410214827503 APPLE !PHONES 7720 04/24/20 15:59:56 69:16 9050 11972 imp 3587080982063726 310410214827503 APPLE !PHONES 7721 04/24/20 15:59:57 60:00 11864 8786 imp 3587080982063726 310410214827503 APPLE IPHOME8 7722 04/24/20 16:59:56 9:17 19618 36618roftgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 7723 04/24/20 16:59:57 9:16 0 0 imp 3587080982063726 310410214827503 APPLE !PHONES 7724 04/24/20 17:09:13 14:48 271180 73358ruftmonpho no 3587080982063726 310410214827503 APPLE !PHONES 7725 04/24/20 17:09:14 14:47 6186 6674 imp 3587080982063726 310410214827503 APPLE IPHOME8 7726 04/24/20 17:09:14 14:48 73358 274721roam:mph° no 3587080982063726 310410214827503 APPLE IPHOME8 7727 04/24/20 17:09:15 14:47 6674 5922 imp 3587080982063726 310410214827503 APPLE IPHOME8 7728 04/24/20 17:24:02 17:33 192 Ormagonpho no 3587080982063726 310410214827503 APPLE !PHONES 7729 04/24/20 17:24:03 17:32 375210 34987ruagonpho no 3587080982063726 310410214827503 APPLE !PHONES 7730 04/24/20 17:24:03 17:32 6226 6648 imp 3587080982063726 310410214827503 APPLE !PHONES 7731 04/24/20 17:24:03 17:33 0 Ormamonpho no 3587080982063726 310410214827503 APPLE !PHONES 7732 04/24/20 17:24:04 17:32 6648 5962 imp 3587080982063726 310410214827503 APPLE IPHOME8 7733 04/24/20 17:24:04 17:32 34987 381262ruftmonpho no 3587080982063726 310410214827503 APPLE IPHOME8 7734 04/24/20 17:41:36 2:05 16083 33935ruftmonpho no 3587080982063726 310410214827503 APPLE IPHOME8 7735 04/24/20 17:41:39 2:02 16798 12516 imp 3587080982063726 310410214827503 APPLE IPHOME8 7736 04/24/20 17:43:40 2:05 192 Ormamonpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 317 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002961 not for general distribution. EFTA_00I 17037 EFTA01251561 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 4111. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes UP Bytom Apn Dn ICI IMBI MARL 7737 04/24/20 17:43:41 2:04 27013 16590 nxtgonpho no 3587080982063726 310410214827503 APPLE 7738 04/24/20 17:43:42 2:03 6300 8182 imp 3587080982063726 310410214827503 APPLE 7739 04/24/20 17:43:42 2:04 16590 26725 nxtgonpho no 3587080982063726 310410214827503 APPLE 7740 04/24/20 17:43:42 2:04 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7741 04/24/20 17:43:43 2:03 8074 6036 imp 3587080982063726 310410214827503 APPLE 7742 04/24/20 17:45:46 23:46 26695 51004 nxtgonpho no 3587080982063726 310410214827503 APPLE 7743 04/24/20 17:45:48 23:44 7396 6088 ins 3587080982063726 310410214827503 APPLE 7744 04/24/20 18:09:33 7:32 16579 38321 nxtgonpho no 3587080982063726 310410214827503 APPLE 7745 04/24/20 18:09:35 7:30 8154 6922 imp 3587080982063726 310410214827503 APPLE 7746 04/24/20 18:17:04 9:46 31299 20422 nxtgonpho no 3587080982063726 310410214827503 APPLE 7747 04/24/20 18:17:05 9:45 6316 8184 imp 3587080982063726 310410214827503 APPLE 7748 04/24/20 18:17:05 9:46 20422 31011 nxtgonpho no 3587080982063726 310410214827503 APPLE 7749 04/24/20 18:17:07 9:44 8076 6052 imp 3587080982063726 310410214827503 APPLE 7750 04/24/20 18:26:51 3:39 28350 107693 nxtgonpho no 3587080982063726 310410214827503 APPLE 7751 04/24/20 18:26:53 3:37 8084 6054 imp 3587080982063726 310410214827503 APPLE 7752 04/24/20 18:30:29 2:10 20575 16776 nxtgonpho no 3587080982063726 310410214827503 APPLE 7753 04/24/20 18:30:30 2:09 6369 7406 imp 3587080982063726 310410214827503 APPLE 7754 04/24/20 18:30:30 2:10 16776 20287 nxtgonpho no 3587080982063726 310410214827503 APPLE 7755 04/24/20 18:30:31 2:09 7406 6105 imp 3587080982063726 310410214827503 APPLE 7756 04/24/20 18:32:40 0:47 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7757 04/24/20 18:32:42 0:45 7740 5884 imp 3587080982063726 310410214827503 APPLE 7758 04/24/20 18:33:26 2:04 14593 13724 nxtgonpho no 3587080982063726 310410214827503 APPLE 7759 04/24/20 18:33:26 2:04 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7760 04/24/20 18:33:27 2:03 7233 6906 imp 3587080982063726 310410214827503 APPLE 7761 04/24/20 18:33:27 2:04 13724 14305 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 'PHONES DRONES DRONES DRONES DRONES DRONES DRONES !PHONES !PHONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 318 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002962 NTifikE not for general distribution. EFTA_00I 17038 EFTA01251562 MOBILITY The information contained heraleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 4110. tr'`s ads AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Data Time (UTC) Originating Humber TT Bytes Bytom Ann Up Dn ICI IMBI MARE NICOLL 7762 04/24/20 18:33:27 2:04 0 0 ructgonpho no 3587080982063726 310410214827503 7763 04/24/20 18:33:28 2:03 6798 6969 ins 3587080982063726 310410214827503 7764 04/24/20 18:35:31 1:22 12642 21370ruftgonpho no 3587080982063726 310410214827503 7765 04/24/20 18:35:33 1:20 15934 8618 ins 3587080982063726 310410214827503 7766 04/24/20 18:36:52 2:04 148347 23453ruftgonpho no 3587080982063726 310410214827503 7767 04/24/20 18:36:53 2:03 6225 6672 ins 3587080982063726 310410214827503 7768 04/24/20 18:36:53 2:04 23453 148059ruftgonpho no 3587080982063726 310410214827503 7769 04/24/20 18:36:55 2:02 6672 5961 ins 3587080982063726 310410214827503 7770 04/24/20 18:38:57 3:49 16575 32609ruftgonpho no 3587080982063726 310410214827503 7771 04/24/20 18:38:59 3:47 6684 5962 ins 3587080982063726 310410214827503 7772 04/24/20 18:42:45 2:12 395637 36713ruftgonpho no 3587080982063726 310410214827503 7773 04/24/20 18:42:46 2:11 6261 6692 ins 3587080982063726 310410214827503 7774 04/24/20 18:42:46 2:12 36713 395349ruftgonpho no 3587080982063726 310410214827503 7775 04/24/20 18:42:48 2:10 6692 5997 ins 3587080982063726 310410214827503 7776 04/24/20 18:44:58 1:43 2792 6469ruftgonpho no 3587080982063726 310410214827503 7777 04/24/20 18:45:01 1:40 11766 8316 imp 3587080982063726 310410214827503 7778 04/24/20 18:46:41 1:11 29108 33590ruftgonpho no 3587080982063726 310410214827503 7779 04/24/20 18:46:41 1:11 124 108 imp 3587080982063726 310410214827503 7780 04/24/20 18:47:52 2:40 17499 26142ruftgonpho no 3587080982063726 310410214827503 7781 04/24/20 18:47:54 2:38 8444 8852 imp 3587080982063726 310410214827503 7782 04/24/20 18:50:31 8:19 20574 13527ruftgonpho no 3587080982063726 310410214827503 7783 04/24/20 18:50:32 8:18 7266 6792 ins 3587080982063726 310410214827503 7784 04/24/20 18:50:32 8:19 13527 20286ruftgonpho no 3587080982063726 310410214827503 7785 04/24/20 18:50:33 8:18 6792 7002 imp 3587080982063726 310410214827503 7786 04/24/20 18:58:51 3:59 10319 15664ruftgonpho no 3587080982063726 310410214827503 7787 04/24/20 18:58:54 3:56 7508 6086 ins 3587080982063726 310410214827503 APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 319 AT&T does not retain recorgs that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGM00002963 N:Infiack not for general distribution. EFTA_00I 17039 EFTA01251563 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 ET Bytes Up Bytom Apn Dn Conn. IICI IMBI MACE Time (OTC) Originating Mambos 7788 04/24/20 19:02:49 9:29 16802 16210 nxtgonpho no 3587080982063726 310410214827503 APPLE 7789 04/24/20 19:02:51 8:29 6335 6670 ims 3587080982063726 310410214827503 APPLE 7790 04/24/20 19:02:51 9:28 16210 16418 nxtgonpho no 3587080982063726 310410214827503 APPLE 7791 04/24/20 19:02:52 8:29 6670 6071 ims 3587080982063726 310410214827503 APPLE 7792 04/24/20 19:05:10 12:05 8437 6393 ims -1 310410214827503 7793 04/24/20 19:11:20 0:58 6227 6672 ims 3587080982063726 310410214827503 APPLE 7794 04/24/20 19:11:21 0:58 6672 5963 ims 3587080982063726 310410214827503 APPLE 7795 04/24/20 19:12:18 2:03 5116 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 7796 04/24/20 19:12:19 2:02 6264 6780 ims 3587080982063726 310410214827503 APPLE 7797 04/24/20 19:12:19 2:04 6107 4828 nxtgonpho no 3587080982063726 310410214827503 APPLE 7798 04/24/20 19:12:20 2:03 6672 6000 ims 3587080982063726 310410214827503 APPLE 7799 04/24/20 19:14:22 60:00 9276 7939 nxtgonpho no 3587080982063726 310410214827503 APPLE 7800 04/24/20 19:14:25 3:32 8156 6930 Imo 3587080982063726 310410214827503 APPLE 7801 04/24/20 19:17:57 60:00 13568 4808 Imo 3587080982063726 310410214827503 APPLE 7802 04/24/20 20:14:22 25:08 635 525 nxtgonpho no 3587080982063726 310410214827503 APPLE 7803 04/24/20 20:17:57 60:00 10128 3376 imp 3587080982063726 310410214827503 APPLE 7804 04/24/20 20:39:29 17:37 6761 7524 nxtgonpho no 3587080982063726 310410214827503 APPLE 7805 04/24/20 20:39:30 17:37 7524 6473 nxtgonpho no 3587080982063726 310410214827503 APPLE 7806 04/24/20 20:57:07 1:29 6871 4961 nxtgonpho no 3587080982063726 310410214827503 APPLE 7807 04/24/20 20:58:36 43:25 6061 6813 nxtgonpho no 3587080982063726 310410214827503 APPLE 7808 04/24/20 20:58:37 43:25 6813 5773 nxtgonpho no 3587080982063726 310410214827503 APPLE 7809 04/24/20 21:17:57 60:00 8604 3004 imp 3587080982063726 310410214827503 APPLE 7810 04/24/20 21:42:02 0:47 6802 4737 nxtgonpho no 3587080982063726 310410214827503 APPLE 7811 04/24/20 21:42:49 15:02 5741 6470 nxtgonpho no 3587080982063726 310410214827503 APPLE 7812 04/24/20 21:42:50 15:02 6470 5453 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002964 PsiTnileikE not for general distribution. Page 320 EFTA_00I 17040 EFTA01251564 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. dis c•`-_- ',.4s AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Hunter ET Bytes Up Bytes) Apn Dn ICI IMBI MAfl NICOLL 7813 04/24/20 21:57:52 0:50 6937 5071 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONZ8 7814 04/24/20 21:58:41 17:34 6588 6965 nxtgonpho no 3587080982063726 310410214827503 APPLE 110HONZ8 7815 04/24/20 21:58:42 17:34 6965 6300 nxtgonpho no 3587080982063726 310410214827503 APPLE 110HONZ8 7816 04/24/20 22:16:16 1:59 7319 5298 nxtgonpho no 3587080982063726 310410214827503 APPLE 110HONZ8 7817 04/24/20 22:17:57 17:57 3424 1324 imp 3587080982063726 310410214827503 APPLE 110HONZ8 7818 04/24/20 22:18:14 37:18 13416 8717 nxtgonpho no 3587080982063726 310410214827503 APPLE 110HONZ8 7819 04/24/20 22:18:15 37:18 8717 14073 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7820 04/24/20 22:29:52 25:40 6692 9690 imp 3587080982063726 310410214827503 APPLE 110HONZ8 7821 04/24/20 22:29:53 25:40 9690 6340 imp 3587080982063726 310410214827503 APPLE 110HONZ8 7822 04/24/20 22:55:33 13:17 13460 8904 nxtgonpho no 3587080982063726 310410214827503 APPLE 110HONZ8 7823 04/24/20 22:55:34 13:17 8783 13076 nxtgonpho no 3587080982063726 310410214827503 APPLE 110HONZ8 7824 04/24/20 22:55:35 13:15 6334 9172 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7825 04/24/20 22:55:36 13:15 9172 6070 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7826 04/24/20 23:08:51 3:20 6003 5951 nxtgonpho no 3587080982063726 310410214827503 APPLE IrRONZ8 7827 04/24/20 23:09:01 3:10 1916 5604 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7828 04/24/20 23:12:10 2:04 5281 7463nxtgonpho no 3587080982063726 310410214827503 APPLE IrRONZ8 7829 04/24/20 23:12:11 2:04 7463 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7830 04/24/20 23:12:13 2:01 6226 6684 imp 3587080982063726 310410214827503 APPLE DRONES 7831 04/24/20 23:12:14 2:01 6684 5962 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7832 04/24/20 23:14:15 20:08 15808 6632nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7833 04/24/20 23:14:20 20:03 8324 7914 imp 3587080982063726 310410214827503 APPLE DRONES 7834 04/24/20 23:34:22 66:27 26341 42841 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7835 04/24/20 23:34:23 60:00 32835 20769nxtgonpho no 3587080982063726 310410214827503 APPLE IrRONZ8 7836 04/24/20 23:36:17 64:32 10840 11860 imp 3587080982063726 310410214827503 APPLE IrRONZ8 7837 04/24/20 23:36:18 60:00 11860 10576 imp 3587080982063726 310410214827503 APPLE IrRONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 321 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002965 PsiTi fiNE not for general distribution. EF-EA_00117041 EFTA01251565 MOBILITY The information contained heraCtoNyFtit 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 1S:56:10 Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn Dn IND I INSI MAKE 7838 04/25/20 00:34:23 6:27 10006 5836 nxtgonpho no 3587080982063726 310410214827503 APPLE 7839 04/25/20 00:36:18 4:32 0 0 imp 3587080982063726 310410214827503 APPLE 7840 04/25/20 00:40:50 60:00 8797 6285 nxtgonpho no 3587080982063726 310410214827503 APPLE 7841 04/25/20 00:41:02 60:00 13288 9676 ism 3587080982063726 310410214827503 APPLE 7842 04/25/20 01:40:50 19:36 7823 6028 nxtgonpho no 3587080982063726 310410214827503 APPLE 7843 04/25/20 01:41:02 19:24 2580 1324 imp 3587080982063726 310410214827503 APPLE 7844 04/25/20 02:00:25 100:00 5798 10671 nxtgonpho no 3587080982063726 310410214827503 APPLE 7845 04/25/20 02:00:26 60:00 10671 7094 nxtgonpho no 3587080982063726 310410214827503 APPLE 7846 04/25/20 02:00:29 100:00 7136 6754 imp 3587080982063726 310410214827503 APPLE 7847 04/25/20 02:00:30 60:00 6754 6980 imp 3587080982063726 310410214827503 APPLE 7848 04/25/20 03:00:26 60:00 0 92 nxtgonpho no 3587080982063726 310410214827503 APPLE 7849 04/25/20 03:00:30 60:00 0 0 ism 3587080982063726 310410214827503 APPLE 7850 04/25/20 04:00:26 53:36 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7851 04/25/20 04:00:30 53:32 0 0 imp 3587080982063726 310410214827503 APPLE 7852 04/25/20 06:27:30 38:28 27482 31366 nxtgonpho no 3587080982063726 310410214827503 APPLE 7853 04/25/20 06:27:31 38:28 31366 27764 nxtgonpho no 3587080982063726 310410214827503 APPLE 7854 04/25/20 06:27:35 38:23 8450 9178 imp 3587080982063726 310410214827503 APPLE 7855 04/25/20 06:27:36 38:23 9178 8186 imp 3587080982063726 310410214827503 APPLE 7856 04/25/20 07:05:59 4:24 6125 5662 nxtgonpho no 3587080982063726 310410214827503 APPLE 7857 04/25/20 07:06:12 4:11 9094 6340 imp 3587080982063726 310410214827503 APPLE 7858 04/25/20 07:10:24 2:08 6341 7188 nxtgonpho no 3587080982063726 310410214827503 APPLE 7859 04/25/20 07:10:28 2:04 9626 7914 imp 3587080982063726 310410214827503 APPLE 7860 04/25/20 07:12:32 150:55 60059 63102 nxtgonpho no 3587080982063726 310410214827503 APPLE 7861 04/25/20 07:12:33 60:00 34518 30667 nxtgonpho no 3587080982063726 310410214827503 APPLE 7862 04/25/20 07:12:35 150:52 22692 27729 imp 3587080982063726 310410214827503 APPLE 7863 04/25/20 07:12:36 60:00 19925 18212 imp 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PROMS IPROME8 IPROME8 IPROME8 IPROME8 !PHONES !PHONES !PROMS IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 !PHONES !PROMS IPROME8 IPROME8 !PHONES !PHONES !PHONES !PROMS IPROME8 IPROME8 IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 322 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002966 NIT IAL not for general distribution. EFTA 00117042 EFTA01251566 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. tr'`s ads AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 giliiiIIII Conn. Time (OTC) Originating Number ET Bytes Op Bytoa Apn Dn IKE' INSI MARL NICOLL 7864 04/25/20 08:12:33 60:00 27496 27376 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7865 04/25/20 08:12:36 60:00 4976 2680 imp 3587080982063726 310410214827503 APPLE !PRONGS 7866 04/25/20 09:12:33 30:55 1088 1931 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7867 04/25/20 09:12:36 30:52 2828 1448 moo 3587080982063726 310410214827503 APPLE IPRONE8 7868 04/25/20 09:43:28 7:28 48 Onxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 7869 04/25/20 09:43:32 7:24 9168 6070 imp 3587080982063726 310410214827503 APPLE DRONES 7870 04/25/20 09:50:55 4:02 288 48 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7871 04/25/20 09:50:56 4:02 48 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7872 04/25/20 09:50:59 3:58 7268 6796 ins 3587080982063726 310410214827503 APPLE !PRONGS 7873 04/25/20 09:51:00 3:58 6796 7004 ins 3587080982063726 310410214827503 APPLE DRONES 7874 04/25/20 09:54:58 4:41 48 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7875 04/25/20 09:55:02 4:37 10118 8108 ins 3587080982063726 310410214827503 APPLE DRONES 7876 04/25/20 09:59:38 6:33 288 48 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7877 04/25/20 09:59:39 6:33 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE DRONES 7878 04/25/20 09:59:41 6:30 6316 6854 imp 3587080982063726 310410214827503 APPLE DRONES 7879 04/25/20 09:59:42 6:30 6854 6052 imp 3587080982063726 310410214827503 APPLE DRONES 7880 04/25/20 10:06:12 60:00 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 7881 04/25/20 10:06:12 161:32 1536 672 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7882 04/25/20 10:06:13 161:31 26464 30113 imp 3587080982063726 310410214827503 APPLE !PHONES 7883 04/25/20 10:06:14 60:00 16692 14346 ins 3587080982063726 310410214827503 APPLE !PHONES 7884 04/25/20 11:06:12 60:00 288 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7885 04/25/20 11:06:14 60:00 6626 6090 imp 3587080982063726 310410214827503 APPLE !PRONGS 7886 04/25/20 12:06:12 41:33 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7887 04/25/20 12:06:14 41:31 6795 6088 imp 3587080982063726 310410214827503 APPLE !PHONES 7888 04/25/20 12:47:45 2:23 48 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7889 04/25/20 12:47:48 2:20 27152 17294 imp 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 323 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002967 PsiTn iliAL not for general distribution. EFTA_00I 17043 EFTA01251567 MOBILITY The information contained here(F3(E)N ff::ti i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr ani‘Sg°/ AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn IBEX IMS1 MIUtE MODEL 7890 04/25/20 12:50:07 5:26 288 48 nmtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 7891 04/25/20 12:50:08 5:26 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 7892 04/25/20 12:50:10 5:23 6440 7574 imo 3587080982063726 310410214827503 APPLE IPHONEB 7893 04/25/20 12:50:11 5:23 7574 6176 imp 3587080982063726 310410214827503 APPLE IPHONEB 7894 04/25/20 12:55:34 0:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7895 04/25/20 12:55:50 2:51 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7896 04/25/20 12:55:52 2:49 8940 8054 imp 3587080982063726 310410214827503 APPLE 1PHONE8 7897 04/25/20 12:58:40 2:12 288 48ruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7898 04/25/20 12:58:41 2:12 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7899 04/25/20 12:58:44 2:08 6262 6668 imam 3587080982063726 310410214827503 APPLE 1PHONE8 7900 04/25/20 12:58:45 2:08 6668 5998 imam 3587080982063726 310410214827503 APPLE 1PHONE8 7901 04/25/20 13:00:54 46:37 48 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7902 04/25/20 13:00:59 46:32 21006 13844 imam 3587080982063726 310410214827503 APPLE 1PHONE8 7903 04/25/20 13:47:32 1:53 48 Onxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7904 04/25/20 13:49:24 0:13 288 48natgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7905 04/25/20 13:49:25 0:13 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7906 04/25/20 13:49:38 13:12 144 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7907 04/25/20 13:55:32 7:18 8896 7966 imp 3587080982063726 310410214827503 APPLE !PHONES 7908 04/25/20 14:02:49 9:14 384 96ruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7909 04/25/20 14:02:51 9:13 96 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7910 04/25/20 14:02:53 9:10 6264 6668 imp 3587080982063726 310410214827503 APPLE 1PHONE8 7911 04/25/20 14:02:54 9:10 6668 6000 imp 3587080982063726 310410214827503 APPLE 1PHONE8 7912 04/25/20 14:12:04 1:29 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 7913 04/25/20 14:12:13 1:20 16294 15902 imp 3587080982063726 310410214827503 APPLE 1PHONE8 7914 04/25/20 14:13:32 2:03 288 48ruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 324 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGht 00002968 Nal:AL not for general distribution. EF-EA_00117044 EFTA01251568 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. trLaissi AT&T Run Data: Run Tama: Data Usage Tor: Item Conn. Data 06/17/2020 10:56:16 Conn. Originating ET Time Number (UTC) Bytes Up Bytom Apn Dn INLI INBI MAKE MODEL 7915 04/25/20 14:13:33 2:03 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 7916 04/25/20 14:13:35 2:00 18647 25322 imam 3587080982063726 310410214827503 APPLE IPHOME8 7917 04/25/20 14:13:36 2:00 24220 18383 imam 3587080982063726 310410214827503 APPLE IPHOME8 7918 04/25/20 14:13:46 0:06 16875 10748 imam 3587080982063726 310410214827503 APPLE IPHOME8 7919 04/25/20 14:13:47 0:06 10190 16875 imam 3587080982063726 310410214827503 APPLE IPHOME8 7920 04/25/20 14:14:06 0:16 32620 10457 imam 3587080982063726 310410214827503 APPLE IPHOME8 7921 04/25/20 14:14:07 0:16 10457 32620 imam 3587080982063726 310410214827503 APPLE !PHONES 7922 04/25/20 14:15:36 33:27 6456 5426ruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 7923 04/25/20 14:15:40 33:23 9268 7285 imam 3587080982063726 310410214827503 APPLE !PHONES 7924 04/25/20 14:49:02 2:03 5220 6055ruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 7925 04/25/20 14:49:03 2:03 6055 4932ruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 7926 04/25/20 14:49:06 1:59 7231 6798 imam 3587080982063726 310410214827503 APPLE !PHONES 7927 04/25/20 14:49:07 1:59 6798 6967 imam 3587080982063726 310410214827503 APPLE !PHONES 7928 04/25/20 14:51:06 60:00 6927 6791ruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7929 04/25/20 14:51:10 60:00 9268 7446 imam 3587080982063726 310410214827503 APPLE !PHONES 7930 04/25/20 15:51:06 36:36 25083 34184natgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7931 04/25/20 15:51:10 36:32 9541 9175 imam 3587080982063726 310410214827503 APPLE !PHONES 7932 04/25/20 16:27:41 2:04 61107 24350ruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 7933 04/25/20 16:27:43 2:02 6226 6648 imam 3587080982063726 310410214827503 APPLE !PHONES 7934 04/25/20 16:27:43 2:03 24350 60819ruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 7935 04/25/20 16:27:44 2:02 6648 5962 imam 3587080982063726 310410214827503 APPLE !PHONES 7936 04/25/20 16:29:46 15:25 26075 50443ruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 7937 04/25/20 16:29:47 15:24 8224 8130 imam 3587080982063726 310410214827503 APPLE !PHONES 7938 04/25/20 16:45:10 2:18 35103 19005natgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7939 04/25/20 16:45:11 2:18 18953 36726natgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7940 04/25/20 16:47:29 2:50 69923 56277natgenpho no 3587080982063726 310410214827503 APPLE !PHONES 7941 04/25/20 16:47:31 2:48 7416 6088 imam 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 325 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002969 not for general distribution. EFTA_00I 17045 EFTA01251569 MOBILITY The information contained here(34ENS\iyf::ti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. ....„.• ••-s` a. AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Sytes Up Bytes Apn Dn INEI INBI MARE 7942 04/25/20 16:50:18 28:40 21214 20760 nxtgonpho no 3587080982063726 310410214827503 APPLE 7943 04/25/20 16:50:19 28:39 22967 19106 imp 3587080982063726 310410214827503 APPLE 7944 04/25/20 16:50:19 28:40 20760 21436 nxtgonpho no 3587080982063726 310410214827503 APPLE 7945 04/25/20 16:50:20 28:39 18998 25667 imp 3587080982063726 310410214827503 APPLE 7946 04/25/20 17:18:59 9:03 7068 18667 nxtgonpho no 3587080982063726 310410214827503 APPLE 7947 04/25/20 17:19:01 0:05 0 0 imp 3587080982063726 310410214827503 APPLE 7948 04/25/20 17:19:09 0:01 0 0 ins 3587080982063726 310410214827503 APPLE 7949 04/25/20 17:19:25 13:37 8317 6106 ins -1 310410214827503 7950 04/25/20 17:28:01 2:05 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 7951 04/25/20 17:28:02 2:04 7268 6800 imp 3587080982063726 310410214827503 APPLE 7952 04/25/20 17:28:02 2:05 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 7953 04/25/20 17:28:04 2:03 6800 7004 imp 3587080982063726 310410214827503 APPLE 7954 04/25/20 17:30:07 60:00 18683 10813 nxtgonpho no 3587080982063726 310410214827503 APPLE 7955 04/25/20 17:30:11 33:47 10572 7410 imp 3587080982063726 310410214827503 APPLE 7956 04/25/20 18:03:58 28:35 3888 1804 imp 3587080982063726 310410214827503 APPLE 7957 04/25/20 18:30:07 60:00 19698 23328 nxtgonpho no 3587080982063726 310410214827503 APPLE 7958 04/25/20 18:32:33 60:00 10672 5156 imp 3587080982063726 310410214827503 APPLE 7959 04/25/20 19:30:07 60:00 15612 146374 nxtgonpho no 3587080982063726 310410214827503 APPLE 7960 04/25/20 19:32:33 46:16 2596 1324 imp 3587080982063726 310410214827503 APPLE 7961 04/25/20 20:18:49 60:00 13552 4468 imp 3587080982063726 310410214827503 APPLE 7962 04/25/20 20:30:07 12:31 173 105 nxtgonpho no 3587080982063726 310410214827503 APPLE 7963 04/25/20 20:42:37 2:03 5117 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 7964 04/25/20 20:42:39 2:03 6055 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE 7965 04/25/20 20:44:42 60:00 25099 15911 nxtgonpho no 3587080982063726 310410214827503 APPLE 7966 04/25/20 21:18:49 29:43 10268 6424 imp 3587080982063726 310410214827503 APPLE 7967 04/25/20 21:44:42 19:54 0 Onmtgonpho no 3587080982063726 310410214827503 APPLE 7968 04/25/20 23:44:42 60:00 19669 9960 imp -1 310410214827503 MODEL !PROMS IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES DRONES DRONES !PHONES !PHONES DRONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES DRONES 2PROME8 EPROM:ES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 326 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002970 PsiTniliAL not for general distribution. EFTA_00I 17046 EFTA01251570 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41011, ......,,,• ••ass `'s AT&T Run Dato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn a IBC/ IMBI MUM 7969 04/26/20 00:44:42 60:00 7156 2928 imp -1 310410214827503 7970 04/26/20 01:44:42 60:00 10300 3408 imp -1 310410214827503 7971 04/26/20 02:44:42 60:00 10224 4004 imp -1 310410214827503 7972 04/26/20 02:49:59 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 7973 04/26/20 02:50:37 6:40 7449 4966 nxtgonpho no 3587080982063726 310410214827503 APPLE 7974 04/26/20 02:57:16 2:55 5217 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE 7975 04/26/20 02:57:17 2:55 6053 4929 nxtgonpho no 3587080982063726 310410214827503 APPLE 7976 04/26/20 03:00:12 60:00 7307 6641 nxtgonpho no 3587080982063726 310410214827503 APPLE 7977 04/26/20 03:44:42 60:00 7280 2928 ims -1 310410214827503 7978 04/26/20 04:00:12 60:00 924 840 nxtgonpho no 3587080982063726 310410214827503 APPLE 7979 04/26/20 04:44:42 60:00 11904 4428 imo -1 310410214827503 7980 04/26/20 05:00:12 60:00 687 630 nxtgonpho no 3587080982063726 310410214827503 APPLE 7981 04/26/20 05:44:42 60:00 7140 2928 imo -1 310410214827503 7982 04/26/20 06:00:12 60:00 808 630 nxtgonpho no 3587080982063726 310410214827503 APPLE 7983 04/26/20 06:44:42 60:00 15048 4764 imo -1 310410214827503 7984 04/26/20 07:00:12 60:00 687 630 nxtgonpho no 3587080982063726 310410214827503 APPLE 7985 04/26/20 07:44:42 60:00 8388 3036 imo -1 310410214827503 7986 04/26/20 08:00:12 60:00 635 525 nxtgonpho no 3587080982063726 310410214827503 APPLE 7987 04/26/20 08:44:42 60:00 8496 3144 imo -1 310410214827503 7988 04/26/20 09:00:12 60:00 5735 7987 nxtgonpho no 3587080982063726 310410214827503 APPLE 7989 04/26/20 09:44:42 60:00 12012 4536 imo -1 310410214827503 7990 04/26/20 10:00:12 60:00 808 630 nxtgonpho no 3587080982063726 310410214827503 APPLE 7991 04/26/20 10:44:42 60:00 7032 2912 imo -1 310410214827503 7992 04/26/20 11:00:12 60:00 578 630 nxtgonpho no 3587080982063726 310410214827503 APPLE 7993 04/26/20 11:44:42 60:00 10224 4360 imo -1 310410214827503 7994 04/26/20 12:00:12 57:31 346 735 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 327 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002971 NeTniliAL not for general distribution. EFTA_00I 17047 EFTA01251571 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in `steLda. AT&T Run Data: Run Tuna: Data Osage for: Item Conn. Data 06/17/2020 18:56:17 Conn. Time (OTC) Originating Number UP LT Sytes Byte. apn Dn IILII IM3I NUT MODEL 7995 04/26/20 12:44:42 60:00 8820 3268 ins -1 310410214827503 7996 04/26/20 12:57:43 76:35 21513 31808 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7997 04/26/20 12:57:44 60:00 29884 31851 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 7998 04/26/20 13:44:42 60:00 10176 3176 ins -1 310410214827503 7999 04/26/20 13:57:44 16:35 1924 5167 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8000 04/26/20 14:14:19 7:48 8015 6051 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8001 04/26/20 14:22:06 2:13 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 8002 04/26/20 14:22:07 2:13 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 8003 04/26/20 14:24:20 49:52 9559 11255 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 8004 04/26/20 14:44:42 60:00 13956 5752 ins -1 310410214827503 8005 04/26/20 15:14:11 0:51 5059 6052 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8006 04/26/20 15:14:12 0:51 6052 4771 nxtgonpho no 3587080982063726 310410214827503 APPLE IPRONE8 8007 04/26/20 15:15:03 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8008 04/26/20 15:19:04 14:51 12005 12178 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8009 04/26/20 15:33:54 0:59 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8010 04/26/20 15:33:55 0:59 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8011 04/26/20 15:34:54 3:35 7529 5070 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8012 04/26/20 15:38:28 2:04 5276 6113 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8013 04/26/20 15:38:29 2:04 6113 4988 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8014 04/26/20 15:40:33 4:16 6337 5770 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8015 04/26/20 15:44:42 60:00 7032 2804 ins -1 310410214827503 8016 04/26/20 15:44:48 2:04 5281 6115 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002972 NTIAL not for general distribution. Page 328 EF-EA_00117048 EFTA01251572 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ...,.• ••-s`"' e AT&T Run Date: Run Timo: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Timo (UTC) Originating TT Bytes Bytoa Ran ICI Number Up Dn INS' MAKE NICOLL 8017 04/26/20 15:44:49 2:04 6115 4993 nxtgonpho no 3587080982063726 310410214827503 8018 04/26/20 15:46:53 0:42 0 Oruftgonpho no 3587080982063726 310410214827503 8019 04/26/20 15:47:34 2:04 5222 6055ruftgonpho no 3587080982063726 310410214827503 8020 04/26/20 15:47:35 2:04 6055 4934ruftgonpho no 3587080982063726 310410214827503 8021 04/26/20 15:49:39 4:28 8656 5161 nxtgonpho no 3587080982063726 310410214827503 8022 04/26/20 15:54:06 2:10 5159 6050ruftgonpho no 3587080982063726 310410214827503 8023 04/26/20 15:54:07 2:10 6050 4871 nxtgonpho no 3587080982063726 310410214827503 8024 04/26/20 15:56:17 5:28 27986 13479ruftgonpho no 3587080982063726 310410214827503 8025 04/26/20 16:01:45 33:40 18289 8597ruftgonpho no 3587080982063726 310410214827503 8026 04/26/20 16:01:46 33:40 8597 18001 nxtgonpho no 3587080982063726 310410214827503 8027 04/26/20 16:35:26 18:12 6747 5587ruftgonpho no 3587080982063726 310410214827503 8028 04/26/20 16:44:42 60:00 9960 3176 imp -1 310410214827503 8029 04/26/20 16:53:37 5:21 7594 8345 nxtgonpho no 3587080982063726 310410214827503 8030 04/26/20 16:53:38 5:22 8345 7306 nxtgonpho no 3587080982063726 310410214827503 8031 04/26/20 16:59:00 34:52 7390 5329ruftgonpho no 3587080982063726 310410214827503 8032 04/26/20 17:33:51 8:14 7930 30283ruftgonpho no 3587080982063726 310410214827503 8033 04/26/20 17:33:52 8:14 30283 7642ruftgonpho no 3587080982063726 310410214827503 8034 04/26/20 17:42:06 4:50 6871 4961ruftgonpho no 3587080982063726 310410214827503 8035 04/26/20 17:44:42 60:00 8496 3144 imp -1 310410214827503 8036 04/26/20 17:46:55 21:18 5951 9348 nxtgonpho no 3587080982063726 310410214827503 8037 04/26/20 17:46:56 21:18 9348 5663ruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 329 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002973 NeTtAL not for general distribution. EFTA_00I 17049 EFTA01251573 MOBILITY The information contained hereCoNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am CO 06/15/2020 11:59:59pm Time 20ne. AT&T's records ere stored and provided in tt‘"1°aaa$ AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Iton Conn. Date Conn. Originating Time Number (um) ET Bytes Op 8038 04/26/20 18:08:14 20:14 6342 8039 04/26/20 18:28:27 9:31 7559 8040 04/26/20 18:28:28 9:31 7179 8041 04/26/20 18:37:59 19:47 6556 8042 04/26/20 18:44:42 60:00 12012 8043 04/26/20 18:57:45 8:20 5217 8044 04/26/20 18:57:46 8:20 6037 8045 04/26/20 19:06:06 60:00 97819 8046 04/26/20 19:44:42 60:00 13244 8047 04/26/20 20:06:06 31:19 28510 8048 04/26/20 20:37:24 2:34 5222 8049 04/26/20 20:37:25 2:34 6055 8050 04/26/20 20:39:59 9:44 14916 8051 04/26/20 20:44:42 60:00 8604 8052 04/26/20 20:49:42 2:29 5165 8053 04/26/20 20:49:43 2:29 6052 8054 04/26/20 20:52:11 3:46 10854 8055 04/26/20 20:52:12 3:46 13876 8056 04/26/20 20:55:58 2:26 6055 8057 04/26/20 20:58:24 2:04 5280 8058 04/26/20 20:58:25 2:04 6871 8059 04/26/20 21:00:29 13:00 7046 Bytes Apn IMF' IMSI MATZ MOLL Dn 5738 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7179 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 7271 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6061 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4252 imo -1 310410214827503 6037 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4929 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 37299 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4552 imo -1 310410214827503 23846ruagenpho 3587080982063726 310410214827503 APPLE !PHONES no 6055 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4934 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 12117ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 3052 imo -1 310410214827503 6052 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 4877 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 13876 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 10470ruagenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4901 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 6871 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4992 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 5122 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 330 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002974 NTniliAL not for general distribution. EFTA_00I 17050 EFTA01251574 MOBILITY The information contained heralCONelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr'`s ad. AT&T Run pato: Run Time: Data Usage For: Item Conn. Date 06/17/2020 16:56:17 Conn. Originating ET Time Number (U2C) Bytes Up Bytes Apn Dn IBEX INSI MARL MODEL 8060 04/26/20 21:13:29 2:32 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8061 04/26/20 21:13:30 2:32 6107 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8062 04/26/20 21:16:02 18:54 6228 5006 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8063 04/26/20 21:34:55 15:01 13187 14540 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8064 04/26/20 21:34:56 15:01 14540 12803 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8065 04/26/20 21:44:42 60:00 7032 2788 ins -1 310410214827503 8066 04/26/20 21:49:57 21:06 5431 6401 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8067 04/26/20 21:49:58 21:06 6401 5143 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8068 04/26/20 22:11:04 0:42 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8069 04/26/20 22:11:45 39:45 6004 6919 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8070 04/26/20 22:11:46 39:45 6919 5716 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8071 04/26/20 22:44:42 60:00 15280 5012 ins -1 310410214827503 8072 04/26/20 22:51:31 2:34 8133 6305 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8073 04/26/20 22:54:04 2:03 5281 6115 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8074 04/26/20 22:54:05 2:03 6115 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8075 04/26/20 22:56:08 20:51 16172 11212 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8076 04/26/20 23:16:58 14:41 5382 6286 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8077 04/26/20 23:16:59 14:41 6286 5094 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8078 04/26/20 23:31:40 2:09 7556 5288 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8079 04/26/20 23:33:48 2:09 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8080 04/26/20 23:33:49 2:09 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 331 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002975 NTrolikk not for general distribution. EF-EA_00117051 EFTA01251575 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, tt‘ing° asi esO AT&T Run Date: Run Time: Data Osage For: Iton. Conn. Date 06/17/2020 Conn. Originating Time Number ET Bytes Up Bytoa Apn Dn INC' INBI MARL MODEL (DSC) 8081 04/26/20 23:35:58 8:43 8798 13403 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8082 04/26/20 23:44:40 8:20 5220 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8083 04/26/20 23:44:41 8:20 6055 4932 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8084 04/26/20 23:44:42 60:00 8604 3052 ins -1 310410214827503 8085 04/26/20 23:53:01 14:58 8074 5858 nxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 8086 04/27/20 00:07:59 2:09 5221 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8087 04/27/20 00:08:00 2:09 6055 4933ruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 8088 04/27/20 00:10:09 0:46 6055 4901 nxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 8089 04/27/20 00:10:54 2:04 5177 6115 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8090 04/27/20 00:10:55 2:04 6115 4889 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8091 04/27/20 00:12:59 4:32 6461 6074 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8092 04/27/20 00:17:30 2:09 5118 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8093 04/27/20 00:17:31 2:09 6055 4830 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8094 04/27/20 00:19:40 2:32 6067 5608 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8095 04/27/20 00:22:11 5:45 5060 6052 nxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 8096 04/27/20 00:22:12 5:46 6052 4772 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8097 04/27/20 00:27:57 31:21 39563 23706ruagenpho no 3587080982063726 310410214827503 APPLE !PHONES 8098 04/27/20 00:44:42 60:00 13908 4924 ins -1 310410214827503 8099 04/27/20 00:59:17 0:57 5285 6208 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8100 04/27/20 00:59:19 0:56 6208 4997 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8101 04/27/20 01:00:15 27:12 27970 20340ruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on: These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 332 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002976 PsisTiliAL not for general distribution. EFTA 00/17052 EFTA01251576 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT4T'S records ere stored and provided in OTC. 411111, ..... •---s`' asf AT&T Run Date: Run Time: Data Usage for: Item Conn. Data 06/17/2020 10:56:17 Conn. Time (UTC) Originating Number CT Bytes Up Rytoa Apn Dn DM' IMBI Mitt NICOLL 8102 04/27/20 01:27:26 1:25 4608 5823 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8103 04/27/20 01:27:27 1:26 5823 4320 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8104 04/27/20 01:28:52 0:42 8838 5512 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8105 04/27/20 01:29:33 3:15 5221 6055 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8106 04/27/20 01:29:34 3:15 6055 4933 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8107 04/27/20 01:32:49 8:22 7625 5071 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8108 04/27/20 01:41:10 2:53 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 8109 04/27/20 01:41:11 2:53 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 8110 04/27/20 01:44:04 8:35 12708 10420 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8111 04/27/20 01:44:42 60:00 8604 2928 imp -1 310410214827503 8112 04/27/20 01:52:39 1:33 5603 6331 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8113 04/27/20 01:52:40 1:33 6331 5315 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8114 04/27/20 01:54:13 2:12 7633 5131 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8115 04/27/20 01:56:25 2:47 6067 5610 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8116 04/27/20 01:59:11 3:08 11488 13852 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8117 04/27/20 01:59:12 3:08 13852 11104 natgonpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 8118 04/27/20 02:02:21 1:26 8883 5609 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 8119 04/27/20 02:03:46 7:15 11538 15609 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS 8120 04/27/20 02:03:47 7:15 15609 11154 natgonpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 8121 04/27/20 02:11:02 2:23 5285 6873 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONZ8 8122 04/27/20 02:11:03 2:23 6873 4997 natgonpho no 3587080982063726 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 333 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002977 PsiTniliAL not for general distribution. EFTA_00I 17053 EFTA01251577 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 411111, .....,, ••--s`' s••AT&T Run Date: Run Time: Data Usage For: 06/17/2020 illikilm Item Conn. Date Conn. Time (UTC) Originating Mutter ET Sytes Up Byte. Apn Dn IEI IMSI MARL MOLL 8123 04/27/20 02:13:26 10:47 12789 6422 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONZ8 8124 04/27/20 02:24:12 15:34 5587 6441ruftgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 8125 04/27/20 02:24:13 15:35 6441 6367ruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8126 04/27/20 02:39:48 5:29 7223 5502 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8127 04/27/20 02:44:42 60:00 13352 4392 ims -1 310410214827503 8128 04/27/20 02:45:17 27:28 13416 17593ruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8129 04/27/20 02:45:17 27:29 17593 13032nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8130 04/27/20 03:12:46 0:56 7631 5230 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8131 04/27/20 03:13:41 1:12 5165 6052 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 8132 04/27/20 03:13:42 1:12 6052 4877 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 8133 04/27/20 03:14:54 2:15 9110 5736 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 8134 04/27/20 03:17:09 20:00 5280 6871 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 8135 04/27/20 03:17:10 60:00 6871 6777 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8136 04/27/20 03:44:42 60:00 9960 3176 ims -1 310410214827503 8137 04/27/20 04:17:10 60:00 0 92ruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8138 04/27/20 04:44:42 60:00 8712 3052 ims -1 310410214827503 8139 04/27/20 05:17:10 10:16 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8140 04/27/20 05:44:42 60:00 12228 4660 ims -1 310410214827503 8141 04/27/20 06:44:42 60:00 10176 3176 ims -1 310410214827503 8142 04/27/20 07:44:42 60:00 11904 4268 ims -1 310410214827503 8143 04/27/20 08:44:42 14:27 0 0 ims -1 310410214827503 8144 04/27/20 10:46:30 4:46 6540 7537 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 8145 04/27/20 10:51:15 2:25 5160 6103 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 8146 04/27/20 10:51:16 2:25 6103 4872 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 334 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002978 NTIAL not for general distribution. EF-EA_00117054 EFTA01251578 MOBILITY The information contained here(F341::)(1S\ff::tli i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating TT Time Number (UTC) Bytes Up Byte. Apn Dn INE1 IMBI teat 8147 04/27/20 10:53:41 34:20 18447 10350 nxtgonpho no 3587080982063726 310410214827503 APPLE 8148 04/27/20 10:56:40 0:05 0 0 imam 3587080982063726 310410214827503 APPLE 8149 04/27/20 11:09:19 18:42 8902 7048 imam 3587080982063726 310410214827503 APPLE 8150 04/27/20 11:28:01 2:09 5318 6165 nxtgonpho no 3587080982063726 310410214827503 APPLE 8151 04/27/20 11:28:02 2:09 6165 5030 nxtgonpho no 3587080982063726 310410214827503 APPLE 8152 04/27/20 11:29:01 1:09 7232 6794 imam 3587080982063726 310410214827503 APPLE 8153 04/27/20 11:29:02 1:09 6794 6968 imam 3587080982063726 310410214827503 APPLE 8154 04/27/20 11:30:11 5:51 6158 4956 nxtgonpho no 3587080982063726 310410214827503 APPLE 8155 04/27/20 11:31:12 0:05 0 0 imp 3587080982063726 310410214827503 APPLE 8156 04/27/20 11:36:01 8:45 5419 6306 nxtgonpho no 3587080982063726 310410214827503 APPLE 8157 04/27/20 11:36:03 8:45 6306 5131 nxtgonpho no 3587080982063726 310410214827503 APPLE 8158 04/27/20 11:36:33 8:13 6184 6670 imp 3587080982063726 310410214827503 APPLE 8159 04/27/20 11:36:34 8:14 6670 5920 imp 3587080982063726 310410214827503 APPLE 8160 04/27/20 11:44:47 8:30 5421 6256 nxtgonpho no 3587080982063726 310410214827503 APPLE 8161 04/27/20 11:44:48 8:30 6256 5133 nxtgonpho no 3587080982063726 310410214827503 APPLE 8162 04/27/20 11:45:30 7:47 7214 6792 imam 3587080982063726 310410214827503 APPLE 8163 04/27/20 11:45:31 7:47 6792 6950 imam 3587080982063726 310410214827503 APPLE 8164 04/27/20 11:53:18 0:44 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8165 04/27/20 11:54:01 9:04 8242 6826 nxtgonpho no 3587080982063726 310410214827503 APPLE 8166 04/27/20 11:54:02 9:05 6826 7954 nxtgonpho no 3587080982063726 310410214827503 APPLE 8167 04/27/20 11:54:18 8:47 6246 6670 imam 3587080982063726 310410214827503 APPLE 8168 04/27/20 11:54:20 8:47 6670 5982 imam 3587080982063726 310410214827503 APPLE 8169 04/27/20 12:03:07 1:31 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8170 04/27/20 12:04:37 81:57 13847 17829 nxtgonpho no 3587080982063726 310410214827503 APPLE 8171 04/27/20 12:04:38 60:00 7095 6132 nxtgonpho no 3587080982063726 310410214827503 APPLE 8172 04/27/20 12:04:50 60:00 17261 9332 imam -1 310410214827503 MOD= !PHONES !PROMS IPMONE8 leMONZ8 leMONZ8 leMONZ8 leMONZ8 leMONZ8 leMONZ8 leMONZ8 leMONZ8 leMONZ8 leMONZ8 110MONZ8 leMONE8 DRONES leMONZ8 leMONZ8 leMONZ8 leMONZ8 leMONZ8 110MONZ8 leMONE8 leMONE8 leMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 335 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00002979 PsiTniliAL not for general distribution. EF-EA_00117055 EFTA01251579 MOBILITY The information contained her is 2996479 06/17/2020 STET has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. tr""‘ adest AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 18:56:21 Conn. Time (UTC) originating Number TT Bytes Up Byte. Apn Dn INZI IMSI MAfl NICOLL 8173 04/27/20 13:04:38 21:57 10734 7427 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8174 04/27/20 13:04:50 60:00 7440 3144 ims -1 310410214827503 8175 04/27/20 13:26:35 6:30 15595 13871 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8176 04/27/20 13:33:05 2:10 5216 6105 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8177 04/27/20 13:33:06 2:10 6105 4928 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8178 04/27/20 13:35:16 5:02 6659 5991 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8179 04/27/20 13:40:18 21:03 9057 17059 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8180 04/27/20 13:40:19 21:03 17059 8769 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8181 04/27/20 14:01:22 29:36 7655 7291 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8182 04/27/20 14:04:50 60:00 8604 3052 ims -1 310410214827503 8183 04/27/20 14:30:57 12:47 11153 12667 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8184 04/27/20 14:30:58 12:47 12667 10769 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8185 04/27/20 14:43:45 12:32 5703 6418 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8186 04/27/20 14:43:46 12:32 6418 6465 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8187 04/27/20 14:56:18 5:46 1900 1621 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8188 04/27/20 15:02:03 11:26 10315 12642 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8189 04/27/20 15:02:04 11:26 12642 10027 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8190 04/27/20 15:04:50 23:08 12480 6780 ims -1 310410214827503 8191 04/27/20 15:13:30 1:39 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8192 04/27/20 15:15:08 2:10 5222 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8193 04/27/20 15:15:09 2:10 6107 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8194 04/27/20 15:17:19 0:46 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002980 NeTniliAL not for general distribution. Page 336 EFTA_00I 17056 EFTA01251580 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. tr'`ss as AT&T Run Data: Run Time: Data Osage Tor: Item Cows. Data 06/17/2020 Conn. originating LT Time Number (OTC) Sytes UP Byte. Apn On INZI INSI MARL NICOLL 8195 04/27/20 15:18:04 19:59 35886 45090 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 8196 04/27/20 15:18:05 31:56 67782 49157 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 8197 04/27/20 15:28:03 60:00 17197 9546 ims -1 310410214827503 8198 04/27/20 15:38:03 65:48 69065 90159 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8199 04/27/20 15:50:01 53:51 67467 55869 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8200 04/27/20 16:28:03 60:00 11300 3316 imo -1 310410214827503 8201 04/27/20 16:43:52 1:57 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8202 04/27/20 16:45:48 2:03 4671 7285 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8203 04/27/20 16:45:49 2:03 7285 4383 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8204 04/27/20 16:47:52 0:35 7465 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 8205 04/27/20 16:48:26 2:38 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8206 04/27/20 16:48:28 2:37 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8207 04/27/20 16:51:05 20:54 18804 20778 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONE8 8208 04/27/20 16:51:06 20:54 20778 18228 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8209 04/27/20 17:11:59 2:21 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8210 04/27/20 17:12:00 2:21 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8211 04/27/20 17:14:21 19:05 5536 6344 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8212 04/27/20 17:14:22 19:05 6344 5248 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8213 04/27/20 17:28:03 60:00 8604 2912 ims -1 310410214827503 8214 04/27/20 17:33:27 13:44 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 8215 04/27/20 17:33:28 13:44 6107 6088 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8216 04/27/20 17:47:12 14:26 13033 14401 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00002981 NTniliAL not for general distribution. Page 337 EF-EA_00117057 EFTA01251581 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ...,, `•-s-‘ d AT&T Run Date: Run Time: Data Usage For: 06/17/2020 IN= Item Conn. Date Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn MCI IMSI 8217 04/27/20 17:47:13 14:26 14401 12649 nxtgonpho no 3587080982063726 310410214827503 8218 04/27/20 18:01:39 10:26 48 Oruftgenpho no 3587080982063726 310410214827503 8219 04/27/20 18:12:04 14:56 11810 12573 nxtgonpho no 3587080982063726 310410214827503 8220 04/27/20 18:12:05 14:56 12573 11522 nxtgonpho no 3587080982063726 310410214827503 8221 04/27/20 18:27:01 9:08 32139 15840 nxtgonpho no 3587080982063726 310410214827503 8222 04/27/20 18:28:03 60:00 13584 4516 imp -1 310410214827503 8223 04/27/20 18:36:08 2:04 5221 6055 nxtgonpho no 3587080982063726 310410214827503 8224 04/27/20 18:36:09 2:04 6055 4933 nxtgonpho no 3587080982063726 310410214827503 8225 04/27/20 18:38:13 1:38 6055 4901 nxtgonpho no 3587080982063726 310410214827503 8226 04/27/20 18:39:50 8:23 5113 6053 nxtgonpho no 3587080982063726 310410214827503 8227 04/27/20 18:39:51 8:23 6053 4825 nxtgonpho no 3587080982063726 310410214827503 8228 04/27/20 18:48:14 2:24 8784 5372 nxtgonpho no 3587080982063726 310410214827503 8229 04/27/20 18:50:37 2:04 5222 6107 nxtgonpho no 3587080982063726 310410214827503 8230 04/27/20 18:50:38 2:04 6107 4934 nxtgonpho no 3587080982063726 310410214827503 8231 04/27/20 18:52:42 12:15 8947 5532 nxtgonpho no 3587080982063726 310410214827503 8232 04/27/20 19:04:56 2:04 5221 6055 nxtgenpho no 3587080982063726 310410214827503 8233 04/27/20 19:04:57 2:04 6055 4933 nxtgenpho no 3587080982063726 310410214827503 8234 04/27/20 19:07:01 0:57 7529 5070 nxtgenpho no 3587080982063726 310410214827503 8235 04/27/20 19:07:57 2:05 5222 6107 nxtgenpho no 3587080982063726 310410214827503 8236 04/27/20 19:07:59 2:04 6107 4934 nxtgenpho no 3587080982063726 310410214827503 8237 04/27/20 19:10:03 10:01 7593 5176 nxtgonpho no 3587080982063726 310410214827503 MAKE I03DLL APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PRONGS APPLE !PHONES APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 338 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002982 Ns tit not for general distribution. EFTA_00I 17058 EFTA01251582 MOBILITY The information contained heraCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. tr"4-a". AT&T Run Date: Run Tina: Data Osage For: 06/17/2020 Item Conn. Conn. Date Time Originating ET Bytes Bytoa Apn INEI Number Up Dn INSt MARL MODEL (OTC) 8238 04/27/20 19:20:03 2:04 5221 6055 nxtgenpho no 3587080982063726 310410214827503 8239 04/27/20 19:20:04 2:04 6055 4933 nxtgenpho no 3587080982063726 310410214827503 8240 04/27/20 19:22:08 1:05 0 Oruftgenpho no 3587080982063726 310410214827503 8241 04/27/20 19:23:12 8:32 5532 8995 nxtgenpho no 3587080982063726 310410214827503 8242 04/27/20 19:23:13 8:32 8995 5244 nxtgenpho no 3587080982063726 310410214827503 8243 04/27/20 19:28:03 22:26 5088 1588 imp -1 310410214827503 8244 04/27/20 19:31:45 2:35 7465 5070 nxtgenpho no 3587080982063726 310410214827503 8245 04/27/20 19:34:19 10:47 6406 7123 nxtgenpho no 3587080982063726 310410214827503 8246 04/27/20 19:34:20 10:47 7123 6958 nxtgenpho no 3587080982063726 310410214827503 8247 04/27/20 19:45:07 3:11 7529 5280 nxtgenpho no 3587080982063726 310410214827503 8248 04/27/20 19:48:18 13:01 27566 39307 nxtgenpho no 3587080982063726 310410214827503 8249 04/27/20 19:48:19 13:01 39307 27182 nxtgenpho no 3587080982063726 310410214827503 8250 04/27/20 19:48:21 6:55 7248 6810 imp 3587080982063726 310410214827503 8251 04/27/20 19:48:22 6:55 6742 6984 imp 3587080982063726 310410214827503 8252 04/27/20 19:50:29 8:34 9844 6664 imp -1 310410214827503 8253 04/27/20 19:55:16 6:03 6230 6666 imp 3587080982063726 310410214827503 8254 04/27/20 19:55:17 6:03 6666 5966 imp 3587080982063726 310410214827503 8255 04/27/20 20:01:20 107:32 55017 62639 nxtgenpho no 3587080982063726 310410214827503 8256 04/27/20 20:01:21 60:00 38098 30186 nxtgenpho no 3587080982063726 310410214827503 8257 04/27/20 20:01:21 107:31 6546 8324 ins 3587080982063726 310410214827503 8258 04/27/20 20:01:22 60:00 8216 6282 imp 3587080982063726 310410214827503 8259 04/27/20 20:08:19 60:00 16915 9114 imp -1 310410214827503 8260 04/27/20 21:01:21 47:32 24541 25980 nxtgenpho no 3587080982063726 310410214827503 8261 04/27/20 21:01:22 47:31 0 0 am 3587080982063726 310410214827503 8262 04/27/20 21:08:19 60:00 8836 3020 was -1 310410214827503 APPLE !PHONES APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 339 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002983 NeTifikE not for general distribution. EFTA_00I 17059 EFTA01251583 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Tina: Data Osage Tor: Item Conn. Data 06/17/2020 18:56:21 Conn. Time (OTC) Originating Number ET • Bytes Up Bytaa Apn Dn INEI INSI MARL 8263 04/27/20 21:48:53 9:42 8690 5271 nxtgonpho no 3587080982063726 310410214827503 APPLE 8264 04/27/20 21:58:35 21:47 20696 24770 nxtgonpho no 3587080982063726 310410214827503 APPLE 8265 04/27/20 21:58:36 21:47 24770 21047 nactgonpho no 3587080982063726 310410214827503 APPLE 8266 04/27/20 22:08:19 60:00 10036 3252 into -1 310410214827503 8267 04/27/20 22:20:23 53:26 8772 7758 nxtgonpho no 3587080982063726 310410214827503 APPLE 8268 04/27/20 23:08:19 60:00 17976 5072 into -1 310410214827503 8269 04/27/20 23:13:48 17:10 7762 7376 nxtgonpho no 3587080982063726 310410214827503 APPLE 8270 04/27/20 23:13:49 17:10 7376 7282 nxtgonpho no 3587080982063726 310410214827503 APPLE 8271 04/27/20 23:30:59 31:18 8299 6068 nxtgonpho no 3587080982063726 310410214827503 APPLE 8272 04/28/20 00:02:16 8:22 5536 9049 nxtgonpho no 3587080982063726 310410214827503 APPLE 8273 04/28/20 00:02:17 8:22 9049 5248 nxtgonpho no 3587080982063726 310410214827503 APPLE 8274 04/28/20 00:08:19 60:00 7064 2864 into -1 310410214827503 8275 04/28/20 00:10:39 0:39 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8276 04/28/20 00:11:16 27:05 12466 25753 nxtgonpho no 3587080982063726 310410214827503 APPLE 8277 04/28/20 00:11:18 27:05 25753 12082 nxtgonpho no 3587080982063726 310410214827503 APPLE 8278 04/28/20 00:38:23 12:40 7697 5339 nxtgonpho no 3587080982063726 310410214827503 APPLE 8279 04/28/20 00:51:02 59:48 14424 8293 nxtgonpho no 3587080982063726 310410214827503 APPLE 8280 04/28/20 00:51:03 59:48 8293 14040 nactgonpho no 3587080982063726 310410214827503 APPLE 8281 04/28/20 01:08:19 60:00 12352 4644 into -1 310410214827503 8282 04/28/20 01:50:49 33:25 5117 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 8283 04/28/20 01:50:51 33:25 6107 6614 nxtgonpho no 3587080982063726 310410214827503 APPLE 8284 04/28/20 02:08:19 60:00 8372 2896 into -1 310410214827503 8285 04/28/20 02:24:16 0:44 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL IPHONZ8 IPHONZ8 'PHONES !PHONES !PHONES IPHONZ8 IPHONZ8 IPHONZ8 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These.communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 340 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002984 N:FroliAL not for general distribution. EFTA_00I 17060 EFTA01251584 MOBILITY The information contained heraCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 410111 AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Hunter (UTC) Bytes Up Byte. Apn Dn INEI IMSI MART 8286 04/28/20 02:25:00 14:51 5326 6212 nxtgonpho no 3587080982063726 310410214827503 APPLE 8287 04/28/20 02:25:00 14:53 6212 5038 nxtgonpho no 3587080982063726 310410214827503 APPLE 8288 04/28/20 02:39:53 1:47 6115 4962 nxtgonpho no 3587080982063726 310410214827503 APPLE 8289 04/28/20 02:41:39 8:20 5702 6470 nxtgonpho no 3587080982063726 310410214827503 APPLE 8290 04/28/20 02:41:40 8:20 6470 5414 nxtgonpho no 3587080982063726 310410214827503 APPLE 8291 04/28/20 02:50:00 2:41 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8292 04/28/20 02:52:41 50:00 33652 30345 nxtgonpho no 3587080982063726 310410214827503 APPLE 8293 04/28/20 02:52:42 60:00 30518 33373 nxtgonpho no 3587080982063726 310410214827503 APPLE 8294 04/28/20 03:08:19 60:00 8620 3128 imp -1 310410214827503 8295 04/28/20 03:42:41 510:07 15287 26603 nxtgonpho no 3587080982063726 310410214827503 APPLE 8296 04/28/20 03:52:42 60:00 1386 1260 nxtgonpho no 3587080982063726 310410214827503 APPLE 8297 04/28/20 04:08:19 60:00 8388 3004 imp -1 310410214827503 8298 04/28/20 04:52:42 60:00 1033 840 nxtgonpho no 3587080982063726 310410214827503 APPLE 8299 04/28/20 05:08:19 60:00 13460 4468 imp -1 310410214827503 8300 04/28/20 05:52:42 60:00 17054 8716 nxtgonpho no 3587080982063726 310410214827503 APPLE 8301 04/28/20 06:08:19 60:00 12152 4412 imp -1 310410214827503 8302 04/28/20 06:52:42 60:00 937 1235 nxtgonpho no 3587080982063726 310410214827503 APPLE 8303 04/28/20 07:08:19 60:00 8388 2896 imp -1 310410214827503 8304 04/28/20 07:52:42 60:00 763 735 nxtgonpho no 3587080982063726 310410214827503 APPLE 8305 04/28/20 08:08:19 60:00 8496 3128 imp -1 310410214827503 8306 04/28/20 08:52:42 60:00 519 315 nxtgonpho no 3587080982063726 310410214827503 APPLE 8307 04/28/20 09:08:19 60:00 12152 4684 imp -1 310410214827503 8308 04/28/20 09:52:42 60:00 808 630 nxtgonpho no 3587080982063726 310410214827503 APPLE 8309 04/28/20 10:08:19 60:00 9928 3144 isms -1 310410214827503 MODEL !PROMS !PHONES !PHONES !PHONES IPROME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PROMS !PROMS !PROMS !PROMS !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 341 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002985 NsTroliAL not for general distribution. EFTAJVII7061 EFTA01251585 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn INLI IMSI MUM 8310 04/28/20 10:52:42 60:00 815 840ruftgonpho no 3587080982063726 310410214827503 APPLE 8311 04/28/20 11:08:19 60:00 11920 4612 imo -1 310410214827503 8312 04/28/20 11:52:42 20:07 3115 419ruftgonpho no 3587080982063726 310410214827503 APPLE 8313 04/28/20 12:08:19 53:27 9928 3144 imp 3587080982063726 310410214827503 APPLE 8314 04/28/20 12:12:49 60:00 20596 18003ruftgonpho no 3587080982063726 310410214827503 APPLE 8315 04/28/20 13:01:46 0:00 0 0 imp 3587080982063726 310410214827503 APPLE 8316 04/28/20 13:01:46 0:00 0 0 imp 3587080982063726 310410214827503 APPLE 8317 04/28/20 13:01:55 60:00 18409 9570 imp -1 310410214827503 8318 04/28/20 13:12:49 24:06 571 420ruftgonpho no 3587080982063726 310410214827503 APPLE 8319 04/28/20 13:36:54 39:05 80581 564466ruftgonpho no 3587080982063726 310410214827503 APPLE 8320 04/28/20 13:36:55 39:05 564466 80863ruftgonpho no 3587080982063726 310410214827503 APPLE 8321 04/28/20 14:01:55 60:00 7172 2912 ims -1 310410214827503 8322 04/28/20 14:16:00 0:05 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8323 04/28/20 14:16:17 24:31 9059 5638ruftgonpho no 3587080982063726 310410214827503 APPLE 8324 04/28/20 14:40:47 1:54 5220 6055ruftgonpho no 3587080982063726 310410214827503 APPLE 8325 04/28/20 14:40:48 1:54 6055 4932ruftgonpho no 3587080982063726 310410214827503 APPLE 8326 04/28/20 14:42:42 1:33 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8327 04/28/20 14:44:14 3:08 4608 5823ruftgonpho no 3587080982063726 310410214827503 APPLE 8328 04/28/20 14:44:15 3:08 5823 4320ruftgonpho no 3587080982063726 310410214827503 APPLE 8329 04/28/20 14:47:23 1:03 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8330 04/28/20 14:48:25 2:39 5286 6925ruftgonpho no 3587080982063726 310410214827503 APPLE 8331 04/28/20 14:48:26 2:39 6925 4998ruftgonpho no 3587080982063726 310410214827503 APPLE 8332 04/28/20 14:51:05 4:00 5222 6055ruftgonpho no 3587080982063726 310410214827503 APPLE MOLL 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 342 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002986 NTroliAL not for general distribution. EFTA 00/17062 EFTA01251586 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4111. tr‘"Ii. aa#d AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytoa Apn Dn INEI 'Mal MARL MODEL 8333 04/28/20 14:51:06 4:00 6055 4934 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8334 04/28/20 14:55:05 12:37 12830 18281 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8335 04/28/20 14:55:07 12:36 18281 12446 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8336 04/28/20 15:01:55 60:00 10144 3160 ims -1 310410214827503 8337 04/28/20 15:07:44 34:39 21403 56492 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8338 04/28/20 15:07:44 34:40 56492 20827 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8339 04/28/20 15:42:24 26:25 25350 30879 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8340 04/28/20 16:01:55 60:00 6956 2680 ims -1 310410214827503 8341 04/28/20 16:08:49 30:04 14228 18903 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8342 04/28/20 16:08:49 30:05 18903 14999 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8343 04/28/20 16:38:54 4:23 7465 4964 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8344 04/28/20 16:43:16 2:09 5221 6107 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8345 04/28/20 16:43:17 2:09 6107 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8346 04/28/20 16:45:26 32:37 14617 14079 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8347 04/28/20 17:01:55 60:00 8388 3036 ims -1 310410214827503 8348 04/28/20 17:18:02 2:10 5164 6036 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8349 04/28/20 17:18:03 2:10 6036 4876 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8350 04/28/20 17:20:13 0:06 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8351 04/28/20 17:20:29 60:00 19583 8262 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8352 04/28/20 18:01:55 60:00 17100 6140 ims -1 310410214827503 8353 04/28/20 18:20:29 23:50 462 420 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8354 04/28/20 18:44:19 12:56 9562 6992 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 343 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00002987 WV& not for general distribution. EF-EA_00117063 EFTA01251587 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41111, ......,,• ••-s`" " 1 AT&T Run Date: Run Time: Data usage For: 06/17/2020 Item cows. Conn. Date Time (Inc) originating mambos ET Bytes . Bytes Up Dn Apn IKE I INSI MARL MODEL 8355 04/28/20 18:57:14 2:22 4608 5875 nxtgonpho no 3587080982063726 310410214827503 8356 04/28/20 18:57:15 2:22 5875 4320 nxtgonpho no 3587080982063726 310410214827503 8357 04/28/20 18:59:37 7:56 6531 5311 nxtgonpho no 3587080982063726 310410214827503 8358 04/28/20 19:01:55 60:00 33348 19308 ims -1 310410214827503 8359 04/28/20 19:07:32 2:38 5221 6055 nxtgonpho no 3587080982063726 310410214827503 8360 04/28/20 19:07:34 2:37 6055 4933 nxtgonpho no 3587080982063726 310410214827503 8361 04/28/20 19:10:11 19:21 6618 6266 nxtgonpho no 3587080982063726 310410214827503 8362 04/28/20 19:16:18 0:28 1858 13557 ims -1 310410214827503 8363 04/28/20 19:29:31 2:04 5220 6055 nxtgonpho no 3587080982063726 310410214827503 8364 04/28/20 19:29:32 2:04 6055 4932 nxtgonpho no 3587080982063726 310410214827503 8365 04/28/20 19:31:36 14:15 7476 5808 nxtgonpho no 3587080982063726 310410214827503 8366 04/28/20 19:44:11 45:06 5949075 6909390 ims -1 310410214827503 8367 04/28/20 19:45:51 8:08 5986 6551 nxtgonpho no 3587080982063726 310410214827503 8368 04/28/20 19:45:52 8:08 6551 5698 nxtgonpho no 3587080982063726 310410214827503 8369 04/28/20 19:54:00 4:02 7593 5175 nxtgonpho no 3587080982063726 310410214827503 8370 04/28/20 19:58:02 2:03 5114 6053 nxtgonpho no 3587080982063726 310410214827503 8371 04/28/20 19:58:03 2:03 6053 4826 nxtgonpho no 3587080982063726 310410214827503 8372 04/28/20 20:00:06 11:39 6208 6013 nxtgonpho no 3587080982063726 310410214827503 8373 04/28/20 20:01:55 60:00 9612 4088 ims -1 310410214827503 8374 04/28/20 20:11:44 9:03 6103 6795 nxtgonpho no 3587080982063726 310410214827503 8375 04/28/20 20:11:45 9:03 6795 5719 nxtgonpho no 3587080982063726 310410214827503 8376 04/28/20 20:20:48 1:17 6055 4901 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002988 NeTnikE not for general distribution. Page 344 EFTA 00117064 EFTA01251588 NOBILITY The information contained herself:314R 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in AT&T Run Date: Run Time: Data Osage For: 06/17/2020 18:56:22 Itos. Conn. Date Conn. Time lam) Originating Number LT Bytes Up 8377 04/28/20 20:22:04 2:09 5220 8378 04/28/20 20:22:05 2:09 6055 8379 04/28/20 20:24:14 8:41 6055 8380 04/28/20 20:32:54 19:52 26433 8381 04/28/20 20:32:55 19:52 36771 8382 04/28/20 20:52:47 1:57 6055 8383 04/28/20 20:54:43 28:23 23320 8384 04/28/20 20:54:44 28:23 24246 8385 04/28/20 21:01:55 60:00 23124 8386 04/28/20 21:02:53 37:06 6409331 8387 04/28/20 21:23:07 6:00 6053 8388 04/28/20 21:29:06 14:48 5536 8389 04/28/20 21:29:07 14:48 6344 8390 04/28/20 21:43:55 0:26 144 8391 04/28/20 21:47:37 6:55 334016 8392 04/28/20 21:54:31 0:23 5221 8393 04/28/20 21:54:32 0:23 6055 8394 04/28/20 21:54:55 1:13 48 8395 04/28/20 21:56:07 11:04 11475 8396 04/28/20 21:56:08 11:04 14618 8397 04/28/20 22:01:55 60:00 10596 8398 04/28/20 22:07:12 3:57 23909 Byte. Apn IMEI IMSI MARL MOLL Dn 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4932 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4796 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 36898 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 26145 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4996 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 24246 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 22840 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 10972 ims -1 310410214827503 4816403 ims -1 310410214827503 4792 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 6344 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 5248 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no Ormagonpho 3587080982063726 310410214827503 APPLE 'PHONES no 413565 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 6055 nxtgonpho 3587080982063726 310410214827503 APPLE 'PHONES no 4933 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no Ormagonpho 3587080982063726 310410214827503 APPLE !PHONES no 14618 nxtgenpho 3587080982063726 310410214827503 APPLE !PHONES no 11091 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no 4144 ins -1 310410214827503 9143 nxtgenpho 3587080982063726 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 345 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002989 NTifikE not for general distribution. EFTA_00I 17065 EFTA01251589 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41011i c``"ssae. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time fluster (UTC) Bytes Up Byte. Apn On INEZ IMEI MAKE 8399 04/28/20 22:11:08 2:43 5702 6457 nxtgenpho no 3587080982063726 310410214827503 APPLE 8400 04/28/20 22:11:09 2:43 6457 5414ruagenpho no 3587080982063726 310410214827503 APPLE 8401 04/28/20 22:13:52 60:00 13499 9959 nxtgenpho no 3587080982063726 310410214827503 APPLE 8402 04/28/20 23:01:55 60:00 40620 28376 imo -1 310410214827503 8403 04/28/20 23:13:52 45:19 20487 14215ruagenpho no 3587080982063726 310410214827503 APPLE 8404 04/28/20 23:39:28 1:07 101010 79485 imo -1 310410214827503 8405 04/28/20 23:45:11 0:30 3623 21763 imo -1 310410214827503 8406 04/28/20 23:59:10 19:23 27710 32158ruagenpho no 3587080982063726 310410214827503 APPLE 8407 04/28/20 23:59:11 19:23 32158 27230ruftgenpho no 3587080982063726 310410214827503 APPLE 8408 04/29/20 00:01:55 60:00 27544 13260 imo -1 310410214827503 8409 04/29/20 00:06:49 0:28 1481 11935 imo -1 310410214827503 8410 04/29/20 00:18:34 3:15 6055 4901 nxtgenpho no 3587080982063726 310410214827503 APPLE 8411 04/29/20 00:21:48 2:04 5221 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 8412 04/29/20 00:21:49 2:04 6055 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 8413 04/29/20 00:23:53 0:33 6055 4901 nxtgenpho no 3587080982063726 310410214827503 APPLE 8414 04/29/20 00:24:25 8:58 22483 41892 nxtgenpho no 3587080982063726 310410214827503 APPLE 8415 04/29/20 00:24:26 8:58 41892 22195ruagenpho no 3587080982063726 310410214827503 APPLE 8416 04/29/20 00:33:24 1:33 7511 5066 nxtgenpho no 3587080982063726 310410214827503 APPLE 8417 04/29/20 00:34:56 2:10 5221 6055ruagenpho no 3587080982063726 310410214827503 APPLE 8418 04/29/20 00:34:57 2:10 6055 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 8419 04/29/20 00:37:07 53:20 58644 59667ruagenpho no 3587080982063726 310410214827503 APPLE 8420 04/29/20 01:01:55 60:00 7528 3144 imo -1 310410214827503 8421 04/29/20 01:30:27 2:03 5220 6039 nxtgenpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONEB IPHONEB IPHONEB !PHONES !PHONES IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 346 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002990 NTroleiNE not for general distribution. EFTAJVII7066 EFTA01251590 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. ‘"S° .•. ..7,,d as# AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 18:56:22 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn per DUI MART MODEL 8422 04/29/20 01:30:28 2:03 6039 4932 nxtgenpho no 3587080982063726 310410214827503 APPLE INIONZ8 8423 04/29/20 01:32:31 11:53 7978 5577 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 8424 04/29/20 01:44:23 2:10 7538 7247 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8425 04/29/20 01:44:24 2:10 7247 7250 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8426 04/29/20 01:46:34 4:23 6871 4961 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8427 04/29/20 01:50:56 8:34 5221 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 8428 04/29/20 01:50:57 8:34 6055 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8429 04/29/20 01:59:31 2:41 7463 4962 nxtgenpho no 3587080982063726 310410214827503 APPLE IL0HONZ8 8430 04/29/20 02:01:55 60:00 12152 4392 ims -1 310410214827503 8431 04/29/20 02:02:11 4:21 29913 36978 nxtgenpho no 3587080982063726 310410214827503 APPLE IL0HONZ8 8432 04/29/20 02:02:13 4:20 36978 29893 nxtgenpho no 3587080982063726 310410214827503 APPLE IL0HONZ8 8433 04/29/20 02:06:33 37:17 39591 20727 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8434 04/29/20 02:43:50 21:18 5807 6641 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8435 04/29/20 02:43:51 21:18 6641 5519 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8436 04/29/20 03:01:55 60:00 6848 2896 imp -1 310410214827503 8437 04/29/20 03:05:09 37:04 8100 5542 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 8438 04/29/20 03:42:12 7:35 12973 13789 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 8439 04/29/20 03:42:13 7:36 13789 12589 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8440 04/29/20 03:49:49 10:02 7529 5069 nxtgenpho no 3587080982063726 310410214827503 APPLE IL0HONZ8 8441 04/29/20 03:59:50 2:25 5117 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE IL0HONZ8 8442 04/29/20 03:59:51 2:25 6055 4829 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 8443 04/29/20 04:01:55 60:00 6956 2912 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 347 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is SDNYGM00002991 NsTroliAL not for general distribution. EFTA_00I 17067 EFTA01251591 MOBILITY The information contained heraelaNyFtit 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 ii:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes • UP Bytes Apn On ICI 1491 teal 8444 04/29/20 04:02:16 9:51 26996 13968 nxtgonpho no 3587080982063726 310410214827503 APPLE 8445 04/29/20 04:12:07 8:14 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 8446 04/29/20 04:12:08 8:14 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE 8447 04/29/20 04:20:22 13:53 63361 58086 nxtgonpho no 3587080982063726 310410214827503 APPLE 8448 04/29/20 04:34:14 7:35 10575 13233 nxtgonpho no 3587080982063726 310410214827503 APPLE 8449 04/29/20 04:34:15 7:35 13233 10191 nxtgonpho no 3587080982063726 310410214827503 APPLE 8450 04/29/20 04:41:50 11:00 18032 20059 nxtgonpho no 3587080982063726 310410214827503 APPLE 8451 04/29/20 04:41:50 11:02 20059 17552 nxtgonpho no 3587080982063726 310410214827503 APPLE 8452 04/29/20 04:52:51 40:31 17966 22231 nxtgonpho no 3587080982063726 310410214827503 APPLE 8453 04/29/20 04:52:52 40:31 22231 18440 nxtgonpho no 3587080982063726 310410214827503 APPLE 8454 04/29/20 05:01:55 60:00 16544 6016 imp -1 310410214827503 8455 04/29/20 05:33:23 14:10 7700 5327 nxtgonpho no 3587080982063726 310410214827503 APPLE 8456 04/29/20 05:47:33 212:13 7950 9377 nxtgonpho no 3587080982063726 310410214827503 APPLE 8457 04/29/20 05:47:34 60:00 7275 6192 nxtgonpho no 3587080982063726 310410214827503 APPLE 8458 04/29/20 06:01:55 60:00 7280 2804 imp -1 310410214827503 8459 04/29/20 06:47:34 60:00 692 420 nxtgonpho no 3587080982063726 310410214827503 APPLE 8460 04/29/20 07:01:55 60:00 7080 2912 imp -1 310410214827503 8461 04/29/20 07:47:34 60:00 751 735 nxtgonpho no 3587080982063726 310410214827503 APPLE 8462 04/29/20 08:01:55 60:00 8496 3284 imp -1 310410214827503 8463 04/29/20 08:47:34 32:13 640 315 nxtgonpho no 3587080982063726 310410214827503 APPLE 8464 04/29/20 09:01:55 60:00 8388 3036 imp -1 310410214827503 8465 04/29/20 09:19:47 60:00 26430 30864 nxtgonpho no 3587080982063726 310410214827503 APPLE 8466 04/29/20 10:01:55 60:00 10488 4520 imp -1 310410214827503 MOLL IPHONE8 IPHONE8 !PHONES !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 !PHONES !PHONES !PEONES IPRONE8 !PHONES IPRONE8 IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002992 PsiTn iliAL not for general distribution. Page 348 EFTA_00I 17068 EFTA01251592 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 4011, AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 SEIM Conn. Time (Inc) Originating Number ET Bytes Up Bytom Apn Dn IME1 INS' MAKE 8467 04/29/20 10:19:47 60:00 37927 42913 nxtgonpho no 3587080982063726 310410214827503 APPLE 8468 04/29/20 11:01:55 60:00 11920 4376 in -1 310410214827503 8469 04/29/20 11:19:47 9:54 0 945 nxtgonpho no 3587080982063726 310410214827503 APPLE 8470 04/29/20 11:29:40 3:52 288 48 nxtgonpho no 3587080982063726 310410214827503 APPLE 8471 04/29/20 11:29:41 3:52 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8472 04/29/20 11:33:33 37:35 20478 32567 nxtgonpho no 3587080982063726 310410214827503 APPLE 8473 04/29/20 11:33:33 37:36 32567 21345 nxtgonpho no 3587080982063726 310410214827503 APPLE 8474 04/29/20 12:01:55 60:00 6848 2788 imp -1 310410214827503 8475 04/29/20 12:11:09 60:00 47298 34467 nxtgonpho no 3587080982063726 310410214827503 APPLE 8476 04/29/20 13:01:55 60:00 6956 2680 in -1 310410214827503 8477 04/29/20 13:11:09 0:24 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8478 04/29/20 13:11:32 2:03 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 8479 04/29/20 13:11:34 2:03 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 8480 04/29/20 13:13:37 3:53 6909 9126 nxtgonpho no 3587080982063726 310410214827503 APPLE 8481 04/29/20 13:17:29 2:04 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 8482 04/29/20 13:17:30 2:04 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 8483 04/29/20 13:19:34 2:18 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8484 04/29/20 13:21:51 2:09 5163 6052 nxtgonpho no 3587080982063726 310410214827503 APPLE 8485 04/29/20 13:21:52 2:09 6052 4875 nxtgonpho no 3587080982063726 310410214827503 APPLE 8486 04/29/20 13:24:01 1:46 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8487 04/29/20 13:25:46 2:04 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 8488 04/29/20 13:25:47 2:04 6055 4932 nxtgonpho 3587080982063726 310410214827503 APPLE no NICOLL 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00002993 PsisTiliAL not for general distribution. Page 349 EFTA_00I 17069 EFTA01251593 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn On IRE' IMISI HARE 8489 04/29/20 13:27:51 0:34 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 8490 04/29/20 13:28:24 14:50 5442 7690 nxtgenpho no 3587080982063726 310410214827503 APPLE 8491 04/29/20 13:28:25 14:50 7690 5154 nxtgenpho no 3587080982063726 310410214827503 APPLE 8492 04/29/20 13:43:15 0:32 7529 5070 nxtgenpho no 3587080982063726 310410214827503 APPLE 8493 04/29/20 13:43:46 2:09 5224 6112 nxtgenpho no 3587080982063726 310410214827503 APPLE 8494 04/29/20 13:43:47 2:09 6112 4936 nxtgenpho no 3587080982063726 310410214827503 APPLE 8495 04/29/20 13:45:56 0:34 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 8496 04/29/20 13:46:29 2:09 192 Oruftgenpho no 3587080982063726 310410214827503 APPLE 8497 04/29/20 13:46:30 2:08 12921 7106 nxtgenpho no 3587080982063726 310410214827503 APPLE 8498 04/29/20 13:46:30 2:09 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 8499 04/29/20 13:46:31 2:08 7106 12633ruftgenpho no 3587080982063726 310410214827503 APPLE 8500 04/29/20 13:48:39 1:16 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 8501 04/29/20 13:49:54 2:26 5256 6098 nxtgenpho no 3587080982063726 310410214827503 APPLE 8502 04/29/20 13:49:55 2:26 6098 4872 nxtgenpho no 3587080982063726 310410214827503 APPLE 8503 04/29/20 13:52:21 1:10 13551 5828 nxtgenpho no 3587080982063726 310410214827503 APPLE 8504 04/29/20 13:53:30 9:03 6415 6743ruftgenpho no 3587080982063726 310410214827503 APPLE 8505 04/29/20 13:53:31 9:03 6743 6127ruftgenpho no 3587080982063726 310410214827503 APPLE 8506 04/29/20 14:01:55 60:00 6956 2896 ims -1 310410214827503 8507 04/29/20 14:02:33 2:05 5220 6107 nxtgenpho no 3587080982063726 310410214827503 APPLE 8508 04/29/20 14:02:34 2:05 6107 4932ruftgenpho no 3587080982063726 310410214827503 APPLE 8509 04/29/20 14:04:39 0:05 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PRONGS !PHONES !PHONES IPROME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES IPROME8 !PHONES !PHONES !PHONES !PHONES !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 350 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002994 NTstAlt not for general distribution. EFTA_00I 17070 EFTA01251594 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ap. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 18:56:22 Conn. Originating ET Time Number (OTC) Bytes Op Byte. Apn Dn par IAZI 14*71 8510 04/29/20 14:05:08 8:47 12010 22627 nxtgonpho no 3587080982063726 310410214827503 APPLE 8511 04/29/20 14:05:09 8:47 22627 11722 nxtgonpho no 3587080982063726 310410214827503 APPLE 8512 04/29/20 14:13:56 1:13 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8513 04/29/20 14:15:08 23:30 10514 12459 nxtgonpho no 3587080982063726 310410214827503 APPLE 8514 04/29/20 14:15:09 23:30 12459 11285 nxtgonpho no 3587080982063726 310410214827503 APPLE 8515 04/29/20 14:38:39 40:38 44472 50191 nxtgonpho no 3587080982063726 310410214827503 APPLE 8516 04/29/20 15:01:55 60:00 18532 6248 ins -1 310410214827503 8517 04/29/20 15:19:16 9:49 6204 7547 nxtgonpho no 3587080982063726 310410214827503 APPLE 8518 04/29/20 15:19:18 9:48 7547 5916 nxtgonpho no 3587080982063726 310410214827503 APPLE 8519 04/29/20 15:29:06 48:38 10205 9123 nxtgonpho no 3587080982063726 310410214827503 APPLE 8520 04/29/20 16:01:55 60:00 30100 16380 ins -1 310410214827503 8521 04/29/20 16:17:43 8:21 10299 12188 nxtgonpho no 3587080982063726 310410214827503 APPLE 8522 04/29/20 16:17:45 8:20 12188 9915 nxtgonpho no 3587080982063726 310410214827503 APPLE 8523 04/29/20 16:26:05 43:12 8300 6121 nxtgonpho no 3587080982063726 310410214827503 APPLE 8524 04/29/20 16:53:17 0:06 0 0 ins -1 310410214827503 8525 04/29/20 16:53:43 0:27 1632 11096 ins -1 310410214827503 8526 04/29/20 17:01:55 60:00 8496 2928 ins -1 310410214827503 8527 04/29/20 17:09:16 27:04 5793 6630 nxtgonpho no 3587080982063726 310410214827503 APPLE 8528 04/29/20 17:09:17 27:04 6630 5505 nxtgonpho no 3587080982063726 310410214827503 APPLE 8529 04/29/20 17:36:21 2:41 6055 4901 nxtgonpho no 3587080982063726 310410214827503 APPLE 8530 04/29/20 17:39:01 2:04 5220 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 8531 04/29/20 17:39:02 2:05 6107 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE 8532 04/29/20 17:41:07 6:33 6055 4901 nxtgonpho no 3587080982063726 310410214827503 APPLE 163DCL INIONE8 INIONE8 DRONES DRONES INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 DRONES DRONES INIONE8 INIONE8 INIONE8 DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 351 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SIDNYGAL00002995 NeTtAdti not for general distribution. EF-EA_00117071 EFTA01251595 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 18:56:22 Conn. Originating ET Time Number (UTC) Bytes Up Bytes, Apn Dn TM= IMBI NAZI 8533 04/29/20 17:47:39 8:23 5222 6023 natgonpho no 3587080982063726 310410214827503 APPLE 8534 04/29/20 17:47:40 8:23 6023 4934 natgonpho no 3587080982063726 310410214827503 APPLE 8535 04/29/20 17:56:03 35:58 9466 5525 natgonpho no 3587080982063726 310410214827503 APPLE 8536 04/29/20 18:01:55 60:00 10736 5036 imp -1 310410214827503 8537 04/29/20 18:32:00 8:27 7411 37583 natgonpho no 3587080982063726 310410214827503 APPLE 8538 04/29/20 18:32:01 8:27 37583 7123 nxtgonpho no 3587080982063726 310410214827503 APPLE 8539 04/29/20 18:40:28 2:04 0 0 natgonpho no 3587080982063726 310410214827503 APPLE 8540 04/29/20 18:42:31 2:03 4505 5791 nxtgonpho no 3587080982063726 310410214827503 APPLE 8541 04/29/20 18:42:32 2:03 5791 4217 nxtgonpho no 3587080982063726 310410214827503 APPLE 8542 04/29/20 18:44:35 2:38 7493 5026 nxtgonpho no 3587080982063726 310410214827503 APPLE 8543 04/29/20 18:47:13 20:47 318222 41011 nxtgonpho no 3587080982063726 310410214827503 APPLE 8544 04/29/20 18:47:14 20:47 41011 317934 natgonpho no 3587080982063726 310410214827503 APPLE 8545 04/29/20 19:01:55 60:00 22276 11676 imp -1 310410214827503 8546 04/29/20 19:08:01 3:16 7497 5070 natgonpho no 3587080982063726 310410214827503 APPLE 8547 04/29/20 19:11:16 2:03 5282 6083 natgonpho no 3587080982063726 310410214827503 APPLE 8548 04/29/20 19:11:17 2:03 6083 4994 nxtgonpho no 3587080982063726 310410214827503 APPLE 8549 04/29/20 19:13:20 14:38 6194 5002 natgonpho no 3587080982063726 310410214827503 APPLE 8550 04/29/20 19:27:57 2:06 7211 8037 natgonpho no 3587080982063726 310410214827503 APPLE 8551 04/29/20 19:27:58 2:06 8037 6923 natgonpho no 3587080982063726 310410214827503 APPLE 8552 04/29/20 19:29:49 1:04 107732 131604 imp -1 310410214827503 8553 04/29/20 19:30:04 0:49 7497 5071 nxtgonpho no 3587080982063726 310410214827503 APPLE 8554 04/29/20 19:30:52 2:09 5181 6023 natgonpho no 3587080982063726 310410214827503 APPLE Men IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 352 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00002996 NeTifikE not for general distribution. EFTA 00117072 EFTA01251596 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET flee Number (OTC) Bytes Up Bytoa Apn Dn IKE I IMSI MARL 8555 04/29/20 19:30:53 2:09 6023 4893 natgenpho no 3587080982063726 310410214827503 APPLE 8556 04/29/20 19:33:02 1:40 6023 4797ruagenpho no 3587080982063726 310410214827503 APPLE 8557 04/29/20 19:34:41 6:16 5387 6923ruagenpho no 3587080982063726 310410214827503 APPLE 8558 04/29/20 19:34:42 6:16 6923 5099ruagenpho no 3587080982063726 310410214827503 APPLE 8559 04/29/20 19:40:58 28:47 15758 11439natgenpho no 3587080982063726 310410214827503 APPLE 8560 04/29/20 20:01:55 31:27 5072 1588 ims 3587080982063726 310410214827503 APPLE 8561 04/29/20 20:09:44 11:22 5178 6083ruagenpho no 3587080982063726 310410214827503 APPLE 8562 04/29/20 20:09:45 11:22 6083 5835ruagenpho no 3587080982063726 310410214827503 APPLE 8563 04/29/20 20:21:07 51:08 8016 7012ruagenpho no 3587080982063726 310410214827503 APPLE 8564 04/29/20 20:33:22 0:24 89576 868 ims 3587080982063726 310410214827503 APPLE 8565 04/29/20 20:33:22 0:24 496 868 ims 3587080982063726 310410214827503 APPLE 8566 04/29/20 20:33:46 60:00 28900 16976 ims 3587080982063726 310410214827503 APPLE 8567 04/29/20 20:52:03 19:55 2746121 3948268 ims 3587080982063726 310410214827503 APPLE 8568 04/29/20 21:12:14 2:03 5220 6075ruagenpho no 3587080982063726 310410214827503 APPLE 8569 04/29/20 21:12:15 2:03 6075 4932ruftgenpho no 3587080982063726 310410214827503 APPLE 8570 04/29/20 21:14:18 30:24 35302 20840ruftgenpho no 3587080982063726 310410214827503 APPLE 8571 04/29/20 21:33:46 60:00 13460 4516 ims 3587080982063726 310410214827503 APPLE 8572 04/29/20 21:44:41 2:04 5221 6023ruagenpho no 3587080982063726 310410214827503 APPLE 8573 04/29/20 21:44:42 2:04 6023 4933natgenpho no 3587080982063726 310410214827503 APPLE 8574 04/29/20 21:46:46 60:00 10896 6329ruagenpho no 3587080982063726 310410214827503 APPLE 8575 04/29/20 22:33:46 60:00 8496 3036 ims 3587080982063726 310410214827503 APPLE 8576 04/29/20 22:46:46 60:00 1270 105Ormagenpho no 3587080982063726 310410214827503 APPLE 8577 04/29/20 23:33:46 60:00 6848 2680 ims 3587080982063726 310410214827503 APPLE 8578 04/29/20 23:46:46 3:27 24661 17455natgenpho no 3587080982063726 310410214827503 APPLE NICOLL IPHONZ8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 'PHONES !PHONES 1PROME8 DRONES DRONES DRONES DRONES DRONES DRONES !PROMS !PRONGS !PHONES !PHONES !PROMS DRONES DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 353 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00002997 NTniliAL not for general distribution. EFTA_00I 17073 EFTA01251597 MOBILITY The information contained heraCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41011, AT&T Run Data: Run Time: Data Usage Tor: Iten Conn. Data 06/17/2020 18:56:22 Conn. Time (OTC) Originating Number ET Bytes Up Bytos Apn Dn INEI INSI MARL 8579 04/29/20 23:50:12 2:36 7211 8037 nactgonpho no 3587080982063726 310410214827503 APPLE 8580 04/29/20 23:50:13 2:36 8037 6923ruagonpho no 3587080982063726 310410214827503 APPLE 8581 04/29/20 23:52:49 0:33 6023 490Ormagonpho no 3587080982063726 310410214827503 APPLE 8582 04/29/20 23:53:21 2:03 5118 6075natTanpho no 3587080982063726 310410214827503 APPLE 8583 04/29/20 23:53:22 2:04 6075 4830natTanpho no 3587080982063726 310410214827503 APPLE 8584 04/29/20 23:55:26 6:58 7433 4965ruagonpho no 3587080982063726 310410214827503 APPLE 8585 04/30/20 00:02:23 54:14 11158 26233ruagonpho no 3587080982063726 310410214827503 APPLE 8586 04/30/20 00:02:24 54:14 26233 10774ruagonpho no 3587080982063726 310410214827503 APPLE 8587 04/30/20 00:33:46 60:00 8496 3160 imp 3587080982063726 310410214827503 APPLE 8588 04/30/20 00:56:38 49:47 12569 10638ructspanpho no 3587080982063726 310410214827503 APPLE 8589 04/30/20 01:33:46 60:00 14252 5876 imp 3587080982063726 310410214827503 APPLE 8590 04/30/20 01:46:24 2:15 5222 6075ruagonpho no 3587080982063726 310410214827503 APPLE 8591 04/30/20 01:46:25 2:15 6075 4934natTanpho no 3587080982063726 310410214827503 APPLE 8592 04/30/20 01:48:40 60:00 7305 6056ruagonpho no 3587080982063726 310410214827503 APPLE 8593 04/30/20 02:33:46 47:32 3424 1340 imp 3587080982063726 310410214827503 APPLE 8594 04/30/20 02:48:40 3:50 0 315ructgonpho no 3587080982063726 310410214827503 APPLE 8595 04/30/20 02:52:29 2:09 5218 6021 nxtgonpho no 3587080982063726 310410214827503 APPLE 8596 04/30/20 02:52:30 2:09 6021 4930nattranpho no 3587080982063726 310410214827503 APPLE 8597 04/30/20 02:54:39 12:16 7606 5122ruagonpho no 3587080982063726 310410214827503 APPLE 8598 04/30/20 03:06:54 14:30 7293 11701ructspanpho no 3587080982063726 310410214827503 APPLE 8599 04/30/20 03:06:55 14:30 11701 7005ructspanpho no 3587080982063726 310410214827503 APPLE 8600 04/30/20 03:15:57 60:00 12077 7785 imp -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 354 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00002998 NeTntikE not for general distribution. EF-EAJVII7074 EFTA01251598 MOBILITY The information contained heraleeNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in ......, `•-•°"" a0AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 18:56:23 Ito. Conn. Conn. Date Time (Inc) originating Number ET Bytes Bytoa Apn Up Dn IKI INSI MARL MODEL 8601 04/30/20 03:21:25 2:04 6023 4902 nxtgonpho no 3587080982063726 310410214827503 8602 04/30/20 03:23:28 2:04 5117 6023 nxtgonpho no 3587080982063726 310410214827503 8603 04/30/20 03:23:30 2:03 6023 4829 nxtgonpho no 3587080982063726 310410214827503 8604 04/30/20 03:25:33 50:04 6959 5961 nxtgonpho no 3587080982063726 310410214827503 8605 04/30/20 04:15:36 2:10 5116 6059 nxtgonpho no 3587080982063726 310410214827503 8606 04/30/20 04:15:37 2:10 6059 4828 nxtgonpho no 3587080982063726 310410214827503 8607 04/30/20 04:15:57 60:00 12152 4516 ims -1 310410214827503 8608 04/30/20 04:17:47 40:48 8421 5961 nxtgonpho no 3587080982063726 310410214827503 8609 04/30/20 04:58:35 457:36 100637 117159 nxtgonpho no 3587080982063726 310410214827503 8610 04/30/20 04:58:36 60:00 56732 45729 nxtgonpho no 3587080982063726 310410214827503 8611 04/30/20 05:15:57 60:00 7188 2804 ims -1 310410214827503 8612 04/30/20 05:58:36 60:00 6023 6507 nxtgonpho no 3587080982063726 310410214827503 8613 04/30/20 06:09:27 60:00 18029 9207 ims -1 310410214827503 8614 04/30/20 06:15:57 60:00 0 0 ims -1 310410214827503 8615 04/30/20 06:58:36 60:00 12895 13053 nxtgonpho no 3587080982063726 310410214827503 8616 04/30/20 07:09:27 60:00 8388 3036 ims -1 310410214827503 8617 04/30/20 07:15:57 60:00 0 0 ims -1 310410214827503 8618 04/30/20 07:58:36 60:00 1096 1685 nxtgonpho no 3587080982063726 310410214827503 8619 04/30/20 08:09:27 60:00 6924 2680 isms -1 310410214827503 8620 04/30/20 08:15:57 60:00 0 0 isms -1 310410214827503 8621 04/30/20 08:58:36 60:00 225 210 nxtgonpho no 3587080982063726 310410214827503 8622 04/30/20 09:09:27 60:00 6924 2788 isms -1 310410214827503 8623 04/30/20 09:15:57 51:47 0 0 isms -1 310410214827503 8624 04/30/20 09:58:36 60:00 13430 11118 nxtgonpho no 3587080982063726 310410214827503 8625 04/30/20 10:09:27 60:00 11904 4408 ims -1 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHONZ8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 355 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. $DNY_GM_00002999 NeTniliAL not for general distribution. EFTA_00I 17075 EFTA01251599 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 411111, ....,,,si •--ss""AT&T Run Oato: Run Time: Data Osage Tor: 06/17/2020 Item Conn. Conn. Date Time (OTC) 8626 04/30/20 10:58:36 8627 04/30/20 11:09:27 8628 04/30/20 11:58:36 8629 04/30/20 12:09:27 8630 04/30/20 12:21:46 8631 04/30/20 12:36:12 8632 04/30/20 12:45:02 8633 04/30/20 12:45:03 8634 04/30/20 12:53:30 8635 04/30/20 13:03:38 8636 04/30/20 13:03:39 8637 04/30/20 13:09:27 8638 04/30/20 13:21:46 8639 04/30/20 13:31:01 8640 04/30/20 13:55:05 8641 04/30/20 13:55:06 8642 04/30/20 14:09:27 8643 04/30/20 14:21:46 8644 04/30/20 14:37:35 8645 04/30/20 14:37:36 8646 04/30/20 14:41:32 8647 04/30/20 14:41:34 8648 04/30/20 14:47:14 8649 04/30/20 14:47:15 The information contained heraleeNe Originating Number ET Bytes Byte. Apn INII IMBI NAZI OP Dn 60:00 8085 8384 nxtgenpho no 3587080982063726 310410214827503 APPLE 60:00 12228 4752 imo -1 310410214827503 37:36 18673 31685 nxtgonpho no 3587080982063726 310410214827503 APPLE 60:00 0 0 ins -1 310410214827503 60:00 16705 9046 ins -1 310410214827503 8:51 6482 5132 nxtgonpho no 3587080982063726 310410214827503 APPLE 8:27 5117 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 8:27 6107 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE 10:09 1247 1833 nxtgonpho no 3587080982063726 310410214827503 APPLE 27:22 5746 6645 nxtgonpho no 3587080982063726 310410214827503 APPLE 27:22 6645 5458 nxtgonpho no 3587080982063726 310410214827503 APPLE 60:00 0 0 imp -1 310410214827503 60:00 8604 2928 imp -1 310410214827503 24:04 7875 5332 nxtgonpho no 3587080982063726 310410214827503 APPLE 42:29 14952 17362 nxtgonpho no 3587080982063726 310410214827503 APPLE 42:29 17362 14568 nxtgonpho no 3587080982063726 310410214827503 APPLE 60:00 0 0 ins -1 310410214827503 60:00 10176 3160 ins -1 310410214827503 3:57 5218 6105 nxtgonpho no 3587080982063726 310410214827503 APPLE 3:57 6105 4930 nxtgonpho no 3587080982063726 310410214827503 APPLE 5:41 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 5:40 '6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE 25:25 5219 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 25:25 6055 6716 nxtgonpho 3587080982063726 310410214827503 APPLE no MOLL IPHONZ8 IPHOME8 IPHOME8 !PHONES !PHONES 1PROME8 !PHONES !PHONES 1PROME8 !PHONES 1PRONE8 1PROME8 1PROME8 1PROME8 1PROME8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 356 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003000 PsiTi thE not for general distribution. EFTA_00I 17076 EFTA01251600 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr""a ade AT&T Run Date: Run Time: Data Usage For: Item Conn. Dote 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn IBEX INSI MARL NICOLL 8650 04/30/20 15:09:27 48:43 0 0 les -1 310410214827503 8651 04/30/20 15:12:40 4:55 6122 5805 mmtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 8652 04/30/20 15:17:34 2:32 5222 6055 mmtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 8653 04/30/20 15:17:35 2:32 6055 4934mmtgonpho no 3587080982063726 310410214827503 APPLE IPMONE8 8654 04/30/20 15:20:06 20:00 6921 10297rumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8655 04/30/20 15:20:07 25:33 10297 6633rumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8656 04/30/20 15:21:46 60:00 13136 3796 ins -1 310410214827503 8657 04/30/20 15:45:40 17:03 12587 13399rumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8658 04/30/20 16:02:42 2:10 5181 6107rumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8659 04/30/20 16:02:43 2:10 6107 4893rumgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 8660 04/30/20 16:04:53 1:09 0 Orumgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 8661 04/30/20 16:06:01 2:29 5217 6105rumgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 8662 04/30/20 16:06:02 2:29 6105 4929rumgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 8663 04/30/20 16:08:30 6:11 192 Orumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8664 04/30/20 16:08:31 6:10 5221 6107rumgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 8665 04/30/20 16:08:32 6:10 0 Orumgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 8666 04/30/20 16:08:32 6:10 6107 4933rumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8667 04/30/20 16:14:42 0:40 0 Orumgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8668 04/30/20 16:15:22 2:21 4609 5823mmtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 8669 04/30/20 16:15:23 2:21 5823 4321 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 8670 04/30/20 16:17:44 1:06 48 Orumgonpho no 3587080982063726 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 357 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003001 Ns tit not for general distribution. EF-EA_00117077 EFTA01251601 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Time: Data Osage for: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number LT Bytes UP Bytes Apn On INII INS I MAfl 8671 04/30/20 16:18:49 8:57 10354 6921 nxtgonpho no 3587080982063726 310410214827503 APPLE 8672 04/30/20 16:18:50 8:57 6921 10066 nxtgonpho no 3587080982063726 310410214827503 APPLE 8673 04/30/20 16:21:46 60:00 15528 5892 imp -1 310410214827503 8674 04/30/20 16:27:47 1:34 7522 5043 nxtgonpho no 3587080982063726 310410214827503 APPLE 8675 04/30/20 16:29:20 2:04 5217 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE 8676 04/30/20 16:29:22 2:03 6053 4929 nxtgonpho no 3587080982063726 310410214827503 APPLE 8677 04/30/20 16:31:25 5:52 6268 5026 nxtgonpho no 3587080982063726 310410214827503 APPLE 8678 04/30/20 16:37:16 2:19 5112 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE 8679 04/30/20 16:37:17 2:19 6053 4824 nxtgonpho no 3587080982063726 310410214827503 APPLE 8680 04/30/20 16:39:35 6:28 5117 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 8681 04/30/20 16:39:36 6:28 6055 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE 8682 04/30/20 16:46:04 18:53 14215 10250 nxtgonpho no 3587080982063726 310410214827503 APPLE 8683 04/30/20 16:46:05 18:53 10250 13927 nxtgonpho no 3587080982063726 310410214827503 APPLE 8684 04/30/20 17:04:58 60:00 11239 6359 nxtgonpho no 3587080982063726 310410214827503 APPLE 8685 04/30/20 17:21:46 60:00 9052 3284 ins -1 310410214827503 8686 04/30/20 18:04:58 50:10 924 840 nxtgonpho no 3587080982063726 310410214827503 APPLE 8687 04/30/20 18:21:46 60:00 7048 2912 ins -1 310410214827503 8688 04/30/20 18:55:07 2:04 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 8689 04/30/20 18:55:08 2:04 6107 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 8690 04/30/20 18:57:12 36:35 7875 5332 nxtgonpho no 3587080982063726 310410214827503 APPLE 8691 04/30/20 19:21:46 60:00 21328 11708 ins -1 310410214827503 8692 04/30/20 19:33:47 17:53 11444 10611 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL IPHONEB IPHONEB !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONEB !PHONES !PHONES IPHONEB /PHONES 110H014Z8 /PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003002 NeTniliAL not for general distribution. Page 358 EFTA_00I 17078 EFTA01251602 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in tr""a as,0 AT&T Run Data: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Data Time (OTC) Originating Number ET Bytes Bytom Apn Up Dn IND I INSI MUD; MODEL 8693 04/30/20 19:33:47 17:54 10611 11156 nxtgenpho no 3587080982063726 310410214827503 8694 04/30/20 19:51:41 9:22 7593 5280ruftgenpho no 3587080982063726 310410214827503 8695 04/30/20 20:01:03 20:51 23752 19077ruftgenpho no 3587080982063726 310410214827503 8696 04/30/20 20:01:04 20:51 19077 23272ruftgenpho no 3587080982063726 310410214827503 8697 04/30/20 20:13:47 0:31 5348 27765 ins -1 310410214827503 8698 04/30/20 20:21:46 16:23 4980 1588 ins -1 310410214827503 8699 04/30/20 20:21:56 1:45 119 197ruftgenpho no 3587080982063726 310410214827503 8700 04/30/20 20:23:39 36:44 38816 45759ruftgenpho no 3587080982063726 310410214827503 8701 04/30/20 20:23:41 36:43 45759 45998ruftgenpho no 3587080982063726 310410214827503 8702 04/30/20 20:41:03 22:10 18426 12711 ins -1 310410214827503 8703 04/30/20 21:00:24 0:38 6208 4965 nxtgenpho no 3587080982063726 310410214827503 8704 04/30/20 21:01:01 7:28 5286 7465ruftgenpho no 3587080982063726 310410214827503 8705 04/30/20 21:01:03 7:28 7465 4998ruftgenpho no 3587080982063726 310410214827503 8706 04/30/20 21:03:23 60:00 39179 25972 ins -1 310410214827503 8707 04/30/20 21:08:30 12:11 24451 41082ruftgenpho no 3587080982063726 310410214827503 8708 04/30/20 21:08:31 12:11 41082 24163ruftgenpho no 3587080982063726 310410214827503 8709 04/30/20 21:11:20 0:29 1456 13339 ins -1 310410214827503 8710 04/30/20 21:20:41 23:43 19197 32236ruftgenpho no 3587080982063726 310410214827503 8711 04/30/20 21:20:42 23:43 32236 18717ruftgenpho no 3587080982063726 310410214827503 8712 04/30/20 21:26:42 28:14 5044085 3644470 ins -1 310410214827503 8713 04/30/20 21:44:25 29:09 192 Oruftgenpho no 3587080982063726 310410214827503 8714 04/30/20 21:44:26 29:08 30856 37574ruftgenpho no 3587080982063726 310410214827503 8715 04/30/20 21:44:26 29:09 0 Oruftgenpho 3587080982063726 310410214827503 no APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE IPHONE8 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 359 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003003 PsiTnfAck not for general distribution. EFTA_00I 17079 EFTA01251603 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. • AT&T Run Dato: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Timo (UTC) Originating Rumbas ET Bytes Up Bytoa Apn On Der IMBI MART 8716 04/30/20 21:44:27 29:08 37574 30472 nxtgonpho no 3587080982063726 310410214827503 APPLE 8717 04/30/20 22:03:23 60:00 8496 3052 imo -1 310410214827503 8718 04/30/20 22:13:35 8:53 7590 5270 nxtgonpho no 3587080982063726 310410214827503 APPLE 8719 04/30/20 22:22:28 2:09 5113 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE 8720 04/30/20 22:22:29 2:09 6053 4825 nxtgonpho no 3587080982063726 310410214827503 APPLE 8721 04/30/20 22:24:38 5:25 7670 5777 nxtgonpho no 3587080982063726 310410214827503 APPLE 8722 04/30/20 22:30:02 34:33 7639 7278 nxtgonpho no 3587080982063726 310410214827503 APPLE 8723 04/30/20 22:30:03 34:33 7278 7351 nxtgonpho no 3587080982063726 310410214827503 APPLE 8724 04/30/20 23:03:23 60:00 19632 10580 imp -1 310410214827503 8725 04/30/20 23:04:35 90:47 34969 51308 nxtgonpho no 3587080982063726 310410214827503 APPLE 8726 04/30/20 23:04:36 60:00 50132 33877 nxtgonpho no 3587080982063726 310410214827503 APPLE 8727 04/30/20 23:47:34 5:14 1182018 675854 imp -1 310410214827503 8728 05/01/20 00:03:23 60:00 20448 12472 imp -1 310410214827503 8729 05/01/20 00:04:36 30:47 1176 804 nxtgonpho no 3587080982063726 310410214827503 APPLE 8730 05/01/20 00:19:24 0:28 3472 11505 imp -1 310410214827503 8731 05/01/20 00:35:23 2:05 11855 13446 nxtgonpho no 3587080982063726 310410214827503 APPLE 8732 05/01/20 00:35:24 2:05 13446 11471 nxtgonpho no 3587080982063726 310410214827503 APPLE 8733 05/01/20 00:37:29 1:06 7526 5108 nxtgonpho no 3587080982063726 310410214827503 APPLE 8734 05/01/20 00:38:35 2:04 5217 6105 nxtgonpho no 3587080982063726 310410214827503 APPLE 8735 05/01/20 00:38:36 2:04 6105 4929 nxtgonpho no 3587080982063726 310410214827503 APPLE 8736 05/01/20 00:40:40 6:08 12565 5600 nxtgonpho no 3587080982063726 310410214827503 APPLE 8737 05/01/20 00:46:48 31:09 14597 7609 nxtgonpho no 3587080982063726 310410214827503 APPLE 8738 05/01/20 00:46:49 31:09 7609 14309 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL ITHONE8 ITHONE8 ITHONE8 ITHONE8 ITHONE8 ITHONE8 ITHONE8 ITHONE8 ITHONE8 ITHONE8 ITHONE8 ITHONE8 !PHONES !PHONES ITHONE8 ITHONE8 ITHONE8 ITHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 360 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003004 NeTnilikk not for general distribution. EFTA_00I 17080 EFTA01251604 MOBILITY The information contained here(F3411:›Nff::ti i 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run pato: Run Time: Data Osage for: Item Conn. Date 06/17/2020 18:56:23 • Conn. Originating LT Time Number (OTC) Bytes Op Byte. Apn Dn IKEI INSI 8739 05/01/20 01:03:23 60:00 29728 15244 ims -1 310410214827503 8740 05/01/20 01:17:58 37:16 13485 25952 nxtgonpho no 3587080982063726 310410214827503 8741 05/01/20 01:17:58 37:16 192 0 nxtgonpho no 3587080982063726 310410214827503 8742 05/01/20 01:17:59 37:16 0 Onxtgonpho no 3587080982063726 310410214827503 8743 05/01/20 01:17:59 37:16 25952 13197 nxtgonpho no 3587080982063726 310410214827503 8744 05/01/20 01:27:21 22:28 4535360 3427868 ins -1 310410214827503 8745 05/01/20 01:55:15 0:47 6053 4898 nxtgonpho no 3587080982063726 310410214827503 8746 05/01/20 01:56:01 92:50 6770501 6650759 nxtgonpho no 3587080982063726 310410214827503 8747 05/01/20 01:56:02 60:00 4709751 4757090 nxtgonpho no 3587080982063726 310410214827503 8748 05/01/20 02:03:23 60:00 8388 2820 ins -1 310410214827503 8749 05/01/20 02:56:02 32:50 1941008 2015811 nxtgonpho no 3587080982063726 310410214827503 8750 05/01/20 03:03:23 60:00 8388 2820 ins -1 310410214827503 8751 05/01/20 03:28:52 1:47 11189 9418 nxtgonpho no 3587080982063726 310410214827503 8752 05/01/20 03:30:38 1:34 5587 8688 nxtgonpho no 3587080982063726 310410214827503 8753 05/01/20 03:30:39 1:34 8688 5299 nxtgonpho no 3587080982063726 310410214827503 8754 05/01/20 03:32:13 0:06 0 Oruftgonpho no 3587080982063726 310410214827503 8755 05/01/20 03:34:16 0:42 1130 4551 nxtgonpho no 3587080982063726 310410214827503 8756 05/01/20 03:34:57 9:21 5604 6331 nxtgonpho no 3587080982063726 310410214827503 8757 05/01/20 03:34:58 9:21 6331 5316 nxtgonpho no 3587080982063726 310410214827503 8758 05/01/20 03:44:19 4:21 2261 5958 nxtgonpho no 3587080982063726 310410214827503 8759 05/01/20 03:48:39 2:04 4672 6625 nxtgonpho no 3587080982063726 310410214827503 8760 05/01/20 03:48:40 2:05 6625 4384 nxtgonpho no 3587080982063726 310410214827503 MARL MODEL APPLE IPHONZ8 APPLE IPHONZ8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 361 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003005 NaTtAdti not for general distribution. EF-EA_00117081 EFTA01251605 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Bytoa Apn Dn INC' IMISI MARL 8761 05/01/20 03:50:45 1:47 7465 5070 nxtgonpho no 3587080982063726 310410214827503 APPLE 8762 05/01/20 03:52:31 66:48 54129 259765 nxtgonpho no 3587080982063726 310410214827503 APPLE 8763 05/01/20 03:52:32 60:00 259765 54813 nxtgonpho no 3587080982063726 310410214827503 APPLE 8764 05/01/20 04:03:23 60:00 8496 2820 imp -1 310410214827503 8765 05/01/20 04:52:32 6:48 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8766 05/01/20 04:59:20 14:07 7226 5437 nxtgonpho no 3587080982063726 310410214827503 APPLE 8767 05/01/20 05:03:23 23:50 9728 6456 imp -1 310410214827503 8768 05/01/20 05:13:26 142:26 5954 9382 nxtgonpho no 3587080982063726 310410214827503 APPLE 8769 05/01/20 05:13:27 60:00 9382 7241 nxtgonpho no 3587080982063726 310410214827503 APPLE 8770 05/01/20 06:13:27 60:00 0 92 nxtgonpho no 3587080982063726 310410214827503 APPLE 8771 05/01/20 07:13:27 22:26 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8772 05/01/20 12:46:09 2:58 452896 99158 nxtgonpho no 3587080982063726 310410214827503 APPLE 8773 05/01/20 12:46:11 2:57 99158 452608 nxtgonpho no 3587080982063726 310410214827503 APPLE 8774 05/01/20 12:46:12 2:55 6438 7400 imp 3587080982063726 310410214827503 APPLE 8775 05/01/20 12:46:13 2:55 7400 6086 imp 3587080982063726 310410214827503 APPLE 8776 05/01/20 12:49:08 169:59 151257 92000 nxtgonpho no 3587080982063726 310410214827503 APPLE 8777 05/01/20 12:49:09 169:58 6226 6776 imp 3587080982063726 310410214827503 APPLE 8778 05/01/20 12:49:09 60:00 61736 124963 nxtgonpho no 3587080982063726 310410214827503 APPLE 8779 05/01/20 12:49:10 60:00 6668 6070 ins 3587080982063726 310410214827503 APPLE 8780 05/01/20 12:51:28 60:00 19793 9764 ims -1 310410214827503 8781 05/01/20 13:49:09 60:00 22784 21696 nxtgenpho no 3587080982063726 310410214827503 APPLE 8782 05/01/20 13:49:10 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 8783 05/01/20 13:51:28 60:00 7188 2804 ims -1 310410214827503 8784 05/01/20 14:49:09 60:00 7480 8661 nxtgonpho no 3587080982063726 310410214827503 APPLE 8785 05/01/20 14:49:10 60:00 0 0 ims 3587080982063726 310410214827503 APPLE MOLL IPHONEB IPHONEB !PROMS !PROMS !PROMS !PROMS !PROMS IPHONEB IPHONEB IPHONEB IPHONEB !PROMS !PROMS !PROMS !PROMS !PROMS IPHONEB DRONES !PROMS !PROMS !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 362 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003006 NeTtAti not for general distribution. EFTA 00!17082 EFTA01251606 MOBILITY The information contained herreop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 1S:54:23 Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn Dn IKE I INSI MAKE 8786 05/01/20 14:51:28 60:00 8388 2804 Imo -1 310410214827503 8787 05/01/20 15:39:07 184:19 12350 12924 nxtgonpho no 3587080982063726 310410214827503 APPLE 8788 05/01/20 15:49:09 60:00 0 92ruftgonpho no 3587080982063726 310410214827503 APPLE 8789 05/01/20 15:49:10 60:00 0 0 ims 3587080982063726 310410214827503 APPLE 8790 05/01/20 15:51:28 60:00 13600 4532 ims -1 310410214827503 8791 05/01/20 16:49:09 60:00 12636 11486ruftgonpho no 3587080982063726 310410214827503 APPLE 8792 05/01/20 16:49:10 4:13 0 0 imp 3587080982063726 310410214827503 APPLE 8793 05/01/20 16:51:28 60:00 10596 4504 imp -1 310410214827503 8794 05/01/20 17:49:09 54:18 288 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8795 05/01/20 17:51:28 60:00 0 0 imp -1 310410214827503 8796 05/01/20 18:06:57 44:20 18833 12827 imp -1 310410214827503 8797 05/01/20 18:43:27 7:59 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8798 05/01/20 18:51:25 8:39 288 48ruftgonpho no 3587080982063726 310410214827503 APPLE 8799 05/01/20 18:51:27 8:37 6476 7474 imp 3587080982063726 310410214827503 APPLE 8800 05/01/20 18:51:27 8:38 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8801 05/01/20 18:51:28 0:17 0 0 imp -1 310410214827503 8802 05/01/20 18:51:28 8:37 7406 6212 imp 3587080982063726 310410214827503 APPLE 8803 05/01/20 18:51:45 60:00 15697 10074 imp -1 310410214827503 8804 05/01/20 19:00:05 59:47 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8805 05/01/20 19:51:45 60:00 10036 3284 ims -1 310410214827503 8806 05/01/20 19:59:51 9:28 480 144ruftgonpho no 3587080982063726 310410214827503 APPLE 8807 05/01/20 19:59:52 9:28 144 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8808 05/01/20 20:09:21 2:15 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8809 05/01/20 20:11:35 8:18 288 48ruftgonpho no 3587080982063726 310410214827503 APPLE 8810 05/01/20 20:11:36 8:18 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 8811 05/01/20 20:19:54 0:06 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PRONGS !PRONGS !PHONES !PRONGS !PHONES !PHONES !PHONES !PRONGS !PRONGS IPROMG8 !PHONES !PHONES !PRONGS !PHONES IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 363 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003007 NTifikE not for general distribution. EFTA_00I 17083 EFTA01251607 MOBILITY The information contained hereleeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern (ITC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 1...„ ‘...6 ..1#0/ AT&T Run Date: Run Timo: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time Originating TT Rumbas Bytes UP Bytes, Dn Apn IMBI (UTC) 8812 05/01/20 20:20:44 0:06 0 Onxtgonpho no 3587080982063726 310410214827503 8813 05/01/20 20:22:52 2:25 288 48 nxtgonpho no 3587080982063726 310410214827503 8814 05/01/20 20:22:54 2:24 48 Onxtgonpho no 3587080982063726 310410214827503 8815 05/01/20 20:25:17 56:47 19296 29244 nxtgonpho no 3587080982063726 310410214827503 8816 05/01/20 20:25:18 56:48 29244 18720 nxtgonpho no 3587080982063726 310410214827503 8817 05/01/20 20:51:45 60:00 22128 13236 imp -1 310410214827503 8818 05/01/20 20:59:04 0:28 4057 12437 imp -1 310410214827503 8819 05/01/20 21:22:06 59:08 48 0 nxtgonpho no 3587080982063726 310410214827503 8820 05/01/20 21:51:45 60:00 10144 3392 imo -1 310410214827503 8821 05/01/20 22:21:14 10:57 288 48 nxtgonpho no 3587080982063726 310410214827503 8822 05/01/20 22:21:15 10:57 48 0 nxtgonpho no 3587080982063726 310410214827503 8823 05/01/20 22:32:12 28:11 288 48 nxtgonpho no 3587080982063726 310410214827503 8824 05/01/20 22:32:13 28:11 48 0 nxtgonpho no 3587080982063726 310410214827503 8825 05/01/20 22:51:45 60:00 15792 6124 imo -1 310410214827503 8826 05/01/20 23:00:24 7:35 48 0 nxtgonpho no 3587080982063726 310410214827503 8827 05/01/20 23:07:58 2:04 288 48 nxtgonpho no 3587080982063726 310410214827503 8828 05/01/20 23:08:00 2:03 48 0 nxtgonpho no 3587080982063726 310410214827503 8829 05/01/20 23:10:03 60:00 48 0 nxtgonpho no 3587080982063726 310410214827503 8830 05/01/20 23:51:45 60:00 8604 2928 imo -1 310410214827503 8831 05/02/20 00:10:03 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 8832 05/02/20 00:51:45 60:00 13568 4748 imo -1 310410214827503 8833 05/02/20 01:10:03 60:00 0 0 nxtgonpho no 3587080982063726 310410214827503 8834 05/02/20 01:51:45 60:00 6956 2788 iris -1 310410214827503 8835 05/02/20 02:10:03 37:49 0 0 nxtgonpho no 3587080982063726 310410214827503 NICOLL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003008 NTniliAL not for general distribution. Page 364 EF-EA_00117084 EFTA01251608 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tr_ `a.rss d AT&T Run Data: Run Tame: Data Osage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number op (OTC) Bytes Byte. Apn Dn I14II IMBI MARL MODEL 8836 05/02/20 02:47:51 29:49 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8837 05/02/20 02:47:52 29:49 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8838 05/02/20 02:51:45 60:00 6956 2680 imp -1 310410214827503 8839 05/02/20 03:17:41 1:05 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8840 05/02/20 03:18:45 1:50 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8841 05/02/20 03:18:47 1:49 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 8842 05/02/20 03:20:36 2:45 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 8843 05/02/20 03:23:20 2:34 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8844 05/02/20 03:23:21 2:34 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8845 05/02/20 03:25:55 0:52 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8846 05/02/20 03:26:46 10:00 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8847 05/02/20 03:26:47 27:31 96 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8848 05/02/20 03:36:46 17:31 96 48 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 8849 05/02/20 03:51:45 60:00 14788 4748 imp -1 310410214827503 8850 05/02/20 03:54:18 1:58 96 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 8851 05/02/20 03:56:15 6:09 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 8852 05/02/20 03:56:16 6:10 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8853 05/02/20 04:02:26 0:58 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8854 05/02/20 04:03:23 10:02 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8855 05/02/20 04:03:24 10:02 48 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 8856 05/02/20 04:13:26 1:56 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003009 NeTniliAL not for general distribution. Page 365 EF-EA_00117085 EFTA01251609 The information contained heraleop+Fti 8857 05/02/20 04:13:27 1:56 48 8858 05/02/20 04:15:23 2:58 48 8859 05/02/20 04:18:20 5:43 288 8860 05/02/20 04:18:22 5:42 48 8861 05/02/20 04:24:04 0:05 0 8862 05/02/20 04:24:54 1:08 48 8863 05/02/20 04:26:02 0:47 48 8864 05/02/20 04:26:48 2:04 288 8865 05/02/20 04:26:50 2:03 48 8866 05/02/20 04:28:53 1:05 0 8867 05/02/20 04:29:58 122:06 768 8868 05/02/20 04:29:59 60:00 144 8869 05/02/20 04:51:45 60:00 17852 8870 05/02/20 05:29:59 60:00 144 8871 05/02/20 05:51:45 1:31 0 8872 05/02/20 06:25:09 6:55 7246 8873 05/02/20 06:25:10 6:55 8210 8874 05/02/20 06:29:59 2:06 0 8875 05/02/20 06:31:57 60:00 19711 8876 05/02/20 06:32:05 52:11 48 8877 05/02/20 07:24:15 2:04 288 8878 05/02/20 07:24:16 2:04 48 8879 05/02/20 07:26:20 60:00 48 MOBILITY 'MINI 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm `-'s,0 AT&T Time Zone. AT&T's records ere stored and provided in Run Date: Run Time: Data Osage Tor: 06/17/2020 18:56:23 Item Conn. Conn. Originating ET Bytes Bytes Apn INLI IMBI MARL MOLL Date Time Number Up Dn (UTC) 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 48 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 48 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 288 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 5172 ims -1 310410214827503 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 ims -1 310410214827503 8278 ims 3587080982063726 310410214827503 APPLE !PHONES 6982 ims 3587080982063726 310410214827503 APPLE !PHONES 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 11048 ims -1 310410214827503 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 48 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 0 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 366 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003010 PsisTiliAL not for general distribution. EF-EAJVII7086 EFTA01251610 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111. ....••=se0 AT&T Run Data: Run Tina: Data Osage Tor: Itea Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn IKE I INSI 8880 05/02/20 07:31:57 60:00 8480 3020 imo -1 310410214827503 8881 05/02/20 08:26:20 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 8882 05/02/20 08:31:57 60:00 6940 2648 imo -1 310410214827503 8883 05/02/20 09:26:20 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 8884 05/02/20 09:31:57 60:00 7048 2772 imo -1 310410214827503 8885 05/02/20 10:26:20 60:00 0 0 nxtgenpho no 3587080982063726 310410214827503 8886 05/02/20 10:31:57 60:00 16652 6076 imo -1 310410214827503 8887 05/02/20 11:26:20 2:28 0 0 nxtgenpho no 3587080982063726 310410214827503 8888 05/02/20 11:28:50 57:24 7511 5065 nxtgenpho no 3587080982063726 310410214827503 8889 05/02/20 11:31:57 60:00 8496 2896 imo -1 310410214827503 8890 05/02/20 12:26:13 8:23 5164 6052 nxtgenpho no 3587080982063726 310410214827503 8891 05/02/20 12:26:15 8:22 6052 4876 nxtgenpho no 3587080982063726 310410214827503 8892 05/02/20 12:31:57 60:00 8388 2896 imo -1 310410214827503 8893 05/02/20 12:34:37 30:36 7463 5647 nxtgenpho no 3587080982063726 310410214827503 8894 05/02/20 13:05:12 2:10 5979 9105 nxtgenpho no 3587080982063726 310410214827503 8895 05/02/20 13:05:13 2:10 9105 5691 nxtgenpho no 3587080982063726 310410214827503 8896 05/02/20 13:07:23 7:44 7462 4955 nxtgenpho no 3587080982063726 310410214827503 8897 05/02/20 13:15:06 30:55 24530 15373 nxtgenpho no 3587080982063726 310410214827503 8898 05/02/20 13:15:07 30:55 15373 24242 nxtgenpho no 3587080982063726 310410214827503 8899 05/02/20 13:31:57 60:00 6848 2756 imo -1 310410214827503 8900 05/02/20 13:46:02 0:36 6055 4902 nxtgenpho no 3587080982063726 310410214827503 8901 05/02/20 13:46:37 7:39 7811 9789 nxtgenpho no 3587080982063726 310410214827503 8902 05/02/20 13:46:38 7:39 9789 7523 nxtgenpho no 3587080982063726 310410214827503 8903 05/02/20 13:54:17 0:54 6845 5237 nxtgenpho no 3587080982063726 310410214827503 NICOLL APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONZ8 APPLE IPHONE8 APPLE IPHONZ8 APPLE IPHONE8 APPLE IPMONEB APPLE IPMONEB APPLE IPHONE8 APPLE !PHONES APPLE IPMONEB APPLE IPHONE8 APPLE IPHONZ8 APPLE IPHONE8 APPLE IPMONEB APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00003011 NeTniliAL not for general distribution. Page 367 EFTA_00I 17087 EFTA01251611 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number CT Bytes UP Bytom Apn Dn INZI IMSI MAKE 8904 05/02/20 13:55:10 8:29 45144 61190 nxtgenpho no 3587080982063726 310410214827503 APPLE 8905 05/02/20 13:55:11 8:29 61190 44856ruftgenpho no 3587080982063726 310410214827503 APPLE 8906 05/02/20 14:03:40 1:07 6873 4966ruftgenpho no 3587080982063726 310410214827503 APPLE 8907 05/02/20 14:04:46 10:28 10797 20363ruftgenpho no 3587080982063726 310410214827503 APPLE 8908 05/02/20 14:04:47 10:28 20363 10413ruftgenpho no 3587080982063726 310410214827503 APPLE 8909 05/02/20 14:15:15 31:30 19727 19412 nxtgenpho no 3587080982063726 310410214827503 APPLE 8910 05/02/20 14:15:15 31:31 19412 20288 nxtgenpho no 3587080982063726 310410214827503 APPLE 8911 05/02/20 14:31:57 60:00 10380 4080 imo -1 310410214827503 8912 05/02/20 14:46:45 17:24 5690 6469 nxtgenpho no 3587080982063726 310410214827503 APPLE 8913 05/02/20 14:46:46 17:24 6469 5402 nxtgenpho no 3587080982063726 310410214827503 APPLE 8914 05/02/20 15:04:10 10:46 5642 6408ruftgenpho no 3587080982063726 310410214827503 APPLE 8915 05/02/20 15:04:11 10:46 6408 5354 nxtgenpho no 3587080982063726 310410214827503 APPLE 8916 05/02/20 15:14:57 1:10 8826 5435 nxtgenpho no 3587080982063726 310410214827503 APPLE 8917 05/02/20 15:16:07 13:33 12634 16458ruftgenpho no 3587080982063726 310410214827503 APPLE 8918 05/02/20 15:16:07 13:34 16458 13186ruftgenpho no 3587080982063726 310410214827503 APPLE 8919 05/02/20 15:29:41 0:37 6937 5174 nxtgenpho no 3587080982063726 310410214827503 APPLE 8920 05/02/20 15:30:18 10:00 11949 13263ruftgenpho no 3587080982063726 310410214827503 APPLE 8921 05/02/20 15:30:19 57:33 65096 46501ruftgenpho no 3587080982063726 310410214827503 APPLE 8922 05/02/20 15:31:57 60:00 13460 4860 imo -1 310410214827503 8923 05/02/20 15:40:18 47:33 33631 51833ruftgenpho no 3587080982063726 310410214827503 APPLE 8924 05/02/20 16:27:52 5:24 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 8925 05/02/20 16:31:57 60:00 7064 2756 imo -1 310410214827503 MODEL IPHONEB IPHONEB !PHONES !PHONES IPROME8 !PHONES !PHONES !PHONES !PHONES IPROME8 !PHONES !PHONES IPROME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 368 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003012 PsisT fikE not for general distribution. EFTA_00I 17088 EFTA01251612 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in 41111, AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes 0P Bytes Apn Dn IMSI teal 8926 05/02/20 16:33:15 4:12 5312 6101 nxtgonpho no 3587080982063726 310410214827503 APPLE 8927 05/02/20 16:33:16 4:12 6101 4928 nxtgonpho no 3587080982063726 310410214827503 APPLE 8928 05/02/20 16:37:27 6:35 5984 6383 nxtgonpho no 3587080982063726 310410214827503 APPLE 8929 05/02/20 16:37:28 6:35 6383 5696 nxtgonpho no 3587080982063726 310410214827503 APPLE 8930 05/02/20 16:44:03 60:00 9930 20336 nxtgonpho no 3587080982063726 310410214827503 APPLE 8931 05/02/20 17:31:57 60:00 10036 3144 imp -1 310410214827503 8932 05/02/20 17:44:03 60:00 10405 9628 nxtgonpho no 3587080982063726 310410214827503 APPLE 8933 05/02/20 18:31:57 60:00 10036 3252 imp -1 310410214827503 8934 05/02/20 18:44:03 60:00 1171 874 nxtgonpho no 3587080982063726 310410214827503 APPLE 8935 05/02/20 19:31:57 60:00 9928 3144 imp -1 310410214827503 8936 05/02/20 19:44:03 60:00 751 735 nxtgonpho no 3587080982063726 310410214827503 APPLE 8937 05/02/20 20:31:57 60:00 15000 4716 imp -1 310410214827503 8938 05/02/20 20:44:03 42:54 15184 13713 nxtgonpho no 3587080982063726 310410214827503 APPLE 8939 05/02/20 21:26:57 15:58 5326 6212 nxtgonpho no 3587080982063726 310410214827503 APPLE 8940 05/02/20 21:26:58 15:58 6212 5038 nxtgonpho no 3587080982063726 310410214827503 APPLE 8941 05/02/20 21:31:57 60:00 12136 4396 imp -1 310410214827503 8942 05/02/20 21:42:56 4:04 7463 5065 nxtgonpho no 3587080982063726 310410214827503 APPLE 8943 05/02/20 21:46:59 2:11 5281 6115 nxtgonpho no 3587080982063726 310410214827503 APPLE 8944 05/02/20 21:47:00 2:11 6115 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE 8945 05/02/20 21:49:11 1:14 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 8946 05/02/20 21:50:25 27:50 5862 6786 nxtgonpho no 3587080982063726 310410214827503 APPLE 8947 05/02/20 21:50:26 27:50 6786 5574 nxtgonpho no 3587080982063726 310410214827503 APPLE 8948 05/02/20 22:18:16 20:45 12004 7372 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES IPRONE8 IPRONE8 !PHONES !PHONES !PHONES IPRONE8 IPRONE8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003013 NTniliAL not for general distribution. Page 369 EF-EA_00117089 EFTA01251613 MOBILITY The information contained heralCoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ....,„# ••-s` a. AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Date Conn. Originating ET Time Number Up (UTC) Bytes 8949 05/02/20 22:18:17 20:45 7372 8950 05/02/20 22:31:57 60:00 8496 8951 05/02/20 22:39:01 33:44 5847 8952 05/02/20 22:39:02 33:45 6643 8953 05/02/20 23:12:46 1:24 7529 8954 05/02/20 23:14:09 2:05 5282 8955 05/02/20 23:14:10 2:05 6167 8956 05/02/20 23:16:15 0:53 0 8957 05/02/20 23:17:07 2:03 5220 8958 05/02/20 23:17:08 2:03 6055 8959 05/02/20 23:19:11 1:23 48 8960 05/02/20 23:20:33 2:04 5390 8961 05/02/20 23:20:34 2:04 7529 8962 05/02/20 23:22:38 0:43 6208 8963 05/02/20 23:23:20 8:23 12303 8964 05/02/20 23:23:21 8:23 10928 8965 05/02/20 23:31:44 21:33 7226 8966 05/02/20 23:31:57 60:00 8496 8967 05/02/20 23:53:16 2:04 5344 8968 05/02/20 23:53:17 2:04 6977 8969 05/02/20 23:55:21 60:00 9134 8970 05/03/20 00:31:57 60:00 17868 Bytom Apn INEI IMSI MART MOTS Dn 11716 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 3004 ims -1 310410214827503 6643 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 5559 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 5070 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 6167 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 4994 nxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no Onxtgonpho 3587080982063726 310410214827503 APPLE IPM0NE8 no 6055 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4932ruftgonpho 3587080982063726 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 7529 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 5102 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no 4965 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 10928ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 12015ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5438ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 3004 ims -1 310410214827503 6977 nxtgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5056ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 11383ruftgonpho 3587080982063726 310410214827503 APPLE IPROME8 no 5088 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 370 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003014 NTniliAL not for general distribution. EF-EA_00117090 EFTA01251614 MOBILITY The information contained heralCONyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41111. AT&T Run Data: Run Tina: Data Osage For: 06/17/2020 Sim Item Conn. Data Conn. Originating ET Time Number Up (OTC) Bytes 8971 05/03/20 00:55:21 48:58 8255 8972 05/03/20 01:31:57 60:00 8604 8973 05/03/20 01:44:18 25:25 10415 8974 05/03/20 01:44:19 25:25 12148 8975 05/03/20 02:09:44 1:23 6171 8976 05/03/20 02:11:07 40:18 6109 8977 05/03/20 02:11:08 40:18 6822 8978 05/03/20 02:31:57 60:00 13568 8979 05/03/20 02:51:26 2:01 6873 8980 05/03/20 02:53:26 6:33 5222 8981 05/03/20 02:53:27 6:33 6055 8982 05/03/20 03:00:00 6:26 7465 8983 05/03/20 03:06:25 7:36 5221 8984 05/03/20 03:06:27 7:36 6055 8985 05/03/20 03:14:03 5:25 8722 8986 05/03/20 03:19:27 20:00 15539 8987 05/03/20 03:19:28 60:00 32418 8988 05/03/20 03:31:57 60:00 8604 8989 05/03/20 03:39:27 552:50 78246 8990 05/03/20 04:19:28 60:00 867 8991 05/03/20 04:31:57 60:00 13336 8992 05/03/20 05:19:28 60:00 16753 8993 05/03/20 05:31:57 60:00 8388 Bytom Apn INEI IMSI NUM MODEL Dn 6904 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 2896 ims -1 310410214827503 12148 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 11501 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 5036ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6822 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 5821 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4752 ins -1 310410214827503 4964 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4934 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4965 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4933ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 5271 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 18285ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 29441ruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 2896 ins -1 310410214827503 81091ruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 945ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4468 ins -1 310410214827503 18433ruagenpho 3587080982063726 310410214827503 APPLE IPHONEB no 2896 was -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 371 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003015 NeTniiiikE not for general distribution. EF-EA_00117091 EFTA01251615 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. ..z,„,0s`' •- s AT&T Run Dato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:56:33 Conn. Originating ET Time Mambos (UTC) Bytes UP Bytes Apn Dn INLI IbISI MAKE NICOLL 8994 05/03/20 06:19:28 60:00 18689 15589 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 8995 05/03/20 06:31:57 60:00 8156 2772 ims -1 310410214827503 8996 05/03/20 07:19:28 60:00 8577 8827nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 8997 05/03/20 07:31:57 60:00 10380 4272 imo -1 310410214827503 8998 05/03/20 08:19:28 60:00 1059 1260nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 8999 05/03/20 08:31:57 60:00 11920 4220 imo -1 310410214827503 9000 05/03/20 09:19:28 60:00 6710 5663nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 9001 05/03/20 09:31:57 60:00 9928 3360 imo -1 310410214827503 9002 05/03/20 10:19:28 60:00 12620 10542nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 9003 05/03/20 10:31:57 60:00 8496 3004 imo -1 310410214827503 9004 05/03/20 11:19:28 60:00 578 630nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 9005 05/03/20 11:31:57 60:00 6848 2756 ims -1 310410214827503 9006 05/03/20 12:19:28 32:50 1105 2731 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 9007 05/03/20 12:31:57 60:00 13460 4752 ims -1 310410214827503 9008 05/03/20 12:52:18 35:03 9808 11358 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 9009 05/03/20 13:27:21 24:39 12880 14174 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9010 05/03/20 13:27:22 24:39 14174 12592 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9011 05/03/20 13:31:57 60:00 8496 3128 ims -1 310410214827503 9012 05/03/20 13:52:00 15:02 6518 6904 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 9013 05/03/20 13:52:01 15:02 6904 6230 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 9014 05/03/20 14:07:03 1:00 6053 4897 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PRONE8 9015 05/03/20 14:08:03 18:54 6063 9075 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9016 05/03/20 14:08:04 18:54 9075 5775 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9017 05/03/20 14:26:58 2:43 7575 5172 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00003016 NeTtikE not for general distribution. Page 372 EFTA 00117092 EFTA01251616 The information contained hereCtoNyFtli 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41111, %°.....____ '"ni‘Stosg°y AT&T Run Data: Run Time: Data Usage for: Item Conn. Date 06/17/2020 18:56:33 Conn. Originating ET Time Humber (OTC) Bytes Up Bytes kpn Dn INEI IMBI MAfl MODEL 9018 05/03/20 14:29:40 4:59 5276 6113 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9019 05/03/20 14:29:42 4:58 6113 4988 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9020 05/03/20 14:31:57 60:00 13444 4468 ims -1 310410214827503 9021 05/03/20 14:34:40 3:23 6873 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9022 05/03/20 14:38:02 2:03 5164 6052 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9023 05/03/20 14:38:03 2:03 6052 4876 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 9024 05/03/20 14:40:06 1:35 6268 5120 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 9025 05/03/20 14:41:40 2:10 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9026 05/03/20 14:41:41 2:10 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9027 05/03/20 14:43:51 1:02 6214 5008 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9028 05/03/20 14:44:52 10:48 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9029 05/03/20 14:44:53 10:47 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9030 05/03/20 14:44:53 10:49 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 9031 05/03/20 14:44:54 10:48 6055 5774 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 9032 05/03/20 14:55:41 0:44 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9033 05/03/20 14:55:42 0:44 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 9034 05/03/20 14:56:26 2:03 6933 5025 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 9035 05/03/20 14:58:28 2:03 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9036 05/03/20 14:58:29 2:03 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9037 05/03/20 15:00:32 2:25 6873 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9038 05/03/20 15:02:57 14:20 13328 16186 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003017 NeTnAL not for general distribution. Page 373 EFTA_00I 17093 EFTA01251617 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) originating Number ET Bytes Up Bytoa Apn Dn fez' IMBI ten 9039 05/03/20 15:02:57 14:21 16186 13040nngonpho no 3587080982063726 310410214827503 APPLE 9040 05/03/20 15:17:18 1:25 6923 4961 nxtgonpho no 3587080982063726 310410214827503 APPLE 9041 05/03/20 15:18:42 6:01 7692 7415ruftgonpho no 3587080982063726 310410214827503 APPLE 9042 05/03/20 15:18:44 6:00 7415 7404ruftgonpho no 3587080982063726 310410214827503 APPLE 9043 05/03/20 15:24:44 1:12 6055 4902ruftgonpho no 3587080982063726 310410214827503 APPLE 9044 05/03/20 15:25:55 2:34 8704 6489ruftgonpho no 3587080982063726 310410214827503 APPLE 9045 05/03/20 15:25:56 2:34 6489 8416ruftgonpho no 3587080982063726 310410214827503 APPLE 9046 05/03/20 15:28:30 1:32 6873 4963ruftgonpho no 3587080982063726 310410214827503 APPLE 9047 05/03/20 15:30:02 1:31 6055 4902ruftgonpho no 3587080982063726 310410214827503 APPLE 9048 05/03/20 15:31:32 1:17 5220 6055ruftgonpho no 3587080982063726 310410214827503 APPLE 9049 05/03/20 15:31:34 1:16 6055 4932ruftgonpho no 3587080982063726 310410214827503 APPLE 9050 05/03/20 15:31:57 60:00 6956 2648 in -1 310410214827503 9051 05/03/20 15:32:50 1:05 6873 4966 nxtgonpho no 3587080982063726 310410214827503 APPLE 9052 05/03/20 15:33:55 0:36 6871 4961 nxtgonpho no 3587080982063726 310410214827503 APPLE 9053 05/03/20 15:34:30 8:20 5281 6115ruftgonpho no 3587080982063726 310410214827503 APPLE 9054 05/03/20 15:34:32 8:19 6115 4993ruftgonpho no 3587080982063726 310410214827503 APPLE 9055 05/03/20 15:42:51 3:47 6055 4901ruftgonpho no 3587080982063726 310410214827503 APPLE 9056 05/03/20 15:46:37 6:19 5217 6053ruftgonpho no 3587080982063726 310410214827503 APPLE 9057 05/03/20 15:46:38 6:19 6053 4929ruftgonpho no 3587080982063726 310410214827503 APPLE 9058 05/03/20 15:52:57 2:15 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 9059 05/03/20 15:55:11 16:31 5537 6344ruftgonpho 3587080982063726 310410214827503 APPLE no NICOLL IPHONE8 IPHONE8 !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 374 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003018 NTniliAL not for general distribution. EF-EA_00117094 EFTA01251618 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ....,,,• ••-s‘"I‘ AT&T Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Data Time (OTC) Originating ET Bytes Bytes Apn INEI Number Up Dn INS' NAfl NCOEL 9060 05/03/20 15:55:12 16:31 6344 5249 nxtgenpho no 3587080982063726 310410214827503 9061 05/03/20 16:11:43 51:43 8149 12145ruagenpho no 3587080982063726 310410214827503 9062 05/03/20 16:11:44 51:43 12145 7861 nxtgenpho no 3587080982063726 310410214827503 9063 05/03/20 16:31:57 60:00 6848 2756 ims -1 310410214827503 9064 05/03/20 17:03:27 1:07 7529 5069 nxtgenpho no 3587080982063726 310410214827503 9065 05/03/20 17:04:33 2:03 5282 6871 nxtgenpho no 3587080982063726 310410214827503 9066 05/03/20 17:04:35 2:03 6871 4994ruagenpho no 3587080982063726 310410214827503 9067 05/03/20 17:06:37 0:55 7529 5069ruagenpho no 3587080982063726 310410214827503 9068 05/03/20 17:07:31 20:50 7299 7461ruftgenpho no 3587080982063726 310410214827503 9069 05/03/20 17:07:32 20:50 7461 7011ruftgenpho no 3587080982063726 310410214827503 9070 05/03/20 17:28:22 60:00 8039 6274ruagenpho no 3587080982063726 310410214827503 9071 05/03/20 17:31:57 60:00 15324 5124 ims -1 310410214827503 9072 05/03/20 18:28:22 51:43 751 735ruagenpho no 3587080982063726 310410214827503 9073 05/03/20 18:31:57 60:00 13444 4560 ims -1 310410214827503 9074 05/03/20 19:20:04 8:59 7635 7589 nxtgenpho no 3587080982063726 310410214827503 9075 05/03/20 19:20:05 8:59 7589 7347ruagenpho no 3587080982063726 310410214827503 9076 05/03/20 19:29:04 60:00 7285 6862ruagenpho no 3587080982063726 310410214827503 9077 05/03/20 19:31:57 60:00 8604 3128 ims -1 310410214827503 9078 05/03/20 20:29:04 36:13 1502 3094 nxtgenpho no 3587080982063726 310410214827503 9079 05/03/20 20:31:57 60:00 10144 3268 ims -1 310410214827503 9080 05/03/20 21:05:16 8:25 4671 6693 nxtgenpho no 3587080982063726 310410214827503 9081 05/03/20 21:05:18 8:24 6693 4383ruagenpho no 3587080982063726 310410214827503 9082 05/03/20 21:13:42 60:00 8451 6063ruagenpho no 3587080982063726 310410214827503 APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 375 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003019 NTrifikE not for general distribution. EFTA_00I 17095 EFTA01251619 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ..... 14/e'4"11. sa#ill AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 18:56:33 Conn. Time (OTC) Originating Number ET Sytes UP Bytom Apn Dn IKE I INSI MARL NICOLL 9083 05/03/20 21:31:57 60:00 19964 6464 imo -1 310410214827503 9084 05/03/20 22:13:42 38:33 55517 10672 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONZ8 9085 05/03/20 22:31:57 60:00 6956 2772 imo -1 310410214827503 9086 05/03/20 22:52:14 3:46 31396 384827 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONZ8 9087 05/03/20 22:52:15 3:46 384827 31108 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9088 05/03/20 22:56:01 60:00 7984 6277 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9089 05/03/20 23:31:57 60:00 6956 2648 imo -1 310410214827503 9090 05/03/20 23:56:01 2:56 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONZ8 9091 05/03/20 23:58:56 32:41 19779 24666 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9092 05/03/20 23:58:57 32:41 24666 20760 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9093 05/04/20 00:31:38 0:06 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9094 05/04/20 00:31:57 49:07 8388 2896 imo -1 310410214827503 9095 05/04/20 00:44:34 30:57 25696 19313 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9096 05/04/20 01:15:30 26:38 29723 31790 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9097 05/04/20 01:15:31 26:38 31790 30704 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9098 05/04/20 01:15:43 26:25 7296 6524 imo 3587080982063726 310410214827503 APPLE IPXONE8 9099 05/04/20 01:15:44 26:25 6456 6944 imo 3587080982063726 310410214827503 APPLE IPXONE8 9100 05/04/20 01:33:16 60:00 14695 11263 imo -1 310410214827503 9101 05/04/20 01:42:10 60:00 41207 28246 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9102 05/04/20 01:42:16 24:56 8150 6924 imo 3587080982063726 310410214827503 APPLE IPXONE8 9103 05/04/20 02:07:13 4:21 8158 6176 imo 3587080982063726 310410214827503 APPLE IPXONE8 9104 05/04/20 02:11:34 0:22 3532 1448 imo 3587080982063726 310410214827503 APPLE IPXONE8 9105 05/04/20 02:12:04 0:01 0 0 imo 3587080982063726 310410214827503 APPLE IPXONE8 9106 05/04/20 02:12:15 60:00 16976 9162 imo -1 310410214827503 9107 05/04/20 02:33:16 60:00 0 0 imo -1 310410214827503 9108 05/04/20 02:42:10 60:00 9551 11880 nxtgonpho no 3587080982063726 310410214827503 APPLE IPXONE8 9109 05/04/20 03:12:15 60:00 8496 2928 imo -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is Page 376 SDNY_GM_ 00003020 not for general distribution. EFTA_00I 17096 EFTA01251620 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTE. 41111, AT&T Run Data: Run Time: Data Osage for: Item Conn. Data 06/17/2020 18:56:33 Conn. Time (UTC) originating Number ET Bytes UP Bytes Apn Dn INLI INSI MARL 9110 05/04/20 03:33:16 60:00 0 0 ims -1 310410214827503 9111 05/04/20 03:42:10 12:50 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 9112 05/04/20 04:12:15 60:00 13352 4624 ims -1 310410214827503 9113 05/04/20 04:33:16 60:00 0 0 ims -1 310410214827503 9114 05/04/20 05:12:15 60:00 9928 3284 ims -1 310410214827503 9115 05/04/20 05:33:16 5:16 0 0 ims -1 310410214827503 9116 05/04/20 06:12:15 60:00 8496 3036 ims -1 310410214827503 9117 05/04/20 07:12:15 60:00 13568 4784 ims -1 310410214827503 9118 05/04/20 07:25:07 14:29 7930 5646 nxtgonpho no 3587080982063726 310410214827503 APPLE 9119 05/04/20 07:39:36 2:21 5165 6104 nxtgonpho no 3587080982063726 310410214827503 APPLE 9120 05/04/20 07:39:37 2:21 6104 4877 nxtgonpho no 3587080982063726 310410214827503 APPLE 9121 05/04/20 07:41:58 1:07 6052 4940 nxtgonpho no 3587080982063726 310410214827503 APPLE 9122 05/04/20 07:43:05 2:37 5225 6112 nxtgonpho no 3587080982063726 310410214827503 APPLE 9123 05/04/20 07:43:06 2:37 6112 4937 nxtgonpho no 3587080982063726 310410214827503 APPLE 9124 05/04/20 07:45:42 5:09 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9125 05/04/20 07:45:43 5:08 5164 6104 nxtgonpho no 3587080982063726 310410214827503 APPLE 9126 05/04/20 07:45:43 5:09 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9127 05/04/20 07:45:44 5:08 6104 4876 nxtgonpho no 3587080982063726 310410214827503 APPLE 9128 05/04/20 07:50:52 60:00 7625 6751 nxtgonpho no 3587080982063726 310410214827503 APPLE 9129 05/04/20 08:12:15 60:00 11688 4484 ims -1 310410214827503 9130 05/04/20 08:50:52 11:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9131 05/04/20 09:12:15 60:00 8620 3052 ims -1 310410214827503 9132 05/04/20 10:12:15 60:00 6848 2680 ims -1 310410214827503 9133 05/04/20 10:13:52 33:49 8031 10613 nxtgonpho no 3587080982063726 310410214827503 APPLE 9134 05/04/20 10:47:40 2:10 5165 6052 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL !PHONES !PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003021 NeTniliAL not for general distribution. Page 377 EFTA_00I 17097 EFTA01251621 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 4011, ..,,,,• ••-s`'s AT&T Run Date: Run Elmo: Data Osage For: 06/17/2020 MI= Item Conn. Date Conn. Originating Time Nutter (UTC) ET Bytes Up 9135 05/04/20 10:47:41 2:10 6052 9136 05/04/20 10:49:51 1:16 6873 9137 05/04/20 10:51:06 8:25 5224 9138 05/04/20 10:51:07 8:25 6112 9139 05/04/20 10:59:32 20:39 6873 9140 05/04/20 11:12:15 2:37 5088 9141 05/04/20 11:14:58 60:00 16867 9142 05/04/20 11:20:10 12:36 6215 9143 05/04/20 11:20:11 12:36 7230 9144 05/04/20 11:32:47 4:33 0 9145 05/04/20 11:37:21 19:55 6873 9146 05/04/20 11:57:15 11:11 5221 9147 05/04/20 11:57:16 11:11 6055 9148 05/04/20 12:08:27 1:40 6961 9149 05/04/20 12:10:06 1:17 5164 9150 05/04/20 12:10:08 1:16 6104 9151 05/04/20 12:11:24 5:40 6873 9152 05/04/20 12:14:58 60:00 8496 9153 05/04/20 12:17:03 2:27 5060 9154 05/04/20 12:17:04 2:27 6052 9155 05/04/20 12:19:31 4:27 48 9156 05/04/20 12:23:58 2:24 5112 Bytoa Apn INC' IMBI MARL Dn 4877 nxtgenpho no 3587080982063726 310410214827503 APPLE 4964 nxtgenpho no 3587080982063726 310410214827503 APPLE 6112 nxtgenpho no 3587080982063726 310410214827503 APPLE 4936 nxtgenpho no 3587080982063726 310410214827503 APPLE 6225 nxtgenpho no 3587080982063726 310410214827503 APPLE 4728 imp -1 310410214827503 9216 imp -1 310410214827503 7230 nxtgenpho no 3587080982063726 310410214827503 APPLE 5831 nxtgenpho no 3587080982063726 310410214827503 APPLE 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6436 nxtgenpho no 3587080982063726 310410214827503 APPLE 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 5878 nxtgenpho no 3587080982063726 310410214827503 APPLE 5130 nxtgenpho no 3587080982063726 310410214827503 APPLE 6104 nxtgenpho no 3587080982063726 310410214827503 APPLE 4876 nxtgenpho no 3587080982063726 310410214827503 APPLE 4965 nxtgenpho no 3587080982063726 310410214827503 APPLE 3020 imp -1 310410214827503 6052 nxtgenpho no 3587080982063726 310410214827503 APPLE 4772 nxtgenpho no 3587080982063726 310410214827503 APPLE 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 6053 nxtgenpho no 3587080982063726 310410214827503 APPLE 1.03DEL IPHOME8 IPHOME8 !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 378 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003022 PsiTnilikk not for general distribution. EFTA_00I 17098 EFTA01251622 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. C. %‘mnieIPJ S AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 10:56:33 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apn Dn INEI IMBI MARL MODEL 9157 05/04/20 12:23:59 2:24 6053 4824 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9158 05/04/20 12:26:23 7:15 6873 4965 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9159 05/04/20 12:33:37 2:19 5118 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9160 05/04/20 12:33:38 2:19 6055 4830 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9161 05/04/20 12:35:57 31:52 6119 17605 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9162 05/04/20 13:07:48 6:43 5222 6197 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9163 05/04/20 13:07:49 6:43 6107 4934 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9164 05/04/20 13:14:32 8:59 7569 5129 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9165 05/04/20 13:14:58 60:00 7156 2896 imo -1 310410214827503 9166 05/04/20 13:23:30 29:55 11369 7449 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9167 05/04/20 13:23:31 29:55 7449 11081 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9168 05/04/20 13:53:26 3:09 5133 4692 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9169 05/04/20 13:56:34 30:51 17726 17844 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9170 05/04/20 13:56:35 30:51 17844 18611 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9171 05/04/20 14:14:58 36:55 8696 3020 ism -1 310410214827503 9172 05/04/20 14:27:26 23:15 37999 30929 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9173 05/04/20 14:50:41 32:47 31085 20389 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONE8 9174 05/04/20 14:50:42 32:47 20389 30605 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9175 05/04/20 14:51:38 5:26 6422 6736 ins 3587080982063726 310410214827503 APPLE !PHONES 9176 05/04/20 14:51:39 5:26 6668 6070 ims 3587080982063726 310410214827503 APPLE IPHONE8 9177 05/04/20 14:51:53 0:01 0 0 ims -1 310410214827503 9178 05/04/20 14:53:58 9:38 6262 6800 ism 3587080982063726 310410214827503 APPLE IPHONE8 9179 05/04/20 14:53:59 9:38 6672 6106 ims 3587080982063726 310410214827503 APPLE IPHONE8 9180 05/04/20 14:56:59 12:03 9761 6496 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 379 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003023 NITIAL not for general distribution. EFTA_00I 17099 EFTA01251623 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 18:56:33 Conn. Originating Time Number (OTC) ET Bytes Up Byte. Apn Dn INC' DUI MAKE 9181 05/04/20 15:03:35 19:53 7358 7526 ins 3587080982063726 310410214827503 APPLE 9182 05/04/20 15:03:36 19:53 7526 7202 ins 3587080982063726 310410214827503 APPLE 9183 05/04/20 15:11:59 60:00 21324 9800 ins -1 310410214827503 9184 05/04/20 15:23:29 4:22 7465 4964nxtganpho no 3587080982063726 310410214827503 APPLE 9185 05/04/20 15:27:51 1:05 7529 5069ruftganpho no 3587080982063726 310410214827503 APPLE 9186 05/04/20 15:28:55 1:25 5222 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 9187 05/04/20 15:28:56 1:25 6055 4934ruftganpho no 3587080982063726 310410214827503 APPLE 9188 05/04/20 15:30:21 0:35 6925 4964 nxtgenpho no 3587080982063726 310410214827503 APPLE 9189 05/04/20 15:30:55 2:42 5221 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 9190 05/04/20 15:30:56 2:42 6055 4933ruftganpho no 3587080982063726 310410214827503 APPLE 9191 05/04/20 15:33:38 0:50 6053 4897 nxtgenpho no 3587080982063726 310410214827503 APPLE 9192 05/04/20 15:34:28 12:37 20219 37661ruftganpho no 3587080982063726 310410214827503 APPLE 9193 05/04/20 15:34:29 12:37 37661 19739ruftganpho no 3587080982063726 310410214827503 APPLE 9194 05/04/20 15:47:06 2:32 0 Ormtganpho no 3587080982063726 310410214827503 APPLE 9195 05/04/20 15:49:37 9:11 7772 7017 nxtgenpho no 3587080982063726 310410214827503 APPLE 9196 05/04/20 15:49:38 9:11 7017 7484 nxtgenpho no 3587080982063726 310410214827503 APPLE 9197 05/04/20 15:58:49 19:47 78050 98861 nxtgenpho no 3587080982063726 310410214827503 APPLE 9198 05/04/20 16:11:59 60:00 8496 3004 imp -1 310410214827503 9199 05/04/20 16:18:35 2:21 4504 5859 nxtgenpho no 3587080982063726 310410214827503 APPLE 9200 05/04/20 16:18:36 2:22 5859 4216 nxtgenpho no 3587080982063726 310410214827503 APPLE 9201 05/04/20 16:20:57 0:49 5220 6107 nxtgenpho no 3587080982063726 310410214827503 APPLE 9202 05/04/20 16:20:58 0:49 6107 4932ruftganpho 3587080982063726 310410214827503 APPLE no MODEL 1PHONE8 1PHONE8 1PHONE8 1PHONE8 1PHONE8 !PHONES !PHONES 1PHONE8 !PHONES !PHONES 1PHONE8 1PHONE8 1PHONE8 1PHONE8 1PHONE8 1PHONE8 !PHONES !PHONES 1PHONE8 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 380 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003024 NTniliAL not for general distribution. EF-EA_00117100 EFTA01251624 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, %C.1,00 ‘"lewd. AT&T Run Date: Run Time: Data Osage for: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn IN= INBI MARC SOD= 9203 05/04/20 16:21:47 0:35 6341 5776 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9204 05/04/20 16:22:21 2:14 5220 6107 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9205 05/04/20 16:22:22 2:14 6107 4932 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9206 05/04/20 16:24:36 34:15 8257 6132 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9207 05/04/20 16:58:50 2:03 5222 6055 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9208 05/04/20 16:58:51 2:03 6055 4934 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9209 05/04/20 17:00:54 12:41 6228 5006 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9210 05/04/20 17:11:59 60:00 8480 3020 imo -1 310410214827503 9211 05/04/20 17:13:34 2:03 5117 6199 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9212 05/04/20 17:13:35 2:03 6055 4829 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9213 05/04/20 17:15:38 17:22 7754 5228 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9214 05/04/20 17:32:59 2:09 5220 6107 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9215 05/04/20 17:33:00 2:09 6107 4932 nmtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9216 05/04/20 17:35:09 8:40 6055 4901 nxtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9217 05/04/20 17:43:48 2:26 5277 6209 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9218 05/04/20 17:43:50 2:25 6209 4989 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9219 05/04/20 17:46:15 3:58 6219 5125 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9220 05/04/20 17:50:12 22:00 13726 24680 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9221 05/04/20 17:50:13 22:00 24680 14077 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 9222 05/04/20 18:11:59 60:00 8496 2928 imo -1 310410214827503 9223 05/04/20 18:12:13 4:40 48 0 nmtgonpho no 3587080982063726 310410214827503 APPLE IfROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 381 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003025 PsiTieMit not for general distribution. EF-EAJVII7101 EFTA01251625 The information contained hereCoNftli 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41011, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 18:56:34 Conn. Originating Time Number (UTC) ET Bytes Up Byte. Apn Dn Der IMBI MART MOD= 9224 05/04/20 18:16:52 1:58 4998 11569 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 9225 05/04/20 18:16:53 1:58 11569 4710 nxtgonpho no 3587080982063726 310410214827503 APPLE !PROMS 9226 05/04/20 18:18:51 8:05 6873 4966 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9227 05/04/20 18:26:55 8:44 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9228 05/04/20 18:26:56 8:44 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9229 05/04/20 18:35:40 3:11 41645 7334 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9230 05/04/20 18:38:50 3:02 5218 6037 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9231 05/04/20 18:38:51 3:02 6037 4930 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9232 05/04/20 18:41:53 29:10 42701 58145 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9233 05/04/20 18:41:54 29:10 58145 42317 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9234 05/04/20 19:11:04 3:23 8690 5512 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9235 05/04/20 19:11:59 60:00 7140 2912 imp -1 310410214827503 9236 05/04/20 19:14:26 9:26 4607 5823 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9237 05/04/20 19:14:28 9:25 5823 4319 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9238 05/04/20 19:23:53 5:11 192 Onxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9239 05/04/20 19:23:54 5:10 4608 5823 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9240 05/04/20 19:23:54 5:11 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9241 05/04/20 19:23:55 5:10 5823 4320 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9242 05/04/20 19:29:06 1:05 6055 4796 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9243 05/04/20 19:30:10 0:46 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 1PROME8 9244 05/04/20 19:30:12 0:45 6107 4933 nxtgonpho 3587080982063726 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 382 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003026 not for general distribution. EFTA 00117102 EFTA01251626 MOBILITY The information contained heraleeNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 10:56:34 ET Bytes Up Bytom Apn Dn Conn. Originating INLI IMISI MARL Time NUmbor (UTC) 9245 05/04/20 19:30:57 0:38 6873 4965 nxtgenpho no 3587080982063726 310410214827503 APPLE 9246 05/04/20 19:31:34 10:11 5285 6873 nxtgenpho no 3587080982063726 310410214827503 APPLE 9247 05/04/20 19:31:35 10:11 6873 5627 nxtgenpho no 3587080982063726 310410214827503 APPLE 9248 05/04/20 19:41:46 60:00 24906 29683 nxtgenpho no 3587080982063726 310410214827503 APPLE 9249 05/04/20 20:11:59 60:00 17192 6264 ims -1 310410214827503 9250 05/04/20 20:41:46 12:35 0 1365 nxtgenpho no 3587080982063726 310410214827503 APPLE 9251 05/04/20 20:54:20 2:02 5221 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 9252 05/04/20 20:54:21 2:02 6055 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE 9253 05/04/20 20:56:23 4:09 6107 4902 nxtgenpho no 3587080982063726 310410214827503 APPLE 9254 05/04/20 21:00:31 3:13 5118 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 9255 05/04/20 21:00:32 3:13 6055 4830 nxtgenpho no 3587080982063726 310410214827503 APPLE 9256 05/04/20 21:03:45 2:21 6857 4966 nxtgenpho no 3587080982063726 310410214827503 APPLE 9257 05/04/20 21:06:05 2:33 5220 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE 9258 05/04/20 21:06:06 2:33 6055 4932 nxtgenpho no 3587080982063726 310410214827503 APPLE 9259 05/04/20 21:08:38 2:43 5117 6107 nxtgenpho no 3587080982063726 310410214827503 APPLE 9260 05/04/20 21:08:39 2:43 6107 4829 nxtgenpho no 3587080982063726 310410214827503 APPLE 9261 05/04/20 21:11:21 9:02 5217 6105 nxtgenpho no 3587080982063726 310410214827503 APPLE 9262 05/04/20 21:11:22 9:02 6105 4929 nxtgenpho no 3587080982063726 310410214827503 APPLE 9263 05/04/20 21:11:59 60:00 15388 9692 ims -1 310410214827503 9264 05/04/20 21:20:24 3:02 9728 9803 nxtgenpho no 3587080982063726 310410214827503 APPLE 9265 05/04/20 21:20:25 3:02 9803 9440 nxtgenpho no 3587080982063726 310410214827503 APPLE MOLL IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 383 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003027 N:FrliAL not for general distribution. EF-EA_00117103 EFTA01251627 MOBILITY The information contained hereCteNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. .... `•-••• -a's f AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 1S:56:34 Conn. Time (OTC) originating Number ET Bytes Up Byte. Apn Dn INSI MARL NICOLL 9266 05/04/20 21:23:27 11:15 7820 8864 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONZ8 9267 05/04/20 21:23:28 11:15 8864 7532 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 9268 05/04/20 21:34:43 1:08 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9269 05/04/20 21:35:50 4:12 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9270 05/04/20 21:35:52 4:11 48 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9271 05/04/20 21:40:03 3:01 6873 4966 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9272 05/04/20 21:43:03 2:07 5216 6105 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9273 05/04/20 21:43:04 2:07 6105 4928 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9274 05/04/20 21:45:11 0:56 7581 5070 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9275 05/04/20 21:46:06 2:20 192 0 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 9276 05/04/20 21:46:07 2:19 5388 6329 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 9277 05/04/20 21:46:08 2:19 6329 5100 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 9278 05/04/20 21:46:08 2:19 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9279 05/04/20 21:48:27 1:14 8722 5271 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9280 05/04/20 21:49:40 2:17 5285 6873 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9281 05/04/20 21:49:41 2:17 6873 4997 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9282 05/04/20 21:51:58 1:19 7465 4966 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9283 05/04/20 21:53:17 2:22 5216 6105 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9284 05/04/20 21:53:18 2:22 6105 4928 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9285 05/04/20 21:55:40 1:26 6871 4960 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 9286 05/04/20 21:57:05 2:26 5281 7463 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 384 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003028 NsTroliAL not for general distribution. EFTA 00117104 EFTA01251628 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4111. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:56:34 Conn. Time (OTC) Originating Number LT Bytes Up Byte. Apn Dn INLI INBI NUT 9287 05/04/20 21:57:06 2:26 7463 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE 9288 05/04/20 21:59:32 1:43 6055 4900 nxtgonpho no 3587080982063726 310410214827503 APPLE 9289 05/04/20 22:01:14 2:30 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 9290 05/04/20 22:01:15 2:30 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE 9291 05/04/20 22:03:45 2:18 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9292 05/04/20 22:06:02 14:31 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 9293 05/04/20 22:06:03 14:31 6107 17893 nxtgonpho no 3587080982063726 310410214827503 APPLE 9294 05/04/20 22:10:14 17:47 2503984 3457584 imo -1 310410214827503 9295 05/04/20 22:11:59 60:00 22572 13164 imo -1 310410214827503 9296 05/04/20 22:20:34 0:53 7447 4960 nxtgonpho no 3587080982063726 310410214827503 APPLE 9297 05/04/20 22:21:26 2:58 7997 9247 nxtgonpho no 3587080982063726 310410214827503 APPLE 9298 05/04/20 22:21:27 2:58 9247 7709 nxtgonpho no 3587080982063726 310410214827503 APPLE 9299 05/04/20 22:24:25 3:03 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9300 05/04/20 22:27:27 2:43 288 48 nxtgonpho no 3587080982063726 310410214827503 APPLE 9301 05/04/20 22:27:28 2:43 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9302 05/04/20 22:30:12 1:13 6067 5610 nxtgonpho no 3587080982063726 310410214827503 APPLE 9303 05/04/20 22:31:24 4:21 5116 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 9304 05/04/20 22:31:25 4:21 6055 4828 nxtgonpho no 3587080982063726 310410214827503 APPLE 9305 05/04/20 22:35:46 5:27 6055 4797 nxtgonpho no 3587080982063726 310410214827503 APPLE 9306 05/04/20 22:41:13 2:32 5113 6105 nxtgonpho no 3587080982063726 310410214827503 APPLE 9307 05/04/20 22:41:14 2:32 6105 4825 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 385 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003029 PsiTniliAL not for general distribution. EF-EAJVII7105 EFTA01251629 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111. ‘ • "le/s10 AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 . Conn. Originating ET rime Nusbor (UTC) Bytes Up Bytes Min Dn per pal MR= MODEL 9308 05/04/20 22:43:46 1:19 6067 5608 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 9309 05/04/20 22:45:04 8:29 5112 6105 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9310 05/04/20 22:45:05 8:29 6105 4824 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9311 05/04/20 22:48:38 0:29 1950 12442 mos -1 310410214827503 9312 05/04/20 22:53:34 1:42 6107 4900 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9313 05/04/20 22:55:15 6:30 5280 6871 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9314 05/04/20 22:55:16 6:30 6871 4992 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9315 05/04/20 23:01:46 9:23 6053 4896 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9316 05/04/20 23:11:09 15:24 5222 6228 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9317 05/04/20 23:11:10 15:24 6228 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PROMS 9318 05/04/20 23:11:59 60:00 22312 11460 ims -1 310410214827503 9319 05/04/20 23:22:32 0:28 2176 13538 ims -1 310410214827503 9320 05/04/20 23:26:34 1:25 48 OruMgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9321 05/04/20 23:27:58 14:28 17147 18838 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9322 05/04/20 23:27:59 14:28 18838 17699 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9323 05/04/20 23:42:27 0:59 6055 4901 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9324 05/04/20 23:43:25 8:32 5284 6208 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9325 05/04/20 23:43:27 8:31 6208 4996 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9326 05/04/20 23:51:58 0:49 7899 5600 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9327 05/04/20 23:52:46 2:24 5116 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9328 05/04/20 23:52:47 2:24 6055 4828 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9329 05/04/20 23:55:11 5:25 6873 4966 nxtgonpho no 3587080982063726 310410214827503 APPLE /PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 386 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003030 not for general distribution. EF-EA_00117106 EFTA01251630 MOBILITY The information contained her is 9330 05/05/20 00:00:35 8:52 5117 9331 05/05/20 00:00:36 8:52 6091 9332 05/05/20 00:09:27 1:06 5220 9333 05/05/20 00:09:29 1:05 6055 9334 05/05/20 00:10:34 3:29 7184 9335 05/05/20 00:11:59 60:00 11904 9336 05/05/20 00:14:02 5:57 5221 9337 05/05/20 00:14:04 5:56 6107 9338 05/05/20 00:20:00 2:14 6052 9339 05/05/20 00:22:14 33:28 16485 9340 05/05/20 00:22:15 33:28 14579 9341 05/05/20 00:55:43 2:29 192 9342 05/05/20 00:55:44 2:28 5117 9343 05/05/20 00:55:44 2:29 0 9344 05/05/20 00:55:45 2:28 6039 9345 05/05/20 00:58:13 2:02 48 9346 05/05/20 01:00:14 2:18 5113 9347 05/05/20 01:00:16 2:17 6105 9348 05/05/20 01:02:33 0:59 7463 9349 05/05/20 01:03:31 2:39 5116 9350 05/05/20 01:03:32 2:39 6055 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in •--- `"" ..asti . AT&T Run Data: Run Time: Data Usage For: 06/17/2020 16:56:34 Item Conn. Conn. Originating ET Bytes Bytes Apn Iie' IMBI ten MODEL Data Time Number Up Dn Gnc) 6091 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4829 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4932 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4965 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4484 ims -1 310410214827503 6107 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4933 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4892 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 14579 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 16680 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no Onmtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6039 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4829 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no Oruftgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6105 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4825 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4961 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 6055 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no 4828 nxtgenpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 387 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003031 NeTniiiikE not for general distribution. EF-EA_00117107 EFTA01251631 MOBILITY The information contained heraCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, AT&T Run Data: Run Tama: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating CT fluster Bytes OP Bytom Apn on INC' IASI MARL 9351 05/05/20 01:06:10 2:19 5112 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE 9352 05/05/20 01:06:12 2:19 6053 4824 nxtgonpho no 3587080982063726 310410214827503 APPLE 9353 05/05/20 01:08:31 1:32 7526 5061 nxtgonpho no 3587080982063726 310410214827503 APPLE 9354 05/05/20 01:10:03 15:12 5537 6408 nxtgonpho no 3587080982063726 310410214827503 APPLE 9355 05/05/20 01:10:04 15:12 6408 5249 nxtgonpho no 3587080982063726 310410214827503 APPLE 9356 05/05/20 01:11:59 60:00 12012 4752 imp -1 310410214827503 9357 05/05/20 01:25:16 0:58 7529 5070 nxtgonpho no 3587080982063726 310410214827503 APPLE 9358 05/05/20 01:26:13 2:20 5113 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE 9359 05/05/20 01:26:14 2:20 6053 4825 nxtgonpho no 3587080982063726 310410214827503 APPLE 9360 05/05/20 01:28:34 0:41 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9361 05/05/20 01:29:14 2:32 5118 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 9362 05/05/20 01:29:15 2:32 6055 4830 nxtgonpho no 3587080982063726 310410214827503 APPLE 9363 05/05/20 01:31:47 6:04 7593 5175 nxtgonpho no 3587080982063726 310410214827503 APPLE 9364 05/05/20 01:37:50 2:25 5117 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 9365 05/05/20 01:37:51 2:25 6107 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE 9366 05/05/20 01:40:16 11:51 7465 6016 nxtgonpho no 3587080982063726 310410214827503 APPLE 9367 05/05/20 01:52:06 0:42 5164 6052 nxtgonpho no 3587080982063726 310410214827503 APPLE 9368 05/05/20 01:52:07 0:43 6052 4876 nxtgonpho no 3587080982063726 310410214827503 APPLE 9369 05/05/20 01:52:49 0:39 7465 4966 nxtgonpho no 3587080982063726 310410214827503 APPLE 9370 05/05/20 01:53:28 110:00 31037 35443 nxtgonpho no 3587080982063726 310410214827503 APPLE 9371 05/05/20 01:53:29 60:00 27646 27453 nxtgonpho no 3587080982063726 310410214827503 APPLE NODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 388 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003032 NeTniiiikE not for general distribution. EF-EA_00117108 EFTA01251632 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111 AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. originating ET Time Number (OTC) Bytes UP Bytes Apn Dn ItCEI INSI MARL 9372 05/05/20 02:11:59 60:00 7264 2912 imp -1 310410214827503 9373 05/05/20 02:53:29 60:00 7797 7097 nxtgonpho no 3587080982063726 310410214827503 APPLE 9374 05/05/20 03:11:59 60:00 8712 3068 imp -1 310410214827503 9375 05/05/20 03:43:28 132:53 117220 102461 nxtgonpho no 3587080982063726 310410214827503 APPLE 9376 05/05/20 03:53:29 60:00 36703 51546 nxtgonpho no 3587080982063726 310410214827503 APPLE 9377 05/05/20 04:11:59 60:00 7156 2804 imp -1 310410214827503 9378 05/05/20 04:53:29 60:00 65758 65845 nxtgonpho no 3587080982063726 310410214827503 APPLE 9379 05/05/20 05:11:59 60:00 13708 4872 imp -1 310410214827503 9380 05/05/20 05:53:29 2:53 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9381 05/05/20 05:56:21 9:18 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 9382 05/05/20 05:56:22 9:19 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE 9383 05/05/20 06:05:41 3:44 7529 5069 nxtgonpho no 3587080982063726 310410214827503 APPLE 9384 05/05/20 06:09:24 3:59 5218 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE 9385 05/05/20 06:09:26 3:58 6053 4930 nxtgonpho no 3587080982063726 310410214827503 APPLE 9386 05/05/20 06:11:59 60:00 10440 4196 imp -1 310410214827503 9387 05/05/20 06:13:23 3:00 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9388 05/05/20 06:13:24 2:59 5221 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 9389 05/05/20 06:13:25 3:00 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9390 05/05/20 06:13:26 2:59 6055 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 9391 05/05/20 06:16:24 6:48 6668 10323nxtgonpho no 3587080982063726 310410214827503 APPLE 9392 05/05/20 06:16:25 6:48 10323 6380 nxtgonpho no 3587080982063726 310410214827503 APPLE 9393 05/05/20 06:23:13 2:14 7593 5175 nxtgonpho no 3587080982063726 310410214827503 APPLE 9394 05/05/20 06:25:26 3:28 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPMONE8 !PHONES !PHONES !PHONES IPMONE8 IPMONE8 !PHONES !PHONES IPMONE8 !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003033 NeTiliAL not for general distribution. Page 389 EF-EA_00117109 EFTA01251633 The information contained her is MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ‘min# sw:assol AT&T Run Date: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating Mater ET Bytes Byte. Apn Up Dn ICI ICI MARL MODEL 9395 05/05/20 06:25:27 3:28 6107 4933 nxtgenpho no 3587080982063726 310410214827503 9396 05/05/20 06:28:54 7:35 7727 8683 nxtgenpho no 3587080982063726 310410214827503 9397 05/05/20 06:28:55 7:35 8683 7343 nxtgenpho no 3587080982063726 310410214827503 9398 05/05/20 06:36:30 1:35 6067 5606 nxtgenpho no 3587080982063726 310410214827503 9399 05/05/20 06:38:04 4:51 5220 6107 nxtgenpho no 3587080982063726 310410214827503 9400 05/05/20 06:38:05 4:51 6107 4932 nxtgenpho no 3587080982063726 310410214827503 9401 05/05/20 06:42:55 7:48 5112 6053 nxtgenpho no 3587080982063726 310410214827503 9402 05/05/20 06:42:56 7:48 6053 4824 nxtgenpho no 3587080982063726 310410214827503 9403 05/05/20 06:50:44 2:11 5228 6205 nxtgenpho no 3587080982063726 310410214827503 9404 05/05/20 06:50:45 2:11 6205 4940 nxtgenpho no 3587080982063726 310410214827503 9405 05/05/20 06:52:56 1:33 7527 5065 nxtgenpho no 3587080982063726 310410214827503 9406 05/05/20 06:54:28 7:45 5222 6107 nxtgenpho no 3587080982063726 310410214827503 9407 05/05/20 06:54:29 7:46 6107 4934 nxtgenpho no 3587080982063726 310410214827503 9408 05/05/20 07:02:14 2:11 5221 6055 nxtgenpho no 3587080982063726 310410214827503 9409 05/05/20 07:02:15 2:11 6055 4933 nxtgenpho no 3587080982063726 310410214827503 9410 05/05/20 07:04:26 0:46 6933 5026 nxtgenpho no 3587080982063726 310410214827503 9411 05/05/20 07:05:11 1:29 5221 6055 nxtgenpho no 3587080982063726 310410214827503 9412 05/05/20 07:05:12 1:29 6055 4933 nxtgenpho no 3587080982063726 310410214827503 9413 05/05/20 07:06:41 0:50 48 Onxtgenpho no 3587080982063726 310410214827503 9414 05/05/20 07:07:31 3:34 5217 6105 nxtgenpho no 3587080982063726 310410214827503 9415 05/05/20 07:07:32 3:34 6105 4929 nxtgenpho 3587080982063726 310410214827503 no APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 390 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SONYGAL00003034 NsTiliAL not for general distribution. EF-EA_O0117II0 EFTA01251634 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and OTC. provided in tr'`sads AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Humber (UTC) Bytes Up Bytes Apn Dn Tier IMBI NICOLL 9416 05/05/20 07:11:05 2:53 5163 6104 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9417 05/05/20 07:11:06 2:53 6104 4875 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9418 05/05/20 07:11:59 60:00 3408 1340 ims -1 310410214827503 9419 05/05/20 07:13:59 4:41 5216 6053 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONZ8 9420 05/05/20 07:14:00 4:41 6053 4928 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9421 05/05/20 07:18:41 1:20 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9422 05/05/20 07:20:00 2:11 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9423 05/05/20 07:20:02 2:11 6107 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9424 05/05/20 07:22:12 17:38 15311 17941 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9425 05/05/20 07:22:13 17:38 17941 15968 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9426 05/05/20 07:37:17 60:00 16811 9968 ims -1 310410214827503 9427 05/05/20 07:39:51 2:28 7567 5231 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONZ8 9428 05/05/20 07:42:18 8:46 5165 6052 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9429 05/05/20 07:42:19 8:46 6052 4877 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9430 05/05/20 07:51:04 6:33 192 0 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9431 05/05/20 07:51:06 6:31 288 48 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9432 05/05/20 07:51:06 6:32 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9433 05/05/20 07:51:07 6:31 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9434 05/05/20 07:57:38 7:11 4608 5823 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9435 05/05/20 07:57:39 7:11 5823 4320 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 9436 05/05/20 08:04:50 1:37 6873 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE INIONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003035 NTrifikE not for general distribution. Page 391 EFTA_OOI 1711 I EFTA01251635 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 411111, •...al 14/ ' "‘SI° AT&T Run Date: Run Time: Data Usage For: 06/17/2020 10:56:34 Item Conn. Conn. Originating ET Bytes Bytoa Apn INC' IMISI MARL MOLL Date Time NUmbor Up Dn (UTC) 9637 05/05/20 08:06:26 2:20 288 48 nxtgenpho no 3587080982063726 310410214827503 9438 05/05/20 08:06:27 2:20 48 Oruftgenpho no 3587080982063726 310410214827503 9439 05/05/20 08:08:47 0:34 302 425ruftgenpho no 3587080982063726 310410214827503 9440 05/05/20 08:09:20 1:54 288 48ruftgenpho no 3587080982063726 310410214827503 9441 05/05/20 08:09:22 1:53 48 Oruftgenpho no 3587080982063726 310410214827503 9442 05/05/20 08:11:15 1:03 48 Onxtgenpho no 3587080982063726 310410214827503 9443 05/05/20 08:11:59 60:00 0 0 ins -1 310410214827503 9444 05/05/20 08:12:17 18:04 2528 1768 nxtgenpho no 3587080982063726 310410214827503 9445 05/05/20 08:12:18 18:04 1768 1952 nxtgenpho no 3587080982063726 310410214827503 9446 05/05/20 08:30:22 138:31 192 Oruftgenpho no 3587080982063726 310410214827503 9447 05/05/20 08:30:23 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 9448 05/05/20 08:30:23 138:30 7281 7109 nxtgenpho no 3587080982063726 310410214827503 9449 05/05/20 08:30:24 60:00 7109 8682 nxtgenpho no 3587080982063726 310410214827503 9450 05/05/20 08:37:17 60:00 6816 2648 ins -1 310410214827503 9451 05/05/20 09:11:59 60:00 0 0 ins -1 310410214827503 9452 05/05/20 09:30:23 60:00 0 Oruftgenpho no 3587080982063726 310410214827503 9453 05/05/20 09:30:24 60:00 0 92 nxtgenpho no 3587080982063726 310410214827503 9454 05/05/20 09:37:17 60:00 6908 2880 ins -1 310410214827503 9455 05/05/20 10:11:59 60:00 0 0 ins -1 310410214827503 9456 05/05/20 10:30:23 18:32 0 Oruftgenpho no 3587080982063726 310410214827503 9457 05/05/20 10:30:24 18:31 0 Oruftgenpho no 3587080982063726 310410214827503 9458 05/05/20 10:37:17 60:00 7048 2664 ins -1 310410214827503 9459 05/05/20 11:11:59 19:44 0 0 ins -1 310410214827503 9460 05/05/20 11:37:17 60:00 10564 4328 ins -1 310410214827503 APPLE IPHONZ8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 392 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003036 PsiTniliAL not for general distribution. EFTA 00117112 EFTA01251636 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, AT&T Run Date: Run T104: Data usage For: Item conn. Date 06/17/2020 18:86:34 Conn. Time (OTC) originating Muster Er Bytes Up Bytes Dn Apn IMCI IMBI MAME 9461 05/05/20 12:37:17 60:00 12012 4396 ims -1 310410214827503 9462 05/05/20 13:37:17 60:00 7048 2772 ims -1 310410214827503 9463 05/05/20 14:37:17 60:00 8604 3144 ims -1 310410214827503 9464 05/05/20 15:37:17 60:00 13584 4700 ims -1 310410214827503 9465 05/05/20 16:37:17 60:00 6816 2756 ins -1 310410214827503 9466 05/05/20 17:37:17 60:00 12012 4612 ims -1 310410214827503 9467 05/05/20 18:37:17 60:00 8604 2896 ims -1 310410214827503 9468 05/05/20 19:37:17 60:00 8156 2988 ims -1 310410214827503 9469 05/05/20 20:37:17 60:00 48516 33388 ims -1 310410214827503 9470 05/05/20 20:48:56 0:28 1816 13698 ims -1 310410214827503 9471 05/05/20 21:24:53 0:31 2905 26521 ims -1 310410214827503 9472 05/05/20 21:36:36 0:42 10886 16120 ins -1 310410214827503 9473 05/05/20 21:37:17 60:00 13732 5964 ins -1 310410214827503 9474 05/05/20 22:37:17 60:00 10580 4272 ims -1 310410214827503 9475 05/05/20 23:37:17 60:00 7264 2772 ims -1 310410214827503 9476 05/06/20 00:37:17 60:00 46876 28300 ims -1 310410214827503 9477 05/06/20 00:40:44 0:30 2586 15456 ims -1 310410214827503 9478 05/06/20 00:41:32 0:01 0 0 ims -1 310410214827503 9479 05/06/20 00:41:36 0:08 3097 5761 in -1 310410214827503 9480 05/06/20 00:41:47 0:09 5571 18807 ins -1 310410214827503 9481 05/06/20 01:37:17 20:07 216 108 ims -1 310410214827503 9482 05/06/20 01:52:03 60:00 15221 9018 in -1 310410214827503 9483 05/06/20 02:52:03 60:00 10176 3300 in -1 310410214827503 9484 05/06/20 03:52:03 60:00 8496 3036 in -1 310410214827503 9485 05/06/20 04:52:03 60:00 8496 2928 in -1 310410214827503 9486 05/06/20 05:29:39 60:00 15001 8566 in -1 310410214827503 9487 05/06/20 05:52:03 60:00 0 0 in -1 310410214827503 9488 05/06/20 06:29:39 60:00 7048 2772 ins -1 310410214827503 9489 05/06/20 06:52:03 60:00 0 0 ims -1 310410214827503 9490 05/06/20 07:29:39 60:00 6816 2648 ims -1 310410214827503 9491 05/06/20 07:52:03 27:06 0 0 ims -1 310410214827503 9492 05/06/20 08:19:09 60:00 16823 11964 ins -1 310410214827503 9493 05/06/20 08:29:39 60:00 0 0 in -1 310410214827503 9494 05/06/20 09:19:09 60:00 8388 2896 in -1 310410214827503 9495 05/06/20 09:29:39 60:00 0 0 in -1 310410214827503 9496 05/06/20 10:19:09 60:00 7000 2756 in -1 310410214827503 MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 393 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003037 PsiTi thE not for general distribution. EFTA_001 171 13 EFTA01251637 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tr‘"Ii°a aa#d AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:56:35 Conn. originating Time Number Up Tr (OTC) Bytes Bytoa Dn Apn IMEI IMSI MAKE 100D6 9497 05/06/20 10:29:39 60:00 0 0 isms -1 310410214827503 9498 05/06/20 11:19:09 60:00 10332 4188 isms -1 310410214827503 9499 05/06/20 11:29:39 41:51 0 0 isms -1 310410214827503 9500 05/06/20 12:19:09 60:00 10904 4396 isms -1 310410214827503 9501 05/06/20 13:19:09 60:00 10176 3144 isms -1 310410214827503 9502 05/06/20 14:19:09 60:00 10224 4204 isms -1 310410214827503 9503 05/06/20 15:19:09 60:00 10284 3252 isms -1 310410214827503 9504 05/06/20 16:19:09 60:00 8944 3252 isms -1 310410214827503 9505 05/06/20 17:19:09 60:00 15420 6060 isms -1 310410214827503 9506 05/06/20 18:19:09 48:38 8000 5480 isms -1 310410214827503 9507 05/06/20 18:58:46 3:12 13897 10790 isms -1 310410214827503 9508 05/06/20 19:02:39 60:00 16399 10236 isms -1 310410214827503 9509 05/06/20 20:02:39 60:00 8480 2896 ims -1 310410214827503 9510 05/06/20 21:02:39 60:00 10008 3972 ims -1 310410214827503 9511 05/06/20 22:02:39 60:00 8712 3112 imp -1 310410214827503 9512 05/06/20 23:02:39 60:00 0 0 ims -1 310410214827503 9513 05/06/20 23:15:42 60:00 18753 9868 ims -1 310410214827503 9514 05/07/20 00:02:39 60:00 0 0 ims -1 310410214827503 9515 05/07/20 00:15:42 60:00 6924 2756 ims -1 310410214827503 9516 05/07/20 01:02:39 60:00 0 0 ims -1 310410214827503 9517 05/07/20 01:15:42 60:00 8604 2928 ims -1 310410214827503 9518 05/07/20 02:02:39 52:29 0 0 ims -1 310410214827503 9519 05/07/20 02:15:42 60:00 6924 2588 ims -1 310410214827503 9520 05/07/20 03:15:42 60:00 18564 6264 ims -1 310410214827503 9521 05/07/20 04:15:42 60:00 10176 3284 ims -1 310410214827503 9522 05/07/20 05:15:42 60:00 10240 4360 ims -1 310410214827503 9523 05/07/20 06:15:42 60:00 8944 3268 ims -1 310410214827503 9524 05/07/20 07:15:42 60:00 6924 2896 ims -1 310410214827503 9525 05/07/20 08:15:42 60:00 15096 5660 ims -1 310410214827503 9526 05/07/20 09:15:42 60:00 8928 3268 ims -1 310410214827503 9527 05/07/20 10:15:42 60:00 9960 3176 ims -1 310410214827503 9528 05/07/20 11:15:42 34:25 3516 1232 ims -1 310410214827503 9529 05/07/20 11:47:06 34:37 11893 7738 ims -1 310410214827503 9530 05/07/20 12:21:54 60:00 15463 9040 ims -1 310410214827503 9531 05/07/20 13:21:54 60:00 10068 3144 ims -1 310410214827503 9532 05/07/20 14:21:54 60:00 21356 15812 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 394 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003038 NTifikE not for general distribution. EF-EAJVII7II4 EFTA01251638 MOBILITY The information contained hereCtoNfti 2996479 06/17/2020 AT&T hes queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. 4.11, .....,,,• `•-s"" s AT&T Run Date: Run Time: Data Usage For: Item cone. Date 06/17/2020 Conn. Originating ET Time Number (LTC) Sytes Up Bytes Apn Dn IMEI INSI MANE MODEL 9533 05/07/20 14:49:09 0:32 2536 14379 ims -1 310410214827503 9534 05/07/20 15:21:54 60:00 7220 3004 ims -1 310410214827503 9535 05/07/20 16:21:54 60:00 28200 18868 ims -1 310410214827503 9536 05/07/20 17:02:53 0:35 2394 14527 ims -1 310410214827503 9537 05/07/20 17:21:54 41:35 22984 17548 ims -1 310410214827503 9538 05/07/20 17:47:52 0:33 4501 16129 ims -1 310410214827503 9539 05/07/20 18:05:33 60:00 15313 9310 ims -1 310410214827503 9540 05/07/20 19:05:33 60:00 27184 17864 ims -1 310410214827503 9541 05/07/20 19:11:56 0:30 2653 13920 ims -1 310410214827503 9542 05/07/20 19:16:15 0:07 0 104 ims -1 310410214827503 9543 05/07/20 20:05:33 40:01 3532 1836 ims -1 310410214827503 9544 05/07/20 23:13:14 1:05 13325 11049 ims -1 310410214827503 9545 05/07/20 23:32:34 60:00 77325 44204 ims -1 310410214827503 9546 05/07/20 23:32:43 0:58 6037 4896 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9547 05/07/20 23:32:47 0:29 4810 15192 ims -1 310410214827503 9548 05/07/20 23:33:41 15:43 30800 40459 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9549 05/07/20 23:33:41 15:44 40459 31256 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 9550 05/07/20 23:33:45 0:02 0 0 ims -1 310410214827503 9551 05/07/20 23:33:54 0:41 8915 16172 ims -1 310410214827503 9552 05/07/20 23:49:25 15:19 8198 15512 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9553 05/07/20 23:49:26 15:19 15512 7910 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 9554 05/08/20 00:04:44 17:37 21748 37123 nxtgenpho no 3587080982063726 310410214827503 APPLE IPRONE8 9555 05/08/20 00:04:45 17:37 37123 21268 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9556 05/08/20 00:18:57 0:28 1942 18297 ims -1 310410214827503 9557 05/08/20 00:22:22 4:28 7529 5070 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9558 05/08/20 00:26:49 24:56 5851 6536 nxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 9559 05/08/20 00:26:50 24:56 6536 5563 nxtgenpho no 3587080982063726 310410214827503 APPLE !PRONGS 9560 05/08/20 00:32:34 60:00 10160 3176 ims -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 395 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003039 PsisTiliAL not for general distribution. EF-EA_00117115 EFTA01251639 MOBILITY The information contained hereetoNftle 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. %°6 ‘"Ii° .,7.sea$ AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 1S:56:35 Conn. Originating TT Time Number (OTC) Bytes Up Bytes Apn Dn ISM' IMBI teUtT MOTS 9561 05/08/20 00:51:46 4:14 5875 4321 nxtgenpho no 3587080982063726 310410214827503 APPLE IDMONZ8 9562 05/08/20 00:56:00 1:47 5221 6107 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9563 05/08/20 00:56:01 1:47 6107 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 9564 05/08/20 00:57:48 38:44 10174 11093 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9565 05/08/20 01:32:34 60:00 6924 2680 ims -1 310410214827503 9566 05/08/20 01:36:31 1:57 5285 6925 nxtgenpho no 3587080982063726 310410214827503 APPLE IDMONZ8 9567 05/08/20 01:36:32 1:57 6925 4997 nxtgenpho no 3587080982063726 310410214827503 APPLE IDMONZ8 9568 05/08/20 01:38:29 6:27 7529 5070 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9569 05/08/20 01:44:55 2:03 6072 6437 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9570 05/08/20 01:44:56 2:03 6437 5784 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9571 05/08/20 01:46:59 5:21 35763 29661 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9572 05/08/20 01:52:19 2:03 5221 6055 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 9573 05/08/20 01:52:20 2:03 6055 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9574 05/08/20 01:54:23 12:08 29799 21807 nxtgenpho no 3587080982063726 310410214827503 APPLE IDMONZ8 9575 05/08/20 02:06:30 2:16 5756 10555 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9576 05/08/20 02:06:32 2:15 10555 5468 nxtgenpho no 3587080982063726 310410214827503 APPLE IDMONZ8 9577 05/08/20 02:08:47 18:24 68368 11439 nxtgenpho no 3587080982063726 310410214827503 APPLE IDMONZ8 9578 05/08/20 02:27:10 0:58 5222 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9579 05/08/20 02:27:12 0:57 6023 4934 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9580 05/08/20 02:28:09 2:10 5390 6809 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9581 05/08/20 02:28:10 2:10 6809 5102 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 396 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003040 PsiTn iliAL not for general distribution. EF-EA_00117116 EFTA01251640 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. tr'`saos AT&T Run Data: Run Tuna: Data Osage For: Itea Conn. Data 06/17/2020 Conn. Originating ET Time Number /OTC) Bytes UP Byte. Apn Dn INDI ISIS I teal NICOLL 9582 05/08/20 02:30:20 24:25 10926 15007 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 9583 05/08/20 02:32:34 14:39 5212 1712 ims 3587080982063726 310410214827503 APPLE 'PHONES 9584 05/08/20 02:47:12 0:46 81196 4612 ims 3587080982063726 310410214827503 APPLE 'PHONES 9585 05/08/20 02:47:13 0:45 12268 4612 ims 3587080982063726 310410214827503 APPLE 'PHONES 9586 05/08/20 02:47:58 60:00 13476 4516 ims 3587080982063726 310410214827503 APPLE 'PHONES 9587 05/08/20 02:54:44 2:04 5116 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9588 05/08/20 02:54:46 2:03 6023 4828 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9589 05/08/20 02:56:49 11:48 6438 5421 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 9590 05/08/20 03:08:37 30:00 19917 31074 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9591 05/08/20 03:08:38 60:00 60066 41117 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9592 05/08/20 03:38:37 34:47 20279 28992 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9593 05/08/20 03:47:58 60:00 10440 4396 ims 3587080982063726 310410214827503 APPLE !PHONES 9594 05/08/20 04:08:38 4:47 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9595 05/08/20 04:13:25 0:05 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9596 05/08/20 04:14:06 31:48 12865 13586 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9597 05/08/20 04:14:07 31:48 13586 13207 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9598 05/08/20 04:45:55 8:47 5218 6021 nxtgenpho no 3587080982063726 310410214827503 APPLE 'PHONES 9599 05/08/20 04:45:56 8:47 6021 4930 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9600 05/08/20 04:47:58 60:00 6816 2788 ims 3587080982063726 310410214827503 APPLE !PHONES 9601 05/08/20 04:54:42 2:13 5221 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9602 05/08/20 04:54:43 2:13 6023 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9603 05/08/20 04:56:56 1:09 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9604 05/08/20 04:58:04 8:22 5693 6287 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003041 NsTroliAL not for general distribution. Page 397 EF-EA_O0117II7 EFTA01251641 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 1S:56:33 Conn. Originating Time Number (OTC) ET Bytes Up Byte. Apn On IN= Mal MARC Men 9605 05/08/20 04:58:05 8:22 6287 5309 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9606 05/08/20 05:06:27 0:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9607 05/08/20 05:06:35 7:56 7497 5174 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9608 05/08/20 05:14:30 2:05 5281 6135 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9609 05/08/20 05:14:31 2:05 6135 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9610 05/08/20 05:16:36 11:35 6280 5129 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9611 05/08/20 05:28:10 21:08 7354 7176 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9612 05/08/20 05:28:11 21:08 7176 7066 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9613 05/08/20 05:47:58 60:00 8388 2928 ins 3587080982063726 310410214827503 APPLE DRONES 9614 05/08/20 05:49:19 1:18 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9615 05/08/20 05:50:37 31:28 5763 6786 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9616 05/08/20 05:50:38 31:28 6786 5475 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9617 05/08/20 06:22:06 1:37 6127 4961 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9618 05/08/20 06:23:42 5:38 5281 6083 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9619 05/08/20 06:23:44 5:37 6083 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9620 05/08/20 06:29:21 1:05 0 0 nxtgonpho no 3587080982063726 310410214827503 APPLE DRONES 9621 05/08/20 06:30:26 2:09 5220 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE 'PHONES 9622 05/08/20 06:30:27 2:09 6023 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9623 05/08/20 06:32:36 4:27 7561 5279 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9624 05/08/20 06:37:02 7:25 5218 6073 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9625 05/08/20 06:37:03 7:25 6073 4930 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 398 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003042 not for general distribution. EF-EA_O0117II8 EFTA01251642 MOBILITY The information contained hereleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. 411111, AT&T Run Data: Run Tame: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Time (UTC) Originating ET Dumber Bytes Up Bytom Apn Dn INC' IMISI NAYX 9626 05/08/20 06:42:35 60:00 16895 9156 ime -1 310410214827503 9627 05/08/20 06:44:28 2:03 7497 5071 nxtgenpho no 3587080982063726 310410214827503 APPLE 9628 05/08/20 06:46:30 62:49 31824 36266 nxtgenpho no 3587080982063726 310410214827503 APPLE 9629 05/08/20 06:46:31 60:00 36266 33759 nxtgenpho no 3587080982063726 310410214827503 APPLE 9630 05/08/20 06:47:58 60:00 0 0 vas 3587080982063726 310410214827503 APPLE 9631 05/08/20 07:42:35 60:00 6924 2864 vas -1 310410214827503 9632 05/08/20 07:46:31 2:49 0 0 nxtgenpho no 3587080982063726 310410214827503 APPLE 9633 05/08/20 07:47:58 60:00 0 0 imo 3587080982063726 310410214827503 APPLE 9634 05/08/20 07:49:20 0:41 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 9635 05/08/20 07:50:01 167:40 10826 10753 nxtgenpho no 3587080982063726 310410214827503 APPLE 9636 05/08/20 07:50:02 60:00 7500 6508 nxtgenpho no 3587080982063726 310410214827503 APPLE 9637 05/08/20 08:42:35 60:00 6816 2648 imo -1 310410214827503 9638 05/08/20 08:47:58 60:00 0 0 imp 3587080982063726 310410214827503 APPLE 9639 05/08/20 08:50:02 60:00 1936 2665 nxtgenpho no 3587080982063726 310410214827503 APPLE 9640 05/08/20 09:42:35 60:00 15048 4716 imo -1 310410214827503 9641 05/08/20 09:47:58 39:56 0 0 imp 3587080982063726 310410214827503 APPLE 9642 05/08/20 09:50:02 47:40 1317 1365 nxtgenpho no 3587080982063726 310410214827503 APPLE 9643 05/08/20 10:37:42 1:45 0 Oruftgenpho no 3587080982063726 310410214827503 APPLE 9644 05/08/20 10:39:27 31:40 8578 7724 nxtgenpho no 3587080982063726 310410214827503 APPLE 9645 05/08/20 10:39:28 31:40 7724 8290 nxtgenpho no 3587080982063726 310410214827503 APPLE 9646 05/08/20 10:42:35 60:00 10332 4364 imo -1 310410214827503 9647 05/08/20 11:11:08 1:34 10196 5575 nxtgenpho no 3587080982063726 310410214827503 APPLE 9648 05/08/20 11:12:42 1:21 5280 6115 nxtgenpho no 3587080982063726 310410214827503 APPLE 9649 05/08/20 11:12:43 1:21 6115 4992 nxtgenpho no 3587080982063726 310410214827503 APPLE MODEL IPHONEB IPHONEB IPHONEB !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PRONGS !PHONES !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 399 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003043 NsTroliAL not for general distribution. EF-EA_O0117II9 EFTA01251643 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. AT&T Run Data: Run Tima: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes OP Byte. Apn Dn Tier IMBI N1110: 9650 05/08/20 11:14:04 34:04 13305 14294 nxtgonpho no 3587080982063726 310410214827503 APPLE 9651 05/08/20 11:14:05 34:04 14294 12921 nxtgonpho no 3587080982063726 310410214827503 APPLE 9652 05/08/20 11:42:35 60:00 8496 2896 imo -1 310410214827503 9653 05/08/20 11:48:09 1:31 48 0 nxtgonpho no 3587080982063726 310410214827503 APPLE 9654 05/08/20 11:49:40 19:07 10373 11970 nxtgonpho no 3587080982063726 310410214827503 APPLE 9655 05/08/20 11:49:41 19:07 11970 9989 nxtgonpho no 3587080982063726 310410214827503 APPLE 9656 05/08/20 12:08:48 1:33 6055 4901 nxtgonpho no 3587080982063726 310410214827503 APPLE 9657 05/08/20 12:10:20 9:02 11593 25083 nxtgonpho no 3587080982063726 310410214827503 APPLE 9658 05/08/20 12:10:22 9:01 25083 11305 nxtgonpho no 3587080982063726 310410214827503 APPLE 9659 05/08/20 12:19:23 0:53 6873 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE 9660 05/08/20 12:20:16 11:32 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 9661 05/08/20 12:20:17 11:32 6055 5879 nxtgonpho no 3587080982063726 310410214827503 APPLE 9662 05/08/20 12:31:48 2:10 14672 7357 nxtgonpho no 3587080982063726 310410214827503 APPLE 9663 05/08/20 12:31:50 2:10 7357 14384 nxtgonpho no 3587080982063726 310410214827503 APPLE 9664 05/08/20 12:33:59 1:04 0 Onxtgonpho no 3587080982063726 310410214827503 APPLE 9665 05/08/20 12:35:02 2:29 5317 6103 nxtgonpho no 3587080982063726 310410214827503 APPLE 9666 05/08/20 12:35:03 2:29 6103 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 9667 05/08/20 12:37:32 28:47 8821 7077 nxtgonpho no 3587080982063726 310410214827503 APPLE 9668 05/08/20 12:42:35 60:00 7032 2896 imo -1 310410214827503 9669 05/08/20 13:06:18 2:05 5284 6873 nxtgonpho no 3587080982063726 310410214827503 APPLE 9670 05/08/20 13:06:20 2:04 6873 4996 nxtgonpho no 3587080982063726 310410214827503 APPLE NICOLL IrMONE8 INIONE8 INIONZ8 INIONE8 INIONE8 INIONE8 INIONE8 !PHONES !PHONES INIONE8 !PHONES !PHONES INIONE8 INIONE8 INIONE8 INIONE8 INIONE8 INIONZ8 INIONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003044 NTniiiikE not for general distribution. Page 400 EFTA 00117120 EFTA01251644 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. AT&T Run Date: Run Time: Data Osage for: Item Conn. Date 06/17/2020 18:56:35 Conn. Originating 2T Time Number (OTC) Bytes Up Bytoa Apn Dn INEI ISIS I MARL 9671 05/08/20 13:08:24 6:21 7593 5278 nxtgenpho no 3587080982063726 310410214827503 APPLE 9672 05/08/20 13:14:44 2:03 5221 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 9673 05/08/20 13:14:45 2:04 6107 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE 9674 05/08/20 13:16:48 6:55 7529 5070 nxtgonpho no 3587080982063726 310410214827503 APPLE 9675 05/08/20 13:23:42 2:04 5220 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 9676 05/08/20 13:23:44 2:03 6055 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE 9677 05/08/20 13:25:47 40:34 10151 10282 nxtgonpho no 3587080982063726 310410214827503 APPLE 9678 05/08/20 13:42:35 60:00 18996 8952 ins -1 310410214827503 9679 05/08/20 14:06:20 13:50 5547 7806 nxtgonpho no 3587080982063726 310410214827503 APPLE 9680 05/08/20 14:06:21 13:50 7806 5259 nxtgonpho no 3587080982063726 310410214827503 APPLE 9681 05/08/20 14:20:11 0:59 7527 5172 nxtgonpho no 3587080982063726 310410214827503 APPLE 9682 05/08/20 14:21:09 8:19 12360 13253 nxtgonpho no 3587080982063726 310410214827503 APPLE 9683 05/08/20 14:21:10 8:19 13253 11976 nxtgonpho no 3587080982063726 310410214827503 APPLE 9684 05/08/20 14:29:25 60:00 7851347 10301018 ims -1 310410214827503 9685 05/08/20 14:29:29 0:57 7465 5279 nxtgonpho no 3587080982063726 310410214827503 APPLE 9686 05/08/20 14:30:25 2:04 5220 6107 nxtgonpho no 3587080982063726 310410214827503 APPLE 9687 05/08/20 14:30:26 2:04. 6107 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE 9688 05/08/20 14:32:30 6:00 6873 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE 9689 05/08/20 14:38:29 2:04 5222 6055 nxtgonpho no 3587080982063726 310410214827503 APPLE 9690 05/08/20 14:38:30 2:04 6055 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE 9691 05/08/20 14:40:34 4:43 8279 5598 nxtgonpho no 3587080982063726 310410214827503 APPLE 9692 05/08/20 14:42:35 60:00 6816 2648 mos 310410214827503 NICOLL IPM0NE8 IPM0NE8 !PHONES !PHONES 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 !PHONES !PHONES 1PRONZ8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 401 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003045 Ns tit not for general distribution. EFTA 00117121 EFTA01251645 MOBILITY The information contained her is (UTC) 9693 05/08/20 14:45:16 0:23 5221 6055 nxtgenpho no 3587080982063726 310410214827503 9694 05/08/20 14:45:17 0:23 6055 4933 nxtgenpho no 3587080982063726 310410214827503 9695 05/08/20 14:45:40 4:32 9812 7503 nxtgenpho no 3587080982063726 310410214827503 9696 05/08/20 14:50:11 3:29 12904 13820 nxtgenpho no 3587080982063726 310410214827503 9697 05/08/20 14:50:12 3:29 13820 12520 nxtgenpho no 3587080982063726 310410214827503 9698 05/08/20 14:53:40 2:12 5877 6567 nxtgenpho no 3587080982063726 310410214827503 9699 05/08/20 14:53:41 2:12 6567 5589 nxtgenpho no 3587080982063726 310410214827503 9700 05/08/20 14:55:53 4:15 7191 7008 nxtgenpho no 3587080982063726 310410214827503 9701 05/08/20 15:00:07 2:01 288 48 nxtgenpho no 3587080982063726 310410214827503 9702 05/08/20 15:00:08 2:01 48 0 nxtgenpho no 3587080982063726 310410214827503 9703 05/08/20 15:02:09 5:44 96 0 nxtgenpho no 3587080982063726 310410214827503 9704 05/08/20 15:07:52 18:05 13088 13852 nxtgenpho no 3587080982063726 310410214827503 9705 05/08/20 15:07:53 18:05 13852 12608 nxtgenpho no 3587080982063726 310410214827503 9706 05/08/20 15:25:58 2:00 6053 4897 nxtgenpho no 3587080982063726 310410214827503 9707 05/08/20 15:27:57 8:31 5220 6055 nxtgenpho no 3587080982063726 310410214827503 9708 05/08/20 15:27:58 8:31 6055 4932 nxtgenpho no 3587080982063726 310410214827503 9709 05/08/20 15:29:25 14:15 1809911 2356871 imo -1 310410214827503 9710 05/08/20 15:36:29 60:00 7209 9021 nxtgenpho no 3587080982063726 310410214827503 9711 05/08/20 15:42:35 60:00 10888 4504 imo -1 310410214827503 9712 05/08/20 16:36:29 2:43 0 0 nxtgenpho no 3587080982063726 310410214827503 9713 05/08/20 16:42:35 60:00 15528 5860 imo -1 310410214827503 9714 05/08/20 17:42:35 18:48 17980 11860 imo -1 310410214827503 9715 05/08/20 17:49:12 0:35 44326 50691 imo -1 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ...„,,,• ••-s`" 1. AT&T Run Date: Run Time: Data Osage For: 06/17/2020 1S:56:33 Item Conn. Conn. Originating ET Bytes Byte. Apn INLI IMSI MARL MOLL Date Time flusher Up Dn APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPROME8 APPLE !PROMS APPLE !PROMS APPLE !PHONES APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE IPHONEB APPLE !PROMS APPLE !PROMS APPLE IPROME8 APPLE !PROMS APPLE !PROMS APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 402 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003046 PsisT ileiNE not for general distribution. EFTA 00117122 EFTA01251646 MOBILITY The information contained heraCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Hurter (OTC) Bytes Up Byte. Dn Apn IMCI INSI NUT 9716 05/08/20 17:58:01 0:45 50425 84329 ims -1 310410214827503 9717 05/08/20 18:03:11 50:57 12884 8789 ims -1 310410214827503 9718 05/08/20 18:49:47 12:20 8547 6445 ims -1 310410214827503 9719 05/08/20 18:57:20 11:41 11453 10143 ims -1 310410214827503 9720 05/08/20 19:35:24 0:01 0 0 ims -1 310410214827503 9721 05/08/20 21:51:29 2:45 14858 9244 ims -1 310410214827503 9722 05/08/20 22:38:15 60:00 8331 6300 ims -1 310410214827503 9723 05/08/20 22:50:07 0:39 756 0 ims -1 310410214827503 9724 05/08/20 23:22:59 47:09 13525 8033 ims -1 310410214827503 9725 05/08/20 23:38:15 39:43 0 0 ims -1 310410214827503 9726 05/09/20 00:10:35 10:15 8313 6829 ims -1 310410214827503 9727 05/09/20 00:17:58 60:00 16443 9470 ims -1 310410214827503 9728 05/09/20 01:17:58 60:00 8496 3004 ims -1 310410214827503 9729 05/09/20 02:17:58 60:00 6924 2756 ims -1 310410214827503 9730 05/09/20 03:17:58 60:00 10176 3252 ims -1 310410214827503 9731 05/09/20 04:17:58 60:00 17008 6200 ims -1 310410214827503 9732 05/09/20 05:17:58 60:00 8820 3112 ims -1 310410214827503 9733 05/09/20 06:17:58 60:00 8496 3112 ims -1 310410214827503 9734 05/09/20 07:17:58 60:00 8620 3128 ims -1 310410214827503 9735 05/09/20 08:17:58 60:00 10332 4080 ims -1 310410214827503 9736 05/09/20 09:17:58 60:00 12120 4484 ims -1 310410214827503 9737 05/09/20 10:17:58 60:00 7140 2772 ims -1 310410214827503 9738 05/09/20 11:17:58 60:00 7032 2988 ims -1 310410214827503 9739 05/09/20 12:17:58 60:00 12904 3716 ims -1 310410214827503 9740 05/09/20 13:17:58 41:31 10068 3252 ims -1 310410214827503 9741 05/09/20 13:50:07 60:00 20336 10029 ims -1 310410214827503 9742 05/09/20 14:50:07 60:00 8620 3036 ims -1 310410214827503 9743 05/09/20 15:50:07 60:00 10284 3300 ims -1 310410214827503 9744 05/09/20 16:50:07 60:00 38404 17840 ims -1 310410214827503 9745 05/09/20 17:19:20 0:23 0 1548 ims -1 310410214827503 9746 05/09/20 17:21:04 60:00 6009 24664 nxtgenpho no -1 310410214827503 9747 05/09/20 17:23:56 2:24 0 0 nxtgonpho no -1 310410214827503 9748 05/09/20 17:50:07 60:00 7032 2896 ims -1 310410214827503 9749 05/09/20 18:21:04 60:00 0 0 nxtgonpho no -1 310410214827503 MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 403 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003047 NaTileikE not for general distribution. EFTA 00117123 EFTA01251647 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41111, tr'`s ao. AT&T Run Date: Run Time: Data Osage For: 06/17/2020 Item Conn. Date Conn. Time (OTC) Originating Number ET Bytes Up 9750 05/09/20 18:50:07 60:00 10548 9751 05/09/20 19:21:04 60:00 0 9752 05/09/20 19:50:07 60:00 7140 9753 05/09/20 20:21:04 60:00 0 9754 05/09/20 20:50:07 60:00 13584 9755 05/09/20 21:21:04 0:38 0 9756 05/09/20 21:50:07 60:00 8512 9757 05/09/20 22:50:07 60:00 8496 9758 05/09/20 23:50:07 60:00 11904 9759 05/10/20 00:50:07 60:00 8200 9760 05/10/20 01:50:07 60:00 15048 9761 05/10/20 02:50:07 60:00 8496 9762 05/10/20 03:50:07 60:00 6816 9763 05/10/20 04:50:07 60:00 13584 9764 05/10/20 05:50:07 60:00 13568 9765 05/10/20 06:50:07 60:00 8496 9766 05/10/20 07:50:07 23:31 0 9767 05/10/20 08:22:53 60:00 16863 9768 05/10/20 09:22:53 60:00 6924 9769 05/10/20 10:22:53 60:00 10068 9770 05/10/20 11:22:53 60:00 10688 9771 05/10/20 12:22:53 60:00 10224 9772 05/10/20 13:22:53 60:00 8928 9773 05/10/20 14:22:53 60:00 6924 9774 05/10/20 15:22:53 60:00 4980 9775 05/10/20 15:36:40 60:00 16705 9776 05/10/20 16:22:53 60:00 0 9777 05/10/20 16:36:40 60:00 10192 9778 05/10/20 17:22:53 60:00 0 9779 05/10/20 17:36:40 60:00 8712 9780 05/10/20 18:22:53 60:00 0 9781 05/10/20 18:36:40 60:00 10548 9782 05/10/20 19:22:53 3:10 0 9783 05/10/20 19:36:40 60:00 9960 Byte. Apn IMZI Dn INSI 4288 ims -1 310410214827503 0 nxtgonpho -1 310410214827503 no 2912 ims -1 310410214827503 0 nxtgonpho -1 310410214827503 no 4964 ims -1 310410214827503 0 nxtgonpho -1 310410214827503 no 3820 ims -1 310410214827503 3036 ims -1 310410214827503 4536 ims -1 310410214827503 2944 ims -1 310410214827503 4872 ims -1 310410214827503 3036 ims -1 310410214827503 2572 ims -1 310410214827503 4568 ims -1 310410214827503 4624 ims -1 310410214827503 3036 ims -1 310410214827503 0 ims -1 310410214827503 10279 ims -1 310410214827503 2648 ims -1 310410214827503 3144 ims -1 310410214827503 4096 ims -1 310410214827503 4256 ims -1 310410214827503 3344 ims -1 310410214827503 2648 ims -1 310410214827503 1572 ims -1 310410214827503 9482 ims -1 310410214827503 0 ims -1 310410214827503 3176 ims -1 310410214827503 0 ims -1 310410214827503 3160 ims -1 310410214827503 0 ims -1 310410214827503 4128 ims -1 310410214827503 0 ims -1 310410214827503 3284 ims -1 310410214827503 MAKE MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 404 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003048 NTniliAL not for general distribution. EFTA 00117124 EFTA01251648 MOBILITY The information contained heraCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tt‘"I°edai . AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:54:39 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Dn Apn flax INS' 9784 05/10/20 20:36:40 60:00 13800 4784 imp -1 310410214827503 9785 05/10/20 21:36:40 60:00 9960 3176 imp -1 310410214827503 9786 05/10/20 22:36:40 60:00 13616 4764 imp -1 310410214827503 9787 05/10/20 23:36:40 60:00 8604 3036 ims -1 310410214827503 9788 05/11/20 00:36:40 60:00 10284 3316 ims -1 310410214827503 9789 05/11/20 01:36:40 60:00 13584 4784 ims -1 310410214827503 9790 05/11/20 02:36:40 60:00 15156 4980 ims -1 310410214827503 9791 05/11/20 03:36:40 60:00 8728 3052 imp -1 310410214827503 9792 05/11/20 04:36:40 60:00 8604 3052 imp -1 310410214827503 9793 05/11/20 05:36:40 60:00 11796 4160 imp -1 310410214827503 9794 05/11/20 06:36:40 60:00 10440 4412 imp -1 310410214827503 9795 05/11/20 07:36:40 60:00 7048 2804 imp -1 310410214827503 9796 05/11/20 08:36:40 60:00 6924 2788 imp -1 310410214827503 9797 05/11/20 09:36:40 60:00 13476 4640 imp -1 310410214827503 9798 05/11/20 10:36:40 60:00 8620 3052 imp -1 310410214827503 9799 05/11/20 11:36:40 60:00 12012 4536 imp -1 310410214827503 9800 05/11/20 12:36:40 60:00 10068 3176 imp -1 310410214827503 9801 05/11/20 13:36:40 60:00 48464 27052 imp -1 310410214827503 9802 05/11/20 13:49:35 1:11 145669 197339 imp -1 310410214827503 9803 05/11/20 13:52:12 3:23 239229 740490 imp -1 310410214827503 9804 05/11/20 13:55:40 15:58 2164944 3609137 ins -1 310410214827503 9805 05/11/20 14:36:40 60:00 7048 2804 ims -1 310410214827503 9806 05/11/20 15:36:40 60:00 6816 2680 ims -1 310410214827503 9807 05/11/20 16:36:40 60:00 17116 6248 ims -1 310410214827503 9808 05/11/20 17:36:40 60:00 19144 8356 ims -1 310410214827503 9809 05/11/20 17:47:51 0:16 2771 9322 ims -1 310410214827503 9810 05/11/20 18:36:40 21:04 3500 1340 ins -1 310410214827503 9811 05/11/20 18:57:44 60:00 16779 9324 ins -1 310410214827503 9812 05/11/20 19:57:44 60:00 22580 12624 ins -1 310410214827503 9813 05/11/20 20:27:47 0:34 72748 73285 ins -1 310410214827503 9814 05/11/20 20:57:44 60:00 44500 28904 ins -1 310410214827503 9815 05/11/20 21:18:10 0:36 107625 75049 ins -1 310410214827503 9816 05/11/20 21:38:52 1:23 195183 210003 ins -1 310410214827503 9817 05/11/20 21:51:49 0:33 52635 82246 ins -1 310410214827503 9818 05/11/20 21:57:44 60:00 8496 3004 ins -1 310410214827503 9819 05/11/20 22:57:44 60:00 29488 17128 imp -1 310410214827503 MAKE MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 405 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003049 NeTtAdti not for general distribution. EFTA 00117125 EFTA01251649 MOBILITY The information contained hereelaNyFtit 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run pato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. originating ET Time Number (OTC) Bytes Up Bytom Dn Apn EMI INSI MAKE 9820 05/11/20 23:14:43 0:01 0 0 imp -1 310410214827503 9821 05/11/20 23:14:55 34:02 5303342 7174148 imp -1 310410214827503 9822 05/11/20 23:57:44 60:00 7140 2880 imp -1 310410214827503 9823 05/12/20 00:57:44 60:00 8388 2896 imp -1 310410214827503 9824 05/12/20 01:57:44 60:00 7032 2772 imp -1 310410214827503 9825 05/12/20 02:57:44 60:00 13476 4576 imp -1 310410214827503 9826 05/12/20 03:57:44 60:00 11904 4504 imp -1 310410214827503 9827 05/12/20 04:57:44 60:00 6816 2648 imp -1 310410214827503 9828 05/12/20 05:57:44 60:00 11904 4328 imp -1 310410214827503 9829 05/12/20 06:57:44 60:00 10084 3252 imp -1 310410214827503 9830 05/12/20 07:57:44 60:00 9960 3144 imp -1 310410214827503 9831 05/12/20 08:57:44 60:00 8388 3112 imp -1 310410214827503 9832 05/12/20 09:57:44 60:00 14864 5380 imp -1 310410214827503 9833 05/12/20 10:57:44 60:00 8944 3236 imp -1 310410214827503 9834 05/12/20 11:57:44 60:00 9944 3252 imp -1 310410214827503 9835 05/12/20 12:57:44 60:00 18296 8056 imp -1 310410214827503 9836 05/12/20 13:53:12 0:17 6689 32998 imp -1 310410214827503 9837 05/12/20 13:57:44 60:00 8388 2896 imp -1 310410214827503 9838 05/12/20 14:57:14 60:00 39933 26910 imp -1 310410214827503 9839 05/12/20 14:57:44 3:34 0 0 imp -1 310410214827503 9840 05/12/20 15:01:36 31:03 4731971 5734935 imp -1 310410214827503 9841 05/12/20 15:32:50 20:00 3562355 2678994 imp -1 310410214827503 9842 05/12/20 15:57:14 60:00 29404 16584 imp -1 310410214827503 9843 05/12/20 16:50:26 0:39 3465 25823 imp -1 310410214827503 9844 05/12/20 16:57:14 60:00 10068 3360 imp -1 310410214827503 9845 05/12/20 17:57:14 35:26 16480 10092 imp -1 310410214827503 9846 05/12/20 18:18:43 9:04 1443138 1576561 imp -1 310410214827503 9847 05/12/20 19:10:47 60:00 47016 29960 imp -1 310410214827503 9848 05/12/20 19:13:21 7:37 1221325 1245961 imp -1 310410214827503 9849 05/12/20 19:28:52 0:35 2520 24318 imp -1 310410214827503 9850 05/12/20 20:10:47 60:00 7140 2696 imp -1 310410214827503 9851 05/12/20 21:10:47 60:00 18252 9048 imp -1 310410214827503 9852 05/12/20 22:00:26 28:39 5163431 5326429 imp -1 310410214827503 9853 05/12/20 22:10:47 60:00 9620 3828 imp -1 310410214827503 9854 05/12/20 23:10:47 60:00 8388 2928 imp -1 310410214827503 9855 05/13/20 00:10:47 60:00 16884 6124 isms -1 310410214827503 MODEL AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 406 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003050 NeTifikE not for general distribution. EF-EAJVII7126 EFTA01251650 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:56:39 Conn. Originating ET Time Muster (OTC) Bytes Up Bytom Apn Dn IMEI IMSI MAKE 9856 05/13/20 01:10:47 60:00 8820 3376 ims -1 310410214827503 9857 05/13/20 02:10:47 60:00 8604 3160 ims -1 310410214827503 9858 05/13/20 03:10:47 60:00 8264 3036 ims -1 310410214827503 9859 05/13/20 04:10:47 60:00 8388 2928 ims -1 310410214827503 9860 05/13/20 05:10:47 60:00 10332 4180 ims -1 310410214827503 9861 05/13/20 06:10:47 60:00 6816 2788 ims -1 310410214827503 9862 05/13/20 07:10:47 60:00 13476 4516 ims -1 310410214827503 9863 05/13/20 08:10:47 60:00 9960 3176 ims -1 310410214827503 9864 05/13/20 09:10:47 60:00 9960 3176 ims -1 310410214827503 9865 05/13/20 10:10:47 60:00 13600 4800 ims -1 310410214827503 9866 05/13/20 11:10:47 60:00 11904 4376 ims -1 310410214827503 9867 05/13/20 12:10:47 35:07 4980 1588 Ina -1 310410214827503 9868 05/13/20 12:52:00 60:00 8499 3130 imp -1 310410214827503 9869 05/13/20 12:53:18 6:34 12706 7464 ims -1 310410214827503 9870 05/13/20 13:18:35 42:26 22025 13226 ins -1 310410214827503 9871 05/13/20 13:52:00 9:42 0 0 ins -1 310410214827503 9872 05/13/20 14:01:42 60:00 9627 6820 ins -1 310410214827503 9873 05/13/20 14:18:58 3:27 8813 6685 ins -1 310410214827503 9874 05/13/20 14:25:33 15:55 9972 6620 ins -1 310410214827503 9875 05/13/20 15:01:42 60:00 0 0 ins -1 310410214827503 9876 05/13/20 15:35:00 10:31 10083 8691 ins -1 310410214827503 9877 05/13/20 15:56:38 45:32 393500 1834028 nxtgonpho no 3587080982063726 310410214827503 APPLE 9878 05/13/20 15:56:39 45:31 9362 7137 imp 3587080982063726 310410214827503 APPLE 9879 05/13/20 16:01:42 60:00 0 0 imp -1 310410214827503 9880 05/13/20 16:42:11 12:09 65205 164586ruftgonpho no 3587080982063726 310410214827503 APPLE 9881 05/13/20 16:42:15 12:05 9498 6268 imp 3587080982063726 310410214827503 APPLE 9882 05/13/20 16:54:20 7:20 49260 52602ruftgonpho no 3587080982063726 310410214827503 APPLE 9883 05/13/20 16:54:24 7:16 8458 8094 imp 3587080982063726 310410214827503 APPLE 9884 05/13/20 17:01:39 2:03 606547 71250ruftgonpho no 3587080982063726 310410214827503 APPLE 9885 05/13/20 17:01:40 2:02 6264 6672 imp 3587080982063726 310410214827503 APPLE 9886 05/13/20 17:01:40 2:03 71250 606259ruftgonpho no 3587080982063726 310410214827503 APPLE 9887 05/13/20 17:01:41 2:02 6672 6000 imp 3587080982063726 310410214827503 APPLE 9888 05/13/20 17:01:42 60:00 0 0 imp -1 310410214827503 MODEL !PHONES !PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 407 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003051 WAAL not for general distribution. EFTA 00117127 EFTA01251651 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTE. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41011, tr‘"1° asedi . AT&T Run Data: Run Tame: Data Usage Tor: 06/17/2020 16:56:39 Item Conn. Conn. Date Time Originating ET Number Bytes up Byte. Dn Apn IND I IMSI MARL MODEL (DSC) 9889 05/13/20 17:03:43 1:56 13179 28968 nxtgenpho no 3587080982063726 310410214827503 9890 05/13/20 17:03:45 1:54 6672 5961 ins 3587080982063726 310410214827503 9891 05/13/20 17:05:38 2:11 100510 20424 nxtgenpho no 3587080982063726 310410214827503 9892 05/13/20 17:05:40 2:10 20424 100222 nxtgenpho no 3587080982063726 310410214827503 9893 05/13/20 17:05:40 0:33 6264 6672 1ms 3587080982063726 310410214827503 9894 05/13/20 17:05:41 0:33 6672 6000 ims 3587080982063726 310410214827503 9895 05/13/20 17:06:14 60:00 12600 4624 ins 3587080982063726 310410214827503 9896 05/13/20 17:07:50 59:37 22875 21541 nxtgenpho no 3587080982063726 310410214827503 9897 05/13/20 18:01:42 20:04 0 0 ins -1 310410214827503 9898 05/13/20 18:06:14 60:00 43900 30796 imp 3587080982063726 310410214827503 9899 05/13/20 18:06:34 0:41 8561 16265 imp 3587080982063726 310410214827503 9900 05/13/20 18:07:26 1:22 17957 25429 nxtgenpho no 3587080982063726 310410214827503 9901 05/13/20 18:07:27 1:22 25429 17669 nxtgenpho no 3587080982063726 310410214827503 9902 05/13/20 18:08:11 0:33 2955 21751 imp 3587080982063726 310410214827503 9903 05/13/20 18:08:49 8:23 60185 38597 nxtgenpho no 3587080982063726 310410214827503 9904 05/13/20 18:17:12 15:31 47009 58353 nxtgenpho no 3587080982063726 310410214827503 9905 05/13/20 18:17:13 15:31 58353 48193 nxtgenpho no 3587080982063726 310410214827503 9906 05/13/20 18:32:44 1:40 8690 5271 nxtgenpho no 3587080982063726 310410214827503 9907 05/13/20 18:34:24 2:21 5220 6023 nxtgenpho no 3587080982063726 310410214827503 9908 05/13/20 18:34:25 2:21 6023 4932 nxtgenpho no 3587080982063726 310410214827503 9909 05/13/20 18:36:46 25:53 23000 20545 nxtgenpho no 3587080982063726 310410214827503 9910 05/13/20 19:00:07 15:59 2783683 3628299 ims 3587080982063726 310410214827503 9911 05/13/20 19:02:38 3:44 5221 6023 nxtgenpho no 3587080982063726 310410214827503 9912 05/13/20 19:02:39 3:44 6023 4933 nxtgenpho no 3587080982063726 310410214827503 9913 05/13/20 19:06:14 60:00 45444 30068 ims 3587080982063726 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES Page 408 SDNY_GM_00003052 NeTnAL not for general distribution. EFTA 00117128 EFTA01251652 MOBILITY The information contained hereeeNyFti 2996479 06/17/2020 STET hes queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. AT&T Run Data: Run Time: Data Osage for: Item Conn. Data 06/17/2020 18:56:39 Conn. Time (um) Originating Number ET Bytes Up Byte. Apn Dn IX= IMSI MARS 9914 05/13/20 19:06:23 4:26 7427 7721nAtgonpho no 3587080982063726 310410214827503 APPLE 9915 05/13/20 19:10:48 2:46 5285 7485 nxtgonpho no 3587080982063726 310410214827503 APPLE 9916 05/13/20 19:10:50 2:45 7485 4997 nxtgonpho no 3587080982063726 310410214827503 APPLE 9917 05/13/20 19:13:35 5:07 24911 22059ruftgonpho no 3587080982063726 310410214827503 APPLE 9918 05/13/20 19:18:41 9:54 9332 12593natgonpho no 3587080982063726 310410214827503 APPLE 9919 05/13/20 19:18:42 9:54 12593 8948 nxtgonpho no 3587080982063726 310410214827503 APPLE 9920 05/13/20 19:28:36 4:24 48 Oruftgonpho no 3587080982063726 310410214827503 APPLE 9921 05/13/20 19:33:00 8:20 15805 11150natgonpho no 3587080982063726 310410214827503 APPLE 9922 05/13/20 19:41:19 14:58 7943 7512 nxtgonpho no 3587080982063726 310410214827503 APPLE 9923 05/13/20 19:41:20 14:58 7512 7655 nxtgonpho no 3587080982063726 310410214827503 APPLE 9924 05/13/20 19:52:14 0:35 7654 18341 lam 3587080982063726 310410214827503 APPLE 9925 05/13/20 19:53:00 1:43 347300 148451 imp 3587080982063726 310410214827503 APPLE 9926 05/13/20 19:54:53 4:42 715393 657093 imp 3587080982063726 310410214827503 APPLE 9927 05/13/20 19:56:18 1:02 6023 4900 nxtgonpho no 3587080982063726 310410214827503 APPLE 9928 05/13/20 19:57:19 2:04 6829 7761 nxtgonpho no 3587080982063726 310410214827503 APPLE 9929 05/13/20 19:57:20 2:04 7761 6541 nxtgonpho no 3587080982063726 310410214827503 APPLE 9930 05/13/20 19:59:24 4:50 6023 4902 nxtgonpho no 3587080982063726 310410214827503 APPLE 9931 05/13/20 20:04:13 8:33 5285 6861 nxtgonpho no 3587080982063726 310410214827503 APPLE 9932 05/13/20 20:04:14 8:33 6861 4997 nxtgonpho no 3587080982063726 310410214827503 APPLE 9933 05/13/20 20:06:14 60:00 24416 10216 imp 3587080982063726 310410214827503 APPLE 9934 05/13/20 20:12:47 17:25 7000 6737 nxtgonpho no 3587080982063726 310410214827503 APPLE 9935 05/13/20 20:30:11 2:03 5221 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE MODEL IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES IPHOME8 !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 409 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003053 PsisTiliAL not for general distribution. EF-EAJVII7129 EFTA01251653 MOBILITY The information contained hereCtoNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Tone. AT&T's records are stored and provided in 41111, AT&T Run Onto: Run Time: Data Osage For: 06/17/2020 10:56:40 Item Conn. Conn. Date Time Originating ET Bytes Bytom Apn INEI Number Up Dn INSI MARL MODEL (OTC) 9936 05/13/20 20:30:12 2:04 6023 4933 nxtgonpho no 3587080982063726 310410214827503 9937 05/13/20 20:32:16 25:01 7880 10949ruftgonpho no 3587080982063726 310410214827503 9938 05/13/20 20:57:16 27:33 5747 6549ruftgonpho no 3587080982063726 310410214827503 9939 05/13/20 20:57:17 27:34 6549 5459ructgonpho no 3587080982063726 310410214827503 9940 05/13/20 21:06:14 60:00 23964 12932 imp 3587080982063726 310410214827503 9941 05/13/20 21:24:50 2:03 5221 6075nxtgonpho no 3587080982063726 310410214827503 9942 05/13/20 21:24:51 2:04 6075 4933ruftgonpho no 3587080982063726 310410214827503 9943 05/13/20 21:26:54 0:41 0 Oruftgonpho no 3587080982063726 310410214827503 9944 05/13/20 21:27:35 22:07 14282 21429ruftgonpho no 3587080982063726 310410214827503 9945 05/13/20 21:27:35 22:08 21429 14432ruftgonpho no 3587080982063726 310410214827503 9946 05/13/20 21:35:43 13:54 1755685 2808041 imp 3587080982063726 310410214827503 9947 05/13/20 21:49:43 13:36 7609 5581 nxtgonpho no 3587080982063726 310410214827503 9948 05/13/20 22:03:18 2:32 5217 6021 nxtgonpho no 3587080982063726 310410214827503 9949 05/13/20 22:03:19 2:32 6021 4929ructgonpho no 3587080982063726 310410214827503 9950 05/13/20 22:05:51 2:48 6023 4902ructgonpho no 3587080982063726 310410214827503 9951 05/13/20 22:06:14 60:00 21468 14844 ins 3587080982063726 310410214827503 9952 05/13/20 22:08:38 9:43 15469 23664nxtgonpho no 3587080982063726 310410214827503 9953 05/13/20 22:08:39 9:43 23664 15085ruftgonpho no 3587080982063726 310410214827503 9954 05/13/20 22:14:27 0:31 1716 13333 imp 3587080982063726 310410214827503 9955 05/13/20 22:18:22 9:39 6023 4901 nxtgonpho no 3587080982063726 310410214827503 9956 05/13/20 22:28:00 2:04 5281 6083ruftgonpho no 3587080982063726 310410214827503 9957 05/13/20 22:28:02 2:03 6083 4993ruftgonpho no 3587080982063726 310410214827503 APPLE 1PHONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPM01428 APPLE IPM01428 APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE IPM01428 APPLE IPM01428 APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 410 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003054 NeTniliAL not for general distribution. EF-EA_00117B0 EFTA01251654 MOBILITY The information contained hereelaNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Data 06/17/2020 18:56:40 Conn. Originating Time Number (um) CT Sytes Up Byte. Rpn Dn INII IMSI MARL MOLL 9958 05/13/20 22:30:05 10:06 6023 5426 nxtgenpho no 3587080982063726 310410214827503 APPLE IPHONEB 9959 05/13/20 22:40:10 9:15 11579 12144 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 9960 05/13/20 22:40:11 9:15 12144 23142 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9961 05/13/20 22:49:26 13:19 9791 10331 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9962 05/13/20 23:02:44 1:28 5222 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 9963 05/13/20 23:02:45 1:28 6023 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9964 05/13/20 23:04:13 0:58 7497 5069 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9965 05/13/20 23:05:10 1:28 5281 6083 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9966 05/13/20 23:05:11 1:28 6083 4993 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9967 05/13/20 23:06:14 60:00 36632 24340 imp 3587080982063726 310410214827503 APPLE !PHONES 9968 05/13/20 23:06:39 1:54 5221 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9969 05/13/20 23:06:40 1:54 6023 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9970 05/13/20 23:08:34 4:12 0 Oruftgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9971 05/13/20 23:12:45 44:14 21498 20865 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 9972 05/13/20 23:12:46 44:14 20865 22350 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 9973 05/13/20 23:53:50 0:21 0 320 imp 3587080982063726 310410214827503 APPLE IPHONEB 9974 05/13/20 23:54:25 17:49 3771531 2831879 imp 3587080982063726 310410214827503 APPLE IPHONEB 9975 05/13/20 23:57:00 1:16 144 Oruftgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 9976 05/13/20 23:58:15 8:27 5655 6277 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB 9977 05/13/20 23:58:16 8:27 6277 5367 nxtgonpho no 3587080982063726 310410214827503 APPLE !PRONGS 9978 05/14/20 00:06:14 60:00 11388 4816 in 3587080982063726 310410214827503 APPLE !PHONES 9979 05/14/20 00:06:43 10:00 7433 4862 nxtgonpho 3587080982063726 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 411 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003055 not for general distribution. EF-EA_00117131 EFTA01251655 MOBILITY The information contained heraleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. tr‘illie ija AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 18:56:40 Conn. Originating Time Number (OTC) ET Bytes UP Byte. Apn Dn INC' DWI MARL MOLL 9980 05/14/20 00:16:43 18:20 21067 27689 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 9981 05/14/20 00:16:44 18:20 27689 20395 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 9982 05/14/20 00:35:04 13:48 11671 8396 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9983 05/14/20 00:48:51 5:26 5221 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9984 05/14/20 00:48:52 5:26 6023 4933 nxtgenpho no 3587080982063726 310410214827503 APPLE IPMONE8 9985 05/14/20 00:54:18 8:51 20350 15479 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9986 05/14/20 01:03:09 16:50 17565 25729 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9987 05/14/20 01:03:10 16:51 25729 18921 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9988 05/14/20 01:06:14 60:00 6848 2788 ims 3587080982063726 310410214827503 APPLE DRONES 9989 05/14/20 01:20:01 52:26 8594 6951 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 9990 05/14/20 02:06:14 60:00 7296 2804 ims 3587080982063726 310410214827503 APPLE !PHONES 9991 05/14/20 02:12:26 5:08 4667 6279 nxtgenpho no 3587080982063726 310410214827503 APPLE !PROMS 9992 05/14/20 02:12:27 5:09 6279 4379 nxtgenpho no 3587080982063726 310410214827503 APPLE DRONES 9993 05/14/20 02:17:35 6:25 7561 5386 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9994 05/14/20 02:24:00 11:37 20803 21713 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9995 05/14/20 02:24:01 11:37 21713 21460 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9996 05/14/20 02:35:38 44:50 6786 6370 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9997 05/14/20 03:06:14 60:00 12136 4876 ims 3587080982063726 310410214827503 APPLE !PHONES 9998 05/14/20 03:20:27 2:04 5220 6007 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 9999 05/14/20 03:20:29 2:03 6007 4932 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES 10000 05/14/20 03:22:32 5:23 7557 5130 nxtgenpho no 3587080982063726 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 412 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003056 NsFYNE not for general distribution. EFTA 00117132 EFTA01251656 The information contained here(E:IEDLISSiyf::ti 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 4110. ....„,0 %--s`a. AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 OM= Item Conn. Date Conn. Originating ET Time Number (UTC) Bytes Up Bytaa Apn Dn INLI INBI 10001 05/14/20 03:27:54 2:04 5222 6023 nxtgenpho no 3587080982063726 310410214827503 10002 05/14/20 03:27:56 2:03 6023 4934 nxtgenpho no 3587080982063726 310410214827503 10003 05/14/20 03:29:59 50:20 13313 13297 nxtgenpho no 3587080982063726 310410214827503 10004 05/14/20 04:06:14 60:00 12724 5088 imp 3587080982063726 310410214827503 10005 05/14/20 04:20:20 7:37 12722 10767 nxtgenpho no 3587080982063726 310410214827503 10006 05/14/20 04:27:56 29:08 6790 7051 nxtgenpho no 3587080982063726 310410214827503 10007 05/14/20 04:27:57 29:08 7051 6502 nxtgenpho no 3587080982063726 310410214827503 10008 05/14/20 04:57:05 46:49 6705 7317 nxtgenpho no 3587080982063726 310410214827503 10009 05/14/20 04:57:06 46:49 7317 6417 nxtgenpho no 3587080982063726 310410214827503 10010 05/14/20 05:06:14 60:00 6848 2896 imp 3587080982063726 310410214827503 10011 05/14/20 05:43:55 14:31 12748 10885 nxtgenpho no 3587080982063726 310410214827503 10012 05/14/20 05:58:25 8:29 5216 6021 nxtgenpho no 3587080982063726 310410214827503 10013 05/14/20 05:58:26 8:29 6021 4928 nxtgenpho no 3587080982063726 310410214827503 10014 05/14/20 06:06:14 60:00 6956 2804 imp 3587080982063726 310410214827503 10015 05/14/20 06:06:55 16:01 12408 10814 nxtgenpho no 3587080982063726 310410214827503 10016 05/14/20 06:22:55 8:31 5216 6021 nxtgenpho no 3587080982063726 310410214827503 10017 05/14/20 06:22:57 8:31 6021 4928 nxtgenpho no 3587080982063726 310410214827503 10018 05/14/20 06:31:27 60:00 7369 5962 nxtgenpho no 3587080982063726 310410214827503 10019 05/14/20 07:06:14 60:00 6848 2788 imp 3587080982063726 310410214827503 10020 05/14/20 07:31:27 15:12 6897 6806 nxtgenpho no 3587080982063726 310410214827503 10021 05/14/20 07:46:38 2:06 5221 6023 nxtgenpho no 3587080982063726 310410214827503 10022 05/14/20 07:46:39 2:06 6023 4933 nxtgenpho no 3587080982063726 310410214827503 MARL MODEL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PRO1428 APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 1PRO1428 APPLE DRONES APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 413 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003057 PsiTifikE not for general distribution. EF-EA_00117133 EFTA01251657 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 18:56:40 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn IND I INSI MARL 10023 05/14/20 07:48:45 60:00 7445 6573 ructgenpho no 3587080982063726 310410214827503 APPLE 10024 05/14/20 08:06:14 60:00 13804 5628 ims 3587080982063726 310410214827503 APPLE 10025 05/14/20 08:48:45 60:00 578 630 ructgenpho no 3587080982063726 310410214827503 APPLE 10026 05/14/20 09:06:14 60:00 13884 10376 ims 3587080982063726 310410214827503 APPLE 10027 05/14/20 09:48:45 60:00 462 420 ructgenpho no 3587080982063726 310410214827503 APPLE 10028 05/14/20 10:06:14 60:00 11596 4268 ims 3587080982063726 310410214827503 APPLE 10029 05/14/20 10:48:45 60:00 462 420 ructgenpho no 3587080982063726 310410214827503 APPLE 10030 05/14/20 11:06:14 60:00 8712 3252 ins 3587080982063726 310410214827503 APPLE 10031 05/14/20 11:48:45 3:48 4336 430 ructgenpho no 3587080982063726 310410214827503 APPLE 10032 05/14/20 11:52:32 2:34 5220 6023 ructgenpho no 3587080982063726 310410214827503 APPLE 10033 05/14/20 11:52:34 2:33 6023 4932 ructgenpho no 3587080982063726 310410214827503 APPLE 10034 05/14/20 11:55:07 14:25 8624 5163 ructgenpho no 3587080982063726 310410214827503 APPLE 10035 05/14/20 12:06:14 60:00 8496 3036 ims 3587080982063726 310410214827503 APPLE 10036 05/14/20 12:09:31 113:12 50089 60693 ructgenpho no 3587080982063726 310410214827503 APPLE 10037 05/14/20 12:09:32 60:00 45066 34789 ructgenpho no 3587080982063726 310410214827503 APPLE 10038 05/14/20 13:06:14 60:00 15560 6092 ims 3587080982063726 310410214827503 APPLE 10039 05/14/20 13:09:32 53:12 15627 14820 ructgenpho no 3587080982063726 310410214827503 APPLE 10040 05/14/20 14:02:44 2:57 6083 4962 ructgenpho no 3587080982063726 310410214827503 APPLE 10041 05/14/20 14:05:41 1:51 7497 5070 ructgenpho no 3587080982063726 310410214827503 APPLE 10042 05/14/20 14:06:14 51:24 33888 22164 ims 3587080982063726 310410214827503 APPLE 10043 05/14/20 14:07:31 8:46 5220 6023 ructgenpho no 3587080982063726 310410214827503 APPLE 10044 05/14/20 14:07:33 8:45 6023 4932 ructgenpho no 3587080982063726 310410214827503 APPLE 10045 05/14/20 14:16:18 7:00 7433 4966 ructgenpho no 3587080982063726 310410214827503 APPLE 10046 05/14/20 14:23:17 2:21 5216 6073 ructgenpho no 3587080982063726 310410214827503 APPLE MODEL DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003058 NTifikE not for general distribution. Page 414 EF-EA_00117134 EFTA01251658 MOBILITY The information contained hereCteNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 411111, ...,,,sf •--s`' AT&T Run pato: Run Tama: Data Usage For: Item Conn. Dote 06/17/2020 18:56:40 Conn. Time (OTC) originating Number ET Bytes UP Byte. Apn Dn ItCEI INSI MARL NICOLL 10047 05/14/20 14:23:19 2:20 6073 4928 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 10048 05/14/20 14:25:39 14:20 6246 5001 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 10049 05/14/20 14:39:07 0:32 8014 14652 ism 3587080982063726 310410214827503 APPLE IPROME8 10050 05/14/20 14:39:40 0:09 0 0 ism 3587080982063726 310410214827503 APPLE IPROME8 10051 05/14/20 14:40:00 1:36 7561 5175 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 10052 05/14/20 14:41:36 2:04 5221 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 10053 05/14/20 14:41:37 2:04 6023 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 10054 05/14/20 14:43:41 1:37 6809 4965 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 10055 05/14/20 14:45:17 3:32 5221 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 10056 05/14/20 14:45:19 3:31 6023 4933 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 10057 05/14/20 14:48:50 1:23 6075 4901 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 10058 05/14/20 14:50:12 2:27 5286 6809 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 10059 05/14/20 14:50:13 2:27 6809 4998 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 10060 05/14/20 14:52:40 12:20 6113 6930 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 10061 05/14/20 14:52:41 12:20 6930 5825 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHOME8 10062 05/14/20 14:55:12 9:48 6333 6716 imp 3587080982063726 310410214827503 APPLE !PHONES 10063 05/14/20 14:55:13 9:48 6648 6069 imp 3587080982063726 310410214827503 APPLE !PHONES 10064 05/14/20 14:58:25 60:00 30734 16158 imp -1 310410214827503 10065 05/14/20 15:05:01 13:57 6930 6517 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 10066 05/14/20 15:18:57 2:04 5220 6075 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 10067 05/14/20 15:18:58 2:04 6075 4932 nxtgonpho no 3587080982063726 310410214827503 APPLE !PHONES 10068 05/14/20 15:21:02 2:05 7495 5067 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 10069 05/14/20 15:23:06 2:03 5221 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003059 not for general distribution. Page 415 EF-EA_00117135 EFTA01251659 The information contained hereCtoNfti MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm %---st `a. AT&T Time Tone. AT&T's records are stored and provided in Run Date: Run Time: Data Usage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating ET Bytes Bytom Apn INF' Number Up Dn INSI MARL NICOLL 10070 05/14/20 15:23:07 2:03 6023 4933 nxtgonpho no 3587080982063726 310410214827503 10071 05/14/20 15:25:10 13:32 6376 5321 nxtgonpho no 3587080982063726 310410214827503 10072 05/14/20 15:38:41 9:28 10473 13600 nxtgonpho no 3587080982063726 310410214827503 10073 05/14/20 15:38:42 9:28 13600 10089 nxtgonpho no 3587080982063726 310410214827503 10074 05/14/20 15:48:10 3:28 96 Oruftgonpho no 3587080982063726 310410214827503 10075 05/14/20 15:51:37 0:58 4609 5791 nxtgonpho no 3587080982063726 310410214827503 10076 05/14/20 15:51:38 0:58 5791 4321 nxtgonpho no 3587080982063726 310410214827503 10077 05/14/20 15:52:36 1:05 6023 4901 nxtgonpho no 3587080982063726 310410214827503 10078 05/14/20 15:52:36 1:16 226451 122799 ims -1 310410214827503 10079 05/14/20 15:53:40 1:25 5344 6897 nxtgonpho no 3587080982063726 310410214827503 10080 05/14/20 15:53:42 1:25 6897 5056 nxtgonpho no 3587080982063726 310410214827503 10081 05/14/20 15:55:06 6:11 22403 27200 nxtgonpho no 3587080982063726 310410214827503 10082 05/14/20 15:55:07 6:11 27200 22115 nxtgonpho no 3587080982063726 310410214827503 10083 05/14/20 15:58:25 60:00 16828 10328 ims -1 310410214827503 10084 05/14/20 16:01:18 1:33 48 Oruftgonpho no 3587080982063726 310410214827503 10085 05/14/20 16:02:50 2:08 5218 6005 nxtgonpho no 3587080982063726 310410214827503 10086 05/14/20 16:02:52 2:07 6005 4930 nxtgonpho no 3587080982063726 310410214827503 10087 05/14/20 16:04:59 10:57 7722 5332 nxtgonpho no 3587080982063726 310410214827503 10088 05/14/20 16:15:04 1:04 119248 182985 ims -1 310410214827503 10089 05/14/20 16:15:55 2:03 5116 6023 nxtgonpho no 3587080982063726 310410214827503 10090 05/14/20 16:15:56 2:03 6023 4828 nxtgonpho no 3587080982063726 310410214827503 10091 05/14/20 16:17:59 60:00 15324 19803 nxtgonpho no 3587080982063726 310410214827503 APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 416 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003060 NTrifikE not for general distribution. EF-EA_00117B6 EFTA01251660 MOBILITY The information contained hore(34E:)LISSiyf::ti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 411., AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 18:56:40 Item Conn. Conn. Data Time (OTC) Originating ET Number Bytes UP 10092 05/14/20 16:58:25 60:00 24724 10093 05/14/20 17:17:59 3:26 0 10094 05/14/20 17:20:39 8:52 2110819 10095 05/14/20 17:21:25 6:26 6809 10096 05/14/20 17:27:50 2:17 5118 10097 05/14/20 17:27:51 2:17 6023 10098 05/14/20 17:30:08 0:43 0 10099 05/14/20 17:30:50 27:31 18508 10100 05/14/20 17:30:51 27:31 17937 10101 05/14/20 17:58:22 17:27 7046 10102 05/14/20 17:58:25 60:00 18260 10103 05/14/20 18:14:41 1:36 331361 10104 05/14/20 18:15:48 2:10 5217 10105 05/14/20 18:15:49 2:10 6005 10106 05/14/20 18:17:59 60:00 7833 10107 05/14/20 18:58:25 60:00 20208 10108 05/14/20 19:17:59 60:00 2345 10109 05/14/20 19:40:52 0:22 0 10110 05/14/20 19:58:25 60:00 13676 10111 05/14/20 20:17:59 21:44 223028 10112 05/14/20 20:39:43 9:06 6162 10113 05/14/20 20:39:44 9:06 6461 10114 05/14/20 20:48:50 15:56 8459 10115 05/14/20 20:58:25 60:00 6832 Byte. Dn Apn INZI 20656 ims -1 0 nxtgonpho 3587080982063726 no 1091819 ims -1 4964 nxtgonpho 3587080982063726 no 6023 nxtgonpho 3587080982063726 no 4830 nxtgonpho 3587080982063726 no 0 nxtgonpho 3587080982063726 no 17937 nxtgonpho 3587080982063726 no 18124 nxtgonpho 3587080982063726 no 5226 nxtgonpho 3587080982063726 no 9032 ims -1 211069 ims -1 6005 nxtgonpho 3587080982063726 no 4929 nxtgonpho 3587080982063726 no 7427 nxtgonpho 3587080982063726 no 10192 ims -1 1382 nxtgonpho 3587080982063726 no 4126 ims -1 4752 ims -1 308863 nxtgonpho 3587080982063726 no 6461 nxtgonpho 3587080982063726 no 5874 nxtgonpho 3587080982063726 no 6466 nxtgonpho 3587080982063726 no 2648 ims -1 INSI MARL NICOLL 310410214827503 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE IPHOME8 310410214827503 310410214827503 310410214827503 APPLE 1PHONZ8 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE !PHONES 310410214827503 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003061 NTntAlt not for general distribution. Page 417 EFTA_OOI 17137 EFTA01251661 MOBILITY The information contained heraCtoNyFtit 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. .... •--set a f AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 16:56:41 Conn. Originating ET Time NUmbor (UTC) Bytes Up Bytes Apn Dn INC' INSI MARL 10116 05/14/20 21:04:45 2:04 5222 6023 nxtgonpho no 3587080982063726 310410214827503 APPLE 10117 05/14/20 21:04:46 2:04 6023 4934 nxtgonpho no 3587080982063726 310410214827503 APPLE 10118 05/14/20 21:06:50 23:54 8201 5670 nxtgonpho no 3587080982063726 310410214827503 APPLE 10119 05/14/20 21:30:43 3:11 288 48 nxtgenpho no 3587080982063726 310410214827503 APPLE 10120 05/14/20 21:30:45 3:10 48 Onatgenpho no 3587080982063726 310410214827503 APPLE 10121 05/14/20 21:33:55 5:59 6023 4900 nxtgonpho no 3587080982063726 310410214827503 APPLE 10122 05/14/20 21:39:53 2:03 5116 6075 nxtgonpho no 3587080982063726 310410214827503 APPLE 10123 05/14/20 21:39:54 2:03 6075 4828 nxtgonpho no 3587080982063726 310410214827503 APPLE 10124 05/14/20 21:41:57 60:00 7988 11134 nxtgonpho no 3587080982063726 310410214827503 APPLE 10125 05/14/20 21:58:25 60:00 11920 4560 ims -1 310410214827503 10126 05/14/20 22:41:57 56:13 1033 840 nxtgenpho no 3587080982063726 310410214827503 APPLE 10127 05/14/20 22:58:25 60:00 7064 2864 ims -1 310410214827503 10128 05/14/20 23:38:09 2:03 5117 6023 nxtgenpho no 3587080982063726 310410214827503 APPLE 10129 05/14/20 23:38:10 2:03 6023 4829 nxtgonpho no 3587080982063726 310410214827503 APPLE 10130 05/14/20 23:40:13 60:00 12030 11587 nxtgenpho no 3587080982063726 310410214827503 APPLE 10131 05/14/20 23:58:25 60:00 6848 2756 ims -1 310410214827503 10132 05/15/20 00:40:13 60:00 2207 8559 nxtgenpho no 3587080982063726 310410214827503 APPLE 10133 05/15/20 00:58:25 60:00 10164 3268 ims -1 310410214827503 10134 05/15/20 01:40:13 28:34 462 420 nxtgenpho no 3587080982063726 310410214827503 APPLE 10135 05/15/20 01:58:25 60:00 16992 6400 ims -1 310410214827503 10136 05/15/20 02:08:46 90:00 6944 8254 nxtgonpho no 3587080982063726 310410214827503 APPLE 10137 05/15/20 02:08:47 60:00 7965 6341 nxtgenpho no 3587080982063726 310410214827503 APPLE 10138 05/15/20 02:58:25 60:00 8604 2896 ims -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES 'PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 418 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003062 PsiTi fikE not for general distribution. EF-EA_00117138 EFTA01251662 NOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, ....„.• ••-a` -'s AT&T Run Data: Run Time: Data Usage For: 06/17/2020 18:56:41 Item Conn. Data Conn. Originating ET Time Number (UTC) Bytes Up Bytom Apn On IN= INBI 10139 05/15/20 03:08:47 60:00 578 630 nxtgenpho no 3587080982063726 310410214827503 10140 05/15/20 03:38:46 155:54 5970 2590 nxtgonpho no 3587080982063726 310410214827503 10141 05/15/20 03:58:25 60:00 6956 2648 ims -1 310410214827503 10142 05/15/20 04:08:47 60:00 578 630 nxtgonpho no 3587080982063726 310410214827503 10143 05/15/20 04:58:25 60:00 11920 4436 ims -1 310410214827503 10144 05/15/20 05:08:47 60:00 1591 4868nxtgonpho no 3587080982063726 310410214827503 10145 05/15/20 05:58:25 16:16 4748 2084 ims -1 310410214827503 10146 05/15/20 06:08:47 5:54 132 157nxtgonpho no 3587080982063726 310410214827503 10147 05/15/20 06:20:04 2:14 14047 25126nxtgonpho no 3587080982063727 310410214827503 10148 05/15/20 06:20:04 0:03 2382 192 ims -1 310410214827503 10149 05/15/20 06:20:05 2:14 25126 13759nxtgonpho no 3587080982063727 310410214827503 10150 05/15/20 06:20:05 0:22 6324 6669 ims 3587080982063727 310410214827503 10151 05/15/20 06:20:07 0:22 6669 6060 ims 3587080982063727 310410214827503 10152 05/15/20 06:20:24 0:04 2526 1159 ims -1 310410214827503 10153 05/15/20 06:20:27 0:38 8330 8619 ims 3587080982063727 310410214827503 10154 05/15/20 06:20:28 0:38 8619 8066 ims 3587080982063727 310410214827503 10155 05/15/20 06:20:44 0:01 0 0 ims -1 310410214827503 10156 05/15/20 06:20:49 0:20 6264 6737 ims 3587080982063727 310410214827503 10157 05/15/20 06:20:50 0:20 6673 6000 ims 3587080982063727 310410214827503 10158 05/15/20 06:21:06 0:04 2382 132 ims -1 310410214827503 10159 05/15/20 06:21:08 0:41 7312 6741 ims 3587080982063727 310410214827503 10160 05/15/20 06:21:09 0:42 6741 7048 ims 3587080982063727 310410214827503 10161 05/15/20 06:21:25 60:00 5838 3212 ims -1 310410214827503 10162 05/15/20 06:21:44 60:00 18030 9144 ims -1 310410214827503 10163 05/15/20 06:22:19 347:54 23390 19206nxtgonpho no 3587080982063727 310410214827503 10164 05/15/20 06:22:20 60:00 6533 5193 nxtgonpho no 3587080982063727 310410214827503 10165 05/15/20 07:21:25 60:00 0 0 ims -1 310410214827503 10166 05/15/20 07:21:44 60:00 8496 2912 ims -1 310410214827503 10167 05/15/20 07:22:20 60:00 225 210 nxtgonpho no 3587080982063727 310410214827503 MUM MOLL APPLE INIONZ8 APPLE INIONZ8 APPLE INIONZ8 APPLE INIONZ8 APPLE INIONZ8 APPLE INIONZ8 APPLE INIONZ8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE INIONZ8 APPLE INIONZ8 APPLE INIONZ8 APPLE INIONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 419 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003063 NeTniliAL not for general distribution. EFTA_OOI 17139 EFTA01251663 MOBILITY The information contained heraCtop+R 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. arn. tr`'ads AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 iiiiIIIIII Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn On IND I INSI 10168 05/15/20 08:21:25 60:00 0 0 imp -1 310410214827503 10169 05/15/20 08:21:44 60:00 6924 2772 imp -1 310410214827503 10170 05/15/20 08:22:20 60:00 225 210nxtgonpho no 3587080982063727 310410214827503 10171 05/15/20 09:21:25 60:00 0 0 imo -1 310410214827503 10172 05/15/20 09:21:44 60:00 13584 4608 imo -1 310410214827503 10173 05/15/20 09:22:20 60:00 642 735nxtgonpho no 3587080982063727 310410214827503 10174 05/15/20 10:21:25 0:16 0 0 imo -1 310410214827503 10175 05/15/20 10:21:44 60:00 12120 4428 imo -1 310410214827503 10176 05/15/20 10:22:20 60:00 6688 5473nxtgonpho no 3587080982063727 310410214827503 10177 05/15/20 11:21:44 60:00 9728 3052 imo -1 310410214827503 10178 05/15/20 11:22:20 47:54 4893 11281 nxtgonpho no 3587080982063727 310410214827503 10179 05/15/20 12:10:14 1:45 5229 6296nxtgonpho no 3587080982063727 310410214827503 10180 05/15/20 12:10:15 1:45 6296 4941 nxtgonpho no 3587080982063727 310410214827503 10181 05/15/20 12:12:00 13:39 48 0 nxtgonpho no 3587080982063727 310410214827503 10182 05/15/20 12:21:44 60:00 6924 2804 imo -1 310410214827503 10183 05/15/20 12:25:40 10:27 12965 11226 nxtgonpho no 3587080982063727 310410214827503 10184 05/15/20 12:36:06 28:45 5799 6820 nxtgonpho no 3587080982063727 310410214827503 10185 05/15/20 12:36:07 28:45 6820 5511 nxtgonpho no 3587080982063727 310410214827503 10186 05/15/20 13:04:52 14:36 5168 6230nxtgonpho no 3587080982063727 310410214827503 10187 05/15/20 13:04:52 14:37 6230 4880nxtgonpho no 3587080982063727 310410214827503 10188 05/15/20 13:19:29 8:17 280 581 nxtgonpho no 3587080982063727 310410214827503 10189 05/15/20 13:21:44 60:00 10332 4020 imo -1 310410214827503 10190 05/15/20 13:27:45 2:09 288 48nxtgonpho no 3587080982063727 310410214827503 10191 05/15/20 13:27:46 2:09 48 0 nxtgonpho no 3587080982063727 310410214827503 MARE MODEL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 11080=8 APPLE 1PHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003064 NT4AL not for general distribution. Page 420 EFTA_00I 17140 EFTA01251664 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 410. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 18:56:41 Conn. Originating ET Time Number (UTC) Bytes Up Bytes Apn Dn INCI INSI NAZI 10192 05/15/20 13:29:55 11:01 14690 9892 nxtgonpho no 3587080982063727 310410214827503 APPLE 10193 05/15/20 13:40:55 115:52 14738 16163 nxtgonpho no 3587080982063727 310410214827503 APPLE 10194 05/15/20 13:40:56 60:00 14834 12604 nxtgonpho no 3587080982063727 310410214827503 APPLE 10195 05/15/20 14:21:44 60:00 7032 2788 imp -1 310410214827503 10196 05/15/20 14:40:56 55:53 1329 1558 nxtgonpho no 3587080982063727 310410214827503 APPLE 10197 05/15/20 15:21:44 60:00 8140 2804 imp -1 310410214827503 10198 05/15/20 15:36:48 60:00 11376 6343 nxtgonpho no 3587080982063727 310410214827503 APPLE 10199 05/15/20 16:21:44 58:44 11904 4536 imp -1 310410214827503 10200 05/15/20 16:36:48 38:46 952 945 nxtgonpho no 3587080982063727 310410214827503 APPLE 10201 05/15/20 17:15:33 33:23 17926 12685 nxtgonpho no 3587080982063727 310410214827503 APPLE 10202 05/15/20 17:15:34 33:23 12685 17638 nxtgonpho no 3587080982063727 310410214827503 APPLE 10203 05/15/20 17:17:52 2:57 6262 6689 imp 3587080982063727 310410214827503 APPLE 10204 05/15/20 17:17:53 2:57 6689 5998 imp 3587080982063727 310410214827503 APPLE 10205 05/15/20 17:20:28 2:56 8374 6182 imp -1 310410214827503 10206 05/15/20 17:20:49 28:07 6336 6685 imp 3587080982063727 310410214827503 APPLE 10207 05/15/20 17:20:50 28:07 6685 6072 imp 3587080982063727 310410214827503 APPLE 10208 05/15/20 17:23:24 43:38 12810 8043 imp 3587080982063727 310410214827503 APPLE 10209 05/15/20 17:48:57 12:07 7766 5120 nxtgonpho no 3587080982063727 310410214827503 APPLE 10210 05/15/20 18:01:03 1:09 5065 6230 nxtgonpho no 3587080982063727 310410214827503 APPLE 10211 05/15/20 18:01:04 1:09 6230 4777 nxtgonpho no 3587080982063727 310410214827503 APPLE 10212 05/15/20 18:02:13 60:00 9611 9449 nxtgonpho no 3587080982063727 310410214827503 APPLE 10213 05/15/20 18:07:02 1:23 7588 4512 imp 3587080982063727 310410214827503 APPLE 10214 05/15/20 18:07:02 1:23 7524 4512 imp 3587080982063727 310410214827503 APPLE 10215 05/15/20 18:08:25 0:11 16584 7152 imp 3587080982063727 310410214827503 APPLE 10216 05/15/20 18:09:32 2:05 11081 9131 imp 3587080982063727 310410214827503 APPLE 10217 05/15/20 18:11:37 60:00 13460 4576 imp 3587080982063727 310410214827503 APPLE 10218 05/15/20 19:02:13 0:11 0 105 nxtgonpho 3587080982063727 310410214827503 APPLE no MODEL IPHONZ8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 421 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGMMO0K65 NTroleiNE not for general distribution. EF-EA_00117141 EFTA01251665 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in 41. 1 ...., `•-••• ""s0AT&T Run Data: Run Tina: Data Osage Tor: Item Conn. Date 06/17/2020 18:56:41 Conn. Time (OTC) Originating Number ET Bytes DP Bytes Apn On ICI INSI MARL MODEL 10219 05/15/20 19:02:23 21:01 5905 6936 natgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10220 05/15/20 19:02:24 21:02 6936 5617 natgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10221 05/15/20 19:11:37 60:00 9928 3252 imp 3587080982063727 310410214827503 APPLE !PHONES 10222 05/15/20 19:23:26 0:51 280 581 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10223 05/15/20 19:24:16 21:04 5589 6583 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10224 05/15/20 19:24:17 21:04 6583 5301 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10225 05/15/20 19:45:21 5:48 280 581 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10226 05/15/20 19:51:08 8:26 5060 6280 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10227 05/15/20 19:51:10 8:25 6280 4772 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10228 05/15/20 19:59:35 15:46 89863 53822 natgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10229 05/15/20 20:11:37 35:47 5072 1572 imp 3587080982063727 310410214827503 APPLE !PHONES 10230 05/15/20 20:15:20 9:10 5168 6230 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10231 05/15/20 20:15:21 9:10 6230 4880 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10232 05/15/20 20:24:31 10:17 48 0 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10233 05/15/20 20:34:47 46:36 13435 17056 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10234 05/15/20 20:34:48 46:36 17056 13051 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10235 05/15/20 20:49:42 13:38 0 0 Imp -1 310410214827503 10236 05/15/20 21:02:52 18:31 6354 6751 imp 3587080982063727 310410214827503 APPLE !PHONES 10237 05/15/20 21:02:53 18:31 6683 6090 imp 3587080982063727 310410214827503 APPLE !PHONES 10238 05/15/20 21:03:20 60:00 22729 9614 imp -1 310410214827503 10239 05/15/20 21:21:24 25:39 7328 14433 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10240 05/15/20 21:21:25 25:39 14433 7040 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10241 05/15/20 21:47:04 4:28 7830 5225 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003066 NT-31AL not for general distribution. Page 422 EFTA 00117142 EFTA01251666 MOBILITY The information contained hereeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 il:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41.1 AT&T Run Data: Run Tina: Data Osage Tor: Item conn.otta. Data 06/17/2020 Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn On IKE I INS! MAKE 10242 05/15/20 21:51:31 22:13 7226 7255 nxtgenpho no 3587080982063727 310410214827503 APPLE 10243 05/15/20 21:51:32 22:13 7255 6938 nxtgenpho no 3587080982063727 310410214827503 APPLE 10244 05/15/20 22:03:20 60:00 10036 3176 ems -1 310410214827503 10245 05/15/20 22:13:45 0:43 6230 4848 nxtgenpho no 3587080982063727 310410214827503 APPLE 10246 05/15/20 22:14:27 98:27 115558 120761 nxtgenpho no 3587080982063727 310410214827503 APPLE 10247 05/15/20 22:14:28 60:00 42979 25548 nxtgenpho no 3587080982063727 310410214827503 APPLE 10248 05/15/20 23:03:20 50:01 8712 3036 ems -1 310410214827503 10249 05/15/20 23:14:28 38:27 77782 89722 nxtgenpho no 3587080982063727 310410214827503 APPLE 10250 05/15/20 23:52:55 5:38 6660 7602 nxtgenpho no 3587080982063727 310410214827503 APPLE 10251 05/15/20 23:56:59 1:34 6693 5997 Las 3587080982063727 310410214827503 APPLE 10252 05/15/20 23:58:32 8:11 10328 14425 nxtgenpho no 3587080982063727 310410214827503 APPLE 10253 05/15/20 23:58:33 8:11 14425 10040 nxtgenpho no 3587080982063727 310410214827503 APPLE 10254 05/15/20 23:59:32 7:11 7154 6813 ems 3587080982063727 310410214827503 APPLE 10255 05/15/20 23:59:33 7:11 6813 6890 ems 3587080982063727 310410214827503 APPLE 10256 05/16/20 00:05:06 60:00 22545 10229 ems -1 310410214827503 10257 05/16/20 00:06:44 14:49 6797 8414 nxtgenpho no 3587080982063727 310410214827503 APPLE 10258 05/16/20 00:21:33 19:16 10248 12498 nxtgenpho no 3587080982063727 310410214827503 APPLE 10259 05/16/20 00:21:34 19:16 12498 11124 nxtgenpho no 3587080982063727 310410214827503 APPLE 10260 05/16/20 00:40:50 38:02 7794 7052 nxtgenpho no 3587080982063727 310410214827503 APPLE 10261 05/16/20 01:05:06 60:00 7048 2788 ems -1 310410214827503 10262 05/16/20 01:18:52 3:30 6230 4848 nxtgenpho no 3587080982063727 310410214827503 APPLE 10263 05/16/20 01:22:21 8:17 5678 6514 nxtgenpho no 3587080982063727 310410214827503 APPLE 10264 05/16/20 01:22:22 8:18 6514 5390 nxtgenpho no 3587080982063727 310410214827503 APPLE 10265 05/16/20 01:30:40 31:22 12898 13145 nxtgenpho no 3587080982063727 310410214827503 APPLE NODEL &PHONES &PHONES &PROMS &PHONES &PHONES &PROMS &PHONES IPRONE8 IPRONE8 IPRONE8 &PHONES &PHONES &PHONES &PHONES &PHONES IPRONE8 &PROMS &PHONES &PHONES &PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00003067 Pfinfiat not for general distribution. Page 423 EF-EA_00117143 EFTA01251667 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Tama: Data Usage For: 06/17/2020 MS= Item Conn. Data Conn. Originating ET Time Number (UTC) Bytes UP Byte. Apn Dn INLI INBI 10266 05/16/20 02:02:02 8:15 288 48 nxtgenpho no 3587080982063727 310410214827503 10267 05/16/20 02:02:03 8:15 48 0 nxtgenpho no 3587080982063727 310410214827503 10268 05/16/20 02:05:06 60:00 9928 3284 ims -1 310410214827503 10269 05/16/20 02:10:18 1:20 2121 9933 nxtgenpho no 3587080982063727 310410214827503 10270 05/16/20 02:11:37 2:07 5286 6436 nxtgenpho no 3587080982063727 310410214827503 10271 05/16/20 02:11:39 2:06 6436 4998 nxtgenpho no 3587080982063727 310410214827503 10272 05/16/20 02:13:45 1:13 0 0 nxtgenpho no 3587080982063727 310410214827503 10273 05/16/20 02:14:57 79:59 6934 7616 nxtgenpho no 3587080982063727 310410214827503 10274 05/16/20 02:14:58 60:00 7327 6331 nxtgenpho no 3587080982063727 310410214827503 10275 05/16/20 03:05:06 60:00 13336 4608 ims -1 310410214827503 10276 05/16/20 03:14:58 60:00 514 525 nxtgenpho no 3587080982063727 310410214827503 10277 05/16/20 03:34:56 105:57 2512 1532 nxtgenpho no 3587080982063727 310410214827503 10278 05/16/20 04:05:06 45:47 5072 1588 ims -1 310410214827503 10279 05/16/20 04:14:58 60:00 845 1882 nxtgenpho no 3587080982063727 310410214827503 10280 05/16/20 04:45:27 35:26 6370 6669 ims 3587080982063727 310410214827503 10281 05/16/20 04:45:28 35:26 6669 6106 ins 3587080982063727 310410214827503 10282 05/16/20 04:58:33 60:00 22789 9924 ins -1 310410214827503 10283 05/16/20 05:14:58 5:56 462 420 nxtgenpho no 3587080982063727 310410214827503 10284 05/16/20 05:20:54 0:37 0 0 nxtgenpho no 3587080982063727 310410214827503 10285 05/16/20 05:21:31 48:30 7833 7488 nxtgenpho no 3587080982063727 310410214827503 10286 05/16/20 05:21:32 48:30 7488 7449 nxtgenpho no 3587080982063727 310410214827503 10287 05/16/20 05:58:33 60:00 9928 3176 ims -1 310410214827503 10288 05/16/20 06:10:02 0:50 0 0 nxtgenpho no 3587080982063727 310410214827503 10289 05/16/20 06:10:51 1:36 288 48 nxtgenpho 3587080982063727 310410214827503 no KARL MODEL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003068 PsiTatikE not for general distribution. Page 424 EF-EA_00117144 EFTA01251668 NOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in c`zas""i se AT&T Run Date: Run Tame: Data Usage For: 06/17/2020 18:56:47 Item Conn. Conn. Date Time (DSC) Originating ET Bytes Bytes Apn IMLI Number Up Dn INS I MARL NICOLL 10290 05/16/20 06:10:52 1:37 48 0 nxtgonpho no 3587080982063727 310410214827503 10291 05/16/20 06:12:28 21:29 576 192 nxtgonpho no 3587080982063727 310410214827503 10292 05/16/20 06:12:29 21:29 192 Oruftgonpho no 3587080982063727 310410214827503 10293 05/16/20 06:33:57 7:10 288 48nxtgonpho no 3587080982063727 310410214827503 10294 05/16/20 06:33:59 7:09 48 Onxtgonpho no 3587080982063727 310410214827503 10295 05/16/20 06:41:08 1:36 8042 5921 nxtgonpho no 3587080982063727 310410214827503 10296 05/16/20 06:42:43 0:57 288 48 nxtgonpho no 3587080982063727 310410214827503 10297 05/16/20 06:42:44 0:57 48 Oruftgonpho no 3587080982063727 310410214827503 10298 05/16/20 06:43:41 1:12 48 Oruftgonpho no 3587080982063727 310410214827503 10299 05/16/20 06:44:52 2:27 288 48nxtgonpho no 3587080982063727 310410214827503 10300 05/16/20 06:44:53 2:27 48 Onxtgonpho no 3587080982063727 310410214827503 10301 05/16/20 06:47:20 0:28 0 0 nxtgonpho no 3587080982063727 310410214827503 10302 05/16/20 06:47:47 12:40 288 48 nxtgonpho no 3587080982063727 310410214827503 10303 05/16/20 06:47:48 12:40 48 Oruftgonpho no 3587080982063727 310410214827503 10304 05/16/20 06:58:33 60:00 10036 3160 ins -1 310410214827503 10305 05/16/20 07:00:28 0:38 48 Oruftgonpho no 3587080982063727 310410214827503 10306 05/16/20 07:01:05 66:40 15290 12603 nxtgonpho no 3587080982063727 310410214827503 10307 05/16/20 07:01:06 60:00 12603 15002 nxtgonpho no 3587080982063727 310410214827503 10308 05/16/20 07:58:33 60:00 12028 4484 ins -1 310410214827503 10309 05/16/20 08:01:06 6:40 0 Oruftgonpho no 3587080982063727 310410214827503 10310 05/16/20 08:07:46 0:48 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONZ8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE !PHONES APPLE IPRONE8 APPLE IPHONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 425 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003069 PIETIAL not for general distribution. EF-EA_00117145 EFTA01251669 NOBILITY The information contained heraleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Humber (UTC) Bytes Up Bytom Apn Dn ICI DUI MAKE 10311 05/16/20 08:08:33 4:27 288 48 nxtgonpho no 3587080982063727 310410214827503 APPLE 10312 05/16/20 08:08:34 4:27 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10313 05/16/20 08:13:01 0:37 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10314 05/16/20 08:13:38 21:12 5485 6599ruftgonpho no 3587080982063727 310410214827503 APPLE 10315 05/16/20 08:13:39 21:13 6599 5197ruftgonpho no 3587080982063727 310410214827503 APPLE 10316 05/16/20 08:34:51 1:04 280 581ruftgonpho no 3587080982063727 310410214827503 APPLE 10317 05/16/20 08:35:54 64:09 6211 7068ruftgonpho no 3587080982063727 310410214827503 APPLE 10318 05/16/20 08:35:55 60:00 7068 5923nxtgonpho no 3587080982063727 310410214827503 APPLE 10319 05/16/20 08:58:33 60:00 9928 3176 ins -1 310410214827503 10320 05/16/20 09:35:55 4:09 0 Onxtgonpho no 3587080982063727 310410214827503 APPLE 10321 05/16/20 09:40:04 5:50 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10322 05/16/20 09:45:53 8:16 288 48ruftgonpho no 3587080982063727 310410214827503 APPLE 10323 05/16/20 09:45:54 8:16 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10324 05/16/20 09:54:10 1:08 0 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10325 05/16/20 09:55:17 8:46 5168 6246ruftgonpho no 3587080982063727 310410214827503 APPLE 10326 05/16/20 09:55:18 8:46 6246 4880nxtgonpho no 3587080982063727 310410214827503 APPLE 10327 05/16/20 09:58:33 60:00 11920 4644 ins -1 310410214827503 10328 05/16/20 10:04:04 3:24 351 778nxtgonpho no 3587080982063727 310410214827503 APPLE 10329 05/16/20 10:07:27 20:46 5590 6583ruftgonpho no 3587080982063727 310410214827503 APPLE 10330 05/16/20 10:07:28 20:46 6583 5302ruftgonpho no 3587080982063727 310410214827503 APPLE 10331 05/16/20 10:28:13 4:22 901 280ruftgonpho no 3587080982063727 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 !PHONES !PHONES !PHONES !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 IPRONE8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 426 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003070 PsiTniliAL not for general distribution. EF-EA_00117146 EFTA01251670 MOBILITY The information contained heraleop+Fti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr""s ao‘ AT&T Run Data: Run Time: Data Osage for: Item Conn. Data 06/17/2020 Salim Conn. Time (OTC) Originating Number ET Bytes UP Byte. Apn Dn INZI INS1 NUT NICOLL 10332 05/16/20 10:28:14 4:22 280 613 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10333 05/16/20 10:32:35 0:55 288 48 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10334 05/16/20 10:32:37 0:54 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10335 05/16/20 10:33:31 5:34 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10336 05/16/20 10:39:04 3:02 288 48 nxtgonpho no 3587080982063727 310410214827503 APPLE DRONES 10337 05/16/20 10:39:06 3:01 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10338 05/16/20 10:42:07 0:39 288 48 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10339 05/16/20 10:42:08 0:39 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10340 05/16/20 10:42:47 1:47 9083 5335 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10341 05/16/20 10:44:33 0:52 901 280 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10342 05/16/20 10:44:35 0:51 280 613 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10343 05/16/20 10:45:26 18:19 7750 5014 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10344 05/16/20 10:58:33 60:00 13352 4516 ipso -1 310410214827503 10345 05/16/20 11:03:44 2:08 5622 6426 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10346 05/16/20 11:03:45 2:08 6426 5334 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10347 05/16/20 11:05:53 0:05 0 0 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10348 05/16/20 11:06:00 25:13 9103 8034 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10349 05/16/20 11:31:13 30:01 11965 13972 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10350 05/16/20 11:58:33 60:00 9928 3284 ipso -1 310410214827503 10351 05/16/20 12:01:14 14:42 5065 6230 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10352 05/16/20 12:01:15 14:42 6230 5932 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GML00003071 not for general distribution. Page 427 EF-EA_00117147 EFTA01251671 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. 4111111 AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 iiiiiIIIII Conn. Originating ET Time Number (UTC) Bytes Up Byte. Apn Dn IMS2 tiCOTS 10353 05/16/20 12:15:57 16:56 2016 2157 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHOME8 10354 05/16/20 12:32:53 81:38 19337 21791roftgonpho no 3587080982063727 310410214827503 APPLE IPHOME8 10355 05/16/20 12:32:54 60:00 21502 19925ruftgonpho no 3587080982063727 310410214827503 APPLE 'PHONES 10356 05/16/20 12:58:33 60:00 8388 2820 imp -1 310410214827503 10357 05/16/20 13:32:54 21:38 289 315ruftgonpho no 3587080982063727 310410214827503 APPLE !PROMS 10358 05/16/20 13:54:32 30:58 7828 549Ormagonpho no 3587080982063727 310410214827503 APPLE !PROMS 10359 05/16/20 13:58:33 45:42 17880 9156 imp -1 310410214827503 10360 05/16/20 14:25:29 5:01 288 48ruagonpho no 3587080982063727 310410214827503 APPLE !PROMS 10361 05/16/20 14:25:31 5:00 48 Ormagonpho no 3587080982063727 310410214827503 APPLE !PROMS 10362 05/16/20 14:30:31 2:55 48 Ormagonpho no 3587080982063727 310410214827503 APPLE IPHOME8 10363 05/16/20 14:33:25 14:54 288 48ruagonpho no 3587080982063727 310410214827503 APPLE !PROMS 10364 05/16/20 14:33:26 14:54 48 Onxtgonpho no 3587080982063727 310410214827503 APPLE !PROMS 10365 05/16/20 14:48:20 60:00 152909 993040 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHOME8 10366 05/16/20 14:48:22 60:00 15325 9124 imp 3587080982063727 310410214827503 APPLE IPHOME8 10367 05/16/20 15:48:20 51:25 0 1522ruftgonpho no 3587080982063727 310410214827503 APPLE 'PROMS 10368 05/16/20 15:48:22 51:23 0 0 imp 3587080982063727 310410214827503 APPLE !PROMS 10369 05/16/20 16:46:05 3:44 72646 1108814ruftgonpho no 3587080982063727 310410214827503 APPLE !PROMS 10370 05/16/20 16:46:08 3:41 8103 6068 imp 3587080982063727 310410214827503 APPLE IPHOME8 10371 05/16/20 16:48:21 13:59 9534 6095 imp -1 310410214827503 10372 05/16/20 16:49:48 17:02 37527 47607ruftgonpho no 3587080982063727 310410214827503 APPLE !PROMS 10373 05/16/20 16:49:49 17:02 47607 37047ruftgonpho no 3587080982063727 310410214827503 APPLE IPHOME8 10374 05/16/20 17:01:10 1:28 6334 6771 imp 3587080982063727 310410214827503 APPLE !PROMS 10375 05/16/20 17:01:11 1:28 6663 5982 imp 3587080982063727 310410214827503 APPLE !PROMS 10376 05/16/20 17:02:19 0:21 8634 3013 imp -1 310410214827503 10377 05/16/20 17:02:37 4:13 7674 19605 imp 3587080982063727 310410214827503 APPLE !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 428 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003072 not for general distribution. EFTA_OOI 17148 EFTA01251672 MOBILITY The information contained heraleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run pato: Run Time: Data Osage for: Item Conn. Date 06/17/2020 18:56:47 Conn. originating ET Time Butter (OTC) Bytes UP Bytes Apn Dn IND I INSI MARL 10378 05/16/20 17:02:39 4:12 11433 7410 ims 3587080982063727 310410214827503 APPLE 10379 05/16/20 17:02:55 60:00 20238 9668 ims -1 310410214827503 10380 05/16/20 17:06:51 60:00 24499 22370 nxtgonpho no 3587080982063727 310410214827503 APPLE 10381 05/16/20 18:02:55 60:00 8604 2928 ims -1 310410214827503 10382 05/16/20 18:06:51 14:24 346 210 nxtgonpho no 3587080982063727 310410214827503 APPLE 10383 05/16/20 18:21:15 20:52 54209 72094 nxtgonpho no 3587080982063727 310410214827503 APPLE 10384 05/16/20 18:21:16 20:52 72094 55132 nxtgonpho no 3587080982063727 310410214827503 APPLE 10385 05/16/20 18:42:08 1:10 8530 5930 nxtgonpho no 3587080982063727 310410214827503 APPLE 10386 05/16/20 18:43:18 15:17 9775 7636 nxtgonpho no 3587080982063727 310410214827503 APPLE 10387 05/16/20 18:43:18 15:18 7636 9487 nxtgonpho no 3587080982063727 310410214827503 APPLE 10388 05/16/20 18:58:36 49:44 9781 14223 nxtgonpho no 3587080982063727 310410214827503 APPLE 10389 05/16/20 19:02:55 60:00 8388 2928 ims -1 310410214827503 10390 05/16/20 19:48:20 32:47 13375 21586 nxtgonpho no 3587080982063727 310410214827503 APPLE 10391 05/16/20 19:48:20 32:48 21586 12799 nxtgonpho no 3587080982063727 310410214827503 APPLE 10392 05/16/20 20:02:55 60:00 11920 4500 ims -1 310410214827503 10393 05/16/20 20:21:08 5:56 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE 10394 05/16/20 20:27:03 7:00 4724 7488 nxtgonpho no 3587080982063727 310410214827503 APPLE 10395 05/16/20 20:27:05 6:59 7488 4436 nxtgonpho no 3587080982063727 310410214827503 APPLE 10396 05/16/20 20:34:04 8:35 6863 5722 nxtgonpho no 3587080982063727 310410214827503 APPLE 10397 05/16/20 20:42:38 5:41 5169 6230 nxtgonpho no 3587080982063727 310410214827503 APPLE 10398 05/16/20 20:42:39 5:41 6230 4881 nxtgonpho no 3587080982063727 310410214827503 APPLE 10399 05/16/20 20:48:20 15:53 7978 6599 nxtgonpho no 3587080982063727 310410214827503 APPLE 10400 05/16/20 21:02:55 60:00 6956 2788 ims -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PHONE8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003073 PsiTifikE not for general distribution. Page 429 EF-EA_00117149 EFTA01251673 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. `stt-ada. AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 18:56:47 Conn. Time (UTC) Originating Number ET Bytes Up Byte. Apn Dn INC' DWI MAKE MODEL 10401 05/16/20 21:04:12 9:11 5169 6230 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 10402 05/16/20 21:04:13 9:11 6230 4881 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 10403 05/16/20 21:13:24 44:43 9010 10765 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10404 05/16/20 21:58:06 1:52 5169 6230 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10405 05/16/20 21:58:07 1:52 6230 4881 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 10406 05/16/20 21:59:59 4:33 2760 5158 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10407 05/16/20 22:02:55 60:00 13568 4676 imp -1 310410214827503 10408 05/16/20 22:04:31 77:10 26551 42184 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10409 05/16/20 22:04:32 60:00 23907 17378 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10410 05/16/20 23:02:55 60:00 13012 3424 imp -1 310410214827503 10411 05/16/20 23:04:32 17:10 18277 8213 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10412 05/16/20 23:21:42 8:05 7704 5019 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10413 05/16/20 23:29:46 2:08 5065 6230 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 10414 05/16/20 23:29:47 2:08 6230 4777 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10415 05/16/20 23:31:55 60:00 45745 114089 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10416 05/17/20 00:02:55 60:00 13784 4640 imp -1 310410214827503 10417 05/17/20 00:31:55 7:15 0 6138 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 10418 05/17/20 00:39:10 0:05 0 0 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 10419 05/17/20 00:40:08 0:54 6114 4328 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 10420 05/17/20 00:41:01 130:17 288 48 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10421 05/17/20 00:41:02 60:00 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10422 05/17/20 01:02:55 60:00 10036 3176 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 430 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003074 MT V& not for general distribution. EF-EA_00117150 EFTA01251674 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr""s as,# AT&T Run Date: Run Time: Data Osage For: 06/17/2020 MOM Item Conn. Date Conn. Originating ET Time Number (UTC) Bytes Up Bytea Apn Dn ICI IMSI 10423 05/17/20 01:41:02 60:00 0 0 nxtgenpho no 3587080982063727 310410214827503 10424 05/17/20 02:02:55 60:00 16776 5908 ims -1 310410214827503 10425 05/17/20 02:41:02 10:17 0 0 nxtgenpho no 3587080982063727 310410214827503 10426 05/17/20 03:02:55 60:00 10252 3284 ims -1 310410214827503 10427 05/17/20 03:04:31 40:00 5399 7860 nxtgenpho no 3587080982063727 310410214827503 10428 05/17/20 03:04:32 60:00 7860 6686 nxtgenpho no 3587080982063727 310410214827503 10429 05/17/20 03:44:31 132:48 8553 10174 nxtgenpho no 3587080982063727 310410214827503 10430 05/17/20 04:02:55 60:00 8388 3036 ins -1 310410214827503 10431 05/17/20 04:04:32 60:00 9270 7535 nxtgenpho no 3587080982063727 310410214827503 10432 05/17/20 05:02:55 60:00 6848 2680 ims -1 310410214827503 10433 05/17/20 05:04:32 52:49 904 630 nxtgenpho no 3587080982063727 310410214827503 10434 05/17/20 05:57:20 0:51 48 0 nxtgenpho no 3587080982063727 310410214827503 10435 05/17/20 05:58:10 3:47 288 48 nxtgenpho no 3587080982063727 310410214827503 10436 05/17/20 05:58:11 3:47 48 0 nxtgenpho no 3587080982063727 310410214827503 10437 05/17/20 06:01:58 60:00 96 0 nxtgenpho no 3587080982063727 310410214827503 10438 05/17/20 06:02:55 60:00 9696 3052 ims -1 310410214827503 10439 05/17/20 07:01:58 60:00 0 0 nxtgenpho no 3587080982063727 310410214827503 10440 05/17/20 07:02:55 60:00 13460 4732 ims -1 310410214827503 10441 05/17/20 08:01:58 60:00 0 0 nxtgenpho no 3587080982063727 310410214827503 10442 05/17/20 08:02:55 60:00 12028 4428 ims -1 310410214827503 10443 05/17/20 09:01:58 60:00 0 0 nxtgenpho no 3587080982063727 310410214827503 10444 05/17/20 09:02:55 60:00 9928 3176 ims -1 310410214827503 10445 05/17/20 10:01:58 12:04 0 0 nxtgenpho no 3587080982063727 310410214827503 10446 05/17/20 10:02:55 60:00 8496 3036 las -1 310410214827503 NAZI MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 431 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003075 PIETIAL not for general distribution. EF-EA_00117151 EFTA01251675 MOBILITY The information contained hernia:Aft 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 4111. ttla‘S e#° AT&T Run Data: Run Time: Data Osage For: 06/17/2020 18:56:48 Item conn. Conn. Date Time (UTC) originating ET Bytes bytes Apn mkt IMBI NAZI moon Number Up On 10447 05/17/20 10:14:03 60:00 48 0 nxtgonpho no 3587080982063727 310410214827503 10448 05/17/20 11:02:55 60:00 11920 4376 ims -1 310410214827503 10449 05/17/20 11:14:03 43:29 0 0 nxtgonpho no 3587080982063727 310410214827503 10450 05/17/20 11:57:31 10:36 288 48nxtgonpho no 3587080982063727 310410214827503 10451 05/17/20 11:57:32 10:36 48 0 nxtgonpho no 3587080982063727 310410214827503 10452 05/17/20 12:02:55 60:00 8496 2928 ims -1 310410214827503 10453 05/17/20 12:08:08 2:35 48 0 nxtgonpho no 3587080982063727 310410214827503 10454 05/17/20 12:10:43 33:05 288 48mxtgonpho no 3587080982063727 310410214827503 10455 05/17/20 12:10:44 33:05 48 Onxtgonpho no 3587080982063727 310410214827503 10456 05/17/20 12:43:49 58:16 48 Onxtgonpho no 3587080982063727 310410214827503 10457 05/17/20 13:02:55 22:38 11856 4324 ims -1 310410214827503 10458 05/17/20 13:23:58 60:00 20044 9695 ims -1 310410214827503 10459 05/17/20 14:23:58 24:02 10052 3316 ims -1 310410214827503 10460 05/17/20 14:46:29 60:00 0 0 ims -1 310410214827503 10461 05/17/20 14:48:00 60:00 18554 9484 ims -1 310410214827503 10462 05/17/20 15:46:29 60:00 0 0 ims -1 310410214827503 10463 05/17/20 15:48:00 60:00 8388 2820 ims -1 310410214827503 10464 05/17/20 15:58:09 7:16 64406 30274 nxtgonpho no 3587080982063727 310410214827503 10465 05/17/20 16:05:25 3:35 288 48nxtgonpho no 3587080982063727 310410214827503 10466 05/17/20 16:05:26 3:35 48 0 nxtgonpho no 3587080982063727 310410214827503 10467 05/17/20 16:09:01 2:46 48 0 nxtgonpho no 3587080982063727 310410214827503 10468 05/17/20 16:11:47 5:58 6909 5720 nxtgonpho no 3587080982063727 310410214827503 10469 05/17/20 16:17:43 4:04 897 278 nxtgonpho no 3587080982063727 310410214827503 10470 05/17/20 16:17:45 4:03 278 609 nxtgonpho 3587080982063727 310410214827503 no APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 432 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003076 NTIAL not for general distribution. EFTA 00117152 EFTA01251676 MOBILITY (UTC) 10471 05/17/20 16:21:48 1:29 48 0 nxtgonpho no 3587080982063727 310410214827503 10472 05/17/20 16:23:17 8:16 5066 6282 nxtgonpho no 3587080982063727 310410214827503 10473 05/17/20 16:23:18 8:16 6282 4778 nxtgonpho no 3587080982063727 310410214827503 10474 05/17/20 16:31:34 42:01 8514 6280 nxtgonpho no 3587080982063727 310410214827503 10475 05/17/20 16:46:29 31:51 0 0 imp -1 310410214827503 10476 05/17/20 16:48:00 31:00 4980 1588 imp -1 310410214827503 10477 05/17/20 17:13:34 12:36 4615821 761486 nxtgonpho no 3587080982063727 310410214827503 10478 05/17/20 17:13:35 12:36 761486 4615437 nxtgonpho no 3587080982063727 310410214827503 10479 05/17/20 17:18:19 7:51 6358 8187 imp 3587080982063727 310410214827503 10480 05/17/20 17:18:20 7:51 8119 6094 imp 3587080982063727 310410214827503 10481 05/17/20 17:26:11 18:07 36437 46608 nxtgonpho no 3587080982063727 310410214827503 10482 05/17/20 17:26:14 18:04 11385 9122 imp 3587080982063727 310410214827503 10483 05/17/20 17:44:18 17:17 827111 19205770 nxtgonpho no 3587080982063727 310410214827503 10484 05/17/20 17:44:20 41:54 9285 7276 imp 3587080982063727 310410214827503 10485 05/17/20 18:01:35 20:41 517789 19510119 nxtgonpho no 3587080982063727 310410214827503 10486 05/17/20 18:22:16 3:58 66543 1031939 nxtgonpho no 3587080982063727 310410214827503 10487 05/17/20 18:26:14 2:15 12257 2684 nxtgonpho no 3587080982063727 310410214827503 10488 05/17/20 18:26:14 2:15 0 0 imp 3587080982063727 310410214827503 10489 05/17/20 18:28:28 1:46 30782 15616 nxtgonpho no 3587080982063727 310410214827503 10490 05/17/20 18:28:29 1:45 7231 6815 imp 3587080982063727 310410214827503 10491 05/17/20 18:28:29 1:46 15552 30494 nxtgonpho no 3587080982063727 310410214827503 10492 05/17/20 18:28:30 1:45 6815 6967 ins 3587080982063727 310410214827503 10493 05/17/20 18:30:15 7:50 0 0 nxtgonpho no 3587080982063727 310410214827503 10494 05/17/20 18:38:05 4:59 171964 59546 nxtgonpho no 3587080982063727 310410214827503 10495 05/17/20 18:38:06 4:58 6226 10501 imp 3587080982063727 310410214827503 AT&T Proprietary 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 411111, %...,00 ‘"Ii. .1# AT&T Run Data: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Originating ET Bytes Byte. Apn INEI IMISI MAKE MODEL Date Time Number Up Dn APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 433 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained heraCeNyFtli SDNYGML00003077 WinfikE not for general distribution. EF-EA_00117153 EFTA01251677 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:56:48 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn INEI IMS1 MARE 10496 05/17/20 18:38:06 4:59 59546 171676 nxtgonpho no 3587080982063727 310410214827503 APPLE 10497 05/17/20 18:38:07 4:58 6685 5962 imp 3587080982063727 310410214827503 APPLE 10498 05/17/20 18:43:05 5:41 15417 17834ruftgonpho no 3587080982063727 310410214827503 APPLE 10499 05/17/20 18:43:07 5:39 7405 6123 imp 3587080982063727 310410214827503 APPLE 10500 05/17/20 18:48:46 14:37 100199 49913ruftgonpho no 3587080982063727 310410214827503 APPLE 10501 05/17/20 18:48:47 6:54 6334 6685 imp 3587080982063727 310410214827503 APPLE 10502 05/17/20 18:48:47 14:37 49913 99911ruftgonpho no 3587080982063727 310410214827503 APPLE 10503 05/17/20 18:48:48 6:54 6685 6070 imp 3587080982063727 310410214827503 APPLE 10504 05/17/20 18:52:06 8:56 9721 6481 imp -1 310410214827503 10505 05/17/20 18:55:40 7:43 6246 6687 imp 3587080982063727 310410214827503 APPLE 10506 05/17/20 18:55:42 7:42 6687 5982 imp 3587080982063727 310410214827503 APPLE 10507 05/17/20 19:03:24 55:21 16661 10738ruftgonpho no 3587080982063727 310410214827503 APPLE 10508 05/17/20 19:03:26 55:19 9791 7609 imp 3587080982063727 310410214827503 APPLE 10509 05/17/20 19:58:44 2:41 288 48nxtgonpho no 3587080982063727 310410214827503 APPLE 10510 05/17/20 19:58:45 2:40 6633 10033 imp 3587080982063727 310410214827503 APPLE 10511 05/17/20 19:58:45 2:42 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10512 05/17/20 19:58:46 2:40 10033 6369 imp 3587080982063727 310410214827503 APPLE 10513 05/17/20 20:01:26 0:54 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10514 05/17/20 20:01:29 0:51 10307 8044 imp 3587080982063727 310410214827503 APPLE 10515 05/17/20 20:02:19 2:10 288 48ruftgonpho no 3587080982063727 310410214827503 APPLE 10516 05/17/20 20:02:20 2:09 6609 7363 imp 3587080982063727 310410214827503 APPLE 10517 05/17/20 20:02:20 2:10 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10518 05/17/20 20:02:21 2:09 7255 6345 imp 3587080982063727 310410214827503 APPLE 10519 05/17/20 20:04:30 5:13 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10520 05/17/20 20:04:32 5:11 8899 7048 imp 3587080982063727 310410214827503 APPLE 10521 05/17/20 20:09:43 8:56 4556 6014ruftgonpho no 3587080982063727 310410214827503 APPLE 10522 05/17/20 20:09:44 8:56 6014 4268ruftgonpho no 3587080982063727 310410214827503 APPLE MODEL IPHOME8 IPMONEB !PHONES IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 434 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003078 NeTniliAL not for general distribution. EF-EA_00117154 EFTA01251678 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 iiiiiIIIII Item Conn. Data Conn. Originating Time Hurter (UTC) ET Bytes Up 10523 05/17/20 20:09:48 8:51 6224 10524 05/17/20 20:09:49 8:51 6663 10525 05/17/20 20:18:40 41:19 46289 10526 05/17/20 20:18:44 9:08 8905 10527 05/17/20 20:27:52 60:00 13320 10528 05/17/20 20:59:58 11:35 5065 10529 05/17/20 20:59:59 11:36 6230 10530 05/17/20 21:11:35 0:42 7640 10531 05/17/20 21:12:16 6:40 901 10532 05/17/20 21:12:17 6:40 280 10533 05/17/20 21:18:57 0:05 0 10534 05/17/20 21:19:14 8:41 628 10535 05/17/20 21:27:52 60:00 16788 10536 05/17/20 21:27:55 1:35 19101 10537 05/17/20 21:27:56 1:35 23254 10538 05/17/20 21:29:31 6:14 19810 10539 05/17/20 21:35:44 1:22 288 10540 05/17/20 21:35:45 1:22 48 10541 05/17/20 21:37:07 14:26 48 10542 05/17/20 21:51:33 4:13 6230 10543 05/17/20 21:54:18 3:11 670404 10544 05/17/20 21:55:46 2:39 4692 10545 05/17/20 21:58:24 2:09 15875 Byte. Apn INC' IMBI NAZI MODEL Dn 6771 imp 3587080982063727 310410214827503 APPLE IPHONEB 5960 imp 3587080982063727 310410214827503 APPLE IPHONEB 50120 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 7068 ims 3587080982063727 310410214827503 APPLE IPHONEB 4344 ims 3587080982063727 310410214827503 APPLE !PHONES 6230 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 5722 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 5019 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 280ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 613ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 1252 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 8720 ims 3587080982063727 310410214827503 APPLE IPHONEB 23254ruftgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 18813ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 18360ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no Onxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no Oruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 4746 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 340887 ims 3587080982063727 310410214827503 APPLE IPHONEB 3968 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 16224 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 435 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003079 NeTifikE not for general distribution. EF-EA_00117155 EFTA01251679 MOBILITY The information contained hereCteNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 411111, ......,,f `•-s`"I‘ AT&T Run Data: Run Elmo: Data Usage For: 06/17/2020 iiiiiIMIN Item Conn. Data Conn. Originating Time fluster (UTC) ET Bytes DO 10546 05/17/20 21:58:25 2:09 16156 10547 05/17/20 22:00:34 1:03 280 10548 05/17/20 22:01:36 6:26 5265 10549 05/17/20 22:01:37 6:26 6278 10550 05/17/20 22:08:03 2:27 280 10551 05/17/20 22:10:29 22:15 5761 10552 05/17/20 22:10:30 22:15 6709 10553 05/17/20 22:27:52 4:01 6568 10554 05/17/20 22:31:29 11:28 18310 10555 05/17/20 22:32:45 1:20 192 10556 05/17/20 22:32:46 1:19 288 10557 05/17/20 22:32:46 1:20 0 10558 05/17/20 22:32:47 1:19 48 10559 05/17/20 22:34:06 0:32 6230 10560 05/17/20 22:34:37 21:24 6880 10561 05/17/20 22:34:38 21:25 7486 10562 05/17/20 22:43:13 60:00 15626 10563 05/17/20 22:56:02 20:12 10234 10564 05/17/20 22:56:03 20:13 12596 10565 05/17/20 23:16:15 6:48 7877 10566 05/17/20 23:23:03 14:27 5060 10567 05/17/20 23:23:03 14:28 6228 Byte. Apn tier IMBI MA= 1.03DEL Dn 15587 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 581 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 6278 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES ne 4881 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES ne 581 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 ne 6709 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES ne 5089 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 9748 ipso 3587080982063727 310410214827503 APPLE !PHONES 12114 ipso -1 310410214827503 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 48 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 0 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 0 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no 4849 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 7486 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 17723 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 9206 ipso -1 310410214827503 12648 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 10813 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 5176 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 6228 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 4772 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONZ8 no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 436 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003080 PsisTiliAL not for general distribution. EFTA_00I 17156 EFTA01251680 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in (ITC. ......s••-es AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytom Apn On INE' NCOEL 10568 05/17/20 23:37:31 3:06 6426 5270 nxtgonpho no 3587080982063727 310410214827503 APPLE 'PHONES 10569 05/17/20 23:40:36 1:22 901 280ruftgonpho no 3587080982063727 310410214827503 APPLE 'PHONES 10570 05/17/20 23:40:37 1:23 280 613ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10571 05/17/20 23:42:00 0:53 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10572 05/17/20 23:42:53 1:13 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10573 05/17/20 23:43:13 60:00 8712 3804 imp -1 310410214827503 10574 05/17/20 23:44:05 6:26 288 48nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10575 05/17/20 23:44:06 6:26 48 Onxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10576 05/17/20 23:50:32 0:34 7640 4913ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10577 05/17/20 23:51:05 2:08 901 280ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10578 05/17/20 23:51:06 2:08 280 613ruftgonpho no 3587080982063727 310410214827503 APPLE 'PHONES 10579 05/17/20 23:53:14 8:32 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10580 05/18/20 00:01:45 2:29 5062 6244ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10581 05/18/20 00:01:47 2:28 6244 4774ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10582 05/18/20 00:03:56 7:35 278 577ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10583 05/18/20 00:11:30 14:49 5235 6576ruftgonpho no 3587080982063727 310410214827503 APPLE 'PHONES 10584 05/18/20 00:11:31 14:49 6576 4947ruftgonpho no 3587080982063727 310410214827503 APPLE 'PHONES 10585 05/18/20 00:26:20 12:15 8075 5601 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10586 05/18/20 00:38:34 2:29 288 48ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10587 05/18/20 00:38:35 2:29 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10588 05/18/20 00:41:03 6:11 288 48ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 437 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003081 NITifikE not for general distribution. EF-EA_00117157 EFTA01251681 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ....,,,• ••-s` a. AT&T Run Data: Run Tina: Data Osage For: 06/17/2020 18:56:48 Item Conn. Conn. Data Time Originating Number ET Bytes Bytom Up Dn Apn INEI INSI MARE MODEL (OTC) 10589 05/18/20 00:41:04 6:11 48 0 nxtgonpho no 3587080982063727 310410214827503 10590 05/18/20 00:43:13 60:00 10068 3300 imo -1 310410214827503 10591 05/18/20 00:47:15 18:30 7409 11148 nxtgonpho no 3587080982063727 310410214827503 10592 05/18/20 01:05:44 80:04 5491 7927 nxtgonpho no 3587080982063727 310410214827503 10593 05/18/20 01:05:45 60:00 7927 6778 nxtgonpho no 3587080982063727 310410214827503 10594 05/18/20 01:43:13 60:00 10068 3176 imp -1 310410214827503 10595 05/18/20 02:05:45 20:05 0 0 nxtgonpho no 3587080982063727 310410214827503 10596 05/18/20 02:25:49 14:49 6523 7168 nxtgonpho no 3587080982063727 310410214827503 10597 05/18/20 02:25:50 14:49 7168 6139 nxtgonpho no 3587080982063727 310410214827503 10598 05/18/20 02:40:39 5:37 48 0 nxtgonpho no 3587080982063727 310410214827503 10599 05/18/20 02:43:13 60:00 8604 3036 imp -1 310410214827503 10600 05/18/20 02:46:15 49:59 13297 8101 nxtgonpho no 3587080982063727 310410214827503 10601 05/18/20 02:46:16 60:00 8274 13018 nxtgonpho no 3587080982063727 310410214827503 10602 05/18/20 03:36:14 353:33 117402 109264nxtgonpho no 3587080982063727 310410214827503 10603 05/18/20 03:43:13 60:00 13584 4892 imp -1 310410214827503 10604 05/18/20 03:46:16 60:00 1386 1260nxtgonpho no 3587080982063727 310410214827503 10605 05/18/20 04:43:13 60:00 12012 4392 imp -1 310410214827503 10606 05/18/20 04:46:16 60:00 1727 1680nxtgonpho no 3587080982063727 310410214827503 10607 05/18/20 05:43:13 60:00 8388 2928 imp -1 310410214827503 10608 05/18/20 05:46:16 60:00 95072 105489nxtgonpho no 3587080982063727 310410214827503 10609 05/18/20 06:43:13 60:00 13260 4408 imp -1 310410214827503 10610 05/18/20 06:46:16 60:00 10906 11703 nxtgonpho no 3587080982063727 310410214827503 10611 05/18/20 07:43:13 60:00 8804 3036 imp -1 310410214827503 10612 05/18/20 07:46:16 60:00 0 92nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONZ8 APPLE IPHONZ8 APPLE IPHONZ8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 438 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003082 NTailiAL not for general distribution. EF-EA_00117158 EFTA01251682 MOBILITY The information contained heralCoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:S9pm Time Zone. AT&T's records are stored and provided in AT&T Run pato: Run Time: Data Osage for: 06/17/2020 Item Conn. Date Conn. Originating ET Time Number (OTC) Bytes Up 10613 05/18/20 08:43:13 60:00 11796 10614 05/18/20 08:46:16 43:33 0 10615 05/18/20 09:43:13 60:00 6924 10616 05/18/20 10:43:13 60:00 9852 10617 05/18/20 10:56:06 31:15 5799 10618 05/18/20 10:56:07 31:15 6820 10619 05/18/20 11:27:22 44:31 16580 10620 05/18/20 11:43:13 60:00 12012 10621 05/18/20 12:11:52 130:16 288 10622 05/18/20 12:11:53 60:00 48 10623 05/18/20 12:43:13 60:00 6924 10624 05/18/20 13:11:53 60:00 0 10625 05/18/20 13:43:13 37:04 8356 10626 05/18/20 14:11:53 10:17 0 10627 05/18/20 14:20:42 3:53 11322 10628 05/18/20 14:24:57 19:38 13798 10629 05/18/20 14:28:12 0:55 5323 10630 05/18/20 14:28:13 0:55 6372 10631 05/18/20 14:29:08 3:12 48 10632 05/18/20 14:32:19 48:45 767044 10633 05/18/20 14:32:20 48:45 134635 10634 05/18/20 14:38:41 0:00 0 10635 05/18/20 14:42:26 2:09 8250 10636 05/18/20 14:44:34 36:30 7352 10637 05/18/20 14:44:35 36:30 7137 10638 05/18/20 15:02:51 60:00 17572 Bytes Dn Aprt 4536 imo 0 nxtgonpho no 2680 imo 3316 imo 6820 nxtgonpho no 5511 nxtgonpho no 12714 nxtgonpho no 4376 ims 48 nxtgonpho no 0 nxtgonpho no 2680 ims 0 nxtgonpho no 3440 ims Onxtgonpho no 6726 ims 12056 ims 6372 nxtgonpho no 5035 nxtgonpho no 0 nxtgonpho no 134635 nxtgonpho no 778311 nxtgonpho no 0 ims 6280 ims 7205 ims 7196 ims 9459 ims INZI -1 3587080982063727 -1 -1 3587080982063727 3587080982063727 3587080982063727 -1 3587080982063727 3587080982063727 -1 3587080982063727 -1 3587080982063727 -1 -1 3587080982063727 3587080982063727 3587080982063727 3587080982063727 3587080982063727 3587080982063727 -1 3587080982063727 3587080982063727 -1 INSI MAKE NODAL 310410214827503 310410214827503 APPLE IPHONZ8 310410214827503 310410214827503 310410214827503 APPLE 1PHONZ8 310410214827503 APPLE IPHOME8 310410214827503 APPLE IPHOME8 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE IPRONZ8 310410214827503 310410214827503 APPLE IPRONZ8 310410214827503 310410214827503 310410214827503 APPLE 1PRONZ8 310410214827503 APPLE 1PROME8 310410214827503 APPLE 1PROME8 310410214827503 APPLE 1PROME8 310410214827503 APPLE 1PROME8 310410214827503 APPLE !PHONES 310410214827503 310410214827503 APPLE !PHONES 310410214827503 APPLE 1PROME8 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003083 PsisTiliAL not for general distribution. Page 439 EF-EA_00117159 EFTA01251683 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in OTC. AT&T Run Data: Run Tame: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating LT Time Number (OTC) Bytes Up Byte. Apn Dn INLI IMSI MAKE MODEL 10639 05/18/20 15:21:05 60:00 238592 45185 nxtgonpho no 3587080982063727 310410214827503 APPLE !PROMS 10640 05/18/20 16:02:51 60:00 6816 2756 imp -1 310410214827503 10641 05/18/20 16:21:05 60:00 109591 71979 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10642 05/18/20 17:02:51 6:41 6196 4316 imp -1 310410214827503 10643 05/18/20 17:09:35 60:00 18658 10346 imp -1 310410214827503 10644 05/18/20 17:21:05 60:00 12631 45043 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10645 05/18/20 18:09:35 3:55 0 0 imp 3587080982063727 310410214827503 APPLE IPROME8 10646 05/18/20 18:13:29 0:41 4176 1448 imp 3587080982063727 310410214827503 APPLE IPROME8 10647 05/18/20 18:13:30 0:40 4044 1448 imp 3587080982063727 310410214827503 APPLE IPROME8 10648 05/18/20 18:14:10 60:00 11796 4468 imp 3587080982063727 310410214827503 APPLE IPROME8 10649 05/18/20 18:21:05 60:00 1820 1992ruftgonpho no 3587080982063727 310410214827503 APPLE IPROME8 10650 05/18/20 19:14:10 60:00 10300 3408 imp 3587080982063727 310410214827503 APPLE !PHONES 10651 05/18/20 19:21:05 60:00 35779 21739ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10652 05/18/20 20:14:10 38:10 4980 1820 imp 3587080982063727 310410214827503 APPLE !PRONGS 10653 05/18/20 20:21:05 60:00 6848 46191 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10654 05/18/20 20:52:19 5:09 17752 2340 imp 3587080982063727 310410214827503 APPLE IPROME8 10655 05/18/20 20:52:20 5:08 5556 2340 imp 3587080982063727 310410214827503 APPLE IPROME8 10656 05/18/20 20:57:28 0:00 0 0 imp 3587080982063727 310410214827503 APPLE !PHONES 10657 05/18/20 20:57:36 60:00 24589 10552 imp -1 310410214827503 10658 05/18/20 21:21:05 60:00 4123 1207 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10659 05/18/20 21:57:36 60:00 10144 3376 imp -1 310410214827503 10660 05/18/20 22:21:05 60:00 1877 5801 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10661 05/18/20 22:57:36 60:00 7296 3880 imp -1 310410214827503 10662 05/18/20 23:21:05 60:00 1270 1050 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10663 05/18/20 23:57:36 60:00 8712 3004 imp -1 310410214827503 10664 05/19/20 00:21:05 60:00 4878 2427 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 10665 05/19/20 00:57:36 60:00 21144 7016 imp -1 310410214827503 10666 05/19/20 01:21:05 60:00 981 735ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 440 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003084 not for general distribution. EFTA_O0I 17160 EFTA01251684 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T'S records ere stored and provided in OTC. 4.111, .....„ ••-s`'0AT&T Run Data: Run Time: Data Osage For: 06/17/2020 Item Conn. Date Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn IMEI IMSI MARE MODEL 10667 05/19/20 01:55:50 0:01 0 0 ims -1 310410214827503 10668 05/19/20 01:57:36 60:00 13676 4536 ims -1 310410214827503 10669 05/19/20 02:21:05 60:00 751 735 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10670 05/19/20 02:57:36 60:00 8388 3004 ims -1 310410214827503 10671 05/19/20 03:21:05 60:00 635 525 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10672 05/19/20 03:57:36 60:00 14676 4716 ims -1 310410214827503 10673 05/19/20 04:21:05 24:21 173 105 nxtgenpho no 3587080982063727 310410214827503 APPLE 110)(0=8 10674 05/19/20 04:45:26 60:00 7113 5585ruagenpho no 3587080982063727 310410214827503 APPLE 110)(01428 10675 05/19/20 04:57:36 60:00 7172 2756 ims -1 310410214827503 10676 05/19/20 05:45:26 60:00 3276 2205 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10677 05/19/20 05:57:36 60:00 9928 3252 ims -1 310410214827503 10678 05/19/20 06:45:26 60:00 635 525ruagenpho no 3587080982063727 310410214827503 APPLE !PHONES 10679 05/19/20 06:57:36 60:00 15668 5936 ims -1 310410214827503 10680 05/19/20 07:45:26 60:00 519 315ruagenpho no 3587080982063727 310410214827503 APPLE !PHONES 10681 05/19/20 07:57:36 60:00 10036 3144 ims -1 310410214827503 10682 05/19/20 08:45:26 60:00 6133 4369 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10683 05/19/20 08:57:36 60:00 6956 2756 ims -1 310410214827503 10684 05/19/20 09:45:26 60:00 11243 6323 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10685 05/19/20 09:57:36 60:00 10020 3144 ims -1 310410214827503 10686 05/19/20 10:45:26 60:00 9722 8482 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10687 05/19/20 10:57:36 60:00 6848 2648 ims -1 310410214827503 10688 05/19/20 11:45:26 45:39 47591 78486ruagenpho no 3587080982063727 310410214827503 APPLE !PRONGS 10689 05/19/20 11:57:36 6:47 0 0 ims 3587080982063727 310410214827503 APPLE !PHONES 10690 05/19/20 12:04:23 12:10 5256 2824 vas 3587080982063727 310410214827503 APPLE 110)(01428 10691 05/19/20 12:04:23 12:10 5192 2824 vas 3587080982063727 310410214827503 APPLE 110)(01428 10692 05/19/20 12:16:33 5:47 3532 1448 vas 3587080982063727 310410214827503 APPLE 110)(01428 10693 05/19/20 12:22:20 1:36 3968 1448 vas 3587080982063727 310410214827503 APPLE !PHONES 10694 05/19/20 12:22:20 1:36 3904 1448 ims 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 441 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003085 N:Frolikk not for general distribution. EF-EA_00117161 EFTA01251685 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am CO 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. .....,„• `•—s" -e AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 IiiiiiIIIIII Conn. Originating Time Number (OTC) ET Bytes Up Bytes Apn Dn IILI IMSI 10695 05/19/20 12:23:56 0:06 3100 2200 ims 3587080982063727 310410214827503 10696 05/19/20 12:24:02 1:53 2768 1324 ims 3587080982063727 310410214827503 10697 05/19/20 12:24:02 1:53 2704 1324 ims 3587080982063727 310410214827503 10698 05/19/20 12:25:55 18:57 8404 3548 ins 3587080982063727 310410214827503 10699 05/19/20 12:31:04 0:35 5166 6228 nxtgonpho no 3587080982063727 310410214827503 10700 05/19/20 12:31:06 0:34 6228 4878 nxtgonpho no 3587080982063727 310410214827503 10701 05/19/20 12:31:40 60:00 278 577rumgonpho no 3587080982063727 310410214827503 10702 05/19/20 13:31:40 60:00 48579 431926 nxtgonpho no 3587080982063727 310410214827503 10703 05/19/20 13:40:26 16:00 10182 6478 ims 3587080982063727 310410214827503 10704 05/19/20 13:56:26 0:17 2752 1340 ims 3587080982063727 310410214827503 10705 05/19/20 13:56:26 0:17 2688 1340 ims 3587080982063727 310410214827503 10706 05/19/20 13:56:43 3:30 3192 1788 ims 3587080982063727 310410214827503 10707 05/19/20 14:00:13 20:04 2644 1340 ims 3587080982063727 310410214827503 10708 05/19/20 14:00:13 20:04 2580 1340 ims 3587080982063727 310410214827503 10709 05/19/20 14:20:17 60:00 11904 4500 ims 3587080982063727 310410214827503 10710 05/19/20 14:31:40 60:00 1294 5333 nxtgonpho no 3587080982063727 310410214827503 10711 05/19/20 15:20:17 60:00 6816 2664 ims 3587080982063727 310410214827503 10712 05/19/20 15:31:40 60:00 41304 31357rmtgonpho no 3587080982063727 310410214827503 10713 05/19/20 16:20:17 46:41 15140 8028 ims 3587080982063727 310410214827503 10714 05/19/20 16:31:40 41:04 42687 29513rmtgonpho no 3587080982063727 310410214827503 10715 05/19/20 17:07:02 60:00 18524 9806 ims -1 310410214827503 10716 05/19/20 17:12:44 60:00 48777 30257 nxtgonpho no 3587080982063727 310410214827503 10717 05/19/20 18:07:02 60:00 8604 2896 ims -1 310410214827503 10718 05/19/20 18:12:44 60:00 18506 20803rmtgonpho no 3587080982063727 310410214827503 10719 05/19/20 19:07:02 60:00 7188 2880 ims -1 310410214827503 10720 05/19/20 19:12:44 60:00 4284 11716rmtgonpho no 3587080982063727 310410214827503 10721 05/19/20 20:07:02 60:00 47520 25436 ims -1 310410214827503 10722 05/19/20 20:12:44 60:00 116096 92793rmtgonpho 3587080982063727 310410214827503 no MARE MODEL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 442 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003086 NeTniliAL not for general distribution. EF-EAJVII7162 EFTA01251686 MOBILITY The information contained hereCtop+R 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41.1, AT&T Run pato: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 18:56:49 Conn. originating ET Time Number (UTC) Bytes UP Bytes Apn Dn IMSI MARL MODEL 10723 05/19/20 20:41:03 8:15 1442730 1301211 imo -1 310410214827503 10724 05/19/20 20:49:25 2:38 532877 387830 imo -1 310410214827503 10725 05/19/20 21:07:02 18:16 16916 14228 imo 3587080982063727 310410214827503 APPLE !PHONES 10726 05/19/20 21:12:44 60:00 169672 316498 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10727 05/19/20 21:14:35 0:32 2963 20327 imo -1 310410214827503 10728 05/19/20 21:25:18 40:36 114540 3648 imo 3587080982063727 310410214827503 APPLE !PHONES 10729 05/19/20 21:25:18 40:36 6140 3648 imo 3587080982063727 310410214827503 APPLE !PHONES 10730 05/19/20 22:05:54 60:00 50268 31928 ins 3587080982063727 310410214827503 APPLE !PHONES 10731 05/19/20 22:12:44 60:00 53647 36614 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10732 05/19/20 22:29:15 0:32 5388 19273 ims 3587080982063727 310410214827503 APPLE 'PHONES 10733 05/19/20 23:03:37 0:22 0 0 ims 3587080982063727 310410214827503 APPLE 'PHONES 10734 05/19/20 23:04:22 2:19 519759 265795 ims 3587080982063727 310410214827503 APPLE 'PHONES 10735 05/19/20 23:05:54 19:20 4416 1904 ims 3587080982063727 310410214827503 APPLE 'PHONES 10736 05/19/20 23:12:44 60:00 257347 731383 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10737 05/19/20 23:25:14 20:35 24596 2308 ims 3587080982063727 310410214827503 APPLE 'PHONES 10738 05/19/20 23:25:14 20:35 5572 2308 ims 3587080982063727 310410214827503 APPLE 'PHONES 10739 05/19/20 23:45:49 5:33 3424 1324 ims 3587080982063727 310410214827503 APPLE !PHONES 10740 05/19/20 23:51:22 1:48 2660 1324 ims 3587080982063727 310410214827503 APPLE !PHONES 10741 05/19/20 23:51:22 1:48 2596 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 10742 05/19/20 23:53:10 60:00 12136 4220 imo 3587080982063727 310410214827503 APPLE 'PHONES 10743 05/20/20 00:12:44 60:00 93211 75998 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10744 05/20/20 00:53:10 1:09 0 0 ims 3587080982063727 310410214827503 APPLE 'PHONES 10745 05/20/20 00:54:19 0:22 15524 1448 imo 3587080982063727 310410214827503 APPLE 'PHONES 10746 05/20/20 00:54:19 0:22 3328 1448 imo 3587080982063727 310410214827503 APPLE 'PHONES 10747 05/20/20 00:54:41 60:00 10504 4204 imo 3587080982063727 310410214827503 APPLE 'PHONES 10748 05/20/20 01:12:44 60:00 70778 59040 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10749 05/20/20 01:54:41 16:51 0 0 ims 3587080982063727 310410214827503 APPLE 'PHONES 10750 05/20/20 02:11:32 60:00 32548 3988 ims 3587080982063727 310410214827503 APPLE !PHONES 10751 05/20/20 02:11:32 60:00 8112 3988 ims 3587080982063727 310410214827503 APPLE !PHONES 10752 05/20/20 02:12:44 60:00 3655 1604 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10753 05/20/20 03:11:32 60:00 7788 4148 imo 3587080982063727 310410214827503 APPLE IPHONE8 10754 05/20/20 03:11:32 60:00 7788 4148 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003087 not for general distribution. Page 443 EF-EA_00117163 EFTA01251687 MOBILITY The information contained heraCteNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in (ITC. tr‘ligli. m ia AT&T Run Data: Run Tame: Data Usage Tor: Item Conn. Date 06/17/2020 18:56:49 Conn. originating ET Time Rumbor (UTC) Bytes Up Byte. Apn Dn INLI IM9I NUT 10755 05/20/20 03:12:44 60:00 751 735 nxtgonpho no 3587080982063727 310410214827503 APPLE 10756 05/20/20 04:11:32 60:00 5192 2432 imp 3587080982063727 310410214827503 APPLE 10757 05/20/20 04:11:32 60:00 5192 2432 imp 3587080982063727 310410214827503 APPLE 10758 05/20/20 04:12:44 60:00 751 735 nxtgonpho no 3587080982063727 310410214827503 APPLE 10759 05/20/20 05:11:32 60:00 5192 2628 imp 3587080982063727 310410214827503 APPLE 10760 05/20/20 05:11:32 60:00 5192 2540 imp 3587080982063727 310410214827503 APPLE 10761 05/20/20 05:12:44 60:00 635 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 10762 05/20/20 06:11:32 60:00 7788 3864 imp 3587080982063727 310410214827503 APPLE 10763 05/20/20 06:11:32 60:00 7788 3864 imp 3587080982063727 310410214827503 APPLE 10764 05/20/20 06:12:44 60:00 578 630 nxtgonpho no 3587080982063727 310410214827503 APPLE 10765 05/20/20 07:11:32 60:00 5516 2772 imp 3587080982063727 310410214827503 APPLE 10766 05/20/20 07:11:32 60:00 5516 2772 imp 3587080982063727 310410214827503 APPLE 10767 05/20/20 07:12:44 60:00 398 315 nxtgonpho no 3587080982063727 310410214827503 APPLE 10768 05/20/20 08:11:32 60:00 7788 4040 imp 3587080982063727 310410214827503 APPLE 10769 05/20/20 08:11:32 60:00 7788 4040 imp 3587080982063727 310410214827503 APPLE 10770 05/20/20 08:12:44 60:00 346 210 nxtgonpho no 3587080982063727 310410214827503 APPLE 10771 05/20/20 09:11:32 60:00 5192 2540 imp 3587080982063727 310410214827503 APPLE 10772 05/20/20 09:11:32 60:00 5192 2540 ins 3587080982063727 310410214827503 APPLE 10773 05/20/20 09:12:44 60:00 462 420 nxtgonpho no 3587080982063727 310410214827503 APPLE 10774 05/20/20 10:11:32 22:25 2596 1324 imp 3587080982063727 310410214827503 APPLE 10775 05/20/20 10:11:32 22:25 2596 1324 imp 3587080982063727 310410214827503 APPLE 10776 05/20/20 10:12:44 60:00 3870 1197 nxtgonpho no 3587080982063727 310410214827503 APPLE 10777 05/20/20 10:33:57 60:00 10488 4080 imp 3587080982063727 310410214827503 APPLE 10778 05/20/20 11:12:44 59:40 24619 15577 nxtgonpho no 3587080982063727 310410214827503 APPLE 10779 05/20/20 11:33:57 60:00 7420 3648 imp 3587080982063727 310410214827503 APPLE 10780 05/20/20 12:12:24 1:47 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 10781 05/20/20 12:14:11 60:00 46707 18829 nxtgonpho no 3587080982063727 310410214827503 APPLE 10782 05/20/20 12:33:57 60:00 0 0 imp 3587080982063727 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES IPROME8 IPROME8 IPROME8 !PHONES !PHONES !PHONES IPROME8 IPROME8 IPROME8 !PHONES !PHONES !PHONES IPROME8 IPROME8 IPROME8 !PHONES !PHONES !PHONES IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 444 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003088 PsisTfAL not for general distribution. EFTA 00117164 EFTA01251688 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in arc. ..z. •-`sa.d AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:56:49 Conn. Time (UTC) originating Number ET Bytes Up Bytes Apn Dn INLI IH3I 10783 05/20/20 12:38:30 60:00 19197 9043 ims -1 310410214827503 10784 05/20/20 13:14:11 53:50 111892 197148 nxtgonpho no 3587080982063727 310410214827503 10785 05/20/20 13:33:57 34:25 0 0 ims 3587080982063727 310410214827503 10786 05/20/20 13:38:30 3:27 108 108 ims 3587080982063727 310410214827503 10787 05/20/20 13:41:57 2:58 33368 1556 ims 3587080982063727 310410214827503 10788 05/20/20 13:41:57 2:58 3136 1556 ims 3587080982063727 310410214827503 10789 05/20/20 13:44:55 28:27 3500 1448 ims 3587080982063727 310410214827503 10790 05/20/20 14:08:00 1:40 5926 6294roftgonpho no 3587080982063727 310410214827503 10791 05/20/20 14:08:01 1:40 6294 5638ruagonpho no 3587080982063727 310410214827503 10792 05/20/20 14:08:21 1:19 6227 6733 ims 3587080982063727 310410214827503 10793 05/20/20 14:08:22 1:19 6665 5963 ims 3587080982063727 310410214827503 10794 05/20/20 14:09:41 60:00 4249469 4633859ruagonpho no 3587080982063727 310410214827503 10795 05/20/20 14:09:43 11:21 6671 5982 ims 3587080982063727 310410214827503 10796 05/20/20 14:21:04 2:13 3532 1324 ins 3587080982063727 310410214827503 10797 05/20/20 14:23:17 19:36 2628 1324 ins 3587080982063727 310410214827503 10798 05/20/20 14:42:53 60:00 12152 5436 ins 3587080982063727 310410214827503 10799 05/20/20 15:09:41 60:00 1754 1422 nxtgonpho no 3587080982063727 310410214827503 10800 05/20/20 15:42:53 60:00 9928 3144 ins 3587080982063727 310410214827503 10801 05/20/20 16:09:41 60:00 27188 15520roftgonpho no 3587080982063727 310410214827503 10802 05/20/20 16:42:53 60:00 10268 3268 ims 3587080982063727 310410214827503 10803 05/20/20 17:09:41 60:00 9200 8732ruagonpho no 3587080982063727 310410214827503 10804 05/20/20 17:42:53 35:00 9712 3036 ims 3587080982063727 310410214827503 10805 05/20/20 18:09:41 60:00 97000 619433ruagonpho no 3587080982063727 310410214827503 10806 05/20/20 18:17:53 17:39 2860 1432 ims 3587080982063727 310410214827503 10807 05/20/20 18:35:32 2:37 3408 1432 ims 3587080982063727 310410214827503 10808 05/20/20 18:38:09 2:49 2644 1324 ims 3587080982063727 310410214827503 10809 05/20/20 18:40:58 60:00 29328 14628 ims 3587080982063727 310410214827503 10810 05/20/20 18:53:48 0:59 153404 129915 ims 3587080982063727 310410214827503 10811 05/20/20 19:09:41 60:00 1073 945ruagonpho no 3587080982063727 310410214827503 10812 05/20/20 19:40:58 60:00 7172 2880 vas 3587080982063727 310410214827503 MARL MODEL APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE 1PRONE8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 445 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003089 PsiTifikE not for general distribution. EF-EA_00117165 EFTA01251689 MOBILITY The information contained heralCONyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in %e‘...6 ,.tts% AT&T Run Date: Run Time: Data Osage Tor: 06/17/2020 18:56:49 Item Conn. Conn. Date Time (OTC) Originating Hunter ET Bytes Bytes Apn IMEI IHSI MAKE MODEL OP Dn 10813 05/20/20 20:09:41 60:00 29856 10814 05/20/20 20:40:58 60:00 12248 10815 05/20/20 21:09:41 60:00 169811 10816 05/20/20 21:40:56 0:33 6166 10817 05/20/20 21:40:58 60:00 74996 10818 05/20/20 21:58:02 0:31 2369 10819 05/20/20 21:59:00 0:02 0 10820 05/20/20 21:59:04 0:40 5165 10821 05/20/20 21:59:58 0:32 3097 10822 05/20/20 22:09:41 60:00 722458 10823 05/20/20 22:40:58 35:07 5180 10824 05/20/20 23:09:41 60:00 123570 10825 05/20/20 23:16:05 59:07 13787 10826 05/21/20 00:09:41 60:00 197570 10827 05/21/20 00:15:12 1:10 3640 10828 05/21/20 00:16:22 3:12 2644 10829 05/21/20 00:19:34 10:36 3424 10830 05/21/20 00:30:10 0:48 3376 10831 05/21/20 00:30:58 35:40 16708 10832 05/21/20 00:31:06 35:32 6159356 10833 05/21/20 01:06:38 0:16 5348 10834 05/21/20 01:06:38 0:16 68497 10835 05/21/20 01:06:54 18:19 3268478 10836 05/21/20 01:06:54 60:00 18824 10837 05/21/20 01:09:41 60:00 92313 10838 05/21/20 02:06:54 60:00 10144 10839 05/21/20 02:09:41 9:58 0 10840 05/21/20 02:19:39 60:00 10408 10841 05/21/20 03:06:54 60:00 8496 10842 05/21/20 03:19:39 60:00 867 25365netgonpho 3587080982063727 310410214827503 APPLE !PHONES no 3760 ins 3587080982063727 310410214827503 APPLE !PHONES 123321ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 20242 ins 3587080982063727 310410214827503 APPLE 'PHONES 53644 ins 3587080982063727 310410214827503 APPLE 'PHONES 17098 ins 3587080982063727 310410214827503 APPLE 'PHONES 0 ins 3587080982063727 310410214827503 APPLE 'PHONES 17796 ins 3587080982063727 310410214827503 APPLE 'PHONES 16236 ins 3587080982063727 310410214827503 APPLE 'PHONES 760111ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 1804 ins 3587080982063727 310410214827503 APPLE 'PHONES 269139 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 10574 ins 3587080982063727 310410214827503 APPLE !PHONES 287167ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 1432 ins 3587080982063727 310410214827503 APPLE !PHONES 1324 ins 3587080982063727 310410214827503 APPLE 'PHONES 1324 ins 3587080982063727 310410214827503 APPLE 'PHONES 1448 ins 3587080982063727 310410214827503 APPLE 'PHONES 11852 ins 3587080982063727 310410214827503 APPLE 'PHONES 7038910 ins 3587080982063727 310410214827503 APPLE 'PHONES 2824 ins 3587080982063727 310410214827503 APPLE 'PHONES 32096 ins 3587080982063727 310410214827503 APPLE 'PHONES 3666668 ins 3587080982063727 310410214827503 APPLE 'PHONES 7732 ins 3587080982063727 310410214827503 APPLE 'PHONES 43476ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no 3284 ins 3587080982063727 310410214827503 APPLE 'PHONES Onatgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 8185natgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 3344 ins 3587080982063727 310410214827503 APPLE 'PHONES 945ruagonpho 3587080982063727 310410214827503 APPLE 'PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 446 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003090 N:FoleikE not for general distribution. EF-EA_00117166 EFTA01251690 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. sc"`s eo1° AT&T Run Data: Run Time: Data Usage Tor: Itea Conn. Data 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn IKE I INS I MAKE 10843 05/21/20 04:06:54 60:00 13800 4700 los 3587080982063727 310410214827503 APPLE 10844 05/21/20 04:19:39 60:00 828 915 nxtgenpho no 3587080982063727 310410214827503 APPLE 10845 05/21/20 05:06:54 60:00 6956 2864 ins 3587080982063727 310410214827503 APPLE 10846 05/21/20 05:19:39 60:00 751 735ruftgenpho no 3587080982063727 310410214827503 APPLE 10847 05/21/20 06:06:54 60:00 10596 4380 ins 3587080982063727 310410214827503 APPLE 10848 05/21/20 06:19:39 41:33 514 525ruftgenpho no 3587080982063727 310410214827503 APPLE 10849 05/21/20 07:01:12 20:48 384 48ruftgenpho no 3587080982063727 310410214827503 APPLE 10850 05/21/20 07:01:13 20:48 48 Oruftgenpho no 3587080982063727 310410214827503 APPLE 10851 05/21/20 07:06:54 60:00 8388 3236 ins 3587080982063727 310410214827503 APPLE 10852 05/21/20 07:22:01 60:00 10303 6163ruftgenpho no 3587080982063727 310410214827503 APPLE 10853 05/21/20 08:06:54 60:00 8728 3020 ins 3587080982063727 310410214827503 APPLE 10854 05/21/20 08:22:01 38:19 3493 6127nxtgenpho no 3587080982063727 310410214827503 APPLE 10855 05/21/20 09:00:19 8:23 901 280nxtgenpho no 3587080982063727 310410214827503 APPLE 10856 05/21/20 09:00:21 8:22 280 613ruftgenpho no 3587080982063727 310410214827503 APPLE 10857 05/21/20 09:06:54 60:00 13228 4452 imp 3587080982063727 310410214827503 APPLE 10858 05/21/20 09:08:43 60:00 7090 5839ruftgenpho no 3587080982063727 310410214827503 APPLE 10859 05/21/20 10:06:54 60:00 7172 2988 imp 3587080982063727 310410214827503 APPLE 10860 05/21/20 10:08:43 60:00 578 682 nxtgonpho no 3587080982063727 310410214827503 APPLE 10861 05/21/20 11:06:54 60:00 13584 4768 imp 3587080982063727 310410214827503 APPLE 10862 05/21/20 11:08:43 60:00 24598 14281 nxtgenpho no 3587080982063727 310410214827503 APPLE 10863 05/21/20 12:06:54 60:00 7188 2772 imp 3587080982063727 310410214827503 APPLE 10864 05/21/20 12:08:43 60:00 4413 5826ruftgenpho no 3587080982063727 310410214827503 APPLE 10865 05/21/20 13:06:54 60:00 7064 2772 ins 3587080982063727 310410214827503 APPLE 10866 05/21/20 13:08:43 60:00 5130 4237ruftgenpho no 3587080982063727 310410214827503 APPLE 10867 05/21/20 14:06:54 60:00 12260 4344 ins 3587080982063727 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 447 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003091 NeTniliAL not for general distribution. EF-EA_00117167 EFTA01251691 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 4111. tr, `sLda. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (U2C) Bytes Up Byte. Apn On INEI IMSI NUM MODEL 10868 05/21/20 14:08:43 29:29 65195 32700 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10869 05/21/20 14:38:12 60:00 160066 95355 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10870 05/21/20 15:06:54 6:06 15728 9280 ions 3587080982063727 310410214827503 APPLE 'PHONES 10871 05/21/20 15:07:02 0:13 7216 25435 ions 3587080982063727 310410214827503 APPLE 'PHONES 10872 05/21/20 15:13:00 0:41 106012 1412 ions 3587080982063727 310410214827503 APPLE 'PHONES 10873 05/21/20 15:13:00 0:41 2736 1324 ions 3587080982063727 310410214827503 APPLE 'PHONES 10874 05/21/20 15:13:41 14:44 3424 1432 ions 3587080982063727 310410214827503 APPLE 'PHONES 10875 05/21/20 15:28:25 0:44 2644 1412 ions 3587080982063727 310410214827503 APPLE 'PHONES 10876 05/21/20 15:28:25 0:44 2644 1324 ions 3587080982063727 310410214827503 APPLE 'PHONES 10877 05/21/20 15:29:09 23:27 3424 1324 ions 3587080982063727 310410214827503 APPLE 'PHONES 10878 05/21/20 15:38:12 60:00 125739 390337 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10879 05/21/20 15:52:36 4:36 2692 1412 ions 3587080982063727 310410214827503 APPLE !PHONES 10880 05/21/20 15:52:36 4:36 2644 1324 ions 3587080982063727 310410214827503 APPLE !PHONES 10881 05/21/20 15:57:12 10:30 0 0 ions 3587080982063727 310410214827503 APPLE !PHONES 10882 05/21/20 15:57:16 21:51 6685 5998 ions 3587080982063727 310410214827503 APPLE 'PHONES 10883 05/21/20 16:19:07 60:00 10488 4020 ions 3587080982063727 310410214827503 APPLE 'PHONES 10884 05/21/20 16:38:12 60:00 24070 23600 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10885 05/21/20 17:19:07 60:00 6848 2772 ions 3587080982063727 310410214827503 APPLE !PHONES 10886 05/21/20 17:38:12 60:00 9536 52201 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10887 05/21/20 18:19:07 4:21 0 0 ions 3587080982063727 310410214827503 APPLE !PHONES 10888 05/21/20 18:23:28 3:58 3624 3248 ions 3587080982063727 310410214827503 APPLE 'PHONES 10889 05/21/20 18:27:26 2:34 3424 1448 ions 3587080982063727 310410214827503 APPLE 'PHONES 10890 05/21/20 18:30:00 49:25 5240 2664 ions 3587080982063727 310410214827503 APPLE 'PHONES 10891 05/21/20 18:38:12 60:00 22214 126841 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10892 05/21/20 19:19:25 60:00 10380 4236 ions 3587080982063727 310410214827503 APPLE 'PHONES 10893 05/21/20 19:38:12 60:00 41781 32225 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 10894 05/21/20 20:19:25 60:00 22572 13908 ions 3587080982063727 310410214827503 APPLE 'PHONES 10895 05/21/20 20:31:24 0:10 7021 17491 ions 3587080982063727 310410214827503 APPLE 'PHONES 10896 05/21/20 20:38:12 60:00 1203 582 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 10897 05/21/20 21:19:25 55:10 33544 18284 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 448 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003092 not for general distribution. EF-EA_00117168 EFTA01251692 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 41111. .....,./ ••-•°"" s AT&T Run Data: Run Tama: Data Osage For: Item Conn. Data 06/17/2020 18:56:49 Conn. Time (OTC) Originating Number ET Bytes Op Byte. Apn Dn IKE I INSI 10898 05/21/20 21:23:45 0:14 0 6272 imp 3587080982063727 310410214827503 10899 05/21/20 21:30:47 27:03 3320968 3864666 imp 3587080982063727 310410214827503 10900 05/21/20 21:38:12 60:00 216793 1386922 nxtgonpho no 3587080982063727 310410214827503 10901 05/21/20 22:14:35 23:46 2752 1340 imp 3587080982063727 310410214827503 10902 05/21/20 22:38:12 60:00 24203 16911ruftgonpho no 3587080982063727 310410214827503 10903 05/21/20 22:38:21 60:00 11920 4392 imp 3587080982063727 310410214827503 10904 05/21/20 23:38:12 60:00 1968607 1981511ruftgonpho no 3587080982063727 310410214827503 10905 05/21/20 23:38:21 43:22 28892 17792 ins 3587080982063727 310410214827503 10906 05/22/20 00:17:49 0:21 0 14904 ins 3587080982063727 310410214827503 10907 05/22/20 00:20:30 0:22 0 12635 ins 3587080982063727 310410214827503 10908 05/22/20 00:21:43 5:22 2752 1340 ins 3587080982063727 310410214827503 10909 05/22/20 00:27:05 0:27 3656 2340 imp 3587080982063727 310410214827503 10910 05/22/20 00:27:32 12:45 2644 1340 imp 3587080982063727 310410214827503 10911 05/22/20 00:38:12 60:00 323571 325669ruftgonpho no 3587080982063727 310410214827503 10912 05/22/20 00:40:17 60:00 15328 5876 imp 3587080982063727 310410214827503 10913 05/22/20 01:38:12 19:08 2438269 2563449ruftgonpho no 3587080982063727 310410214827503 10914 05/22/20 01:40:17 11:50 0 0 imp 3587080982063727 310410214827503 10915 05/22/20 01:52:07 0:49 3376 1464 imp 3587080982063727 310410214827503 10916 05/22/20 01:52:56 4:24 9944 3688 imp 3587080982063727 310410214827503 10917 05/22/20 02:00:46 60:00 99955 354713ruftgonpho no 3587080982063727 310410214827503 10918 05/22/20 02:00:49 20:24 6675 5922 imp 3587080982063727 310410214827503 10919 05/22/20 02:21:13 60:00 13568 4468 imp 3587080982063727 310410214827503 10920 05/22/20 03:00:46 60:00 578 630ruftgonpho no 3587080982063727 310410214827503 10921 05/22/20 03:21:13 60:00 10144 3144 imp 3587080982063727 310410214827503 10922 05/22/20 04:00:46 60:00 6258 4115ruftgonpho no 3587080982063727 310410214827503 10923 05/22/20 04:21:13 60:00 8496 2896 imp 3587080982063727 310410214827503 10924 05/22/20 05:00:46 60:00 289 315ruftgonpho no 3587080982063727 310410214827503 10925 05/22/20 05:21:13 60:00 11596 4112 imp 3587080982063727 310410214827503 10926 05/22/20 06:00:46 60:00 1839 646ruftgonpho 3587080982063727 310410214827503 no MARL MODEL APPLE IPHONZ8 APPLE IPHONZ8 APPLE IPHONZ8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 449 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003093 NTifikE not for general distribution. EFTA_OOI 17169 EFTA01251693 MOBILITY The information contained herself:3W+ 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in (ITC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 iiiiiIIIII Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn On INEI INSI MARE 10927 05/22/20 06:21:13 60:00 10704 4596 imo 3587080982063727 310410214827503 APPLE 10928 05/22/20 07:00:46 60:00 735 1015 nxtgenpho no 3587080982063727 310410214827503 APPLE 10929 05/22/20 07:21:13 60:00 8480 3128 imo 3587080982063727 310410214827503 APPLE 10930 05/22/20 08:00:46 60:00 7317 6162 nxtgenpho no 3587080982063727 310410214827503 APPLE 10931 05/22/20 08:21:13 60:00 8604 2912 imo 3587080982063727 310410214827503 APPLE 10932 05/22/20 09:00:46 60:00 289 315 nxtgenpho no 3587080982063727 310410214827503 APPLE 10933 05/22/20 09:21:13 60:00 12152 4344 imo 3587080982063727 310410214827503 APPLE 10934 05/22/20 10:00:46 60:00 578 630 nxtgenpho no 3587080982063727 310410214827503 APPLE 10935 05/22/20 10:21:13 60:00 9912 3268 imo 3587080982063727 310410214827503 APPLE 10936 05/22/20 11:00:46 58:35 3315 577 nxtgenpho no 3587080982063727 310410214827503 APPLE 10937 05/22/20 11:21:13 60:00 8388 2896 imo 3587080982063727 310410214827503 APPLE 10938 05/22/20 11:59:20 2:03 5169 6298 nxtgenpho no 3587080982063727 310410214827503 APPLE 10939 05/22/20 11:59:21 2:03 6298 4881 nxtgenpho no 3587080982063727 310410214827503 APPLE 10940 05/22/20 12:01:24 31:36 6635 5535 nxtgenpho no 3587080982063727 310410214827503 APPLE 10941 05/22/20 12:21:13 60:00 18640 6324 imo 3587080982063727 310410214827503 APPLE 10942 05/22/20 12:33:00 60:00 8022 10825 nxtgenpho no 3587080982063727 310410214827503 APPLE 10943 05/22/20 13:21:13 60:00 10144 3144 imo 3587080982063727 310410214827503 APPLE 10944 05/22/20 13:33:00 38:32 76483 62020 nxtgenpho no 3587080982063727 310410214827503 APPLE 10945 05/22/20 14:11:33 37:10 96 0 nxtgenpho no 3587080982063727 310410214827503 APPLE 10946 05/22/20 14:21:13 60:00 10144 3252 imo 3587080982063727 310410214827503 APPLE 10947 05/22/20 14:48:42 2:04 5065 6230 nxtgenpho no 3587080982063727 310410214827503 APPLE 10948 05/22/20 14:48:43 2:04 6230 4777 nxtgenpho no 3587080982063727 310410214827503 APPLE 10949 05/22/20 14:50:47 60:00 18274 14179 nxtgenpho no 3587080982063727 310410214827503 APPLE 10950 05/22/20 15:21:13 60:00 8712 3020 imo 3587080982063727 310410214827503 APPLE 10951 05/22/20 15:50:47 60:00 31465 67761 nxtgenpho no 3587080982063727 310410214827503 APPLE MODEL IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003094 PsiTn iliAL not for general distribution. Page 450 EF-EA_00117170 EFTA01251694 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. t—`"sads.e AT&T Run Data: Run Time: Data Osage Tor: Item Conn. Data 06/17/2020 18:56:49 Conn. Originating Cr Time Butter (OTC) Bytes op Bytea Apn Dn 10952 05/22/20 16:21:13 8:04 0 496 imo 3587080982063727 310410214827503 10953 05/22/20 16:29:17 28:28 5972 2772 imo 3587080982063727 310410214827503 10954 05/22/20 16:29:17 28:28 38084 2860 imo 3587080982063727 310410214827503 10955 05/22/20 16:50:47 60:00 1120886 1403792 nxtgonpho no 3587080982063727 310410214827503 10956 05/22/20 16:57:48 38:33 9281 7286 imp 3587080982063727 310410214827503 10957 05/22/20 17:36:21 60:00 56848 36412 imp 3587080982063727 310410214827503 10958 05/22/20 17:37:13 22:49 2683566 4485860 imp 3587080982063727 310410214827503 10959 05/22/20 17:50:47 60:00 171721 73247ruftgonpho no 3587080982063727 310410214827503 10960 05/22/20 18:00:15 7:11 1273372 1140381 imp 3587080982063727 310410214827503 10961 05/22/20 18:33:36 0:34 4151 16952 imp 3587080982063727 310410214827503 10962 05/22/20 18:36:21 5:31 0 0 imp 3587080982063727 310410214827503 10963 05/22/20 18:50:47 60:00 1131141 1827889ruftgonpho no 3587080982063727 310410214827503 10964 05/22/20 19:04:32 0:18 6689 5997 its 3587080982063727 310410214827503 10965 05/22/20 19:04:50 10:55 5088 3744 its 3587080982063727 310410214827503 10966 05/22/20 19:15:45 0:40 3184 1480 its 3587080982063727 310410214827503 10967 05/22/20 19:16:25 1:19 5072 1588 imp 3587080982063727 310410214827503 10968 05/22/20 19:17:44 60:00 7836 4020 imp 3587080982063727 310410214827503 10969 05/22/20 19:50:47 60:00 111519 1095348ruftgonpho no 3587080982063727 310410214827503 10970 05/22/20 20:17:44 8:22 0 0 imo 3587080982063727 310410214827503 10971 05/22/20 20:26:06 48:08 8604 3144 ins 3587080982063727 310410214827503 10972 05/22/20 20:50:47 60:00 80314 80650natgonpho no 3587080982063727 310410214827503 10973 05/22/20 21:14:14 0:19 3952 1464 imp 3587080982063727 310410214827503 10974 05/22/20 21:14:33 60:00 38844 26188 its 3587080982063727 310410214827503 10975 05/22/20 21:26:09 0:21 0 320 its 3587080982063727 310410214827503 10976 05/22/20 21:43:29 0:53 113142 129805 imp 3587080982063727 310410214827503 10977 05/22/20 21:45:37 30:28 3898920 5589939 imp 3587080982063727 310410214827503 10978 05/22/20 21:50:47 60:00 73381 49473ruftgonpho no 3587080982063727 310410214827503 10979 05/22/20 22:14:33 12:47 31636 20604 its 3587080982063727 310410214827503 10980 05/22/20 22:26:03 0:28 1615 12111 its 3587080982063727 310410214827503 10981 05/22/20 22:26:32 0:48 123701 100938 its 3587080982063727 310410214827503 10982 05/22/20 22:27:20 6:11 860476 992457 imp 3587080982063727 310410214827503 10983 05/22/20 22:27:20 6:18 10600 6452 imp 3587080982063727 310410214827503 MAKE NICOLL APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE !PHONES APPLE 1PRONE8 APPLE 1PRONE8 APPLE 1PRONE8 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 451 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003095 Ns tit not for general distribution. EF-EA_00117171 EFTA01251695 MOBILITY The information contained heraCtoNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41011, AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 10:54:52 Conn. Time (UTC) Originating Humber IT Sytes Up Byte. Apn Dn ItrrI 10984 05/22/20 22:33:38 15:37 17532 9812 imp 3587080982063727 310410214827503 APPLE 10985 05/22/20 22:45:48 3:27 717501 334437 imp 3587080982063727 310410214827503 APPLE 10986 05/22/20 22:49:15 0:49 14672 9816 imp 3587080982063727 310410214827503 APPLE 10987 05/22/20 22:49:15 0:49 57613 192300 imp 3587080982063727 310410214827503 APPLE 10988 05/22/20 22:50:04 2:57 17120 11032 imp 3587080982063727 310410214827503 APPLE 10989 05/22/20 22:50:04 2:57 417781 612942 imp 3587080982063727 310410214827503 APPLE 10990 05/22/20 22:50:47 60:00 101363 51735 nxtgonpho no 3587080982063727 310410214827503 APPLE 10991 05/22/20 22:53:01 17:28 2822737 3638181 imp 3587080982063727 310410214827503 APPLE 10992 05/22/20 22:53:01 17:34 13860 11932 imp 3587080982063727 310410214827503 APPLE 10993 05/22/20 23:10:35 5:32 5180 1588 imp 3587080982063727 310410214827503 APPLE 10994 05/22/20 23:16:07 4:28 2644 1340 imp 3587080982063727 310410214827503 APPLE 10995 05/22/20 23:20:35 60:00 13352 4624 imp 3587080982063727 310410214827503 APPLE 10996 05/22/20 23:50:47 60:00 65449 46806ruftgonpho no 3587080982063727 310410214827503 APPLE 10997 05/23/20 00:20:35 60:00 8604 3268 imp 3587080982063727 310410214827503 APPLE 10998 05/23/20 00:50:47 60:00 1395 6437ruftgonpho no 3587080982063727 310410214827503 APPLE 10999 05/23/20 01:20:35 60:00 8728 3052 imp 3587080982063727 310410214827503 APPLE 11000 05/23/20 01:50:47 60:00 623 525ruftgonpho no 3587080982063727 310410214827503 APPLE 11001 05/23/20 02:20:35 60:00 8388 2928 imp 3587080982063727 310410214827503 APPLE 11002 05/23/20 02:50:47 60:00 346 21Ormagonpho no 3587080982063727 310410214827503 APPLE 11003 05/23/20 03:20:35 60:00 19840 6172 imp 3587080982063727 310410214827503 APPLE 11004 05/23/20 03:50:47 60:00 514 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 11005 05/23/20 04:20:35 60:00 10144 3176 imp 3587080982063727 310410214827503 APPLE 11006 05/23/20 04:50:47 60:00 514 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 11007 05/23/20 05:20:35 60:00 10036 3392 imp 3587080982063727 310410214827503 APPLE 11008 05/23/20 05:50:47 60:00 346 21Ormagonpho no 3587080982063727 310410214827503 APPLE 11009 05/23/20 06:20:35 60:00 8604 3036 imp 3587080982063727 310410214827503 APPLE 11010 05/23/20 06:50:47 60:00 519 315roftgonpho no 3587080982063727 310410214827503 APPLE 11011 05/23/20 07:20:35 60:00 9928 3160 imp 3587080982063727 310410214827503 APPLE 11012 05/23/20 07:50:47 60:00 462 42Ormagonpho no 3587080982063727 310410214827503 APPLE NICOLL IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 'PHONES IPM01428 IPM01428 IPM01428 IPM01428 IPM01428 'PROMS IPM01428 IPM01428 IPM01428 !PROMS !PROMS !PROMS !PROMS !PROMS !PROMS !PROMS AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 452 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003096 NTifikE not for general distribution. EFTA 00117172 EFTA01251696 MOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. tr"`s adI‘ AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn IKE I INS I 11013 05/23/20 08:20:35 60:00 13460 4676 ims 3587080982063727 310410214827503 11014 05/23/20 08:50:47 60:00 751 735 nxtgenpho no 3587080982063727 310410214827503 11015 05/23/20 09:20:35 60:00 10488 4376 ins 3587080982063727 310410214827503 11016 05/23/20 09:50:47 60:00 462 420 nxtgenpho no 3587080982063727 310410214827503 11017 05/23/20 10:20:35 60:00 8928 3036 ins 3587080982063727 310410214827503 11018 05/23/20 10:50:47 60:00 467 274 nxtgenpho no 3587080982063727 310410214827503 11019 05/23/20 11:20:35 60:00 6956 2572 ins 3587080982063727 310410214827503 11020 05/23/20 11:50:47 60:00 126754 9337 nxtgenpho no 3587080982063727 310410214827503 11021 05/23/20 12:20:35 60:00 16668 6140 ins 3587080982063727 310410214827503 11022 05/23/20 12:50:47 60:00 5213 6882 nxtgenpho no 3587080982063727 310410214827503 11023 05/23/20 13:20:35 60:00 7712 3036 ins 3587080982063727 310410214827503 11024 05/23/20 13:50:47 60:00 462 420 nxtgenpho no 3587080982063727 310410214827503 11025 05/23/20 14:20:35 60:00 7296 2912 ins 3587080982063727 310410214827503 11026 05/23/20 14:50:47 60:00 74064 57167 nxtgenpho no 3587080982063727 310410214827503 11027 05/23/20 15:20:35 60:00 10036 3176 ins 3587080982063727 310410214827503 11028 05/23/20 15:50:47 60:00 4418 6736 nxtgenpho no 3587080982063727 310410214827503 11029 05/23/20 16:20:35 60:00 15108 4996 ins 3587080982063727 310410214827503 11030 05/23/20 16:50:47 60:00 514 525 nxtgenpho no 3587080982063727 310410214827503 11031 05/23/20 17:20:35 60:00 12028 4536 ins 3587080982063727 310410214827503 11032 05/23/20 17:50:47 60:00 346 210 nxtgenpho no 3587080982063727 310410214827503 11033 05/23/20 18:20:35 60:00 8496 3036 ins 3587080982063727 310410214827503 11034 05/23/20 18:50:47 60:00 346 210 nxtgenpho no 3587080982063727 310410214827503 11035 05/23/20 19:20:35 60:00 13800 4888 ins 3587080982063727 310410214827503 11036 05/23/20 19:50:47 60:00 346 210 nxtgenpho no 3587080982063727 310410214827503 11037 05/23/20 20:20:35 60:00 8496 3144 ins 3587080982063727 310410214827503 11038 05/23/20 20:50:47 60:00 6674 5550 nxtgenpho no 3587080982063727 310410214827503 11039 05/23/20 21:20:35 60:00 8388 2928 ins 3587080982063727 310410214827503 NUT NICOLL APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 453 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003097 PsiTn iliAL not for general distribution. EF-EA_00117173 EFTA01251697 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41011, AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time Originating ET Bytes Byte. Apn INCI IMPI HUM MODEL Number Up Dn (UTC) 11040 05/23/20 21:50:47 60:00 83025 66455 nxtgonpho no 3587080982063727 310410214827503 11041 05/23/20 22:20:35 60:00 20308 10332 ins 3587080982063727 310410214827503 11042 05/23/20 22:50:47 60:00 36629 20088ruftgonpho no 3587080982063727 310410214827503 11043 05/23/20 22:54:35 30:57 3590137 6247105 ins 3587080982063727 310410214827503 11044 05/23/20 23:20:35 60:00 26656 12480 ins 3587080982063727 310410214827503 11045 05/23/20 23:25:43 11:48 2306428 1670455 ins 3587080982063727 310410214827503 11046 05/23/20 23:50:47 60:00 26531 12418ruftgonpho no 3587080982063727 310410214827503 11047 05/24/20 00:20:35 60:00 7080 2912 ins 3587080982063727 310410214827503 11048 05/24/20 00:50:47 60:00 57330 35698 nxtgonpho no 3587080982063727 310410214827503 11049 05/24/20 01:20:35 60:00 6956 2912 imp 3587080982063727 310410214827503 11050 05/24/20 01:50:47 60:00 3633 1003ruftgonpho no 3587080982063727 310410214827503 11051 05/24/20 02:20:35 60:00 9928 3176 imp 3587080982063727 310410214827503 11052 05/24/20 02:50:47 60:00 225 21Ormagonpho no 3587080982063727 310410214827503 11053 05/24/20 03:20:35 60:00 13804 5860 imp 3587080982063727 310410214827503 11054 05/24/20 03:50:47 60:00 554 630 nxtgonpho no 3587080982063727 310410214827503 11055 05/24/20 04:20:35 60:00 6972 3540 imp 3587080982063727 310410214827503 11056 05/24/20 04:50:47 60:00 225 21Ormagonpho no 3587080982063727 310410214827503 11057 05/24/20 05:20:35 60:00 6956 2788 ins 3587080982063727 310410214827503 11058 05/24/20 05:50:47 60:00 225 21Ormagonpho no 3587080982063727 310410214827503 11059 05/24/20 06:20:35 60:00 10488 4144 ins 3587080982063727 310410214827503 11060 05/24/20 06:50:47 60:00 277 262ruftgonpho no 3587080982063727 310410214827503 11061 05/24/20 07:20:35 60:00 10036 3300 imp 3587080982063727 310410214827503 11062 05/24/20 07:50:47 60:00 346 210 nxtgonpho no 3587080982063727 310410214827503 11063 05/24/20 08:20:35 60:00 8604 3284 imp 3587080982063727 310410214827503 11064 05/24/20 08:50:47 60:00 329 419ruftgonpho no 3587080982063727 310410214827503 11065 05/24/20 09:20:35 60:00 13120 4552 imp 3587080982063727 310410214827503 11066 05/24/20 09:50:47 60:00 329 367ruftgonpho no 3587080982063727 310410214827503 APPLE !PROMS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 454 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003098 NTrifikE not for general distribution. EF-EA_00117174 EFTA01251698 NOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 411111i AT&T Run pato: Run Time: Data Osage for: 06/17/2020 Item Conn. Date Conn. Time (OTC) Originating Number ET Bytes Up 11067 05/24/20 10:20:35 60:00 8604 11068 05/24/20 10:50:47 60:00 105717 11069 05/24/20 11:20:35 60:00 15108 11070 05/24/20 11:50:47 60:00 173 11071 05/24/20 12:20:35 7:08 0 11072 05/24/20 12:27:43 0:01 0 11073 05/24/20 12:27:49 60:00 19676 11074 05/24/20 12:50:47 59:18 48816 11075 05/24/20 13:27:49 60:00 7420 11076 05/24/20 13:50:05 60:00 7287 11077 05/24/20 14:27:49 60:00 8496 11078 05/24/20 14:50:05 60:00 20381 11079 05/24/20 15:27:49 44:15 7080 11080 05/24/20 15:50:05 60:00 211351 11081 05/24/20 16:12:04 0:42 32152 11082 05/24/20 16:12:04 0:42 2704 11083 05/24/20 16:12:46 60:00 16852 11084 05/24/20 16:50:05 60:00 29232 11085 05/24/20 17:12:46 60:00 7172 11086 05/24/20 17:50:05 31:52 23593 11087 05/24/20 18:12:46 60:00 10272 11088 05/24/20 18:21:56 2:04 288 11089 05/24/20 18:21:57 2:04 48 11090 05/24/20 18:24:01 60:00 6599 11091 05/24/20 19:12:46 60:00 7280 11092 05/24/20 19:24:01 60:00 346 11093 05/24/20 20:12:46 60:00 8496 Byte. Apn Dn INCI INSI MARL MODEL 3268 ims 3587080982063727 310410214827503 APPLE IPMONEB 13502 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 4980 ins 3587080982063727 310410214827503 APPLE IPH01428 105ruagonpho 3587080982063727 310410214827503 APPLE IPH01428 no 0 ins 3587080982063727 310410214827503 APPLE IPH01428 0 ins 3587080982063727 310410214827503 APPLE IPMONEB 9528 ins -1 310410214827503 36522ruagonpho 3587080982063727 310410214827503 APPLE IPMONEB no 3004 ins -1 310410214827503 11686nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 3004 ins -1 310410214827503 14005nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 3524 ins 3587080982063727 310410214827503 APPLE IPMONEB 248792ruagonpho 3587080982063727 310410214827503 APPLE IPMONEB no 1324 ins 3587080982063727 310410214827503 APPLE IPMONEB 1324 ins 3587080982063727 310410214827503 APPLE IPMONEB 6828 ins 3587080982063727 310410214827503 APPLE IPMONEB 25422nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 2772 ins 3587080982063727 310410214827503 APPLE IPMONEB 17913ruftgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 3972 ins 3587080982063727 310410214827503 APPLE IPMONEB 48ruagonpho 3587080982063727 310410214827503 APPLE IPMONEB no Onxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 5270nxtgonpho 3587080982063727 310410214827503 APPLE IPMONEB no 2972 ins 3587080982063727 310410214827503 APPLE IPMONEB 210ruagonpho 3587080982063727 310410214827503 APPLE IPMONEB no 2896 ins 3587080982063727 310410214827503 APPLE IPMONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 455 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003099 NeTntikE not for general distribution. EFTA_OOI 17175 EFTA01251699 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Byte. Apn Dn ICI IMSI MARL 11094 05/24/20 20:24:01 60:00 699 630 nxtgenpho no 3587080982063727 310410214827503 APPLE 11095 05/24/20 21:12:46 60:00 8388 3004 imp 3587080982063727 310410214827503 APPLE 11096 05/24/20 21:24:01 60:00 462 420ruagenpho no 3587080982063727 310410214827503 APPLE 11097 05/24/20 22:12:46 60:00 13676 4768 imp 3587080982063727 310410214827503 APPLE 11098 05/24/20 22:24:01 60:00 8399 8432ruagenpho no 3587080982063727 310410214827503 APPLE 11099 05/24/20 23:12:46 60:00 10952 4328 imp 3587080982063727 310410214827503 APPLE 11100 05/24/20 23:24:01 60:00 142078 88636ruagenpho no 3587080982063727 310410214827503 APPLE 11101 05/25/20 00:12:46 60:00 8836 3020 imp 3587080982063727 310410214827503 APPLE 11102 05/25/20 00:24:01 60:00 346 210ruagenpho no 3587080982063727 310410214827503 APPLE 11103 05/25/20 01:12:46 60:00 7064 2756 imp 3587080982063727 310410214827503 APPLE 11104 05/25/20 01:24:01 60:00 519 315ruagenpho no 3587080982063727 310410214827503 APPLE 11105 05/25/20 02:12:46 60:00 6956 2648 imp 3587080982063727 310410214827503 APPLE 11106 05/25/20 02:24:01 60:00 526 525ruagenpho no 3587080982063727 310410214827503 APPLE 11107 05/25/20 03:12:46 60:00 18748 6788 imp 3587080982063727 310410214827503 APPLE 11108 05/25/20 03:24:01 60:00 346 210ruagenpho no 3587080982063727 310410214827503 APPLE 11109 05/25/20 04:12:46 60:00 6956 2648 imp 3587080982063727 310410214827503 APPLE 11110 05/25/20 04:24:01 60:00 346 210ruagenpho no 3587080982063727 310410214827503 APPLE 11111 05/25/20 05:12:46 60:00 6956 2648 imp 3587080982063727 310410214827503 APPLE 11112 05/25/20 05:24:01 60:00 519 315ruagenpho no 3587080982063727 310410214827503 APPLE 11113 05/25/20 06:12:46 60:00 7280 2896 imp 3587080982063727 310410214827503 APPLE 11114 05/25/20 06:24:01 60:00 346 210ruagenpho no 3587080982063727 310410214827503 APPLE 11115 05/25/20 07:12:46 60:00 10596 4312 imp 3587080982063727 310410214827503 APPLE 11116 05/25/20 07:24:01 60:00 519 315ruagenpho no 3587080982063727 310410214827503 APPLE 11117 05/25/20 08:12:46 60:00 10380 4364 imp 3587080982063727 310410214827503 APPLE 11118 05/25/20 08:24:01 60:00 346 210ruagenpho no 3587080982063727 310410214827503 APPLE 11119 05/25/20 09:12:46 60:00 6848 2756 imp 3587080982063727 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES IPMONE8 IPH01428 IPMONE8 IPMONE8 !PHONES !PHONES !PHONES !PHONES IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 IPMONE8 !PHONES !PHONES !PHONES !PHONES IPMONE8 IPMONE8 IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 456 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003100 NaTiliAL not for general distribution. EF-EA_00117176 EFTA01251700 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. ....,,,• ••-s` a. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number ET Sytes Up Bytom Apn Dn INEI IMPI MAKE HOD= 11120 05/25/20 09:24:01 60:00 346 210 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11121 05/25/20 10:12:46 60:00 8620 3772 imp 3587080982063727 310410214827503 APPLE !PRONGS 11122 05/25/20 10:24:01 60:00 346 210 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11123 05/25/20 11:12:46 60:00 6956 2756 imp 3587080982063727 310410214827503 APPLE !PHONES 11124 05/25/20 11:24:01 60:00 519 315ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11125 05/25/20 12:12:46 60:00 13676 4700 imp 3587080982063727 310410214827503 APPLE !PHONES 11126 05/25/20 12:24:01 60:00 346 210ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11127 05/25/20 13:12:46 60:00 7080 2772 imp 3587080982063727 310410214827503 APPLE !PHONES 11128 05/25/20 13:24:01 60:00 346 210 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11129 05/25/20 14:12:46 52:27 15108 5000 imp 3587080982063727 310410214827503 APPLE !PHONES 11130 05/25/20 14:24:01 60:00 58442 119003ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11131 05/25/20 15:05:13 60:00 129047 11765 imp 3587080982063727 310410214827503 APPLE !PHONES 11132 05/25/20 15:05:13 60:00 21279 12641 imp 3587080982063727 310410214827503 APPLE !PHONES 11133 05/25/20 15:24:01 60:00 69319 499950ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11134 05/25/20 16:05:13 48:34 0 0 imp 3587080982063727 310410214827503 APPLE !PRONGS 11135 05/25/20 16:05:13 48:34 0 108 imp 3587080982063727 310410214827503 APPLE !PHONES 11136 05/25/20 16:24:01 29:46 0 840ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11137 05/25/20 16:53:47 4:57 248099 641220ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11138 05/25/20 16:53:49 4:55 6693 6000 imp 3587080982063727 310410214827503 APPLE !PHONES 11139 05/25/20 16:58:44 60:00 48947 93202 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11140 05/25/20 16:58:46 60:00 11983 8737 ins 3587080982063727 310410214827503 APPLE !PHONES 11141 05/25/20 17:58:44 60:00 23550 58827ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11142 05/25/20 17:58:46 32:30 2596 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 11143 05/25/20 18:31:16 23:24 3424 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 11144 05/25/20 18:54:40 3:47 2628 1324 ins 3587080982063727 310410214827503 APPLE !PHONES 11145 05/25/20 18:58:27 60:00 12260 4344 ins 3587080982063727 310410214827503 APPLE !PHONES 11146 05/25/20 18:58:44 60:00 8657 12745ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 457 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003101 not for general distribution. EFTA_00I 17177 EFTA01251701 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. ..... ‘"1.e#00 AT&T Run pato: Run Time: Data Osage Tor: Itea Conn. Data 06/17/2020 Conn. Originating ET Time Number (OTC) Byte. Up Byte. Apn Dn INSI 11147 05/25/20 19:58:27 60:00 10036 3144 ins 3587080982063727 310410214827503 11148 05/25/20 19:58:44 60:00 1230 5994 nxtgonpho no 3587080982063727 310410214827503 11149 05/25/20 20:58:27 60:00 8496 3004 ins 3587080982063727 310410214827503 11150 05/25/20 20:58:44 60:00 832 4118ruftgonpho no 3587080982063727 310410214827503 11151 05/25/20 21:58:27 60:00 15812 6308 ins 3587080982063727 310410214827503 11152 05/25/20 21:58:44 60:00 571 420 nxtgonpho no 3587080982063727 310410214827503 11153 05/25/20 22:58:27 60:00 10144 3252 ins 3587080982063727 310410214827503 11154 05/25/20 22:58:44 6:35 3026 366 nxtgonpho no 3587080982063727 310410214827503 11155 05/25/20 23:05:18 1:45 288 48ruftgonpho no 3587080982063727 310410214827503 11156 05/25/20 23:05:19 1:45 48 Oruftgonpho no 3587080982063727 310410214827503 11157 05/25/20 23:07:04 60:00 7351 13113ruftgonpho no 3587080982063727 310410214827503 11158 05/25/20 23:58:27 60:00 8480 2896 ins 3587080982063727 310410214827503 11159 05/26/20 00:07:04 60:00 46662 34373ruftgonpho no 3587080982063727 310410214827503 11160 05/26/20 00:58:27 60:00 8496 3004 ins 3587080982063727 310410214827503 11161 05/26/20 01:07:04 60:00 57410 35601ruftgonpho no 3587080982063727 310410214827503 11162 05/26/20 01:58:27 60:00 11168 4668 ins 3587080982063727 310410214827503 11163 05/26/20 02:07:04 60:00 739 735ruftgonpho no 3587080982063727 310410214827503 11164 05/26/20 02:58:27 60:00 11920 4396 ins 3587080982063727 310410214827503 11165 05/26/20 03:07:04 60:00 578 630ruftgonpho no 3587080982063727 310410214827503 11166 05/26/20 03:58:27 60:00 7172 2988 ins 3587080982063727 310410214827503 11167 05/26/20 04:07:04 60:00 4320 7358ruftgonpho no 3587080982063727 310410214827503 11168 05/26/20 04:58:27 60:00 10272 4096 ins 3587080982063727 310410214827503 11169 05/26/20 05:07:04 60:00 1109 1073ruftgonpho no 3587080982063727 310410214827503 11170 05/26/20 05:58:27 60:00 8496 3004 ins 3587080982063727 310410214827503 11171 05/26/20 06:07:04 60:00 803 892ruftgonpho no 3587080982063727 310410214827503 11172 05/26/20 06:58:27 60:00 8388 2896 ins 3587080982063727 310410214827503 MARL MODEL APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE IPHONE8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 458 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003102 NTnilikk not for general distribution. EF-EA_00117178 EFTA01251702 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. tr‘"g°afedi AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 1S:54:53 Conn. Originating ET Time Number (UTC) Bytes Up Bytes( Apn Dn INEI IMSI N11YL MODEL 11173 05/26/20 07:07:04 60:00 1040 1050 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 11174 05/26/20 07:58:27 60:00 13804 5472 ims 3587080982063727 310410214827503 APPLE IPHONEB 11175 05/26/20 08:07:04 60:00 514 525 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 11176 05/26/20 08:58:27 60:00 7064 2880 ims 3587080982063727 310410214827503 APPLE IPHONEB 11177 05/26/20 09:07:04 60:00 514 525 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 11178 05/26/20 09:58:27 60:00 8388 2896 ims 3587080982063727 310410214827503 APPLE 'PHONES 11179 05/26/20 10:07:04 60:00 225 210 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11180 05/26/20 10:58:27 60:00 6848 2756 ims 3587080982063727 310410214827503 APPLE !PHONES 11181 05/26/20 11:07:04 60:00 10185 7444 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11182 05/26/20 11:58:27 60:00 11920 4436 ims 3587080982063727 310410214827503 APPLE !PHONES 11183 05/26/20 12:07:04 60:00 173 105 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 11184 05/26/20 12:58:27 60:00 12028 4612 ims 3587080982063727 310410214827503 APPLE IPHONEB 11185 05/26/20 13:07:04 31:15 173 105 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 11186 05/26/20 13:38:18 2:04 5234 6399 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11187 05/26/20 13:38:20 2:03 6399 4946 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11188 05/26/20 13:40:23 60:00 6905 5937 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 11189 05/26/20 13:58:27 60:00 20392 9244 vas 3587080982063727 310410214827503 APPLE IPHONEB 11190 05/26/20 14:10:31 0:05 0 0 mos 3587080982063727 310410214827503 APPLE IPHONEB 11191 05/26/20 14:40:23 60:00 35173 31137 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 11192 05/26/20 14:58:27 60:00 8728 3128 ims 3587080982063727 310410214827503 APPLE 'PHONES 11193 05/26/20 15:40:23 60:00 31738 18963 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 11194 05/26/20 15:58:27 34:13 3764 1448 ims 3587080982063727 310410214827503 APPLE !PHONES 11195 05/26/20 16:32:40 0:33 81484 1412 ims 3587080982063727 310410214827503 APPLE !PHONES 11196 05/26/20 16:32:40 0:33 2752 1324 ims 3587080982063727 310410214827503 APPLE IPHONEB 11197 05/26/20 16:33:13 60:00 13444 4468 ims 3587080982063727 310410214827503 APPLE IPHONEB 11198 05/26/20 16:40:23 60:00 53176 37079 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHONEB 11199 05/26/20 17:33:13 53:51 21888 17644 ims 3587080982063727 310410214827503 APPLE IPHONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 459 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003103 NTailiAL not for general distribution. EF-EA_00117179 EFTA01251703 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in dal AT&T Run Date: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating Number LT Bytes Bytoa Apn Up Dn IND I INSI MARL NICOLL 11200 05/26/20 17:40:23 36:13 40724 33425rumgonpho no 3587080982063727 310410214827503 11201 05/26/20 18:03:20 0:38 13253 34786 ims 3587080982063727 310410214827503 11202 05/26/20 18:16:36 60:00 117250 95888 nxtgonpho no 3587080982063727 310410214827503 11203 05/26/20 18:27:04 3:49 37984 1412 ims 3587080982063727 310410214827503 11204 05/26/20 18:27:04 3:49 2752 1324 ims 3587080982063727 310410214827503 11205 05/26/20 18:30:53 60:00 100784 69504 ims 3587080982063727 310410214827503 11206 05/26/20 19:02:23 0:29 0 1649 ims 3587080982063727 310410214827503 11207 05/26/20 19:12:50 0:24 0 10712 ims 3587080982063727 310410214827503 11208 05/26/20 19:16:36 60:00 27077 17602 nxtgonpho no 3587080982063727 310410214827503 11209 05/26/20 19:19:49 0:48 111993 116256 ims 3587080982063727 310410214827503 11210 05/26/20 19:20:46 0:05 845 11451 ims 3587080982063727 310410214827503 11211 05/26/20 19:20:56 0:32 7629 19005 ims 3587080982063727 310410214827503 11212 05/26/20 19:21:34 7:01 1434820 762443 ims 3587080982063727 310410214827503 11213 05/26/20 19:30:53 60:00 41316 22656 ims 3587080982063727 310410214827503 11214 05/26/20 20:00:28 5:32 603763 572496 ims 3587080982063727 310410214827503 11215 05/26/20 20:06:10 0:45 89257 76088 ims 3587080982063727 310410214827503 11216 05/26/20 20:16:36 60:00 5619893 4931777 nxtgonpho no 3587080982063727 310410214827503 11217 05/26/20 20:30:53 18:56 5072 1572 ims 3587080982063727 310410214827503 11218 05/26/20 20:49:49 0:53 101448 1412 ims 3587080982063727 310410214827503 11219 05/26/20 20:49:49 0:53 2644 1324 ims 3587080982063727 310410214827503 11220 05/26/20 20:50:42 2:39 3424 1432 ims 3587080982063727 310410214827503 11221 05/26/20 20:53:21 3:47 15932 1412 ims 3587080982063727 310410214827503 11222 05/26/20 20:53:21 3:47 2644 1324 ims 3587080982063727 310410214827503 11223 05/26/20 20:57:08 37:07 8620 3020 ims 3587080982063727 310410214827503 11224 05/26/20 21:16:36 60:00 20410 60185 nxtgonpho no 3587080982063727 310410214827503 11225 05/26/20 21:34:14 1:25 2644 1412 ims 3587080982063727 310410214827503 11226 05/26/20 21:34:15 1:24 2644 1324 ims 3587080982063727 310410214827503 11227 05/26/20 21:35:39 1:05 4964 1572 ims 3587080982063727 310410214827503 11228 05/26/20 21:36:44 45:05 5240 2736 ims 3587080982063727 310410214827503 11229 05/26/20 21:36:44 45:05 5240 2648 ism 3587080982063727 310410214827503 11230 05/26/20 22:16:36 60:00 17332 93390 nxtgonpho no 3587080982063727 310410214827503 11231 05/26/20 22:21:49 60:00 22232 12448 ism 3587080982063727 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained hereCtoNelt APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE &PHONES Page 460 SDNY_GM_ 00003104 Ns—Ent/Mal not for general distribution. EFTA_00I 17180 EFTA01251704 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Timo (UTC) originating Number ET Bytes Up Bytom Apn Dn INZI INSI MARL 11232 05/26/20 22:46:26 0:43 9346 18783 ims 3587080982063727 310410214827503 APPLE 11233 05/26/20 23:16:36 60:00 120503 36202 nxtgonpho no 3587080982063727 310410214827503 APPLE 11234 05/26/20 23:21:49 9:19 0 0 ims 3587080982063727 310410214827503 APPLE 11235 05/26/20 23:31:08 54:34 20076 3952 ims 3587080982063727 310410214827503 APPLE 11236 05/26/20 23:31:08 54:34 7944 3864 ims 3587080982063727 310410214827503 APPLE 11237 05/27/20 00:16:36 60:00 751 735ruftgonpho no 3587080982063727 310410214827503 APPLE 11238 05/27/20 00:25:42 60:00 17100 6092 ims 3587080982063727 310410214827503 APPLE 11239 05/27/20 01:16:36 60:00 751 735ruftgonpho no 3587080982063727 310410214827503 APPLE 11240 05/27/20 01:25:42 60:00 8388 2896 ims 3587080982063727 310410214827503 APPLE 11241 05/27/20 02:16:36 29:02 46307 31337ruftgonpho no 3587080982063727 310410214827503 APPLE 11242 05/27/20 02:25:42 60:00 6956 2648 ims 3587080982063727 310410214827503 APPLE 11243 05/27/20 02:45:37 2:02 288 48ruftgonpho no 3587080982063727 310410214827503 APPLE 11244 05/27/20 02:45:38 2:02 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 11245 05/27/20 02:47:40 60:00 139139 80811ruftgonpho no 3587080982063727 310410214827503 APPLE 11246 05/27/20 03:25:42 60:00 10380 3972 ims 3587080982063727 310410214827503 APPLE 11247 05/27/20 03:47:40 60:00 45200 27992ruftgonpho no 3587080982063727 310410214827503 APPLE 11248 05/27/20 04:25:42 60:00 8388 2896 ims 3587080982063727 310410214827503 APPLE 11249 05/27/20 04:47:40 60:00 3688 6316ruftgonpho no 3587080982063727 310410214827503 APPLE 11250 05/27/20 05:25:42 60:00 12244 4860 ims 3587080982063727 310410214827503 APPLE 11251 05/27/20 05:47:40 60:00 751 735ruftgonpho no 3587080982063727 310410214827503 APPLE 11252 05/27/20 06:25:42 60:00 8512 3772 ims 3587080982063727 310410214827503 APPLE 11253 05/27/20 06:47:40 60:00 744 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 11254 05/27/20 07:25:42 60:00 11920 4344 ims 3587080982063727 310410214827503 APPLE 11255 05/27/20 07:47:40 60:00 808 630 nxtgonpho no 3587080982063727 310410214827503 APPLE 11256 05/27/20 08:25:42 60:00 8496 3020 ims 3587080982063727 310410214827503 APPLE 11257 05/27/20 08:47:40 60:00 462 420ruftgonpho no 3587080982063727 310410214827503 APPLE 11258 05/27/20 09:25:42 60:00 7080 2664 ims 3587080982063727 310410214827503 APPLE MODEL !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 461 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003105 PsisTiliAL not for general distribution. EF-EAJVII7181 EFTA01251705 MOBILITY The information contained heralCONe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41111. ....,./ ••-s` -a AT&T Run Data: Run TIM*: Data Osage For: 06/17/2020 Iten Conn. Conn. Data Time (OTC) Originating ET Bytes Bytom Apn INEI IMSI NUM MODEL Number Op On 11259 05/27/20 09:47:40 60:00 346 11260 05/27/20 10:25:42 60:00 6848 11261 05/27/20 10:47:40 60:00 58296 11262 05/27/20 11:25:42 60:00 18640 11263 05/27/20 11:47:40 60:00 17401 11264 05/27/20 12:25:42 60:00 10144 11265 05/27/20 12:47:40 60:00 346 11266 05/27/20 13:25:42 60:00 7296 11267 05/27/20 13:47:40 60:00 48449 11268 05/27/20 14:25:42 60:00 12420 11269 05/27/20 14:47:40 60:00 19491 11270 05/27/20 15:25:42 60:00 15576 11271 05/27/20 15:47:40 60:00 48403 11272 05/27/20 16:25:42 60:00 8496 11273 05/27/20 16:47:40 60:00 112706 11274 05/27/20 17:25:42 60:00 7188 11275 05/27/20 17:47:40 53:52 92506 11276 05/27/20 18:25:42 23:48 3548 11277 05/27/20 18:41:31 0:55 288 11278 05/27/20 18:41:32 0:55 48 11279 05/27/20 18:42:27 60:00 7652706 11280 05/27/20 18:49:29 1:14 227312 11281 05/27/20 18:49:30 1:13 3376 11282 05/27/20 18:50:43 1:21 3548 11283 05/27/20 18:52:04 1:45 29164 11284 05/27/20 18:52:04 1:45 3952 11285 05/27/20 18:53:49 15:27 4964 210ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 2648 ins 3587080982063727 310410214827503 APPLE 'PHONES 22185ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 6448 ins 3587080982063727 310410214827503 APPLE 'PHONES 5763ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 3252 ims 3587080982063727 310410214827503 APPLE 'PHONES 210ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 2880 ims 3587080982063727 310410214827503 APPLE 'PHONES 41613ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 3284 ins 3587080982063727 310410214827503 APPLE 'PHONES 5874ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 5984 ins 3587080982063727 310410214827503 APPLE 'PHONES 20501 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 3004 ins 3587080982063727 310410214827503 APPLE !PHONES 2897288ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 2772 ins 3587080982063727 310410214827503 APPLE !PHONES 76534ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 2200 ins 3587080982063727 310410214827503 APPLE !PHONES 48ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no Oruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 7794856ruftgenpho 3587080982063727 310410214827503 APPLE 'PHONES no 1536 ims 3587080982063727 310410214827503 APPLE 'PHONES 1448 ims 3587080982063727 310410214827503 APPLE 'PHONES 2308 ims 3587080982063727 310410214827503 APPLE 'PHONES 1536 ins 3587080982063727 310410214827503 APPLE 'PHONES 1448 ins 3587080982063727 310410214827503 APPLE 'PHONES 1572 ins 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 462 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003106 NaTtAdti not for general distribution. EFTA 00117182 EFTA01251706 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number LT Sytes Up Byte. Dn Apn INCI INSI MAfl 11286 05/27/20 19:09:16 6:37 2644 1412 ims 3587080982063727 310410214827503 APPLE 11287 05/27/20 19:09:16 6:37 2644 1324 imp 3587080982063727 310410214827503 APPLE 11288 05/27/20 19:15:53 10:11 4964 1680 imp 3587080982063727 310410214827503 APPLE 11289 05/27/20 19:26:04 21:42 29328 1412 imp 3587080982063727 310410214827503 APPLE 11290 05/27/20 19:26:04 21:42 2644 1324 imp 3587080982063727 310410214827503 APPLE 11291 05/27/20 19:42:27 60:00 1468651 2192847 nxtgonpho no 3587080982063727 310410214827503 APPLE 11292 05/27/20 19:47:46 34:04 47948 29992 imp 3587080982063727 310410214827503 APPLE 11293 05/27/20 19:57:45 0:29 2059 12321 imp 3587080982063727 310410214827503 APPLE 11294 05/27/20 20:19:34 2:16 310500 439921 imp 3587080982063727 310410214827503 APPLE 11295 05/27/20 20:21:50 0:20 22759 3904 imp 3587080982063727 310410214827503 APPLE 11296 05/27/20 20:21:50 0:20 8512 3816 imp 3587080982063727 310410214827503 APPLE 11297 05/27/20 20:21:50 0:06 24743 24066 los 3587080982063727 310410214827503 APPLE 11298 05/27/20 20:21:50 0:06 24743 24066 los 3587080982063727 310410214827503 APPLE 11299 05/27/20 20:22:10 5:19 48648 35140 los 3587080982063727 310410214827503 APPLE 11300 05/27/20 20:22:13 0:16 5753 28311 imp 3587080982063727 310410214827503 APPLE 11301 05/27/20 20:22:31 0:19 2956 14614 ism 3587080982063727 310410214827503 APPLE 11302 05/27/20 20:26:59 0:14 10995 24979 imp 3587080982063727 310410214827503 APPLE 11303 05/27/20 20:27:15 0:14 26901 13651 imp 3587080982063727 310410214827503 APPLE 11304 05/27/20 20:27:28 2:17 34632 11196 imp 3587080982063727 310410214827503 APPLE 11305 05/27/20 20:27:29 2:16 308528 407579 imp 3587080982063727 310410214827503 APPLE 11306 05/27/20 20:27:29 2:16 12828 11108 imp 3587080982063727 310410214827503 APPLE 11307 05/27/20 20:27:29 2:16 308528 407579 imp 3587080982063727 310410214827503 APPLE 11308 05/27/20 20:29:45 13:26 23900 15528 imp 3587080982063727 310410214827503 APPLE 11309 05/27/20 20:29:45 0:09 2623 789 imp 3587080982063727 310410214827503 APPLE 11310 05/27/20 20:31:25 0:02 0 0 imp 3587080982063727 310410214827503 APPLE 11311 05/27/20 20:34:23 8:48 1792647 899650 ins 3587080982063727 310410214827503 APPLE 11312 05/27/20 20:42:27 60:00 60200 43002nxtgonpho no 3587080982063727 310410214827503 APPLE 11313 05/27/20 20:43:11 7:48 1416988 1143983 ins 3587080982063727 310410214827503 APPLE 11314 05/27/20 20:43:11 7:49 1416988 1143983 ins 3587080982063727 310410214827503 APPLE 11315 05/27/20 20:43:11 7:59 50126 7860 ins 3587080982063727 310410214827503 APPLE 11316 05/27/20 20:43:11 7:59 15840 7772 ins 3587080982063727 310410214827503 APPLE 11317 05/27/20 20:51:10 0:00 0 0 ins 3587080982063727 310410214827503 APPLE 11318 05/27/20 20:51:10 0:00 0 0 ins 3587080982063727 310410214827503 APPLE 11319 05/27/20 20:51:10 38:58 6540666 7950919 ins 3587080982063727 310410214827503 APPLE 11320 05/27/20 20:51:10 60:00 44124 31640 ins 3587080982063727 310410214827503 APPLE MODEL 110HONZ8 110HONZ8 110HONZ8 110HONZ8 110HONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONZ8 IOHONE8 IOHONE8 IOHONE8 IOHONE8 IOHONE8 IOHONE8 IOHONE8 IOHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 463 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003107 NTnAL not for general distribution. EF-EA_00117183 EFTA01251707 MOBILITY The information contained hereeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. AT&T Run Date: Run Timo: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Humber ET Bytes Up Bytes( Apn Dn Tier IMBI MAfl 11321 05/27/20 21:37:03 0:33 2854 17432 imp 3587080982063727 310410214827503 APPLE 11322 05/27/20 21:42:27 60:00 56058 35389nxtgonpho no 3587080982063727 310410214827503 APPLE 11323 05/27/20 21:51:10 60:00 8944 3468 imp 3587080982063727 310410214827503 APPLE 11324 05/27/20 22:42:27 60:00 256806 93639roftgonpho no 3587080982063727 310410214827503 APPLE 11325 05/27/20 22:51:10 60:00 6956 2772 imp 3587080982063727 310410214827503 APPLE 11326 05/27/20 23:42:27 60:00 80529 87769roftgonpho no 3587080982063727 310410214827503 APPLE 11327 05/27/20 23:51:10 17:41 3424 1324 imp 3587080982063727 310410214827503 APPLE 11328 05/28/20 00:08:51 8:07 153176 1660 imp 3587080982063727 310410214827503 APPLE 11329 05/28/20 00:08:51 8:07 4416 1572 imp 3587080982063727 310410214827503 APPLE 11330 05/28/20 00:16:58 4:15 5056 1712 imp 3587080982063727 310410214827503 APPLE 11331 05/28/20 00:21:13 60:00 7836 3756 imp 3587080982063727 310410214827503 APPLE 11332 05/28/20 00:21:13 60:00 7836 3844 imp 3587080982063727 310410214827503 APPLE 11333 05/28/20 00:42:27 60:00 6034 6629roftgonpho no 3587080982063727 310410214827503 APPLE 11334 05/28/20 01:21:13 35:08 5624 2964 imp 3587080982063727 310410214827503 APPLE 11335 05/28/20 01:21:13 35:08 5624 2964 imp 3587080982063727 310410214827503 APPLE 11336 05/28/20 01:42:27 16:10 39032 122533ruagonpho no 3587080982063727 310410214827503 APPLE 11337 05/28/20 01:56:21 2:16 8080 3408 imp 3587080982063727 310410214827503 APPLE 11338 05/28/20 02:01:35 60:00 76938 325868ruagonpho no 3587080982063727 310410214827503 APPLE 11339 05/28/20 02:01:38 60:00 13065 8742 imp 3587080982063727 310410214827503 APPLE 11340 05/28/20 03:01:35 60:00 578 630roftgonpho no 3587080982063727 310410214827503 APPLE 11341 05/28/20 03:01:38 60:00 5408 2788 imp 3587080982063727 310410214827503 APPLE 11342 05/28/20 04:01:35 60:00 735 1639roftgonpho no 3587080982063727 310410214827503 APPLE 11343 05/28/20 04:01:38 60:00 5192 2680 imp 3587080982063727 310410214827503 APPLE 11344 05/28/20 05:01:35 60:00 225 210ruagonpho no 3587080982063727 310410214827503 APPLE 11345 05/28/20 05:01:38 60:00 5192 2664 imp 3587080982063727 310410214827503 APPLE 11346 05/28/20 06:01:35 60:00 3194 21908roftgonpho no 3587080982063727 310410214827503 APPLE 11347 05/28/20 06:01:38 60:00 5300 2680 imp 3587080982063727 310410214827503 APPLE 11348 05/28/20 07:01:35 60:00 289 315roftgonpho 3587080982063727 310410214827503 APPLE no MODEL ITHOME8 DRONES ITROME8 ITROME8 ITROME8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES ITROME8 DRONES DRONES DRONES DRONES DRONES DRONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 464 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003108 NIT IAL not for general distribution. EF-EA_00117184 EFTA01251708 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 18:56:56 Conn. Originating ET Time Number (UTC) Bytes Up Bytom Apn Dn 1/482 IMBI MUM 11349 05/28/20 07:01:38 60:00 10492 5412 imo 3587080982063727 310410214827503 APPLE 11350 05/28/20 08:01:35 60:00 555 1020 nxtgonpho no 3587080982063727 310410214827503 APPLE 11351 05/28/20 08:01:38 60:00 5408 2588 ins 3587080982063727 310410214827503 APPLE 11352 05/28/20 09:01:35 60:00 289 315ruftgonpho no 3587080982063727 310410214827503 APPLE 11353 05/28/20 09:01:38 60:00 5408 2696 ins 3587080982063727 310410214827503 APPLE 11354 05/28/20 10:01:35 60:00 3101 21777ruftgonpho no 3587080982063727 310410214827503 APPLE 11355 05/28/20 10:01:38 60:00 7572 3912 ins 3587080982063727 310410214827503 APPLE 11356 05/28/20 11:01:35 55:07 46383 155843ruftgonpho no 3587080982063727 310410214827503 APPLE 11357 05/28/20 11:01:38 52:17 2812 1448 ins 3587080982063727 310410214827503 APPLE 11358 05/28/20 11:53:55 60:00 15560 6124 ins 3587080982063727 310410214827503 APPLE 11359 05/28/20 11:56:41 5:33 288 48ruftgonpho no 3587080982063727 310410214827503 APPLE 11360 05/28/20 11:56:42 5:33 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 11361 05/28/20 12:02:15 1:23 2494 2402ruftgonpho no 3587080982063727 310410214827503 APPLE 11362 05/28/20 12:03:37 2:04 4557 6014 nxtgonpho no 3587080982063727 310410214827503 APPLE 11363 05/28/20 12:03:38 2:04 6014 4269 nxtgonpho no 3587080982063727 310410214827503 APPLE 11364 05/28/20 12:05:42 15:48 0 Oruftgonpho no 3587080982063727 310410214827503 APPLE 11365 05/28/20 12:21:29 2:04 288 48ruftgonpho no 3587080982063727 310410214827503 APPLE 11366 05/28/20 12:21:31 2:03 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 11367 05/28/20 12:23:34 60:00 6419 4850ruftgonpho no 3587080982063727 310410214827503 APPLE 11368 05/28/20 12:53:55 60:00 8836 3268 ins 3587080982063727 310410214827503 APPLE 11369 05/28/20 13:23:34 60:00 63701 69842 nxtgonpho no 3587080982063727 310410214827503 APPLE 11370 05/28/20 13:53:55 27:21 5072 1588 ins 3587080982063727 310410214827503 APPLE 11371 05/28/20 14:21:16 4:27 14776 1428 ins 3587080982063727 310410214827503 APPLE 11372 05/28/20 14:21:16 4:27 2644 1340 ins 3587080982063727 310410214827503 APPLE 11373 05/28/20 14:23:34 60:00 5788 9155ruftgonpho no 3587080982063727 310410214827503 APPLE MODEL !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 'PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 465 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003109 NToliAlt not for general distribution. EF-EA_00117185 EFTA01251709 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 18:56:56 Conn. Time (OTC) originating Number ET Bytes Up Bytes Dn Apn IKE I INSI MAKE 11374 05/28/20 14:25:43 1:43 3532 1448 ims 3587080982063727 310410214827503 APPLE 11375 05/28/20 14:27:26 1:03 2644 1428 ims 3587080982063727 310410214827503 APPLE 11376 05/28/20 14:27:26 1:03 2644 1340 ins 3587080982063727 310410214827503 APPLE 11377 05/28/20 14:28:29 14:58 3440 2448 ins 3587080982063727 310410214827503 APPLE 11378 05/28/20 14:43:27 60:00 7836 4108 ims 3587080982063727 310410214827503 APPLE 11379 05/28/20 14:43:27 60:00 7836 4020 ins 3587080982063727 310410214827503 APPLE 11380 05/28/20 15:23:34 60:00 9735 9332 nxtgonpho no 3587080982063727 310410214827503 APPLE 11381 05/28/20 15:43:27 41:49 42176 1340 ins 3587080982063727 310410214827503 APPLE 11382 05/28/20 15:43:27 41:49 2596 1340 ins 3587080982063727 310410214827503 APPLE 11383 05/28/20 16:23:34 60:00 3657935 3735645 nxtgenpho no 3587080982063727 310410214827503 APPLE 11384 05/28/20 16:25:16 15:34 5072 1712 ims 3587080982063727 310410214827503 APPLE 11385 05/28/20 16:40:50 4:57 39512 1428 ins 3587080982063727 310410214827503 APPLE 11386 05/28/20 16:40:50 4:57 2644 1340 ins 3587080982063727 310410214827503 APPLE 11387 05/28/20 16:45:50 0:34 6685 5999 ins 3587080982063727 310410214827503 APPLE 11388 05/28/20 16:46:24 56:32 80324 54744 ins 3587080982063727 310410214827503 APPLE 11389 05/28/20 16:49:17 0:36 4888 22127 ins 3587080982063727 310410214827503 APPLE 11390 05/28/20 16:50:02 0:05 4216 10007 ins 3587080982063727 310410214827503 APPLE 11391 05/28/20 16:50:18 0:23 25630 41481 ins 3587080982063727 310410214827503 APPLE 11392 05/28/20 16:50:45 0:09 0 0 ins 3587080982063727 310410214827503 APPLE 11393 05/28/20 17:10:07 4:02 711572 520280 ins 3587080982063727 310410214827503 APPLE 11394 05/28/20 17:14:16 22:37 3682982 3256721 ins 3587080982063727 310410214827503 APPLE 11395 05/28/20 17:23:34 60:00 1664510 1837148 nxtgenpho no 3587080982063727 310410214827503 APPLE 11396 05/28/20 17:42:56 14:15 2752 1340 ins 3587080982063727 310410214827503 APPLE 11397 05/28/20 17:57:11 2:20 4748 1464 ins 3587080982063727 310410214827503 APPLE 11398 05/28/20 17:59:31 18:35 2752 1340 ins 3587080982063727 310410214827503 APPLE 11399 05/28/20 18:18:06 16:16 4964 1588 ins 3587080982063727 310410214827503 APPLE 11400 05/28/20 18:23:34 60:00 47446 36906 nxtgenpho no 3587080982063727 310410214827503 APPLE 11401 05/28/20 18:34:22 1:58 2644 1340 ins 3587080982063727 310410214827503 APPLE 11402 05/28/20 18:36:20 0:18 4964 1588 ins 3587080982063727 310410214827503 APPLE 11403 05/28/20 18:36:38 3:57 2644 1340 ins 3587080982063727 310410214827503 APPLE 11404 05/28/20 18:40:35 2:15 7940 2084 ins 3587080982063727 310410214827503 APPLE 11405 05/28/20 18:42:50 0:53 2644 1340 ins 3587080982063727 310410214827503 APPLE 11406 05/28/20 18:43:43 4:44 4964 1480 ins 3587080982063727 310410214827503 APPLE NODAL IPHONZ8 IPHONZ8 IPHONZ8 IPHONZ8 IPHONZ8 !PHONES !PHONES !PHONES IPHONE8 !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES !PHONES IPHONE8 !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 466 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003110 NsFYNE not for general distribution. EF-EA_00117186 EFTA01251710 MOBILITY The information contained heraleeNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. traiam‘S°/ AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 16:66:56 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn On INZI IMBI 11407 05/28/20 18:48:27 9:17 2644 1340 ins 3587080982063727 310410214827503 11408 05/28/20 18:57:44 5:54 4964 1588 ims 3587080982063727 310410214827503 11409 05/28/20 19:03:38 7:51 2644 1340 ins 3587080982063727 310410214827503 11410 05/28/20 19:11:29 1:11 4556 2464 ins 3587080982063727 310410214827503 11411 05/28/20 19:12:40 0:18 2644 1340 imp 3587080982063727 310410214827503 11412 05/28/20 19:12:58 60:00 10596 4252 imp 3587080982063727 310410214827503 11413 05/28/20 19:23:34 60:00 90472 61202 nxtgonpho no 3587080982063727 310410214827503 11414 05/28/20 20:12:58 60:00 8604 3160 ins 3587080982063727 310410214827503 11415 05/28/20 20:23:34 10:56 550 525 nxtgonpho no 3587080982063727 310410214827503 11416 05/28/20 20:34:29 5:40 288 48 nxtgonpho no 3587080982063727 310410214827503 11417 05/28/20 20:34:31 5:39 48 0 nxtgonpho no 3587080982063727 310410214827503 11418 05/28/20 20:40:10 25:46 35557 34463 nxtgonpho no 3587080982063727 310410214827503 11419 05/28/20 21:05:56 60:00 142518 98080 nxtgonpho no 3587080982063727 310410214827503 11420 05/28/20 21:12:58 60:00 9912 2944 Las 3587080982063727 310410214827503 11421 05/28/20 22:05:56 60:00 38816 28220 nxtgonpho no 3587080982063727 310410214827503 11422 05/28/20 22:12:58 60:00 15236 5984 Las 3587080982063727 310410214827503 11423 05/28/20 23:05:56 60:00 7540 11121 nxtgonpho no 3587080982063727 310410214827503 11424 05/28/20 23:12:58 60:00 8496 3036 ins 3587080982063727 310410214827503 11425 05/29/20 00:05:56 60:00 142580 62595 nxtgonpho no 3587080982063727 310410214827503 11426 05/29/20 00:12:58 1:21 0 0 ins 3587080982063727 310410214827503 11427 05/29/20 00:14:19 1:52 2644 1340 ins 3587080982063727 310410214827503 11428 05/29/20 00:16:11 60:00 12044 4500 ins 3587080982063727 310410214827503 11429 05/29/20 01:05:56 53:24 43622 29764 nxtgonpho no 3587080982063727 310410214827503 11430 05/29/20 01:16:11 60:00 6956 2680 ins 3587080982063727 310410214827503 11431 05/29/20 01:59:20 0:33 48 0 nxtgonpho no 3587080982063727 310410214827503 11432 05/29/20 01:59:52 2:05 5170 6246 nxtgonpho no 3587080982063727 310410214827503 11433 05/29/20 01:59:53 2:06 6246 4882 nxtgonpho no 3587080982063727 310410214827503 teal NICOLL APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 1PHONZ8 APPLE 'PHONES APPLE !PHONES APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE !PHONES APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 APPLE 1PHONZ8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003111 PsiTniliAL not for general distribution. Page 467 EFTA_OOI 17187 EFTA01251711 MOBILITY The information contained hereCteNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ap. tra""sei e AT&T Run Date: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Date Time (UTC) originating Number ET Bytes Byte. Apn Up Dn INLI IMSI MARL MODEL 11434 05/29/20 02:01:58 60:00 644077 49388 nxtgenpho no 3587080982063727 310410214827503 11435 05/29/20 02:16:11 46:39 6956 2896 ins 3587080982063727 310410214827503 11436 05/29/20 03:01:58 60:00 297501 812446ruftgenpho no 3587080982063727 310410214827503 11437 05/29/20 03:02:50 4:03 5972 2964 ins 3587080982063727 310410214827503 11438 05/29/20 03:06:53 60:00 11920 4500 ins 3587080982063727 310410214827503 11439 05/29/20 04:01:58 40:38 4010 5034ruftgenpho no 3587080982063727 310410214827503 11440 05/29/20 04:06:53 60:00 10036 3176 ins 3587080982063727 310410214827503 11441 05/29/20 04:42:35 3:14 288 48ruftgenpho no 3587080982063727 310410214827503 11442 05/29/20 04:42:36 3:14 48 Oruftgenpho no 3587080982063727 310410214827503 11443 05/29/20 04:45:50 60:00 9319 8347ruftgenpho no 3587080982063727 310410214827503 11444 05/29/20 05:06:53 60:00 9928 3176 ins 3587080982063727 310410214827503 11445 05/29/20 05:45:50 60:00 751 735ruftgenpho no 3587080982063727 310410214827503 11446 05/29/20 06:06:53 60:00 6956 2896 ins 3587080982063727 310410214827503 11447 05/29/20 06:45:50 60:00 635 525ruftgenpho no 3587080982063727 310410214827503 11448 05/29/20 07:06:53 60:00 8388 2928 ins 3587080982063727 310410214827503 11449 05/29/20 07:45:50 60:00 751 735 nxtgenpho no 3587080982063727 310410214827503 11450 05/29/20 08:06:53 60:00 13912 5628 ins 3587080982063727 310410214827503 11451 05/29/20 08:45:50 60:00 519 315ruftgenpho no 3587080982063727 310410214827503 11452 05/29/20 09:06:53 60:00 6848 2788 ins 3587080982063727 310410214827503 11453 05/29/20 09:45:50 60:00 3199 471ruftgenpho no 3587080982063727 310410214827503 11454 05/29/20 10:06:53 60:00 9928 3284 ins 3587080982063727 310410214827503 11455 05/29/20 10:45:50 60:00 519 315ruftgenpho no 3587080982063727 310410214827503 11456 05/29/20 11:06:53 60:00 8604 3144 ins 3587080982063727 310410214827503 11457 05/29/20 11:45:50 60:00 30962 17214ruftgenpho no 3587080982063727 310410214827503 11458 05/29/20 12:06:53 46:14 8388 2928 ins 3587080982063727 310410214827503 11459 05/29/20 12:45:50 60:00 56745 235626ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE DRONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 468 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003112 NTrifikE not for general distribution. EF-EA_00117188 EFTA01251712 MOBILITY The information contained hereCtoNeli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 4111. .....,,,,• ••-s""s AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytom Dn Apn INZI IMBI MAfl MODEL 11460 05/29/20 12:53:07 3:30 32968 1428 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11461 05/29/20 12:53:07 3:30 2644 1340 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11462 05/29/20 12:56:37 10:30 3332 1448 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11463 05/29/20 13:09:32 0:54 8757 6209 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11464 05/29/20 13:10:26 1:08 3532 1324 imp 3587080982063727 310410214827503 APPLE !PHONES 11465 05/29/20 13:11:34 0:45 2628 1324 imp 3587080982063727 310410214827503 APPLE IPHONZ8 11466 05/29/20 13:12:19 1:03 8496 6192 isms 3587080982063727 310410214827503 APPLE IPHONZ8 11467 05/29/20 13:14:00 60:00 20045 9784 imp -1 310410214827503 11468 05/29/20 13:45:50 60:00 79832 45211 nxtgenpho no 3587080982063727 310410214827503 APPLE IPHONZ8 11469 05/29/20 14:14:00 60:00 8496 2912 imp -1 310410214827503 11470 05/29/20 14:45:50 60:00 3789 997ruftgenpho no 3587080982063727 310410214827503 APPLE IPHOME8 11471 05/29/20 15:14:00 43:31 8604 2928 imp 3587080982063727 310410214827503 APPLE IPHOME8 11472 05/29/20 15:45:50 60:00 93318 70359 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES 11473 05/29/20 15:57:31 1:40 15492 1464 imp 3587080982063727 310410214827503 APPLE 1PROME8 11474 05/29/20 15:57:31 1:40 3296 1464 imp 3587080982063727 310410214827503 APPLE 1PROME8 11475 05/29/20 15:59:11 17:32 3408 1340 imp 3587080982063727 310410214827503 APPLE 1PROME8 11476 05/29/20 16:16:43 0:29 14792 1340 imam 3587080982063727 310410214827503 APPLE 1PROME8 11477 05/29/20 16:16:43 0:29 2596 1340 imam 3587080982063727 310410214827503 APPLE 1PROME8 11478 05/29/20 16:17:12 0:21 3408 1340 ins 3587080982063727 310410214827503 APPLE 1PROME8 11479 05/29/20 16:17:33 15:08 2660 1340 isms 3587080982063727 310410214827503 APPLE 1PROME8 11480 05/29/20 16:17:33 15:08 2596 1340 isms 3587080982063727 310410214827503 APPLE 1PROME8 11481 05/29/20 16:32:41 60:00 11904 4268 isms 3587080982063727 310410214827503 APPLE 1PROME8 11482 05/29/20 16:45:50 60:00 4765 11177ruagenpho no 3587080982063727 310410214827503 APPLE 1PROME8 11483 05/29/20 17:32:41 59:25 18824 13508 imp 3587080982063727 310410214827503 APPLE 1PROME8 11484 05/29/20 17:45:50 60:00 177801 176243nxtgenpho no 3587080982063727 310410214827503 APPLE 1PROME8 11485 05/29/20 18:23:39 8:27 1726405 1092481 imp 3587080982063727 310410214827503 APPLE 1PROME8 11486 05/29/20 18:32:06 6:23 893694 1158271 imp 3587080982063727 310410214827503 APPLE 1PROME8 11487 05/29/20 18:32:06 6:31 53756 10036 imp 3587080982063727 310410214827503 APPLE 1PROME8 11488 05/29/20 18:32:06 6:31 14536 10036 imp 3587080982063727 310410214827503 APPLE 1PROME8 11489 05/29/20 18:32:07 6:22 894572 1158271 imp 3587080982063727 310410214827503 APPLE 1PROME8 11490 05/29/20 18:38:37 6:26 3408 1448 imam 3587080982063727 310410214827503 APPLE 1PROME8 11491 05/29/20 18:45:03 0:24 23444 1340 imam 3587080982063727 310410214827503 APPLE 1PROME8 11492 05/29/20 18:45:03 0:24 2596 1340 imam 3587080982063727 310410214827503 APPLE 1PROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 469 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003113 not for general distribution. EF-EA_00117189 EFTA01251713 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T'S records ere stored and provided in 411111i AT&T Run pato: Run Time: Data Usage For: 06/17/2020 1S:66:57 Item Conn. Conn. Date Time (UrC) originating Number ET Bytes Bytes Apn Up Dn 11493 05/29/20 18:45:27 1:25 5088 11494 05/29/20 18:45:50 20:01 2221740 11495 05/29/20 18:46:51 0:51 2660 11496 05/29/20 18:46:52 0:50 2596 11497 05/29/20 18:47:42 29:35 13364 11498 05/29/20 18:52:19 24:58 4773957 11499 05/29/20 19:05:50 2:04 5061 11500 05/29/20 19:05:52 2:03 6212 11501 05/29/20 19:07:55 60:00 109777 11502 05/29/20 19:17:17 3:04 515194 11503 05/29/20 19:17:17 3:04 515194 11504 05/29/20 19:17:17 3:10 16204 11505 05/29/20 19:17:17 3:10 15628 11506 05/29/20 19:20:27 1:44 3516 11507 05/29/20 19:22:11 14:24 2660 11508 05/29/20 19:22:11 14:24 2596 11509 05/29/20 19:36:35 60:00 15156 11510 05/29/20 20:07:55 60:00 118957 11511 05/29/20 20:36:35 60:00 8388 11512 05/29/20 21:07:55 60:00 1012 11513 05/29/20 21:36:35 60:00 8604 11514 05/29/20 22:07:55 60:00 519 11515 05/29/20 22:36:35 43:36 13784 11516 05/29/20 23:07:55 12:15 410 11517 05/30/20 00:35:05 17:41 76056 11518 05/30/20 00:35:08 17:38 6671 11519 05/30/20 00:52:46 60:00 148124 11520 05/30/20 00:52:48 5:50 6671 11521 05/30/20 00:58:38 60:00 14016 INTI INSI MIT MODEL 1588 ims 3587080982063727 310410214827503 APPLE !PHONES 2250309 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 1340 ims 3587080982063727 310410214827503 APPLE !PHONES 1340 ims 3587080982063727 310410214827503 APPLE 110)(0=8 9832 ims 3587080982063727 310410214827503 APPLE 110)(0=8 4358860 ims 3587080982063727 310410214827503 APPLE 110)(0=8 6212 nxtgonpho 3587080982063727 310410214827503 APPLE 110)(0=8 no 4773 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 162255ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 672966 ims 3587080982063727 310410214827503 APPLE 110)(0=8 672966 ims 3587080982063727 310410214827503 APPLE 110)(0=8 8292 ims 3587080982063727 310410214827503 APPLE 110)(0=8 8204 ims 3587080982063727 310410214827503 APPLE 110)(0=8 1448 ims 3587080982063727 310410214827503 APPLE 110)(0=8 1340 ims 3587080982063727 310410214827503 APPLE 110)(0=8 1340 ims 3587080982063727 310410214827503 APPLE 110)(0=8 4872 ims 3587080982063727 310410214827503 APPLE 110)(0=8 25277rumgonpho 3587080982063727 310410214827503 APPLE !PHONES no 3144 ims 3587080982063727 310410214827503 APPLE !PHONES 5000 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 3052 ims 3587080982063727 310410214827503 APPLE 110)(0=8 315 ructgonpho 3587080982063727 310410214827503 APPLE 110)(0=8 no 8136 ims 3587080982063727 310410214827503 APPLE !PHONES 262ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 328882ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 5921 ims 3587080982063727 310410214827503 APPLE !PHONES 126933 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 5982 ims 3587080982063727 310410214827503 APPLE !PHONES 4948 ims 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 470 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003114 NaTtAdti not for general distribution. EFTA_O0I 17190 EFTA01251714 MOBILITY The information contained hereCtlaNyR 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ....,„# ••-a` a. AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 18:56:57 Item Conn. Conn. Data Time (OTC) Originating LT Bytes Byte. Apn INTI IMBI HUM MOLL Number Up Dn 11522 05/30/20 01:52:46 60:00 2720578 2661896 nxtgonpho no 3587080982063727 310410214827503 11523 05/30/20 01:58:38 45:23 8604 2896 imp 3587080982063727 310410214827503 11524 05/30/20 02:44:01 5:16 6332 1944 imp 3587080982063727 310410214827503 11525 05/30/20 02:49:17 1:20 5072 1680 imp 3587080982063727 310410214827503 11526 05/30/20 02:50:37 1:29 3376 1448 imp 3587080982063727 310410214827503 11527 05/30/20 02:52:06 12:54 3764 1448 imp 3587080982063727 310410214827503 11528 05/30/20 02:52:46 60:00 112473 35958 nxtgonpho no 3587080982063727 310410214827503 11529 05/30/20 03:05:00 2:43 2644 1324 imp 3587080982063727 310410214827503 11530 05/30/20 03:07:43 60:00 13784 4592 imp 3587080982063727 310410214827503 11531 05/30/20 03:52:46 60:00 5683 12712ruftgonpho no 3587080982063727 310410214827503 11532 05/30/20 04:07:43 60:00 8712 3004 imp 3587080982063727 310410214827503 11533 05/30/20 04:52:46 60:00 1454 1470ruftgonpho no 3587080982063727 310410214827503 11534 05/30/20 05:07:43 60:00 6956 2772 imp 3587080982063727 310410214827503 11535 05/30/20 05:52:46 60:00 1402 1365ruftgonpho no 3587080982063727 310410214827503 11536 05/30/20 06:07:43 60:00 10520 4396 imp 3587080982063727 310410214827503 11537 05/30/20 06:52:46 60:00 4339 7071ruftgonpho no 3587080982063727 310410214827503 11538 05/30/20 07:07:43 60:00 13196 4436 imp 3587080982063727 310410214827503 11539 05/30/20 07:52:46 60:00 727 735ruftgonpho no 3587080982063727 310410214827503 11540 05/30/20 08:07:43 60:00 7296 3004 imp 3587080982063727 310410214827503 11541 05/30/20 08:52:46 60:00 554 630nxtgonpho no 3587080982063727 310410214827503 11542 05/30/20 09:07:43 60:00 11920 4220 imp 3587080982063727 310410214827503 11543 05/30/20 09:52:46 60:00 225 210ruftgonpho no 3587080982063727 310410214827503 11544 05/30/20 10:07:43 60:00 6848 2864 imp 3587080982063727 310410214827503 11545 05/30/20 10:52:46 60:00 3681 5026ruftgonpho no 3587080982063727 310410214827503 11546 05/30/20 11:07:43 60:00 15216 5140 imp 3587080982063727 310410214827503 11547 05/30/20 11:52:46 60:00 20918 5577ruftgonpho no 3587080982063727 310410214827503 11548 05/30/20 12:07:43 60:00 7296 2896 ins 3587080982063727 310410214827503 APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 471 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003115 WinfikE not for general distribution. EF-EAJVII7191 EFTA01251715 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 41111, ..„,,,,• ••-s" -". AT&T Run pato: Run TIM*: Data Osage For: 06/17/2020 Item Conn. Conn. Date Tao (OTC) Originating LT Bytes Bytom Apn INLI IMSI NUM MODEL Number Up Dn 11549 05/30/20 12:52:46 60:00 69854 303257 nxtgenpho no 3587080982063727 310410214827503 11550 05/30/20 13:07:43 12:25 4964 1572 ims 3587080982063727 310410214827503 11551 05/30/20 13:20:08 18:05 3952 1448 ims 3587080982063727 310410214827503 11552 05/30/20 13:38:16 6:09 9665 7168 ims 3587080982063727 310410214827503 11553 05/30/20 13:44:28 1:41 6687 5979 ims 3587080982063727 310410214827503 11554 05/30/20 13:46:13 50:49 9267 7305 ims 3587080982063727 310410214827503 11555 05/30/20 13:52:46 60:00 23941 109256 nxtgenpho no 3587080982063727 310410214827503 11556 05/30/20 14:37:05 9:08 6673 5924 ims 3587080982063727 310410214827503 11557 05/30/20 14:46:18 60:00 30390 21458 ims -1 310410214827503 11558 05/30/20 14:52:46 7:13 446 700 nxtgenpho no 3587080982063727 310410214827503 11559 05/30/20 14:59:59 60:00 30303 23912 nxtgenpho no 3587080982063727 310410214827503 11560 05/30/20 15:17:08 0:21 0 8905 ims -1 310410214827503 11561 05/30/20 15:23:34 36:25 6212479 6241405 ims -1 310410214827503 11562 05/30/20 15:46:18 60:00 9616 4660 ims -1 310410214827503 11563 05/30/20 15:59:59 60:00 72441 58851 nxtgenpho no 3587080982063727 310410214827503 11564 05/30/20 16:46:18 10:24 0 0 ims 3587080982063727 310410214827503 11565 05/30/20 16:56:42 3:49 72644 1340 ims 3587080982063727 310410214827503 11566 05/30/20 16:56:42 3:49 2596 1340 ims 3587080982063727 310410214827503 11567 05/30/20 16:59:59 60:00 144356 465987 nxtgenpho no 3587080982063727 310410214827503 11568 05/30/20 17:00:31 25:45 3656 1340 ims 3587080982063727 310410214827503 11569 05/30/20 17:26:16 21:45 3644 1340 ims 3587080982063727 310410214827503 11570 05/30/20 17:26:16 21:45 2596 1340 ims 3587080982063727 310410214827503 11571 05/30/20 17:48:01 12:55 3424 1448 ims 3587080982063727 310410214827503 11572 05/30/20 17:59:59 60:00 24302 65784 nxtgenpho no 3587080982063727 310410214827503 11573 05/30/20 18:00:56 0:51 35612 480 ims 3587080982063727 310410214827503 11574 05/30/20 18:00:56 0:51 1540 480 ims 3587080982063727 310410214827503 11575 05/30/20 18:01:47 2:02 8689 3361 ims 3587080982063727 310410214827503 11576 05/30/20 18:03:49 1:55 6689 5998 ims 3587080982063727 310410214827503 11577 05/30/20 18:03:49 1:55 6625 5998 ims 3587080982063727 310410214827503 11578 05/30/20 18:05:44 1:19 3316 1324 ims 3587080982063727 310410214827503 11579 05/30/20 18:07:03 23:33 5596 2772 ims 3587080982063727 310410214827503 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE IPHONE8 APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 472 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003116 NT-31AL not for general distribution. EFTA 00117192 EFTA01251716 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. ....,,,• ••-s`' AT&T Run Oato: Run Time: Data Osage For: Item Conn. Date 06/17/2020 111:56:57 Conn. Originating Time Number (UTC) Bytes UP Byte. Apn Dn INZI INSI NAZI MODEL 11580 05/30/20 18:07:03 23:33 5532 2772 low 3587080982063727 310410214827503 APPLE !PHONES 11581 05/30/20 18:30:36 7:42 3424 1340 low 3587080982063727 310410214827503 APPLE !PHONES 11582 05/30/20 18:38:18 1:39 2660 1340 low 3587080982063727 310410214827503 APPLE 110110=8 11583 05/30/20 18:38:18 1:39 2596 1340 low 3587080982063727 310410214827503 APPLE 110110=8 11584 05/30/20 18:39:57 60:00 13568 4624 low 3587080982063727 310410214827503 APPLE 110110=8 11585 05/30/20 18:59:59 60:00 5469 18862 mtgonpho no 3587080982063727 310410214827503 APPLE 110110=8 11586 05/30/20 19:39:57 60:00 8388 2928 imp 3587080982063727 310410214827503 APPLE DRONES 11587 05/30/20 19:59:59 60:00 83785 48437ruftgonpho no 3587080982063727 310410214827503 APPLE DRONES 11588 05/30/20 20:39:57 60:00 8728 2944 imp 3587080982063727 310410214827503 APPLE DRONES 11589 05/30/20 20:59:59 12:27 26118 19322 mtgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11590 05/30/20 21:12:25 1:31 288 48ruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11591 05/30/20 21:12:26 1:32 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11592 05/30/20 21:13:57 60:00 144310 101814ruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11593 05/30/20 21:39:57 60:00 6956 2680 ins 3587080982063727 310410214827503 APPLE !PRIMES 11594 05/30/20 22:13:57 60:00 879 945ruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11595 05/30/20 22:39:57 60:00 12244 4676 ins 3587080982063727 310410214827503 APPLE DRONES 11596 05/30/20 23:13:57 60:00 1081 2041ruftgonpho no 3587080982063727 310410214827503 APPLE DRONES 11597 05/30/20 23:39:57 60:00 10036 3176 ins 3587080982063727 310410214827503 APPLE !PRIMES 11598 05/31/20 00:13:57 34:24 60624 43394ruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11599 05/31/20 00:39:57 60:00 13568 4624 into 3587080982063727 310410214827503 APPLE !PRIMES 11600 05/31/20 00:48:20 2:04 5065 6214ruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11601 05/31/20 00:48:22 2:03 6214 4777ruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11602 05/31/20 00:50:25 60:00 79456 101692ruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11603 05/31/20 01:39:57 9:41 4996 3164 ins 3587080982063727 310410214827503 APPLE DRONES 11604 05/31/20 01:50:25 1:11 0 Oruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES 11605 05/31/20 01:51:36 60:00 91356 352870ruftgonpho no 3587080982063727 310410214827503 APPLE !PRIMES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 473 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003117 not for general distribution. EF-EA_00117193 EFTA01251717 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in arc. 411111, AT&T Run pato: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Humber (UTC) Bytes Up Bytes( Apn Dn ICI INS I MIME 11606 05/31/20 01:51:38 60:00 12193 8910 imp 3587080982063727 310410214827503 APPLE 11607 05/31/20 02:51:36 60:00 10696 11747 nxtgonpho no 3587080982063727 310410214827503 APPLE 11608 05/31/20 02:51:38 60:00 5532 2772 ims 3587080982063727 310410214827503 APPLE 11609 05/31/20 03:51:36 60:00 2731 11571ruftgonpho no 3587080982063727 310410214827503 APPLE 11610 05/31/20 03:51:38 60:00 5516 2664 ims 3587080982063727 310410214827503 APPLE 11611 05/31/20 04:51:36 60:00 2250 3672ruftgonpho no 3587080982063727 310410214827503 APPLE 11612 05/31/20 04:51:38 60:00 5516 2788 ims 3587080982063727 310410214827503 APPLE 11613 05/31/20 05:51:36 60:00 3925 22922ruftgonpho no 3587080982063727 310410214827503 APPLE 11614 05/31/20 05:51:38 60:00 11884 6388 ims 3587080982063727 310410214827503 APPLE 11615 05/31/20 06:51:36 60:00 1053 2097ruftgonpho no 3587080982063727 310410214827503 APPLE 11616 05/31/20 06:51:38 60:00 5192 2680 ims 3587080982063727 310410214827503 APPLE 11617 05/31/20 07:51:36 60:00 1214 1770ruftgonpho no 3587080982063727 310410214827503 APPLE 11618 05/31/20 07:51:38 60:00 5732 2928 ims 3587080982063727 310410214827503 APPLE 11619 05/31/20 08:51:36 60:00 960 1177 ruftgonpho no 3587080982063727 310410214827503 APPLE 11620 05/31/20 08:51:38 60:00 7572 3912 ims 3587080982063727 310410214827503 APPLE 11621 05/31/20 09:51:36 60:00 3191 22221 ructgonpho no 3587080982063727 310410214827503 APPLE 11622 05/31/20 09:51:38 60:00 5408 2788 ims 3587080982063727 310410214827503 APPLE 11623 05/31/20 10:51:36 60:00 33477 58128ruftgonpho no 3587080982063727 310410214827503 APPLE 11624 05/31/20 10:51:38 41:04 2596 1340 ims 3587080982063727 310410214827503 APPLE 11625 05/31/20 11:32:42 60:00 13804 5752 ims 3587080982063727 310410214827503 APPLE 11626 05/31/20 11:51:36 2:45 0 Oruftgonpho no 3587080982063727 310410214827503 APPLE 11627 05/31/20 11:54:21 43:25 52232 9857ruftgonpho no 3587080982063727 310410214827503 APPLE 11628 05/31/20 12:32:42 7:51 0 0 ims 3587080982063727 310410214827503 APPLE 11629 05/31/20 12:37:47 16:09 6282 5795ruftgonpho no 3587080982063727 310410214827503 APPLE 11630 05/31/20 12:40:33 3:01 3376 1552 ims 3587080982063727 310410214827503 APPLE 11631 05/31/20 12:40:33 3:01 3376 1464 ims 3587080982063727 310410214827503 APPLE 11632 05/31/20 12:43:34 10:33 4964 1588 lain 3587080982063727 310410214827503 APPLE NICOLL !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 474 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003118 NeTtAti not for general distribution. EF-EA_00117194 EFTA01251718 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and OTC. provided in • AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. originating NT T1me Number (OTC) Bytes UP Byte. Apn Dn INN1 INS I MAKE NICOLL 11633 05/31/20 12:53:56 14:06 16087 61340 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 11634 05/31/20 12:54:07 13:55 2644 1428 imp 3587080982063727 310410214827503 APPLE !PRONGS 11635 05/31/20 12:54:07 13:55 2644 1340 imp 3587080982063727 310410214827503 APPLE !PHONES 11636 05/31/20 13:08:01 0:45 295117 38720 nxtgenpho no 3587080982063727 310410214827503 APPLE !PRONGS 11637 05/31/20 13:08:02 0:44 6245 6675 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11638 05/31/20 13:08:02 0:45 38720 294829 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PRONGS 11639 05/31/20 13:08:04 0:43 6675 5981 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11640 05/31/20 13:08:28 2:46 9695 6018 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11641 05/31/20 13:08:47 50:21 18474 76422 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PRONGS 11642 05/31/20 13:11:14 3:42 2768 1324 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11643 05/31/20 13:11:14 3:42 2704 1324 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11644 05/31/20 13:14:56 60:00 10704 4436 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11645 05/31/20 13:59:07 8:18 5168 6230 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PRONGS 11646 05/31/20 13:59:09 8:17 6230 4880 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PRONGS 11647 05/31/20 14:07:26 0:33 0 0 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 11648 05/31/20 14:07:58 1:26 901 280 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 11649 05/31/20 14:07:59 1:26 280 613 nxtgenpho no 3587080982063727 310410214827503 APPLE !PRONGS 11650 05/31/20 14:09:25 21:08 13744 9093 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 11651 05/31/20 14:09:26 21:08 9093 13456 nxtgenpho no 3587080982063727 310410214827503 APPLE !PRONGS 11652 05/31/20 14:14:56 60:00 8836 3144 imp 3587080982063727 310410214827503 APPLE 'PRONGS 11653 05/31/20 14:30:34 11:54 288 48 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PRONGS 11654 05/31/20 14:30:35 11:55 48 0 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PRONGS 11655 05/31/20 14:42:29 2:04 192 0 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PRONGS 11656 05/31/20 14:42:30 2:03 5328 6230 nxtgenpho no 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003119 not for general distribution. Page 475 EF-EA_00117195 EFTA01251719 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Time (UTC) Originating Number ET Bytes Op Byte. Apn Dn INLI DWI MARL 11657 05/31/20 14:42:30 2:04 0 0 nxtgonpho no 3587080982063727 310410214827503 APPLE 11658 05/31/20 14:42:31 2:03 6230 4944 nxtgonpho no 3587080982063727 310410214827503 APPLE 11659 05/31/20 14:44:34 1:10 280 581 nxtgonpho no 3587080982063727 310410214827503 APPLE 11660 05/31/20 14:45:43 5:13 288 48 nxtgonpho no 3587080982063727 310410214827503 APPLE 11661 05/31/20 14:45:44 5:13 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE 11662 05/31/20 14:50:57 7:53 8532 6874 nxtgonpho no 3587080982063727 310410214827503 APPLE 11663 05/31/20 14:58:49 8:27 5337 6431 nxtgonpho no 3587080982063727 310410214827503 APPLE 11664 05/31/20 14:58:50 8:27 6431 5049 nxtgonpho no 3587080982063727 310410214827503 APPLE 11665 05/31/20 15:07:17 9:36 6282 4744 nxtgonpho no 3587080982063727 310410214827503 APPLE 11666 05/31/20 15:14:56 60:00 8496 3004 imp 3587080982063727 310410214827503 APPLE 11667 05/31/20 15:16:52 1:25 5165 6228 nxtgonpho no 3587080982063727 310410214827503 APPLE 11668 05/31/20 15:16:53 1:25 6228 4877 nxtgonpho no 3587080982063727 310410214827503 APPLE 11669 05/31/20 15:18:18 0:33 278 577 nxtgonpho no 3587080982063727 310410214827503 APPLE 11670 05/31/20 15:18:51 2:28 288 48 nxtgonpho no 3587080982063727 310410214827503 APPLE 11671 05/31/20 15:18:52 2:28 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE 11672 05/31/20 15:21:20 60:00 50296 39152 nxtgonpho no 3587080982063727 310410214827503 APPLE 11673 05/31/20 16:14:56 60:00 13584 4592 imp 3587080982063727 310410214827503 APPLE 11674 05/31/20 16:21:20 60:00 54089 34043 nxtgonpho no 3587080982063727 310410214827503 APPLE 11675 05/31/20 17:14:56 60:00 8604 2896 imp 3587080982063727 310410214827503 APPLE 11676 05/31/20 17:21:20 60:00 41758 20779 nxtgonpho no 3587080982063727 310410214827503 APPLE 11677 05/31/20 18:14:56 60:00 12152 4628 imp 3587080982063727 310410214827503 APPLE 11678 05/31/20 18:21:20 60:00 2044 1422 nxtgonpho no 3587080982063727 310410214827503 APPLE 11679 05/31/20 19:14:56 60:00 6848 2432 imp 3587080982063727 310410214827503 APPLE MOLL IPHONEB IPHONEB !PHONES !PHONES 1PRONZ8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES 1PRONZ8 DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 476 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003120 PsisT iliAL not for general distribution. EF-EA_00117196 EFTA01251720 MOBILITY The information contained heraCtoNeli moo) 11680 05/31/20 19:21:20 60:00 4032 6445 nxtgonpho no 3587080982063727 310410214827503 11681 05/31/20 20:14:56 60:00 6956 2648 imp 3587080982063727 310410214827503 11682 05/31/20 20:21:20 60:00 1611 1470 nxtgonpho no 3587080982063727 310410214827503 11683 05/31/20 21:14:56 60:00 10612 4096 ins 3587080982063727 310410214827503 11684 05/31/20 21:21:20 60:00 1090 735ruftgonpho no 3587080982063727 310410214827503 11685 05/31/20 22:14:56 60:00 8264 2896 imp 3587080982063727 310410214827503 11686 05/31/20 22:21:20 60:00 1154 840ruftgonpho no 3587080982063727 310410214827503 11687 05/31/20 23:14:56 60:00 10612 4380 imp 3587080982063727 310410214827503 11688 05/31/20 23:21:20 60:00 94805 61150ruftgonpho no 3587080982063727 310410214827503 11689 06/01/20 00:14:56 60:00 8604 3128 imp 3587080982063727 310410214827503 11690 06/01/20 00:21:20 54:24 8979 7411 nxtgonpho no 3587080982063727 310410214827503 11691 06/01/20 01:14:56 0:48 4764 2084 imp 3587080982063727 310410214827503 11692 06/01/20 01:19:10 60:00 363521 876459ruftgonpho no 3587080982063727 310410214827503 11693 06/01/20 01:19:13 29:29 9271 7244 imp 3587080982063727 310410214827503 11694 06/01/20 01:48:42 52:50 15108 5272 imp 3587080982063727 310410214827503 11695 06/01/20 02:19:10 1:59 0 Oruftgonpho no 3587080982063727 310410214827503 11696 06/01/20 02:21:09 60:00 14525 9834 ructgonpho no 3587080982063727 310410214827503 11697 06/01/20 02:48:35 0:29 6689 5997 imp 3587080982063727 310410214827503 11698 06/01/20 02:49:04 60:00 12352 4608 imp 3587080982063727 310410214827503 11699 06/01/20 03:21:09 13:00 277 315ruftgonpho no 3587080982063727 310410214827503 11700 06/01/20 03:34:09 28:42 6532 5252ruftgonpho no 3587080982063727 310410214827503 11701 06/01/20 03:49:04 60:00 8496 3036 imp 3587080982063727 310410214827503 11702 06/01/20 04:02:50 2:13 288 48ruftgonpho no 3587080982063727 310410214827503 11703 06/01/20 04:02:51 2:13 48 Oruftgonpho no 3587080982063727 310410214827503 11704 06/01/20 04:05:04 60:00 7584 6400 nxtgonpho no 3587080982063727 310410214827503 11705 06/01/20 04:49:04 60:00 6940 2896 imp 3587080982063727 310410214827503 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 411111, AT&T Run pato: Run Time: Data Osage for: 06/17/2020 IS:56:57 Itom Conn. Conn. Originating ET Sytes Byte. Apn IX= IMSI MARX MODEL. Date Time Number OP on APPLE !PRONGS APPLE !PRONGS APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 477 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003121 NTifikE not for general distribution. EFTA_00I 17197 EFTA01251721 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 1%.,, 4/‘inli. ' sd00 AT&T Run Data: Run Time: Data Osage Tor: 06/17/2020 Item Conn. Conn. Data Time (UTC) Originating Muster TT Bytes Byte. Man Int1 Inn MIT MODEL Up Dn 11706 06/01/20 05:05:04 60:00 1213 1207 nxtgonpho no 3587080982063727 310410214827503 11707 06/01/20 05:49:04 60:00 10272 4128 ins 3587080982063727 310410214827503 11708 06/01/20 06:05:04 60:00 692 420ruagonpho no 3587080982063727 310410214827503 11709 06/01/20 06:49:04 60:00 8388 2928 ins 3587080982063727 310410214827503 11710 06/01/20 07:05:04 60:00 924 840 nxtgonpho no 3587080982063727 310410214827503 11711 06/01/20 07:49:04 60:00 12028 4628 ins 3587080982063727 310410214827503 11712 06/01/20 08:05:04 60:00 976 945ruagonpho no 3587080982063727 310410214827503 11713 06/01/20 08:49:04 60:00 8388 2928 ins 3587080982063727 310410214827503 11714 06/01/20 09:05:04 60:00 1033 840ruagonpho no 3587080982063727 310410214827503 11715 06/01/20 09:49:04 60:00 10844 4268 ins 3587080982063727 310410214827503 11716 06/01/20 10:05:04 60:00 808 630ruagonpho no 3587080982063727 310410214827503 11717 06/01/20 10:49:04 60:00 8264 2928 ins 3587080982063727 310410214827503 11718 06/01/20 11:05:04 60:00 1176 676ruagonpho no 3587080982063727 310410214827503 11719 06/01/20 11:49:04 60:00 10036 3176 ins 3587080982063727 310410214827503 11720 06/01/20 12:05:04 60:00 6242 8975ruagonpho no 3587080982063727 310410214827503 11721 06/01/20 12:49:04 60:00 11796 4736 ins 3587080982063727 310410214827503 11722 06/01/20 13:05:04 60:00 1292 938ruagonpho no 3587080982063727 310410214827503 11723 06/01/20 13:49:04 60:00 12028 4268 ins 3587080982063727 310410214827503 11724 06/01/20 14:05:04 52:50 97659 63430ruftgonpho no 3587080982063727 310410214827503 11725 06/01/20 14:49:04 1:01 6304 2224 ins 3587080982063727 310410214827503 11726 06/01/20 14:50:09 18:13 9393 8466 ins 3587080982063727 310410214827503 11727 06/01/20 14:57:54 19:38 53238 283837ruftgonpho no 3587080982063727 310410214827503 11728 06/01/20 15:08:22 9:10 3052 1432 ins 3587080982063727 310410214827503 11729 06/01/20 15:08:22 9:10 2920 1432 ins 3587080982063727 310410214827503 11730 06/01/20 15:17:31 2:04 54413 18936ruagonpho no 3587080982063727 310410214827503 11731 06/01/20 15:17:32 2:03 6228 6689 ins 3587080982063727 310410214827503 11732 06/01/20 15:17:32 2:04 18936 54125ruagonpho no 3587080982063727 310410214827503 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 478 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003122 PsiTniliAL not for general distribution. EFTA_00I 17198 EFTA01251722 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. tr`aa.hel AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 10:56:57 Conn. Originating Time Number (OTC) ET Bytes Up Bytes Apn Dn IRE' IMIDI 11733 06/01/20 15:17:34 2:02 6689 5964 ins 3587080982063727 310410214827503 11734 06/01/20 15:19:36 60:00 235957 176510 nxtgonpho no 3587080982063727 310410214827503 11735 06/01/20 15:19:38 31:40 9383 7358 imp 3587080982063727 310410214827503 11736 06/01/20 15:51:18 16:00 3872 1556 ins 3587080982063727 310410214827503 11737 06/01/20 16:07:18 0:15 6676 1820 ins 3587080982063727 310410214827503 11738 06/01/20 16:07:33 43:40 6832 2648 ins 3587080982063727 310410214827503 11739 06/01/20 16:19:36 60:00 81016 209053 nxtgonpho no 3587080982063727 310410214827503 11740 06/01/20 16:51:13 0:51 2644 1324 ins 3587080982063727 310410214827503 11741 06/01/20 16:52:04 12:52 3532 1432 ins 3587080982063727 310410214827503 11742 06/01/20 17:04:56 1:09 2644 1324 ins 3587080982063727 310410214827503 11743 06/01/20 17:06:05 60:00 11996 4328 ins 3587080982063727 310410214827503 11744 06/01/20 17:19:36 60:00 1138 1936 nxtgonpho no 3587080982063727 310410214827503 11745 06/01/20 18:06:05 60:00 8480 3020 ins 3587080982063727 310410214827503 11746 06/01/20 18:19:36 60:00 36198 25369 nxtgonpho no 3587080982063727 310410214827503 11747 06/01/20 19:06:05 21:04 5072 1572 ins 3587080982063727 310410214827503 11748 06/01/20 19:19:36 60:00 80090 154219 nxtgonpho no 3587080982063727 310410214827503 11749 06/01/20 19:27:09 14:38 2644 1324 ins 3587080982063727 310410214827503 11750 06/01/20 19:41:47 60:00 12136 4684 ins 3587080982063727 310410214827503 11751 06/01/20 20:19:36 60:00 9626 23893 nxtgonpho no 3587080982063727 310410214827503 11752 06/01/20 20:41:47 60:00 11060 4952 ins 3587080982063727 310410214827503 11753 06/01/20 21:19:36 35:09 12444 6123 nxtgonpho no 3587080982063727 310410214827503 11754 06/01/20 21:41:47 54:22 8480 2896 ins 3587080982063727 310410214827503 11755 06/01/20 21:54:44 2:03 288 48 nxtgonpho no 3587080982063727 310410214827503 11756 06/01/20 21:54:45 2:03 48 Onxtgonpho no 3587080982063727 310410214827503 11757 06/01/20 21:56:48 1:48 48 Onxtgonpho no 3587080982063727 310410214827503 11758 06/01/20 21:58:36 3:37 48 Onxtgonpho no 3587080982063727 310410214827503 11759 06/01/20 22:02:12 1:45 288 48nxtgonpho 3587080982063727 310410214827503 no MARC NOD= APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE IPHONE8 APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PHONES APPLE IPHONEB APPLE IPHONEB APPLE IPHONEB APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 479 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003123 PsFinfikE not for general distribution. EFTA_00I 17199 EFTA01251723 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 111:54:57 Conn. Originating CT Time Mambos (UTC) Bytes OP Byte. Apn Dn IICI ISIS I MARL 11760 06/01/20 22:02:13 1:45 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE 11761 06/01/20 22:03:58 60:00 74045 78426 nxtgonpho no 3587080982063727 310410214827503 APPLE 11762 06/01/20 22:36:09 21:23 26404 1412 ims 3587080982063727 310410214827503 APPLE 11763 06/01/20 22:36:09 21:23 2644 1324 ims 3587080982063727 310410214827503 APPLE 11764 06/01/20 22:57:32 11:56 8280 2820 imo 3587080982063727 310410214827503 APPLE 11765 06/01/20 23:03:58 60:00 4095 4941 nxtgonpho no 3587080982063727 310410214827503 APPLE 11766 06/01/20 23:09:28 0:02 0 0 imo 3587080982063727 310410214827503 APPLE 11767 06/01/20 23:09:28 0:02 0 0 imo 3587080982063727 310410214827503 APPLE 11768 06/01/20 23:09:41 60:00 35795 18581 imo -1 310410214827503 11769 06/02/20 00:03:58 60:00 5974 7569 nxtgonpho no 3587080982063727 310410214827503 APPLE 11770 06/02/20 00:09:41 60:00 8728 3252 imo -1 310410214827503 11771 06/02/20 01:03:58 60:00 3725 892 nxtgonpho no 3587080982063727 310410214827503 APPLE 11772 06/02/20 01:09:41 60:00 10160 3284 imo -1 310410214827503 11773 06/02/20 02:03:58 30:02 490 1155 nxtgonpho no 3587080982063727 310410214827503 APPLE 11774 06/02/20 02:09:41 60:00 8496 3036 imo -1 310410214827503 11775 06/02/20 02:33:59 0:35 5168 6230 nxtgonpho no 3587080982063727 310410214827503 APPLE 11776 06/02/20 02:34:00 0:35 6230 4880 nxtgonpho no 3587080982063727 310410214827503 APPLE 11777 06/02/20 02:34:35 51:01 19228 7931 nxtgonpho no 3587080982063727 310410214827503 APPLE 11778 06/02/20 03:09:41 60:00 15344 5768 imo -1 310410214827503 11779 06/02/20 03:25:35 0:54 288 48 nxtgonpho no 3587080982063727 310410214827503 APPLE 11780 06/02/20 03:25:37 0:53 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE 11781 06/02/20 03:26:30 60:00 7623 6111 nxtgonpho no 3587080982063727 310410214827503 APPLE 11782 06/02/20 04:09:41 60:00 6956 2664 imo -1 310410214827503 11783 06/02/20 04:26:30 60:00 1559 1365 nxtgonpho no 3587080982063727 310410214827503 APPLE 11784 06/02/20 05:09:41 60:00 6956 2788 imo -1 310410214827503 11785 06/02/20 05:26:30 60:00 1443 1155 nxtgonpho no 3587080982063727 310410214827503 APPLE NICOLL IPHONE8 IPHONE8 !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003124 NITIAL not for general distribution. Page 480 EFTA 00117200 EFTA01251724 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in tr'`sads AT&T Run Date: Run Time: Data Osage For: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating Number ET Byte. Bytes Apn UP Dn 11786 06/02/20 06:09:41 60:00 6848 11787 06/02/20 06:26:30 60:00 1722 11788 06/02/20 07:09:41 60:00 7064 11789 06/02/20 07:26:30 60:00 9292 11790 06/02/20 08:09:41 60:00 15452 11791 06/02/20 08:26:30 60:00 1097 11792 06/02/20 09:09:41 60:00 6848 11793 06/02/20 09:26:30 60:00 808 11794 06/02/20 10:09:41 60:00 6956 11795 06/02/20 10:26:30 60:00 3604 11796 06/02/20 11:09:41 60:00 12060 11797 06/02/20 11:26:30 60:00 740 11798 06/02/20 12:09:41 60:00 6956 11799 06/02/20 12:26:30 60:00 578 11800 06/02/20 13:09:41 60:00 10488 11801 06/02/20 13:26:30 60:00 467 11802 06/02/20 14:09:41 44:54 20088 11803 06/02/20 14:26:30 60:00 49577 11804 06/02/20 14:43:50 10:45 1146262 11805 06/02/20 14:54:35 0:15 5526 11806 06/02/20 14:54:35 0:15 5192 11807 06/02/20 14:54:35 0:15 52007 11808 06/02/20 14:54:35 0:15 52074 11809 06/02/20 14:54:50 6:46 1277744 11810 06/02/20 14:54:50 10:37 10112 11811 06/02/20 15:05:27 2:59 2660 11812 06/02/20 15:05:27 2:59 2596 11813 06/02/20 15:08:30 0:16 6689 11814 06/02/20 15:08:46 4:21 3532 11815 06/02/20 15:13:07 10:32 2644 IKE I INSI MAKE NICOLL 2680 imo -1 310410214827503 2051 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 2804 imo -1 310410214827503 13711 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 5768 ins -1 310410214827503 945ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 2572 ins -1 310410214827503 630 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 2804 ins -1 310410214827503 996 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 6052 isms -1 310410214827503 420 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 2772 isms -1 310410214827503 630 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 4288 ins -1 310410214827503 210ruftgenpho 3587080982063727 310410214827503 APPLE !PHONES no 10876 ins 3587080982063727 310410214827503 APPLE 1PHONE8 154114nxtgenpho 3587080982063727 310410214827503 APPLE 1PHONE8 no 2105550 ins 3587080982063727 310410214827503 APPLE 'PHONES 2840 ins 3587080982063727 310410214827503 APPLE !PHONES 2840 ins 3587080982063727 310410214827503 APPLE !PHONES 29291 ins 3587080982063727 310410214827503 APPLE !PHONES 29291 ins 3587080982063727 310410214827503 APPLE 1PHONE8 902121 ins 3587080982063727 310410214827503 APPLE 'PHONES 4792 ins 3587080982063727 310410214827503 APPLE !PHONES 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 1340 ins 3587080982063727 310410214827503 APPLE !PHONES 5999 ins 3587080982063727 310410214827503 APPLE 1PHONE8 1340 ins 3587080982063727 310410214827503 APPLE 1PHONE8 1324 ins 3587080982063727 310410214827503 APPLE 1PHONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 481 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003125 WinfikE not for general distribution. EFTA 00117201 EFTA01251725 MOBILITY The information contained heraCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ...... ‘"S°.1#00 AT&T Run Data: Run Tina: Data Osage For: 06/17/2020 18:54:57 Item Conn. Conn. Data Time (OTC) Originating Number ET Bytes Byte. Apn Up Dn 11816 06/02/20 15:23:39 60:00 12028 11817 06/02/20 15:26:30 60:00 99974 11818 06/02/20 16:23:39 60:00 14832 11819 06/02/20 16:26:30 60:00 43565 11820 06/02/20 17:04:21 10:23 1523437 11821 06/02/20 17:23:39 60:00 25120 11822 06/02/20 17:26:30 25:51 6237 11823 06/02/20 17:33:52 1:01 126707 11824 06/02/20 17:52:21 60:00 15314 11825 06/02/20 18:23:39 60:00 6956 11826 06/02/20 18:52:21 60:00 751 11827 06/02/20 19:23:39 60:00 12136 11828 06/02/20 19:52:21 60:00 34062 11829 06/02/20 20:23:39 60:00 12368 11830 06/02/20 20:52:21 60:00 16138 11831 06/02/20 21:23:39 28:19 124 11832 06/02/20 21:43:17 8:41 10410 11833 06/02/20 21:51:58 60:00 0 11834 06/02/20 21:52:21 60:00 83690 11835 06/02/20 21:53:02 9:02 9853 11836 06/02/20 22:02:04 7:42 2820 11837 06/02/20 22:02:04 7:42 2688 11838 06/02/20 22:09:46 0:20 3408 11839 06/02/20 22:10:06 2:06 2660 11840 06/02/20 22:10:06 2:06 2596 11841 06/02/20 22:12:12 60:00 11996 11842 06/02/20 22:51:58 60:00 0 11843 06/02/20 22:52:21 60:00 53259 11844 06/02/20 23:12:12 60:00 16884 11845 06/02/20 23:51:58 60:00 0 IND I INSI HAKE MODEL 4484 imp 3587080982063727 310410214827503 APPLE !PHONES 67663 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 9324 imp 3587080982063727 310410214827503 APPLE !PHONES 32662ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 1820730 ins 3587080982063727 310410214827503 APPLE 'PHONES 13800 ins 3587080982063727 310410214827503 APPLE 'PHONES 7511ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 153540 vas 3587080982063727 310410214827503 APPLE !PHONES 18255nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 2680 vas 3587080982063727 310410214827503 APPLE 'PHONES 735nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 4592 imp 3587080982063727 310410214827503 APPLE !PHONES 35324nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 4444 ins 3587080982063727 310410214827503 APPLE !PHONES 17233roftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 496 imp 3587080982063727 310410214827503 APPLE !PHONES 6526 imp -1 310410214827503 0 imp -1 310410214827503 71751ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 6222 ims 3587080982063727 310410214827503 APPLE !PHONES 1340 imp 3587080982063727 310410214827503 APPLE !PHONES 1340 imp 3587080982063727 310410214827503 APPLE 'PHONES 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 4392 imp 3587080982063727 310410214827503 APPLE 'PHONES 0 imp -1 310410214827503 29558nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 9908 imp 3587080982063727 310410214827503 APPLE !PHONES 0 imp -1 310410214827503 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 482 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003126 NTroliAL not for general distribution. EFTA 00/17202 EFTA01251726 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. AT&T Run Data: Run Time: Data Osage For: Item cone. Data 06/17/2020 16:56:56 Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INZI IMSI NUM 11846 06/02/20 23:52:21 60:00 113776 20487 nxtgenpho no 3587080982063727 310410214827503 APPLE 11847 06/03/20 00:07:02 6:55 1488519 757807 los 3587080982063727 310410214827503 APPLE 11848 06/03/20 00:12:12 60:00 9280 3612 iros 3587080982063727 310410214827503 APPLE 11849 06/03/20 00:51:58 60:00 0 0 iros -1 310410214827503 11850 06/03/20 00:52:21 59:45 616690 47854 nxtgenpho no 3587080982063727 310410214827503 APPLE 11851 06/03/20 01:12:12 36:32 3408 1340 ins 3587080982063727 310410214827503 APPLE 11852 06/03/20 01:48:43 1:43 61788 1340 ins 3587080982063727 310410214827503 APPLE 11853 06/03/20 01:48:44 1:42 2596 1340 ins 3587080982063727 310410214827503 APPLE 11854 06/03/20 01:50:26 0:20 3408 1340 ins 3587080982063727 310410214827503 APPLE 11855 06/03/20 01:50:46 1:17 2660 1340 ins 3587080982063727 310410214827503 APPLE 11856 06/03/20 01:50:46 1:17 2596 1340 ins 3587080982063727 310410214827503 APPLE 11857 06/03/20 01:51:58 0:01 0 0 ins -1 310410214827503 11858 06/03/20 01:52:03 60:00 24624 7240 ins 3587080982063727 310410214827503 APPLE 11859 06/03/20 01:52:05 1:07 288 48nxtgenpho no 3587080982063727 310410214827503 APPLE 11860 06/03/20 01:52:06 1:07 48 Oruftgenpho no 3587080982063727 310410214827503 APPLE 11861 06/03/20 01:53:13 60:00 107627 64507 nxtgenpho no 3587080982063727 310410214827503 APPLE 11862 06/03/20 02:52:03 60:00 6816 2680 ins 3587080982063727 310410214827503 APPLE 11863 06/03/20 02:53:13 60:00 514 525 nxtgenpho no 3587080982063727 310410214827503 APPLE 11864 06/03/20 03:52:03 8:25 0 0 ins 3587080982063727 310410214827503 APPLE 11865 06/03/20 03:53:13 60:00 514 525 nxtgenpho no 3587080982063727 310410214827503 APPLE 11866 06/03/20 04:00:27 4:35 48740 1340 isms 3587080982063727 310410214827503 APPLE 11867 06/03/20 04:00:28 4:33 2596 1340 isms 3587080982063727 310410214827503 APPLE 11868 06/03/20 04:05:01 60:00 12120 4732 isms 3587080982063727 310410214827503 APPLE 11869 06/03/20 04:53:13 60:00 578 630 nxtgenpho no 3587080982063727 310410214827503 APPLE 11870 06/03/20 05:05:01 60:00 8496 3036 ins 3587080982063727 310410214827503 APPLE 11871 06/03/20 05:53:13 60:00 462 420 nxtgenpho no 3587080982063727 310410214827503 APPLE 11872 06/03/20 06:05:01 60:00 6816 2664 ins 3587080982063727 310410214827503 APPLE 11873 06/03/20 06:53:13 60:00 803 840 nxtgenpho no 3587080982063727 310410214827503 APPLE 11874 06/03/20 07:05:01 33:19 4980 1588 ins 3587080982063727 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 483 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003127 NeTtikEl not for general distribution. EFTA 00117203 EFTA01251727 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4111. tr"4-a". AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 10:56:58 Conn. Time (OTC) Originating Number LT Bytes Up Bytes Apn Dn INLI INSI MARL NICOLL 11875 06/03/20 07:38:20 0:02 0 0 ims 3587080982063727 310410214827503 APPLE IPMONE8 11876 06/03/20 07:38:20 0:02 0 0 ims 3587080982063727 310410214827503 APPLE IPMONE8 11877 06/03/20 07:45:17 60:00 11869 8788 ims 3587080982063727 310410214827503 APPLE IPMONE8 11878 06/03/20 07:53:13 60:00 3620 996 nxtgenpho no 3587080982063727 310410214827503 APPLE IPMONE8 11879 06/03/20 08:45:17 35:25 2596 1340 ins 3587080982063727 310410214827503 APPLE IPMONE8 11880 06/03/20 08:53:13 60:00 514 525 nxtgenpho no 3587080982063727 310410214827503 APPLE IPMONE8 11881 06/03/20 09:20:42 0:01 0 0 imp 3587080982063727 310410214827503 APPLE IPMONE8 11882 06/03/20 09:20:59 60:00 18242 9408 imp -1 310410214827503 11883 06/03/20 09:53:13 60:00 578 630 nxtgenpho no 3587080982063727 310410214827503 APPLE IPMONE8 11884 06/03/20 10:20:59 60:00 6956 2772 imp -1 310410214827503 11885 06/03/20 10:53:13 60:00 3488 786 nxtgenpho no 3587080982063727 310410214827503 APPLE IPMONE8 11886 06/03/20 11:20:59 60:00 13460 4624 ism -1 310410214827503 11887 06/03/20 11:53:13 43:06 346 210 nxtgenpho no 3587080982063727 310410214827503 APPLE IPMONE8 11888 06/03/20 12:20:59 60:00 8496 2928 imp -1 310410214827503 11889 06/03/20 12:36:19 60:00 17171 19006 nxtgenpho no 3587080982063727 310410214827503 APPLE IPMONE8 11890 06/03/20 13:20:59 60:00 6848 2680 imp -1 310410214827503 11891 06/03/20 13:36:19 60:00 1076 5194 nxtgenpho no 3587080982063727 310410214827503 APPLE IPMONE8 11892 06/03/20 14:20:59 60:00 17440 7140 imp -1 310410214827503 11893 06/03/20 14:36:19 60:00 33285 20450 nxtgenpho no 3587080982063727 310410214827503 APPLE IPMONE8 11894 06/03/20 15:20:59 60:00 8388 2928 imp -1 310410214827503 11895 06/03/20 15:36:19 60:00 68804 52255 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 11896 06/03/20 16:20:59 25:43 3532 1340 imp 3587080982063727 310410214827503 APPLE !PHONES 11897 06/03/20 16:36:19 60:00 73150 319642 nxtgenpho no 3587080982063727 310410214827503 APPLE IPRONE8 11898 06/03/20 16:46:42 35:56 18696 2804 imp 3587080982063727 310410214827503 APPLE IPRONE8 11899 06/03/20 16:46:42 35:56 6500 2804 ins 3587080982063727 310410214827503 APPLE IPRONE8 11900 06/03/20 17:22:38 60:00 12152 5500 ins 3587080982063727 310410214827503 APPLE !PHONES 11901 06/03/20 17:36:19 60:00 6217 8569 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 11902 06/03/20 18:22:38 50:15 20272 14536 as 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 484 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003128 PsiTniliAL not for general distribution. EFTA 00117204 EFTA01251728 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in ...,,,• ••—•st` a. AT&T Run Date: Run Time: Data Usage Tor: 06/17/2020 10:44:58 Item Conn. Conn. Date Time Originating ET Bytes Bytes( Apn per IMBI MART MOTS Number Up Dn (OTC) 11903 06/03/20 18:36:19 60:00 65601 74295 nxtgonpho no 3587080982063727 310410214827503 11904 06/03/20 19:08:57 0:32 3390 17716 ims 3587080982063727 310410214827503 11905 06/03/20 19:12:53 1:08 29864 1588 ims 3587080982063727 310410214827503 11906 06/03/20 19:12:53 1:08 4244 1588 ims 3587080982063727 310410214827503 11907 06/03/20 19:14:01 60:00 15452 6108 ims 3587080982063727 310410214827503 11908 06/03/20 19:36:19 49:02 154491 104472 nxtgonpho no 3587080982063727 310410214827503 11909 06/03/20 20:14:01 12:54 0 0 ims 3587080982063727 310410214827503 11910 06/03/20 20:25:20 1:52 118093 19163ruagonpho no 3587080982063727 310410214827503 11911 06/03/20 20:25:21 1:51 6244 6715 ims 3587080982063727 310410214827503 11912 06/03/20 20:25:21 1:52 19163 117805nxtgonpho no 3587080982063727 310410214827503 11913 06/03/20 20:25:22 1:51 6647 5980 ims 3587080982063727 310410214827503 11914 06/03/20 20:26:55 21:44 15066 11650 ims 3587080982063727 310410214827503 11915 06/03/20 20:27:13 60:00 29899 22731ruftgonpho no 3587080982063727 310410214827503 11916 06/03/20 20:31:01 17:38 2582971 3580061 ims 3587080982063727 310410214827503 11917 06/03/20 20:48:39 20:58 3222937 4174165 ims 3587080982063727 310410214827503 11918 06/03/20 20:48:39 20:58 9450 5464 ims 3587080982063727 310410214827503 11919 06/03/20 20:48:39 20:58 3222937 4174165 ims 3587080982063727 310410214827503 11920 06/03/20 20:48:39 20:58 9200 5464 ims 3587080982063727 310410214827503 11921 06/03/20 21:09:37 22:11 3048535 4722292 ims 3587080982063727 310410214827503 11922 06/03/20 21:09:37 60:00 25284 10868 ims 3587080982063727 310410214827503 11923 06/03/20 21:27:13 56:17 30089 21364ruagonpho no 3587080982063727 310410214827503 11924 06/03/20 22:09:37 60:00 8604 3144 ims 3587080982063727 310410214827503 11925 06/03/20 22:23:29 0:34 288 48nxtgonpho no 3587080982063727 310410214827503 11926 06/03/20 22:23:30 0:34 48 Onxtgonpho no 3587080982063727 310410214827503 11927 06/03/20 22:24:03 60:00 187528 117996ruagonpho no 3587080982063727 310410214827503 11928 06/03/20 23:09:37 60:00 8836 3160 ims 3587080982063727 310410214827503 11929 06/03/20 23:24:03 60:00 44474 24371ruftgonpho no 3587080982063727 310410214827503 11930 06/04/20 00:09:37 60:00 10144 3176 ims 3587080982063727 310410214827503 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 APPLE ITHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 485 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003129 NeTniliAL not for general distribution. EFTA 00117205 EFTA01251729 The information contained hereCtoNelt 2996479 06/17/2020 MOBILITY AMINO AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. Run pato: Run Time: Data Usage Tor: Tee Conn. Date 06/17/2020 10:56:58 Conn. originating TT Time Number (UTC) Bytes Up Bytes Ann Dn IND I INSI MAKE 11931 06/04/20 00:24:03 60:00 1976 5865 nxtgonpho no 3587080982063727 310410214827503 APPLE 11932 06/04/20 01:09:37 60:00 6956 2680 imp 3587080982063727 310410214827503 APPLE 11933 06/04/20 01:24:03 23:49 35215 21990 nxtgonpho no 3587080982063727 310410214827503 APPLE 11934 06/04/20 01:47:52 60:00 58507 36707 nxtgonpho no 3587080982063727 310410214827503 APPLE 11935 06/04/20 02:09:37 60:00 18640 6280 imp 3587080982063727 310410214827503 APPLE 11936 06/04/20 02:47:52 60:00 7541 1994 nxtgonpho no 3587080982063727 310410214827503 APPLE 11937 06/04/20 03:09:37 60:00 6848 2896 imp 3587080982063727 310410214827503 APPLE 11938 06/04/20 03:47:52 60:00 2284 3777 nxtgonpho no 3587080982063727 310410214827503 APPLE 11939 06/04/20 04:09:37 60:00 8604 2928 imp 3587080982063727 310410214827503 APPLE 11940 06/04/20 04:47:52 60:00 1670 1785 nxtgonpho no 3587080982063727 310410214827503 APPLE 11941 06/04/20 05:09:37 60:00 8388 2928 moo 3587080982063727 310410214827503 APPLE 11942 06/04/20 05:47:52 60:00 1651 1575 nxtgonpho no 3587080982063727 310410214827503 APPLE 11943 06/04/20 06:09:37 60:00 11920 4144 moo 3587080982063727 310410214827503 APPLE 11944 06/04/20 06:47:52 60:00 1092 1155 nxtgonpho no 3587080982063727 310410214827503 APPLE 11945 06/04/20 07:09:37 60:00 11920 4412 ins 3587080982063727 310410214827503 APPLE 11946 06/04/20 07:47:52 60:00 450 420 nxtgonpho no 3587080982063727 310410214827503 APPLE 11947 06/04/20 08:09:37 60:00 6848 2680 imp 3587080982063727 310410214827503 APPLE 11948 06/04/20 08:47:52 60:00 514 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 11949 06/04/20 09:09:37 60:00 11920 4592 imp 3587080982063727 310410214827503 APPLE 11950 06/04/20 09:47:52 60:00 3251 576 nxtgonpho no 3587080982063727 310410214827503 APPLE 11951 06/04/20 10:09:37 60:00 6848 2680 imp 3587080982063727 310410214827503 APPLE 11952 06/04/20 10:47:52 60:00 42253 3025 nxtgonpho no 3587080982063727 310410214827503 APPLE 11953 06/04/20 11:09:37 38:20 3424 1340 imp 3587080982063727 310410214827503 APPLE 11954 06/04/20 11:47:52 24:27 10549 17309 nxtgonpho no 3587080982063727 310410214827503 APPLE 11955 06/04/20 11:47:57 7:10 195712 2208 imp 3587080982063727 310410214827503 APPLE 11956 06/04/20 11:47:57 7:10 7524 2208 ins 3587080982063727 310410214827503 APPLE 11957 06/04/20 11:55:07 18:31 3532 1340 into 3587080982063727 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES IPH01428 IPH01428 'PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 'PHONES !PHONES !PHONES !PHONES !PHONES !PHONES IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 IPHONE8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 486 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003130 NsTroliAL not for general distribution. EFTA 00117206 EFTA01251730 The information contained hereCtoNyFti MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in ....7s,„ •-`'.0AT&T Run Date: Run Time: Data Osage for: 06/17/2020 Item Conn. Conn. Date Time (OTC) Originating ET Bytes Bytes Apn IX= IMSI NUM MODEL Number UP Dn 11958 06/04/20 12:12:18 2:04 288 48 nxtgonpho no 3587080982063727 310410214827503 11959 06/04/20 12:12:19 2:04 48 Oruftgonpho no 3587080982063727 310410214827503 11960 06/04/20 12:13:36 0:46 6471 7525 ins 3587080982063727 310410214827503 11961 06/04/20 12:13:37 0:46 7525 6207 ins 3587080982063727 310410214827503 11962 06/04/20 12:14:23 52:50 19803 32618ruftgonpho no 3587080982063727 310410214827503 11963 06/04/20 12:14:24 2:22 6683 5919 ins 3587080982063727 310410214827503 11964 06/04/20 12:16:46 51:41 11920 4344 ins 3587080982063727 310410214827503 11965 06/04/20 13:07:12 0:45 288 48nxtgonpho no 3587080982063727 310410214827503 11966 06/04/20 13:07:14 0:44 48 Oruftgonpho no 3587080982063727 310410214827503 11967 06/04/20 13:07:59 60:00 90315 877381ruftgonpho no 3587080982063727 310410214827503 11968 06/04/20 13:08:27 4:47 2736 1536 ins 3587080982063727 310410214827503 11969 06/04/20 13:08:27 4:47 2736 1448 ins 3587080982063727 310410214827503 11970 06/04/20 13:13:14 0:29 3208 1216 ins 3587080982063727 310410214827503 11971 06/04/20 13:13:43 2:34 2752 1412 ins 3587080982063727 310410214827503 11972 06/04/20 13:13:43 2:34 2752 1324 ins 3587080982063727 310410214827503 11973 06/04/20 13:16:17 1:51 3532 1340 ins 3587080982063727 310410214827503 11974 06/04/20 13:18:08 20:43 2644 1412 ins 3587080982063727 310410214827503 11975 06/04/20 13:18:08 20:43 2644 1324 ins 3587080982063727 310410214827503 11976 06/04/20 13:38:51 1:46 3424 1324 ins 3587080982063727 310410214827503 11977 06/04/20 13:40:37 4:42 3500 2412 ins 3587080982063727 310410214827503 11978 06/04/20 13:40:37 4:42 3500 2324 ins 3587080982063727 310410214827503 11979 06/04/20 13:45:19 2:47 3424 1324 ins 3587080982063727 310410214827503 11980 06/04/20 13:48:06 2:08 3952 1536 ins 3587080982063727 310410214827503 11981 06/04/20 13:48:06 2:08 3952 1448 ins 3587080982063727 310410214827503 11982 06/04/20 13:50:14 60:00 29360 13004 ins 3587080982063727 310410214827503 11983 06/04/20 14:07:59 46:54 11593 1675nxtgonpho no 3587080982063727 310410214827503 11984 06/04/20 14:30:02 1:48 273405 246324 ins 3587080982063727 310410214827503 11985 06/04/20 14:50:14 60:00 8496 3004 ins 3587080982063727 310410214827503 11986 06/04/20 14:54:53 1:41 288 48ruftgonpho no 3587080982063727 310410214827503 11987 06/04/20 14:54:54 1:41 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE !PHONES APPLE !PHONES APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 APPLE IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 487 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003131 N:FoleikE not for general distribution. EFTA 00/17207 EFTA01251731 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern UTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in tt ni‘Sg°air/ AT&T Run Data: Run Time: Data Usage For: 06/17/2020 MI= Item Conn. Data Conn. Originating ET Time Number (UTC) Bytes Up 11988 06/04/20 14:56:35 60:00 162860 11989 06/04/20 15:50:14 60:00 8496 11990 06/04/20 15:56:35 60:00 53947 11991 06/04/20 16:50:14 60:00 16776 11992 06/04/20 16:56:35 60:00 1944 11993 06/04/20 17:50:14 51:35 5396 11994 06/04/20 17:56:35 60:00 35568 11995 06/04/20 18:41:49 1:00 60184 11996 06/04/20 18:41:49 1:00 3484 11997 06/04/20 18:42:49 60:00 15680 11998 06/04/20 18:56:35 60:00 10263 11999 06/04/20 19:42:49 60:00 8496 12000 06/04/20 19:56:35 60:00 8052 12001 06/04/20 20:42:49 39:08 5072 12002 06/04/20 20:56:35 60:00 4093 12003 06/04/20 21:21:57 0:26 2644 12004 06/04/20 21:21:57 0:26 2644 12005 06/04/20 21:22:23 60:00 15000 12006 06/04/20 21:56:35 39:14 5719913 12007 06/04/20 22:22:23 12:02 0 12008 06/04/20 22:34:25 2:40 90252 12009 06/04/20 22:34:25 2:40 5240 12010 06/04/20 22:35:49 1:46 1831454 12011 06/04/20 22:37:05 0:31 17188 12012 06/04/20 22:47:30 60:00 123438 12013 06/04/20 22:47:33 1:23 6667 12014 06/04/20 22:48:56 60:00 11920 12015 06/04/20 23:47:30 60:00 872 Bytes Apn INEI INBI NAME MODEL Dn 104092 nxtgonpho 3587080982063727 310410214827503 APPLE IPHONEB no 2896 inn 3587080982063727 310410214827503 APPLE IPHONEB 4385 nxtgonpho 3587080982063727 310410214827503 APPLE !PROMS no 6092 inn 3587080982063727 310410214827503 APPLE IPHONEB 6715 nxtgonpho 3587080982063727 310410214827503 APPLE 1PROME8 no 1680 inn 3587080982063727 310410214827503 APPLE DRONES 39441 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 2412 inn 3587080982063727 310410214827503 APPLE DRONES 2324 inn 3587080982063727 310410214827503 APPLE DRONES 5072 inn 3587080982063727 310410214827503 APPLE DRONES 5883natgonpho 3587080982063727 310410214827503 APPLE DRONES no 3020 inn 3587080982063727 310410214827503 APPLE !PHONES 6043 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 1572 inn 3587080982063727 310410214827503 APPLE !PHONES 1356natgonpho 3587080982063727 310410214827503 APPLE !PHONES no 1412 inn 3587080982063727 310410214827503 APPLE !PHONES 1324 inn 3587080982063727 310410214827503 APPLE DRONES 4716 inn 3587080982063727 310410214827503 APPLE DRONES 14280470natgonpho 3587080982063727 310410214827503 APPLE DRONES no 0 inn 3587080982063727 310410214827503 APPLE DRONES 2696 inn 3587080982063727 310410214827503 APPLE DRONES 2608 inn 3587080982063727 310410214827503 APPLE DRONES 6936581 nxtgonpho 3587080982063727 310410214827503 APPLE DRONES no 5524 inn 3587080982063727 310410214827503 APPLE !PHONES 507848 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 5982 inn 3587080982063727 310410214827503 APPLE DRONES 4328 inn 3587080982063727 310410214827503 APPLE DRONES 735natgonpho 3587080982063727 310410214827503 APPLE DRONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 488 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003132 PIETIAL not for general distribution. EFTA 00/17208 EFTA01251732 MOBILITY The information contained hereCtoNe 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Onto: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 18:56:58 Conn. Time (OTC) originating Number ET Bytes Up Bytes Apn Dn IKE I INSI 12016 06/04/20 23:48:56 60:00 8604 2896 in 3587080982063727 310410214827503 12017 06/05/20 00:47:30 0:31 0 Onxtgonpho no 3587080982063727 310410214827503 12018 06/05/20 00:48:02 60:00 155415 89338mtgonpho no 3587080982063727 310410214827503 12019 06/05/20 00:48:56 60:00 8388 2896 in 3587080982063727 310410214827503 12020 06/05/20 01:48:02 60:00 12724 8711rtxtgonpho no 3587080982063727 310410214827503 12021 06/05/20 01:48:56 60:00 11920 4112 ins 3587080982063727 310410214827503 12022 06/05/20 02:48:02 60:00 969 735ruftgonpho no 3587080982063727 310410214827503 12023 06/05/20 02:48:56 60:00 6956 2540 ins 3587080982063727 310410214827503 12024 06/05/20 03:48:02 15:20 173 105mtgonpho no 3587080982063727 310410214827503 12025 06/05/20 03:48:56 60:00 13352 4860 ins 3587080982063727 310410214827503 12026 06/05/20 04:03:21 0:46 288 48ruagonpho no 3587080982063727 310410214827503 12027 06/05/20 04:03:22 0:46 48 Onxtgonpho no 3587080982063727 310410214827503 12028 06/05/20 04:04:08 60:00 7363 6195mtgonpho no 3587080982063727 310410214827503 12029 06/05/20 04:48:56 60:00 13568 4576 imp 3587080982063727 310410214827503 12030 06/05/20 05:04:08 60:00 635 525ruftgonpho no 3587080982063727 310410214827503 12031 06/05/20 05:48:56 60:00 11256 3268 ins 3587080982063727 310410214827503 12032 06/05/20 06:04:08 60:00 687 630ruftgonpho no 3587080982063727 310410214827503 12033 06/05/20 06:48:56 60:00 6956 2664 ins 3587080982063727 310410214827503 12034 06/05/20 07:04:08 60:00 635 525mtgonpho no 3587080982063727 310410214827503 12035 06/05/20 07:48:56 60:00 8496 3004 ins 3587080982063727 310410214827503 12036 06/05/20 08:04:08 60:00 635 525mtgonpho no 3587080982063727 310410214827503 12037 06/05/20 08:48:56 60:00 13696 5364 ins 3587080982063727 310410214827503 12038 06/05/20 09:04:08 60:00 751 735mtgonpho no 3587080982063727 310410214827503 12039 06/05/20 09:48:56 60:00 8712 3220 ins 3587080982063727 310410214827503 12040 06/05/20 10:04:08 60:00 578 630mtgonpho no 3587080982063727 310410214827503 12041 06/05/20 10:48:56 60:00 6848 2648 ins 3587080982063727 310410214827503 MAKE NICOLL APPLE !PHONES APPLE !PHONES APPLE !PRIMES APPLE 1PRONE8 APPLE 1PRONE8 APPLE DRONES APPLE DRONES APPLE !PRIMES APPLE !PRIMES APPLE !PRIMES APPLE 1PRONE8 APPLE DRONES APPLE DRONES APPLE 1PRONE8 APPLE !PRIMES APPLE !PRIMES APPLE !PRIMES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PRIMES APPLE !PRIMES APPLE !PRIMES APPLE 1PRONE8 APPLE !PRIMES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 489 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003133 Nei-4AL not for general distribution. EF-EAJVII7209 EFTA01251733 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41111P AT&T Run Date: Run Time: Data Usage For: 06/17/2020 NM= Item Conn. Date Conn. Time (UTC) originating Number ET Bytes Up Bytom Apn Dn INEI IMBI 12042 06/05/20 11:04:08 60:00 398 315 nxtgonpho no 3587080982063727 310410214827503 12043 06/05/20 11:48:56 60:00 8604 3252 imp 3587080982063727 310410214827503 12044 06/05/20 12:04:08 60:00 6730 5064 nxtgonpho no 3587080982063727 310410214827503 12045 06/05/20 12:48:56 60:00 6832 2648 imp 3587080982063727 310410214827503 12046 06/05/20 13:04:08 60:00 450 420 nxtgonpho no 3587080982063727 310410214827503 12047 06/05/20 13:48:56 60:00 15684 6940 imp 3587080982063727 310410214827503 12048 06/05/20 14:04:08 60:00 450 420 nxtgonpho no 3587080982063727 310410214827503 12049 06/05/20 14:48:56 60:00 6848 2648 imp 3587080982063727 310410214827503 12050 06/05/20 15:04:08 60:00 659 4452 nxtgonpho no 3587080982063727 310410214827503 12051 06/05/20 15:48:56 60:00 8496 2896 imp 3587080982063727 310410214827503 12052 06/05/20 16:04:08 60:00 3372 472 nxtgonpho no 3587080982063727 310410214827503 12053 06/05/20 16:48:56 60:00 8496 2896 imp 3587080982063727 310410214827503 12054 06/05/20 17:04:08 15:22 0 0 nxtgonpho no 3587080982063727 310410214827503 12055 06/05/20 17:19:30 60:00 35972 24529 nxtgonpho no 3587080982063727 310410214827503 12056 06/05/20 17:48:56 60:00 8604 3128 imp 3587080982063727 310410214827503 12057 06/05/20 18:19:30 60:00 3536 682 nxtgonpho no 3587080982063727 310410214827503 12058 06/05/20 18:48:56 60:00 41944 22316 imp 3587080982063727 310410214827503 12059 06/05/20 19:19:30 60:00 6492 17785 nxtgonpho no 3587080982063727 310410214827503 12060 06/05/20 19:33:43 0:22 0 320 imp 3587080982063727 310410214827503 12061 06/05/20 19:34:13 0:24 0 320 imp 3587080982063727 310410214827503 12062 06/05/20 19:48:56 60:00 40528 31092 imp 3587080982063727 310410214827503 12063 06/05/20 20:19:30 60:00 3424 577 nxtgonpho no 3587080982063727 310410214827503 12064 06/05/20 20:45:10 0:33 3038 17869 1ms 3587080982063727 310410214827503 12065 06/05/20 20:46:07 0:33 3750 20453 1ms 3587080982063727 310410214827503 12066 06/05/20 20:48:56 60:00 7172 2988 Imp 3587080982063727 310410214827503 12067 06/05/20 21:19:30 60:00 1012 4808 nxtgonpho no 3587080982063727 310410214827503 12068 06/05/20 21:48:56 58:49 13568 4592 isms 3587080982063727 310410214827503 AT&T Proprietary MAKE MODEL APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE !PROMS APPLE IPROME8 APPLE IPROME8 APPLE IPROME8 APPLE 'PHONES APPLE IPROME8 APPLE IPROME8 APPLE 'PHONES APPLE !PHONES APPLE !PROMS The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 490 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. The information contained her is SDNYGM 00003134 NsTroliAL not for general distribution. EFTA 00/17210 EFTA01251734 The information contained her is 2996479 06/17/2020 MOBILITY AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41.1, AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 Conn. Originating LT Time Number (UTC) Bytes UP Byte. Rpn On INDI IMPI MUM 12069 06/05/20 22:19:30 60:00 1220 687 nxtgonpho no 3587080982063727 310410214827503 APPLE 12070 06/05/20 22:47:45 2:43 118304 1412 imp 3587080982063727 310410214827503 APPLE 12071 06/05/20 22:47:45 2:43 2752 1324 imp 3587080982063727 310410214827503 APPLE 12072 06/05/20 22:50:28 60:00 11044 4344 ins 3587080982063727 310410214827503 APPLE 12073 06/05/20 23:19:30 60:00 462 420 nxtgonpho no 3587080982063727 310410214827503 APPLE 12074 06/05/20 23:50:28 60:00 15232 5108 imp 3587080982063727 310410214827503 APPLE 12075 06/06/20 00:19:30 60:00 711 4833 nxtgonpho no 3587080982063727 310410214827503 APPLE 12076 06/06/20 00:50:28 60:00 15324 4840 yes 3587080982063727 310410214827503 APPLE 12077 06/06/20 01:19:30 60:00 32521 22185 nxtgonpho no 3587080982063727 310410214827503 APPLE 12078 06/06/20 01:50:28 60:00 6848 2540 as 3587080982063727 310410214827503 APPLE 12079 06/06/20 02:19:30 60:00 6756 5215 nxtgonpho no 3587080982063727 310410214827503 APPLE 12080 06/06/20 02:50:28 1:24 0 0 as 3587080982063727 310410214827503 APPLE 12081 06/06/20 02:51:52 6:21 13120 1536 las 3587080982063727 310410214827503 APPLE 12082 06/06/20 02:51:52 6:21 3376 1448 ins 3587080982063727 310410214827503 APPLE 12083 06/06/20 02:58:13 60:00 14876 4716 imp 3587080982063727 310410214827503 APPLE 12084 06/06/20 03:19:30 60:00 3718 682 nxtgonpho no 3587080982063727 310410214827503 APPLE 12085 06/06/20 03:58:13 60:00 8388 2896 imp 3587080982063727 310410214827503 APPLE 12086 06/06/20 04:19:30 60:00 872 735 nxtgonpho no 3587080982063727 310410214827503 APPLE 12087 06/06/20 04:58:13 60:00 9928 3144 imp 3587080982063727 310410214827503 APPLE 12088 06/06/20 05:19:30 60:00 867 945 nxtgonpho no 3587080982063727 310410214827503 APPLE 12089 06/06/20 05:58:13 60:00 15344 6044 imp 3587080982063727 310410214827503 APPLE 12090 06/06/20 06:19:30 60:00 908 1120 nxtgonpho no 3587080982063727 310410214827503 APPLE 12091 06/06/20 06:58:13 60:00 8496 2896 imp 3587080982063727 310410214827503 APPLE 12092 06/06/20 07:19:30 60:00 635 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 12093 06/06/20 07:58:13 60:00 8604 3004 imp 3587080982063727 310410214827503 APPLE 12094 06/06/20 08:19:30 60:00 346 210 nxtgonpho no 3587080982063727 310410214827503 APPLE 12095 06/06/20 08:58:13 60:00 10380 4204 imp 3587080982063727 310410214827503 APPLE MODEL !PROMS 1101(01428 1101(01428 1101(01428 1101(01428 1101(01428 1101(01428 1101(01428 1101(01428 1101(01428 1101(01428 !PROMS !PROMS IPM01428 IPM01428 IPM01428 IPM01428 !PROMS !PROMS !PROMS !PROMS !PROMS !PROMS IPM01428 IPM01428 IPM01428 IPM01428 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 491 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003135 NTniliAL not for general distribution. EF-EA_00117211 EFTA01251735 MOBILITY The information contained heraCtopelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41111. t‘mse r:e 101 AT&T Run Data: Run Time: Data Usage Tor: 06/17/2020 Item Conn. Conn. Date Time (UTC) Originating ET Bytes Bytom Apn IMEI DWI MARL MODEL Number Up On 12096 06/06/20 09:19:30 60:00 519 315 nxtgonpho no 3587080982063727 310410214827503 12097 06/06/20 09:58:13 60:00 8496 2896 imp 3587080982063727 310410214827503 12098 06/06/20 10:19:30 60:00 578 630ruftgonpho no 3587080982063727 310410214827503 12099 06/06/20 10:58:13 60:00 12152 4520 imp 3587080982063727 310410214827503 12100 06/06/20 11:19:30 47:23 16469 13411ruMmonpho no 3587080982063727 310410214827503 12101 06/06/20 11:58:13 60:00 7080 2988 imp 3587080982063727 310410214827503 12102 06/06/20 12:06:53 60:00 6834 5371 nxtgonpho no 3587080982063727 310410214827503 12103 06/06/20 12:58:13 60:00 8496 2896 imp 3587080982063727 310410214827503 12104 06/06/20 13:06:53 60:00 35211 18104roftgonpho no 3587080982063727 310410214827503 12105 06/06/20 13:58:13 60:00 12028 4328 imp 3587080982063727 310410214827503 12106 06/06/20 14:06:53 60:00 1126 5579ruftgonpho no 3587080982063727 310410214827503 12107 06/06/20 14:58:13 60:00 8388 2896 imp 3587080982063727 310410214827503 12108 06/06/20 15:06:53 60:00 3922 4868ruftgonpho no 3587080982063727 310410214827503 12109 06/06/20 15:58:13 60:00 13676 4892 imp 3587080982063727 310410214827503 12110 06/06/20 16:06:53 60:00 462 420ruftgonpho no 3587080982063727 310410214827503 12111 06/06/20 16:58:13 60:00 8496 3004 imp 3587080982063727 310410214827503 12112 06/06/20 17:06:53 60:00 1012 5048ruftgonpho no 3587080982063727 310410214827503 12113 06/06/20 17:58:13 13:19 4964 1572 imp 3587080982063727 310410214827503 12114 06/06/20 18:06:53 60:00 14636 14580ruftgonpho no 3587080982063727 310410214827503 12115 06/06/20 18:11:32 3:46 2644 1324 imp 3587080982063727 310410214827503 12116 06/06/20 18:11:32 3:47 13456 1412 imp 3587080982063727 310410214827503 12117 06/06/20 18:15:18 60:00 12028 4328 imp 3587080982063727 310410214827503 12118 06/06/20 19:06:53 60:00 13602 14022 nxtgonpho no 3587080982063727 310410214827503 12119 06/06/20 19:15:18 60:00 8604 3020 imp 3587080982063727 310410214827503 12120 06/06/20 20:06:53 60:00 867 945 nxtgonpho no 3587080982063727 310410214827503 12121 06/06/20 20:15:18 60:00 8388 3004 imp 3587080982063727 310410214827503 12122 06/06/20 21:06:53 60:00 4045 10186ruftgonpho 3587080982063727 310410214827503 no APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 492 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003136 NTrifikE not for general distribution. EF-EAJVII7212 EFTA01251736 MOBILITY The information contained heraleeNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. del AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 16:56:58 ET Bytes Up Bytes Apn Dn Conn. IX= IMSI NUM Time (UTC) Originating Number 12123 06/06/20 21:15:18 60:00 17224 6108 in 3587080982063727 310410214827503 APPLE 12124 06/06/20 22:06:53 40:49 173 105 nxtgonpho no 3587080982063727 310410214827503 APPLE 12125 06/06/20 22:15:18 19:10 0 0 in 3587080982063727 310410214827503 APPLE 12126 06/06/20 22:34:28 0:02 0 0 in 3587080982063727 310410214827503 APPLE 12127 06/06/20 22:34:28 0:02 0 0 in 3587080982063727 310410214827503 APPLE 12128 06/06/20 22:34:36 6:42 20846 19472 in 3587080982063727 310410214827503 APPLE 12129 06/06/20 22:40:48 0:30 979 3143 ims 3587080982063727 310410214827503 APPLE 12130 06/06/20 22:41:18 3:19 19216 12680 imp 3587080982063727 310410214827503 APPLE 12131 06/06/20 22:41:18 3:19 17772 12680 imp 3587080982063727 310410214827503 APPLE 12132 06/06/20 22:41:18 1:03 209603 84563 in 3587080982063727 310410214827503 APPLE 12133 06/06/20 22:41:18 1:03 209603 84563 in 3587080982063727 310410214827503 APPLE 12134 06/06/20 22:43:39 0:58 174366 84571 ims 3587080982063727 310410214827503 APPLE 12135 06/06/20 22:43:39 0:58 174366 84571 ims 3587080982063727 310410214827503 APPLE 12136 06/06/20 22:44:37 2:40 407479 313778 imp 3587080982063727 310410214827503 APPLE 12137 06/06/20 22:44:37 2:45 23520 12096 imp 3587080982063727 310410214827503 APPLE 12138 06/06/20 22:47:33 60:00 20211 9806 imp -1 310410214827503 12139 06/06/20 22:47:41 8:26 5065 6246 nxtgonpho no 3587080982063727 310410214827503 APPLE 12140 06/06/20 22:47:43 8:25 6246 4777 nxtgonpho no 3587080982063727 310410214827503 APPLE 12141 06/06/20 22:56:08 60:00 8145 11569 nxtgonpho no 3587080982063727 310410214827503 APPLE 12142 06/06/20 23:47:33 60:00 6924 2648 ims -1 310410214827503 12143 06/06/20 23:56:08 60:00 1347 1262 nxtgonpho no 3587080982063727 310410214827503 APPLE 12144 06/07/20 00:47:33 60:00 10084 3036 imp -1 310410214827503 12145 06/07/20 00:56:08 60:00 808 630 nxtgonpho no 3587080982063727 310410214827503 APPLE 12146 06/07/20 01:47:33 60:00 12244 4452 imp -1 310410214827503 12147 06/07/20 01:56:08 60:00 692 420 nxtgonpho no 3587080982063727 310410214827503 APPLE 12148 06/07/20 02:47:33 60:00 13584 4644 lam -1 310410214827503 12149 06/07/20 02:56:08 60:00 692 420 nxtgonpho no 3587080982063727 310410214827503 APPLE 12150 06/07/20 03:47:33 60:00 8728 2804 imp -1 310410214827503 12151 06/07/20 03:56:08 60:00 865 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 12152 06/07/20 04:47:33 60:00 9960 3036 imp -1 310410214827503 MODEL !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PRONGS !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 493 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_ 00003137 NTniliAL not for general distribution. EFTA 00117213 EFTA01251737 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. • AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 18:54:59 Conn. Originating ET Time Humber (UTC) Bytes Up Bytom Apn Dn IIBI IM3I MAIM 12153 06/07/20 04:56:08 60:00 699 630 nxtgonpho no 3587080982063727 310410214827503 APPLE 12154 06/07/20 05:47:33 60:00 13368 4468 imp -1 310410214827503 12155 06/07/20 05:56:08 60:00 865 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 12156 06/07/20 06:47:33 60:00 7264 2772 imp -1 310410214827503 12157 06/07/20 06:56:08 60:00 751 735 nxtgonpho no 3587080982063727 310410214827503 APPLE 12158 06/07/20 07:47:33 60:00 13476 4644 ins -1 310410214827503 12159 06/07/20 07:56:08 60:00 635 525 nxtgonpho no 3587080982063727 310410214827503 APPLE 12160 06/07/20 08:47:33 60:00 10068 3144 imp -1 310410214827503 12161 06/07/20 08:56:08 60:00 519 315 nxtgonpho no 3587080982063727 310410214827503 APPLE 12162 06/07/20 09:47:33 60:00 11904 4436 imp -1 310410214827503 12163 06/07/20 09:56:08 60:00 519 315 nxtgonpho no 3587080982063727 310410214827503 APPLE 12164 06/07/20 10:47:33 60:00 9960 3036 imp -1 310410214827503 12165 06/07/20 10:56:08 60:00 5502 7165 nxtgonpho no 3587080982063727 310410214827503 APPLE 12166 06/07/20 11:47:33 60:00 6924 2988 imp -1 310410214827503 12167 06/07/20 11:56:08 25:31 3199 471 nxtgonpho no 3587080982063727 310410214827503 APPLE 12168 06/07/20 12:21:39 60:00 10267 5332 nxtgonpho no 3587080982063727 310410214827503 APPLE 12169 06/07/20 12:47:33 60:00 14816 4876 imp -1 310410214827503 12170 06/07/20 13:21:39 60:00 763 735natgonpho no 3587080982063727 310410214827503 APPLE 12171 06/07/20 13:47:33 60:00 13368 4360 imp -1 310410214827503 12172 06/07/20 14:21:39 60:00 42891 28310 nxtgonpho no 3587080982063727 310410214827503 APPLE 12173 06/07/20 14:47:33 60:00 8496 2896 imp -1 310410214827503 12174 06/07/20 15:21:39 60:00 3488 682 nxtgonpho no 3587080982063727 310410214827503 APPLE 12175 06/07/20 15:47:33 60:00 8604 2896 imp -1 310410214827503 12176 06/07/20 16:21:39 16:38 75874 50048 nxtgonpho no 3587080982063727 310410214827503 APPLE 12177 06/07/20 16:38:16 1:49 288 48nxtgonpho no 3587080982063727 310410214827503 APPLE MOOTS IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 494 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGO0003138 PsiTniliAL not for general distribution. EFTA 00117214 EFTA01251738 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Oato: Run Time: Data Osage for: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (OTC) Bytes Up Bytom Apn Dn IKE I INSI MAKE 12178 06/07/20 16:38:17 1:49 48 0 nxtgonpho no 3587080982063727 310410214827503 APPLE 12179 06/07/20 16:40:06 2:35 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 12180 06/07/20 16:42:40 0:41 5065 6246ruftgonpho no 3587080982063727 310410214827503 APPLE 12181 06/07/20 16:42:41 0:41 6246 4777ruftgonpho no 3587080982063727 310410214827503 APPLE 12182 06/07/20 16:43:22 60:00 28254 16020 nxtgonpho no 3587080982063727 310410214827503 APPLE 12183 06/07/20 16:47:33 60:00 10176 3252 ins -1 310410214827503 12184 06/07/20 17:43:22 60:00 364517 42816ruftgonpho no 3587080982063727 310410214827503 APPLE 12185 06/07/20 17:47:33 60:00 18688 6356 ins -1 310410214827503 12186 06/07/20 18:43:22 60:00 981 735ruftgonpho no 3587080982063727 310410214827503 APPLE 12187 06/07/20 18:47:33 60:00 8712 3112 ins -1 310410214827503 12188 06/07/20 19:43:22 60:00 924 840ruftgonpho no 3587080982063727 310410214827503 APPLE 12189 06/07/20 19:47:33 60:00 7048 2772 ins -1 310410214827503 12190 06/07/20 20:43:22 60:00 6110 8869 nxtgonpho no 3587080982063727 310410214827503 APPLE 12191 06/07/20 20:47:33 60:00 10068 4020 ins -1 310410214827503 12192 06/07/20 21:43:22 60:00 79051 47955ruftgonpho no 3587080982063727 310410214827503 APPLE 12193 06/07/20 21:47:33 60:00 8496 2896 ism -1 310410214827503 12194 06/07/20 22:43:22 13:06 34981 20953ruftgonpho no 3587080982063727 310410214827503 APPLE 12195 06/07/20 22:47:33 60:00 13584 4644 ins -1 310410214827503 12196 06/07/20 22:56:29 48:56 35786 37486ruftgonpho no 3587080982063727 310410214827503 APPLE 12197 06/07/20 23:45:24 0:43 288 48ruftgonpho no 3587080982063727 310410214827503 APPLE 12198 06/07/20 23:45:25 0:43 48 Oruftgonpho no 3587080982063727 310410214827503 APPLE 12199 06/07/20 23:46:08 60:00 52762 20554ruftgonpho no 3587080982063727 310410214827503 APPLE 12200 06/07/20 23:47:33 60:00 10008 4080 ins -1 310410214827503 12201 06/08/20 00:46:08 60:00 867 945ruftgonpho no 3587080982063727 310410214827503 APPLE MODEL !PHONES !PHONES !PHONES !PHONES IPMONEB !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 495 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003139 NsToliAL not for general distribution. EFTA 00117215 EFTA01251739 MOBILITY The information contained heraleeNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in UTC. 41.1 AT&T Run pato: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 10:44:59 Conn. Time (UTC) Originating Number ET Bytes Up Bytes Apn Dn IKE I ISIS I MAfl 12202 06/08/20 00:47:33 60:00 10284 3252 imo -1 310410214827503 12203 06/08/20 01:46:08 60:00 746 1106 nxtgonpho no 3587080982063727 310410214827503 APPLE 12204 06/08/20 01:47:33 60:00 8496 3020 imo -1 310410214827503 12205 06/08/20 02:46:08 60:00 6780 7607 nxtgonpho no 3587080982063727 310410214827503 APPLE 12206 06/08/20 02:47:33 60:00 10176 3144 imo -1 310410214827503 12207 06/08/20 03:46:08 60:00 25665 16313 nxtgonpho no 3587080982063727 310410214827503 APPLE 12208 06/08/20 03:47:33 60:00 10332 4056 ims -1 310410214827503 12209 06/08/20 04:46:08 60:00 9060 7108 nxtgonpho no 3587080982063727 310410214827503 APPLE 12210 06/08/20 04:47:33 60:00 12012 4560 ims -1 310410214827503 12211 06/08/20 05:46:08 60:00 18026 13171 nxtgonpho no 3587080982063727 310410214827503 APPLE 12212 06/08/20 05:47:33 60:00 6924 2648 ims -1 310410214827503 12213 06/08/20 06:46:08 60:00 7047 6226 nxtgonpho no 3587080982063727 310410214827503 APPLE 12214 06/08/20 06:47:33 60:00 8496 3004 ims -1 310410214827503 12215 06/08/20 07:46:08 60:00 7818 8164 nxtgonpho no 3587080982063727 310410214827503 APPLE 12216 06/08/20 07:47:33 60:00 10332 3972 ims -1 310410214827503 12217 06/08/20 08:46:08 60:00 9845 7517 nxtgonpho no 3587080982063727 310410214827503 APPLE 12218 06/08/20 08:47:33 60:00 12012 4504 ims -1 310410214827503 12219 06/08/20 09:46:08 60:00 8976 8696 nxtgonpho no 3587080982063727 310410214827503 APPLE 12220 06/08/20 09:47:33 60:00 8388 2788 ims -1 310410214827503 12221 06/08/20 10:46:08 60:00 995 840 nxtgonpho no 3587080982063727 310410214827503 APPLE 12222 06/08/20 10:47:33 60:00 6940 3524 ims -1 310410214827503 12223 06/08/20 11:46:08 60:00 793883 55327 nxtgonpho no 3587080982063727 310410214827503 APPLE 12224 06/08/20 11:47:33 60:00 11796 4328 ims -1 310410214827503 12225 06/08/20 12:46:08 60:00 50438 31769 nxtgonpho no 3587080982063727 310410214827503 APPLE 12226 06/08/20 12:47:33 3:06 0 0 ims -1 310410214827503 12227 06/08/20 12:54:20 6:06 7193 6158 ims 3587080982063727 310410214827503 APPLE 12228 06/08/20 13:00:26 60:00 13552 4684 ims 3587080982063727 310410214827503 APPLE NICOLL IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONEB IPMONE8 IPMONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 496 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003140 NTniliAL not for general distribution. EFTA 00117216 EFTA01251740 MOBILITY The information contained heraCteNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 1L:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. AT&T Run Data: Run Time: Data Osage For: Item Conn. Data 06/17/2020 18:56:59 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn IMEI IMSI MUT MODEL 12229 06/08/20 13:46:08 60:00 17843 6938 nxtgenpho no 3587080982063727 310410214827503 APPLE !PROMS 12230 06/08/20 14:00:26 60:00 8712 3128 imp 3587080982063727 310410214827503 APPLE 'PHONES 12231 06/08/20 14:46:08 60:00 27331 86706ructgonpho no 3587080982063727 310410214827503 APPLE 'PHONES 12232 06/08/20 15:00:26 32:51 3424 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12233 06/08/20 15:33:17 4:42 4076 2324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12234 06/08/20 15:37:59 60:00 14076 7740 imp 3587080982063727 310410214827503 APPLE 'PHONES 12235 06/08/20 15:46:08 60:00 19087 9600ruftgonpho no 3587080982063727 310410214827503 APPLE 'PHONES 12236 06/08/20 16:37:59 60:00 13676 4768 imp 3587080982063727 310410214827503 APPLE 'PHONES 12237 06/08/20 16:46:08 60:00 647969 594639ruagonpho no 3587080982063727 310410214827503 APPLE 'PHONES 12238 06/08/20 17:37:59 3:23 0 0 imp 3587080982063727 310410214827503 APPLE 'PHONES 12239 06/08/20 17:41:22 2:08 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12240 06/08/20 17:43:30 0:22 3640 1448 imp 3587080982063727 310410214827503 APPLE 'PHONES 12241 06/08/20 17:43:52 2:18 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12242 06/08/20 17:46:08 60:00 4306491 5451466ruagonpho no 3587080982063727 310410214827503 APPLE 'PHONES 12243 06/08/20 17:46:10 0:29 3424 1216 imp 3587080982063727 310410214827503 APPLE 'PHONES 12244 06/08/20 17:46:39 0:26 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12245 06/08/20 17:47:05 0:16 5072 1680 imp 3587080982063727 310410214827503 APPLE 'PHONES 12246 06/08/20 17:47:21 0:32 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12247 06/08/20 17:47:53 1:35 3424 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12248 06/08/20 17:49:28 2:36 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12249 06/08/20 17:52:04 24:12 10036 3036 imp 3587080982063727 310410214827503 APPLE 'PHONES 12250 06/08/20 18:16:16 11:54 2644 1324 imp 3587080982063727 310410214827503 APPLE 'PHONES 12251 06/08/20 18:28:10 0:44 3532 1540 ins 3587080982063727 310410214827503 APPLE 'PHONES 12252 06/08/20 18:28:54 16:28 2644 1324 ins 3587080982063727 310410214827503 APPLE 'PHONES 12253 06/08/20 18:45:22 0:13 3316 1648 imp 3587080982063727 310410214827503 APPLE 'PHONES 12254 06/08/20 18:45:35 3:36 2876 1432 imp 3587080982063727 310410214827503 APPLE 'PHONES 12255 06/08/20 18:46:08 60:00 60107 19783 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12256 06/08/20 18:49:11 60:00 11796 4328 imp 3587080982063727 310410214827503 APPLE !PHONES 12257 06/08/20 19:46:08 60:00 12076 7056ruagonpho no 3587080982063727 310410214827503 APPLE !PHONES 12258 06/08/20 19:49:11 60:00 7080 2664 imp 3587080982063727 310410214827503 APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 497 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003141 not for general distribution. EFTA 00117217 EFTA01251741 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41111, AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 14:54:59 Conn. Time (UTC) Originating Number ET Bytes Up Bytom Apn Dn INEI IMSI MAKE 12259 06/08/20 20:46:08 60:00 1975 2926 nxtgonpho no 3587080982063727 310410214827503 APPLE 12260 06/08/20 20:49:11 60:00 6956 2756 ims 3587080982063727 310410214827503 APPLE 12261 06/08/20 21:46:08 60:00 1379 1102 nxtgonpho no 3587080982063727 310410214827503 APPLE 12262 06/08/20 21:49:11 59:12 15684 6572 ims 3587080982063727 310410214827503 APPLE 12263 06/08/20 22:46:08 2:15 277 209ruftgonpho no 3587080982063727 310410214827503 APPLE 12264 06/08/20 22:48:55 60:00 279778 966831 nxtgonpho no 3587080982063727 310410214827503 APPLE 12265 06/08/20 22:48:58 1:31 6673 5940 ims 3587080982063727 310410214827503 APPLE 12266 06/08/20 22:50:29 0:27 3532 1340 ims 3587080982063727 310410214827503 APPLE 12267 06/08/20 22:50:56 0:15 2644 1340 ims 3587080982063727 310410214827503 APPLE 12268 06/08/20 22:51:11 60:00 12028 4608 ims 3587080982063727 310410214827503 APPLE 12269 06/08/20 23:48:55 60:00 860 735nxtgonpho no 3587080982063727 310410214827503 APPLE 12270 06/08/20 23:51:11 60:00 8388 3128 ims 3587080982063727 310410214827503 APPLE 12271 06/09/20 00:48:55 60:00 20227 23698ruftgonpho no 3587080982063727 310410214827503 APPLE 12272 06/09/20 00:51:11 60:00 10268 3408 ims 3587080982063727 310410214827503 APPLE 12273 06/09/20 01:48:55 60:00 751 735ruftgonpho no 3587080982063727 310410214827503 APPLE 12274 06/09/20 01:51:11 60:00 8604 3036 ims 3587080982063727 310410214827503 APPLE 12275 06/09/20 02:48:55 60:00 578 630nxtgonpho no 3587080982063727 310410214827503 APPLE 12276 06/09/20 02:51:11 60:00 15668 6108 ims 3587080982063727 310410214827503 APPLE 12277 06/09/20 03:48:55 60:00 578 630ruftgonpho no 3587080982063727 310410214827503 APPLE 12278 06/09/20 03:51:11 60:00 7544 3820 ims 3587080982063727 310410214827503 APPLE 12279 06/09/20 04:48:55 60:00 828 867ruftgonpho no 3587080982063727 310410214827503 APPLE 12280 06/09/20 04:51:11 60:00 6848 2680 ims 3587080982063727 310410214827503 APPLE 12281 06/09/20 05:48:55 60:00 225 210ruftgonpho no 3587080982063727 310410214827503 APPLE 12282 06/09/20 05:51:11 60:00 7064 2804 ims 3587080982063727 310410214827503 APPLE 12283 06/09/20 06:48:55 60:00 289 315ruftgonpho no 3587080982063727 310410214827503 APPLE 12284 06/09/20 06:51:11 60:00 11920 4500 ims 3587080982063727 310410214827503 APPLE 12285 06/09/20 07:48:55 60:00 398 315ruftgonpho 3587080982063727 310410214827503 APPLE no MODEL !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PRONGS !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 498 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003142 NTniliAL not for general distribution. EFTA 00117218 EFTA01251742 MOBILITY The information contained heraleeNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 4111. `c` a.,„„#estAT&T Run Data: Run Tama: Data Osage For: Item Conn. Data 06/17/2020 IIIIIIIIII Conn. Time (UPC) Originating Number CT Bytes Up Bytes Apn Dn INR1 ISIS I MAKE NICOLL 12286 06/09/20 07:51:11 60:00 7172 3020 imo 3587080982063727 310410214827503 APPLE !PHONES 12287 06/09/20 08:48:55 60:00 225 210 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12288 06/09/20 08:51:11 60:00 10488 4536 imp 3587080982063727 310410214827503 APPLE !PHONES 12289 06/09/20 09:48:55 60:00 277 262 nxtgonpho no 3587080982063727 310410214827503 APPLE IPHO1428 12290 06/09/20 09:51:11 3:50 0 0 vas 3587080982063727 310410214827503 APPLE IPHO1428 12291 06/09/20 09:58:39 0:38 6675 5980 vas 3587080982063727 310410214827503 APPLE IPHO1428 12292 06/09/20 09:59:17 60:00 10720 4420 vas 3587080982063727 310410214827503 APPLE !PHONES 12293 06/09/20 10:48:55 60:00 341 367 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12294 06/09/20 10:59:17 60:00 8496 3128 imp 3587080982063727 310410214827503 APPLE !PHONES 12295 06/09/20 11:48:55 60:00 3074 262 nxtgonpho no 3587080982063727 310410214827503 APPLE IPRONE8 12296 06/09/20 11:59:17 60:00 7172 3220 imp 3587080982063727 310410214827503 APPLE IPRONE8 12297 06/09/20 12:48:55 23:58 341 367 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12298 06/09/20 12:59:17 60:00 8388 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 12299 06/09/20 13:12:53 11:46 98124 66778 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12300 06/09/20 13:24:39 60:00 7508 15117 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12301 06/09/20 13:59:17 52:10 15468 8244 imp 3587080982063727 310410214827503 APPLE !PHONES 12302 06/09/20 14:24:39 22:50 0 Ormtgonpho no 3587080982063727 310410214827503 APPLE IPRONE8 12303 06/09/20 14:47:28 2:05 5064 6314 nxtgonpho no 3587080982063727 310410214827503 APPLE IPRONE8 12304 06/09/20 14:47:29 2:05 6314 4776 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12305 06/09/20 14:49:34 3:11 280 581 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12306 06/09/20 14:51:33 10:30 8368 6156 imp -1 310410214827503 12307 06/09/20 14:52:44 0:37 5453 6094 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12308 06/09/20 14:52:46 0:35 6315 8165 imp 3587080982063727 310410214827503 APPLE !PHONES 12309 06/09/20 14:52:46 0:36 6094 5165 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12310 06/09/20 14:52:47 0:35 8097 6051 ins 3587080982063727 310410214827503 APPLE !PHONES 12311 06/09/20 14:53:22 44:46 2021706 2314792 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 499 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003143 NeTtAti not for general distribution. EF-EA_00117219 EFTA01251743 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. ...., ••—•°"" e0AT&T Run pato: Run Tina: Data Osage Tor: Itea Conn. Date 06/17/2020 10:56:59 Conn. Originating ET Time Number (OTC) Bytes up Bytoa Apn Dn INSI 12312 06/09/20 14:53:24 2:22 0 0 ins 3587080982063727 310410214827503 12313 06/09/20 14:55:55 0:00 0 0 ins 3587080982063727 310410214827503 12314 06/09/20 14:56:10 0:37 10745 6428 imp 3587080982063727 310410214827503 12315 06/09/20 14:56:47 33:26 17928 2804 imp 3587080982063727 310410214827503 12316 06/09/20 14:56:47 33:26 5624 2804 imp 3587080982063727 310410214827503 12317 06/09/20 15:30:13 60:00 10632 4236 imp 3587080982063727 310410214827503 12318 06/09/20 15:38:07 0:32 5220 6314 nxtgonpho no 3587080982063727 310410214827503 12319 06/09/20 15:38:09 0:31 6314 4932 nxtgonpho no 3587080982063727 310410214827503 12320 06/09/20 15:38:40 60:00 45938 25244 nxtgonpho no 3587080982063727 310410214827503 12321 06/09/20 16:30:13 60:00 6848 2680 imp 3587080982063727 310410214827503 12322 06/09/20 16:38:40 60:00 142769 4687229 nxtgonpho no 3587080982063727 310410214827503 12323 06/09/20 17:30:13 60:00 8496 2928 imp 3587080982063727 310410214827503 12324 06/09/20 17:38:40 60:00 2367 875 nxtgonpho no 3587080982063727 310410214827503 12325 06/09/20 18:30:13 60:00 8620 3052 imp 3587080982063727 310410214827503 12326 06/09/20 18:38:40 60:00 180792 103730 nxtgonpho no 3587080982063727 310410214827503 12327 06/09/20 19:30:13 60:00 26512 13248 mug 3587080982063727 310410214827503 12328 06/09/20 19:38:40 60:00 2079 3220 nxtgonpho no 3587080982063727 310410214827503 12329 06/09/20 20:00:47 2:23 372588 270899 imp 3587080982063727 310410214827503 12330 06/09/20 20:30:13 60:00 15388 8752 imp 3587080982063727 310410214827503 12331 06/09/20 20:38:40 60:00 51601 38466 nxtgonpho no 3587080982063727 310410214827503 12332 06/09/20 20:59:47 40:16 6008484 8878545 imp 3587080982063727 310410214827503 12333 06/09/20 21:30:13 29:49 32156 20948 imp 3587080982063727 310410214827503 12334 06/09/20 21:38:40 60:00 337102 301510 nxtgonpho no 3587080982063727 310410214827503 12335 06/09/20 21:45:27 0:43 6452 17206 imp 3587080982063727 310410214827503 12336 06/09/20 21:46:22 0:19 1381 10147 imp 3587080982063727 310410214827503 12337 06/09/20 22:00:02 0:44 179116 1712 imp 3587080982063727 310410214827503 12338 06/09/20 22:00:02 0:44 4744 1712 imp 3587080982063727 310410214827503 12339 06/09/20 22:00:46 1:09 3424 1340 imp 3587080982063727 310410214827503 12340 06/09/20 22:01:55 0:43 2660 1340 imp 3587080982063727 310410214827503 12341 06/09/20 22:01:55 0:43 2596 1340 imp 3587080982063727 310410214827503 MARL NICOLL APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPMONEB APPLE IPMONEB APPLE IPMONEB APPLE IPRONE8 APPLE IPRONE8 APPLE IPMONEB APPLE !PHONES APPLE IPMONEB APPLE IPMONEB APPLE IPMONEB APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 500 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003144 PsisT iliAL not for general distribution. EFTA 00/17220 EFTA01251744 MOBILITY The information contained heraleeNyFtli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records ere stored and provided in UTC. .....,./ %--s AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. Originating ET Time Rumbas (UTC) Sytes UP Bytes kpn Dn 12342 06/09/20 22:02:38 32:47 8388 2928 imo 3587080982063727 310410214827503 12343 06/09/20 22:35:25 0:53 2660 1340 imo 3587080982063727 310410214827503 12344 06/09/20 22:35:25 0:53 2596 1340 imo 3587080982063727 310410214827503 12345 06/09/20 22:36:18 0:52 4840 1588 imo 3587080982063727 310410214827503 12346 06/09/20 22:37:10 13:39 2596 1340 imo 3587080982063727 310410214827503 12347 06/09/20 22:37:10 13:40 2660 1340 imo 3587080982063727 310410214827503 12348 06/09/20 22:38:40 40:24 125226 85387 matgonpho no 3587080982063727 310410214827503 12349 06/09/20 22:50:49 60:00 35576 21760 imo 3587080982063727 310410214827503 12350 06/09/20 23:19:03 0:37 5285 6451 nxtgonpho no 3587080982063727 310410214827503 12351 06/09/20 23:19:05 0:36 6451 4997 nxtgonpho no 3587080982063727 310410214827503 12352 06/09/20 23:19:22 0:14 3297 14724 imo 3587080982063727 310410214827503 12353 06/09/20 23:19:38 0:10 1431 12839 imo 3587080982063727 310410214827503 12354 06/09/20 23:19:41 60:00 108959 73126 nxtgonpho no 3587080982063727 310410214827503 12355 06/09/20 23:50:49 60:00 19884 11412 imo 3587080982063727 310410214827503 12356 06/09/20 23:58:54 0:08 2460 11189 imo 3587080982063727 310410214827503 12357 06/10/20 00:19:41 1:32 39417 20149 nxtgonpho no 3587080982063727 310410214827503 12358 06/10/20 00:21:12 2:03 288 48 nxtgonpho no 3587080982063727 310410214827503 12359 06/10/20 00:21:13 2:03 48 0 nxtgonpho no 3587080982063727 310410214827503 12360 06/10/20 00:23:15 3:45 7211 8328 nxtgonpho no 3587080982063727 310410214827503 12361 06/10/20 00:23:16 3:45 8328 6923 nxtgonpho no 3587080982063727 310410214827503 12362 06/10/20 00:27:01 2:48 78953 60993 nxtgonpho no 3587080982063727 310410214827503 12363 06/10/20 00:29:48 24:08 7773 7645 nxtgonpho no 3587080982063727 310410214827503 12364 06/10/20 00:29:49 24:08 7645 7485 nxtgenpho no 3587080982063727 310410214827503 12365 06/10/20 00:50:49 14:49 3424 1340 ins 3587080982063727 310410214827503 12366 06/10/20 00:53:57 3:57 48 0 nxtgenpho no 3587080982063727 310410214827503 12367 06/10/20 00:57:53 1:12 288 48 nxtgenpho no 3587080982063727 310410214827503 tiCOEL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE IPROME8 APPLE IPROME8 APPLE !PHONES APPLE !PHONES APPLE IPROME8 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003145 Ns-EV& not for general distribution. Page 501 EFTA 00117221 EFTA01251745 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41111, AT&T Run Data: Run Tina: Data Osage For: 06/17/2020 IiiiiIIIII Item Conn. Data Conn. Time (OTC) Originating Number LT Bytes Up 12368 06/10/20 00:57:55 1:11 48 12369 06/10/20 00:59:06 28:09 91843 12370 06/10/20 01:05:38 4:36 149256 12371 06/10/20 01:05:38 4:36 6160 12372 06/10/20 01:10:14 17:03 10176 12373 06/10/20 01:30:49 8:06 298180 12374 06/10/20 01:30:51 6:57 6671 12375 06/10/20 01:37:48 60:00 13568 12376 06/10/20 01:38:55 14:43 288 12377 06/10/20 01:38:56 14:43 48 12378 06/10/20 01:53:39 5:39 8614 12379 06/10/20 01:59:18 60:00 15777 12380 06/10/20 02:37:48 60:00 8496 12381 06/10/20 02:59:18 60:00 687 12382 06/10/20 03:37:48 60:00 7172 12383 06/10/20 03:59:18 60:00 578 12384 06/10/20 04:37:48 60:00 14892 12385 06/10/20 04:59:18 60:00 289 12386 06/10/20 05:37:48 60:00 13352 12387 06/10/20 05:59:18 60:00 462 12388 06/10/20 06:37:48 60:00 6956 12389 06/10/20 06:59:18 60:00 173 12390 06/10/20 07:37:48 60:00 8388 12391 06/10/20 07:59:18 60:00 346 12392 06/10/20 08:37:48 60:00 6848 12393 06/10/20 08:59:18 60:00 346 Byte. Apn INF' IMBI MARE MODEL On 0 nxtgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 405897ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 3496 imp 3587080982063727 310410214827503 APPLE 'PHONES 3496 imp 3587080982063727 310410214827503 APPLE !PHONES 8292 imp 3587080982063727 310410214827503 APPLE !PHONES 975215ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 5904 imp 3587080982063727 310410214827503 APPLE !PHONES 4684 imp 3587080982063727 310410214827503 APPLE 'PHONES 48ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no Oruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 8797ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 16256ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 3112 imp 3587080982063727 310410214827503 APPLE 'PHONES 630ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 2756 imp 3587080982063727 310410214827503 APPLE 'PHONES 630ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 4824 imp 3587080982063727 310410214827503 APPLE 'PHONES 315ruftgonpho 3587080982063727 310410214827503 APPLE 'PHONES no 4752 imp 3587080982063727 310410214827503 APPLE 'PHONES 420ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 2648 imp 3587080982063727 310410214827503 APPLE !PHONES 105ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 3004 imp 3587080982063727 310410214827503 APPLE !PHONES 210ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 2864 imp 3587080982063727 310410214827503 APPLE !PHONES 210ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 502 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003146 NTIAL not for general distribution. EFTA 00117222 EFTA01251746 MOBILITY The information contained hereCtlaNyR 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 411111, tr‘"Ii° aed/ . AT&T Run Date: Run Time: Data Usage For: Item Conn. Date 06/17/2020 Conn. Originating ET Time Naar (UTC) Bytes Up Byte. Apn Dn INEI pal 12394 06/10/20 09:37:48 60:00 8496 3112 imo 3587080982063727 310410214827503 12395 06/10/20 09:59:18 60:00 792 910 nxtgonpho no 3587080982063727 310410214827503 12396 06/10/20 10:37:48 60:00 14020 5596 imo 3587080982063727 310410214827503 12397 06/10/20 10:59:18 53:48 73033 46330 nxtgonpho no 3587080982063727 310410214827503 12398 06/10/20 11:37:48 59:15 10036 3252 imo 3587080982063727 310410214827503 12399 06/10/20 11:53:05 2:03 5221 6330 nxtgonpho no 3587080982063727 310410214827503 12400 06/10/20 11:53:06 2:03 6330 4933 nxtgonpho no 3587080982063727 310410214827503 12401 06/10/20 11:55:09 60:00 6915 5746 nxtgonpho no 3587080982063727 310410214827503 12402 06/10/20 12:37:03 2:44 3376 1448 ins 3587080982063727 310410214827503 12403 06/10/20 12:39:47 60:00 15000 4716 ins 3587080982063727 310410214827503 12404 06/10/20 12:55:09 56:15 1071 5832 nxtgonpho no 3587080982063727 310410214827503 12405 06/10/20 13:39:47 60:00 8496 2896 imp 3587080982063727 310410214827503 12406 06/10/20 13:51:23 2:04 5062 6328 nxtgonpho no 3587080982063727 310410214827503 12407 06/10/20 13:51:24 2:04 6328 4774 nxtgonpho no 3587080982063727 310410214827503 12408 06/10/20 13:53:28 56:30 70376 54700 nxtgonpho no 3587080982063727 310410214827503 12409 06/10/20 14:39:47 60:00 31844 22980 ins 3587080982063727 310410214827503 12410 06/10/20 14:49:57 0:22 288 48 nxtgonpho no 3587080982063727 310410214827503 12411 06/10/20 14:49:59 0:21 48 Oruftgonpho no 3587080982063727 310410214827503 12412 06/10/20 14:50:20 8:44 48 Onxtgonpho no 3587080982063727 310410214827503 12413 06/10/20 14:54:49 0:29 1590 14344 ins 3587080982063727 310410214827503 12414 06/10/20 14:55:26 0:16 9756 24842 imo 3587080982063727 310410214827503 12415 06/10/20 14:59:03 3:32 288 48 nxtgonpho no 3587080982063727 310410214827503 12416 06/10/20 14:59:05 3:31 48 Onxtgonpho no 3587080982063727 310410214827503 12417 06/10/20 15:02:36 60:00 92707 50816 nxtgonpho no 3587080982063727 310410214827503 12418 06/10/20 15:39:47 60:00 15236 5936 imp 3587080982063727 310410214827503 NAZI HOD= APPLE !PHONES APPLE !PHONES APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE IPRONE8 APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE DRONES APPLE DRONES APPLE DRONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE DRONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 503 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003147 NTifikE not for general distribution. EFTA 00117223 EFTA01251747 MOBILITY The information contained hereeNyFtit 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in OTC. 41111, AT&T Run Data: Run Time: Data Osage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number ET Bytes Up Bytes Apn Dn INZI IMBI MUM 12419 06/10/20 16:02:36 60:00 2961 11328 nxtgonpho no 3587080982063727 310410214827503 APPLE 12420 06/10/20 16:39:47 60:00 10252 3376 imp 3587080982063727 310410214827503 APPLE 12421 06/10/20 17:02:36 24:14 4741 797ruftgonpho no 3587080982063727 310410214827503 APPLE 12422 06/10/20 17:26:50 60:00 96839 37310ruftgonpho no 3587080982063727 310410214827503 APPLE 12423 06/10/20 17:39:47 60:00 8388 2896 imp 3587080982063727 310410214827503 APPLE 12424 06/10/20 18:26:50 60:00 169501 105986ruftgonpho no 3587080982063727 310410214827503 APPLE 12425 06/10/20 18:39:47 60:00 34924 26900 imp 3587080982063727 310410214827503 APPLE 12426 06/10/20 18:50:57 0:33 2804 18349 imp 3587080982063727 310410214827503 APPLE 12427 06/10/20 19:11:28 0:27 2059 12714 imp 3587080982063727 310410214827503 APPLE 12428 06/10/20 19:26:50 37:20 40083 29088ruftgonpho no 3587080982063727 310410214827503 APPLE 12429 06/10/20 19:39:47 60:00 13676 4684 imp 3587080982063727 310410214827503 APPLE 12430 06/10/20 20:04:10 2:03 5566 8034ruftgonpho no 3587080982063727 310410214827503 APPLE 12431 06/10/20 20:04:11 2:03 8034 5278ruftgonpho no 3587080982063727 310410214827503 APPLE 12432 06/10/20 20:06:14 60:00 13685 12191ruftgonpho no 3587080982063727 310410214827503 APPLE 12433 06/10/20 20:39:47 43:51 3408 1324 imp 3587080982063727 310410214827503 APPLE 12434 06/10/20 21:06:14 37:19 59742 42049ruftgonpho no 3587080982063727 310410214827503 APPLE 12435 06/10/20 21:23:38 0:35 163424 2912 imp 3587080982063727 310410214827503 APPLE 12436 06/10/20 21:23:38 0:35 5240 2824 imp 3587080982063727 310410214827503 APPLE 12437 06/10/20 21:24:13 4:48 3424 1432 imp 3587080982063727 310410214827503 APPLE 12438 06/10/20 21:29:01 14:32 7580 2908 imp 3587080982063727 310410214827503 APPLE 12439 06/10/20 21:29:01 14:32 7580 2820 imp 3587080982063727 310410214827503 APPLE 12440 06/10/20 21:43:33 1:15 23581 106165 nxtgonpho no 3587080982063727 310410214827503 APPLE 12441 06/10/20 21:43:36 1:12 8191 6178 imp 3587080982063727 310410214827503 APPLE 12442 06/10/20 21:44:48 55:44 93041 251870 nxtgonpho no 3587080982063727 310410214827503 APPLE 12443 06/10/20 21:44:50 0:29 7407 6090 imp 3587080982063727 310410214827503 APPLE 12444 06/10/20 21:45:19 3:27 3748 1556 imp 3587080982063727 310410214827503 APPLE 12445 06/10/20 21:48:46 1:03 2644 1324 imp 3587080982063727 310410214827503 APPLE 12446 06/10/20 21:49:49 45:13 21796 15580 imp 3587080982063727 310410214827503 APPLE NICOLL 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 504 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00003148 NTifikE not for general distribution. EFTA 00117224 EFTA01251748 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T arc. has queried for records using Eastern 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in 411111, ...,,,• ••—•••"" e AT&T Run Dato: Run Time: Data Osage for: 06/17/2020 Item Conn. Conn. Originating ET Bytes Byte. Apn IRE' INBI ten ROOM Date Time Number Up Dn (OTC) 12447 06/10/20 22:20:49 0:30 4259 12448 06/10/20 22:35:02 5:27 2752 12449 06/10/20 22:40:29 2:19 4948 12450 06/10/20 22:40:31 2:03 5065 12451 06/10/20 22:40:32 2:03 6314 12452 06/10/20 22:42:35 60:00 33070 12453 06/10/20 22:42:48 0:28 2644 12454 06/10/20 22:42:48 0:28 2644 12455 06/10/20 22:43:16 17:45 3532 12456 06/10/20 23:05:46 5:35 6671 12457 06/10/20 23:11:25 2:26 6667 12458 06/10/20 23:13:51 0:33 4856 12459 06/10/20 23:14:24 1:30 2752 12460 06/10/20 23:15:54 60:00 14016 12461 06/10/20 23:42:35 18:08 52130 12462 06/11/20 00:00:42 2:03 288 12463 06/11/20 00:00:43 2:03 48 12464 06/11/20 00:02:46 60:00 35541 12465 06/11/20 00:15:54 60:00 26560 12466 06/11/20 00:50:18 0:29 1749 12467 06/11/20 01:00:11 44:46 7656873 12468 06/11/20 01:02:46 60:00 19543 12469 06/11/20 01:15:54 60:00 11496 12470 06/11/20 02:02:46 60:00 2218 12471 06/11/20 02:15:54 60:00 10828 12472 06/11/20 03:02:46 5:40 225 12473 06/11/20 03:08:26 60:00 42848 12474 06/11/20 03:15:54 60:00 8728 15173 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 1324 ins 3587080982063727 310410214827503 APPLE 1PHONZ8 1680 ins 3587080982063727 310410214827503 APPLE IPMONE8 6314 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 4777 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 35962 nxtgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 1412 ins 3587080982063727 310410214827503 APPLE IPMONE8 1324 ins 3587080982063727 310410214827503 APPLE IPMONE8 1324 ins 3587080982063727 310410214827503 APPLE IPMONE8 5979 ins 3587080982063727 310410214827503 APPLE IPMONE8 5982 ins 3587080982063727 310410214827503 APPLE IPMONE8 1464 ins 3587080982063727 310410214827503 APPLE IPMONE8 1324 ins 3587080982063727 310410214827503 APPLE IPMONE8 4948 ins 3587080982063727 310410214827503 APPLE IPMONE8 43565ruftgonpho 3587080982063727 310410214827503 APPLE !PHONES no 48ruftgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no Oruftgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 16641ruftgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 17852 ins 3587080982063727 310410214827503 APPLE IPMONE8 13796 ins 3587080982063727 310410214827503 APPLE IPMONE8 9341811 ins 3587080982063727 310410214827503 APPLE IPMONE8 7341 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 4784 ins 3587080982063727 310410214827503 APPLE IPMONE8 2198 ructgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 4220 ins 3587080982063727 310410214827503 APPLE IPMONE8 210ruftgonpho 3587080982063727 310410214827503 APPLE IPMONE8 no 32453 ructgonpho 3587080982063727 310410214827503 APPLE !PHONES no 3772 ins 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 505 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003149 NsTntikE not for general distribution. EF-EAJVII7225 EFTA01251749 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 41111, •-_-/ %‘"Ii. " ...° AT&T Run pato: Run Time: Data Osage For: 06/17/2020 giglIIIIIII Item Conn. Date Conn. Originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INZI IMSI 12475 06/11/20 04:08:26 60:00 5798 8080 nxtgonpho no 3587080982063727 310410214827503 12476 06/11/20 04:15:54 60:00 13568 4876 ins 3587080982063727 310410214827503 12477 06/11/20 05:08:26 60:00 1005 979 nxtgonpho no 3587080982063727 310410214827503 12478 06/11/20 05:15:54 60:00 8388 2788 imp 3587080982063727 310410214827503 12479 06/11/20 06:08:26 60:00 450 420 nxtgonpho no 3587080982063727 310410214827503 12480 06/11/20 06:15:54 31:28 5072 1572 imp 3587080982063727 310410214827503 12481 06/11/20 06:47:22 0:57 148724 1536 imp 3587080982063727 310410214827503 12482 06/11/20 06:47:22 0:57 2968 1448 imp 3587080982063727 310410214827503 12483 06/11/20 06:48:19 60:00 10256 4344 ins 3587080982063727 310410214827503 12484 06/11/20 07:08:26 60:00 225 210 nxtgonpho no 3587080982063727 310410214827503 12485 06/11/20 07:48:19 60:00 8496 3004 imp 3587080982063727 310410214827503 12486 06/11/20 08:08:26 60:00 225 210 nxtgonpho no 3587080982063727 310410214827503 12487 06/11/20 08:48:19 60:00 11904 4396 imp 3587080982063727 310410214827503 12488 06/11/20 09:08:26 60:00 398 315 nxtgonpho no 3587080982063727 310410214827503 12489 06/11/20 09:48:19 60:00 7080 2772 imp 3587080982063727 310410214827503 12490 06/11/20 10:08:26 60:00 277 315 nxtgonpho no 3587080982063727 310410214827503 12491 06/11/20 10:48:19 60:00 10596 4096 imp 3587080982063727 310410214827503 12492 06/11/20 11:08:26 37:36 329 367 nxtgonpho no 3587080982063727 310410214827503 12493 06/11/20 11:46:01 0:34 5390 7804 nxtgonpho no 3587080982063727 310410214827503 12494 06/11/20 11:46:02 0:34 7804 5102 nxtgonpho no 3587080982063727 310410214827503 12495 06/11/20 11:46:36 60:00 14045 47524 nxtgonpho no 3587080982063727 310410214827503 12496 06/11/20 11:48:19 15:20 0 0 imp 3587080982063727 310410214827503 12497 06/11/20 12:08:15 37:27 8454 6286 imp 3587080982063727 310410214827503 12498 06/11/20 12:45:42 0:17 2768 1324 imp 3587080982063727 310410214827503 12499 06/11/20 12:45:42 0:17 2704 1324 imp 3587080982063727 310410214827503 12500 06/11/20 12:45:59 10:11 4964 1696 imp 3587080982063727 310410214827503 MAKE MODEL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 506 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003150 PsiTn iliAL not for general distribution. EFTAJVII7226 EFTA01251750 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 1S:57:08 BT Bytes Up Bytes Apn Dn Conn. INTI INBI tali= Time (OTC) Originating Number 12501 06/11/20 12:46:36 60:00 2177046 2642670 nxtgenpho no 3587080982063727 310410214827503 APPLE 12502 06/11/20 12:56:20 3:14 11347 6482 ims 3587080982063727 310410214827503 APPLE 12503 06/11/20 12:59:34 0:45 2768 1324 ims 3587080982063727 310410214827503 APPLE 12504 06/11/20 12:59:34 0:45 2704 1324 ims 3587080982063727 310410214827503 APPLE 12505 06/11/20 13:00:19 48:00 7064 2880 ims 3587080982063727 310410214827503 APPLE 12506 06/11/20 13:46:36 3:00 3006 1187 nxtgenpho no 3587080982063727 310410214827503 APPLE 12507 06/11/20 13:48:19 1:17 7684 6376 ins 3587080982063727 310410214827503 APPLE 12508 06/11/20 13:48:19 1:17 7620 6376 ins 3587080982063727 310410214827503 APPLE 12509 06/11/20 13:51:27 3:56 356279 1131640 nxtgenpho no 3587080982063727 310410214827503 APPLE 12510 06/11/20 13:51:30 3:53 8905 7072 ins 3587080982063727 310410214827503 APPLE 12511 06/11/20 13:55:22 2:03 288 48ruftgenpho no 3587080982063727 310410214827503 APPLE 12512 06/11/20 13:55:23 2:04 48 Oruftgenpho no 3587080982063727 310410214827503 APPLE 12513 06/11/20 13:56:00 1:25 6476 7421 ins 3587080982063727 310410214827503 APPLE 12514 06/11/20 13:56:01 1:26 7421 6124 ins 3587080982063727 310410214827503 APPLE 12515 06/11/20 13:57:27 33:22 8993 10526ruftgenpho no 3587080982063727 310410214827503 APPLE 12516 06/11/20 13:58:27 7:45 6689 6000 ins 3587080982063727 310410214827503 APPLE 12517 06/11/20 14:06:12 60:00 24096 13980 ins 3587080982063727 310410214827503 APPLE 12518 06/11/20 14:11:50 0:42 7780 14713 ins 3587080982063727 310410214827503 APPLE 12519 06/11/20 14:30:49 60:00 87380 60369ruftgenpho no 3587080982063727 310410214827503 APPLE 12520 06/11/20 15:06:12 60:00 7296 3020 ins 3587080982063727 310410214827503 APPLE 12521 06/11/20 15:30:49 60:00 27822 17667 nxtgenpho no 3587080982063727 310410214827503 APPLE 12522 06/11/20 16:06:12 0:03 0 0 ins 3587080982063727 310410214827503 APPLE 12523 06/11/20 16:06:14 2:19 14560 1320 ins 3587080982063727 310410214827503 APPLE 12524 06/11/20 16:06:15 2:18 2428 1232 ins 3587080982063727 310410214827503 APPLE 12525 06/11/20 16:08:33 60:00 14032 4856 ins 3587080982063727 310410214827503 APPLE 12526 06/11/20 16:30:49 60:00 196129 15494ruftgenpho no 3587080982063727 310410214827503 APPLE 12527 06/11/20 17:08:33 29:08 3424 1340 ins 3587080982063727 310410214827503 APPLE 12528 06/11/20 17:30:49 60:00 240325 293154ruftgenpho no 3587080982063727 310410214827503 APPLE 12529 06/11/20 17:37:41 60:00 5240 2680 ins 3587080982063727 310410214827503 APPLE HOD= !PHONES !PROMS !PROMS IPRONZ8 !PROMS !PROMS !PHONES IPRONE8 IPRONE8 !PHONES !PHONES !PRONGS !PHONES IPRONE8 IPRONE8 IPRONE8 IPRONE8 !PHONES !PHONES !PRONGS !PHONES IPRONE8 IPRONE8 !PHONES !PHONES !PHONES !PHONES IPRONE8 !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 507 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003151 NsTroliAL not for general distribution. EF-EAJVII7227 EFTA01251751 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. 41111, c•`-'ss,, „,# AT&T Run Data: Run Time: Data Usage For: Item Conn. Data 06/17/2020 Conn. Originating LT Time Number (OTC) Bytes Up Byte. Apn Dn IND I INSI 12530 06/11/20 17:37:41 60:00 29252 2768 ins 3587080982063727 310410214827503 12531 06/11/20 18:30:49 42:56 89878 1231264nxtganpho no 3587080982063727 310410214827503 12532 06/11/20 18:37:41 36:04 8051 6072 ins 3587080982063727 310410214827503 12533 06/11/20 18:37:41 36:04 8051 6072 ins 3587080982063727 310410214827503 12534 06/11/20 19:13:45 0:26 108 0 ins 3587080982063727 310410214827503 12535 06/11/20 19:13:45 0:26 108 0 imp 3587080982063727 310410214827503 12536 06/11/20 19:13:45 0:26 5235 4253 nxtgenpho no 3587080982063727 310410214827503 12537 06/11/20 19:14:11 18:47 0 0 imp 3587080982063727 310410214827503 12538 06/11/20 19:14:11 18:47 0 0 imp 3587080982063727 310410214827503 12539 06/11/20 19:14:11 18:47 3483 7942 nxtgenpho no 3587080982063727 310410214827503 12540 06/11/20 19:32:58 7:25 14721 23899ruftganpho no 3587080982063727 310410214827503 12541 06/11/20 19:33:01 6:18 8813 6157 ins 3587080982063727 310410214827503 12542 06/11/20 19:39:19 0:30 3424 1324 imp 3587080982063727 310410214827503 12543 06/11/20 19:39:49 0:34 2644 1324 ins 3587080982063727 310410214827503 12544 06/11/20 19:40:22 0:59 7221 7262 nxtgenpho no 3587080982063727 310410214827503 12545 06/11/20 19:40:23 0:58 6472 7381 ins 3587080982063727 310410214827503 12546 06/11/20 19:40:23 0:59 7262 6933 nxtgenpho no 3587080982063727 310410214827503 12547 06/11/20 19:40:24 0:58 7381 6120 imp 3587080982063727 310410214827503 12548 06/11/20 19:41:22 60:00 10384 23896ruftganpho no 3587080982063727 310410214827503 12549 06/11/20 19:41:24 1:07 6673 5982 ins 3587080982063727 310410214827503 12550 06/11/20 19:42:31 60:00 12120 4484 imp 3587080982063727 310410214827503 12551 06/11/20 20:41:22 60:00 1676 6285 nxtgenpho no 3587080982063727 310410214827503 12552 06/11/20 20:42:31 60:00 8604 3052 imp 3587080982063727 310410214827503 12553 06/11/20 21:41:22 11:14 0 0 nxtgenpho no 3587080982063727 310410214827503 12554 06/11/20 21:42:31 60:00 10252 3284 imp 3587080982063727 310410214827503 12555 06/11/20 21:52:35 8:42 5161 6314 nxtgenpho no 3587080982063727 310410214827503 12556 06/11/20 21:52:36 8:42 6314 4777ruftganpho no 3587080982063727 310410214827503 MARL NICOLL APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 508 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003152 NTnilikk not for general distribution. EFTA 00117228 EFTA01251752 MOBILITY The information contained hereCteNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in tr'`saos AT&T Run Data: Run Time: Data Usage For: 06/17/2020 1S:47:09 Item Conn. Conn. Data Time (UTC) Originating ET Bytes Byte. Apn INZI IMSI MARL MODEL Number DP Dn 12557 06/11/20 22:01:18 4:07 280 581 nxtgonpho no 3587080982063727 310410214827503 12558 06/11/20 22:05:24 7:07 5065 6314 nxtgonpho no 3587080982063727 310410214827503 12559 06/11/20 22:05:25 7:07 6314 4777 nxtgonpho no 3587080982063727 310410214827503 12560 06/11/20 22:12:32 60:00 16116 15319 nxtgonpho no 3587080982063727 310410214827503 12561 06/11/20 22:42:31 42:11 15099 8175 ims 3587080982063727 310410214827503 12562 06/11/20 23:12:32 20:12 0 Oruftgonpho no 3587080982063727 310410214827503 12563 06/11/20 23:28:10 10:00 8530 6336 ims 3587080982063727 310410214827503 12564 06/11/20 23:38:09 60:00 86182 67593 nxtgonpho no 3587080982063727 310410214827503 12565 06/11/20 23:38:10 0:02 0 0 ims 3587080982063727 310410214827503 12566 06/11/20 23:38:10 0:02 0 0 ims 3587080982063727 310410214827503 12567 06/11/20 23:38:18 60:00 70734 44647 ims -1 310410214827503 12568 06/11/20 23:57:41 0:10 1431 23774 ims -1 310410214827503 12569 06/12/20 00:35:14 0:43 5016 17038 I. -1 310410214827503 12570 06/12/20 00:36:09 0:33 6174 18269 ims -1 310410214827503 12571 06/12/20 00:38:09 60:00 4533 1101 nxtgonpho no 3587080982063727 310410214827503 12572 06/12/20 00:38:18 60:00 10252 3624 ims -1 310410214827503 12573 06/12/20 01:38:09 60:00 99995 29061 nxtgonpho no 3587080982063727 310410214827503 12574 06/12/20 01:38:18 60:00 8836 3284 ims -1 310410214827503 12575 06/12/20 02:38:09 47:00 5160 1217 nxtgonpho no 3587080982063727 310410214827503 12576 06/12/20 02:38:18 60:00 10272 4036 ims -1 310410214827503 12577 06/12/20 03:25:09 60:00 7539 6634 nxtgonpho no 3587080982063727 310410214827503 12578 06/12/20 03:38:18 60:00 10252 3284 ims -1 310410214827503 12579 06/12/20 04:25:09 60:00 578 630 nxtgonpho no 3587080982063727 310410214827503 12580 06/12/20 04:38:18 60:00 15108 4924 ims -1 310410214827503 12581 06/12/20 05:25:09 60:00 225 210 nxtgonpho no 3587080982063727 310410214827503 12582 06/12/20 05:38:18 60:00 8604 3052 ims -1 310410214827503 12583 06/12/20 06:25:09 60:00 514 525 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES APPLE !PRONGS APPLE !PHONES APPLE !PHONES APPLE IPH01428 APPLE IPH01428 APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 509 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003153 NaTileikE not for general distribution. EFTA 00117229 EFTA01251753 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 4110, i..... %. "'einm‘S ,00 AT&T Run Data: Run Time: Data Usage Tor: Item Conn. Data 06/17/2020 Conn. originating ET Time Number (UTC) Bytes Up Byte. Apn Dn IKEI INSI 12584 06/12/20 06:38:18 60:00 13476 4424 imo -1 310410214827503 12585 06/12/20 07:25:09 60:00 692 997 nxtgonpho no 3587080982063727 310410214827503 12586 06/12/20 07:38:18 60:00 7064 2788 imo -1 310410214827503 12587 06/12/20 08:25:09 60:00 289 315 nxtgonpho no 3587080982063727 310410214827503 12588 06/12/20 08:38:18 60:00 10036 3176 imo -1 310410214827503 12589 06/12/20 09:25:09 60:00 225 210ruagonpho no 3587080982063727 310410214827503 12590 06/12/20 09:38:18 60:00 11812 4536 imp -1 310410214827503 12591 06/12/20 10:25:09 60:00 341 419ruagonpho no 3587080982063727 310410214827503 12592 06/12/20 10:38:18 60:00 14892 4656 imp -1 310410214827503 12593 06/12/20 11:25:09 60:00 3042 262ruagonpho no 3587080982063727 310410214827503 12594 06/12/20 11:38:18 60:00 7172 2788 imp -1 310410214827503 12595 06/12/20 12:25:09 60:00 1340 2849 nxtgonpho no 3587080982063727 310410214827503 12596 06/12/20 12:38:18 60:00 8496 2928 imp -1 310410214827503 12597 06/12/20 13:25:09 60:00 12800 15836ruagonpho no 3587080982063727 310410214827503 12598 06/12/20 13:38:18 60:00 22736 11832 imp -1 310410214827503 12599 06/12/20 13:40:43 0:52 84685 100813 imp -1 310410214827503 12600 06/12/20 13:41:48 0:02 0 0 imp -1 310410214827503 12601 06/12/20 14:25:09 60:00 115408 81206ruftgonpho no 3587080982063727 310410214827503 12602 06/12/20 14:38:18 4:52 4964 1696 imp 3587080982063727 310410214827503 12603 06/12/20 14:43:10 1:54 18932 1340 imp 3587080982063727 310410214827503 12604 06/12/20 14:43:10 1:54 2704 1340 imp 3587080982063727 310410214827503 12605 06/12/20 14:45:04 4:28 3424 1340 imp 3587080982063727 310410214827503 12606 06/12/20 14:49:32 1:32 4092 2356 imp 3587080982063727 310410214827503 12607 06/12/20 14:49:32 1:32 4028 2356 imp 3587080982063727 310410214827503 12608 06/12/20 14:51:04 60:00 22640 7008 imp 3587080982063727 310410214827503 12609 06/12/20 15:25:09 8:48 304 232ruftgonpho no 3587080982063727 310410214827503 12610 06/12/20 15:33:57 60:00 6756 5122ruftgonpho no 3587080982063727 310410214827503 12611 06/12/20 15:51:04 60:00 81148 44160 imp 3587080982063727 310410214827503 MARL MODEL APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 510 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNCGM00003154 PsiTifikE not for general distribution. EFTA 00/17230 EFTA01251754 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in 41011, ...,,,,sf `•—s" -"e AT&T Run Data: Run Time: Data Osage For: 06/17/2020 NM= Item corm. Date Conn. Originating ET Timo Number (UPC) Bytes Up 12612 06/12/20 16:33:57 60:00 109675 12613 06/12/20 16:43:35 0:22 0 12614 06/12/20 16:44:44 0:05 0 12615 06/12/20 16:46:27 0:39 9591 12616 06/12/20 16:47:08 0:01 0 12617 06/12/20 16:47:21 0:40 7107 12618 06/12/20 16:48:08 0:19 0 12619 06/12/20 16:49:38 0:57 83844 12620 06/12/20 16:51:04 21:41 3532 12621 06/12/20 17:12:45 0:50 69840 12622 06/12/20 17:12:45 0:50 4244 12623 06/12/20 17:13:35 60:00 10380 12624 06/12/20 17:33:57 60:00 763 12625 06/12/20 18:13:35 60:00 7280 12626 06/12/20 18:33:57 60:00 346 12627 06/12/20 19:13:35 60:00 11364 12628 06/12/20 19:33:57 60:00 462 12629 06/12/20 20:13:35 33:36 10596 12630 06/12/20 20:33:57 60:00 5265859 12631 06/12/20 20:47:11 0:58 7673 12632 06/12/20 20:47:11 0:58 6753 12633 06/12/20 20:48:09 0:20 3424 12634 06/12/20 20:48:29 14:58 69600 12635 06/12/20 20:48:29 14:58 3904 12636 06/12/20 21:03:27 1:32 3424 12637 06/12/20 21:04:58 16:51 90124 12638 06/12/20 21:04:59 16:50 3328 12639 06/12/20 21:21:49 60:00 12028 12640 06/12/20 21:33:57 60:00 3797 12641 06/12/20 22:21:49 60:00 8728 12642 06/12/20 22:33:57 60:00 41210 Byte. Apn INEI IMS1 MAL MODEL Dn 86611 nxtgenpho 3587080982063727 310410214827503 APPLE !PHONES no 44448 imo 3587080982063727 310410214827503 APPLE !PRONGS 2786 imp 3587080982063727 310410214827503 APPLE !PHONES 15521 imp 3587080982063727 310410214827503 APPLE DRONES 0 imp 3587080982063727 310410214827503 APPLE DRONES 21103 imp 3587080982063727 310410214827503 APPLE DRONES 312 imp 3587080982063727 310410214827503 APPLE DRONES 70722 imp 3587080982063727 310410214827503 APPLE DRONES 1340 imp 3587080982063727 310410214827503 APPLE DRONES 1588 imp 3587080982063727 310410214827503 APPLE DRONES 1588 imp 3587080982063727 310410214827503 APPLE DRONES 4128 imp 3587080982063727 310410214827503 APPLE DRONES 735ruagenpho 3587080982063727 310410214827503 APPLE DRONES no 2928 imp 3587080982063727 310410214827503 APPLE DRONES 210ruagenpho 3587080982063727 310410214827503 APPLE DRONES no 3424 imp 3587080982063727 310410214827503 APPLE !PHONES 420ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 4536 imp 3587080982063727 310410214827503 APPLE !PHONES 5141147ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 6480 imp 3587080982063727 310410214827503 APPLE !PHONES 6480 imp 3587080982063727 310410214827503 APPLE DRONES 1340 imp 3587080982063727 310410214827503 APPLE DRONES 1448 imp 3587080982063727 310410214827503 APPLE DRONES 1448 imp 3587080982063727 310410214827503 APPLE DRONES 1448 imp 3587080982063727 310410214827503 APPLE DRONES 1464 imp 3587080982063727 310410214827503 APPLE DRONES 1464 imp 3587080982063727 310410214827503 APPLE DRONES 4392 imp 3587080982063727 310410214827503 APPLE DRONES 4371ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no 3052 imp 3587080982063727 310410214827503 APPLE !PHONES 25146ruagenpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 511 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003155 NTifikE not for general distribution. EFTA 00117231 EFTA01251755 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 411111i tt‘a°galt ed AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 iiiiiIIIII Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn INLI INSI MARL MODEL 12643 06/12/20 23:21:49 60:00 12044 4392 imp 3587080982063727 310410214827503 APPLE IPHONES 12644 06/12/20 23:33:57 60:00 571 420 nxtgenpho no 3587080982063727 310410214827503 APPLE IPHONES 12645 06/13/20 00:21:49 60:00 10036 3176 ins 3587080982063727 310410214827503 APPLE 1PHONES 12646 06/13/20 00:33:57 60:00 4302 4942ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12647 06/13/20 01:21:49 60:00 10952 4876 ins 3587080982063727 310410214827503 APPLE 1PHONES 12648 06/13/20 01:33:57 60:00 3240 5960ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12649 06/13/20 02:21:49 60:00 8496 3160 ins 3587080982063727 310410214827503 APPLE 1PHONES 12650 06/13/20 02:33:57 60:00 623 525ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12651 06/13/20 03:21:49 60:00 14424 4532 ins 3587080982063727 310410214827503 APPLE 1PHONES 12652 06/13/20 03:33:57 60:00 346 210ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12653 06/13/20 04:21:49 60:00 8604 3036 ins 3587080982063727 310410214827503 APPLE 1PHONES 12654 06/13/20 04:33:57 48:11 346 210ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12655 06/13/20 05:21:49 60:00 7188 2912 ins 3587080982063727 310410214827503 APPLE 1PHONES 12656 06/13/20 05:22:07 1:36 5064 6298ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12657 06/13/20 05:22:08 1:36 6298 4776ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12658 06/13/20 05:23:44 60:00 18806 19522ruagenpho no 3587080982063727 310410214827503 APPLE !PHONES 12659 06/13/20 06:21:49 60:00 7064 2804 ins 3587080982063727 310410214827503 APPLE !PHONES 12660 06/13/20 06:23:44 60:00 3733 944ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12661 06/13/20 07:21:49 60:00 14160 5768 ins 3587080982063727 310410214827503 APPLE 1PHONES 12662 06/13/20 07:23:44 60:00 398 315ruftgenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12663 06/13/20 08:21:49 60:00 8388 2928 ins 3587080982063727 310410214827503 APPLE 1PHONES 12664 06/13/20 08:23:44 60:00 277 315ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12665 06/13/20 09:21:49 60:00 8388 2928 ins 3587080982063727 310410214827503 APPLE 1PHONES 12666 06/13/20 09:23:44 60:00 734 1106ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES 12667 06/13/20 10:21:49 60:00 14892 4780 ins 3587080982063727 310410214827503 APPLE 1PHONES 12668 06/13/20 10:23:44 60:00 277 315ruagenpho no 3587080982063727 310410214827503 APPLE 1PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 512 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003156 not for general distribution. EFTA 00117232 EFTA01251756 MOBILITY The information contained hereCtoNelt 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records are stored and provided in AT&T Run pato: Run Time: Data Osage for: 06/17/2020 10:57:09 Item Conn. Conn. Date Time (OTC) originating Number ET Bytes Byte. Apn Up Dn 12669 06/13/20 11:21:49 60:00 8944 12670 06/13/20 11:23:44 60:00 225 12671 06/13/20 12:21:49 60:00 12028 12672 06/13/20 12:23:44 60:00 277 12673 06/13/20 13:21:49 3:46 0 12674 06/13/20 13:23:44 60:00 10720 12675 06/13/20 13:26:11 0:58 6687 12676 06/13/20 13:27:09 60:00 12368 12677 06/13/20 14:23:44 60:00 7873 12678 06/13/20 14:27:09 60:00 6848 12679 06/13/20 15:23:44 60:00 538 12680 06/13/20 15:27:09 60:00 8604 12681 06/13/20 16:23:44 60:00 3528 12682 06/13/20 16:27:09 60:00 8496 12683 06/13/20 17:23:44 60:00 329 12684 06/13/20 17:27:09 60:00 7048 12685 06/13/20 18:23:44 60:00 173 12686 06/13/20 18:27:09 60:00 17100 12687 06/13/20 19:23:44 60:00 5114 12688 06/13/20 19:27:09 60:00 8480 12689 06/13/20 20:23:44 60:00 173 12690 06/13/20 20:27:09 60:00 8496 12691 06/13/20 21:23:44 60:00 4941 12692 06/13/20 21:27:09 60:00 13568 12693 06/13/20 22:23:44 60:00 1316 12694 06/13/20 22:27:09 60:00 7188 12695 06/13/20 23:23:44 60:00 217948 INSI MARL MODEL 3036 ims 3587080982063727 310410214827503 APPLE IPHONZ8 210 nxtgonpho 3587080982063727 310410214827503 APPLE 110HONZ8 no 4660 ins 3587080982063727 310410214827503 APPLE INIONE8 262ruagonpho 3587080982063727 310410214827503 APPLE INIONE8 no 0 ins 3587080982063727 310410214827503 APPLE INIONE8 21297ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 5962 ins 3587080982063727 310410214827503 APPLE INIONE8 4560 ins 3587080982063727 310410214827503 APPLE INIONE8 3970ruagonpho 3587080982063727 310410214827503 APPLE INIONE8 no 2756 ins 3587080982063727 310410214827503 APPLE INIONE8 4628ruagonpho 3587080982063727 310410214827503 APPLE INIONE8 no 3004 ins 3587080982063727 310410214827503 APPLE !PHONES 4497ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 2896 ins 3587080982063727 310410214827503 APPLE !PHONES 367 nxtgonpho 3587080982063727 310410214827503 APPLE !PHONES no 2648 ins 3587080982063727 310410214827503 APPLE INIONE8 105ruagonpho 3587080982063727 310410214827503 APPLE INIONE8 no 6292 ins 3587080982063727 310410214827503 APPLE INIONE8 7043ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 2896 ins 3587080982063727 310410214827503 APPLE !PHONES 105ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 2896 ins 3587080982063727 310410214827503 APPLE !PHONES 4307ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 4792 ins 3587080982063727 310410214827503 APPLE !PHONES 4573ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no 2880 ins 3587080982063727 310410214827503 APPLE !PHONES 136037ruagonpho 3587080982063727 310410214827503 APPLE !PHONES no AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 513 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003157 NsTroliAL not for general distribution. EFTA 00117233 EFTA01251757 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in OTC. 411111, AT&T Run Data: Run Time: Data Osage For: Item Conn. Date 06/17/2020 10:57:09 Conn. Originating ET Time Number (OTC) Bytes Up Byte. Apn Dn IND I INSI MARL 12696 06/13/20 23:27:09 60:00 10456 4256 imp 3587080982063727 310410214827503 APPLE 12697 06/14/20 00:23:44 60:00 173 105nxtgonpho no 3587080982063727 310410214827503 APPLE 12698 06/14/20 00:27:09 60:00 6848 2648 imp 3587080982063727 310410214827503 APPLE 12699 06/14/20 01:23:44 60:00 173 105nxtgonpho no 3587080982063727 310410214827503 APPLE 12700 06/14/20 01:27:09 60:00 14876 4608 imp 3587080982063727 310410214827503 APPLE 12701 06/14/20 02:23:44 60:00 536 297ruftgonpho no 3587080982063727 310410214827503 APPLE 12702 06/14/20 02:27:09 60:00 9788 3128 imp 3587080982063727 310410214827503 APPLE 12703 06/14/20 03:23:44 60:00 173 157ruftgonpho no 3587080982063727 310410214827503 APPLE 12704 06/14/20 03:27:09 60:00 10036 3144 imp 3587080982063727 310410214827503 APPLE 12705 06/14/20 04:23:44 60:00 346 210ruftgonpho no 3587080982063727 310410214827503 APPLE 12706 06/14/20 04:27:09 60:00 13676 4768 imp 3587080982063727 310410214827503 APPLE 12707 06/14/20 05:23:44 60:00 173 105ruftgonpho no 3587080982063727 310410214827503 APPLE 12708 06/14/20 05:27:09 60:00 13444 4576 imp 3587080982063727 310410214827503 APPLE 12709 06/14/20 06:23:44 60:00 173 105ruftgonpho no 3587080982063727 310410214827503 APPLE 12710 06/14/20 06:27:09 60:00 8372 2896 imp 3587080982063727 310410214827503 APPLE 12711 06/14/20 07:23:44 60:00 173 105ruftgonpho no 3587080982063727 310410214827503 APPLE 12712 06/14/20 07:27:09 60:00 8512 3772 imp 3587080982063727 310410214827503 APPLE 12713 06/14/20 08:23:44 60:00 4732 3765 nxtgonpho no 3587080982063727 310410214827503 APPLE 12714 06/14/20 08:27:09 60:00 10020 3252 imp 3587080982063727 310410214827503 APPLE 12715 06/14/20 09:23:44 60:00 173 105ruftgonpho no 3587080982063727 310410214827503 APPLE 12716 06/14/20 09:27:09 60:00 13536 4860 imp 3587080982063727 310410214827503 APPLE 12717 06/14/20 10:23:44 60:00 173 105ruftgonpho no 3587080982063727 310410214827503 APPLE 12718 06/14/20 10:27:09 60:00 12012 4220 imp 3587080982063727 310410214827503 APPLE 12719 06/14/20 11:23:44 60:00 9404 1691 nxtgonpho no 3587080982063727 310410214827503 APPLE 12720 06/14/20 11:27:09 60:00 8480 2896 imp 3587080982063727 310410214827503 APPLE 12721 06/14/20 12:23:44 60:00 538 4260ruftgonpho no 3587080982063727 310410214827503 APPLE 12722 06/14/20 12:27:09 60:00 8372 2896 imp 3587080982063727 310410214827503 APPLE MODEL !PROMS !PROMS !PHONES !PHONES IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 !PHONES !PHONES IPROME8 IPROME8 IPROME8 IPROME8 IPROME8 'PHONES !PHONES !PHONES IPROME8 IPROME8 IPROME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 514 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003158 NTifikE not for general distribution. EFTA 00117234 EFTA01251758 MOBILITY The information contained heraleoNftli 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 AT&T has queried for records using Eastern OTC. 12:00:00am to 06/15/2020 11:59:59pm Time Zone. AT&T's records ere stored and provided in tr'`s aos AT&T Run Dato: Run Timo: Data Usage for: 06/17/2020 Item Conn. Conn. Originating ET Bytes Byte. Apn INCI IMBI MARE MODEL Date Time Number Up Dn (UTC) 12723 06/14/20 13:23:44 60:00 173 105 nxtgonpho no 3587080982063727 310410214827503 12724 06/14/20 13:27:09 60:00 8388 2896 ims 3587080982063727 310410214827503 12725 06/14/20 14:23:44 60:00 173 105ruagonpho no 3587080982063727 310410214827503 12726 06/14/20 14:27:09 60:00 18516 6324 ims 3587080982063727 310410214827503 12727 06/14/20 15:23:44 60:00 1145 5273 nxtgonpho no 3587080982063727 310410214827503 12728 06/14/20 15:27:09 60:00 10128 3268 ims 3587080982063727 310410214827503 12729 06/14/20 16:23:44 60:00 434 1516 nxtgonpho no 3587080982063727 310410214827503 12730 06/14/20 16:27:09 60:00 9928 3144 ims 3587080982063727 310410214827503 12731 06/14/20 17:23:44 60:00 830 530ruftgonpho no 3587080982063727 310410214827503 12732 06/14/20 17:27:09 15:49 3548 2200 ims 3587080982063727 310410214827503 12733 06/14/20 17:42:58 1:08 7480 4448 ims 3587080982063727 310410214827503 12734 06/14/20 17:44:06 60:00 13692 4592 ims 3587080982063727 310410214827503 12735 06/14/20 18:23:44 60:00 173 157 nxtgonpho no 3587080982063727 310410214827503 12736 06/14/20 18:44:06 60:00 10144 3160 ims 3587080982063727 310410214827503 12737 06/14/20 19:23:44 60:00 173 105 nxtgonpho no 3587080982063727 310410214827503 12738 06/14/20 19:44:06 60:00 8372 2896 ims 3587080982063727 310410214827503 12739 06/14/20 20:23:44 60:00 173 105ruagonpho no 3587080982063727 310410214827503 12740 06/14/20 20:44:06 60:00 13768 5108 ims 3587080982063727 310410214827503 12741 06/14/20 21:23:44 49:24 10693 835ruagonpho no 3587080982063727 310410214827503 12742 06/14/20 21:44:06 60:00 13552 4468 ims 3587080982063727 310410214827503 12743 06/14/20 22:13:08 60:00 17878 16048 nxtgonpho no 3587080982063727 310410214827503 12744 06/14/20 22:44:06 60:00 9928 3144 ims 3587080982063727 310410214827503 12745 06/14/20 23:13:08 60:00 446 700 nxtgonpho no 3587080982063727 310410214827503 12746 06/14/20 23:44:06 60:00 10036 3144 ims 3587080982063727 310410214827503 12747 06/15/20 00:13:08 60:00 173 105ruagonpho no 3587080982063727 310410214827503 12748 06/15/20 00:44:06 60:00 8604 3112 ims 3587080982063727 310410214827503 12749 06/15/20 01:13:08 60:00 14998 10416ruftgonpho no 3587080982063727 310410214827503 APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES APPLE !PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE 'PHONES APPLE !PHONES APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 515 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGML00003159 NTroliAL not for general distribution. EFTA 00117235 EFTA01251759 MOBILITY The information contained hereCtoNyFti 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00nm to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. ....,,,• ••-s`' AT&T Run Date: Run Time: Data Osage Tor: Item Conn. Date 06/17/2020 Conn. Originating ET Time Number (DSC) Bytes • UP Bytes Apn Dn INEI IMSI MARL MODEL 12750 06/15/20 01:44:06 60:00 11904 4504 Imo 3587080982063727 310410214827503 APPLE !PHONES 12751 06/15/20 02:13:08 60:00 1334 1155 nxtgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12752 06/15/20 02:44:06 60:00 13568 4468 ins 3587080982063727 310410214827503 APPLE !PHONES 12753 06/15/20 03:13:08 60:00 924 840ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12754 06/15/20 03:44:06 60:00 7172 2772 ins 3587080982063727 310410214827503 APPLE !PHONES 12755 06/15/20 04:13:08 60:00 865 525 nxtgonpho no 3587080982063727 310410214827503 APPLE !PHONES 12756 06/15/20 04:44:06 60:00 10036 3144 ins 3587080982063727 310410214827503 APPLE !PHONES 12757 06/15/20 05:13:08 60:00 635 525ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12758 06/15/20 05:44:06 60:00 6956 2648 ins 3587080982063727 310410214827503 APPLE !PHONES 12759 06/15/20 06:13:08 60:00 1292 886ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12760 06/15/20 06:44:06 60:00 15360 6076 ins 3587080982063727 310410214827503 APPLE !PHONES 12761 06/15/20 07:13:08 60:00 981 787ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12762 06/15/20 07:44:06 60:00 7388 2756 ins 3587080982063727 310410214827503 APPLE !PHONES 12763 06/15/20 08:13:08 60:00 808 630ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12764 06/15/20 08:44:06 60:00 10036 3252 ins 3587080982063727 310410214827503 APPLE !PHONES 12765 06/15/20 09:13:08 60:00 583 484ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12766 06/15/20 09:44:06 50:37 6848 2648 ins 3587080982063727 310410214827503 APPLE !PHONES 12767 06/15/20 10:13:08 60:00 635 577ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12768 06/15/20 10:34:43 0:02 0 0 ins 3587080982063727 310410214827503 APPLE !PHONES 12769 06/15/20 10:34:43 0:02 0 0 ins 3587080982063727 310410214827503 APPLE !PHONES 12770 06/15/20 10:34:51 56:51 16081 7902 ins 3587080982063727 310410214827503 APPLE !PHONES 12771 06/15/20 11:13:08 44:54 23897 84578ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12772 06/15/20 11:31:42 4:48 7052 2556 ins 3587080982063727 310410214827503 APPLE !PHONES 12773 06/15/20 11:31:42 4:48 6988 2556 ins 3587080982063727 310410214827503 APPLE !PHONES 12774 06/15/20 11:36:30 60:00 13568 4732 ins 3587080982063727 310410214827503 APPLE !PHONES 12775 06/15/20 11:58:01 2:03 288 48ruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES 12776 06/15/20 11:58:02 2:03 48 Oruftgenpho no 3587080982063727 310410214827503 APPLE !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 516 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM 00003160 not for general distribution. EFTA 00117236 EFTA01251760 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T's records are stored and provided in arc. 411., .....,„• ••-s" -". AT&T Run Date: Run Time: Data Osage For: Item Conn. Date 06/17/2020 16:57:09 Conn. Originating ET Time Number (OTC) Byta• Up Bytom Apn On INTI INSI MAKE 12777 06/15/20 12:00:05 20:25 6294 4744 nxtgonpho no 3587080982063727 310410214827503 APPLE 12778 06/15/20 12:20:30 60:00 10495 5873 nxtgonpho no 3587080982063727 310410214827503 APPLE 12779 06/15/20 12:36:30 60:00 8620 3052 imo 3587080982063727 310410214827503 APPLE 12780 06/15/20 13:20:30 60:00 5167 12292 nxtgonpho no 3587080982063727 310410214827503 APPLE 12781 06/15/20 13:36:30 53:44 10036 3284 imo 3587080982063727 310410214827503 APPLE 12782 06/15/20 14:20:30 8:02 486 4491 nxtgonpho no 3587080982063727 310410214827503 APPLE 12783 06/15/20 14:28:31 2:07 23299 6302 nxtgonpho no 3587080982063727 310410214827503 APPLE 12784 06/15/20 14:28:32 2:08 6302 23011 nxtgonpho no 3587080982063727 310410214827503 APPLE 12785 06/15/20 14:29:56 0:21 6316 6669 imo 3587080982063727 310410214827503 APPLE 12786 06/15/20 14:29:57 0:21 6669 5964 imo 3587080982063727 310410214827503 APPLE 12787 06/15/20 14:30:14 0:04 2566 1212 imp -1 310410214827503 12788 06/15/20 14:30:17 0:21 6360 6677 imp 3587080982063727 310410214827503 APPLE 12789 06/15/20 14:30:18 0:22 6677 6096 ims 3587080982063727 310410214827503 APPLE 12790 06/15/20 14:30:40 30:01 82656 65503 nxtgonpho no 3587080982063727 310410214827503 APPLE 12791 06/15/20 14:30:41 10:16 6673 5924 ins 3587080982063727 310410214827503 APPLE 12792 06/15/20 14:40:57 2:07 3532 1340 ins 3587080982063727 310410214827503 APPLE 12793 06/15/20 14:43:04 0:34 3376 1464 ins 3587080982063727 310410214827503 APPLE 12794 06/15/20 14:43:38 31:25 10036 3176 ins 3587080982063727 310410214827503 APPLE 12795 06/15/20 15:00:41 40:12 253101 604319 nxtgonpho no 3587080982063727 310410214827503 APPLE 12796 06/15/20 15:15:04 25:49 6673 5964 imo 3587080982063727 310410214827503 APPLE 12797 06/15/20 15:40:52 7:05 139044 35440 nxtgonpho no 3587080982063727 310410214827503 APPLE 12798 06/15/20 15:40:53 7:05 35440 143679 nxtgonpho no 3587080982063727 310410214827503 APPLE 12799 06/15/20 15:40:54 7:03 6227 6781 imo 3587080982063727 310410214827503 APPLE 12800 06/15/20 15:40:55 7:03 6673 5963 ins 3587080982063727 310410214827503 APPLE 12801 06/15/20 15:47:58 21:01 52525 117594 nxtgonpho no 3587080982063727 310410214827503 APPLE 12802 06/15/20 15:48:01 20:58 6675 5980 ins 3587080982063727 310410214827503 APPLE 12803 06/15/20 16:08:59 22:22 137050 148078 nxtgonpho no 3587080982063727 310410214827503 APPLE NODEL 1PHONE8 1PHONE8 1PHONE8 1PHONE8 1PHONE8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 !PHONES !PHONES !PHONES IPHOME8 IPHOME8 IPHOME8 IPHOME8 IPHOME8 AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNY_GM_00003161 NTroliAL not for general distribution. Page 517 EFTA 00117237 EFTA01251761 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Zone. AT&T'S records are stored and provided in OTC. ...,00 14/‘"Ii. '11. AT&T Run Date: Run Time: Data Osage for: Item Conn. Date 06/17/2020 10:57:09 Conn. originating ET Time Number (OTC) Bytes Up Bytes Apn Dn INZI INSI MARL 12804 06/15/20 16:09:05 0:00 0 0 ins 3587080982063727 310410214827503 APPLE 12805 06/15/20 16:09:13 12:38 7085 5956 ins 3587080982063727 310410214827503 APPLE 12806 06/15/20 16:21:51 0:52 5536 1696 ins 3587080982063727 310410214827503 APPLE 12807 06/15/20 16:22:43 2:41 3376 1464 ins 3587080982063727 310410214827503 APPLE 12808 06/15/20 16:25:24 60:00 20268 9392 ins 3587080982063727 310410214827503 APPLE 12809 06/15/20 16:31:20 1:51 5169 6230 nxtgonpho no 3587080982063727 310410214827503 APPLE 12810 06/15/20 16:31:21 1:51 6230 4881ruftgonpho no 3587080982063727 310410214827503 APPLE 12811 06/15/20 16:33:12 60:00 7950 6460ruagonpho no 3587080982063727 310410214827503 APPLE 12812 06/15/20 17:25:24 60:00 8496 2928 was 3587080982063727 310410214827503 APPLE 12813 06/15/20 17:33:12 60:00 11387 1675 nxtgonpho no 3587080982063727 310410214827503 APPLE 12814 06/15/20 18:25:24 39:31 3424 1340 was 3587080982063727 310410214827503 APPLE 12815 06/15/20 18:33:12 60:00 76302 177440 nxtgonpho no 3587080982063727 310410214827503 APPLE 12816 06/15/20 19:04:54 45:11 11099 8572 ins 3587080982063727 310410214827503 APPLE 12817 06/15/20 19:04:55 45:10 11099 8484 ins 3587080982063727 310410214827503 APPLE 12818 06/15/20 19:33:12 60:00 63045 307869 nxtgonpho no 3587080982063727 310410214827503 APPLE 12819 06/15/20 19:50:05 3:08 3640 1432 ins 3587080982063727 310410214827503 APPLE 12820 06/15/20 19:53:13 2:51 2644 1428 ins 3587080982063727 310410214827503 APPLE 12821 06/15/20 19:53:13 2:51 2644 1340 ins 3587080982063727 310410214827503 APPLE 12822 06/15/20 19:56:04 60:00 10272 4004 ins 3587080982063727 310410214827503 APPLE 12823 06/15/20 20:33:12 28:26 31735 20682ruagonpho no 3587080982063727 310410214827503 APPLE 12824 06/15/20 20:56:04 60:00 10036 3300 ins 3587080982063727 310410214827503 APPLE 12825 06/15/20 21:01:38 2:03 5060 6228ruagonpho no 3587080982063727 310410214827503 APPLE 12826 06/15/20 21:01:39 2:03 6228 4772ruagonpho no 3587080982063727 310410214827503 APPLE 12827 06/15/20 21:03:42 60:00 16986 13506ruagonpho no 3587080982063727 310410214827503 APPLE 12828 06/15/20 21:56:04 60:00 8620 3160 ins 3587080982063727 310410214827503 APPLE 12829 06/15/20 22:03:42 60:00 50958 11825ruagonpho no 3587080982063727 310410214827503 APPLE 12830 06/15/20 22:56:04 60:00 6956 2896 ins 3587080982063727 310410214827503 APPLE NICOLL !PHONES !PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES 'PHONES 'PHONES !PHONES !PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES 'PHONES !PHONES !PHONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 518 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003162 NeTifikE not for general distribution. EFTA 00117238 EFTA01251762 MOBILITY The information contained her is 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried Ler records using Eastern Time Zone. AT&T's records ere stored and provided in UTC. 41111, AT&T Run Date: Run Time: Data Usage Tor: Item Conn. Date 06/17/2020 1S:57:09 Conn. Time (UTC) Originating Number ET Bytes Up Bytes( Apn Dn INEI IM3I ten 12831 06/15/20 23:03:42 8:50 0 0 nxtgonpho no 3587080982063727 310410214827503 APPLE 12832 06/15/20 23:12:31 2:38 5065 6282 nxtgonpho no 3587080982063727 310410214827503 APPLE 12833 06/15/20 23:12:32 2:39 6282 4777 nxtgonpho no 3587080982063727 310410214827503 APPLE 12834 06/15/20 23:15:10 1:02 280 581 nxtgonpho no 3587080982063727 310410214827503 APPLE 12835 06/15/20 23:16:11 2:04 288 48ruagonpho no 3587080982063727 310410214827503 APPLE 12836 06/15/20 23:16:13 2:03 48 Ormagonpho no 3587080982063727 310410214827503 APPLE 12837 06/15/20 23:18:16 60:00 16495 14181ruftgonpho no 3587080982063727 310410214827503 APPLE 12838 06/15/20 23:56:04 60:00 17100 6124 imp 3587080982063727 310410214827503 APPLE 12839 06/16/20 00:18:16 25:51 42120 24512ruftgonpho no 3587080982063727 310410214827503 APPLE 12840 06/16/20 00:44:07 60:00 28133 1467Ormagonpho no 3587080982063727 310410214827503 APPLE 12841 06/16/20 00:56:04 60:00 7064 2680 imp 3587080982063727 310410214827503 APPLE 12842 06/16/20 01:44:07 60:00 10042 7545 nxtgonpho no 3587080982063727 310410214827503 APPLE 12843 06/16/20 01:56:04 60:00 10036 3068 imp 3587080982063727 310410214827503 APPLE 12844 06/16/20 02:44:07 60:00 3561 6127 ructgonpho no 3587080982063727 310410214827503 APPLE 12845 06/16/20 02:56:04 47:12 8604 3052 imp 3587080982063727 310410214827503 APPLE 12846 06/16/20 03:44:07 60:00 924 84Ormagonpho no 3587080982063727 310410214827503 APPLE 12847 06/16/20 03:48:35 60:00 11908 7693 imp -1 310410214827503 NOD= !PHONES !PROMS !PHONES !PHONES IPRONE8 !PHONES !PHONES !PHONES !PHONES !PHONES DRONES DRONES DRONES DRONES !PHONES !PHONES AT&T Proprietary The AT&T network constantly communicates with internet enabled devices when they are powered on. These communications will show as data usage on the customer records but do not necessarily indicate a customer initiated a transaction. Page 519 AT&T does not retain records that can definitively show whether a transaction was customer initiated or AT&T's network initiated the data transaction. SDNYGM00003163 NsTroliAL not for general distribution. EFTA 00117239 EFTA01251763 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T's records are stored and provided in arc. AT&T Run Date: Run Time: SMS Usage For: Item Conn. Date 06/17/2020 Conn. Time (OTC) Originating Number Terminating IMEI Member INS, Dose HMS Type Feature 1 03/10/20 16:52:03 310410214827503 MIST Wi-Fi 2 03/12/20 12:39:52 310410214827503 MIST Wi-Fi 3 03/12/20 12:40:46 310410214827503 SNSO Wi-Fi 4 03/12/20 12:41:34 310410214827503 MIST Wi-Fi 5 03/12/20 12:41:56 310410214827503 SNSO Wi-Fi 6 03/12/20 12:44:28 310410214827503 MIST Wi-Fi 7 03/12/20 18:15:16 310410214827503 MIST Wi-Fi 8 03/14/20 15:41:47 310410214827503 MIST Wi-Fi 9 03/14/20 20:17:27 310410214827503 MOO Wi-Fi 10 03/14/20 20:18:17 310410214827503 MOO Wi-Fi 11 03/14/20 22:40:00 310410214827503 MIST 12 03/14/20 22:40:04 310410214827503 MIST 13 03/14/20 23:58:23 310410214827503 MIST 14 03/14/20 23:59:49 310410214827503 MIST 15 03/15/20 00:01:14 310410214827503 MIST 16 03/15/20 00:02:40 310410214827503 MIST 17 03/15/20 00:05:03 310410214827503 MIST 18 03/15/20 00:07:02 3587080982063726 310410214827503 MIST 19 03/18/20 11:53:14 APPLE 'PHONES 310410214827503 MOO 20 03/25/20 18:30:28 310410214827503 MIST Wi-Fi 21 04/16/20 22:16:33 310410214827503 MIST 22 04/21/20 03:12:24 310410214827503 MIST 23 04/21/20 03:12:29 310410214827503 MIST 24 04/21/20 03:17:59 3587080982063726 310410214827503 MIST 25 04/21/20 03:19:42 APPLE 'PHONES 3587080982063726 310410214827503 MIST 26 04/21/20 03:19:42 APPLE 'PHONES 3587080982063726 310410214827503 MIST 27 05/05/20 22:15:25 APPLE 'PHONES 310410214827503 SNSO Wi-Fi 28 05/06/20 09:12:43 310410214827503 MST Wi-Fi 29 05/09/20 17:20:58 310410214827503 MST Wi-Fi 30 05/14/20 09:08:02 310410214827503 SNST Wi-Fi AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 1 SDNY_GM_00003164 EFTA 00117240 EFTA01251764 MOBILITY 2996479 06/17/2020 AT&T has queried for records from 03/01/2020 12:00:00am to 06/15/2020 11:59:59pm AT&T has queried for records using Eastern Time Tone. AT&T'S records are stored and provided in OTC. tr`'adsas AT&T Run Date: Run Time: SM3 Usage For: 06/17/2020 Item Conn. Conn. Originating Terminating 1MEI IM81 Dese HMS Type Feature Date Time Number Number (OTC) 31 05/14/20 09:08:04 310410214827503 SMST Wi-Fi 32 05/14/20 09:08:06 310410214827503 SMST Wi-Fi 33 05/15/20 06:20:40 310410214827503 SMS0 34 06/08/20 15:49:48 310410214827503 SMST Wi-Fi 35 06/15/20 17:15:46 310410214827503 SMS0 Wi-Fi 36 06/15/20 17:16:39 310410214827503 SMST Wi-Fi AT&T Proprietary The information contained here is for use by authorized persons only and is not for general distribution. CONFIDENTIAL Page 2 SDNY_GM_00003165 EFTA 00117241 EFTA01251765